b.) the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1), or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing