Data privacy and data protection in Austria

DORDA Rechtsanwälte GmbH

A one-stop shop for data protection throughout the CEE region, DORDA Rechtsanwälte GmbH fields an experienced data protection group with a strong suit in post-project GDPR issues, audits and proceedings. Several team members are also capable of acting as data protection officers. In terms of industry sectors, the department assists household names in TMT, banking, insurance, pharmaceutical and real estate. Managing partner and IP luminary Axel Anderl heads the team together with Felix Hörlsberger, who has a restructuring and insolvency background. At associate level, Nino Tlapak, who has data protection and security law know-how, is the key name.

Practice head(s):

Axel Anderl; Felix Hörlsberger

Other key lawyers:

Nino Tlapak


‘Dorda’s privacy and data protection practice has offered exceptional, practical counsel regarding nuanced aspects of notification involving the Austrian Data Protection Authority. They are highly responsive, provide strong, no nonsense work product. Simply put, they deliver effective, efficient value-added legal counsel, and are very personable and easy to work with.’

‘Axel Andrel and Nino Tlapak are exceptionally responsive, personable, and offer deeply valued experiential wisdom regarding GDPR compliance.’

‘Flexible, quick, pragmatic.’

‘Nino Tlapak is flexible, quick, pragmatic.’

‘Engaging, highly up to date and pragmatic.’

‘Axel Anderl is standout practitioner, develops good solutions.’

‘Nino Tlapak is deeply knowledgeable in all matters GDPR.’

‘The team around Axel Anderl is extremely experienced and working hands-on. They understand very quickly and without much saying the issues of their clients and support accordingly. Furthermore, they have an extremely quick turnaround time. It is a pleasure working with them.’

‘Axel Anderl, the boss of the team, is the guru of IP/IT law in Austria with a deep and broad knowledge of the subject and market, plus helpful connections.’

‘Nino Tlapak has specialized on data protection and privacy and can step in in any discussion of the subject matter without a lot of preparation and briefing.’

‘I especially appreciate the proactive and cooperative collaboration. We receive unsolicited the latest information and suggestions on how we should adapt our procedures.’

‘The cooperation with Axel Anderl and Nino Tlapak is very trusting and uncomplicated. I always appreciate the open exchange with them, and at least once a year we use their expertise to explain the dry topics of data protection to our employees in practical workshops.’

‘Axel Anderl and his team deliver above standard legal consultancy in order to support us in our daily business dealing with critical data for the Austrian Real Estate Market. Compared to other firms their availability is outstanding and they provide consultancy pro-actively, not just waiting for cases to occur. Their knowledge in the field of IPR and GDPR is essential for the success of our company.’

‘Axel Anderl is one of the most competent persons considering IPR and GDPR in Austria. His availability and dedication to the client as above any expectation.’

‘Nino Tlapak is compared to others highly profiled when it comes to put complex information and issues together and coming up with a resolution.’

‘The speed on providing their promised deliverables is outstanding. They are easy to work with, are happy to tackle challenging issues and they always think about the right solutions for their clients.’

‘I have been working with Axel Anderl for many years. He has extensive industry knowledge and is a very talented and successful negotiator, especially when you are a client in the highly regulated banking industry and have to deal with major international IT providers. Axel is super-smart, down to earth and always a pleasure to work with. He is very client-focused, attentive and responsive.’

‘Nino Tlapak has a great team, all experts in the field of data protection. He provides questions very quickly, short and on point.’

‘Mr. Tlapak and his experts have a great understanding of problems that arise within a company concerning data protection. Answers are provided quickly and on point.’

‘Very hands on, pragmatic, fast, concrete advice, very accessible, complete range of legal advice, very professional.’

‘The entire data protection team, which is responsible for my company, reacts very quickly to requests.’

Key clients

Allianz Elementar Versicherungs-Aktiengesellschaft

Bayer Austria GmbH

Erste Bank, S IT Solutions AT Spardat

Head Group


ISS Austria Holding

Kommunalkredit Austria

L’Oréal Österreich

METRO Cash & Carry Österreich

Otto Immobilien

Roche Diagnostics GmbH

Styria Media Group

Trodat Trotec Group




VIG – Vienna Insurance Group

ZKW Group

Work highlights

  • Advise UNIQA Group on all data protection and privacy related matters.
  • Assisting Styria Media Group with all day-to-day data protection work, including being designated as data protection officers for all Austrian companies of the Styria Media Group.
  • Providing data protection advice to IMMOunited Group.

Baker McKenzie Rechtsanwälte LLP & Co KG

At Baker McKenzie Rechtsanwälte LLP & Co KG, data protection work is part of the firm's wider TMT offering. Practice head Lukas Feiler is a certified information privacy professional and expertly handles data privacy and GDPR aspects of larger IT projects. The group is also experienced in representing clients before Austrian data protection authorities, for instance in relation to the right to be forgotten under GDPR.

Practice head(s):

Lukas Feiler


‘Very strong IT/data protection expertise. ’

‘Lukas Feiler is an incredibly efficiently working colleague. ’

‘Lukas Feiler’s team is an excellent choice for Data Privacy and Data Protection issues, both in litigious matters and in an advisory capacity. The quality of work and the availability of thee team is outstanding. ’

‘Lukas Feiler is an outstanding privacy expert. The broadness of his expertise is impressive. His advice is sharp and business oriented. Lukas is relentlessly committed to deliver rock solid work.’

Key clients

STANDARD Verlagsgesellschaft m.b.H.

Work highlights

  • Advised leading Austrian newspaper Der Standard in a proceeding before the Austrian Data Protection Authority (DPA) with regard to its online business model.

Cerha Hempel

International data transfers, data breach scenarios, GDPR issues and related proceedings make up the core business at Cerha Hempel. Hans Kristoferitsch heads the team and is also often involved in the coordination of multi-jurisdictional regulatory projects in data migration and GDPR compliance. A substantial amount of work is handled by senior associate Franziska Paefgen, who shines in data privacy work on IT outsourcing, tracking technologies, blockchain and apps. The implementation of GDPR in companies and international groups is a core focus of counsel Armin Schwabl.

Practice head(s):

Hans Kristoferitsch

Other key lawyers:

Franziska Paefgen; Armin Schwabl


‘Cerha Hempel has a very large data privacy team with a lot of experience and a deep understanding not only of the GDPR as well as national data privacy legislation and case law, but also of neighbouring areas. ’

‘Franziska Paefgen has a considerable expertise in data privacy law and knows the market very well. We value that she has always helped us find pragmatic and workable solutions to complex legal challenges. ’

‘Broad and detailed know-how, very experienced.’

‘The overall level of service is very high. The response times are short and agreed response dates are kept reliably. Highly committed and professional team that is coordinated, works quickly and efficiently. ’

‘The team around Hans Kristoferitsch has been available for many years to answer questions on public law (including data protection law) as well as technology, media and telecommunications.’

‘Hans Kristoferitsch advises us with extensive knowledge and many years of experience. His advice is always legally sound and at the same time practice-oriented. The cooperation is very pleasant.’

‘Franziska Paefgen is a highly competent, precise and very committed lawyer, especially in the field of IT law.’

‘Armin Schwabl is a dedicated, very competent lawyer who works in a goal and solution-oriented manner.’

‘The overall level of quality and service is exceptional. The response times are short and agreed response dates are kept reliably. Highly committed and professional team that is coordinated, works quickly and efficiently. ’

‘Outstanding professional skills, always available in time.’

Key clients

CA Immobilien Anlagen AG

Constantia Industries AG

Dentsu Aegis Network Austria GmbH

Flughafen Wien AG

Fundermax GmbH

General Logistics Systems (GLS) Austria GmbH

Hewlett Packard Inc

Institute of Science and Technology Austria (IST Austria)

Isovolta AG

OMV Aktiengesellschaft

Samsung Electronics Austria GmbH

Semperit Aktiengesellschaft Holding

SES Spar European Shopping Centers GMBH

SPAR Business Services GmbH

SPAR Österreichische Warenhandels-AG


Wiener Stadtwerke GmbH

WienIT GmbH

Wiener Netze GmbH

Autobahnen- und Schnellstraßen- Finanzierungs-Aktiengesellschaft (ASFINAG)

NTS Netzwerk Telekom Service AG

Work highlights

  • Advised viadonau on the implementation of an EU-wide tracking and logistics system for ships including more than 20 countries.
  • Acted for Wiener Netze GmbH in numerous proceedings before the civil courts and ECA regarding data protection issues related to smart meters.
  • Advising CA Immobilien Anlagen AG on Privacy by Design Project for cube berlin, a smart building with intelligent building systems which will recognise and adjust to users’ needs and desires throughout the building


TMT, IP and data privacy boutique GEISTWERT has a strong track record in data protection that extends beyond the introduction of GDPR. Jointly led by Juliane Messner, Max Mosing, Alexander Schnider, Rainer Schultes and Constantin Kletzer, the practice is particularly experienced in advising finance, pharmaceutical and life sciences clients. To assist with GDPR implementation, the firm is able to call on its home-grown GDPR-tool. The fully bilingual and dual-qualified Messner is also in charge of the dedicated Italy desk, and Mosing is a CIS-certified Data Privacy Officer.

Practice head(s):

Juliane Messner; Max Mosing; Constantin Kletzer; Alexander Schnider; Rainer Schultes


‘Communication is fast, competent and uncomplicated is probably the “secret of success” for GEISTWERT on the Austrian market. It is undoubtedly unique in Austria that so many partners in a law firm can serve the same area of law at such a high level – really a pleasure working with the GEISTWERT team.’

‘All partners are easy to reach, competent, uncomplicated and have at least basic knowledge of the projects of the other partners. That is definitely unique in Austria.’

‘GEISTWERT is a start-up heaven! They work really quick, right to the relevant points and always on time and in budget. Geistwert assists us on a regular basis on data privacy, but also on copyright law, image rights, and contract law including terms of use, general terms and conditions.’

We enjoy working with Geistwert very much, because they are immediately available and they work hands-on to our needs, which is due to their in-depth understanding of all related fields of law.’

‘Juliane Messner is undoubtedly an “over-performer” and an outstanding expert in the field of data protection law in Austria. Juliane is competent and a real team player with business insides. She delivers her input exactly when and how we need it. This also leads to enormous work and cost efficiency for us and our clients. So GEISTWERT and especially Juliane stands for great value for reasonable price.’

‘Max Mosing is an outstanding expert in the field of data protection law in Austria and he used his experience of his major data protection projects for international giants for providing me and my startup with straight to the point data protection advice.’

‘On a personal level, both Max Mosing and Juliane Messner are reliable, committed, ambitious and inspiring to cooperate. So I can truly recommend Geistwert and Max and Juliane in all the fields they professionally cover.’

Key clients


DOUGLAS Cosmetics

Vienna Tourist Board (WienTourismus)

WALA Cosmetics





South Tyrol Association of Tourism Organisations

HGV – South Tyrolian Service Association of Hotels and Restaurants

Work highlights

  • Represented ASFINAG in trade mark infringement proceedings against an internet platform selling digital toll badges.
  • Advising perfumery chain Douglas especially on data protection including GDPR implementation and e-commerce matters.
  • Assisted the LifeBrain Group with its strategy to implement the GDPR in the entire Group across hundreds of different entities.

Knyrim Trieb Rechtsanwälte OG

IT boutique Knyrim Trieb Rechtsanwälte OG has an outstanding track record in data protection and GDPR work. It is a popular choice for clients from the pharmaceutical, automotive, fibre, plastics, energy and steel industries. The team operates its own legal tech application to handle clients' data inventories in compliance with GDPR. Data protection audits, data protection officer services and employee trainings are also offered. Rainer Knyrim and Gerald Trieb are key names. At associate level, Claudia Gabauer is of note for her medical sector, health telematics, pharmaceutical and life sciences expertise.

Practice head(s):

Rainer Knyrim; Gerald Trieb

Other key lawyers:

Claudia Gabauer


‘Perfect mixture of high quality expertise, business minded legal services with a clear legal guidance and excellent relations. ’

‘Dr. Knyrim is the leading data protection lawyer in Austria – high degree of expertise, good communications skill and business sense.’

‘Dr. Gabauer has high expertise in the area of research/medicine and data protection.’

‘Mr Knyrim is a very pleasant person to work with. Knowledgeable, accurate, fast and always aiming for practical solutions.’

‘This practice is unique because of its huge basis of knowledge and the dynamic process of gaining knowledge. The second thing is the pro-activeness of the practice which in comparison with other firms is outstanding.’

‘Knyrim Trieb provide data protection and data security knowledge on the highest level, which can be seen by the outstanding record of publications, clients and panels in which they are represented.’

‘Rainer Knyrim has always been a pioneer in the field of data protection and he still seeks for innovative solutions for his clients.’

‘Gerald Trieb has outstanding knowledge in the field of data protection.’

‘Great expertise, fast answers and creative solutions.’

‘Mr. Knyrim and Mr. Trieb are easy going, excellent attorneys and very client oriented.’

Key clients

Austrian Association of Electricity Companies (Oesterreichs Energie)

Boehringer Ingelheim RCV GmbH & Co KG

DPE GmbH (Online Travel Portal “Tootravel”, Spin-off company of Russian Travel Portal “”)

Greiner AG

Immofinanz AG

KIA Motors Austria GmbH

Kitzbühel Public Utility (Stadtwerke Kitzbühel)

Landesholding Burgenland GmbH

Lenzing AG

MANZ´sche Verlags- und Universitätsbuchhandlung GmbH

Unser Ö-Bonus Club GmbH

voestalpine AG

Work highlights

  • Advised on the establishment of a monitoring body according to Art 41 GDPR for Austrian Association of Electricity Companies (Oesterreichs Energie).
  • Assisting with a GDPR compliance project for Boehringer Ingelheim RCV GmbH & Co KG.

Schoenherr (Schönherr Rechtsanwälte)

Schoenherr (Schönherr Rechtsanwälte) is developing a strong track record in GDPR-related proceedings. The data protection and privacy group is led by Günther Leissler, who assists with the implementation of database projects and web-based telecoms services on top of day-to-day GDPR matters. Furthermore, the firm operates an innovation hub, is engaged in Legal Tech Hub Vienna and offers clients a range of box tools to facilitate GDPR compliance.

Practice head(s):

Günther Leissler

Key clients


Österreichische Post AG

Vienna Insurance Group (VIG)

Austrian Insurance Association

Raiffeisenlandesbank Oberösterreich

HDI Insurance Company

Verkehrsverbund Ost Region

ORF (Austrian Broadcasting Association)

Erste Bank AG

Novomatic Group of Companies


Roche Diabetes Care Austria Gmbh

COVID-19 — Finanzierungsagentur des Bundes GmbH

Work highlights

  • Representing Facebook Ireland Ltd as defendants in the Austrian court proceedings initiated by Austrian citizen Maximilian Schrems.
  • Acting for Österreichische Post AG in GDPR-related matters including current ex officio investigations by the DP regulator resulting in the very first administrative criminal proceedings under the GDPR in Austria.
  • Representing the Austrian Insurance Association (VVO) in Austria’s first GDPR mass action regarding cancellation claims.

Wolf Theiss Rechtsanwalte GmbH & CoKG

Wolf Theiss Rechtsanwalte GmbH & CoKG assists with data protection compliance systems and the implications of user tracking. The team also runs GDPR compliance audits, defends clients against alleged non-compliance and frequently takes on the role of external data protection officer. IT and data security specialist Roland Marko heads the practice. Senior associate Paulina Pomorski also shines in IT and data protection law, particularly in relation to the consequences of GDPR on employee data.

Practice head(s):

Roland Marko

Other key lawyers:

Paulina Pomorski

Key clients

Österreichische Post AG (Austrian Post)

ÖBB Infrastruktur

Petro Welt Technologies

UBM Development

Varner AS

Gianni Versace

Addiko Bank

Microsoft Corporation

Sberbank Europe


Work highlights

  • Defending Österreichische Post against the first-ever series of claims in Austria, where a larger number of people (allegedly) affected by data protection violations were suing for damages.
  • Acting as external Data Protection Officer for Petro Welt Technologies.
  • Running an external GDPR compliance audit for Raiffeisen Campus, the training and education centre for employees of the Raiffeisen group companies

CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH

The technology, media and communications practice at CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH also includes a data protection arm for its diverse range of European clients. Practice head and managing partner Johannes Juranek frequently advises software, tech and consumer products companies on GDPR compliance. Senior associate Johannes Scharf also focuses on data protection IT with an emphasis on matters in relation to unfair competition. As part of its commitment to innovation, the practice has launched a number of initiatives in the space including a data breach app.

Practice head(s):

Johannes Juranek

Other key lawyers:

Johannes Scharf

Key clients

Unser Ö-Bonus Club GmbH (REWE Group)

Universal Edition

Heta Asset Resolution

GE Healthcare



Work highlights

  • Advising ALPLA on HR Data Protection Issues (health data) in connection with Covid-19.
  • Advising Universal Edition on client data and several other data protection mandates related to the establishment and implementation of a web shop.
  • Advising Heta Asset Resolution, a winding-down company owned by the Republic of Austria, on data protection issues.

DLA Piper Weiss-Tessbach

DLA Piper Weiss-Tessbach is primarily involved in multi-jurisdictional data protection matters, for instance in relation to GDPR compliance and data transfers. Headed by Sabine Fehringer, the practice unites Armin Hendrich's regulatory background with counsel Stefan Panic's in-depth data protection expertise. The team is particularly adept at handling data privacy issues within banking and finance as well as automotive industries.

Practice head(s):

Sabine Fehringer

Other key lawyers:

Armin Hendrich; Stefan Panic


‘The team showed its strengths during the introduction of the EU data protection regulation. It provided perfect ad hoc advice without the need to do long research, this was possible due to the great competence the team has established.’

‘Sabine Fehringer combines an exceptional experience in the industry with outstanding (legal) knowledge, hands-on mentality and a great understanding of the client’s business. This enables her to provide optimum support to the client.’

E+H Eisenberger + Herzog

GDPR advice and compliance plays a key role in E+H Eisenberger + Herzog's data protection practice. Technology and automotive corporations in particular turn to Andreas Zellhofer and his group to review agreements and other documentation on data protection aspects. The team is also capable of handling litigation and managing IT projects with data privacy components. Helmut Liebel has a strong understanding of computer science.

Practice head(s):

Andreas Zellhofer

Other key lawyers:

Helmut Liebel

Key clients


Toyota Austria

Toyota Kreditbank


Allianz Capital Partners


Work highlights

  • Advising Allianz Capital Partners (ACP) on its winning bid for the acquisition of a majority stake in Niederösterreichische Glasfaserinfrastrukturgesellschaft mbH (nöGIG).
  • Acting as local counsel to the Microsoft Group.
  • Advising Honda on all TMT, IT, and data protection matters.

Jank Weiler Operenyi

GDPR implementation, international data flow, benefit-cost-ratio and HR matters are the focal points of Jank Weiler Operenyi's data privacy practice. Sascha Jung, who regularly acts as external data protection officer, heads the practice and has expertise in GDPR and matters at the intersection of IP and IT.

Practice head(s):

Sascha Jung


‘Jank Weiler Operenyi has an outstanding reputation for legal advice in data privacy/protection matters. Compared to other law firms we appreciate that Sascha Jung and his team is specialized in both, data privacy/protection and unfair competition. So for us, it was clear to get “best of both worlds” from one and the same team.’

‘Sascha Jung and his team from Jank Weiler Operenyi have a strong focus on cross-border data protection cases which strongly differentiates them from competitors that often work “only” in a national focused way. Additionally, Sascha Jung and his team have the capacity to refer to Deloitte and Deloitte Legal colleagues from all over the world which allows us to work also in cross-border cases with a single point of contact which also constitutes a decisive differentiator.’

‘Technical and legal knowledge in combination is absolutely unique on the market. From my perspective the data privacy and data protection practice of Jank Weiler Operenyi is unique as it combines extensive legal knowledge with excellent IT/technical knowledge/skills. Although Jank Weiler Operenyi’s data privacy and data protection team itself has vast IT/technical skills/knowledge, when necessary, they can provide a one-stop shop with IT and forensic teams from Deloitte and thus can provide even better and more comprehensive advice in data and privacy matters.’

‘What we appreciate most is Sascha Jung’s responsiveness and his unique understanding for both commercial and technical issues.’

‘Sascha Jung has hands-on qualities and his reaction times are perfect. I would also like to mention Randolph Schwab from Sascha Jung’s team who is an associate but shows deep technical knowledge which is very important to us for the technical fields of data protection/privacy.’

‘Sascha Jung is definitely the most committed attorney, with hands-on qualities, superb knowledge on (international) privacy issues and a pragmatic and solution-oriented work style. Sascha Jung is definitely among the top privacy lawyers in Austria.’

‘Sascha Jung is proactive, pragmatic and an excellent team leader, has strong cross-border knowledge.’

‘Sascha Jung is definitely one of the leading data/privacy protection lawyers in Austria with vast knowledge particularly on complex international data protection matters. Exactly such knowledge is absolutely required for our numerous cross-border projects. Sascha is 100 % committed and always available for us.’

Key clients


Marina Tower GmbH

Deloitte Austria

BUWOG Group GmbH

PUIG Österreich GmbH

PUIG Deutschland GmbH

PUIGE (Suisse) SA

Antonio PUIG SA

PUIG France SA

Österreichischer Bundesverband für Psychotherapie

Deloitte Audit Wirtschaftsprüfungs GmbH

Österreichische Beamtenversicherung

X4 Pharmaceuticals (Austria) GmbH

Salzburg AG

Playmit GmbH

Bank99 AG


NEOS – Das Neue Österreich und Liberales Forum (political party)

Elektra Bregenz AG

Festo Gesellschaft m.b.H.

Bacher Systems EDV GmbH

Austrian Standards plus GmbH

Sozialbau AG

NEUE HEIMAT – Gemeinn. Wohnungs- u. Siedlungsges. GmbH

Fronius International GmbH

via donau – Österreichische Wasserstraßen-Gesellschaft mbH


T-Mobile Austria / Deutsche Telekom

Audicon Holding GmbH

Work highlights

  • Acting as external data protection officer for BUWOG Group GmbH and all members of the Austrian BUWOG group of companies.
  • Advised Aristra AG on GDPR implementation.
  • Advising bank99 on its start-up phase particularly working on the development of the entire data protection organisation and the establishment of data processes and data documentation.

Saxinger, Chalupsky & Partners (SCWP Schindhelm)

When it comes to data protection and data privacy, Saxinger, Chalupsky & Partners (SCWP Schindhelm) is able to cover several angles including GDPR, cookie warnings, health data protection and the data elements of M&A. The team is led by data protection all-rounder Michael Pachinger and counsel Philipp Reinisch, who specialises in international data transfers and cloud computing solutions.

Practice head(s):

Michael Pachinger; Philipp Reinisch


‘We received high-quality advice from Dr. Pachinger, above all competence and commitment in auditing and advice on all data protection issues. With Dr. Pachinger of the law firm SCWP Schindhelm we have a professional companion in data protection at the highest level!’

Key clients

VERITAS – Verlags- und Handelsgesellschaft m.b.H. & Co. OG YOUSURE Tarifvergleich GmbH

TimeTac GmbH

Ringana GmbH

dm -drogerie markt GmbH

Ulla Popken GmbH & Co.KG.

Hagleitner Hygiene International GmbH

Medakte GmbH

E. Breuninger GmbH & Co.

Upper Austria Tourism

Österreichische Staatsdruckerei GmbH

Work highlights

  • Advising independent fixed-cost comparison platform on a range of complex data protection issues associated with its platforms.
  • Advised Medakte GmbH on its implementation of all GDPR requirements and security measures guarding health data of customers.

Taylor Wessing enwc Rechtsanwälte GmbH

Taylor Wessing enwc Rechtsanwälte GmbH fields a CEE data protection team with a strong skill set in data transfer, GDPR implementation, cloud computing and online payment systems. The group is led by Andreas Schütz, who is particularly sought after by IT, telecoms and food sector clients. Associate Christopher Bakier excels in data protection matters in the health sector.

Practice head(s):

Andreas Schütz

Other key lawyers:

Christopher Bakier

Key clients

TNT (Express) Austria

ZGONC Handel GmbH

Vorwerk & Co KG

Pirelli Österreich GmbH

Nestlé Österreich GmbH


Great Lenghts Haarvertriebs GmbH

FRONERI Austria GmbH

IKEA of Sweden AB

Sky Österreich Fernsehen GmbH

Dr. A. & L. Schmidgall GmbH & Co

Bosch Software Innovations GmbH

Elektra Bregenz Aktiengesellschaft

Casper Sleep GmbH

Eilenberger Consulting

Fielmann GmbH

Hill International GmbH


ARGO Personalentwicklung Gesellschaft m.b.H.

Norske Skog Industrier ASA

kununu GmbH

Eilenberger Consulting SteuerberatungsgmbH

Haberkorn Holding AG

Haberkorn GmbH

Claus Haberkorn

Familie Haberkorn Privatstiftung

GroupM OG

Davinci Lab OG

Alois Dallmayr OHGr

Wolters Kluwer CENTRAL EUROPE Beteiligungsgesellschaft m. b. H.

Unified Logic

Fette Compacting GmbH

Salzgitter Mannesmann Handel GmbH

HoReCA Digital GmbH

Theater der Jugend

Tyrol Equity AG

Punto Fa, S.L (Mango)

Cythus EXQUIRE Pharmaforschungs GmbH

„Dach und Wand“ Handels GmbH

Tiffany & Co

Urban Massage Limited

Agrana Juice Holding GmbH

Agrana Beteiligungs-Aktiengesellschaft

Bearing Point GmbH

Salonmeister GmbH (Treatwell)

Roland Spedition GmbH

ISO Leadership GmbH

Lafarge Perlmooser GmbH

Lafarge Perlmooser AG

Lafarge Zementwerke GmbH

Perlmooser Beton GmbH

Prema Autozubehör Handelsgesllschaft m. b. H.

Ricoh Europe PLC

Ricoh Austria GmbH

KGAL GmbH & Co. KG

KGAL Asset Management Österreich GmbH

Nuance Communications, Inc.

Otto Bock Healthcare Products GmbH


Stanton Chase International

Angelini Group


Avira Operations GmbH & Co. KG

Elektra Bregenz AG

Panasonic Electric Works Austria GmbH

LexisNexis Verlag ARD ORAC GmbH & Co KG


Hiscox Insurance Company Ltd

ALSO Austria GmbH

Atradius Credit Insurance

Axa France IARD Societe Anonyme

Bierwirth & Kluth Hotel Management GmbH

Salamantex GmbH

Work highlights

  • Advised Nestlé Österreich on the implementation of data protection requirements and data protection issues concerning online marketing.
  • Advised an automotive client on the international implementation of a market research and after-sales analysis system of dealers for the purposes of optimising business processes and analysis with regard to improved advertising and addressing customers.

Binder Grösswang

Data breaches, GDPR implementation, consent declarations and advice on cookies make up the bulk of work at Binder Grösswang. IP/IT expert Ivo Rungg and employee data privacy specialist Angelika Pallwein-Prettner jointly head the team, with data protection work largely handled by Philipp Spring, who also represents clients in legal proceedings before data protection authorities.

Practice head(s):

Ivo Rungg; Angelika Pallwein-Prettner

Other key lawyers:

Philipp Spring


‘In our case, it was the outstanding professional competence of the support in a new field of law for us as well as for the law firm. In our opinion, another strength lies in the speed of reaction of the partner.’

‘Our contact was Dr. Philipp Spring. We felt extremely well taken care of from the very first moment of contact. The professional competence of the partner and the objective approach convinced us immediately. His very good preparation of the subject matter in our proceedings with the authorities ultimately led to the result we had hoped for.’

‘I would like to underline the quick reaction and availability of the team members of the data privacy and data protection practice group.’

‘We were provided with support in demanding legal matters in a practicable and feasible way. We have never waited long for the first approach to solve our questions.’

‘Dr. Philipp Spring showed a very accomplished knowledge and a lot of practicable experience in his field. That allows him to give a hands-on support to his clients that helps them to solve issues on very short notice.’

Key clients

Österreichische Post AG

Capgemini Consulting Österreich AG

BNP Paribas

OBI Bau-und Heimwerkermärkte Systemzentrale GmbH

Volksbanken Wien

Renault Österreich GmbH

City of Vienna

Société Générale Austria

Association Novid20

Starbucks Coffee Austria GmbH


Work highlights

  • Advised Association NOVID20 on the roll-out of a Covid-19 App.
  • Advised BNP PARIBAS S.A. on a cooperation agreement, especially in relation to data transfers and the evaluation of the parties’ roles from a data protection perspective.

Eversheds Sutherland | Stolitzka & Partner RAe OG

Eversheds Sutherland | Stolitzka & Partner RAe OG provides data protection and GDPR advice to a wide range of clients. Managing partner Georg Röhsner, who is also an experienced litigator, heads the department. Clients turn to recently promoted partner Manuel Boka for assistance with software design, hardware procurement and new legal frameworks.

Practice head(s):

Georg Röhsner

Other key lawyers:

Manuel Boka


‘The Data protection team of Eversheds Sutherland is a brilliant example of high level legal knowledge with a clear understanding of business needs in the data protection environment; their legal advice is always tailored to the needs of our company.’

‘We value that Eversheds Sutherland’s advice is of excellent quality, always putting our business interests at the core of their advice. Their advice is always on time and the communication very professional. Their team has an impressive understanding of technological issues, helping them to provide innovative approaches to our business, particularly in matters of data protection.’

‘Managing Partner Georg Röhsner: we value his experience and the support he has provided to our business for more than a decade, which allows him to understand our business and our values well and to provide solutions tailored to our needs.’

‘Very business orientated approach by solving legal issues. The results are legal recommendations which fit to our business practice and can easily be implemented.’

‘Dr. Georg Röhsner: pragmatic approach, wide experience, networked thinking, easily reachable and precise.’

Key clients

ORF Enterprise

Radio Eins Privatradio GmbH

Phoron Consulting GmbH

Österreichische Kinderkrebshilfe

MAKAM Research GmbH

Die Berater UnternehmensberatungsgmbH

Work highlights

  • Advising ORF Enterprise GmbH on achieving and maintaining GDPR-compliance on its news portal.
  • Advising Makam Research on GDPR compliance concerning the research and development of a mental health app to fight anxiety disorders and phobias.


Graf & Pitkowitz is particularly involved at the intersection of data protection and other areas of law such as competition, corporate and IP law. The 'highly competent' Marija Križanac, who is also active in data protection litigation, jointly heads the team with Ferdinand Graf. The latter predominantly covers data issues overlapping with M&A and IT.

Practice head(s):

Marija Križanac; Ferdinand Graf


‘Perfect combination of legal expertise in data privacy related matters and excellent hands-on-mentality and feeling for the practical needs of an in-house counsel.’

‘Graf & Pitkowitz is an excellent law firm; the great thing about this practice group in particular is that you do not get just isolated data protection advice, but advice from a holistic perspective, because the team, e.g. Marija Križanac, is so knowledgeable in many other areas of the law as well and has a good understanding of the business world. You always have a direct line to the practice head when you need something.’

‘Marija Križanac has an excellent understanding of business processes and the resulting legal issues/questions. The response time is always very fast with clear legal advice which is a great help to come to a quick but competent solution.’

‘Marija Križanac is a highly competent lawyer; her work is brilliant – with her you get one-stop-shop advice because she is so knowledgeable not only in the area of data protection law but also other related legal areas. Marija always gives highly practical, quick and on point advice. It’s absolutely great to work with her. I highly recommend her!’

‘Marija Križanac demonstrated an outstanding hands-on-mentality and really understands the business interest and the needs of an in-house counsel.’

Key clients

LUKOIL International GmbH, LUKOIL Holding GmbH

VELUX A/S; VELUX Österreich GmbH

Irving H. Picard (Trustee for the substantively consolidated SIPA liquidation of Bernard L. Madoff Investment Securities LLC & Bernard Madoff)

Work highlights

  • Advised LUKOIL on various data protection matters – from intra-group cross-border data transfers to Covid-19-related data processing
  • Advising VELUX on developing new ad campaigns/marketing initiatives and contract partner programmes, inter alia from a data protection perspective

Herbst Kinsky Rechtsanwalte GmbH

GDPR implementation and compliance are the pillar of the data protection department at Herbst Kinsky Rechtsanwalte GmbH. The group also works closely with the firm's corporate and M&A team, for instance in investments with a data privacy aspect. Sonja Hebenstreit, who has additional know-how in software licensing, is in charge of the practice.

Practice head(s):

Sonja Hebenstreit

Key clients

Borealis AG


Senovo and Project A


Allcyte GmbH

Probando GmbH

Familia Austria – Austrian Society for Genealogy and History


Class Ninjas

Work highlights

  • Advising CIRSE group on its GDPR implementation and compliance processes regarding its different fields of activity, namely in particular, congress organisation, and research (including clinical and education).
  • Advising Allcyte on GDPR and Austrian data protection law in the context of research activities and clinical trials.
  • Advising “FitInn” on data protection law compliance issues, such as regarding the scope of the information right, including in proceedings before the Data Protection Authority.

KPMG Law in Austria

The IT team at KPMG Law in Austria was established in autumn 2019, and includes lawyers that were previously at other leading firms in the market. Counsel Karin Bruchbacher leads the department, which has a core focus on GDPR compliance, data privacy and data protection, especially relating to start-ups, investors and TMT clients.

Practice head(s):

Karin Bruchbacher


‘Very experienced and motivated team with high quality lawyers. In-depth technical knowledge.’

‘Karin Bruchbacher is excellent and experienced, hands-on-mentality and feeling for the practical needs of our company, very supportive. Perfect combination of expertise in legal & compliance topics.’

Key clients

drd GmbH

Fronius International GmbH

ISIS Papyrus Europe AG

Sezzle Inc.

Trade Republic Bank GmbH

consapption GmbH

it-tects IT-Beratung und Dienstleistungs KG

Sanag GmbH

Wiener Familienbund

Barracuda Music GmbH

Auer Signal GmbH

Work highlights

  • Advising drd GmbH, including on the assessment of admissibility of the first platform-based telemedical business model in Austria.
  • Advising Sezzle Inc. on its launch in Europe, particularly regarding GDPR compliance related to the different business models, GDPR implementation, data transfer models as well as bank secrecy law matters.
  • Advising Trade Republic Bank GmbH on its launch in Austria, particularly on complex (regulatory) issues related to consumer and data protection matters as well as telecoms law.

KWR Karasek Wietrzyk Rechtsanwälte GmbH

At KWR Karasek Wietrzyk Rechtsanwälte GmbH, the core focus is on GDPR implementation assistance and GDPR compliance. Anna Mertinz, who also heads the firm's employment team and therefore has deep knowledge of the protection of employee data, jointly heads the group with Barbara Kuchar. The latter has a strong IP background and assists clients with data breaches.

Practice head(s):

Anna Mertinz; Barbara Kuchar

Key clients

Estee Lauder Cosmetics Ges.mbH

Coca-Cola HBC

Handler Holding GmbH

Rohde & Schwarz Österreich GesmbH


Willis Towers Watson Austria GmbH

De’ Longhi Kenwood GmbH

Edizon Innovation GmbH

Ivellio-Vellin IT Services

Lansky, Ganzger + Partner (LGP)

Lansky, Ganzger + Partner (LGP) is retained by clients from the media, telecoms, tourism and healthcare sectors to support data protection efforts and GDPR implementation. Katharina Raabe-Stuppnig is also an experienced litigator and is well placed to handle contentious data protection matters. She jointly heads the practice with Gerald Ganzger, who specialises in data protection issues relevant to the media and entertainment industry.

Practice head(s):

Gerald Ganzger; Katharina Raabe-Stuppnig


‘Katharina Raabe is the only privacy lawyer in Austria that has material law knowledge on privacy / GDPR and at the same time excellent knowledge of procedural law.’

Key clients

Max Schrems

Bohmann Druck und Verlag GmbH

Radio Energy (Member of the French NRJ Group)

VGN Medien Holding GmbH

Austrian Economic Chambers

Falkensteiner Michaeler Tourism Group

Rainer Kraftfahrzeughandels AG

Ueberreuter Verlagsgruppe

Wiener Komfortwohnungen

Chamber of Commerce Vienna

Cup Solutions Mehrweg GmbH

Work highlights

  • Acting for Austrian data protection activist Max Schrems in a lawsuit against Facebook.
  • Assisting VGN Medien Holding GmbH (“Verlagsgruppe News“) with data protection issues.  
  • Assisted Radio Energy with regard to the introduction of the EU’s General Data Protection Regulation and the roll-out of listener loyalty programmes.