Where processing is based on consent, the
controller shall be able to demonstrate that the data subject has
consented to processing of his or her personal data.
If the subject is a child below the age of 16 years, such
processing shall be lawful only if and to the extent that consent is
given or authorised by the holder of parental responsibility over the
child. Member States may provide by law for a lower age for those purposes provided that...Log in to see the rest ...
Exclusion
Processing shall be lawful only if and to the extent that at least one of the following applies:
the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject pri...Log in to see the rest ...
Authority
National Commission for Information Technology and Civil Liberties