Earlier quoted context omitted.
No. Basically the GDPR is structured around a whole bunch of reasons why you might _need_ to store and process data about people ("Subjects"), for which you have implicit permission because it's necessary to something you're doing for the Subject. You need to make sure Subjects can find out what you needed, and why, and you can't change your mind later. These purposes do not need Consent. You don't need to Consent to…
> ... and you can't change your mind later. Is that a typo? Isn't GDPR the implementation of the right to be forgotten plus "left-the-fuck-alone after used your shitty site for 0.5 EUR to buy an emoji"? So you can request removal of all your personal information. Yes, Amazon needs your delivery and billing address, but they don't need the delivery address after delivery. So you can request them to delete it pronto! A…
Under the GDPR Amazon can't say "Oh, we told our customers we collected email addresses to send them stuff about their delivery, but now we've decided to use those to seed our Orbital Weapons Robots. So we'll just update our T&Cs and done, right?"
If they decide now they want email addresses for the Orbital Weapons Robots they're going to have to collect from scratch. Too bad, ask first.