> ## Documentation Index
> Fetch the complete documentation index at: https://docs.famulor.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Protection & Compliance

> Legally Compliant Cold Calling in the DACH Region (DE/AT/CH): Basics, Best Practices, and Proofs

<Warning>
  This page does not constitute legal advice. Always verify your specific use case with legal counsel.
</Warning>

## Legally Compliant Cold Calling in the DACH Region

The requirements vary by country and communication channel (phone, email, SMS). Below are the key legal bases and regulatory guidelines.

### Germany (DE)

* **UWG §7 – Unfair Harassment (Telephone/Email Advertising)**: Defines unauthorized advertising without consent; very strict for B2C, allowed for B2B only with “presumed interest.”
  * Source: [Federal Ministry of Justice – UWG §7 (gesetze‑im‑internet.de)](https://www.gesetze-im-internet.de/uwg_2004/__7.html)
* **GDPR**: Legal bases (Art. 6), consent (Art. 7), information obligations (Art. 13/14), proof requirements, data minimization.
  * Source: [EUR‑Lex – General Data Protection Regulation](https://eur-lex.europa.eu/eli/reg/2016/679/oj)
* **Regulatory Guidelines**: Proof/documentation obligations for telemarketing, complaint procedures.
  * Source: [Federal Network Agency – Unauthorized Telephone Advertising](https://www.bundesnetzagentur.de/DE/Fachthemen/Telekommunikation/Verbraucher/Telefonwerbung/start.html)

### Austria (AT)

* **§ 107 TKG 2021**: Unsolicited messages and marketing calls generally only permitted with prior consent; strict requirements, including for B2B.
  * Source: [RIS – § 107 Telecommunications Act 2021](https://www.ris.bka.gv.at/Dokumente/Bundesnormen/NOR40282920/NOR40282920.html)
* **DSG (national Data Protection Act)**: Implementation/supplement to the GDPR.
  * Source: [RIS – Data Protection Act (DSG)](https://www.ris.bka.gv.at/Dokumente/Bundesnormen/NOR40199885/NOR40199885.html)

### Switzerland (CH)

* **nDSG (SR 235.1)**: Independent data protection law (since 09/01/2023), transparency/information duties, data security, rights of data subjects.
  * Source: [admin.ch – Federal Act on Data Protection](https://www.fedlex.admin.ch/eli/cc/2022/491/de)
* **Telemarketing / Star Registration ("Robinson List")**: Marketing calls to numbers registered with a star entry are prohibited; sector-specific rules apply.
  * Source: [SECO – Unwanted Telephone Advertising](https://www.seco.admin.ch/seco/de/home/Arbeit/Arbeitsbedingungen/unerwuenschte-werbung-am-telefon.html)

***

## EU Transparency Obligation for AI Calls (AI Act)

As of **August 2, 2026**, the EU requires that individuals be informed when they are interacting with **AI** (e.g., voice bots in outbound/inbound calls), unless this is obvious. A brief, clear announcement is sufficient, for example: “This conversation is conducted by artificial intelligence.”

* Legal basis: **EU AI Act – Transparency Obligations (Art. 50)**
* Timeline: Most provisions apply **24 months after entry into force** (08/01/2024 → 08/02/2026). Art. 50 is included.
* Sources: [HÄRTING – Transparency Obligations in the AI Regulation (Art. 50)](https://haerting.de/wissen/transparenzpflichten-in-der-ki-verordnung/), [Wikipedia – EU AI Regulation: Dates of Application](https://de.wikipedia.org/wiki/Verordnung_%C3%BCber_k%C3%BCnstliche_Intelligenz)

<Note>
  Recommendation: Already mark all AI calls (inbound & outbound) with a brief announcement. This creates transparency and trust and prepares for 2026.
</Note>

***

## Legally Compliant Cold Calling – Practical Guide

### 1) Consent Management

* Obtain consents in writing/recorded form (double opt-in for email), document purpose limitation
* Provide an easily accessible **revocation** (opt-out), automatically respect blocklists (DE: Robinson list, CH: star registration)

### 2) Data Processing (GDPR/nDSG)

* Maintain a **record of processing activities** (Art. 30 GDPR)
* Implement **TOMs** (technical and organizational measures): access controls, encryption, logging
* Data minimization, storage limitation, deletion policies

### 3) Documentation & Proof

* Document consent, reasons for contact, contact times, opt-outs
* Provide current **privacy policy** and **information per Art. 13/14 GDPR**
* Conduct regular **compliance checks** and training

<Info>
  For more information: [/provisioning/compliance](/en/provisioning/compliance)
</Info>

***

## Cross-Border Special Features (Brief Overview)

* **DE**: B2C telephone marketing only with consent; B2B only with “presumed interest.” Strict enforcement by BNetzA.
* **AT**: Very strict consent requirements (§ 107 TKG 2021) – also for B2B.
* **CH**: Independent legal framework (nDSG). Telemarketing prohibited for star-registered numbers; opt-out must be respected.

***

## Famulor Features to Support Compliance

* **Consent management**: Record and document opt-ins and opt-outs
* **Blocklists & star registration compliance**: Campaigns respect opt-out lists
* **Data security**: Encryption in transit and at rest, role-based access
* **Retention periods**: Configurable storage durations
* **Audit trails**: Traceability of changes and accesses

<Check>
  Best practice: Check legal basis before campaign launch, verify consent proof, activate transparency announcements for AI calls, and document all processes.
</Check>

***

## Sources & References

* [BMJ – UWG §7 Unfair Harassment (DE)](https://www.gesetze-im-internet.de/uwg_2004/__7.html)
* [Federal Network Agency – Unauthorized Telephone Advertising (DE)](https://www.bundesnetzagentur.de/DE/Fachthemen/Telekommunikation/Verbraucher/Telefonwerbung/start.html)
* [EUR‑Lex – Full text GDPR (EU)](https://eur-lex.europa.eu/eli/reg/2016/679/oj)
* [RIS – § 107 TKG 2021 (AT)](https://www.ris.bka.gv.at/Dokumente/Bundesnormen/NOR40282920/NOR40282920.html)
* [RIS – Data Protection Act DSG (AT)](https://www.ris.bka.gv.at/Dokumente/Bundesnormen/NOR40199885/NOR40199885.html)
* [admin.ch – nDSG SR 235.1 (CH)](https://www.fedlex.admin.ch/eli/cc/2022/491/de)
* [SECO – Unwanted Telephone Advertising (CH)](https://www.seco.admin.ch/seco/de/home/Arbeit/Arbeitsbedingungen/unerwuenschte-werbung-am-telefon.html)
* [HÄRTING – Transparency Obligations (Art. 50)](https://haerting.de/wissen/transparenzpflichten-in-der-ki-verordnung/)
* [Wikipedia – EU AI Regulation](https://de.wikipedia.org/wiki/Verordnung_%C3%BCber_k%C3%BCnstliche_Intelligenz)