Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Convious is a Dutch e commerce and engagement platform built for attractions, museums, zoos and live venues. It powers dynamic pricing of tickets, basket recovery, marketing automation and visitor analytics from a single conversion oriented checkout. Convious is headquartered in Amsterdam and hosts data in the European Union, which makes it a privacy friendly option, although third party integrations (Meta Pixel, Google Ads) added by the operator still require consent and a documented transfer chain.
Convious is an e commerce and engagement platform built in Amsterdam for attractions: theme parks, museums, zoos and aquariums, escape rooms and live venues. It combines a conversion oriented checkout, AI driven dynamic ticket pricing, marketing automation, abandoned basket recovery, on site widgets and visitor analytics. Convious targets the European leisure industry and keeps its operations and data in the European Union.
Convious processes visitor profile data (name, email, phone, address, age category), purchase data (tickets, season passes, gift vouchers, products), behavioural data on the checkout funnel, device data (IP, user agent, referrer), UTM parameters, and dynamic pricing signals such as time of day, weather, capacity. Conversion data may be forwarded to third party marketing tags configured by the operator.
Convious acts as a processor for the venue, while marketing automation features may make it a joint controller. Strictly necessary cookies for the basket and checkout are exempt from consent under Art. 5(3) ePrivacy. Marketing automation, behavioural analytics and third party advertising pixels require prior consent. The dynamic pricing engine should be configured to avoid prohibited discrimination criteria.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Integrate a Consent Management Platform that blocks Convious analytics and marketing cookies until consent is granted. The Convious widget can be configured to read the consent state from the CMP and only fire non essential tags afterwards. Maintain a granular consent log to demonstrate compliance with EDPB Guidelines 05/2020.
Convious itself stores data in the European Union and does not initiate transfers outside the EU. Operators who enable third party integrations (Meta Pixel, Google Ads) must rely on the EU US Data Privacy Framework for those vendors and document a Transfer Impact Assessment specific to each.
Sign the Convious DPA, document Convious in your Article 30 register with EU only data residency, audit each third party integration enabled in your dashboard, configure granular consent for analytics and marketing, define retention rules for tickets and personal data, and provide a clear privacy notice covering both the venue and the Convious platform.
Websites using Convious must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is appropriate when Convious is used for large scale dynamic pricing combined with behavioural profiling, when biometric or age verification flows are added at the venue entrance, or when third party advertising pixels are integrated with the checkout.
Sample consent text
We use Convious, a Dutch ticketing and engagement platform, to manage your ticket purchases, personalise our offers and measure visitor behaviour. Convious stores your personal data inside the European Union. Optional advertising cookies are loaded only after your consent.
Third-party domains contacted
convious.comcdn.convious.comapi.convious.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| cv_cart | Strictly Necessary | 30 days | Persists the visitor basket and ticket selection during checkout. |
| cv_visitor | Marketing | 1 year | Convious visitor identifier used for dynamic pricing personalisation and basket recovery. |
| cv_analytics | Analytics | 13 months | Stores the analytics identifier for the Convious visitor journey dashboard. |
| cv_consent | Strictly Necessary | 12 months | Stores the visitor consent decision for Convious widgets and downstream integrations. |
Convious places tracking cookies for advertising — comply with GDPR using FlowConsent.
Convious sets a strictly necessary cart cookie during checkout, a visitor identifier for dynamic pricing personalisation, an analytics cookie for the journey dashboard, and a consent cookie that stores the visitor decision. The cart and consent cookies are exempt from consent, while the visitor and analytics cookies require prior consent.
Strictly necessary cookies for the basket are exempt. Marketing and analytics cookies, as well as integrations with Meta Pixel or Google Ads added by the operator, require prior consent under Art. 5(3) ePrivacy.
Performance of a contract (Art. 6(1)(b) GDPR) for ticket purchase and delivery. Legitimate interest (Art. 6(1)(f)) for security and fraud prevention. Consent (Art. 6(1)(a)) for dynamic pricing personalisation, marketing automation and third party advertising tags.
No. Convious itself stores data in the European Union on AWS EU regions. Third party integrations enabled by the operator (Meta Pixel, Google Ads) involve their own transfers and must be assessed separately.
A DPIA is recommended when dynamic pricing is combined with behavioural profiling, when biometric or age verification flows are added at the venue entrance, or when significant third party advertising integrations are enabled.
Sign the Convious DPA, configure the platform to keep data in the EU, integrate a CMP that gates analytics and marketing cookies, audit each third party integration, document Convious in your Article 30 register and update your privacy notice.
Yes. Tiqets (Netherlands), Smeetz (Switzerland with EU data residency), Vivaticket (Italy), Weezevent (France) and Skiddle (United Kingdom) offer similar ticketing and engagement features for attractions and venues with EU data residency.
List each Convious cookie with name, purpose, duration and provider. Explicitly mention that Convious B.V. is established in the Netherlands and that data stays in the EU. List the third party integrations enabled in your dashboard and re trigger the consent banner.