In all cases, exclusive permission is required for the collection of Personal or Sensitive Data in such a way that it can be proven that the user has given such consent (Article 6 - 7).

When collecting Personal Data, specific information is required to users regarding the company's data and the reasons for using this information (Article 13).

Individuals who have previously consented to this action and whose Personal Data has been stored on the company's media have the right, at any time, to request the withdrawal of all such data, to request a copy of it and not to have it used again for any reason (Article 7 - 17 - 20).

Significant fines are imposed which, depending on the type of violation, can reach €20,000,000 or 4% of a company's total annual turnover (Article 83).

All the above rules apply to businesses inside or outside the European Union but that operate or have customers, citizens and residents of the EU (Article 3).