> So I'm pretty sure it's allowed as we're too big to not have this checked by legal.

You mean your big enough that legal answered "In the unlikely event that an employee knows their rights, we can afford to get sued"?

I second that this is immensely illegal in Germany.