Well it seems to be a question of German law https://www.e-recht24.de/artikel/datenschutz/209.html but who really knows ...nowadays....