Right to withdraw consent

Where the legal basis that legitimises processing is consent, the data subject has the right to withdraw or revoke his or her consent at any time.

Withdrawal or revocation of consent does not have retroactive effect. Thus, it does not affect the lawfulness of processing based on consent before its withdrawal.  

It must be as easy to withdraw as to give consent.

In the case where a data subject withdraws the consent legitimising the processing, he or she may exercise the right to erasure with the data controller.