§ 20 TDDDG
Processing of Personal Data of Minors
(1)Where a provider of digital services has collected personal data of minors for the purpose of ensuring the protection of minors, for example through means of age verification or other technical measures, or has otherwise obtained such data, the provider must not process such data for commercial purposes.