Consent & Notice — Decision Guide

One-page printable that turns the article into a pre-procurement checklist: the notice-vs-consent distinction (one-way duty to inform vs two-way, withdrawable permission); the four ingredients of valid GDPR consent (freely given, specific, informed, unambiguous) plus the Art. 7 conditions (provable, separate, withdrawable); the compliant first-layer sign checklist (purpose, controller identity, rights, retention, surprising detail, pointer — and positioning before the monitored zone, EDPB 3/2019