Right, but that consent is only valid for the controller that obtains it - unless other controllers can demonstrate that the original consent is valid for all of the data. In other words, contracts do not create consent transitivity.
♥ 5