The team at DORDA Rechtsanwälte GmbH frequently represents clients before the Austrian data protection authority and the Federal Administrative Court in matters of data protection, advising on issues around cookies, data retention and GDPR disputes. Managing partner Axel Anderl jointly heads the team, advising on data aspects of IT and outsourcing projects in addition to GDPR compliance. Alongside him is the ‘very flexible, pragmatic and solution-oriented’ practice co-head Nino Tlapak, who handles IT security matters and assists clients in the event of data breaches, with further expertise in cloud agreements. Alexandra Ciarnau co-heads the firm’s digital industries group, adding experience in the fields of AI and digitalisation in addition to her focus on e-commerce and consumer protection.
Data privacy and data protection in Austria
DORDA Rechtsanwälte GmbH
Practice head(s):
Axel Anderl; Nino Tlapak
Other key lawyers:
Alexandra Ciarnau
Testimonials
‘The team consists of exceptional individuals with different strengths and specialisations, forming a perfect combination and covering all areas of data privacy and protection topics. They recognize important topics and developments in the field before anyone else.’
‘Nino Tlapak is a top notch lawyer. He has a quick mind and is a real problem solver. He has always the right answer to even the most complicated questions.’
‘Nino Tlapak – very flexible, pragmatic and solution-oriented.’
‘Nino Tlapak has profound knowledge of data protection and is proactive in solving problems and proposing pragmatic solutions.’
‘The team always responds quickly, has a good representation structure and has a collegiate feel.’
‘Our lawyer had a good understanding of the law and the experience in practice to advise us on how to proceed with specific legal issues. He responded quickly, was solution-oriented and tied business matters together with what is possible legally.’
‘The legal information is clearly formulated and to the point. Even ad hoc information over the telephone is precise and reliable. One can always rely on the quality of their advice.’
‘In addition to their excellent legal knowledge, Axel Anderl and Nino Tlapak are characterised by their ability to recognise company-specific problems and quickly find pragmatic solutions. With Axel Anderl and Nino Tlapak, you know you are in good hands.’
Key clients
BNP Paribas
oe24 GmbH
neoom
ÖBB Personenverkehr
One MobilityFederal Ministry for Climate Action, Environment, Energy, Mobility, Innovation, and Technology
Interactive Paper, Better Life Tech, Carealytix, LTY, MAYD Group GmbH
Erste Digital GmbH
Erste Group
Erste Bank
Atomic Austria
METRO Cash & Carry Österreich
Allianz Elementar Versicherungs-Aktiengesellschaft
Novartis Pharma Austria
bioMérieux Austria
Bayer Austria GmbH
Sandoz
Janssen-Cilag Pharma
UNIQA Group
VIG IT Digital Solutions GmbH
Xund Solutions
L’Oréal Österreich
Trinicum
A. Menarini Pharma
RWA Raiffeisen Ware Austria AG
Forbes (FEB29 Medien und Verlags GmbH)
Work highlights
- Acted for UniCredit Bank Austria before the Austrian Highest Administrative Court as the last instance regarding the admissibility of the banking warning list.
- Engaged by BNP Paribas SA as its new external data protection officer for all of its Austrian companies.
- Assisted the Federal Ministry for Social Affairs, Health, Care and Consumer Protection of Austria with regard to data protection compliance of a draft law in the health care area.
Knyrim Trieb Rechtsanwälte OG
Knyrim Trieb Rechtsanwälte OG leverages its ‘extensive experience and expertise’ to advise clients on GDPR compliance, including in projects undertaken by clients in the automotive and pharmaceutical sectors in addition to acting for government bodies. Founding partners Rainer Knyrim and Gerald Trieb cover the gamut of data protection matters, appearing frequently before the Austrian data protection authority and the Administrative Courts on matters ranging from misuse of personal data to issues stemming from data breaches. Lena Urban advises on data protection matters tied to EU laws and offers further expertise in consumer protection law.
Practice head(s):
Rainer Knyrim; Gerald Trieb
Other key lawyers:
Lena Urban
Testimonials
‘Extensive experience and expertise. Over the years they have built an excellent team that supports us in different ways. Good mix of people.’
‘My go-to team whenever a legal issue on data protection arises in Austria!’
‘Our collaboration with Knyrim Trieb Rechtsanwälte continues to be highly efficient and appreciated.’
Key clients
European Crohns and Colitis Organisation – ECCO
Wienerberger AG
REWE International, Unser Ö-Bonus Club GmbH
Boehringer Ingelheim RCV GmbH & Co KG
SWAROVSKI AG
Federal Job Agency
Stadtwerke Kitzbühel e.U.
KIA AUSTRIA Gesellschaft m.b.H.
LOOMIS ÖSTERREICH GMBH
Austrian Association of Electricity Companies
Lenzing AG
Immofinanz AG
DSGVO-ZT
Greiner AG
KELAG-Kärntner-Elektrizitäts-Aktiengesellschaft
Work highlights
- Represented the Austrian Job Agency in proceedings before the Austrian Highest Administrative Court in relation to questions in relation to the processing of personal data of formerly unemployed Austrians.
- Assisted an international group of companies and members of a major Austrian industry association with the implementation of Microsoft 365.
- Provided data protection consulting for a real estate company in an extensive project to further develop housing allocation in subsidised and municipal housing.
Baker McKenzie Rechtsanwälte LLP & Co KG
Baker McKenzie Rechtsanwälte LLP & Co KG‘s advises an array of clients in the technology and digital spheres on matters of data protection and security, including defending against claims of customer data misuse under both Austrian and EU legislation. ‘Excellent lawyer’ and practice head Lukas Feiler has a strong track record before Austria’s data protection authority and courts, including the ECJ, concerning clients’ use of their customers’ data, while also providing support in relation to projects that require data processing and storage. Maximilian Raschhofer handles administrative and criminal proceedings centred on data matters, including disputes around data protection and outsourcing for clients in the tech and health sectors.
Practice head(s):
Lukas Feiler
Other key lawyers:
Maximilian Raschhofer
Testimonials
‘Smart and outstanding people; high quality of legal advice, especially regarding data protection.’
‘Lukas Feiler is an excellent lawyer regarding data protection and IT law; he has a huge amount of knowledge and offers highly professional legal solutions for even the most complicated tech issues.’
‘The team has incredible subject matter expertise in our industry and with relevant up-to-date privacy litigation and decisions that may impact our services. They also have unique relationships with regulators which allows us to understand relevant interpretations.’
Key clients
CRIF GmbH
GATX Rail Europe
STANDARD Verlagsgesellschaft
Mondi AG
Work highlights
- Represented Google in two proceedings before the Austrian Data Protection Authority concerning the widely used analytics tool, Google Analytics.
- Acted for Google in administrative proceedings before the Austrian data protection authority related to the service Google Fonts.
- Represented CRIF in proceedings before the European Court of Justice in connection with the right to receive a copy under GDPR.
Cerha Hempel
Cerha Hempel delivers ‘practical solutions’ in the field of data protection, advising clients on their responsibilities around cross-border outsourcing, data transfer and cloud computing projects, while also representing clients in actions before the Austrian data protection authority and the courts pertaining to data breaches. Team head Hans Kristoferitsch offers his clients a ‘pragmatic approach’ to data protection, assisting international clients on the rollout of new mobile apps and other matters that concern handling of customer data, while also advising on GDPR compliance and contentious EU law cases. Armin Schwabl, who is also admitted in New York, advises on regulatory data protection matters, while Boris Treml supports businesses in implementing GDPR, carrying out data risk assessments and IT outsourcing projects.
Practice head(s):
Hans Kristoferitsch
Other key lawyers:
Armin Schwabl; Stephanie Maier-Herbeck; Boris Treml
Testimonials
‘We have been working with Cerha Hempel for many years and are extremely happy with the support. In particular we appreciate that they offer a full service and can also cover issues under public and administrative law as well as all technical aspects of data protection.’
‘Hans Kristoferitsch is always available, has great experience in dealing with the DPA and in proceedings before the civil and administrative courts. Boris Treml has helped us greatly in linking the worlds of IT and law.’
‘We think that what makes Cerha Hempel stand out is its ability to offer full service in data privacy, also covering all related aspects under civil law as well as the technical aspects (data security, privacy by design and default etc).’
‘Hans Kristoferitsch is very pleasant to work with, very experienced in all matters of privacy law, with a pragmatic approach which has helped us a lot in connection with the digitisation of our business processes.’
‘Cerha Hempel has truly outstanding capabilities in the area of data protection and TMT; they are highly skilled and reliable, it is a fantastic team to work with. ‘
‘Hans Kristoferitsch is definitely one of the leading privacy lawyers in Austria; his advice is always clear and to the point and you constantly feel that he has tremendous experience in this area.’
‘Boris Treml combines legal with technical expertise, providing unequalled insights and advice as to data, network and information security.’
‘Armin Schwabl is an excellent lawyer, he is always available and pragmatic, he really goes out of his way to help solve your legal problems.’
Key clients
SPAR
Wiener Stadtwerke GmbH and subsidiaries
City of Vienna
Hervis Sport- und Modegesellschaft m.b.H.
via donau – Österreichische Wasserstraßen GmbH
Wien ENERGIE GmbH
Wiener Netze GmbH
Wiener Linien GmbH
Wiener Lokalbahnen GmbH
ASFINAG Autobahnen- und Schnellstraßen-Finanzierungs-Aktiengesellschaft
NTS Netzwerk Telekom Service AG
CA Immobilien Anlagen AG
Institute of Science and Technology Austria (IST Austria)
Österreichischen Fonds zur Dokumentation von religiös motiviertem politischen Extremismus (Dokumentationsstelle politischer Islam)
ÖRAG Österreichische Realitäten AG
COVID-19 Finanzierungsagentur des Bundes GmbH
Flughafen Wien AG
Land Vorarlberg
Isovolta AG
Fundermax GmbH
Danube Private University
Deutsche Vermögensberatung Bank Aktiengesellschaft
Work highlights
- Assisted SPAR with all legal matters around the creation of a new app and provided the legal documents and contracts, data protection impact assessment and data protection notices.
- Advised Wiener Stadtwerke GmbH and all of its subsidiaries on a group-wide project introducing a Single-Sign-On mechanism and a centralized user account for customers of all group entities.
- Advised the City of Vienna on the redesign and merger of their communication platforms targeted at 1.9mn residents.
GEISTWERT
GEISTWERT‘s partner-only practice provides ‘extremely fast and efficient advice’ at the intersection of data protection and IP, handling international data transfers, IT projects and data protection aspects of corporate transactions. The team, consisting of Constantin Kletzer, Juliane Messner, Max Mosing, Alexander Schnider and Rainer Schultes, also acts for clients facing hearings before the Austrian data protection authority and the courts, assisting with issues concerning user data disclosure requests and GDPR matters. The firm’s client base is comprised of companies ranging from digital media and pharmaceuticals to leisure and public bodies, whom it also advises on digital projects and initiatives including the launch of new customer programmes and services.
Practice head(s):
Constantin Kletzer; Juliane Messner; Max Mosing; Alexander Schnider; Rainer Schultes
Testimonials
‘Excellent market knowledge of the sectors that are important to us, such as EdTech, IP law, pharmaceutical law, corporate law bundled in one law firm, solving problems in a client-oriented manner and providing extremely fast and efficient advice.’
‘Juliane Messner has the best knowledge of corporate law. So important for us because we are internationally established. Max Mosing provides us with solution-oriented support in the volatile environment of data protection law. Rainer Schultes is our trusted pharmaceutical law specialist.’
‘Juliane Messner and Max Mosing are hands-on, knowledgeable and understand the business of their clients. They are stand-out lawyers in the market and always give clients the feeling that their matters are in good hands.’
Key clients
Red Bull Media House
Red Bull
HGV – South Tyrolean Hotel Association
The Vienna Tourist Board
DAZN
DOUGLAS
IQVIA
Altstoff Recycling Austria AG (ARA) and Saubermacher AG
Baxter
Mayr-Melnhof (IT)
Blackshark.ai
LTS – South Tyrol Association of Tourism Organisations
Vet-webinar
ASFINAG
Work highlights
- Advised Red Bull Media House in data protection matters, especially international data transfers and regarding the launch of new services.
- Represented several clients before the Austrian data protection authority and Austrian courts in proceedings initiated by NOYB regarding international data transfers, especially concerning Google Analytics and other US-based tools.
- Advised Altstoff Recycling Austria AG regarding the data protection impact of the implementation of a recycling system for cans and plastic bottles with an electronic deposit system.
Schoenherr (Schönherr Rechtsanwälte)
At Schoenherr (Schönherr Rechtsanwälte), the data protection practice straddles both Austrian and EU data protection law, with extensive experience assisting clients on GDPR compliance and data security issues tied to international transactions. Under the leadership of the ‘fantastic’ Günther Leissler, the practice group has achieved notable successes before Austria’s data protection authority and the courts in matters concerning the processing of user data, cookies and data analysis, among other issues. Veronika Wolfbauer left the firm in February 2024.
Practice head(s):
Günther Leissler
Testimonials
‘Big team, you find experts for everything.’
‘Günther Leissler is a very kind, competent, diligent, fast-responding expert for data privacy and data mining.’
‘In my experience working with Schoenherr on data privacy regulatory and litigation matters, the team is second to none for this work in Austria.’
‘Gunther Leissler is fantastic – he knows everything there is to know about data protection law in Austria, and always provides sound strategic advice. He is ably supported by an excellent team.’
‘Schoenherr simply offers an ambience in which you feel comfortable as a client from the very beginning.’
‘The Schoenherr team is a team of lateral thinkers and thus comes up with very good solutions and approaches. Schoenherr also has a very good international network.’
Key clients
Österreichische Post AG
Vienna Insurance Group
Advent International Corporation
Deutsche Telekom
Work highlights
- Represented Meta, Inc. in defending claims filed by data protection activist Maximilian Schrems in 2014.
- Acted for Österreichische Post AG in GDPR-related proceedings.
Wolf Theiss Rechtsanwälte GmbH & Co KG
Wolf Theiss Rechtsanwälte GmbH & Co KG‘s team handles the full spectrum of data protection issues, with expertise that includes both advisory and contentious GDPR matters, in addition to assisting clients with ongoing data security measures and acting for them in response to data breaches. Practice head Roland Marko represents a number of high profile clients in both the traditional and social media sectors before the Austrian data protection authority in claims concerning potential GDPR breaches and questions over the handling of user data, with further knowledge of IT outsourcing projects, e-commerce regulations and cloud computing. Paulina Pomorski is noted for her skill in data privacy litigation, while Phillip Wrabetz specialises in advising the digital media and life sciences sectors on data protection matters.
Practice head(s):
Roland Marko
Other key lawyers:
Paulina Pomorski; Phillip Wrabetz
Key clients
Addiko Bank
Österreichische Post
Bank99
Meta Platforms
Peek & Cloppenburg
REWE International
UniCredit Bank
Work highlights
- Represented Österreichische Post before the ECJ in the first-ever series of GDPR claims in Austria, where a large number of people allegedly affected by data protection violations sued for damages.
- Advised a transportation company on data governance issues, including on questions of data ownership and mandatory access rights in machine data.
- Assisted a healthcare provider with the transfer of patient data and cells to a US-headquartered services provider.
Binder Grösswang
A key pillar of Binder Grösswang‘s data protection practice lies in new technologies, where the firm advises on digitalisation processes and e-commerce matters. On both fronts the team has experience in acting for clients ranging from startups to multinationals on contentious proceedings before Austria’s data protection authority as well as advisory matters, including compliance with regulatory regimes. The team is led by Ivo Rungg, whose practice covers the digital sector, and Angelika Pallwein-Prettner, who advises employers on data protection and privacy compliance.
Practice head(s):
Ivo Rungg; Angelika Pallwein-Prettner
Testimonials
‘Very personal and individual support and processing of legal issues.’
‘Ivo Rungg: excellent expertise and collaborative work.’
‘There’s always someone with expertise in a specific area. Great & friendly team, always provides thorough research and fast responses.’
‘Ivo was great, he always replied quickly and his research and responses were very thorough.’
‘All team members have extensive experience in all the IP fields where we require their assistance.’
‘Ivo Rungg and the whole team provided valuable assistance by drafting various legal documents in this context, such as privacy policies and cooperation agreements.’
‘Exceptional experience with this firm! Their deep understanding of clients’ needs and empathetic approach set them apart. The team’s expertise, coupled with innovative technology, ensures efficient and precise services. Highly recommended!’
‘Their personalised approach, combined with a deep understanding of the law, distinguishes them from competitors. I value the team’s expertise, professionalism, and proactive communication. Ivo Rungg has demonstrated outstanding commitment and exceptional problem-solving skills.’
Key clients
ByteDance (TikTok)
Société Générale
Jazz Pharmaceuticals
Renault Österreich
BNP Paribas
Vaya Fieberbrunn
HELLWEG Baumärkte
CCT Software Solutions
Österreichische Post
Stadt Wien
Austrian Federal Ministry of Finance
Buildtelligent
SF Filterdienst
GlaxoSmithKline plc
AUDI
OBI Bau- und Heimwerkermärkte Systemzentrale GmbH
Easy Park
Work highlights
- Advised Audi in connection with data protection issues related to new driving technologies.
- Assisted ByteDance (TikTok) with data protection matters.
CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH
CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH leverages its international presence to advise major clients across a range of sectors, including retail, automotive and media, on data protection matters both within Austria and in cross-border contexts. Practice head Johannes Juranek brings ‘great knowledge’ of GDPR compliance to bear and also represents clients before the Austrian courts, while Klaus Pateter, who joined the firm as partner in January 2023, specialises in assisting technology companies with data matters.
Practice head(s):
Johannes Juranek
Other key lawyers:
Klaus Pateter; Christina Maria Schwaiger
Testimonials
‘We highly value Johannes Juranek’s great knowledge in the field of data privacy & data protection.’
Key clients
ENEROX GmbH
St Anna Kinderspital
Universal Edition AG
Reactive Reality
ALPLA
Two-x-Ten
REWE
Sky
Work highlights
- Advised Novid20 in its management buy-out and subsequent pivot to a product and venture builder business, which required advice on complex digital products, IT, data protection and product compliance law.
E+H Rechtsanwälte GmbH
Compliance advice, data transfers linked to transactions and data privacy litigation all fall under the remit of E+H Rechtsanwälte GmbH‘s data protection team, which acts for household names in the automotive and IT sectors, among others. Leading the team is Andreas Zellhofer, who specialises in matters covering aspects of data protection, IT and IP law, with further expertise in unfair competition issues. Helmut Liebel ‘brings a unique technical understanding’ of data protection to the practice, and also advises on IP and IT matters.
Practice head(s):
Andreas Zellhofer
Other key lawyers:
Helmut Liebel; Florian Sagmeister
Testimonials
‘We have a long and regular history of collaboration and cooperation, which allows us to facilitate transactions in the CEE Region with seamless benefits for our clients.’
‘For data protection matters, Helmut Liebel is our number one contact, with exceptional knowledge of the IT industry. Having studied IT, Helmut brings a unique technical understanding to his legal work that is unmatched in Austria. His attention to detail is invaluable.’
‘E+H and its team members are an excellent partner for all legal matters. The team is available 24/7, urgent issues are dealt immediately and there are no wishes that remain unfulfilled. The coordination between internal departments also leaves nothing to be desired.’
‘Highly professional, competent, respectful and professional approach.’
Key clients
Microsoft
Toyota
OMV
Honda
TeamBank
öGIG
Knauf
Stark Group
Work highlights
- Advised Microsoft on the lawful use of Office 365 cloud computing services by Austrian business customers.
- Assisted Toyota with the introduction of new smart and connected services for vehicles.
- Advised Stark Group on the acquisition of Schilowsky as well as Dach & Wand.
KWR Karasek Wietrzyk Rechtsanwälte GmbH
KWR Karasek Wietrzyk Rechtsanwälte GmbH strengthened its data protection practice with the December 2022 arrival of Beatrice Blümel from the Austrian data protection authority, who heads the firm’s new technology and digitalisation group and assists clients in the event of data breaches. The team advises on trade secrets and e-privacy matters, handling ongoing IT projects and GDPR compliance. The team is jointly led by Anna Mertinz, who has extensive experience at the intersection of data protection and employment law, and Barbara Kuchar, who represents clients in the wake of data breaches and is also noted for her work on trade secrets.
Practice head(s):
Anna Mertinz; Barbara Kuchar
Other key lawyers:
Beatrice Blümel
Testimonials
‘For us, KWR’s network to central and eastern Europe is very important. KWR was able to support us quickly with issues in other countries by establishing contact with partner law firms or clarifying questions for us via these law firms.’
‘Anna Mertinz is easy and pleasant to work with. She makes time even on days with busy schedules and is always professional and friendly.’
‘Anna Mertinz has remarkable professional experience in data protection and it is always a pleasure to work with her.’
Key clients
Austrian Limited E-Commerce GmbH
AGRANA
Maispa
LOS 22 Wien
Ing. Armin Weinrath
DIALOG Bildungs- und Beratungsinstitut GmbH
myneva Austria GmbH
engcon Austria GmbH
Coca-Cola HBC Austria GmbH
Ryanair
Mister Spex AG
Nemo Healthcare BV
System 7 group
International Board of Lactation Consultant Examiners (IBLCE)
Rohde & Schwarz Österreich GesmbH
MAHLE Filtersysteme Austria GmbH
ASSA ABLOY Austria GmbH
Familie & Beruf Management GmbH
Diversity Think Tank Consulting GmbH
Arbeitswelten Consulting
Luther Rechtsanwaltsgesellschaft mbH
De’Longhi Kenwood GmbH
Edizon Innovation GmbH
Ivellio-Vellin IT Services
Willis Towers Watson Austria GmbH
Work highlights
- Advised the Ryanair Group, particularly Lauda Europe, Malta Air and Ryanair DAC on airline-specific data protection questions.
- Advised Agrana on whether its head of legal was subject to full or only partial obligations under GDPR.
- Assisted Coca-Cola Hellenic on the transfer of data to third countries and the allocation of roles within of the group.
SAXINGER Rechtsanwalts GmbH
SAXINGER Rechtsanwalts GmbH‘s team of ‘highly skilled’ data protection lawyers acts for clients seeking to undertake data transfers and ensure compliance with GDPR, while continuing to occupy a strong niche in advising public bodies on data protection matters. 2023 saw changes to the practice group’s leadership, with former co-head Philipp Reinisch moving to Fieldfisher Rechtsanwälte GmbH & Co KG‘s new Vienna office in July 2023, and with data and IT security specialist Philipp Leitner stepping into the breach. Co-head Michael Pachinger utilises his ‘deep legal knowledge’ to support clients in data privacy matters and is also well versed in matters pertaining to IT, telecoms and e-commerce law.
Practice head(s):
Michael Pachinger; Philipp Leitner
Testimonials
‘One key strength of SCWP Schindhelm is its highly skilled and diverse team of legal experts. This diversity enables to bring fresh perspectives and creative, interdisciplinary solutions to client projects.’
‘What sets Michael Pachinger apart from competitors is not only his deep legal knowledge, but also his commitment to delivering outstanding results for his clients.’
‘The extremely competent advice and updates on decisions on data protection are what makes working with SCWP so special. Even in connection to related issues, possible impacts on all facets of the company were always pointed out to us.’
‘Working with Michael Pachinger is characterised by his suggestions and implementation tips. Matters were dealt with in such a way as to enable a feasible outcome. His extremely constructive and friendly manner supported his advice immensely.’
‘The team reaches a high level, they offer very useful help in negotiations as well as expert witnesses.’
‘Michael Pachinger is a leading expert in questions of data protection. He is straight to the point and responds quickly.’
Key clients
Resch&Frisch Holding GmbH
MatchMaker Sports GmbH
Peneder Holding GmbH
Conrad Electronic
Heyrise
Ulla Popken GmbH & Co.KG.
Work highlights
- Won a tender to advise the Austrian government on ongoing initiatives for innovation in the digital, IT and data protection sectors.
- Advised a central Asian tech company on the data protection permissibility of its collaboration platform.
Taylor Wessing enwc Rechtsanwälte GmbH
Taylor Wessing enwc Rechtsanwälte GmbH‘s clients receive ‘top-notch advice’ across the spectrum of data protection and privacy matters with the firm advising on GDPR compliance and assisting with ongoing monitoring and development of clients’ data handling structures. ‘Seasoned practitioner’ and team head Andreas Schütz advises his roster of clients from the IT, telecoms and food sectors on complying with data protection regulations and handling data breaches, while Christopher Bakier focuses on data protection provisions tied to IT projects, cloud computing and the healthcare sector, among others.
Practice head(s):
Andreas Schütz
Other key lawyers:
Christopher Bakier; Peter Lohberger
Testimonials
‘The data protection team’s instrumental role in ensuring compliance with data protection regulations, coupled with their top-notch advice, has been key to our successful venture into e-commerce.’
‘Andreas Schütz is a seasoned data protection practitioner, always going the extra mile.’
Key clients
„Dach und Wand“ Handels GmbH
Agrana Beteiligungs-Aktiengesellschaft
ALSO Austria GmbH
Angelini Group
AXA France IARD Societe Anonyme
Broken Rules Interactive Media GmbH
Da Vinci Lab OG
Daibau doo
Die Menu-Manufaktur GmbH
Easy Park
EGR Vertriebs- und Handelsges.mbH
Elektra Bregenz AG
European Forum Alpbach
Functional Software GmbH
Great Lengths Haarvertriebs GmbH
GroupM OG
Haberkorn GmbH
Haberkorn Holding AG
Hiscox Insurance Company Ltd
Immobilien Deutinger GmbH
Lafarge Perlmooser AG
Lafarge Perlmooser GmbH
Lafarge Zementwerke GmbH
Nestlé Österreich GmbH
Nespresso Österreich GmbH & Co OHG
NEW WORK AUSTRIA XING kununu Prescreen GmbH
Nationale Anti-Doping Agentur Austria GmbH (NADA)
Norske Skog Industrier ASA
Österreichische Apotheker-Verlagsges.m.b.H.
Perlmooser Beton GmbH
Pernod Ricard Austria GmbH
Pirelli Österreich GmbH
Ricoh Austria GmbH
Ricoh Europe PLC
Salonmeister GmbH (Treatwell)
Shiseido Group
SHOW FACTORY Entertainment GmbH
Tyrol Equity AG
Urban Massage Limited
Valentino S.p.A.
Volkshilfe Wien Gemeinnützige Betriebs-GmbH
Vorwerk & Co KG
Workiva Inc.
XING SE
Work highlights
- Represented the National Anti-Doping Agency Austria in a significant pan-European case before the ECJ, addressing crucial issues in sports and data protection.
- Advised Nespresso Österreich GmbH & Co OHG on the implementation of data protection requirements.
- Advised HISCOX on data protection incidents.
DLA Piper Weiss-Tessbach Rechtsanwälte GmbH
In addition to supporting clients with the implementation of GDPR measures, DLA Piper Weiss-Tessbach Rechtsanwälte GmbH also assists them in the wake of cyberattacks, actions before the Austrian data protection authority and in matters concerning sensitive data, including medical records. Practice head Sabine Fehringer is an experienced IT specialist and also handles data aspects of M&A transactions, while Stefan Panic provides assistance with telecoms law alongside data protection matters.
Practice head(s):
Sabine Fehringer
Other key lawyers:
Stefan Panic
Key clients
Loro Piana S.p.A
Work highlights
- Advised Loro Piana S.p.A on data protection matters relating to online sales.
Eversheds Sutherland Rechtsanwälte GmbH
Eversheds Sutherland Rechtsanwälte GmbH has notable ‘depth of competence’ in the data protection arena, assisting clients with matters arising under Austrian and EU law, including providing support on GDPR compliance. Georg Röhsner leads the team, providing ‘invaluable’ advice on cybersecurity and all aspects of broadcasting law. Manuel Boka acts for clients at the intersection of new technology and data protection issues, with a particular knowledge of the IT and healthcare sectors. ‘Always quick to provide a direct and practical solution,’ Michael Röhsner advises clients on GDPR matters in addition to assisting with issues concerning the use of cookies and e-commerce.
Practice head(s):
Georg Röhsner
Other key lawyers:
Manuel Boka; Michael Röhsner
Testimonials
‘The depth of competence and the professional knowledge are impressive. The comprehension and speed with which a situation/case is grasped is exemplary.’
‘The people we work with know that there is a room between black and white. The knowledge of that room makes them extremely helpful.’
‘Eversheds Sutherland always provide excellent advice, particularly on GDPR and data protection. They are always up-to-date regarding new legal developments and provide advice centred on our practical business needs. Their advice is always on time, useful and innovative.’
‘Georg Röhsner has been our trusted legal advisor for almost 20 years. His advice is invaluable. We value his experience and his proactive approach, which helps us to find the best possible solutions for our business.’
‘Michael Röhsner’s knowledge and understanding of data protection law and new developments is impressive and very helpful. He is always quick to provide a direct and practical solution tailored to our business needs.’
‘Great team with very useful solution-oriented and advice.’
‘Michael Röhsner has comprehensive knowledge and practical knowledge in the legal field and gives high-quality and accurate advice even in tight timeframes.’
‘Eversheds Sutherland has individuals for every aspect of legal topics.’
Key clients
Momentive AI
Cyrus One LLC
CSS Holdings Limited
Glen Dimplex
T5 Data Centres
Synch Payments DAC
Verisure
Signify Health
BearingPoint
Eaton Corporation
Sun Life Financial of Canada
Arachas Insurance DAC
Turas Mobility Services Limited
EirGrid
SafeTnet Digital
Personal Injuries Assessment Board
Webdoctor
The Pensions Authority
Pinewood Health
Goffs Bloodstock
Insolvency Services of Ireland
Competition and Consumer Protection Commission
DXC Technology
Specsavers
UPMC Ireland
Next
Atlantic Technical University
Therapie Clinic
Commission for Regulation of Utilities
e-ShopWorld Ascendia
Arachas
nLIGHT
Aximpro
VertretungsNetz
WAG Assistenzgenossenschaft
Biogena Management Holding GmbH.
QUBICON AG
ORF Enterprise
Radio Eins Privatradio GmbH
Phoron Group
Österreichische Kinderkrebshilfe
MAKAM Research GmbH
Die Berater UnternehmensberatungsgmbH
WashTec Cleaning Technology GmbH
SIXT Autovermietung
Experian Group
MOL
Kering Group
Work highlights
- Acted for Synch Payments DAC in relation to the development and launch of an interbank mobile payment solution on the Irish market.
- Advised Dukes Education Group on data protection matters in relation to its acquisition of the Institute of Education.
- Advised Glen Dimplex on all aspects of the development and launch of an interconnected IoT radiator system globally.
GRAF ISOLA
Described as ‘fantastic in every aspect,’ GRAF ISOLA frequently handles data protection matters in conjunction with broader instructions including M&A transactions and competition disputes, advising on data transfers and GDPR implementation. Practice co-head Marija Križanac ‘provides excellent data protection advice’ with deep expertise in GDPR matters and significant experience in data-related litigation. Alongside her, co-founding partner Ferdinand Graf is admitted to the New York State Bar.
Practice head(s):
Marija Križanac; Ferdinand Graf
Testimonials
‘We worked with a client on a ‘bet the company’ matter with GRAF ISOLA. They have clear data protection & tech expertise, and Marija Križanac is very client-centred and responsive.’
‘Marija Križanac clearly knows her stuff. She’s great at understanding a client’s needs & interacting with regulators. She was able to work seamlessly in German & English and was very responsive.’
‘Marija Križanac provides excellent data protection advice in English, she has a can-do attitude, she is very helpful and turns around matters very quickly. I highly recommend her.’
‘Marija Križanac has built a great practice for all relevant data protection matters, including data protection-related litigation. I trust them even with the most complex challenges. The fact that the practice group is female-lead is a cherry on top!’
‘Practice head Marija Križanac is very intelligent, experienced and solution-oriented; she is truly an expert in her field. ‘
‘The practice, led by Marija Križanac, is fantastic in every aspect – fast response time, hands-on approach, creative solutions. Big recommendation.’
‘Marija Križanac is an absolutely brilliant lawyer and my go-to for GDPR matters; I highly recommend her.’
‘I always recommend Marija Križanac. I like her approach to legal problems; it always shows deep understanding of the respective economic backdrop.’
Key clients
LUKOIL International GmbH/LUKOIL Group
VELUX A/S, VELUX Österreich GmbH, VKR Holding A/S
Open Society Foundations
Victorinox
therapie-info PSISYS GmbH
Logwin Group
JobRad GmbH
MEWA Textil-Service GmbH
EMTensor
Leggett&Platt Inc/Schukra Berndorf GmbH
kraftwerk | Agentur für neue Kommunikation GmbH
MyHomeRoast GmbH
AM Baugeräte und Handels GmbH
KOPFWERK Datensysteme Ges.m.b.H.
Ineltro Electronics GmbH
Cortical.io AG
DANUTEX GmbH
neckermann.at GmbH
MAG machines GmbH
CoPlanner GmbH
Drees & Sommer
Deluxe Corporation
RELX EMEA
Samariterbund
HILL Racingteam, e.V.
Work highlights
- Advised LUKOIL (Austria) in connection with all aspects of data protection law, including international data transfers and whistleblowing.
- Assisted cortical.io with all legal aspects, including data protection law, surrounding the roll-out of a new revolutionary SaaS solution in the field of natural language understanding.
- Represented Deluxe Corporation in proceedings before the Austrian data protection authority, which are part of the “Cookies” campaign undertaken by NOYB.
Herbst Kinsky Rechtsanwalte GmbH
Bringing together ‘in-depth know-how with broad experience,’ Herbst Kinsky Rechtsanwalte GmbH assists clients in ensuring they are GDPR-compliant, while also representing them before the Austrian data protection authority and national courts. The team additionally handles the data protection aspects of M&A deals and due diligence processes. The ‘outstanding’ Sonja Hebenstreit spearheads the firm’s data protection work with particular expertise in the life sciences sector, handling the spectrum of data protection matters in addition to licensing and unfair competition work.
Practice head(s):
Sonja Hebenstreit
Testimonials
‘We enjoy working with Herbst Kinsky a lot – they combine in-depth know-how with broad experience, and their advice is straight to the point and pragmatic. Very experienced people with a lot of know-how.’
‘The outstanding Sonja Hebenstreit and her excellent team always provide great advice. They understand the needs of the client and support us in a very precise but pragmatic way. They are proactive and reliable, and also a good sparring partner when discussing new solutions.’
‘The team is very human and explains things straightforwardly.’
‘They always make time to explain things in detail. They are super informed about every aspect that is going on.’
‘Their ability to navigate complex legal issues and provide clear, insightful guidance has been invaluable to us.’
‘The team has a quick grasp and prepares the respective topic in a practical way.’
‘Sonja Hebenstreit is clear in her language and does not get bogged down in legal quibbles that are irrelevant in practice.’
Key clients
Probando GmbH
Boritea GmbH
Cirse Society
Next Research GmbH
Profem
FIMA/FITINN
Timebite Solutions GmbH
Carployee GmbH
invIOs/Apeiron Group
VR Motion Learning GmbH
Work highlights
- Advised Probando on commercial and data protection matters, most recently regarding its new service, Probando Pay.
- Advised CIRSE Society and Next Research Group regarding GDPR compliance and the establishment and negotiation of respective contracts and documents, with a particular focus on clinical research.
- Acted for FIMA/FITINN Group regarding GDPR compliance and represented the group companies in several proceedings before the Austrian data protection authority.
Jank Weiler Operenyi
Jank Weiler Operenyi leverages its position as part of Deloitte’s international network to service cross-border data protection matters, advising a broad range of sectors, including IT, healthcare/life sciences and banking, on GDPR implementation and other data handling procedures. The ‘very reliable’ Sascha Jung leads the team, covering data privacy, IP/IT and licensing matters.
Practice head(s):
Sascha Jung
Other key lawyers:
Christian Kern
Testimonials
‘Good co-operation and innovative solutions.’
‘Christian Kern is very reliable, solution-oriented and always makes good suggestions.’
‘Very flexible, well focused and pragmatic approach.’
‘Deep knowledge of data protection.’
Key clients
MGEN
AXA Partners
Groupe Louis Delhaize
BE-YS
CAMCA
IK Partners, GIC, Keensight Capital and Parquest Capital
Sanofi
D’Ieteren Group
GoHenry
Mayoly Spindler
Work highlights
- Advised BUWOG Holding AG on its international data flows to the USA and the integration of new IT services.
- Assisted Astara Mobility Austria GmbH with the implementation of GDPR across its Austrian operations.
- Advised ISTA Austria in all HR-related GDPR matters.
KPMG Law - Buchberger Ettmayer Rechtsanwälte GmbH
KPMG Law - Buchberger Ettmayer Rechtsanwälte GmbH acts for clients seeking to ensure their data protection processes are in line with the latest regulations, providing GDPR compliance advice and also assisting with IT matters with potential data exposures, including cloud computing and licensing deals. Karin Bruchbacher continues to lead the group, having been promoted to partner in January 2023, acting for both state-owned and private bodies in relation to the gamut of data protection matters. Hannah Kercz focuses on data protection litigation.
Practice head(s):
Karin Bruchbacher
Other key lawyers:
Hannah Kercz
Testimonials
‘The collaboration in the field of data privacy and data protection is excellent. Our organisation is very exposed in this area, so it is of the utmost importance for us that we can guarantee that best practices are applied without exception. With KPMG Law we have the perfect set-up.’
‘KPMG law and in particular Karin Bruchbacher has an exceptional expertise in this field.’
‘KPMG Law’s data protection practice understands how to make projects work and always provides us with fitting solutions. The possibility to combine extensive legal knowledge with excellent IT/technical knowledge/skills is unique.’
Key clients
Microsoft Österreich GmbH
Salzburg AG
VEREIN FÜR KONSUMENTENINFORMATION (VKI)
FINABRO GmbH
Barracuda Holding GmbH/CTS Eventim Austria GmbH
PEPCO Poland Sp. z o. o./PEPCO Austria GmbH
Austrian Reporting Services GmbH
Finmatics GmbH
Ycy GmbH
SANAG GmbH
Work highlights
- Advised Microsoft Österreich GmbH on the roll-out of its “Office 365” cloud computing services to numerous Austrian customers.
- Advised Salzburg AG on a major project involving complex data protection and privacy questions.
- Acted for the Verein für Konsumenteninformation in relation to data protection-related issues regarding a digitalisation project.