The EU/GDPR solution to that is definition of "freely given consent" where such discount treatment means that the "consent" doesn't count as a valid reason to permit processing data, as it was not freely given; and also by the requirement to be able to withdraw consent as easy it was to give it, at any time, and without adverse consequence, for example, one minute after receiving that discount.