The consent provided in item I of Art. 7 of this Law shall be given in writing or by other means able to demonstrate the manifestation of the will of the data subject.
§1 If consent is given in writing, it should be included in a clause that stands out from the other contractual clauses.
§2 The burden of proof to demonstrate that the consent was dully obtained in compliance with the provisions of this Law is on the controller.
§3 It is prohibited to process personal data if the consent is defective.
§4 Consent shall refer to particular purposes, and generic authorizations for processing personal data shall be considered void.
§5 Consent may be revoked at any time, by express request of the data subject, through a facilitated and free of charge procedure, with processing carried out under previously given consent remaining valid as long as there is no request for deletion, pursuant to item VI of the lead sentence of Art. 18 of this Law.
§6 If there is a change in the information as referred to in items I, II, III or V of Art. 9 of this Law, the controller shall inform the data subject, with specific highlight of the content of the changes, in which case the data subject, in those cases where her/his consent is required, may revoke it if she/he disagrees with the change.