vital documents which are often submitted in digitised forms now they will have to destroy this information once the visa has been processedthe same example applies for websites that handle hotel bookings or travel ticketing if they do not have user consent to continue to hold the user datathe law is also clear on the matter of how companies take user consentthe consent given by the data principal user shall be free specific informed unconditional and unambiguous with a clear affirmative action and shall signify an agreement to the processing of her personal data for the specified purpose and be limited to such personal data as is necessary for such specified purpose companies are also mandated to provide users access to a grievance officer to answer to their complaints