A good way to achieve this is to inventory all the capture systems you use, identify the tools you use in each case and the purposes of each form, since a subscription form is not the same as a sales form or a contact form.
All platforms, applications, as well as other media, whether cloud-based or physical, in which personal data is processed must be identified.
It is the classic lead capture strategy.
We cannot carry out email marketing campaigns if we do not have the verifiable consent of each of the leads on our list.
We must also inform in each campaign the essential telegram group philippines aspects of the treatment and enable an automatic mechanism to revoke that consent.
If we also carry out segmentation, have an affiliate scheme or share data with certain tools, we must ensure that these tools also comply with the GDPR and that we are reporting their presence in our ads.
Under no circumstances may advertising content be sent by email without the user's consent, unless the user is a client and the information sent is directly related to the contract.
Imagine that you have a gym, if you run a promotion, for example: 50% off sauna, you would not need consent to send this promotion to your gym clients since you have a legal basis that justifies this processing, the legitimate interest of the recipient.
But what you can't do is what the people in the example below did:
A company sends me an advertising email about a messaging application to comply with the GDPR (what a paradox). The email does not contain any information about the person responsible for this campaign or about my rights, only the commercial information.