TOOLBOX · DOWNLOAD
Mandatory information for your website.
A company website in Austria needs information required by several laws: the information under § 5 E-Commerce-Gesetz (Austrian E-Commerce Act), depending on the company the information under § 14 UGB (Austrian Commercial Code) or § 63 Gewerbeordnung (Austrian Trade Regulation Act 1994), the disclosure under § 25 Mediengesetz (Austrian Media Act), a privacy policy with the content from Art. 13 GDPR and, for cookies, consent under § 165 para. 3 TKG 2021 (Austrian Telecommunications Act 2021). This checklist shows which item applies to whom, each with its legal reference, lists the penalty ranges and includes sample text for the imprint and disclosure.
Free PDF · Checklist
Mandatory Website Information in Austria: Imprint, Disclosure, Privacy Policy and Cookies
- Format
- PDF, A4
- Length
- 10 pages
- Size
- 141 KB
- Updated
- Oct 25, 2026
- Sources
- 10
- Usage
- Redistribution in unchanged form permitted
WHO IT IS FOR
Who This
Is for.
Information under the ECG, UGB, GewO and Mediengesetz, privacy policy under Art. 13 GDPR and cookie consent under § 165 para. 3 TKG 2021, with legal references.
- Website owners and marketing teams in Austrian companies
- Management of GmbHs, KGs, OGs and sole proprietorships with their own website
- Web agencies and developers who build websites for companies in Austria
10 SECTIONS
What Is
Inside.
- 01
Who requires what
Five laws and the GDPR, each with its own scope, and what you may combine on one page.
- 02
Imprint: information under the ECG, UGB and GewO
Every item with its scope and legal reference; permanently, easily and directly accessible (§ 5 para. 1 ECG).
- 03
Disclosure under the Media Act
Every website is a medium. The scope depends on whether it goes beyond presenting the company.
- 04
Privacy policy: content under Art. 13 GDPR
Mandatory content as soon as the website collects personal data, for example through forms, customer accounts or analytics tools.
- 05
Cookies: consent under § 165 para. 3 TKG 2021
What is permitted without consent, what valid consent requires and what the EU plans to change.
- 06
Additional requirements depending on the offering
Advertising, online shop, paid content and dispute resolution: obligations that do not apply to every website.
- 07
Sample text: imprint and disclosure
A sample for a GmbH with a small website. Replace placeholders in square brackets and delete lines that do not apply.
- 08
Checklist: review your imprint and disclosure
Eight review points for your own website, with fields for the responsible person and review date.
- 09
Common mistakes
What is often missing or outdated in the imprint, disclosure, privacy policy and cookie banner.
- 10
Penalties for violations
Penalty ranges under the ECG, Media Act, Trade Regulation Act, TKG 2021 and GDPR, plus coercive penalties under the UGB.
EXCERPT
Imprint: information under the ECG, UGB and GewO
| Item | applies to | Reference |
|---|---|---|
| Name or company name | all service providers | § 5 para. 1 no. 1 ECG |
| Geographic address of the establishment | all service providers | § 5 para. 1 no. 2 ECG |
| Contact details for rapid, direct communication, including email address | all service providers | § 5 para. 1 no. 3 ECG |
| Company name, legal form, registered office, commercial register number and commercial register court | entrepreneurs registered in the commercial register | § 14 para. 1 UGB, § 5 para. 1 no. 4 ECG |
| Name of the owner if it differs from the company name; notice of liquidation | registered sole proprietors; entrepreneurs in liquidation | § 14 para. 1 UGB |
| The same information about the partners with unlimited liability | OGs and KGs in which no natural person has unlimited liability, such as a GmbH & Co KG | § 14 para. 1 UGB |
| Share capital or nominal capital and outstanding contributions | corporations, only if they provide information on capital | § 14 para. 2 UGB |
| Company name, commercial register number and commercial register court of the branch | domestic branch of a foreign entrepreneur | § 14 para. 3 UGB |
| Name and location of the trade license | traders without a commercial register entry | § 63 paras. 1 and 2 GewO |
| Competent supervisory authority | activities subject to official supervision | § 5 para. 1 no. 5 ECG |
| Chamber or professional association, professional title and state in which it was granted, reference to the applicable professional regulations and access to them | activities regulated by trade or professional law | § 5 para. 1 no. 6 ECG |
| VAT identification number | if available | § 5 para. 1 no. 7 ECG |
| Prices clearly identified as gross or net, information on shipping costs | if prices are stated | § 5 para. 2 ECG |
The WKO recommends always naming the trade authority as the supervisory authority and, as a rule, the Gewerbeordnung as the professional regulations, with a link to the RIS.
SOURCES
Supported
by Sources.
- E-Commerce-Gesetz (ECG), current version in the RIS (opens in a new tab)§§ 3, 5, 6, 9 to 11, 26; version of October 25, 2026, accessed October 25, 2026
- Mediengesetz (MedienG), current version in the RIS (opens in a new tab)§§ 1, 24 to 27, 55 para. 15; version of October 25, 2026, accessed October 25, 2026
- Unternehmensgesetzbuch (UGB), current version in the RIS (opens in a new tab)§ 14; accessed October 25, 2026
- Gewerbeordnung 1994 (GewO), current version in the RIS (opens in a new tab)§ 63, §§ 366 to 368; accessed October 25, 2026
- Telekommunikationsgesetz 2021 (TKG 2021), current version in the RIS (opens in a new tab)§ 1 para. 6, § 165 para. 3 (unchanged since November 1, 2021), § 188 para. 4; accessed October 25, 2026
- Regulation (EU) 2016/679 (GDPR), German version on EUR-Lex (opens in a new tab)Art. 4(11), Art. 7, 12, 13, 83(5), Recital 32
- Regulation (EU) 2024/3228 discontinuing the ODR platform, German version on EUR-Lex (opens in a new tab)Art. 1 and 2
- Digital Omnibus, proposal COM(2025) 837, Council document 15698/25 in German, Austrian Parliament (opens in a new tab)proposed Art. 88a GDPR; accessed October 25, 2026
- European Parliament, Legislative Observatory: procedure 2025/0360(COD) (opens in a new tab)Status “Awaiting committee decision,” accessed October 25, 2026
- WKO: The correct website imprint, as of August 2025 (supplementary) (opens in a new tab)Pages 3 to 8
This checklist provides an overview and does not replace legal advice. The text of the law in its current version is decisive. Whether a website is small within the meaning of § 25 para. 5 MedienG and which cookies are strictly necessary depends on the individual case. Adapt the sample text to your company and your legal form.
TOOLBOX
Explore
Further.
- Kostenlos
Cookie check (German)
Check Secure, HttpOnly, SameSite
Check Now GDPR in the glossary
Structure, principles and typical obligations of the General Data Protection Regulation, briefly explained.
Learn MoreData processing agreement (DPA)
When a service provider processes data on your behalf and what minimum content the contract under Art. 28 GDPR needs.
Learn MoreSecurity header cheat sheet
Recommended security headers with their purpose and ready-made configuration for nginx, Apache, IIS and Next.js.
Learn More
WEBSITE & DATA PROTECTION
More on
This Topic.
- PDF
Security Header Cheat Sheet
HSTS, Content-Security-Policy, clickjacking protection, and more: recommended values with explanations and configuration for nginx, Apache, IIS, and Next.js.
View - PDF
Cookie Banner Checklist
When cookies need consent, what a valid banner looks like, how withdrawal and proof work and how to check this technically, based on the TKG 2021 (Austrian Telecommunications Act 2021), the GDPR, the CJEU and the EDPB.
View - PDF
TLS and Certificates
Certificates will soon be valid for only 47 days: configure TLS 1.3 and 1.2 correctly, automate with ACME, keep an inventory, set HSTS and CAA. With configuration and test commands.
View
YOUR NEXT STEP
From Paper
to Practice.
We review with you what is already implemented in your environment and put the rest into practice: as a project with EXPERTS or as ongoing operations with GRID.