GDPR-compliant newsletters and email automation: consent, tracking, sequences
Automated emails are among the most cost-effective marketing channels: welcome series, reminders about abandoned enquiries, post-purchase follow-ups. At the same time, email marketing in Germany is tightly regulated, and many newsletters unknowingly break the GDPR, competition law or the TDDDG. This article shows how to automate without risking legal warnings.
The basic rule: marketing only with consent
Under Section 7(2) of Germany's Unfair Competition Act (UWG), marketing emails without prior express consent are an unreasonable nuisance. Consent must be freely given for a specific purpose, and you must be able to prove it (Article 7 GDPR). In practice, double opt-in has become standard: sign-up form, confirmation link by email, a log with time and wording of the consent.
Don't bundle consent with something else, such as downloading a guide, without clearly saying a newsletter comes with it and leaving a real choice.
The existing-customer exception
Under Section 7(3) UWG you may send customers whose email you received in connection with a sale marketing for your own similar goods or services without consent, if the customer hasn't objected and is clearly told at collection and in every email that they can object at any time. This exception doesn't apply to prospects who haven't bought.
Tracking in emails
Open rates are usually measured with an invisible tracking pixel loaded from the server when the email opens. That's access to the user's device under Section 25 TDDDG and, according to the prevailing view, requires consent beyond the newsletter sign-up itself. Explicitly ask for consent to analysis at sign-up, or do without personal tracking.
Automated sequences that make sense
These sequences often bring the most for small businesses:
- A welcome series after sign-up: who you are, your three most important pieces of content, an offer.
- Following up on an enquiry with no reply, to existing contacts within the contract.
- After purchase: instructions, a review request, later matching add-ons under Section 7(3) UWG.
- Re-engaging inactive subscribers, then unsubscribing them if there's no reaction.
Tools and cost
Use a newsletter tool with a data processing agreement, EU hosting, double opt-in, a consent log and an unsubscribe link in every email. Connect it to CRM, shop and website forms so consents and unsubscribes match everywhere. Setting up the sign-up flow, automations and CRM integration starts at €600 with us.
Frequently asked questions
- May I email purchased addresses?
- No. For purchased addresses you almost never have valid consent; marketing to them is unlawful.
- May I add trade fair business cards to the newsletter?
- Only with consent. A business card isn't consent to marketing emails.
- How long must I keep consents?
- As long as you send the emails, and beyond that as long as you may need to prove consent. After an unsubscribe, keep the address only on a suppression list.
Sources
Tell us your newsletter tool, CRM and how contacts get onto your list today. We set up sign-up, sequences and tracking lawfully.
Set up email automation