Data privacy and data protection in Austria

DORDA Rechtsanwälte GmbH

DORDA Rechtsanwälte GmbH continues to lead the way in Austrian data protection, handling large GDPR implementation projects as well as various proceedings with the Austrian Data Protection Authority, including leading cases brought by the non-profit association NOYB. Lawyers also act as external data protection officers. Increasingly the team supports clients with data breaches or ransomware attacks and is expanding its expertise in innovative technology with associate Alexandra Ciarnau in a key role. Managing partner Axel Anderl, ‘sets the tone with smart, sophisticated leadership’ while Nino Tlapak, promoted to partner in February 2021, is ‘deeply experienced with privacy and cybersecurity issues particular to technology clients.’

Practice head(s):

Axel Anderl; Nino Tlapak

Other key lawyers:

Alexandra Ciarnau


‘DORDA’s ability to consistently provide thoughtful, pragmatic, and business-minded privacy and cybersecurity counsel is rare and refreshing. They have a nuanced understanding of privacy concerns and business needs of technology clients, and their expertise in the space shines through.’

‘DORDA has a deep bench, and from practice and firm leadership through the associate ranks, the DORDA team not only brings subject matter expertise, but transparency and pragmatism to their analysis.’

‘Axel Anderel – sets the tone with smart, sophisticated leadership and empowers his eminently capable team to provide cutting edge counsel.’

‘Nino Tlapak – thoughtful, methodical, efficient, deeply experienced with privacy and cybersecurity issues particular to technology clients. Also a genuinely wonderful person and an absolute pleasure to work with.’

‘Alexandra Ciarnau – a rising star. Sharp as a tack, confident, detail oriented, and demonstrates consistent focus on achieving outcomes well tailored to a particular client’s business objectives.’

‘Particularly I enjoyed working with Axel Anderl, Alexandra Ciarnau and Nino Tlapak. They are always very helpful, have a quick response time and their legal expertise is excellent.’

‘The proactive approach of the practice is outstanding and ensures legal stability for our business as we are standing at the very frontline of GDPR and real estate data. Working together with Dorda is a pleasure at all times and I consider it as one of our most effective collaborations.’

‘The team has a very good, uniform appearance and you always feel well supported – even if someone else spontaneously steps in for the main contact person. Due to the size and quality of the team, a quick response is also ensured in urgent cases. They don’t just point out problems, but really try to find solutions that are as practical as possible.’

Key clients


Styria Media Group

“Die Presse” Verlags-Gesellschaft m.b.H. Co KG

Otto Immobilien

VIG – Vienna Insurance Group


L’Oréal Österreich GmbH

METRO Cash & Carry Österreich GmbH



Erste Bank

S IT Solutions AT Spardat GmbH

Erste Group

ZKW Group

Kommunalkredit Austria AG

Novartis Pharma Austria

bioMérieux Austria GmbH

A. Menarini Pharma GmbH

Bayer Austria GmbH

Erste Digital GmbH


Styria Media Group

“Die Presse” Verlags-Gesellschaft m.b.H. Co KG

Otto Immobilien

VIG – Vienna Insurance Group


L’Oréal Österreich GmbH

METRO Cash & Carry Österreich GmbH



Erste Bank

S IT Solutions AT Spardat GmbH

Erste Group

ZKW Group

Kommunalkredit Austria AG

Novartis Pharma Austria

bioMérieux Austria GmbH

A. Menarini Pharma GmbH

Bayer Austria GmbH

Erste Digital GmbH

Work highlights

  • Representing a client inter alia in the model proceedings led by the Austrian Data Protection Authority-the Austrian data privacy NGO NOYB, led by Max Schrems, is enforcing the Schrems II decision by the ECJ by initiating 101 proceedings with data protection authorities throughout Europe.
  • Advised Erste Group (Erste Bank, s IT Solutions AT Spardat, Erste Group IT, Erste Digital GmbH) on several group wide cloud and outsourcing projects with a strong focus on international data transfer and CEE.
  • Increasingly engaged by different clients in connection with cybercrime attacks with regard to steering the decision making process based on assessment of all relevant legal matters – insurance coverage, GDPR notification duties, criminal law, liability issues and regulatory law.

Baker McKenzie Rechtsanwälte LLP & Co KG

The practice at Baker McKenzie Rechtsanwälte LLP & Co KG acts for a client list which includes global players in the technology, social media, telecoms and consumer goods sectors in contentious and non-contentious matters. Lukas Feiler leads the practice, drawing on expertise in data disputes and contentious data protection. He handles a range of high-profile litigation matters, regularly defending clients in court and before the Austrian data protection authorities and is known for co-authoring an Austrian commentary on the EU GDPR. Counsel Maximilian Raschofer joined the team from UNIQUA insurance group in May 2021.

Practice head(s):

Lukas Feiler

Other key lawyers:

Maximilian Raschofer


‘People with excellent legal education, deep technology knowledge, deep collaboration skills and fair billing.’

‘Lukas Feiler is a true expert in the field of data privacy and IP and does not only provide an outstanding legal advice, but also practical and risk based advice an international enterprise needs in practice these days. Also, he is always looking beyond Austrian borders making the legal advice even more valuable. In addition, he has deep knowledge in technology and IT, making the legal advice unique on the Austrian market.’

‘We recommend BM’s data protection practice, because they are not only experts in this field, but also understand how to provide clients with fitting solutions and how to make projects work (instead of only telling clients what is not possible).’

‘Our main contact is Lukas Feiler, who is one of Austria’s leading experts in the field of data protection law and has a great reputation and media presence (interviews, commentaries, articles etc.). He is a very thorough attorney, who is great at finding creative arguments and solutions and has a very deep understanding of data protection law.’

‘Leaders in many markets in their area of practice, great international network.’

‘Focussed on practical solutions, big picture, solution orientated.’

Key clients

STANDARD Verlagsgesellschaft m.b.H.


The boutique law firm GEISTWERT covers a broad range of data privacy and data protection issues, ‘pairing legal expertise with a hands-on approach.’ Juliane Messner, Max Mosing, Alexander Schnider, Rainer Schultes and Constantin Kletzer are the practice heads. The team supports clients with GDPR implementation or represents them in proceedings before the data protection authority and in court. The firm employs various legal tech innovations, such as a web-based data-protection-research and management-tool. Messner stands out as ‘an excellent data privacy and data protection lawyer’ together with Mosing a CIS – Certified Data Privacy Officer.


‘Geistwerts team is pairing legal expertise with a hands-on approach, leaving unnecessary formalities aside and immediately focusing on the relevant parts’

‘Juliane Messner and Max Mosing both convinced us with their expertise and their focus on relevant matters.’

‘The team is uniquely good professionally. The partners are very sociable and work hand in hand. You always get feedback quickly and the requirements of the business are also taken into account.’

‘Juliane is an excellent Data privacy and data protection lawyer. She is a lecturer at the university for data protection law, which shows her deep knowledge and understanding of the matter. You can feel in every project that she loves her work and puts herself into every project to find the best solution for the client. It is of enormous importance that she does not simply say “no, that won’t work”, but points out risks and is always on the lookout for a creative solution. She can work extremely well in a team and is therefore also able to handle large international projects.’

‘GEISTWERT‘s partners have been the leading data privacy and data protection practitioners in Austria for decades – long before the GDPR has come into force. So they know more about data protection law and it‘s practical implementation than most of the other lawyers in Austria, especially those who started to come into business due to the GDPR.’

‘Juliane Messner and Max Mosing are the shining stars on the Austrian data protection sky. They have amazing knowledge, full business understanding and what you need to implement data protection: the are team players and can bring together law, business and technology.’

Key clients

Red Bull / Red Bull Media House

Vienna Tourist Board (WienTourismus)

LTS – South Tyrol Association of Tourism Organisations


Altstoff Recycling Austria AG (ARA) and Saubermacher AG


Life Brain




Work highlights

  • Advised a major internet company in connection with the launch of its international video-/computer-gaming platform in Austria.
  • Representing Red Bull Media House in all media, IT and IP related matters, especially trademark and copyright questions (TV and print) and regarding launches of new services.
  • Advised two major motorsport racing teams in connection with the issuing of non-fungible tokens (“NFTs”).

Knyrim Trieb Rechtsanwälte OG

Data protection and IT law boutique Knyrim Trieb Rechtsanwälte OG has a broad base of clients from the pharmaceutical, energy, steel, fibre and plastics industries through to consumer goods manufacturers and new technology developers. The practice provides high quality data protection advice, particularly on GDPR compliance but also surrounding the development and usage of new technologies. Founded in 2017, the practice is co-led by 20-year industry veteran Rainer Knyrim, who is praised for his 'enormous knowledge and experience', and EuroPriSe expert and 'very good IT lawyer' Gerald Trieb.

Practice head(s):

Rainer Knyrim; Gerald Trieb


‘The law firm has many years of experience in the field of data protection. They answer quickly and professionally and the answers are always well argued.’

‘In order to solve questions in accordance with data protection we worked together with Dr. Knyrim. We were very pleased to work together with him because he always worked very quick und tried to find solutions for our data protection topics.’

‘We appreciate that Dr. Knyrim can adapt his broad expertise to customer-friendly explanations with the necessary patience and a highly efficient communication basis.’

‘Let me point out: I do not know any other firm which has such a deep knowledge in GDPR in the electricity sector.’

‘Gerald Trieb is reachable whenever needed and the competent answers are on my desktop as fast as I could wish.’

‘Great expertise, fast answers and creative solutions.’

‘Mr. Knyrim and Mr. Trieb are easy going, excellent attorneys and very client oriented.’

‘Dr. Knyrim is the leading data protection lawyer in Austria. He has an enormous knowledge and experience, is very friendly and advises excellently. Dr. Trieb is a very good IT lawyer who has repeatedly helped us in IT contract negotiations.’

Key clients

KTM Innovation GmbH

Wienerberger AG

REWE International, Unser Ö-Bonus Club GmbH

Austrian Association of Electricity Companies (Österreichs Energie)

Lenzing AG

KIA AUSTRIA Gesellschaft m.b.H.

Boehringer Ingelheim RCV GmbH & Co KG

Immofinanz AG


DSGVO Datenschutz Ziviltechniker GmbH

Otto Bock Healthcare Products GmbH

Stadtwerke Kitzbühel e.U.

MANZ´sche Verlags- und Universitätsbuchhandlung GmbH

European Crohn´s and Colitis Organisation – ECCO

Energie Steiermark AG

Greiner AG

Wiener Netze GmbH

Work highlights

  • Advised KTM Innovation on the data protection aspects of the future KTM Riding App, acted as External Data Protection Officer and advised on the possibilities to use motorcycle user data for various future connected vehicle use cases under current and future data protection, telecoms and ePrivacy regulations.
  • Acting for Austrian Association of Electricity Companies (Österreichs Energie) as external legal advisor for all questions of the Austrian energy industry concerning data protection and e-privacy as well as cloud services.

Schoenherr (Schönherr Rechtsanwälte)

The practice at Schoenherr (Schönherr Rechtsanwälte) draws on a strong history of expertise in data protection and data privacy. The team stands out for its high-profile contentious work in landmark proceedings at the heart of GDPR development in Austria. The group also advises clients, acts as outsourced data protection officers, supports clients with the development of enhanced data exploitation products as well as in data breach situations. Günther Leissler is at the head of the practice, supported by counsel Veronika Wolfbauer, who specialises in new technology aspects of data protection, such as near field technology.

Practice head(s):

Günther Leissler

Other key lawyers:

Veronika Wolfbauer


‘Highly ambitious, very much to the point.’

‘Guenter Leissler is a brilliant expert in data protection law with many innovative ideas.’

Key clients


Österreichische Post AG

Vienna Insurance Group (VIG)

Austrian Insurance Association

Raiffeisenlandesbank Oberösterreich

HDI Insurance Company

Verkehrsverbund Ost Region

ORF (Austrian Broadcasting Association)

Voest Alpine Group

Novomatic Group of Companies

Admiral Sportwetten

Roche Diabetes Care Austria Gmbh

COVID-19 — Finanzierungsagentur des Bundes GmbH

Work highlights

  • Representing Facebook in the highly publicised data protection proceedings against claims filed by data protection activist Maximilian Schrems.
  • Represented Österreichische Post AG in criminal administrative proceedings under GDPR, resulting in the reversal of the highest ever imposed fine under administrative criminal law.
  • Advised Novomatic regarding a request aimed at the disclosure of Novomatic employee data by the parliamentarian fact-finding committee established in connection with the “Ibiza Affair”.

Wolf Theiss

The team at Wolf Theiss provides a range of advice from compliance issues to data breach responses and has developed a strong contentious practice, representing clients in a significant number of litigation cases, some of which have gone before the CJEU. The team also offers certification of IT products and IT-based services under the EuroPriSe privacy seal. Roland Marko is at the helm, he is experienced in defending clients against damage claims, in proceedings before Austrian Data Protection Authority and at court with the support of counsel Paulina Pomorski .

Practice head(s):

Roland Marko

Other key lawyers:

Paulina Pomorski

Key clients

Austrian Post




Bank 99

Peek & Cloppenburg

Austrian Post




Bank 99

Peek & Cloppenburg

Work highlights

  • Defending Austrian Post against the first-ever series of claims in the country, where a larger number of people (allegedly) affected by data protection violations are suing for damages, pending before CJEU.
  • Advising Peek & Cloppenburg on data protection and consumer protection aspects of its new loyalty programme.
  • Acting as external Data Protection Officer for multiple clients, including Scanpoint, Austrian Post, Lifebrain and Bank 99.

Cerha Hempel

Cerha Hempel acts for a diverse set of clients from the energy, retail, IT and transport sectors as well as public clients. The team provides advice ranging from complex IT outsourcing projects, cloud computing solutions and international data transfers to the implementation of the directive on security of network and information systems. EU-regulatory expert Hans Kristoferitsch heads up the practice, he is supported by several associates including Franziska Paefgen, who contributes broad expertise in GDPR compliance, and Armin Schwabl, who is admitted to the bar both in Austria and New York.

Practice head(s):

Hans Kristoferitsch

Other key lawyers:

Franziska Paefgen; Armin Schwabl


‘The firm firm stands out with its high quality.’

‘Dr. Kristoferitsch is among the best data protection lawyers because he also brings a lot of practical experience.’

‘Excellent expertise in data protection law and excellent service also with regard to strategical issues’

‘The firm delivers high quality output which is understood by lawyers AND management.’

‘In addition to Hans Kristoferitsch’s legal knowledge, he knows how and when to give credit to the inhouse lawyers.’

Key clients

AT & T

Autobahnen- und Schnellstraßen- Finanzierungs-Aktiengesellschaft (ASFINAG)

CA Immobilien Anlagen AG

Carpacity GmbH

Flughafen Wien AG

Fundermax GmbH

Hewlett Packard Inc

Institute of Science and Technology Austria (IST Austria)

Isovolta AG

NTS Netzwerk Telekom Service AG

OMV Aktiengesellschaft

Samsung Electronics Austria GmbH

Semperit Aktiengesellschaft Holding

SES Spar European Shopping Centers GMBH

SPAR Business Services GmbH

SPAR Österreichische Warenhandels-AG

Via donau – Österreichische Wasserstraßen GmbH

web eXXpress Medien Holding GmbH


Wiener Stadtwerke GmbH including its subsidiaries

WienIT GmbH

Wiener Netze GmbH

Österreichischen Fonds zur Dokumentation von religiös motiviertem politischen Extremismus (Dokumentationsstelle Politischer Islam)

ÖRAG Immobilien Vermittlung GmbH

Work highlights

  • Advising SPAR on all data protection and IT matters, for example in negotiations with large IT-providers, online marketing and communication with data subjects both to the legal department as well as to SPAR’s IT-subsidiary SBS.
  • Advising the Austrian Bundesland (federal province) Vorarlberg in connection with all privacy aspects of the procurement, negotiation and implementation of a unified communication infrastructure allowing for an integrated up-to-date communication between citizens and government.
  • Advising Wiener Stadtwerke GmbH and its subsidiaries on privacy related issues, in particular on the implementation of a group-wide login system and projects on data exchange between the group companies.

CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH

The practice at CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH offers its clients a range of support, advising on regulatory compliance and risk mitigation. The team’s expertise also covers data subject complaints, regulatory investigations and cyber incident responses. Of note is CMS Breach Assistant, a legal tech tool that guides clients in case of a data breach. Managing partner Johannes Juranek  has in-depth expertise in GDPR implementation while senior associate Johannes Scharf contributes a solid technical background and associate Klaus Pateter specialises in tech start-ups.

Practice head(s):

Johannes Juranek

Other key lawyers:

Johannes Scharf; Klaus Pateter

Key clients


Universal Edition AG

Bolttech Device Protection and Bolttech Digital Insurance

Reactive Reality



Sberbank Europe AG








Work highlights

  • Advising Sberbank Europe AG on various data protection issues and IT law.
  • Advising Austrian start-up Reactive Reality on the assessment of options for processing and monetising big data, drafting of privacy policies and data processing agreements.
  • Advising REWE Group (Unser Ö-Bonus Club GmbH (jö Club)) on the implementation of payment functionalities within the application of the client’s card-based loyalty programme, which involves Artificial Intelligence and tracking customer behaviour.

E+H Rechtsanwälte GmbH

E+H Rechtsanwälte GmbH is praised for its ‘high expertise in IT and data protection issues’ and acts for a diverse and international client list that includes several big names in the automotive industry. The team advises clients on compliance, provides legal opinions and supports them with transactions, in particular asset deals. Andreas Zellhofer is at the helm and Helmut Liebel contributes a background in computer science.

Practice head(s):

Andreas Zellhofer

Other key lawyers:

Helmut Liebel


Dr Helmut Liebel is an expert in data protection law who knows the legal situation very well and acts in a solution-oriented manner.’

‘The Data protection practice of EH stands out for its dedication to precise and thorough analysis without losing sight of the big picture. Whenever we sought advice of their experts, we received not only quick and concise solutions to our initial problems, but also practical guidance to help us in our future developments. With their help we were able to successfully execute a complex IT-project without exposing us to unnecessary risks or liabilities.’

‘Helmut Liebel delivers a unique approach to consulting that we have yet to experience in our many years of market participation. Liebel’s business-orientated solutions together with his keen eyes and sharp mind solve even the most difficult problems. This skill set never failed to scale all challenges with ease and they have proven to be an indispensable business asset for our company.’

‘EH provides excellent legal advice and can support in a wide range of consulting services. Additionally we benefit from a detailed knowledge in the automotive sector.’

‘The team of EH acts in a very professional manner. They always respond in time and address all open topics and raised questions. The legal advice is very useful for management reports and includes management summaries; on the other side the legal advice is structured and includes country specific legislation (e.g. for data protection).’

‘For data protection issues, we regularly work with Andreas Zellhofer and Helmut Liebel. Both are highly professional, dedicated, and service-oriented. I have not yet seen any other firm with such a client focus and passion.’

‘Beyond his rock solid knowledge of the law, Helmut has, due to his technical background, a wide scope of technical insight, which surely explains his rapid career ascent to data protection law expert. He always breaks down complicated aspects in a very straightforward manner.’

Key clients




Toyota Austria

Toyota Kreditbank

Toyota Motor Insurance


Allianz Capital Partners


Work highlights

  • Acting as preferred local counsel for the entire Microsoft Group, regularly advising Microsoft Corporation, Microsoft Ireland, and Microsoft Austria on their most sensitive matters, as well as on the roll-out of its “Office 365” cloud computing services to numerous Austrian key customers.
  • Advised SAP, the publicly listed software group, on the acquisition of Emarsys, a leading cloud-based provider of omnichannel customer-loyalty platforms, the data protection team analysed the data protection framework governing the cloud economy of Emarsys.
  • Advised Canva on the acquisition of the Austrian start-up Kaleido, which has developed an AI-based software that enables the removal of background from an image or video (and e.g. the insertion of an artificial background).

Herbst Kinsky Rechtsanwalte GmbH

With a focus on GDPR implementation and compliance Herbst Kinsky Rechtsanwalte GmbH is a strong player in the Austrian start-up scene, assisting clients in IT and life science sectors in particular. Increasingly the team handles the data protection aspects of M&A transactions. Sonja Hebenstreit is at the helm and is able to act as an external data protection officer.

Practice head(s):

Sonja Hebenstreit


‘Dynamic team that always strives to provide practical solutions.’

‘Dr. Sonja Hebenstreit provides clear answers to questions.’

Key clients



Stanton Chase


Speedinvest GmbH

Probando GmbH

Donhauser GmbH /Vapiano


UET United Electronic Technology AG


Work highlights

  • Advising CIRSE and its various entities on their GDPR implementation and compliance processes regarding their different fields of activity, namely in particular, congress organisation and research (including clinical and education) and further serves as external Data Protection Officer.
  • Providing comprehensive day-to-day advice to Borealis AG and its Austrian entities in GDPR compliance questions, including regarding the continuous update of the data processing register, questions about internal policies and information rights and assistance with the drafting and review of data processing and joint controllership agreements.
  • Advised UET United Electronic Technology AG in the context of establishing its terms of use, privacy policy and specific data protection questions in the context of the launch of its application Sectrace.

Jank Weiler Operenyi

Sascha Jung leads the data protection and data privacy practice at Jank Weiler Operenyi. The firm joined Deloitte Legal in 2017 and so can draw on its international network. The team advises on a broad range of topics, including GDPR implementation, BCR matters and banking, international data flow as well as HR matters with particular sector strengths in the finance and real estate sectors.

Practice head(s):

Sascha Jung


‘We treasure the firm’s attitude to meet and even succeed our expectations. Two aspects are worth to mention: their responsiveness and their ability to communicate complex issues in an easy-to-understand way.’

‘From my perspective the data privacy and data protection practice of Jank Weiler Operenyi is unique as it combines extensive legal knowledge with excellent IT/technical knowledge/skills. Although Jank Weiler Operenyi’s data privacy and data protection team itself has vast IT/technical skills/knowledge, when necessary, they can provide a one stop shop with IT and forensic teams from Deloitte and thus can provide even better and more comprehensive advice in data and privacy matters. I have not experienced such combined services on such a high level from any other law firm.’

‘Jank Weiler Operenyi’s privacy team together with Sage, one of the worldwide leading HR-software providers, developed a whistleblowing tool that combines online report possibilities together with personal acceptance/advise which is unique. This tool is now being used by a number of companies and also by Deloitte itself.’

‘Sascha Jung, the leading partner of Jank Weiler Operenyi for data privacy and data protection, is definitely one of the leading data/privacy protection lawyers in Austria with particular knowledge in complex international data protection matters.’

‘Sascha Jung has in depth knowledge of all relevant topics which is very helpful to see the big picture! He is very diligent and trustworthy and I have only the very best experience with him!’

‘Sascha Jung is pragmatic, has extensive knowledge and reputation and tremendous reaction times, he is definitely one of the market leaders in the privacy field. Randolph Schwab has exceptional technical skills and a deep GDPR understanding. The privacy team of Jank Weiler Operenyi / Deloitte Legal provides high-end legal advice in privacy matters.’

‘Sascha Jung and his team are in the unique position to refer to Deloitte colleagues for technical/processual matters and to Deloitte Legal colleagues from all over the world which allows us to work also in cross-border cases with a single point of contact in Vienna.’

‘Sascha Jung is definitely among the top privacy lawyers in Austria.’

Key clients

CHANEL Austria

Erste Bank

Kapsch Partner Solutions GmbH

NTT Austria

Otto Bock Austria

Liechtensteinische Landesbank

Shark Nina

Data.4immo GmbH

Wein & Co


Marina Tower GmbH

BUWOG Group GmbH

PUIG Österreich GmbH

PUIG Deutschland GmbH

PUIG Suisse SA

Antonio PUIG SA

PUIG France SA

Deloitte Austria

X4 Pharmaceuticals (Austria) GmbH


Österreichischer Bundesverband für Psychotherapie


Work highlights

  • Advising BUWOG GROUP GmbH on all data protection relevant issues and assisting in IT driven implementation projects (also as part of the integration of BUWOG into the German VONOVIA group of companies, which in the meantime is the largest listed German real estate companies) and acting as external data protection officer.
  • Supported NTT Austria with IT and security related GDPR implementation questions and developed approaches to use cloud-based applications in line with GDPR requirements.
  • Advising ERSTE Bank on complex GDPR driven retention and deletion strategy.

KWR Karasek Wietrzyk Rechtsanwälte GmbH

The team at KWR Karasek Wietrzyk Rechtsanwälte GmbH assists clients with GDPR and data protection compliance, as well as providing support in cases of data breach. With co-practice head Anna Mertinz  also heading up the employment team, as well as Barbara Kuchar being an IP expert, there is significant overlap with other practice areas. Alexander Höller joined the team in November 2020 from Knyrim Trieb Rechtsanwälte OG.

Practice head(s):

Anna Mertinz ; Barbara Kuchar

Other key lawyers:

Alexander Höller


‘Big team with different experts.’

‘Good experience.’

Key clients

Coca-Cola HBC Austria GmbH

Lauda (subsidiary of Ryanair)

Mister Spex AG


Nemo Healthcare BV

System 7 group

TIAN/Venuss Bewusst GmbH

International Board of Lactation Consultant Examiners (IBLCE)

Rohde & Schwarz Österreich GesmbH

MAHLE Filtersysteme Austria GmbH


Familie & Beruf Management GmbH

Diversity Think Tank Consulting GmbH

Arbeitswelten Consulting

Luther Rechtsanwaltsgesellschaft mbH

Austria Bio Garantie GmbH / agroVet GmbH

De’ Longhi Kenwood GmbH

Edizon Innovation GmbH

Ivellio-Vellin IT Services

Willis Towers Watson Austria GmbH

Work highlights

  • Advising Coca-Cola HBC Austria GmbH  on all areas of data protection law and e-privacy and involved in almost all HBCA und HBC Group implementation processes, with particular emphasis on transfer of data to third countries and complexity of the allocation of roles due to the organisation of the group.
  • Assisted Lauda GmbH, subsidiary of Ryanair, in several proceedings in the area of employee data protection before courts and the competent supervisory authorities in Austria and Ireland.
  • Advised Mister Spex AG  on the drafting of documents in the area of data protection law for the development of the Austrian sales market.

Saxinger, Chalupsky & Partners (SCWP Schindhelm)

Having specialised in data protection for over 15 years, Saxinger, Chalupsky & Partners (SCWP Schindhelm)'s co-head Michael M Pachinger draws on broad experience and is praised for his ‘proactive’ approach. The practice supports an array of clients from various industries including IT, banking, aviation, e-commerce and retail as well as government and public service bodies. Counsel Philipp Reinisch co-heads the team; he contributes expertise in the legal implications for autonomous cars and rail traffic.


‘Availability on all levels- the practice not only is only quick on site or rather with advice and on your side, but they also understand the individual needs in the consultation.’

‘Dr Pachinger is quick to impress with his understanding of actual implementation in the company. It is precisely this understanding that is particularly important, as experience has shown that without this basis, appropriate advice can be tedious and misleading for both sides. Dr. Pachinger has the right sense of proportion for ideal legal advice, including any risk assessment.’  

‘Very professional team focusing on tangible results with very comprehensive knowledge and fast response times. We highly appreciate the personal and prompt response.’

‘Data protection is very important for our association. We, therefore, place great value on high expertise. Michael Pachinger is proactive and always does his best to show the full picture and explain the different ways we could go. It is a pleasure working with him.’

Key clients

VERITAS – Verlags- und Handelsgesellschaft m.b.H. & Co. OG YOUSURE Tarifvergleich GmbH

TimeTac GmbH

Ringana GmbH

dm -drogerie markt GmbH

Ulla Popken GmbH & Co.KG.

Hagleitner Hygiene International GmbH

E. Breuninger GmbH & Co.

Upper Austria Tourism

Bleckmann GmbH & Co. KG

VERITAS – Verlags- und Handelsgesellschaft m.b.H. & Co. OG YOUSURE Tarifvergleich GmbH

TimeTac GmbH

Ringana GmbH

dm -drogerie markt GmbH

Ulla Popken GmbH & Co.KG.

Hagleitner Hygiene International GmbH

E. Breuninger GmbH & Co.

Upper Austria Tourism

Bleckmann GmbH & Co. KG

Work highlights

  • Advising on a range of complex data protection issues associated with its platforms.

Taylor Wessing enwc Rechtsanwälte GmbH

Andreas Schütz, who is ‘a very experienced professional’ with a wide range of expertise, leads the data protection team at Taylor Wessing enwc Rechtsanwälte GmbH. The practice assists clients in the food and retail, healthcare, credit as well as construction industries with expertise in various areas of data protection such as employee data protection, group and company data protection, direct marketing and cloud computing. Associate Christopher Bakier advises on information technology, data protection and administrative law.

Practice head(s):

Andreas Schütz

Other key lawyers:

Christopher Bakier


‘Just like the IP team, the data protection team led by Andreas Schütz is quick, pragmatic and to the point. The IP and IT teams apparently work together very closely which comes in handy for us.’

‘In data protection and TMT matters, partner Andreas Schütz has been our main point of contact for a long time. Andreas is a very experienced professional and knows how to implement pragmatic solutions tailored to our needs. This is all the more possible, as he has known us and our firm for many years.’

‘The cooperation with Taylor Wessing Vienna is very positive and profitable. In addition to the constant availability, we appreciate the professional competence even in difficult issues.’

Key clients

Volkshilfe Wien Gemeinnützige Betriebs-GmbH

ZGONC Handel GmbH

Vorwerk & Co KG

Pirelli Österreich GmbH

Nestlé Österreich GmbH


Great Lenghts Haarvertriebs GmbH

FRONERI Austria GmbH

IKEA of Sweden AB

Sky Österreich Fernsehen GmbH

Dr. A. & L. Schmidgall GmbH & Co

Bosch Software Innovations GmbH

Elektra Bregenz Aktiengesellschaft

Casper Sleep GmbH

Eilenberger Consulting

Fielmann GmbH

Hill International GmbH


ARGO Personalentwicklung Gesellschaft m.b.H.

Norske Skog Industrier ASA

kununu GmbH

Eilenberger Consulting SteuerberatungsgmbH

Haberkorn Holding AG

Haberkorn GmbH

Claus Haberkorn

Familie Haberkorn Privatstiftung

GroupM OG

Davinci Lab OG

Alois Dallmayr OHG

Wolters Kluwer CENTRAL EUROPE Beteiligungsgesellschaft m. b. H.

Unified Logic

Fette Compacting GmbH

Salzgitter Mannesmann Handel GmbH

HoReCA Digital GmbH

Theater der Jugend

Tyrol Equity AG

Punto Fa, S.L (Mango)

Cythus EXQUIRE Pharmaforschungs GmbH

„Dach und Wand“ Handels GmbH

Tiffany & Co

Urban Massage Limited

Agrana Juice Holding GmbH

Agrana Beteiligungs-Aktiengesellschaft

Bearing Point GmbH

Salonmeister GmbH (Treatwell)

Roland Spedition GmbH

ISO Leadership GmbH

Lafarge Perlmooser GmbH

Lafarge Perlmooser AG

Lafarge Zementwerke GmbH

Perlmooser Beton GmbH

Prema Autozubehör Handelsgesllschaft m. b. H.

Ricoh Europe PLC

Ricoh Austria GmbH

KGAL GmbH & Co. KG

KGAL Asset Management Österreich GmbH

Nuance Communications, Inc.

Otto Bock Healthcare Products GmbH


Stanton Chase International

Angelini Group


Avira Operations GmbH & Co. KG

Elektra Bregenz AG

Panasonic Electric Works Austria GmbH

LexisNexis Verlag ARD ORAC GmbH & Co KG


Hiscox Insurance Company Ltd

ALSO Austria GmbH

Atradius Credit Insurance

Axa France IARD Societe Anonyme

Bierwirth & Kluth Hotel Management GmbH

Salamantex GmbH

Work highlights

  • Advised Nestlé Österreich GmbH on the implementation of data protection requirements, data protection issues concerning online marketing and providing ongoing advice in connection with all data protection matters.
  • Advised Nespresso Österreich GmbH & Co OHG on the implementation of data protection requirements and providing ongoing advice in connection with all data protection matters.
  • Advised Gemedico in connection with the possibility of processing patient data in the cloud by external service providers and corresponding related issues (regulatory aspects, certificates, political intentions for the future).

Binder Grösswang

The team at Binder Grösswang covers employee data protection, represents clients in proceedings before the Data Protection Authority and reviews marketing measures. It also provides data protection support with new products and technologies, with data transfers or with data breach notifications. Ivo Rungg, who has strengths in digital law and data protection and Angelika Pallwein-Prettner, who focuses on employee data protection, are the practice heads.


‘Very friendly and helpful, straight to the point, meets all deadlines’

‘Angelika Pallwein Prettner is a very engaged and has a pragmatic approach which is highly appreciated. She fully understands our needs. She easily talks with non-lawyers and lawyers so its very efficient as we as in-house lawyers do not need to translate/simplify her opinion.’

Key clients

Österreichische Post AG

Capgemini Consulting Österreich AG Millennium Tower, 22. Stock

BNP Paribas

OBI Bau- und Heimwerkermärkte Systemzentrale GmbH

Volksbanken Wien

Renault Österreich GmbH

Stadt Wien

Association NOVID20

Starbucks Coffee Austria GmbH

Glaxo SmithKline plc

Austrian Federal Ministry of Finance

Work highlights

  • Issued an expert opinion for the Austrian Federal Ministry of Finance concerning the internal processes of data gathering to comply with the execution of the evidence resolutions by the parliamentary investigating committee set up for the alleged corruption of the former federal government (‘Ibiza-corruption affair’).
  • Advised Association NOVID20 with respect to the roll-out of one of the first Corona-apps on the market, this included evaluating various law issues of the contact tracing, especially data security measures.
  • Advised international manufacturer of consumer electronics on the handling of personal data of employees and third persons in internal compliance investigations by the Austrian subsidiary.

DLA Piper Weiss-Tessbach Rechtsanwälte GmbH

The ‘solution- and goal-oriented' team at DLA Piper Weiss-Tessbach has a client list of Austrian and international companies. The practice’s strengths in matters involving new media, e-commerce, cloud computing and software licensing attracts clients from diverse sectors including banks, healthcare providers, retail and IT companies as well as automotive groups. Sabine Fehringer draws on experience in IT, research and development and licensing.

Practice head(s):

Sabine Fehringer

Other key lawyers:

Stefan Panic


‘We find quick and practical solutions there for all our questions and issues. Our needs and requirements are well covered by the people mentioned.’

‘Consultants are absolutely solution- and goal-oriented and always try to achieve the best for us. They mainly supervised our data protection implementation project. They managed to present data protection in a transparent and human way for us. Others cover the corporate law aspect. She competently directs complex projects to their goal with unbelievable speed.’

Key clients


Bionic Surface Technologies GmbH


DEBRA Holding

Neqsol Holding

Work highlights

  • Advising SolarWinds with regard to its well-published cyber incident involving over 18,000 SolarWinds customers, amongst them many governmental organisations in the US, Europe and Asia Pacific.
  • Advised DEBRA Holding on GDPR implementation.

Eversheds Sutherland | Stolitzka & Partner RAe OG

The practice at Eversheds Sutherland | Stolitzka & Partner RAe OG , which handles GDPR compliance and represents clients in complex data protection proceedings, draws on the many years of experience of practice head Georg Röhsner. The firm’s international network across multiple jurisdictions is also of note. Recently promoted to partner, Manuel Boka assists IT-focussed start-ups.

Practice head(s):

Georg Röhsner

Other key lawyers:

Manuel Boka; Michael Röhsner


‘We value Eversheds Sutherland’s in depth understanding of the data protection provisions of the EU and Austria. They always help us to understand the best possible solutions for our business as well as the risks involved, while also thinking outside of the box. Their advice is always on time, business-oriented, innovative and helpful.’

‘Georg Röhsner: We value his outstanding experience and the support he has provided to our business for approximately two decades now. We value his proactive approach, seeing potential issues before they become evident to us, helping us to meet them as soon as possible.’

‘Michael Röhsner: We value his in depth knowledge on data protection law, always understanding all new developments. He does not limit his advice to the letter of the law, but always proposes a direct solution, tailored to our needs, which we appreciate.’

The team is highly competent and has an exceptional ability to quickly adapt to new challenges. Ability to see things through the eyes of the client with practical advice.’

‘Very hands-on mentality with focus on practical solutions.’

‘Mag. Michael Röhsner: very enthusiastic young and upcoming lawyer. has already a broad comprehension of how data protections issues relate to our business and therefore the advice is always practical and on point.’

‘Dr. Röhsner is a designated expert in the field of data privacy/protection. Valuable contact partner in all areas of data protection/privacy.’

‘Mr. Boka is very sophisticated data protection/privacy lawyer.’

Key clients

ORF Enterprise (a subsidiary of the Austrian Public Broadcaster ORF)

Radio Eins Privatradio GmbH

Phoron Consulting GmbH

Österreichische Kinderkrebshilfe (non-profit organisation supporting children with cancer)

MAKAM Research GmbH

Die Berater UnternehmensberatungsgmbH

WashTec Cleaning Technology GmbH

SIXT Autovermietung

Experian Group


Kering Group

Work highlights

  • Representing a major car rental company at the European Court of Justice in a landmark proceeding against an Austrian Consumer Protection Body regarding data protection practices.
  • Providing pro-bono advice to the Österreichische Kinder-Krebs-Hilfe (Non-Profit-Organisation supporting children with cancer) regarding processing children’s health data for the purpose of patients and survivor support.
  • Assisting WashTec Cleaning Technology GmbH with the GDPR-compliant implementation of a fleet-wide GPS tracking system to assist with deployment of the company’s service technicians.


The practice at GRAF ISOLA cooperates and overlaps with other departments of the firm, such as corporate, competition and IP. Leading the practice are Marija Križanac, who ‘always offers creative, high-quality solutions, even in very complex data protection matters’, and founding partner Ferdinand Graf, whose focus includes cross-border transactions and restructurings.


‘Graf&Isola company has very competent team members in different law areas, therefore our company is working with them for more than 20 years. They always offer us customized solutions, are open for any question/request and support us very professional and successfully.’

‘Marija Križanac has excellent knowledge in GDPR area, she thinks globally, especially in relation to our worldwide operating Group. Ms. Križanac supports us in finding unique solutions due to her creative thinking. Communication with Ms. Križanac is very easy and sufficient, she is a good listener, very responsive and reliable person.’

‘In-depth knowledge of international data protection/privacy law. Very client-oriented team around Marija Križanac with a pragmatic approach. Transparent billing.’

‘The data protection practice of Graf Isola Rechtsanwälte GmbH is fantastic. Lead by the brilliant Marija Križanac, they always provide practically well implementable solutions for our company. If we need quick answers, they are only one call away – Marija Križanac is very knowledgeable and does not need extensive preparation time for our issues.’

‘Marija Križanac is highly competent and a fast thinker; she whips out ideas seemingly out of the blue and gets to the point without any “lawyer-gibberish”. We also appreciate her economic understanding of our industry and our company’s needs. All in all, she is a very talented lawyer; I have recommended her many times to other business partners.’

‘I recommend clients to Marija Križanac, the head of this practice. Marija Križanac is an excellent attorney at law with a practical approach. She is very experienced in all data protection matters and always gives high-quality legal advice.’

‘The practice stands out mainly because of its lead individuals. Take Marija Križanac, the head of the practice, for example: Marija is not just a brilliant lawyer, but also a recognized scholar, which is why we hired her in the past when we needed expert opinions for data privacy-related issues.’

‘Marija Križanac is our go-to for all data privacy matters; she is very knowledgeable and has a highly practice-oriented approach. We mainly appreciate her for her on-point expert legal opinions, which have been well-received every time.’

Key clients

LUKOIL International GmbH, LUKOIL Holding GmbH

VELUX A/S; VELUX Österreich GmbH, VKR Holding A/S

Irving H. Picard (Trustee for the substantively consolidated SIPA liquidation of Bernard L. Madoff Investment Securities LLC & Bernard Madoff)

Austrian Ministry of Finance GmbH (Hubert Burda Media Group)

therapie-info PSISYS GmbH

Logwin Group

nonconform ideenwerkstatt GmbH

MSE International Healthcare Systems GmbH (MSE Group)


FOPI – Forum der forschenden pharmazeutischen Industrie in Österreich

AM Baugeräte HandelsgmbH

Work highlights

  • Provided a legal opinion to the Austrian Minister of Finance regarding the (limits of) the obligation to submit documents to the parliamentary investigative body under data protection law in a high-profile case where the Minister of Finance was obligated by a ruling of the Constitutional Court to provide documents (including personal data inter alia of employees of the Ministry of Finance) to the parliamentary investigative body that was established to investigate the so-called “Ibiza-scandal” that brought down the Austrian government and triggered new elections in 2019.
  • Assisted with the acquisition of the digital brands/websites and from the Vienna-based GmbH, which included data protection advice.
  • Provided advice / legal opinions to Irving H. Picard (Trustee for the substantively consolidated SIPA liquidation of Bernard L. Madoff Investment Securities LLC & Bernard Madoff) regarding possible mechanisms to obtain documents/personal data in a GDPR-compliant manner from the subsidiary of an Austrian bank for civil proceedings in the US.

KPMG Law in Austria

Retail companies, insurance groups, printing and publishing houses, software and IT corporations, health groups as well as public enterprises are among the clients of the data protection practice at KPMG Law in Austria. Counsel Karin Bruchbacher leads the team, she focuses on digitalisation projects and advises both state-owned and private companies on various data protection matters.

Practice head(s):

Karin Bruchbacher

Key clients

ISIS Papyrus Europe AG

Trade Republic Bank GmbH

consapption GmbH

it-tects IT-Beratung und Dienstleistungs KG

Sanag GmbH

Wiener Familienbund

Barracuda Holding GmbH

Auer Signal GmbH

bank99 AG

PEPCO Poland Sp. z o. o. / PEPCO Austria GmbH

Ycy GmbH


Austrian Reporting Services GmbH


Work highlights

  • Advising Austrian Reporting Services GmbH (AuRep)on all privacy and data protection law matters.
  • Advised bank99 AG and its shareholder, Österreichische Post AG, on several data protection matters in connection with the acquisition of the Austrian retail banking business of ING-DiBa AG.
  • Advising PEPCO Poland Sp. z o. o. / PEPCO Austria GmbH on all data protection matters in connection with the market entry as a retailer in Austria.

Lansky, Ganzger + Partner (LGP)

The practice at Lansky, Ganzger + Partner (LGP), a firm with a geographical focus on central Europe, has a client list that includes large companies in the tourism, telecoms and media sectors. Katharina Raabe-Stuppnig combines her litigation and data protection expertise in representing data protection activist Max Schrems. Founding partner Gerald Ganzger has traditionally focused on the technology and media sectors.


‘We always had good experiences in the many years of cooperation with LANSKY, GANZGER partner Rechtsanwälte | Attorneys. All enquiries in all areas of law, especially in the fields of IP and TMT, are handled quickly, goal-oriented and to our full satisfaction.’

‘Our main contact person at LANSKY, GANZGER partner Rechtsanwälte | Attorneys in all legal areas is Gerald Ganzger and we also work mainly with him. Our enquiries and legal problems are always dealt with quickly and more than satisfactorily in terms of content. I know that Gerald Ganzger has a committed and competent team behind him that supports him in every way.’

Key clients

Max Schrems

Bohmann Druck und Verlag GmbH

Radio Energy (Member of the French NRJ Group)

VGN Medien Holding GmbH

Austrian Economic Chambers

Falkensteiner Michaeler Tourism Group

Rainer Kraftfahrzeughandels AG

Ueberreuter Verlagsgruppe

Wiener Komfortwohnungen

Chamber of Commerce Vienna

Work highlights

  • Advising an Austrian data protection activist Max Schrems in a lawsuit against facebook.
  • Acting for the News Group VGN Medien Holding GmbH (“Verlagsgruppe News“) on all legal matters such as in case of contract negotiations and data protection issues.
  • Advising Radio Energy the Austrian subsidiary of Europe’s largest privately owned radio company (NRJ Group) on the introduction of the EU’s General Data Protection Regulation and the roll-out of listener loyalty programmes (competitions and the like).