Doesn't GDPR say that 'informed consent' cannot be a condition of providing a business service? So as far as I can see the supermarket cannot say, "In order to

Doesn't GDPR say that 'informed consent' cannot be a condition of providing a business service? So as far as I can see the supermarket cannot say, "In order to receive the store rewards benefits you must agree to us selling your data to third parties".