A Data Subject Consent Form is a crucial document required whenever organizations need to obtain explicit consent for processing personal data under the GDPR and Dutch law. This document is essential when consent is the legal basis for data processing and must be used before collecting and processing personal data where other legal bases (such as contractual necessity or legitimate interests) do not apply. The form must comply with both the GDPR and the Dutch GDPR Implementation Act (UAVG), ensuring consent is freely given, specific, informed, and unambiguous. It should be used in situations where special categories of personal data are processed, when processing involves automated decision-making, or when data will be transferred outside the EU/EEA. The document must be presented in clear, plain language and include all necessary information about data processing activities, storage duration, and data subject rights.

1. Introduction and Parties: Identifies the data controller (organization) and the data subject (individual), including relevant contact details

2. Purpose of Processing: Clearly explains why the personal data is being collected and how it will be used, with specific purposes listed

3. Personal Data to be Processed: Detailed list of the specific personal data that will be collected and processed

4. Data Subject Rights: Explanation of the rights under GDPR including right to withdraw consent, access data, request erasure, etc.

5. Duration of Processing: Specifies how long the data will be stored and processed

6. Data Sharing and Recipients: Information about third parties who will receive or have access to the data

7. Declaration of Consent: Clear statement of consent with signature/confirmation field