
Consent cannot be inferred. It cannot be implied. A badly written opt-out buried in terms and conditions is not consent.
The 1995 Data Protection Directive defines consent as:
“Any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed”