DE Consent-Log DSGVO
Capture and prove marketing/cookie consent with timestamped, exportable DSGVO/TTDSG/DDG evidence
Want DE Consent-Log DSGVO installed and configured for you? Onboarding Pack: $350 one-off
Support plans from $425 a month
Consent you can prove: versioned texts and a hash-chained log
Purposes, published legal text versions with fingerprint, consent records in a SHA-256 chain, paired withdrawals and a CSV proof export
Record every consent with the purpose, the exact text version the person saw, the proof method, the channel and the technical evidence. Each record is chained to the previous one by a SHA-256 hash, so a changed, inserted or deleted record shows up when the chain is checked. A withdrawal never deletes the grant: it is a second record that points to it.
Key features
Purposes with legal basis
Newsletter, profiling and cookie purposes are shipped, each with its legal basis under Art. 6 or Art. 9 DSGVO, consent lifetime and proof retention period. Essential cookies are marked as not needing opt-in.
Legal texts as frozen versions
A text version gets a SHA-256 fingerprint; once published it cannot be edited, a new version archives the previous one. A record can only cite a published or archived text of its own purpose.
Records that cannot be changed
Who, purpose, text version, fingerprint, proof method (double opt-in, web form, written, logged call, import), channel, time, IP, user agent and source URL. Changing this evidence later is refused.
Hash chain
Each record stores the hash of the previous one. Verify Chain Integrity walks the whole ledger and also detects missing newest records; a daily job does the same and opens a to-do when it finds a break.
Withdrawal as a second record
Withdraw one consent on the record or several at once for a person; each withdrawal is its own chained record that points to the grant.
Expiry and retention
Grants past their lifetime are marked expired; withdrawn and expired proof is deleted only after its retention period, and each deletion is logged so the chain stays verifiable.
Proof export
Export the records of a period, purpose or person as a CSV with the evidence fields, both hashes and the chain status.
Screenshots
Odoo 19.0 with the data of a German building services company; the same screens apply to Odoo 18.0 and 20.0.
1. Consent record
Double opt-in for the newsletter with text version, IP, user agent, source URL and the hash chain.
2. Consent log
Grants, withdrawals and a website opt-in without contact record.
3. Withdrawal record
The withdrawal of a written consent, chained and pointing to the grant.
4. Published text version
The exact wording with its SHA-256 fingerprint; version 1 was archived when version 2 was published.
5. Purposes
Legal basis, opt-in requirement, active grants and records per purpose.
6. Proof export
CSV export of the consent proof with the result of the chain check.
Why this app
✓ The wording the person saw is part of the proof, frozen and fingerprinted.
✓ A changed, inserted or deleted record is detected when the chain is checked.
✓ Withdrawal keeps the history: grant and withdrawal stay provable.
✓ A proof file for the supervisory authority in one export.
Get started
Purposes
Check the shipped purposes, legal basis, lifetime and retention.
Texts
Enter the consent wording per purpose and language and publish it.
Record
Consents arrive from your website integration or are entered with proof method and channel.
Prove
Verify the chain and export the proof for a period, purpose or person.
Questions
Does the module show a cookie banner?
No. It keeps the proof; the banner or form on your website writes the records.
Can a published text be corrected?
No. Create a new version; the old one is archived and stays the proof for the consents given on it.
Auf Deutsch
DE Consent-Log DSGVO speichert jede Einwilligung mit Zweck, der gezeigten Textversion, Nachweisart, Kanal und technischen Daten in einer SHA-256-Kette und exportiert den Nachweis als CSV.
- Zwecke mit Rechtsgrundlage, Gültigkeitsdauer und Aufbewahrungsfrist
- Veröffentlichte Textversionen mit Fingerabdruck, unveränderbar
- Einwilligungsnachweise in einer Hash-Kette, Prüfung der ganzen Kette
- Widerruf als eigener verketteter Datensatz, auch als Sammelwiderruf
- Ablauf und Löschung nach Aufbewahrungsfrist mit Löschprotokoll
- CSV-Export mit Hashwerten und Kettenstatus
Specifications
- This page: Odoo 19.0 (also available for Odoo 18.0 and 20.0), Community and Enterprise
- License: OPL-1
- Languages: English, German
- Depends on: base, mail, contacts
- Author: Pokutsoft, pokutsoft.com
- Support: support@pokutsoft.com
Update date: 2026-10-28 · Version: 19.0.1.0.19
User guides (PDF)
Related modules
DE AV-Vertrag / DPA
Processor (AVV) register with a configurable Art. 28 draft generator and renewal tracking
DE Datenpannen Workflow
Data-breach incident register with 72-hour Art. 33 timer and Art. 33/34 notification drafts (customer files)
DE DSAR Self-Service
Cross-model DSAR discovery (Art. 15/20) with 1-month deadline timer and machine-readable export