DSB (Austria) - 2025-0.276.820

An Austrian media company (the data controller) that published local news operated a website that collected personal data from visitors using cookies and a banner requesting consent for the use of cookies. The cookies contained unique identification data to track visitors. In August 2021, a data subject filed a complaint with the Austrian Data Protection Authority (DSB), arguing that there were violations of the rights derived from the GDPR, including the right to erasure and the right to data privacy. After investigation, the DSB rejected the complaint, but also issued a recommendation requiring the data controller to modify the cookie banner. The banner must allow users to easily and clearly refuse consent, just as they can grant it. The DSB set a deadline of ten weeks for compliance.

This content has been automatically translated using machine translation. The original version is available in the source language.

This content was automatically translated using machine translation. The original version is available in the source language.