Opt-in / Consent

Opt-in is the explicit, informed consent a person gives before receiving marketing messages or having their personal data processed. Under GDPR, opt-in must be freely given, specific, and revocable at any time -- pre-checked boxes or implied consent do not count.

What is Opt-in?

Opt-in means a person actively and explicitly agrees to receive messages or have their data processed for a specific purpose. The opposite -- opt-out -- assumes consent by default and lets people unsubscribe later. Under the EU General Data Protection Regulation (GDPR) and the German Unfair Competition Act (UWG), opt-in is the legal standard for GDPR-compliant messaging in Europe. You may not send promotional WhatsApp messages, newsletters, or SMS campaigns to someone who has not explicitly opted in.

The GDPR defines consent in Article 7 with strict requirements: It must be freely given (not a condition for purchasing a product), specific (separate consent per purpose -- marketing vs. service messages), informed (the person knows exactly what they are agreeing to), and unambiguous (an active action like checking a box, not silence or inactivity). Pre-checked checkboxes, bundled consent, or "by continuing you agree" banners do not meet these standards.

Why is Opt-in Important?

Legal compliance: Sending marketing messages without valid opt-in violates GDPR (fines up to EUR 20 million or 4% of annual revenue) and the German UWG (cease-and-desist letters, court injunctions). In the DACH market, competitors and consumer protection organizations actively pursue violations -- even a single unsolicited WhatsApp message can trigger legal action.

Channel-specific rules: WhatsApp Business API requires opt-in before businesses can initiate conversations. Meta (as the platform provider) enforces this: accounts that send unsolicited messages risk being flagged, rate-limited, or permanently banned. SMS has similar carrier-level restrictions. Email is governed by the ePrivacy Directive alongside GDPR.

Deliverability and reputation: Beyond legal risk, sending to non-consenting recipients destroys deliverability. High complaint rates lead to spam classification (email), phone number blocking (SMS), or quality score degradation (WhatsApp). A clean, opted-in contact list consistently outperforms a large, unverified one in open rates, click rates, and conversions -- especially for broadcast campaigns.

Trust: Customers who actively opted in are more engaged. They expect and welcome your messages. This translates directly to higher conversion rates, lower unsubscribe rates, and stronger brand loyalty.

Single Opt-in vs. Double Opt-in

Single Opt-in (SOI): The user fills out a form or checks a box, and is immediately subscribed. Quick and simple, but vulnerable to typos (wrong email address), bot submissions, and abuse (someone entering another person's number). Legally acceptable under GDPR, but harder to prove consent in case of disputes.

Double Opt-in (DOI): After the initial sign-up, the user receives a confirmation message (email or SMS) with a verification link or code. Only after clicking/entering the code is the subscription activated. DOI provides proof of consent (timestamp, IP address, confirmation action), prevents fake sign-ups, ensures the contact information is valid, and is considered best practice by German data protection authorities.

For the DACH market specifically, Double Opt-in is strongly recommended and treated as the de facto standard by German courts. While not explicitly required by GDPR text, German case law (BGH rulings) has established DOI as the expected standard for email marketing, and this expectation extends to messaging channels.

Opt-in Management with SendSeven

SendSeven provides built-in tools for GDPR-compliant opt-in management. The Newsletter Widget can be embedded on any website -- it supports Double Opt-in workflows with customizable confirmation messages sent via the channel of your choice (WhatsApp, email, SMS). Every opt-in is logged with a timestamp and source for audit purposes.

Opt-out handling is equally automated: when a contact replies with "STOP" or clicks an unsubscribe link, they are immediately removed from all broadcast lists. The opt-out is logged and the contact is flagged to prevent re-subscription without explicit new consent. Contacts can also manage their preferences through a self-service preference center.

For WhatsApp specifically, SendSeven ensures compliance with Meta's opt-in requirements. The platform tracks opt-in status per channel and per contact, preventing accidental sends to non-consenting recipients. Explore the opt-in features in Contact Management, including GDPR-compliant double opt-in, per-channel subscription tracking, and one-click data export.