Article 37

Where storing of personal data, or gaining of access to personal data already stored, in the terminal equipment of a natural person is based on consent, the following shall apply:Where storing of personal data, or gaining of access to personal data already stored, in the terminal equipment of a natural person is based on consent, the consent shall only be valid if it is freely given, specific, informed and unambiguous, and takes the form of a statement or a clear affirmative action, in accordance with Article 4, point (11), and Article 7 of this Regulation, in accordance with Guidelines 05/2020 of the European Data Protection Board on consent. It must be as easy for the data subject to refuse or withdraw consent as it was to give consent, and any such refusal or withdrawal must be without detriment. The interface used to request, give, refuse or withdraw consent shall be designed, organised and used in accordance with Article 25 of Regulation (EU) 2022/2065 and must not deceive or manipulate the data subject or materially distort or impair his or her ability to make free and informed decisions.