Widerrufsbutton 2026 für Online-Shops ab 19. Juni

Cancellation button 2026: What online shops must implement from June 19th

From June 19, 2026, things will get serious for everyone who does business with consumers online: the electronic cancellation button will become mandatory. This new EU regulation affects online shops, digital service providers, and anyone who concludes contracts via their website or app. Those who fail to act in time risk warnings and fines.

Attorney Dr. Thomas Schwenke has published a comprehensive FAQ on this topic in his latest newsletter. We summarize the most important points and explain what online shops in Ludwigsburg and the surrounding region need to do now.

What is the cancellation button?

The cancellation button is an electronic function that allows consumers to declare their cancellation directly on the retailer’s website or app. Instead of via email, letter, or contact form, cancellations will in future be possible through a standardized, two-step process.

The legal basis is the EU Consumer Rights Directive, which is implemented in Germany through amendments to the German Civil Code (BGB). The aim is to make it easier for consumers to exercise their right of withdrawal and to create uniform standards.

Who is affected?

This obligation applies to all companies that conclude distance selling contracts with consumers. This includes:

Online shops of all kinds – from small retailers to large e-commerce providers – must provide a return/cancellation button if they sell physical goods.

Providers of digital products – e-books, software, online courses, streaming services. The right of withdrawal and therefore the button obligation also apply here.

Service providers with online booking – hotels, event tickets, tradespeople appointments. The obligation applies as soon as the contract is concluded online.

App providers – in-app purchases, subscriptions, digital services. Mobile apps must also integrate a cancellation function.

Purely B2B transactions, where contracts are exclusively with other businesses, are not affected. Contracts that do not inherently include a right of withdrawal – for example, for perishable goods or personalized products – also do not require a button, but must clearly communicate the exceptions.

How should the cancellation button technically function?

The implementation follows a two-stage process, similar to the order processing itself.

Step 1: Trigger cancellation

The customer will find a clearly visible button on the website or in the app. The label must be unambiguous – for example, „Cancel contract“ or „Cancel order“. Ambiguous terms such as „Return“ or „Cancel“ are not permitted.

After clicking, a form opens. Here, the customer enters the necessary information: name, order number, and optionally email address. The system must be able to match this information to the original order.

Step 2: Confirmation of the cancellation

Before the cancellation becomes final, the system displays an overview: „You are about to cancel the following order: …“. The customer actively confirms – for example, by clicking another button, „Declare cancellation bindingly“.

After confirmation, the customer receives an acknowledgement of receipt. This must be provided on a durable medium – typically via email. The acknowledgement includes: the date and time of the cancellation, the order in question, and information about further processing.

Important: The cancellation is effective upon receipt by the retailer, not only after confirmation by the retailer. The system must therefore ensure that receipt is documented.

Where should the button be placed?

The exact placement is not legally prescribed, but crucial for legal certainty. Dr. Schwenke recommends several locations:

In the customer account under order overview – directly next to each cancelable order. This is the most obvious and user-friendly option.

The function is available in the order confirmation email – as a link or button. This way, the customer can find it immediately after purchase.

On a central cancellation page – linked from the footer or the customer area. The cancellation policy can also be found here.

A hidden link in the fine print or a function that can only be found after a lengthy search is insufficient. The legislator requires genuine accessibility, not merely formal compliance.

What data may be requested?

The cancellation form may only request data necessary for processing and handling the cancellation. Permissible data includes: customer name, order number or other unique identifier, and email address for confirmation of receipt.

Additional mandatory fields such as reason for cancellation, satisfaction rating, or marketing consent are not permitted. Such information may be requested optionally, but never as a prerequisite for cancellation.

Authentication – such as logging into a customer account – should not be mandatory. Cancellation must also be possible for guests who ordered without registering.

Data protection: What needs to be considered?

The processing of data relating to withdrawals must comply with the GDPR. Specifically, this means:

The legal basis is Article 6(1)(c) GDPR – fulfillment of legal obligations. The merchant must allow the right to withdraw consent; therefore, the data processing is justified.

Purpose limitation: The data may only be used for processing the cancellation. Marketing, profiling, or other purposes are prohibited unless the customer gives separate consent.

Storage period: The revocation data should be stored for as long as necessary for processing and as long as statutory retention periods apply. Typically, this corresponds to the commercial and tax law periods of ten years.

Privacy policy: The opt-out button and the associated data processing must be mentioned in the privacy policy. Transparency is mandatory.

Does the cancellation policy need to be amended?

Yes. Once the cancellation button is implemented, the cancellation policy must include a reference to it. The wording could be: „You can also declare your cancellation via our electronic cancellation button, which you can find in your customer account under ‚Orders‘.“

Important: The cancellation button does not replace the traditional cancellation methods. Customers may still cancel by email, letter, or telephone. The button is an additional option, not an exclusive method.

Generators like the one from Dr. Schwenke at datenschutz-generator.de already offer updated text modules. Merchants should update their privacy policy no later than when the button is implemented.

What are the consequences of a lack of implementation or incorrect implementation?

Failure to comply with the mandatory cancellation button requirement constitutes an unfair competition law (UWG). This has specific consequences:

Cease-and-desist letters from competitors or consumer protection associations. The costs of such letters can amount to several hundred to a thousand euros – depending on the amount in dispute and legal representation.

Cease and desist declarations and preliminary injunctions. In case of repeated offenses, contractual penalties may be imposed, which can quickly reach five figures.

Fines may be imposed by regulatory authorities. Even if the initial focus is on civil measures, official sanctions are not out of the question.

Damage to reputation. Customers increasingly expect legally compliant and user-friendly online shops. Lack of compliance erodes trust.

The deadline of June 19, 2026 may sound far away, but implementation takes time – especially if external service providers need to be involved.

Technical implementation: What needs to be done?

The specific implementation depends on the shop system used. Solutions already exist for the most common platforms.

WooCommerce (WordPress)

WooCommerce shops require a plugin or custom development. The plugin should: add a button to the order overview in the customer account, provide a two-step form, send email confirmations, and document cancellations in the backend.

As of March 2026, there is still no official WooCommerce plugin. Developers are working on solutions that are expected to be available from May onwards. Merchants should brief their developers or agencies as soon as possible.

Shopify

Shopify merchants have two options: using an app from the Shopify App Store, as soon as it’s available, or custom development via the Shopify API. The app option is simpler, while custom solutions offer more control.

Shopify itself has announced plans to integrate the functionality natively. However, the exact timeline is still unclear. Merchants shouldn’t wait for this, but should prepare alternative solutions.

Magento, Shopware, OXID

Manufacturers typically develop their own extensions for enterprise systems. Retailers should check with their system partners to find out when updates will be available. Custom shops require in-house development.

Individual shops

Anyone running a custom-built online store must develop the functionality themselves or have it developed. This requires: frontend development for buttons and forms, backend logic for mapping and documentation, email delivery for confirmations, and a database structure for the return log.

Depending on the system, development time ranges from 10 to 40 hours. Cost: €1,000 to €4,000 for professional implementation.

Checklist: How to prepare

Online retailers should complete the following steps by June 19, 2026:

1. Check if your shop is affected. Do you sell to consumers? Then yes.

2. Clarify the technical implementation. Which shop system are you using? Are there any plugins or extensions? Do you need custom development?

3. Hire developers early. The closer the deadline gets, the busier agencies and freelancers will be.

4. Define the user interface. Where will you place the button? What should the form look like? What text will you use?

5. Test the function thoroughly. Simulate cancellations, check emails, and document processes.

6. Adapt the cancellation policy. Add the note about the button.

7. Update the privacy policy. Mention data processing in the context of withdrawal of consent.

8. Train your team. Support staff need to know how the feature works and be able to assist customers.

9. Document the implementation. Record when you introduced the button and how it works – in case of legal disputes.

10. Monitor legal developments. There may be further clarifications or transitional arrangements.

Special features for regional retailers

For retailers in Ludwigsburg, Stuttgart, and the surrounding region, there are no special regulations – the EU directive applies uniformly nationwide. However, local retailers who primarily operate brick-and-mortar stores and only run a small online shop as a supplement are also affected.

For example, a bookstore in Ludwigsburg with an online ordering function must implement the cancellation button in the same way as a large online retailer. The company size is irrelevant – what matters is that contracts with consumers are concluded online.

This can be a challenge for smaller retailers. However, the investment in the technical implementation is offset when you factor in the costs of legal warnings and cease-and-desist letters. Once correctly implemented, the system runs automatically.

Our tip: Act now, don’t wait

June 2026 sounds a long way off. But experience shows that legal deadlines are often underestimated. Anyone who starts working on the cancellation button in May 2026 will run into problems. Developers are booked up, testing takes time, and unforeseen issues delay the project.

Our recommendation: Start planning now. Clarify the technical implementation by April 2026. Implement by May 2026. Test thoroughly in June 2026. This way, you can approach the task with peace of mind and avoid last-minute stress.

We support you in the implementation.

As a web agency based in Ludwigsburg, we support online retailers in implementing the cancellation button. Whether it’s a WooCommerce plugin, Shopify integration, or custom development – ​​we’ll find the right solution for your shop system.

Our services include: Technical analysis of your shop system, development or integration of the cancellation function, adaptation of the cancellation policy and privacy statement, testing and quality assurance, training of your team.

Contact us for a free quote: kontakt@ip2c.de or by phone at 07141 309 8714.

Further information about our e-commerce services can be found on our website: https://ip2c.de

Sources and further links

The information in this article is based on the newsletter of attorney Dr. Thomas Schwenke. For detailed legal analyses and templates, we recommend:

Dr. Schwenke’s FAQ about the cancellation button: https://drschwenke.de

Privacy policy generator with updated text modules: https://datenschutz-generator.de

Note: This article does not constitute legal advice. For individual questions, please contact a specialist lawyer in IT law or consumer law.