๐—–๐—ต๐—ฒ๐—ฐ๐—ธ ๐˜†๐—ผ๐˜‚๐—ฟ ๐—–๐—ผ๐—ผ๐—ธ๐—ถ๐—ฒ ๐—•๐—ฎ๐—ป๐—ป๐—ฒ๐—ฟ ๐—ป๐—ผ๐˜„!

๐—ก๐—ฒ๐˜„ ๐—ฅ๐˜‚๐—น๐—ถ๐—ป๐—ด ๐—ฏ๐˜† ๐˜๐—ต๐—ฒ ๐—”๐˜‚๐˜€๐˜๐—ฟ๐—ถ๐—ฎ๐—ป ๐—ฆ๐˜‚๐—ฝ๐—ฟ๐—ฒ๐—บ๐—ฒ ๐—”๐—ฑ๐—บ๐—ถ๐—ป๐—ถ๐˜€๐˜๐—ฟ๐—ฎ๐˜๐—ถ๐˜ƒ๐—ฒ ๐—–๐—ผ๐˜‚๐—ฟ๐˜ (๐—ฉ๐˜„๐—š๐—›):

It’s clear: Cookie consent must be freely given and equally accessible โ€“ meaning that users must not be disadvantaged if they choose not to give their consent.

The Data Protection Authority required a website operator to modify its cookie banner so that there was an ๐—ฒ๐—พ๐˜‚๐—ฎ๐—น๐—น๐˜† ๐—ฝ๐—ฟ๐—ผ๐—บ๐—ถ๐—ป๐—ฒ๐—ป๐˜ ๐—ผ๐—ฝ๐˜๐—ถ๐—ผ๐—ป ๐—ป๐—ฒ๐˜…๐˜ ๐˜๐—ผ ๐˜๐—ต๐—ฒ “๐—”๐—ฐ๐—ฐ๐—ฒ๐—ฝ๐˜” ๐—ฏ๐˜‚๐˜๐˜๐—ผ๐—ป ๐—ฎ๐—น๐—น๐—ผ๐˜„๐—ถ๐—ป๐—ด ๐˜‚๐˜€๐—ฒ๐—ฟ๐˜€ ๐˜๐—ผ ๐—ฐ๐—น๐—ผ๐˜€๐—ฒ ๐˜๐—ต๐—ฒ ๐—ฏ๐—ฎ๐—ป๐—ป๐—ฒ๐—ฟ ๐˜„๐—ถ๐˜๐—ต๐—ผ๐˜‚๐˜ ๐—ด๐—ถ๐˜ƒ๐—ถ๐—ป๐—ด ๐—ฐ๐—ผ๐—ป๐˜€๐—ฒ๐—ป๐˜.

The VwGH upheld this decision, emphasizing:

  • ๐—ช๐—ถ๐˜๐—ต๐—ฑ๐—ฟ๐—ฎ๐˜„๐—ถ๐—ป๐—ด ๐—ฐ๐—ผ๐—ป๐˜€๐—ฒ๐—ป๐˜ ๐—บ๐˜‚๐˜€๐˜ ๐—ฏ๐—ฒ ๐—ฎ๐˜€ ๐—ฒ๐—ฎ๐˜€๐˜† ๐—ฎ๐˜€ ๐—ด๐—ถ๐˜ƒ๐—ถ๐—ป๐—ด ๐—ถ๐˜ .
  • Requiring ๐—ผ๐—ป๐—น๐˜† ๐—ผ๐—ป๐—ฒ ๐—ฐ๐—น๐—ถ๐—ฐ๐—ธ ๐˜๐—ผ ๐—ฎ๐—ฐ๐—ฐ๐—ฒ๐—ฝ๐˜ ๐—ฏ๐˜‚๐˜ ๐—บ๐˜‚๐—น๐˜๐—ถ๐—ฝ๐—น๐—ฒ ๐—ฐ๐—น๐—ถ๐—ฐ๐—ธ๐˜€ ๐˜๐—ผ ๐—ฟ๐—ฒ๐—ท๐—ฒ๐—ฐ๐˜ ๐—ถ๐˜€ ๐—ป๐—ผ๐˜ ๐—ฝ๐—ฒ๐—ฟ๐—บ๐—ถ๐˜๐˜๐—ฒ๐—ฑ.
  • ๐—ฉ๐—ถ๐˜€๐˜‚๐—ฎ๐—น๐—น๐˜† ๐—ฑ๐—ถ๐—ณ๐—ณ๐—ฒ๐—ฟ๐—ฒ๐—ป๐˜ ๐—ฑ๐—ฒ๐˜€๐—ถ๐—ด๐—ปs (e.g., a green โ€œAcceptโ€ button vs. a subtle โ€œShow purposesโ€ link) ๐—ฐ๐—ฟ๐—ฒ๐—ฎ๐˜๐—ฒ ๐˜‚๐—ป๐—ณ๐—ฎ๐—ถ๐—ฟ ๐—ถ๐—ป๐—ณ๐—น๐˜‚๐—ฒ๐—ป๐—ฐ๐—ฒ.
  • A footer link allowing users to reject cookies later is not sufficient if users must first interact with the banner before accessing the full website.

๐—–๐—ผ๐—ป๐—ฐ๐—น๐˜‚๐˜€๐—ถ๐—ผ๐—ป: Companies should reassess their cookie banners to ensure compliance. ๐—ง๐—ต๐—ฒ ๐—ฑ๐—ฒ๐˜€๐—ถ๐—ด๐—ป ๐—บ๐˜‚๐˜€๐˜ ๐—ผ๐—ณ๐—ณ๐—ฒ๐—ฟ ๐˜‚๐˜€๐—ฒ๐—ฟ๐˜€ ๐—ฎ ๐—ด๐—ฒ๐—ป๐˜‚๐—ถ๐—ป๐—ฒ ๐—ฐ๐—ต๐—ผ๐—ถ๐—ฐ๐—ฒโ€”anything else could be legally problematic.

VwGH 16.1.2025, Ra 2024/04/0424