"It is your responsibility under GDPR not to store information about me without my explicit consent..." Not commenting on the particulars of this case (you mig

"It is your responsibility under GDPR not to store information about me without my explicit consent..." Not commenting on the particulars of this case (you might be right in this particular instance), as a general statement this is not true. Consent is only one of several possible legal grounds for processing personal data. Generally, data controllers want to avoid it if possible in lieu of more convenient grounds. Nitpicking more, explicit consent is mentioned only as a processing ground for so called special category data, i.e. certain sensitive data, e.g. health data, requiring an additional legal ground.