CRM and newsletter data have value only if consents, legal bases, blocking lists and erasure risks are checked before closing.
BRANDAUER Rechtsanwälte
Salzburg law firm for corporate, company and transaction law
Every transaction is handled by a coordinated team of lawyers, legal staff and specialists. In company acquisition matters we look at structure, contract, tax and liability together.
CRM and newsletter data often look like a valuable customer base in a business acquisition. Legally they are not freely transferable raw material. The buyer must review how the data was collected, whether consents can be proven and which records must be erased or blocked.
Marketing data differs from general customer data. Newsletter consents, double-opt-in logs, unsubscribe lists and tracking history decide whether the buyer may use the data after closing.
This post separates the issue from general data protection due diligence and e-commerce acquisitions. The focus is CRM, newsletters and marketing consents.
The buyer should know whether CRM contacts come from contracts, enquiries, trade fairs, prize draws or newsletter registrations. Different channels may have different legal bases and information duties. Consent evidence is central for newsletter data.
A double-opt-in log is often more valuable than the sheer number of contacts. Without evidence the buyer cannot simply continue using the list. The general structure is explained in our data protection due diligence.
The data handover must include more than active contacts. Unsubscribe lists, objections, erasure requests and internal blocking notes are equally important. If only positive contacts are transferred, the buyer may contact people who have already objected.
These lists should be defined as closing documents. They protect the buyer and show whether the seller took data protection processes seriously.
In an asset deal, transferring customer data may be a separate processing activity with its own basis. In a share deal the data remains with the legal entity, but the buyer must still review whether prior use was lawful. Both structures require different handover steps.
In digital business models the issue overlaps with buying an e-commerce company.
This overview shows which special issues must not disappear in generic clauses.
| Point | Why it matters | Contract consequence |
|---|---|---|
| Consent Consent | Decides on newsletter use. | Evidence and warranties. |
| Blocking list Unsubscribe and erasure | Prevents unlawful marketing. | Closing document and handover duty. |
| Usability Usable contacts | Affects the value of the data set. | Price deduction or indemnity. |
GDPR and Austrian telecommunications law form the legal framework. The concrete basis depends on data type, channel and acquisition structure.
Practice note: Value CRM data by provable usability, not by contact count. A large export without consent and blocking lists can be a risk rather than an asset.
Data protection due diligence reviews personnel, customer and IT data overall. This post is narrower and asks whether marketing data may be used after closing. That is a separate value driver and erasure risk.
For the purchase agreement, data source, consents, blocking lists and actual usability should not disappear in a generic GDPR warranty.
No, this depends on consent, legal basis, information duties and acquisition structure. Evidence of consent is particularly important for newsletter data.
Unsubscribe lists prevent people from being contacted again after closing although they objected before. They are therefore part of the data protection handover.
The decisive point is not the number of contacts but lawful usability. Unusable or risky data sets should be reflected in valuation and contract.
A further post or focus page for the next review step.
A further post or focus page for the next review step.
A further post or focus page for the next review step.
A further post or focus page for the next review step.
When buying a company, structure, review and contract decide. Call us directly or send an email, callback within one business day.
Address
BRANDAUER Rechtsanwälte GmbH Giselakai 51 5020 Salzburg
Phone
+43 662 6280000