As the data controller, Unbounce gives you the tools you need to insert an opt-in checkbox and to include a link to your privacy policy.
Article 6 GDPR requires a lawful basis of processing. If you’re collecting leads with Unbounce, consent will most likely be the basis of processing you’ll need to rely on.
Read the article: "How to use Unbounce compliantly."