what your online shop really needs in 2026
A missing, hidden, or outdated legal notice is one of the most common reasons for a formal warning letter in German online retail, and it affects small side-business shops just as much as established companies. This article explains in plain language which details a legal notice must contain, what changed with the new Digital Services Act, and how to reliably avoid common warning letter traps.
Table of Contents
- 1. What is the legal notice obligation (provider identification)?
- 2. Since when has it applied, what changed with the DDG?
- 3. Who is affected, does this apply to small or side-business shops too?
- 4. What you need to do concretely
- 5. Checklist: your legal notice in practice
- 6. Abmahnung risks of non-compliance
- 7. Common misconceptions and current Abmahnung traps
- 8. What we can take care of for you
- 9. Summary
- 10. FAQ
1. What is the legal notice obligation (provider identification) and what does it cover?
The German word Impressum is the everyday term for what lawyers call provider identification: a clearly recognizable statement of who is behind an online offer and how that person or company can be reached in a legally binding way. Anyone who offers goods or services online on a commercial basis, meaning not purely privately, whether as an online shop, a blog with a sales function, or a sales profile on a platform, must identify themselves in this way. The idea behind it is simple: anyone doing business with someone online should always be able to find out who they are actually dealing with, for example for questions, complaints, or in the event of a dispute.
The typical mandatory details of a legal notice include:
- The full name, for sole proprietors the first and last name, for companies the complete registered business name
- A real, serviceable postal address, meaning an actual mailing address at which the operator can be reached in a legally binding way and, if necessary, served with legal papers, not just a PO box
- The legal form of the business, for example sole proprietorship, GmbH, or UG (a limited liability form)
- For legal entities, the persons authorized to represent the company, for example the managing director or directors
- A means of contact including fast electronic reachability, in practice usually an email address, sometimes an additional phone number, depending on how strictly the courts interpret this requirement
- If registered in the commercial register: the register court and registration number
- The VAT identification number, if one has been assigned
- For regulated professions, for example pharmacists or tax advisors, additional details on the responsible supervisory authority
It is important to understand that this obligation is not a bureaucratic formality without a real purpose. It serves consumer protection and fair competition: customers should be able to recognize whether they are dealing with a trustworthy provider, and know whom to contact in the event of a dispute. This is precisely why courts take a missing or incomplete legal notice so seriously, as you will see throughout the rest of this article.
A simple example illustrates the practical use: a customer receives a defective product and wants to file a complaint or withdraw from the purchase contract. If they cannot find a legal notice, or only find incomplete details, they will not know which natural or legal person to contact, who is liable in a dispute, or where they could even file a lawsuit if necessary. Stating the legal form, meaning whether it is a sole proprietorship, a GmbH, a UG, or another company structure, is more than a formality: it shows who is liable for the company's obligations and to what extent. For companies, this is also why the authorized representatives, for example the managing director or directors, must be named, so it is clear who legally represents the company externally.
2. Since when has it applied and what changed recently (DDG, DSA)?
The obligation to provide identification for commercial online offerings has existed in German law for many years. For a long time, the central legal basis was Section 5 of the Telemediengesetz, the German Telemedia Act, abbreviated TMG, a law that regulated the legal framework for online services. Since May 2024, however, the central legal basis in Germany has been the new Digitale-Dienste-Gesetz, the Digital Services Act implementation law, abbreviated DDG. It was enacted to implement the European Union's Digital Services Act (DSA) into German law, an EU regulation intended to harmonize the obligations of online platforms and digital services across the EU. The DDG has replaced the TMG for the most part.
The good news for you as a shop owner: the substantive requirements for provider identification were essentially continued, not fundamentally reinvented. If you already had a legally compliant legal notice before, you do not need to fear dramatic content changes, but you should know the new legal name and make sure any references to the old TMG in your own texts are no longer out of date. For journalistic or editorial offerings, for example if your shop runs an editorial blog section with its own news character, additional requirements from the Medienstaatsvertrag, the State Media Treaty, abbreviated MStV, apply on top of the plain provider identification.
Another recent development that shop owners should keep in mind does not concern the legal basis itself but a common component of the legal notice: the reference to the EU's central platform for online dispute resolution, known as the ODR platform. This central platform run by the European Commission, through which consumers and traders could resolve disputes out of court, has since been discontinued by the European Commission. Anyone who still has a link to the former ODR platform in their legal notice or their withdrawal texts should review this reference and update it if necessary, so that no outdated, dead links remain online.
The Digital Services Act itself is, at its core, considerably broader than just provider identification: across the EU it regulates, among other things, how large platforms must handle illegal content, what transparency obligations apply to online advertising, and what additional due diligence obligations apply to very large platforms and search engines. For the typical online shop owner, what is directly relevant in practice is mainly the provider identification requirement set out in the DDG, the other, far-reaching DSA obligations are primarily aimed at large platform operators and marketplaces, not at the individual shop.
For your shop, the shift from the TMG to the DDG concretely means the following:
- The legal basis has been called the Digitale-Dienste-Gesetz (DDG) since May 2024, no longer the Telemediengesetz (TMG)
- The substantive mandatory details in the legal notice itself have not changed fundamentally as a result
- You should still update references to the TMG in your own legal texts promptly, so they do not look outdated
- For editorial blog content, the Medienstaatsvertrag (MStV) may additionally become relevant
3. Who is affected: does this apply to small or side-business shops too?
One of the most persistent misconceptions is: I only do this on the side or on a small scale, so I do not need a legal notice. This assumption is simply wrong. What matters for the legal notice obligation is exclusively whether an offering is operated commercially, meaning with a certain regularity and with the intent to generate income from it, not the size of the business, the amount of revenue, or whether it is a main or side occupation. Anyone who sells through their own shop on the side, through Etsy-like platforms, or regularly through a social media profile falls under the legal notice obligation just as much as a large mail order company.
An important clarification here, one that is often confused: the tax related Kleinunternehmerregelung, the small business regulation that allows small self-employed people to not charge VAT, has legally nothing to do with the legal notice obligation. Being classed as a small business for tax purposes does not automatically exempt you from the obligation to provide identification. Both topics run completely independently of each other.
Generally, only truly private, one-off sales are not affected, for example when someone sells a used personal item once through a classifieds portal, without any indication of an intent to repeat this or a planned sales activity. But as soon as a certain regularity, planning, or a recognizable intent to generate profit is present, as is the case with practically every online shop, every regular marketplace seller, and every sales profile on social media, the legal notice obligation applies in full.
In practice, we regularly encounter a whole range of situations where owners are initially unsure whether they are really meant:
- The hobby seamstress who regularly offers handmade products through a sales platform
- The dropshipping shop that has goods shipped directly from a wholesaler to customers without its own warehouse
- The affiliate operator who promotes products through their own small website and earns commissions for it
- The influencer who regularly sells their own products through a sales profile on Instagram
In all these cases the answer is the same: as soon as there is recognizable regularity and an intent to generate profit, this counts as commercial activity, and the legal notice obligation applies, regardless of whether the activity is carried out as a main or side occupation, or whether it has already been formally registered as a business. This also applies, incidentally, to businesses based outside Germany that specifically target German customers, for example with German-language content, shipping to Germany, and prices in euros, they too must provide provider identification that meets German requirements.
4. What you need to do concretely
Keeping all mandatory details complete and current is one half of the task, the other half concerns correct placement and reachability. Courts require that the legal notice be easily recognizable, immediately reachable, and permanently available. From this principle, the so-called two-click rule has developed in practice: from every single page of your shop, the legal notice should be reachable within a maximum of two clicks, through a clearly recognizable link, usually labeled with the word "Impressum" (legal notice), not just hidden under a vague menu item such as "Contact" or "About us".
In addition, you should clearly and unambiguously state your means of contact, meaning at least an email address, supplemented depending on your shop's setup by a phone number or a contact form. Also maintain a separate privacy policy (Datenschutzerklärung), a standalone document with a different legal basis and different mandatory content than the legal notice, one that concerns the processing of personal data. Additionally include your presence on social media platforms and marketplaces in this review, since a separate provider identification may be required there too. And finally: update your legal notice promptly whenever something changes about your business, for example after a move, a change of legal form, or a change to your commercial register details.
From a technical standpoint, it is not enough to embed the legal notice link only on the homepage. It must be consistently present on every page type of your shop, meaning on the homepage just as much as on category pages, product pages, and during checkout, usually through a link permanently anchored in the footer that loads automatically on every page view. If the footer is only embedded on individual templates, or gets accidentally forgotten during a relaunch, a gap can quickly appear that, from a legal point of view, is judged just the same as a completely missing legal notice.
In summary, the concrete measures come down to four building blocks:
- Completeness: all mandatory details are present and factually correct
- Reachability: the legal notice is reachable from every page within a maximum of two clicks through a clearly labeled link
- Separation: the legal notice and privacy policy remain two separate documents
- Currency: changes to the business are reflected promptly in the legal notice
5. Checklist: your legal notice in practice
The following checklist summarizes the most important action items for setting up your legal notice correctly in practice.
Checklist: setting up a legally compliant notice
- ✓State the full name, legal form, and a real, serviceable postal address, no PO box
- ✓Provide a means of contact including fast electronic reachability (email, phone if applicable)
- ✓Keep the commercial register entry with register court and VAT identification number up to date
- ✓Make the legal notice link reachable from every page within a maximum of two clicks, clearly labeled "Impressum"
- ✓Maintain the privacy policy as a standalone, separate document
- ✓Check social media profiles and marketplace listings for their own provider identification
- ✓Remove or update outdated references, for example to the former ODR platform
6. Abmahnung risks of non-compliance
The legal notice obligation is legally classed as a so-called market conduct rule under the German Act Against Unfair Competition, abbreviated UWG. Put simply, this means a violation is not treated merely as a formal issue but as an unfair competition violation, because a provider without a proper legal notice could gain an unfair advantage over competitors who follow the rules. This is why violations can trigger a formal warning letter from competitors or authorized associations under competition law. These authorized associations include, for example, competition associations and certain consumer protection associations, which are specifically entitled by law to pursue competition law violations even when they are not directly harmed themselves.
Such an Abmahnung, a formal cease-and-desist warning letter common in German competition law, is a formal letter in which the competitor or association issuing it demands that you stop the violation, often combined with a request that you sign a declaration to cease and desist backed by a contractual penalty, as well as a demand for reimbursement of the warning costs. If the violation is then repeated, a contractually agreed contractual penalty can additionally become due. Typically, a warning letter therefore consists of three building blocks:
- The demand to cease and desist, combined with a penalty-backed declaration that you are asked to sign
- The demand for reimbursement of the warning costs incurred through engaging a lawyer
- In case of repetition, a contractually agreed contractual penalty, the amount of which depends on the cease-and-desist declaration previously signed
With the "Act Against Unfair Business Practices", which has been in force since December 2020, lawmakers have curtailed some of the financial incentives for abusive mass warning letters for certain types of violations. Legal notice violations, however, remain a common and practically relevant subject for warning letters, especially because competitors have an understandable interest of their own in acting against unfair competition.
In practice, a warning letter usually reaches you by post or email, often with a fairly short deadline within which you are expected to respond. Even though the tone of such a letter can feel intimidating, the rule is: hastily signing the enclosed cease-and-desist declaration without review is just as unwise as simply ignoring the letter. Both can become expensive, either because you sign a declaration that goes too far, or because a legitimate deadline passes. In every case it is sensible to have the warning letter reviewed legally without delay, before signing anything or leaving it unanswered.
An everyday but serious warning letter risk
A missing, incomplete, or hard-to-find legal notice can be challenged with a formal warning letter under competition law by competitors or authorized associations. Typical consequences are a demand to cease and desist, an obligation to reimburse the warning costs, and, in case of repetition, a contractual penalty. Unlike some other violations in online retail, there is no de minimis threshold here, small shops can be affected just as much as large companies.
7. Common misconceptions and current Abmahnung traps
In practice, we repeatedly encounter the same misunderstandings around the legal notice. The five most common, at a glance:
- "The privacy policy replaces the legal notice." This is wrong, these are two different documents with a different legal basis and different mandatory content, both are needed separately.
- "A contact form alone is enough for fast reachability." This is legally disputed and, depending on how it is set up, risky, some court decisions additionally expect a fast, direct means of contact such as an email address.
- "My legal notice under 'About us' is enough, it does not have to be specifically called 'Impressum'." This too is risky, the label of the link should be unambiguous and immediately recognizable, so visitors can find the legal notice without searching.
- "I don't have a legal notice on my Instagram shop, that's fine, because my website has one." This is not reliably sufficient, depending on the specifics of the case a separate notice or a clearly recognizable link is expected there too, as soon as goods are offered commercially through the profile. This particular point is especially often overlooked in practice, because many shop owners only think of their actual website and forget about their sales profiles on social media platforms and marketplaces.
- Outdated commercial register details or a VAT identification number that is no longer current after business changes. A classic that simply arises from a lack of routine in maintaining the legal notice after a move or a change of legal form.
| Mandatory legal notice detail | Common mistake in practice |
|---|---|
| Name and serviceable postal address | A PO box is given instead of a real address |
| Means of contact | Only a contact form, without fast, direct reachability |
| Commercial register / VAT ID | Outdated details after a business change, move, or change of legal form |
| Reachability of the legal notice link | Legal notice hidden behind more than two clicks, or only linked under "Contact" |
| Social media profiles and marketplaces | No legal notice reference in the profile despite commercial selling |
| Legal form and authorized representatives | Missing statement of the managing director for a GmbH or UG |
| References to dispute resolution | Outdated link to the discontinued ODR platform of the European Commission |
8. What we can take care of for you
Many shop owners know in principle that a legal notice is mandatory, but not whether their current version is actually legally compliant, particularly because details such as the legal basis or the handling of the ODR platform have changed over the years. This is exactly where we come in: we review your existing legal notice for completeness and currency and check it against current legal changes, such as the shift from the TMG to the DDG or the discontinuation of the ODR platform.
Beyond that, we take care of technically embedding a correct, clearly visible legal notice link in your shop's footer, so that it is reliably reachable within two clicks across every page, including the corresponding CMS maintenance in Magento and Hyvä. Specifically, we maintain the link cleanly through the CMS menu and footer configuration rather than hard-wiring it somewhere in a template, so it does not accidentally disappear again during future theme changes or layout updates. After business changes such as a move, a change of legal form, or new register details, we also support you in updating your legal notice promptly and completely, so the exact mistakes that most often lead to warning letters in practice never occur in the first place.
On request, we also take a look at your sales profiles on social media platforms and marketplaces and point out where a separate legal notice reference is still missing. That way, a one-time check becomes a recurring look at your entire online presence, instead of the website being clean while gaps elsewhere go unnoticed. Specifically, our support typically includes:
- A legal notice check of your existing shop for completeness, currency, and reachability
- The technical embedding of a clearly visible legal notice link in the footer across all pages (CMS maintenance in Magento and Hyvä)
- Checking against current legal changes such as the shift from the TMG to the DDG or the discontinuation of the ODR platform
- Support with prompt updates after business changes such as a move, a change of legal form, or new register details
Note: This article provides general information about the legal notice obligation and does not replace individual legal advice.
9. Summary
The legal notice obligation, legally called provider identification, requires everyone who offers goods or services online on a commercial basis to provide a clear, complete, and easily findable self-disclosure. Since May 2024, the central legal basis for this in Germany has been the Digital Services Act implementation law (DDG), whose substantive requirements essentially continue those of the former TMG. Every commercial online offering is affected without exception, regardless of revenue, size, or whether it is a main or side occupation.
Anyone who follows the two-click rule, keeps all mandatory details current, maintains their privacy policy separately from the legal notice, and also keeps an eye on social media profiles and marketplace presences, substantially reduces their warning letter risk. Since legal notice violations count as a market conduct rule under the UWG, they remain a practically relevant subject for warning letters, especially from competitors, which is why regularly reviewing your own legal notice is always worthwhile.
Legal notice obligations and provider identification, the essentials at a glance
Legal basis
Since May 2024 the Digitale-Dienste-Gesetz (DDG), previously Section 5 TMG, with the Medienstaatsvertrag (MStV) applying additionally for editorial offerings
Who is affected
Anyone who offers goods or services online on a commercial basis, including as a side business, regardless of revenue or shop size
Core requirement
Complete mandatory details plus the two-click rule: legal notice reachable from every page within a maximum of two clicks
Risk of non-compliance
A formal warning letter under competition law from competitors or associations, with cease and desist, cost reimbursement, and a contractual penalty
10. FAQ: Legal Notice Obligations and Provider Identification
1What exactly is the legal notice obligation and who is affected?
The legal notice obligation requires every commercial online provider to give a clear self-disclosure with name, address, and means of contact, regardless of size or revenue.
The legal basis for this since May 2024 has been the Digital Services Act implementation law, which largely continues the earlier rule under the Telemediengesetz.
2Do I need a legal notice even as a side-business shop or small business owner?
Yes, what matters is the commercial orientation, not the size. The German tax small business regulation does not exempt you from the legal notice obligation.
Even a side-business shop with only a few sales a month counts as commercial as soon as a certain regularity and intent to profit is recognizable.
3What is the two-click rule?
The legal notice should be reachable from every page within a maximum of two clicks through a link clearly labeled "Impressum".
A link only vaguely labeled "Contact" or "About us" is considered risky because it is not immediately recognizable as the legal notice link.
4Is a contact form enough for fast reachability?
Legally disputed and risky, an additional fast, direct means of contact such as an email address is often expected.
The safest approach is to provide an email address, and optionally a phone number, in the legal notice in addition to a contact form.
5Does the privacy policy replace the legal notice?
No, these are two different documents with a different legal basis, both are needed separately.
The legal notice concerns provider identification, the privacy policy concerns the processing of personal data, both belong on their own, clearly reachable subpages.
6Do I need a legal notice on Instagram or Facebook too?
Yes, as long as commercial selling takes place there, simply referring to your website is not reliably sufficient depending on the case.
The safest approach is a separate legal notice reference or a clearly recognizable link directly in the profile, not just a general mention of your own website.
7What changed with the DDG since May 2024?
The DDG largely replaced the TMG and implements the EU Digital Services Act, the substantive requirements were essentially continued.
For you this mainly means knowing the new legal name and updating outdated references to the TMG in your own texts.
8Do I need to update my legal notice text because of the ODR platform?
The ODR platform was discontinued by the European Commission, outdated references to it should be checked and removed or updated.
Check both your legal notice and your withdrawal policy for any remaining links to the former platform.
9What happens if I receive a warning letter over my legal notice?
A demand to cease and desist, cost reimbursement, and, in case of repetition, a contractual penalty are possible, since legal notice violations count as a market conduct rule under the UWG.
Have the letter reviewed legally without delay, before signing anything or letting the deadline pass.
10How can Mironsoft help me with this?
We review your legal notice, technically embed a correct link, and support you with updates after business changes.
This also includes checking your social media profiles and marketplace presences, so your entire online presence is legally compliant.