> innocent looking paragraph hidden in the middle of the contract

This is the source of the problem and requires legislation to fix. Starting with clickwrap.

Facebook tried to pull something similar, and it was eventually ruled illegal: https://noyb.eu/en/noyb-win-personalized-ads-facebook-instag...

it won't stand in regards to GDPR. GDPR consent has to be freely given (and taken at any time), can't use legal lingo either.

legal consent in GDPR needs to be understandable, can not be hidden in any way, and easy to remove.

The common lawyer's hack of hiding it in a big long unreadable contract won't cut it, and should lead to fines.

Everybody talks crap about the GDPR, but as someone who, while not a lawyer, has worked on technical laws and standardization, I gotta say they really did a great job on not letting any companies have an easy out.