Article 7

(2)If the data subject’s consent is given in the context of a written declaration or a digital interface which also concerns other matters, the request for consent shall be presented in a manner which is clearly distinguishable for each purpose and from the other matters, in an intelligible and easily accessible form, using clear and plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding.

3.The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to refuse or withdraw consent as to give consent.'

When assessing whether consent is freely given and personal data is processed fairly, utmost account shall be taken of whether, inter alia:

(a)the controller has presented all options in a neutral and fair way without highlighting or otherwise prioritizing the option to consent;

(b)the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract, is given or refused; or

(c)the controller has employed designs, choice options, biased texts or other tactics with the aim of achieving consent, when this deviates from the genuine wishes of data subjects.'