Consent must be informed, specific, unequivocal, obtained through an affirmative act and demonstrable, nothing less.
What does this mean?
That all your forms must be adapted to the GDPR.
Furthermore, you should know that all commercial communications must have been previously requested or expressly consented to by the recipient, unless there is a prior commercial relationship or it has been obtained from sources accessible to the public.
Obtaining personal data in a way that does not guarantee the traceabil philippines cellphone number ity of a campaign or that compromises it entirely is simply an unclassifiable blunder.
You must learn to create legally valid and sanction-free subscriber lists that allow you to manage your communications in a safe, responsible manner that is committed to the rights of your users.
Find out if you are in offender mode and you could end up turning your strategy into a marketing Chernobyl
Advertising that is not preceded by knowledge and permission is destined to fail and is also illegal and punishable.
And of course:
Don't buy or collect data, it's mind-blowing, but it's still being done.
Just because data is on the Internet doesn't mean you can use it however you want.
You cannot export data from social networks, websites, or the Internet in general.

Forget about buying databases, extracting email addresses from web pages (they are not publicly accessible sources), or using data that does not comply with the condition of express consent because it is not only illegal, but I assure you again that it is also completely ineffective.
Remember that, in all information capture systems, you must incorporate a check box mechanism to collect valid consent from your users.
Rule 3: Only choose service providers that enable you to comply with the GDPR
As with any process, it is not enough for you to comply with the requirements of the GDPR if the people who work or collaborate with you do not respect the rules and principles of the General Data Protection Regulation.