Germany — UWG §7 Email Marketing

Not legal advice. Reference digest of the Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb — UWG), quoted from the official (non-binding) English translation at gesetze-im-internet.de, which reflects amendments through the Act of 6 May 2024; the German text controls. The translation was retrieved via the Internet Archive (capture of 15 May 2026) because the official site was unreachable at extraction time.

Germany implements ePrivacy Art. 13 not (primarily) through data protection law but through unfair competition law — UWG §7, which serves to implement Art. 13 of Directive 2002/58/EC. Two consequences make Germany the strictest major email market:

1. No B2B carve-out. §7(2) no. 2 requires "the addressee's prior express consent" for advertising by electronic mail — the addressee can be a consumer or a business. Unlike the UK, France, or the Nordic opt-out regimes for corporate recipients, German B2B email marketing needs the same express opt-in as B2C.
2. Competitor enforcement. Violations are policed not mainly by a data protection authority but by competitors and associations through the cease-and-desist (Abmahnung) system — fast, privately initiated, and fee-generating, so enforcement is common in practice.

§7 — the rule

§7(1): "A commercial practice which constitutes an unacceptable nuisance to a market participant is illegal. This in particular applies to advertising in cases where it is apparent that the solicited market participant does not want this advertising."

§7(2): an unacceptable nuisance is always assumed for:

• no. 1 — telephone advertising to a consumer without prior express consent (or to another market participant without at least presumed consent);
• no. 2 — "advertising using an automated calling machine, a fax machine or electronic mail without the addressee's prior express consent";
• no. 3 — advertising communications where (a) the sender's identity is concealed or kept secret, (b) which violate §6(1) of the Digital Services Act or prompt the recipient to a website that does, or (c) without a valid address to which the recipient can send a stop instruction free of charge (beyond basic transmission costs).

"Advertising" is read broadly by German courts: any communication aimed at promoting sales, including newsletters, satisfaction surveys used promotionally, and reactivation emails.

§7(3) — the exception (German soft opt-in), four cumulative conditions

Notwithstanding §7(2) no. 2, email advertising is not an unacceptable nuisance only if all four conditions hold:

1. "the entrepreneur has obtained from the customer the latter's electronic mail address in connection with the sale of goods or services;
2. the entrepreneur uses the address for direct advertising of his or her own similar goods or services;
3. the customer has not objected to this use; and
4. the customer is clearly and unequivocally advised, when the address is collected and each time it is used, that he or she can object to such use at any time, without costs arising by virtue thereof, other than transmission costs in accordance with the basic rates."

Practice notes: German courts require an actual sale (Fieldfisher: "transaction required" — a mere enquiry does not qualify, unlike the UK reading of "negotiations"); "similar" is construed narrowly; condition 4 fails if the objection notice was absent at collection — which is unfixable retroactively. Because the burden of proving all four conditions sits with the sender, reliance on §7(3) is rare in German practice; documented double opt-in consent is the standard advice (Fieldfisher, Jan 2024).

Double opt-in case law

The statute says "prior express consent"; the case law makes documented double opt-in the de-facto proof standard:

• BGH, judgment of 10 Feb 2011 — I ZR 164/09 (Double-opt-in-Verfahren): the sender bears the full burden of proving the specific declaration of consent; a bare web-form signup (single opt-in) is insufficient because "misuse by unauthorised persons cannot be ruled out" — anyone can type someone else's address. An electronically given consent must be stored and printable at any time. The confirmed double opt-in (signup + click on a link in a confirmation email) is the recognised way to evidence that the address holder personally consented.
• OLG München, judgment of 27 Sep 2012 — 29 U 1682/12: the confirmation email itself counts as advertising if the sender cannot prove the address holder requested it — i.e. a check-your-inbox message to a never-requested address is already a §7(2) no. 2 violation. Operational consequence: keep the confirmation email strictly neutral (no offers, no promotion, minimal branding), send exactly one, and log the signup context (timestamp, IP, form) so the request itself can be evidenced. Courts have since generally accepted neutral DOI confirmations; a promotional one forfeits that protection.
• The consent must also meet the GDPR standard (Art. 4(11)/7 — granular, informed, withdrawable, no pre-ticked boxes); German DPAs and courts apply both regimes side by side, and a GDPR-invalid consent cannot be an UWG-valid one.

For telephone advertising, §7a additionally requires documenting consumer consent "in an adequate form" and storing the proof for five years from grant and after each use, producible to the Federal Network Agency on request. There is no equivalent statutory retention rule for email consent, but the BGH burden-of-proof rule makes indefinite retention of consent records (until the relationship plus limitation periods end) the practical standard.

Enforcement

• Who can sue (§8(3)): claims for elimination and injunctive relief vest in (1) any competitor with a genuine market presence, (2) qualified trade associations on the §8b list (e.g. Wettbewerbszentrale), (3) qualified consumer associations on the Injunctive Relief Act list, and (4) chambers of industry and commerce or crafts. The recipient personally can also claim under general civil law (injunction/damages via BGB §§823, 1004 analog); businesses whose staff receive spam sue as market participants.
• The Abmahnung mechanic: the claimant sends a formal warning demanding a cease-and-desist declaration with a contractual penalty (typically several thousand euros per future violation) plus reimbursement of legal fees; refusal leads to a fast preliminary injunction. One demonstrable unsolicited email can trigger this — which is why a single mis-sent campaign to Germany produces legal letters in a way it does not elsewhere. §8c curbs abusive serial warnings (fee-generation as predominant purpose, inflated values, excessive penalties), a reaction to the Abmahnindustrie, but legitimate claims remain routine.
• Risk of recurrence is presumed after one violation; only the penalty-backed declaration or a final judgment removes it.
• Fines: the §20 regulatory-fine regime (up to €300,000) covers unconsented telephone/automated-call advertising and §7a documentation failures (up to €50,000) — not email, which is enforced civilly as above. Email consent violations can additionally draw GDPR fines from the data protection authorities (up to €20M/4% for consent-basis infringements), since sending implies processing without a lawful basis.

Deliverability tie-in

German legal strictness and German inbox strictness are one ecosystem: the dominant German mailbox providers (GMX / WEB.DE / mail.com — United Internet) anchor the Certified Senders Alliance (CSA) whitelisting regime, whose admission criteria mirror the legal standard (documented consent, DOI expectation, working unsubscribe, sender transparency per §7(2) no. 3). Advising a sender to mail Germany without documented double opt-in is therefore wrong twice: legally (burden of proof unmet → Abmahnung exposure) and operationally (CSA/UI filtering expectations unmet). For mixed-EU lists, the safe baseline is the German standard — see the member-state divergence table.