I don't really see how they could achieve such a bad result given that German Law is subject to the Privacy Protection Directive and to the newly adopted Privacy Protection Regulation. And both are strongly in favor of the users, including their right to access, modify or suppress any information about them.