Consent is always required if no legal basis allows the processing of personal data. When one or the other is the case depends in particular on the purpose pursued with the data processing and the type of personal data processed. Your data protection officer will be happy to advise you here.

Due to the GDPR, different legal requirements apply to consents from 25 May 2018.

You can find a guide to creating a GDPR-compliant declaration of consent and sample texts on the website of the Data Protection and Information Security Unit under: Guide: Declarations of consent under data protection law