per the GDPR, parental consent is required for children below 16 years. Member states may lower this age but not below 13 years