How to Obtain a GDPR-Compliant Consent?

Silvia Gorlani, Data Protection Officer, Mediamarket SpA (Mediaworld), Italy

Under the General Data Protection Regulation (GDPR), consent is one of the more well-known legal bases upon which personal data can lawfully be processed. At a first glance, it seems easy to understand: If the data subject consents, consent exists. However, under GDPR, consent is much more than just someone agreeing to something. Consent can create a solid legal basis but to be binding the following specific requirements must be fulfilled:

My skills have improved on the job as in-house lawyer, up to the role of data protection officer of Mediamarket SpA (leader in Italy for consumers electronics goods), the italian subsidiary of Mediamarkt Group. For 9 years I used to be Head of Legal Affairs of Unichips Italia SpA and Head of Privacy Coordination of the homonymous Group, owner among other things of the S. Carlo brand, which produces and markets chips and snacks in Italy and abroad. During that time, I was appointed member of the Board of Director of the European Snacks Association, a Brussels-based trade association representing around 80% of the European savoury snack market.

More than 800 stores with sales floors measuring up to 8,000 square meters in 13 countries around the globe are what makes MediaMarkt Europe