The consent form must be signed and returned by the parent(s) or legal guardian to be able to process personal data of a child under 16 years old (according to article 8.1 GDPR Member States may provide by law for a lower age).
Prior to given consent, the parent(s) or legal guardian shall be informed as follows:
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.