Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Arsys Domain Parking is the default parking page served by Spanish hosting provider Arsys for unused or recently registered domains. It displays related ads and links monetised through ad networks.
Arsys Domain Parking is the holding page shown by Spanish hosting provider Arsys (Grupo United Internet) for domains that have been registered or transferred but do not yet point to a real website. The page typically displays the domain name, generic search box, and contextual advertising provided by partner networks such as Google AdSense for Domains, Sedo or Bodis. Many parking pages are still online for years and accumulate traffic that triggers GDPR and ePrivacy obligations.
When a visitor types the domain, Arsys returns a static HTML page hosted on its Spanish infrastructure. The page injects scripts from one or more ad partners that show contextual ads, search results or related links. The domain owner shares the resulting advertising revenue with Arsys or with the partner ad network. The page also includes a small Arsys branded banner inviting the owner to activate hosting or email.
The ad scripts load from third party domains and set cookies on those domains. Typical entries include Google''s NID, IDE and __Secure-3PSID cookies for AdSense for Domains, Sedo cookies for tracking impressions, and Bodis cookies for revenue attribution. The page also reads the user IP, user agent, referrer, and the keyword the user typed.
The Spanish DPA (AEPD) has fined several publishers for parking pages that loaded ads without consent. Cookies set by Google AdSense for Domains, Sedo or Bodis are not strictly necessary and require prior consent under Article 22 LSSI-CE (transposing Article 5(3) ePrivacy). The domain holder remains controller for the parking page even when the ad network operates the slot.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Arsys itself hosts the static page in Spain, but the ad partners that monetise the page typically transfer data to the United States. Google AdSense for Domains and Sedo participate in the EU-US Data Privacy Framework. Bodis and other smaller networks rely on Standard Contractual Clauses. A Transfer Impact Assessment is recommended if traffic is significant.
Replace the default ad enabled parking with a static ads free placeholder if you do not need the revenue. If you keep monetisation, deploy a Consent Management Platform compatible with the IAB TCF on the parking page itself, gate the ad scripts behind consent, and publish a minimal privacy notice that names the ad partners. Otherwise, redirect the domain to a real website that already implements consent.
Websites using Arsys Domain Parking must obtain user consent under GDPR regulations.
DPIA considerations
A formal DPIA is not required for the parking page itself, but it can be useful when the domain is part of a wider portfolio that systematically monetises EU traffic. Document the third party ad partners loaded on the page, the consent mechanism (or its absence), and the retention applied by Arsys to access logs.
Sample consent text
This page is a parking page operated by Arsys and includes ads from third party networks (Google AdSense for Domains, Sedo, Bodis). These ads set cookies and transfer your IP to advertising partners in the EU and the United States. We load them only after you accept the advertising category in the cookie banner.
Third-party domains contacted
parking.arsys.essyndication.google.comgoogleads.g.doubleclick.netsedoparking.combodis.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| PHPSESSID | http_cookie | Session | Generic PHP session cookie set by the Arsys parking template to maintain visitor state. |
| NID | http_cookie | 6 months | Google cookie set by AdSense for Domains used to deliver and measure ads on the parking page. |
| IDE | http_cookie | 13 months | DoubleClick cookie set when an AdSense for Domains ad is shown, used for ad targeting and frequency capping. |
| sedo_tracker | http_cookie | 30 days | Sedo cookie used to track impressions, clicks and revenue attribution on parked domains. |
| bodis_id | http_cookie | 30 days | Bodis cookie used for monetisation analytics on parked domains. |
Arsys Domain Parking collects user analytics data — you legally need a consent banner. Try FlowConsent free.
The page itself sets few cookies (typically a small session cookie set by Arsys). The bulk of cookies come from the embedded ad networks (Google AdSense for Domains, Sedo, Bodis): typically NID, IDE and __Secure-3PSID for Google, plus impression and click tracking cookies for the other networks.
Yes. The ad scripts loaded on the parking page set non strictly necessary cookies and process personal data such as IP addresses, so Article 5(3) ePrivacy and Article 22 LSSI-CE require prior consent. Without consent, the parking page can only display a static placeholder without ads.
The domain holder remains controller for the page. Arsys acts as a hosting processor, and the ad networks act as independent controllers or joint controllers for the advertising data. Document this allocation in your record of processing activities.
Arsys hosts the page in Spain, but the ad networks usually transfer impression and click data to the United States. Google AdSense for Domains and Sedo participate in the EU-US Data Privacy Framework. Bodis and smaller networks rely on Standard Contractual Clauses.
Not usually for a single parked domain. A DPIA becomes relevant when a portfolio of domains systematically monetises European traffic, or when the ad networks involved trigger DPIA criteria from the EDPB guidelines.
Either replace the default ad enabled parking with a static page without ads, or deploy a CMP on the parking page itself, gate the ad scripts behind consent, and publish a short privacy notice with the list of ad partners and their roles.
Most registrars offer an ads free parking page on request. Alternatively, redirect the domain to a real corporate site, set up a single page landing on your own server, or use a CMS like WordPress or a static site host like Vercel for full control.
Add a section that names the parking page, lists the cookies set by Arsys and by each ad partner with their lifetime and purpose, mentions the international transfer to the US, and explains how the visitor can withdraw consent. Link to each partner's privacy policy.