What the GDPR actually asks of you when you capture a lead
Four things: a purpose decided before the collection, a lawful basis, an answer within a month when the person asks, and a limit on repurposing. None of them is heavy at the scale of a fair, and all four are decided at the moment of capture.
4 min read