Email Marketing Rules in Germany (2026): Double Opt-In Guide
Email marketing still works well for small businesses in Germany, but the rules are stricter than in many other countries. In short: you need prior, explicit consent before sending promotional emails, you must be able to prove that consent (which in practice means double opt-in), and there is only one narrow exception for existing customers. Every mailing also needs a working unsubscribe option and the sender’s legal details. Get these basics right and you can build a list without inviting costly warning letters.
The legal framework in one minute
Two sets of rules apply at the same time:
- The Act against Unfair Competition (UWG), § 7. It defines email advertising without the recipient’s prior express consent as an “unreasonable nuisance” (§ 7(2) No. 2 UWG). This applies to consumers and to business recipients alike.
- The GDPR (DSGVO). Sending a newsletter means processing personal data, so you need a legal basis, transparent privacy information (Art. 13 GDPR) and proof of consent where you rely on it.
The IHK Hannover summarises it this way in its 2026 guidance: email newsletters generally require prior consent, the consent must be informed, freely given and revocable, and the sender carries the burden of proof. One well-drafted consent text can cover both UWG and GDPR.
What valid consent looks like
German chambers of commerce list several practical requirements for a sign-up form:
- Specific wording. A bare “Yes, I want the newsletter” is not enough. Say what the newsletter covers (which products or services) and who is sending it.
- No pre-ticked boxes. If you collect consent during checkout or registration, the box must be unticked by default.
- No coupling. Making a purchase conditional on newsletter consent conflicts with the GDPR coupling ban (Art. 7(4)).
- Right to withdraw. Tell people before they sign up that they can withdraw consent at any time, and make unsubscribing as easy as subscribing.
- Privacy information. Link to your privacy policy at the point of sign-up.
- Secure form. Transmit sign-up data over HTTPS.
Why double opt-in is the standard in Germany
With single opt-in, anyone can type someone else’s address into your form. If that person complains, you cannot prove they agreed. That is why double opt-in has become standard practice: after the sign-up, you send a confirmation email with a link, and the address is only added to your list once the owner clicks it.
Three details matter:
- The confirmation email must not contain advertising. Keep it to a short confirmation request, your sender details and a link to the privacy policy.
- Log the evidence. Store the time of sign-up, the time of confirmation, the consent text shown and, ideally, the IP address. Most email platforms do this automatically when double opt-in is enabled.
- Do not send reminders indefinitely. If someone does not confirm, do not add them to marketing sends.
The existing-customer exception (§ 7(3) UWG)
You may email customers without consent only if all four conditions are met:
- You received the email address in connection with the sale of goods or a service to that customer.
- You use it only for direct marketing of your own similar goods or services.
- The customer has not objected.
- You clearly told the customer, both when you collected the address and in every email, that they can object at any time without costs beyond basic transmission charges.
This exception is narrow. A newsletter about your whole range, partner offers, or emails to people who only requested a quote or downloaded a freebie usually fall outside it. When in doubt, ask for consent.
Comparison: ways to build a list in Germany
| Method | Allowed for marketing emails? | Proof of consent | Risk level |
|---|---|---|---|
| Double opt-in sign-up form | Yes | Strong (logged confirmation) | Low |
| Single opt-in form | Consent is hard to prove | Weak | Medium to high |
| Checkout checkbox (unticked) + double opt-in | Yes | Strong | Low |
| Existing customers under § 7(3) UWG | Only for own similar products, with objection notice | Purchase record + notices | Low if all four conditions met |
| Bought or rented email lists | Generally no | None you control | High |
| Cold B2B emails to collected addresses | No, without prior express consent | None | High |
What every marketing email needs
- Clear sender identity. § 7(2) No. 3 UWG treats concealing the sender’s identity as an unreasonable nuisance.
- A working unsubscribe option. A clearly labelled link at the end of each email is the common solution. Process opt-outs promptly.
- Legal notice (Impressum). The information duty for commercial digital services is now in § 5 of the Digital Services Act implementation law (DDG), which replaced the old Telemedia Act (TMG) in 2024. It covers name and address, legal form and representatives, contact details including email, register entries and VAT ID where applicable. Guidance from the IHK notes that it is not settled whether a link to your website’s Impressum is enough in a newsletter, so a full Impressum in the footer is the safer choice.
- A link to your privacy policy.
B2B: no cold-email loophole
Many founders assume that B2B email marketing is more relaxed. For email it is not: the consent requirement in § 7(2) No. 2 UWG applies to “the addressee” without distinguishing between consumers and businesses. German courts have also treated unsolicited advertising to a business email address as interference with the business itself. Phone marketing to businesses follows a different rule (presumed consent can be enough), but that does not carry over to email.
Practical setup for a small business
- Pick an email platform that supports double opt-in and consent logging. Check that it offers EU data processing and a data processing agreement (Art. 28 GDPR).
- Write the consent text. State the content, frequency if you know it, the sender, the right to withdraw and a privacy link.
- Add the form to your website with no pre-ticked boxes. If you offer a lead magnet, explain clearly that the download comes with the newsletter, and get advice on whether that is acceptable for your setup.
- Configure the confirmation email without advertising.
- Build your footer with Impressum, unsubscribe link and privacy link.
- Segment existing customers you plan to contact under § 7(3) UWG, and make sure the objection notice was given at checkout.
- Measure what matters. Track opens, clicks and especially sales from email, and connect them to your analytics. Our guide on email marketing for e-commerce sales covers content ideas once your list is legally set up.
If you are unsure whether your website, forms and tracking are set up properly, a structured review helps. The EarningTrends shop offers a Digital Performance Audit, a Marketing Strategy Blueprint and an Analytics & Reporting Setup for small businesses that want a clear picture before investing in campaigns.
Common mistakes
- Importing contacts from business cards, trade fairs or LinkedIn into the newsletter without consent.
- Pre-ticked consent boxes at checkout.
- Promotional content in the confirmation email.
- Using the existing-customer exception too broadly, for unrelated products or without the objection notice in every email.
- Ignoring unsubscribe requests or making people log in to unsubscribe.
- No Impressum in the email, or an outdated one still citing the TMG.
- Losing the consent logs when switching email providers. Export them before you migrate.
Consequences of getting it wrong
Breaches can lead to competition-law warning letters (Abmahnungen) from competitors or associations, which usually demand a cease-and-desist declaration with a contractual penalty. Recipients can claim injunctive relief and damages, and data protection authorities can impose fines under the GDPR. Even one unsolicited email can trigger a warning letter, so prevention is much cheaper than defence.
This article is general information, not legal advice. For your specific setup, talk to a lawyer or your local Chamber of Industry and Commerce (IHK).
FAQ
Is double opt-in legally required in Germany?
The law requires prior express consent and the sender must be able to prove it. Double opt-in is not written into the statute word for word, but chambers of commerce recommend it as the safest way to provide that proof, and single opt-in is considered insufficient for that purpose.
Can I email my existing customers without consent?
Only under § 7(3) UWG: you got the address through a sale, you advertise your own similar products, the customer has not objected, and you told them about their right to object when collecting the address and in every email.
Do the rules also apply to B2B emails?
Yes. The consent requirement for email advertising in § 7(2) No. 2 UWG covers business recipients too.
Does a newsletter need an Impressum?
Yes, it is treated as a digital service with information duties, now under § 5 DDG. A full Impressum in the footer is the safer option.
Conclusion
German email marketing law rewards a clean process: clear consent text, double opt-in with logs, a strict reading of the existing-customer exception, and complete footers. Set this up once in your email platform and it runs in the background while you focus on content and offers. Before you scale, it is also worth checking that your website meets other EU rules, such as the European Accessibility Act for online shops.
