It is important that the tick is already set to no: to accept, the user must click on the part of "i agree / yes" and then change from no, in this way the consent is also aware. This is to answer the specific case. After that, under the data collection form there could be: the check box for consent to treatment the check box for receiving newsletters the check special email list box for receiving commercial information and so on, one for each processing purpose. For example, if direct marketing / direct contact activities are carried out, the contact method must be specified ("i wish to be contacted via mail / sms / etc.
Always in yes / no mode and always with the prefixed tick on no), with subsequent possibility to be revoked. Gdpr 2018 consent collection it is well understood how all this obliges the company that intends to carry out an e-mail marketing activity special email list to adapt its tools and form fields to the minimum of the data it will process, or to adapt the design to privacy. A separate check must then be dedicated to the case in which it is intended to communicate the data to third parties: in this case it could be useful to have a treatment register, which must be kept separate from the data given to third parties.
Speaking of third parties, indeed intermediaries: let's say that the company gives an agency a mandate to create the site and set up the data collection form for sending newsletters via sending software (mailchimp, mail-up, etc), how do you special email list behave in these cases? For those who manage the data as an intermediary between the user and the owner, a letter from the person in charge is sufficient : this person is not the owner of the data, he cannot disclose the data but can still see them. The use of a system such as mailchimp or other of the type, on the other hand.