So, GDPR says you have to get positive consent from people before using their data for marketing? Just force them to check the box before being able to order pizza - simple!