How would a company decide that something should be “legitimate interest” vs “consent”?
EDIT: Definition of “Legitimate Interest”, when hovering over the question mark.
How does legitimate interest work?
Some vendors are not asking for your consent, but are using your personal data on the basis of their legitimate interest.
Yes
Declining needs to be as easy as accepting. So if one button is bigger or is easier to spot (like a different colour or font) then it isn’t compliant with GDPR.