⚖️ Legal notice This article is for general information purposes only and does not replace legal advice. If you have specific legal questions, please consult a solicitor specialising in media or copyright law. We accept no liability for decisions made on the basis of this article.
Warnings: An underestimated risk
Every year, thousands of warning letters regarding image rights, incorrectly embedded fonts or music usage land in German letterboxes. The claims often run into four figures, sometimes even five. It is not only large companies that are affected, but also small website operators, freelancers and bloggers who simply did not know any better.
The subject is unpleasant, but manageable. Those who know the basic rules can reduce their risk to a minimum. Those who ignore them will eventually pay dearly.
This article explains what you need to bear in mind when it comes to images, fonts and music. Which sources are actually legally compliant. And what you can do if you do receive a letter from a solicitor's office.
The basics: copyright in 5 minutes
Before we get into the details, you must accept an uncomfortable truth: On the internet, everything is protected at first. Period. Every photo, every graphic, every song, every font. The question is not whether something is protected. The question is under what conditions you are allowed to use it.
Copyright law in Germany recognises a magic number: 70 years. A work remains protected for this long after the death of its creator. Only then does it enter the public domain. Mozart? No problem. Taylor Swift? Forget it.
The most common misconception we see is: „I found it on Google, so it's free to use.“ No. Google is a search engine, not a licence dealer. Similarly, the absence of a © symbol does not make an image freely available. In Germany, copyright protection arises automatically upon creation of the work. No registration is necessary, no symbol is required.
Another classic misconception: a licence does not mean ownership. When you purchase a stock photo, you acquire usage rights. The photographer remains the copyright holder. You may use the image, but you may not resell it or pass it off as your own. This distinction will become important later on.
Image rights: The classic among warning traps
Image rights are the number one minefield on the German internet. The combination of low barriers to entry (copy & paste), high amounts in dispute and specialised warning letter law firms makes this issue a financial risk for every website operator.
What does it cost to have fun when you break the rules?
Let's look at the figures for 2025. A typical image rights warning letter consists of two components: legal fees and damages.
Legal fees are calculated based on the value of the claim. In practice, image rights violations range from £3,000 to £6,000 per image. This results in legal fees of approximately £350 to £650. Sounds manageable? Wait and see.
In addition, there is compensation based on the so-called licence analogy. The idea behind this is that you pay what you would have paid if you had obtained the correct licence. The MFM table (Mittelstandsgemeinschaft Foto-Marketing) is often used as a basis for calculation. Standard compensation: 100 to 400 euros per image.
Still sounds manageable? Then take a look at the latest DPA warnings. The law firm KSP Rechtsanwälte regularly sends out letters of demand on behalf of DPA Picture-Alliance. Current cases from 2025: Up to €2,000 in damages per image. A total claim of over €11,000 was asserted for three photos on a Facebook page. A case involving four images ended up at €13,750.
The maths is simple: a single misused image can cost you a four-figure sum. Ten images? Five figures. And that's completely legal.
The reliable sources
Now for the solution. There are three ways to use images in a legally compliant manner:
Option 1: Free stock platforms. Unsplash, Pexels, Pixabay. These platforms offer images under free licences. But be careful: the licence terms differ. Unsplash allows commercial use without attribution. Pixabay has changed its licence terms several times. Always read the current terms directly on the platform.
Option 2: Paid stock agencies. Adobe Stock, Shutterstock, iStock. Here, you pay for clear, documented usage rights. The advantage: professional quality and clear licence documentation. The disadvantage: costs per image or subscription models.
Option 3: In-house production. If you take the photographs yourself or hire a photographer, you own the usage rights. If you hire a photographer, be sure to specify in writing which rights you are acquiring.
Comparison: Overview of image sources
| Source | Commercial | attribution | Costs |
|---|---|---|---|
| Unsplash | ✓ Yes | Not necessary | Free of charge |
| Pexels | ✓ Yes | Not necessary | Free of charge |
| Pixabay | ✓ Yes | Not necessary | Free of charge |
| Adobe Stock | ✓ Yes | Not necessary | Subscription / Single purchase |
| Shutterstock | ✓ Yes | Not necessary | Subscription / Single purchase |
The rule of thumb: Only CC0, CC BY and CC BY-SA are suitable for commercial websites. Anything with NC in the name? Effectively unsuitable for business websites. By definition, your business website is commercial.
Fonts: The underestimated stumbling block
Fonts are the poor relation of legal protection. Everyone talks about image rights, but hardly anyone talks about fonts. Yet this is a problem area that most website operators are completely unaware of. And no, it's not about copyright. It's about data protection.
The Google Fonts Drama
In 2022, the Munich Regional Court issued a ruling that triggered a wave of warnings. The crux of the matter: anyone who dynamically integrates Google Fonts transfers the IP address of the website visitor to Google in the United States. Without consent. This is a violation of the GDPR.
The court awarded the plaintiff €100 in damages. Sounds like peanuts? Resourceful warning letter senders have used the ruling to send out masses of demand letters. Thousands of website operators received mail.
Current status in 2025: The Federal Court of Justice has referred several questions to the European Court of Justice for clarification. The legal situation therefore remains unclear. At the same time, individual courts have ruled that mass warnings issued by automated web crawlers constitute an abuse of law in specific cases. The wave of warnings has lost momentum, but the fundamental problem remains.
The solution: Local integration
The problem is not Google Fonts itself. The problem is the dynamic integration, where your web server establishes a connection to Google's servers every time a page is accessed. The visitor's IP address is transmitted in the process.
The solution is very simple: download the fonts and host them on your own server. This is called local hosting or static integration. No connection to Google, no IP transfer, no GDPR problem.
How can you check whether your website loads Google Fonts remotely? Open the browser developer tools (F12 in Chrome), go to the „Network“ tab and reload the page. Look for connections to fonts.googleapis.com or fonts.gstatic.com. If you find any hits there, you have a problem.
Alternative: Use an online checker such as the Google Fonts Checker from eRecht24. Enter your URL and see immediately whether action is required.
Other fonts: Observe licences
One thing that is often forgotten: free does not mean licence-free. Many fonts are free for private use, but subject to a fee for commercial use. Web font licences differ from desktop licences. Just because you are allowed to install a font on your computer does not mean that you are allowed to use it on your website.
Check the licence terms for each font. Google Fonts allows commercial use. This may differ for other providers.
Music: GEMA, licences and the path to legally compliant sound systems
Background music on websites, jingles in podcasts, background music for promotional films. Music brings content to life. Music also makes content expensive. At least, if you're not careful.
GEMA: What is it anyway?
GEMA (Gesellschaft für musikalische Aufführungs- und mechanische Vervielfältigungsrechte, Society for Musical Performing and Mechanical Reproduction Rights) is not a public authority. It is an association. Its members are composers, lyricists and music publishers. GEMA represents their rights and collects fees for the use of their works.
When does GEMA apply? For any public or commercial use of music whose author is a GEMA member. Website? In many cases, GEMA. On hold music? GEMA. YouTube video? GEMA. Background music in a shop? GEMA.
GEMA carries out checks at events, in restaurants and on websites. Anyone who cannot produce a licence has to pay up, plus a surcharge.
GEMA-free music: The solution
GEMA-free means that the composer is not a member of GEMA or any other collecting society. GEMA cannot therefore charge any fees for this music.
But beware: GEMA-free does not mean free of charge. You still need a licence from the copyright holder. The difference is that you pay the provider once, rather than paying GEMA on an ongoing basis. And you don't have to fill out complicated usage reports.
In the event of a GEMA inspection, you must be able to prove that your music is GEMA-free. Reputable providers supply an exemption document that you can present during inspections.
Well-known providers of GEMA-free music: Audiohub, TerraSound, Frametraxx, Musicfox, Proud Music Library. Prices typically range between £20 and £100 per track, depending on the scope of the licence.
Comparison: GEMA-liable vs. GEMA-free
| Criterion | subject to GEMA fees | GEMA-free |
|---|---|---|
| Costs | Ongoing (annually) | Once per track |
| administrative burden | High (reporting requirements) | Low |
| Proof during inspection | GEMA licence agreement | exemption document |
| music selection | Huge (charts, classics) | Good (Production Music) |
YouTube, podcast, website
With YouTube, another factor comes into play: Content ID. The system automatically recognises protected music. The result: your video is monetised (for the copyright holder), blocked or the audio track is muted. Even with GEMA-free music, you can still receive Content ID claims if the provider has registered their tracks there. Reputable providers refrain from doing so or give you the opportunity to contest claims.
For podcasts and websites, keep the licence confirmation. If you get any questions, you can show that you're using the music legally.
Creative Commons: The Swiss Army knife of licences
Creative Commons (CC) is a licensing system that mediates between „all rights reserved“ and „everything permitted“. Authors can specify the conditions under which their work may be used. The problem is that the various CC licences differ considerably. Anyone who does not understand the abbreviations can easily fall into a trap.
The building blocks explained
BY (Attribution/Crediting): You must name the author. This component is included in almost all CC licences.
SA (Share Alike): If you edit and redistribute the work, you must use the same licence.
NC (Non-Commercial): No commercial use permitted. That's the killer for business websites.
ND (No Derivatives): No editing permitted. You may only use the work in its unaltered form.
CC0 (Public Domain): The author waives all rights. You may use, edit, and commercially exploit the work without asking anyone or naming anyone.
A quick overview of the six CC licences
| licence | Commercial | Edit | attribution |
|---|---|---|---|
| CC0 | ✓ | ✓ | No |
| CC BY | ✓ | ✓ | Yes |
| CC BY-SA | ✓ | ✓ (same licence) | Yes |
| CC BY-NC | ✗ | ✓ | Yes |
| CC BY-ND | ✓ | ✗ | Yes |
| CC BY-NC-SA | ✗ | ✓ (same licence) | Yes |
| CC BY-NC-ND | ✗ | ✗ | Yes |
The rule of thumb: Only CC0, CC BY and CC BY-SA are suitable for commercial websites. Anything with NC in the name? Effectively unsuitable for business websites. By definition, your business website is commercial.
The worst case scenario: receiving a warning letter
Okay, the registered letter is on the table. Now we need to take a systematic approach. Don't panic, but don't ignore it either.
Step 1: Note the deadline. Most warnings set a deadline of one to two weeks. Enter the date in your calendar immediately.
Step 2: Do NOT sign the cease-and-desist declaration immediately. The pre-formulated declaration is often too broad. Anyone who signs it blindly may be committing to more than is legally necessary. A modified cease-and-desist declaration is almost always more sensible.
Step 3: Rectify the violation. Remove the image, music or font in question from your website immediately. This shows good faith and prevents further damage.
Step 4: Consult a specialist solicitor. A copyright lawyer can review the claim, identify excessive amounts and prepare the appropriate response. The cost of an initial consultation is usually reasonable.
Step 5: Recognise fake warnings. Does the letter come from a freemail address? Is there no real law firm address? Is no specific legal violation mentioned? Then it could be an attempt at fraud. Nevertheless, if in doubt, have it checked by a solicitor.
The checklist: securing media use in 5 steps
Legal certainty is routine, not rocket science. With these five steps, you can cover 95% of the risks:
- Check licence. Before using an image, font or song, clarify: What am I allowed to do? Commercial use? Editing? Attribution required?
- Document licence. Screenshot of the licence page, proof of purchase, exemption document. Save everything in a folder. Don't forget the date.
- Include the author's name correctly. If the licence requires attribution, make it visible. In the imprint, under the image, in the credits.
- Integrate Google Fonts locally. Check your website for external font calls and switch to local hosting.
- Conduct regular media audits. Once a year, review all media used. Are the licences still valid? Have the terms and conditions changed?
Conclusion: Legal certainty is achievable
The fear of warnings is understandable. The amounts involved can threaten your livelihood. But with the right system, the risk is manageable.
Use documented sources for images. Integrate fonts locally. Use GEMA-free music with a proper licence. Understand what CC licences mean. And if you do receive a letter, stay calm, call your solicitor and proceed systematically.
The nice thing about this topic is that the solution is not complicated. It just requires care and a little bit of documentation. You can get used to both of these things. And then going to the post box will once again become what it should be: boring.
Your next step? Open your browser's developer tools and check whether your website is still loading Google Fonts from external servers. It takes two minutes and is a good place to start.
—
This article was created to the best of our knowledge and was last updated in December 2025. Legal situations may change. For specific legal questions, please consult a specialist solicitor.
