GDPR Guidelines. Checkboxes shouldn't be enabled

All checkboxes shouldn't be enabled automatically

The user needs to have the option to opt-in to a promotion, for example. Also, what they are choosing, needs to be clearly explained.