The Dutch law AVG & the EU Law GDPR
What are your basic rights, and what is allowed by law to be requested, when someone has your personal data?
A few tips of your entitlements by law enforment.
To clarify: You have to ACTIVELY agree with something, to process your data. Automaticly, such as tracking cookies are not allowed without Active consent! Furthermore a company can only approach you when you were a client in the past, for let's say a newsletter. But at the time of sending the newsletter, you're obligated to have an unsubscribe button, and cannot send any mail anymore.
References: AVG & GPDR weblinks (need to translate that)