Contact forms do not require consent under GDPR. The conditions for the lawfulness of the processing of personal data set out in Article 6 of GDPR are equivalent. This means that companies can continue to process their contact forms under the legitimate interest of contacting potential or existing customers and suppliers. However, care must be taken to implement risk-appropriate technical and organizational measures. In practice, the form should therefore be encrypted (e.g. https).