Besides consent there is also the possibility of legitimate interest under the GDPR.