Terms and Conditions for promotions
Consent is the keyword
This means, that when you collect data through our app-based promotions, you need to make it clear to the users who the company behind is and what the data will be used for. And you need to ask for explicit consent to process this data.

Now we’ve covered how to ask for consent from your users. Here are some things that are not allowed under GDPR regulation:
Only ask for data that you need. Excessive or unnecessary data collection can constitute a breach of the GDPR.
Opt-in to receive commercial communications cannot be mandatory.
It can not be mandatory to consent to data being shared with a third-party. “Opt-out consent” is not legal: Tick the box if you don’t want to receive emails.
The consent checkboxes can not be ticked by default.