Understanding and Applying the General Data Protection Regulation (GDPR): The Five Basic Principles of Data Protection -- Principle 1, Prohibition of Data Processing and Exceptions to Consent
In principle, the GDPR does NOT allow permission to process personal data without the explicit consent of the person concerned. There are, however, some legal exceptions. (Exceptions to Consent)