Right to object or automated decisions
This article provides individuals to request their information not be processed for sales or marketing.
People must be notified once their personal information has been initially stored and given the right to object. "Legitimate interest" also needs to be documented. There are also time limits which need to be set as GDPR has guidelines on expiration of consent.
Manual: Report export or use APEX to create the appropriate report.