Replying to @tobie
You don’t need opt-in for data that you legitimately need to carry out your business and isn’t sensitive.
It may seem counter-intuitive but my preference is strongly that you should almost never ask for consent/opt-in for data processing. It’s just security perms all over again.
♥ 2