Forms via which a collection of data is possible must fulfill the requirements of Art. 13 GDPR. A reference text could look like this:
Your data will be used exclusively to answer my request by the Doemens e.V. / Doemens Academy GmbH. The legal basis is your consent to this processing in accordance with Art. 6 (1) lit. a GDPR. The data will be deleted 1 year after discontinuation of the purpose, if from further processes in the context of the communication no longer legal storage periods or other reasons (e.g. investment of a customer account) are relevant. A transfer to third parties does not take place. You can revoke your consent at any time with effect for the future.
The purpose has to be described exactly, e.g.
- Execution of orders
- Processing of orders, warranty, support cases request
IMPORTANT: contractually provided consideration of the user (e.g. advertising use of the data submitted) must be clearly presented at the conclusion of the contract. The purpose must be extended accordingly. In particular, if the information is also to be used for advertising purposes or for transmission to third parties, this must be clearly noted.
The duration of storage must always be specified, depending on the purpose.