“…In sum, consent is not free “in cases where there is any element of compulsion, pressure or inability to exercise free will.” It seems clear that in cases of marketing manipulative practices, consumers’ consent might be not free (Castelluccia, 2020; Ducato and Marique, 2018). In general, scholars have defined power imbalance as any situation in which, on the one hand, the data subject has a higher risk of suffering from adverse effects deriving from the data processing and when, on the other hand, the data controller is a situation of institutional, hierarchical or informational dominance (Pasquale, 2013; Austin, 2014; Richter, 2018; Malgieri and Niklas, 2020). Accordingly, many scholars argue that in most cases, the unaware and rapid consent that consumers give to the processing of their personal data for direct marketing purposes (in exchange for free access to online services or when there is a strong information asymmetry because of the limited transparency of the data processing activities) might be invalid under the GDPR (Bergemann, 2018; Ducato and Marique, 2018; Solove, 2013; van der Hof, 2017).…”