Quick answer
What local data matters when you check a European city through a proxy?
Three facts change what a local visitor sees: the city itself (population and urban area), the standard VAT rate that shops include in prices, and the data protection authority that supervises data collection there. EuroCity Proxies compiled them for 103 European cities on 18 October 2026, each with its official source.
How was the data compiled?
Population figures come from national statistics offices (Destatis, INSEE, INE, ISTAT, GUS and others) or from Eurostat, with the reference year and scope named on each city page. VAT rates come from national tax authorities or the European Commission. Data protection authorities come from the European Data Protection Board member list or, outside the EU and EEA, from the authority itself.
Broadband operators come from national regulators and operator reports. Where we used a secondary source, such as an encyclopedia for a postal code range, the city page says so.
All cities: population, VAT and data protection authority
| City | Population (year) | VAT standard rate | Data protection authority |
|---|---|---|---|
| Aarhus, Denmark | 378,270 (2026) | 25% | Danish Data Protection Agency (Datatilsynet) |
| Amsterdam, Netherlands | 934,526 (2025) | 21% | Autoriteit Persoonsgegevens (AP) |
| Antwerp, Belgium | 560,824 (2025) | 21% | Data Protection Authority (APD-GBA) |
| Athens, Greece | 643,452 (2021) | 24% | Hellenic Data Protection Authority |
| Barcelona, Spain | 1,731,649 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Basel, Switzerland | 180,097 (2025) | 8.1% | Federal Data Protection and Information Commissioner (FDPIC) |
| Belgrade, Serbia | 1,681,405 (2022) | 20% | Commissioner for Information of Public Importance and Personal Data Protection |
| Bergen, Norway | 294,860 (2026) | 25% | Norwegian Data Protection Authority (Datatilsynet) |
| Berlin, Germany | 3,685,265 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Bern, Switzerland | 138,562 (2025) | 8.1% | Federal Data Protection and Information Commissioner (FDPIC) |
| Bilbao, Spain | 351,124 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Bologna, Italy | 390,151 (2025) | 22% | Garante per la protezione dei dati personali |
| Bordeaux, France | 267,991 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Bratislava, Slovakia | 480,902 (2025) | 23% | Office for Personal Data Protection of the Slovak Republic |
| Bremen, Germany | 586,271 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Brno, Czechia | 404,296 (2025) | 21% | Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) |
| Brussels, Belgium | 197,129 (2025) | 21% | Data Protection Authority (APD-GBA) |
| Bucharest, Romania | 1,716,983 (2021) | 21% | National Supervisory Authority for Personal Data Processing (ANSPDCP) |
| Budapest, Hungary | 1,675,777 (2026) | 27% | National Authority for Data Protection and Freedom of Information (NAIH) |
| Chișinău, Moldova | 720,100 (2024) | 20% | National Center for Personal Data Protection (NCPDP / CNPDCP) |
| Cluj-Napoca, Romania | 286,598 (2021) | 21% | National Supervisory Authority for Personal Data Processing (ANSPDCP) |
| Cologne, Germany | 1,024,621 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Copenhagen, Denmark | 670,389 (2026) | 25% | Danish Data Protection Agency (Datatilsynet) |
| Cork, Ireland | 224,004 (2022) | 23% | Data Protection Commission (DPC) |
| Dnipro, Ukraine | 968,502 (2022) | 20% | Ukrainian Parliament Commissioner for Human Rights (Ombudsman) |
| Dortmund, Germany | 603,462 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Dresden, Germany | 564,904 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Dublin, Ireland | 592,713 (2022) | 23% | Data Protection Commission (DPC) |
| Düsseldorf, Germany | 618,685 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Eindhoven, Netherlands | 249,035 (2025) | 21% | Autoriteit Persoonsgegevens (AP) |
| Essen, Germany | 574,682 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Florence, Italy | 361,705 (2025) | 22% | Garante per la protezione dei dati personali |
| Frankfurt, Germany | 756,021 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Gdańsk, Poland | 489,328 (2025) | 23% | Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO) |
| Geneva, Switzerland | 211,152 (2025) | 8.1% | Federal Data Protection and Information Commissioner (FDPIC) |
| Genoa, Italy | 564,080 (2025) | 22% | Garante per la protezione dei dati personali |
| Ghent, Belgium | 272,184 (2025) | 21% | Data Protection Authority (APD-GBA) |
| Gothenburg, Sweden | 613,278 (2025) | 25% | Swedish Authority for Privacy Protection (IMY) |
| Graz, Austria | 306,971 (2026) | 20% | Austrian Data Protection Authority (Datenschutzbehörde, DSB) |
| Hamburg, Germany | 1,862,565 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Hanover, Germany | 522,131 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Helsinki, Finland | 694,392 (2025) | 25.5% | Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) |
| Kharkiv, Ukraine | 1,421,125 (2022) | 20% | Ukrainian Parliament Commissioner for Human Rights (Ombudsman) |
| Kraków, Poland | 816,614 (2025) | 23% | Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO) |
| Kyiv, Ukraine | 2,952,301 (2022) | 20% | Ukrainian Parliament Commissioner for Human Rights (Ombudsman) |
| Leipzig, Germany | 611,850 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Lille, France | 238,246 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Lisbon, Portugal | 655,542 (2023) | 23% | Comissão Nacional de Proteção de Dados (CNPD) |
| Ljubljana, Slovenia | 302,826 (2026) | 22% | Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) |
| Łódź, Poland | 639,890 (2025) | 23% | Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO) |
| Luxembourg, Luxembourg | 137,678 (2026) | 17% | National Commission for Data Protection (CNPD) |
| Lviv, Ukraine | 717,273 (2022) | 20% | Ukrainian Parliament Commissioner for Human Rights (Ombudsman) |
| Lyon, France | 519,127 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Madrid, Spain | 3,506,730 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Málaga, Spain | 599,063 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Malmö, Sweden | 367,924 (2025) | 25% | Swedish Authority for Privacy Protection (IMY) |
| Marseille, France | 886,040 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Milan, Italy | 1,365,698 (2025) | 22% | Garante per la protezione dei dati personali |
| Montpellier, France | 310,240 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Munich, Germany | 1,505,005 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Nantes, France | 327,734 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Naples, Italy | 909,013 (2025) | 22% | Garante per la protezione dei dati personali |
| Nice, France | 357,737 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Novi Sad, Serbia | 368,967 (2022) | 20% | Commissioner for Information of Public Importance and Personal Data Protection |
| Nuremberg, Germany | 529,508 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Odesa, Ukraine | 1,010,537 (2022) | 20% | Ukrainian Parliament Commissioner for Human Rights (Ombudsman) |
| Oslo, Norway | 728,714 (2026) | 25% | Norwegian Data Protection Authority (Datatilsynet) |
| Palermo, Italy | 628,693 (2025) | 22% | Garante per la protezione dei dati personali |
| Palma, Spain | 434,786 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Paris, France | 2,103,778 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Plovdiv, Bulgaria | 333,994 (2025) | 20% | Commission for Personal Data Protection (CPDP) |
| Podgorica, Montenegro | 179,505 (2023) | 21% | Agency for Personal Data Protection and Free Access to Information (AZLP) |
| Porto, Portugal | 267,236 (2023) | 23% | Comissão Nacional de Proteção de Dados (CNPD) |
| Poznań, Poland | 534,239 (2025) | 23% | Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO) |
| Prague, Czechia | 1,407,084 (2025) | 21% | Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) |
| Reykjavík, Iceland | 139,804 (2026) | 24% | Persónuvernd (Icelandic Data Protection Authority) |
| Riga, Latvia | 588,911 (2026) | 21% | Data State Inspectorate (Datu valsts inspekcija) |
| Rome, Italy | 2,747,290 (2025) | 22% | Garante per la protezione dei dati personali |
| Rotterdam, Netherlands | 672,960 (2025) | 21% | Autoriteit Persoonsgegevens (AP) |
| Sarajevo, Bosnia and Herzegovina | 270,608 (2026) | 17% | Personal Data Protection Agency in Bosnia and Herzegovina (AZLP) |
| Seville, Spain | 689,423 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Skopje, North Macedonia | 527,261 (2025) | 18% | Personal Data Protection Agency (AZLP) |
| Sofia, Bulgaria | 1,303,813 (2025) | 20% | Commission for Personal Data Protection (CPDP) |
| Stockholm, Sweden | 999,239 (2025) | 25% | Swedish Authority for Privacy Protection (IMY) |
| Strasbourg, France | 293,771 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Stuttgart, Germany | 612,663 (2024) | 19% | Federal Commissioner for Data Protection and Freedom of Information (BfDI) |
| Tallinn, Estonia | 452,563 (2026) | 24% | Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI) |
| Tampere, Finland | 263,337 (2025) | 25.5% | Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) |
| The Hague, Netherlands | 568,945 (2025) | 21% | Autoriteit Persoonsgegevens (AP) |
| Thessaloniki, Greece | 319,045 (2021) | 24% | Hellenic Data Protection Authority |
| Timișoara, Romania | 250,849 (2021) | 21% | National Supervisory Authority for Personal Data Processing (ANSPDCP) |
| Tirana, Albania | 598,176 (2023) | 20% | Information and Data Protection Commissioner (IDP) |
| Toulouse, France | 514,819 (2023) | 20% | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Turin, Italy | 853,196 (2025) | 22% | Garante per la protezione dei dati personali |
| Utrecht, Netherlands | 376,757 (2025) | 21% | Autoriteit Persoonsgegevens (AP) |
| Valencia, Spain | 840,792 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Vienna, Austria | 2,040,914 (2026) | 20% | Austrian Data Protection Authority (Datenschutzbehörde, DSB) |
| Vilnius, Lithuania | 618,469 (2026) | 21% | State Data Protection Inspectorate (VDAI) |
| Warsaw, Poland | 1,866,729 (2025) | 23% | Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO) |
| Wrocław, Poland | 672,601 (2025) | 23% | Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO) |
| Zagreb, Croatia | 777,744 (2025) | 25% | Croatian Personal Data Protection Agency (AZOP) |
| Zaragoza, Spain | 693,091 (2025) | 21% | Agencia Española de Protección de Datos (AEPD) |
| Zurich, Switzerland | 440,935 (2025) | 8.1% | Federal Data Protection and Information Commissioner (FDPIC) |
Population: municipality unless the city page states another scope. VAT: standard rate read on 18 October 2026.
What does the table show?
Standard VAT rates in the 35 countries range widely, so the same basket can show different totals to visitors in two cities across a border. Cities in federal countries such as Germany also fall under a regional data protection authority for private companies, in addition to the national one; their city pages name both.
Use the country pages for the national broadband market and local platforms, and the price index for what city-targeted proxies cost.
City data: FAQ
Can I reuse this table?
Yes, with a link to this page and the compilation date. The table is also available as Markdown at index.md.
How often is it updated?
When a statistics office or tax authority publishes a new figure that we pick up, the city page and this table change together, with a new date at the top.
Why are some figures from 2023 and others from 2025?
Statistics offices publish on different calendars. Each figure keeps its own reference year rather than being estimated to a common one.