Actively Collecting More Google Reviews – Legally Compliant
NFC cards and email follow-ups deliver the highest conversions – 8–15% and 12–22% respectively, depending on industry and timing. Incentives (discounts, vouchers) are liable to cease-and-desist (Abmahnung) action in 2026 – § 5a UWG has applied since May 2022, and Google can permanently restrict your profile for violations. GDPR obligation: every email or SMS request requires documented consent – no double opt-in, no sending. More reviews alone are not enough – anyone who doesn't respond loses the trust advantage despite a high star rating. The biggest lever: consistency beats spontaneity. Businesses that attach a review request to every completed transaction collect 3–5× more reviews than those who ask sporadically.
Markus runs a fitness studio in Stuttgart-Vaihingen. 1,200 active members, solid operation, 4.3 stars. The problem: the direct competitor two streets away has 312 reviews, 4.6 stars – and consistently appears ahead of him in the Local Pack. Markus had 87 reviews. Not because his members were dissatisfied. Simply because he had never asked systematically.
He changed that. Not with discounts, not with prize draws. With an NFC stand at the reception desk, a three-line email after the first month and a verbal request at the annual conversation. Nine months later: 214 reviews, 4.5 stars.
What he *did not* do is at least as important – more on that shortly.
Why actively collecting reviews in 2026 looks different from 2018
In 2018, a sign saying "Rate us on Google!" was enough. Not any more.
Google analyses acquisition patterns algorithmically. Review spikes – a sudden accumulation of 5-star reviews without an organic trigger – are detected and can lead to the removal of entire batches of reviews. Not individual entries. Entire batches. This is observable in the data dashboard every week.
On top of that, there is § 5a UWG of the German Act Against Unfair Competition (UWG), tightened since May 2022. Anyone who asks customers for a review in exchange for a benefit (discount, free add-on, prize draw entry) without transparently disclosing this is engaging in an unfair commercial practice. Cease-and-desist lawyers have had this topic firmly in their sights since 2023.
And then there is the GDPR. Every unsolicited review request by email or SMS constitutes direct marketing within the meaning of Art. 6(1)(f) GDPR – legally precarious without documented consent or a clear transactional connection. The German Association for the Digital Economy (BVDW) has explicitly recommended the double opt-in procedure for review requests since 2024.
In short: the rules have tightened. Anyone who ignores this risks more than just missing out on reviews.
The 7 acquisition channels compared
Not every channel works the same for every industry. Here are the conversion ranges from practice – measured as completed submissions, i.e. review page visited vs. review actually left.
1. QR stand at reception – conversion 5–12%
Cheap, always present, no staff effort. The QR code leads directly to the review page of the Google Business Profile – the link can be generated in the GBP dashboard under "Share". Placement is decisive: checkout counter and waiting areas beat shop windows by a factor of 3.
2. NFC card on the counter – conversion 8–15%
Tapping with a smartphone is the lowest-threshold moment there is. No QR scan, no typing. NFC cards cost between €15 and €40 each – once. Something we keep seeing: businesses that actively hand the card over and briefly explain it achieve the upper conversion limit. Those that leave it sitting silently on the counter land at the bottom.
3. Email follow-up after job completion – conversion 12–22%
The strongest scalable channel – when it is legally sound. Timing is crucial: 24–48 hours after completion, not immediately, not after a week. Consent must be documented at the time of the contract. A complete template is provided further below.
4. SMS reminder – conversion 18–28%, GDPR sensitive
The highest open rate of all channels. But: SMS advertising without explicit consent is unlawful in Germany – full stop. Anyone who wants to use this channel needs clean opt-in documentation in the CRM that can be demonstrated in a dispute. Without it: stay away.
5. Verbal request when saying goodbye – conversion 5–10%
Underestimated. Especially in industries with personal contact – medical practices, hair salons, trades. The request must be brief and deliver a direct link route (NFC card, QR card). Purely verbal without a technical bridge: almost no conversion.
6. Invoice note (print) – conversion 3–7%
One sentence on the invoice or delivery note. Low effort, low conversion – but zero additional cost. Worth it as a baseline measure, but does not replace an active request.
7. Social embed – conversion 2–5%
Google review widget on your own website or an Instagram post with a review link. Organic reach is limited but trust-building. More suited to long-term brand building than rapid volume.
Build your review profile and keep weak entries in view – the Sternehero review analysis tool shows you where you stand today.
What UWG + GDPR require in 2026
Plain talk: most businesses have at least one error in their system here.
Real customers, not employees
Employee reviews are a direct violation of Google's content policies – and algorithmically detectable, because IP clusters and location data are evaluated.
No incentives
No discount, no coffee, no prize draw. § 5a UWG of the German Act Against Unfair Competition (UWG) is unambiguous. Anyone who offers a benefit without the required disclosure is engaging in an unfair commercial practice. Anyone who does disclose it makes the review worthless – because every reader sees the conflict of interest.
Double opt-in for email and SMS
Consent must be documented, given voluntarily and relate to direct marketing. Entering into a contract alone is not sufficient.
"Please leave an honest review."
Not "If you were satisfied, give us 5 stars." No pre-selection – meaning no systems that divert dissatisfied customers internally and direct only satisfied ones externally. That is review manipulation and is now explicitly addressed in Google's policies.
Which reviews you should NEVER solicit
The anti-patterns are just as important as best practice.
"Review us and get 10% off your next purchase."
Classic, widespread, liable to cease-and-desist (Abmahnung). § 5a UWG, no grey area.
Review exchange with a partner business
"You review my café, I review your studio." Sounds harmless. It isn't. Google recognises patterns via IP, device and review history. Such clusters are removed – and sometimes the entire profile suffers the consequences.
Internal funnels that direct only satisfied customers outward
Formerly known as "gating", explicitly against Google's policies since 2018. In brief: if a system routes dissatisfied customers to an internal form and satisfied ones to Google, that is manipulation – regardless of how elegant the UX is.
Anyone relying on such mechanisms today will sooner or later be penalised by Google's algorithm. That is not speculation, that is practice.
Email template: GDPR-compliant, ready to use
This template assumes that consent to marketing contact was documented at the time of the contract.
Subject: Quick question about your visit to [Business name]
Dear [First name], thank you for your visit / your order – we hope everything met your expectations. If you have a moment: an honest Google review helps us and other prospective customers. Positive or critical – your opinion counts. → Go directly to the review: [your-Google-review-link]. Kind regards, [Name], [Business name]. Note at the end: "You are receiving this message because you agreed to being contacted when entering into the contract. Unsubscribe: [Unsubscribe link]"
Three things this template deliberately does not include: a star suggestion, an incentive, a wording prompt. That is exactly what makes it legally sound.
Reactive beats active: why response rate is the more important metric
Anyone with 200 reviews who responds to none of them loses the trust advantage over a competitor with 80 reviews and a 95% response rate. That is not a gut feeling – the BrightLocal Local Consumer Review Survey 2024 shows that 88% of consumers prefer businesses that actively respond to reviews.
A response to a 3-star critique is often more valuable than ten new 5-star entries. Because potential customers read exactly these responses. Something we keep seeing: businesses that respond professionally to critical reviews report fewer subsequent critiques – because the public response signals the trust that a star count alone cannot.
How to scale responses without spending hours crafting wording is covered in the guide to responding to Google reviews correctly. For practical implementation, Sternehero offers the AI reply generator – tone-consistent responses in seconds, GDPR-compliant, hosted on German servers.
Scale responses without losing quality – try the AI reply generator.
Use case: restaurant in Bremen-Findorff – 47 to 156 reviews in 9 months
An Italian restaurant in Bremen-Findorff, 45 seats, lunch menu plus evening à la carte. Starting position March 2024: 47 reviews, 4.1 stars, no system.
Measures taken: NFC card at the till (introduced April 2024), invoice QR code (May), email follow-up for reservations via the booking system with double opt-in (June). No incentives, no agency engagement.
Result December 2024: 156 reviews, 4.4 stars. The single biggest driver was the email follow-up after online reservations – conversion there: 17%. The NFC card alone brought in 31 reviews from regulars who never book online.
Something else happened: the restaurant appeared in the Local Pack for "Italian restaurant Bremen" for the first time consistently – previously never in the top 3. The owner attributes this to the combination of review volume, improved star rating and a consistent response rate (100% of all reviews answered).
Anyone who consistently optimises their Google Business Profile and systematically collects reviews sees this effect regularly – because review volume and recency are direct ranking signals in Local SEO. More on this in the piece on Google reviews and Local SEO.
Detailed answers to frequently asked questions about review strategy can be found in the Sternehero FAQ.
Conclusion
Getting more Google reviews is not a matter of luck – it is a process. Anyone who connects every customer contact with a clean, legally sound channel collects continuously. Anyone who asks sporadically or relies on incentives risks cease-and-desist actions, algorithm penalties and ultimately a suspended profile.
The real problem is not a lack of review volume. It is a lack of system. And that costs visibility in the Local Pack – and therefore revenue – every single day.
Sternehero helps you report unlawful reviews and keep your profile clean: GDPR-compliant, on German servers, with real-time tracking for every submitted report. Anyone who actively collects and at the same time consistently reports manipulated or non-compliant entries maintains the quality of their profile over the long term – without grey areas.
Protect your profile, keep reviews in view – Start for free now.
Sternehero is a software tool and does not provide legal services within the meaning of the German Legal Services Act (RDG). No legal review of individual reviews or review strategies takes place. Responsibility for compliance with the German Act Against Unfair Competition (UWG), the GDPR and other legal requirements lies with the user. The decision to remove or retain a review rests solely with the respective platform. For legal questions we recommend consulting a specialist lawyer.
