@st3fan It’s not GDPR, it’s the ePrivacy Directive.
TDDDG is the German national implementation of the ePrivacy Directive.
Important (and violated) is Article 5, sentence 3.
https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32002L0058:en:HTML
@davidculley I am not a lawyer. But I am really not sure if that section means what you think it means.