GDPR: Delete instead of blacklist / time and date of confirmation

@Crenel84 FYI are right about leeway regarding maintenance of a suppression list. This official advice from the UKs Data Protection authority has this to say:

The right to object to direct marketing under Article 21(3) does not prevent a controller from holding a suppression list, as the list supports the individual’s right to object and is held for compliance rather than for direct marketing purposes