Consent, legitimate interest and purpose limitation

Your data, your rules: Your consent is becoming more important

Exercise your right: Withdrawing your consent is possible at any time!
In order for your data to be processed lawfully, your consent is often necessary. If you wish to withdraw your consent, a written request to the company using your data is sufficient.

Below, you’ll find a sample letter as a PDF download or as a text to copy and paste into an e-mail. You’ll still have to add your address and the company’s address. If available, you can also add your customer or billing number. Please send the letter directly to the company in the end.

Important: Your request must be handled at no cost to you. Companies can only charge you in cases of unfounded or excessive, repetitive requests. If companies require a copy of a proof of identification, you can redact any information that’s not necessary for your request.

Download the sample letter:

Right to withdraw consent pursuant to Article 7(3) GDPR

To whom it may concern:

Pursuant to Article 7(3) of the General Data Protection Regulation (GDPR) I hereby immediately withdraw my consent to the processing of the following personal data:

Please confirm receipt of my request. In accordance with Article 12(3) GDPR, I ask for information on action taken until the following date at the latest:

In case of non-compliance with my demand, I will contact a data protection authority. Furthermore, I reserve the right to take further legal action, which may include the enforcement of claims for damages according to Article 82 GDPR.


Notes on using this sample letter

  1. Please enter your address and the company’s address. If available, you can add your customer and/or billing number.
  2. Write down for what processing of data or data categories you withdraw your consent. You can also just write: “Any and all personal data.”
  3. The company needs to respond without undue delay, at the latest within one month of receipt of your request. That’s why you can enter a deadline one month and three days (for shipping) after mailing the request.
  4. Please send the letter directly to the company in question (not to consumer protection organisations or authorities).