Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Contabo is a German hosting provider offering virtual private servers, dedicated servers, and web hosting. As infrastructure it acts as a processor for the websites and applications it runs and does not add marketing cookies or tracking to them. Because its default data centres are in Germany, it is often a low risk choice for European projects, with the main considerations being the data processing agreement and the chosen server location.
Contabo is a hosting provider based in Munich, Germany, known for affordable virtual private servers, dedicated servers, and web hosting. It is used to run websites, applications, and back end services, and it competes mainly on price and on the availability of European data centres.
As infrastructure, Contabo processes the data your application sends through it, including visitor IP addresses in server logs. It does not add analytics or marketing cookies to the websites it hosts. Any cookies a visitor encounters come from the hosted application, although a strictly necessary technical cookie may be used at the server level.
Contabo acts as a processor under Article 28 of the GDPR, processing data on the instructions of the website owner, who remains the controller. A data processing agreement is required, and being a German company under EU law can simplify accountability compared with providers based outside the European Economic Area.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Hosting does not normally require consent. Serving the requested website and the strictly necessary cookies that support it are exempt under the ePrivacy Directive. Your consent obligations come from the analytics and marketing tools your application loads, not from Contabo.
Contabo offers data centres in Germany and the European Union as well as locations in the United States and Asia. If you choose a German or EU location, data stays within the European Economic Area. A non EU location introduces a transfer that must be covered by Standard Contractual Clauses or another valid mechanism.
Sign the Contabo data processing agreement, choose a German or EU data centre for European users, and document Contabo in your records of processing. Configure backups, security, and log retention, and keep consent management focused on the analytics and marketing tools in your application.
Websites using Contabo must obtain user consent under GDPR regulations.
DPIA considerations
As a hosting processor, assess the chosen data centre location, the data processing agreement and any sub processors, the security measures, and whether a non EU location introduces transfers. A DPIA is rarely needed for hosting alone.
Sample consent text
Our website is hosted with Contabo. Hosting uses only strictly necessary technologies to deliver the site and does not track you for marketing.
Third-party domains contacted
contabo.comcontabo.netCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| contabo_session | Functional | Session | Strictly necessary session cookie used by the hosting and control panel to deliver the service. |
| csrftoken | Functional | Session | Strictly necessary security cookie that protects forms against cross site request forgery. |
Contabo collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Contabo does not add marketing or analytics cookies to the sites it hosts. Visitor facing cookies come from your application, while the server may use a strictly necessary technical cookie that does not require consent.
No, not for hosting. Delivering the requested website and its strictly necessary cookies are exempt from consent. Consent applies to the analytics and marketing tools your application loads.
Contabo is a processor under Article 28 of the GDPR, acting on your instructions under a data processing agreement. You remain the controller for the personal data your website handles.
Its default data centres are in Germany, so a German or EU location keeps data within the European Economic Area. Contabo also offers United States and Asian locations, which would introduce transfers requiring Standard Contractual Clauses.
A DPIA is rarely needed for hosting alone. If your application performs high risk processing, the assessment focuses on the application, with Contabo documented as the hosting processor.
Sign the data processing agreement, choose a German or EU data centre, record Contabo in your processing records, and apply appropriate security and log retention. Handle consent at the application level.
Alternatives for EU hosting include Hetzner, OVH, Scaleway, and IONOS. All keep data in the EU when an EU region is selected, which simplifies the transfer analysis.
List Contabo as a hosting processor in your privacy notice rather than the cookie banner, since it does not set non essential cookies. Note the data centre location and document your application cookies separately.