GermanyCan I withdraw my consent for data processing at any time?
Yes, under German and EU data protection law, you can withdraw your consent for data processing at any time — and it must be as easy to withdraw as it was to give.
What the Law Says
German data protection law — aligned with the EU General Data Protection Regulation (GDPR) — gives individuals full control over their consent. You do not need to justify withdrawal, and it must not disadvantage you.
The GDPR applies directly in Germany and overrides national laws unless a specific exception exists. While TKG § 172 deals with mandatory data retention by telecom providers for security purposes (e.g., storing names, addresses, and contract dates), it does *not* govern consent-based processing — and crucially, it does *not* limit your right to withdraw consent for other types of data use.
Consent under the GDPR is only valid if it is freely given, specific, informed, and unambiguous — and critically, 'it shall be as easy to withdraw as to give' (GDPR Article 7(3)). This means companies must provide clear, accessible mechanisms (e.g., an unsubscribe link, a privacy dashboard, or a dedicated email address) to revoke consent without delay.
TKG § 172 is a special statutory obligation for telecom providers to collect and retain certain subscriber data — but this retention is *not based on consent*. It’s mandatory under law and therefore not subject to withdrawal. Your right to withdraw consent applies only to processing activities that *rely on consent* — such as marketing emails, personalized ads, or optional analytics tracking.
Statutory TextDie Einwilligung ist jederzeit widerrufbar.
— GDPR Art. 7(3) — General Data Protection Regulation
Statutory TextWer nummerngebundene interpersonelle Telekommunikationsdienste, Internetzugangsdienste oder Dienste, die ganz oder überwiegend in der Übertragung von Signalen bestehen, erbringt und dabei Rufnummern oder andere Anschlusskennungen vergibt oder Telekommunikationsanschlüsse für von anderen vergebene Rufnummern oder andere Anschlusskennungen bereitstellt, hat für die Auskunftsverfahren nach den §§ 173 und 174 vor der Freischaltung folgende Daten zu erheben und unverzüglich zu speichern...
— TKG § 172(1) — Telecommunications Act
What Courts Have Said
German courts consistently uphold the unconditional nature of consent withdrawal — especially where consent forms the sole legal basis for processing.
The court ruled that sending unsolicited advertising emails violates personality rights, and the sender must prove valid, revocable consent existed — reinforcing that consent must be freely withdrawable and that burden of proof lies with the controller.
What to Do
Locate the consent mechanism (e.g., email footer ‘Unsubscribe’, account privacy settings, or contact details for the data controller).
Submit your withdrawal clearly — no formal language is required; e.g., 'I withdraw my consent to process my personal data for marketing.'
Keep a copy of your request (email timestamp, screenshot, or confirmation receipt).
If the controller continues processing after withdrawal, file a complaint with the competent German data protection authority (e.g., LfDI Baden-Württemberg or BfDI for federal matters).
Sources
Related Questions
Same Question, Other Jurisdictions
India
South Korea
JapanNot legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: June 2026.