Under the GDPR, the controller must demonstrate that the data subject has consented to the processing of their personal data, and the consent must be freely giv...