---
title: "Germany — AdTech &amp; Commercial Privacy | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/germany/adtech-and-commercial-privacy/
source_html: /jurisdictions/germany/adtech-and-commercial-privacy/index.html
description: "Germany — AdTech &amp; Commercial Privacy: adtech_and_commercial_privacy AdTech &amp;amp; Commercial Privacy 6 sub-modules 4 claims Amber &amp;#9662; # Cookie/tracker consent regime is mature and green, but clean-room and cross-context-adver"
generated_at: 2026-10-25T04:46:50Z
content_sha256: 7ea0296f2d5d590d136ba8d1b8f5213994935fa1dcf6602f91f3e87f5afac011
generator: "fe-fleet/md-twin@1.0"
---
# Germany — AdTech &amp; Commercial Privacy | Data Protection Monitor

### D7AdTech & Commercial Privacy6 sub-modules4 claimsAmber&#9662;#

Cookie/tracker consent regime is mature and green, but clean-room and cross-context-advertising sub-modules have no identified DE-specific statutory basis, and dark-pattern guidance rests on DSK soft-law rather than binding statute.

Primary framework TTDSG/TDDDG §25 (cookies/trackers); GDPR Art 21 (direct marketing objection)

Supervisory authority [BfDI (federal telecoms); Land DPAs (general commercial adtech)](https://www.bfdi.bund.de/)

Traffic-light rationale &mdash; Amber Cookie/tracker consent regime is mature and green, but clean-room and cross-context-advertising sub-modules have no identified DE-specific statutory basis, and dark-pattern guidance rests on DSK soft-law rather than binding statute.

#### Sub-modules (6)

#### Cookies And TrackersGreen

TTDSG §25(1) consent requirement for terminal-equipment storage/access, narrow §25(2) strict-necessity exception.

Claims (2):

- TTDSG/TDDDG §25(1) requires consent for storage of or access to information on end-user terminal equipment regardless of whether personal data processing occurs.
- TTDSG/TDDDG §25(2) provides a narrow strict-necessity exception to the cookie/tracker consent requirement.

#### Dark PatternsAmber

DSK guidance treats cookie walls as non-compliant, though this rests on soft-law/regulatory guidance rather than a codified statutory prohibition.

Claims (1):

- DSK (Konferenz der unabhängigen Datenschutzaufsichtsbehörden) treats cookie walls as non-compliant, per soft-law guidance rather than a codified statutory prohibition. No DSK-specific cookie-wall guidance document independently retrieved this pass; general Telemedien Rundschreiben used as proxy.

#### Opt Out SignalsRed

No DE-specific statutory recognition of Global Privacy Control or equivalent opt-out signals was identified.

Absence provenance: unavailable . Searched: Global Privacy Control Deutschland TTDSG Anerkennung.

#### Clean Rooms And DcrRed

No DE-specific clean-room/data-collaboration-room statutory regime was identified.

Absence provenance: unavailable . Searched: Clean Room Datenschutz Deutschland Regelung.

#### Cross Context AdvertisingAmber

No CPRA-style statutory &#x27;sale&#x27;/&#x27;share&#x27; concept exists in German law; cross-context advertising is governed by general GDPR consent/legitimate-interest rules.

Absence provenance: unavailable . Searched: cross-context advertising Germany equivalent CPRA sale share.

#### Direct MarketingGreen

Art 21(2) GDPR absolute objection right to direct-marketing processing, operationalised via BfDI model objection letters.

Claims (1):

- GDPR Article 21(2) grants an absolute objection right to direct-marketing processing, operationalised via BfDI model objection correspondence.

#### Key findings (3)

- &mdash; source on file
- &mdash; source on file
- &mdash; source on file

Category narrative 70 words

TTDSG §25 supplies Germany&#x27;s core cookie/tracker consent rule, requiring consent for any storage of or access to information on end-user terminal equipment regardless of whether personal data processing occurs, with a narrow strict-necessity exception. Cookie walls are treated by German DPAs as non-compliant. Direct-marketing objection rights under Art 21(2) GDPR are operationalised via BfDI model correspondence. Dedicated clean-room/data-collaboration-room and cross-context-advertising (CPRA-style) rules were not identified as part of German law.

no periodic updates on record for this sub-brief

Evidence 4

Sources and claims (4)
- Probable[BfDI](https://www.bfdi.bund.de/SharedDocs/Downloads/DE/DokumenteBfDI/Rundschreiben/Allgemein/2023/Rundschreiben-Telemedien.pdf) &mdash; TTDSG/TDDDG §25(1) requires consent for storage of or access to information on end-user terminal equipment regardless of whether personal data processing occurs.observed 2026-07-29
- Probable[OneTrust DataGuidance](https://www.dataguidance.com/opinion/germany-faqs-what-does-ttdsg-mean-you) &mdash; TTDSG/TDDDG §25(2) provides a narrow strict-necessity exception to the cookie/tracker consent requirement.observed 2026-07-29
- Uncertain[BfDI](https://www.bfdi.bund.de/SharedDocs/Downloads/DE/DokumenteBfDI/Rundschreiben/Allgemein/2023/Rundschreiben-Telemedien.pdf) &mdash; DSK (Konferenz der unabhängigen Datenschutzaufsichtsbehörden) treats cookie walls as non-compliant, per soft-law guidance rather than a codified statutory prohibition. No DSK-specific cookie-wall guidance document independently retrieved this pass; general Telemedien Rundschreiben used as proxy.observed 2026-07-29
- Probable[BfDI](https://www.bfdi.bund.de/DE/Buerger/Mustertexte/Zwischenordner-f%C3%BCr-Mustertexte/Mustertexte_Allgemein.html) &mdash; GDPR Article 21(2) grants an absolute objection right to direct-marketing processing, operationalised via BfDI model objection correspondence.observed 2026-07-29
