Using consent as a basis to handle personal details under GDPR requires:

* Consent is gained granularly, prominently, and separately from other terms and conditions * Consent is opt-in and individuals can refuse to consent without detriment