> Stellantis brand sites use a first party tracking pixel for cross-brand analytics. Which cookies are set, when GDPR consent applies and what to disclose. > > Canonical: https://www.flowconsent.com/en/services/analytics/stellantis Analytics # Stellantis Marketing · [Official website](https://www.stellantis.com) Stellantis is the automotive group behind Peugeot, Citroën, Fiat, Jeep, Opel and other brands. Its corporate and brand websites use a shared first party tracking pixel for cross brand analytics, marketing and audience segmentation, with EU based infrastructure. [Block Stellantis until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Marketing - Prior consent Required - Documented cookies 5 - Third-party domains 4 - Servers European Union (group infrastructure, primarily France and Italy) Overview ## What does Stellantis do? ## **What is Stellantis** Stellantis is a multinational automotive group created in 2021 from the merger of PSA and Fiat Chrysler Automobiles. It owns and operates more than a dozen brands including Peugeot, Citroën, DS, Opel, Fiat, Alfa Romeo, Lancia, Jeep, Maserati, Chrysler, Dodge, Ram and Vauxhall. The group runs a unified digital platform that powers the corporate site and most of the brand sites in the European Economic Area, with a shared first party tracking pixel used for cross brand analytics, marketing and audience segmentation. ## **What data and cookies Stellantis collects** Stellantis sites set strictly necessary session and security cookies, plus first party analytics, advertising and personalisation cookies once the visitor has accepted them. The shared tracking pixel sends page views, configurator interactions, dealer lookups, lead form submissions, IP address, user agent, device characteristics and a persistent visitor identifier to group servers. Lead forms also collect contact information, vehicle interest and consent records, which can be reconciled with offline CRM and dealer data. ## **GDPR and ePrivacy implications** Article 5(3) ePrivacy requires prior informed consent for all non strictly necessary cookies, which covers the cross brand analytics and advertising pixels. The cross brand reconciliation creates a single visitor profile spanning multiple brands and qualifies as profiling under Article 22 GDPR when used for advertising. National regulators such as the CNIL, the Garante and the AEPD have fined large automotive groups for cookie banners that did not allow refusal as easy as acceptance. ## **Consent and user controls** The Stellantis pixel and any advertising tags should be blocked by the consent management platform until the visitor accepts an analytics or marketing category. The banner must name Stellantis as joint controller alongside the local brand entity, indicate the cross brand sharing, allow refusal in one click and offer granular controls per purpose. Visitors must be able to exercise their access, rectification, erasure, restriction, objection and portability rights through a dedicated privacy form. ## **Data transfers and hosting** The primary infrastructure is hosted in the European Union, mainly in France and Italy. Some advertising, programmatic and measurement partners selected by Stellantis operate from the United States or other third countries. In that case, the transfer is framed by the EU standard contractual clauses, by the EU US Data Privacy Framework where the partner is certified, and by a transfer impact assessment that takes US surveillance laws such as FISA 702 and Executive Order 12333 into account. ## **Practical compliance steps** Document the joint controllership between Stellantis NV and the local brand entity, gate every non essential tag behind a granular consent banner, configure short retention for raw event logs, maintain a register of partners with their hosting region and contractual safeguards, run a documented DPIA at group level, ensure data subject requests are answered within one month and update the privacy and cookie policy with a clear mention of Stellantis, the categories of data, the recipients, the cross brand reconciliation and the retention. Compliance ## Stellantis and the GDPR Stellantis is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Article 5(3) ePrivacy Directive and Article 6(1)(a) GDPR) for analytics, advertising and cross brand audience cookies. Legitimate interest (Article 6(1)(f) GDPR) for strictly necessary security and fraud prevention cookies. Performance of a contract (Article 6(1)(b) GDPR) for car configurator, dealer locator and customer area features. - Risk level high - Applicable regulations GDPR, ePrivacy Directive (Cookie Law), national implementations such as the French Data Protection Act, the German TDDDG, the Italian Codice Privacy and the Spanish LSSI, plus EU consumer law, the Digital Services Act and the Digital Markets Act for large brand portals. ### Impact assessment (DPIA) A DPIA is recommended at group level given the scale (millions of EU visitors), the cross brand audience reconciliation, the rich behavioural data linked to vehicle configurators and lead forms, and the combination with offline CRM and dealer data. Document the categories of data, the joint controllership between brands and Stellantis NV, the retention of analytics and lead data and the safeguards for any onward transfer to advertising partners. ### Sample text for your banner > We use Stellantis tracking technologies to measure how visitors interact with our brand sites and to personalise product information across the group. This sets first party cookies and may share data with other Stellantis brands and advertising partners. We need your consent to enable these technologies. You can accept, refuse or withdraw your consent at any time. Cookies and trackers ## What Stellantis sets and contacts - Tracking method First party tracking pixel and JavaScript tag with cross brand identifiers - Server location European Union (group infrastructure, primarily France and Italy) - Data transferred outside the EU Most processing happens on EU infrastructure operated by the Stellantis group. Some analytics and marketing partners used by the group may process data in the United States or other third countries, in which case the transfer is framed by standard contractual clauses, the EU US Data Privacy Framework where applicable, and a documented transfer impact assessment. ### Cookies set (5) | Name | Type | Duration | Purpose | | -------- | ---------------- | --------- | --------------------------------------------------------------------------------------------------------------- | | st\_vid | http\_persistent | 13 months | Persistent first party visitor identifier used by the Stellantis pixel for cross brand audience reconciliation. | | st\_sid | http\_session | Session | Session identifier used to group page views and configurator interactions during a single visit. | | st\_cs | http\_persistent | 6 months | Stores the consent choices made by the visitor on the cookie banner across Stellantis brand sites. | | st\_cfg | http\_persistent | 90 days | Remembers the last vehicle configuration started by the visitor to ease return visits. | | st\_lang | http\_persistent | 1 year | Stores the language and country selected by the visitor on the Stellantis brand site. | ### Third-party domains contacted (4) - `stellantis.com` - `media.stellantis.com` - `careers.stellantis.com` - `investors.stellantis.com` Questions ## Frequently asked questions about Stellantis Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies do Stellantis sites set? Stellantis brand sites set strictly necessary session and security cookies, plus first party analytics, advertising and personalisation cookies once consent is given. The shared tracking pixel reads a persistent first party visitor identifier used for cross brand audience reconciliation, and exposes additional advertising cookies when partner tags are loaded. ### Is consent required for the Stellantis pixel? Yes. The cross brand analytics and advertising pixel are not strictly necessary, so Article 5(3) ePrivacy requires opt in consent before they are written. Strictly necessary cookies for security, load balancing and language preference may be set without consent. ### What is the legal basis for processing? Consent under Article 6(1)(a) GDPR for analytics, advertising and personalisation. Legitimate interest under Article 6(1)(f) GDPR for fraud and security cookies. Performance of a contract under Article 6(1)(b) GDPR for the configurator, dealer locator, brochure requests and customer area. ### Are data transferred to the United States? The primary infrastructure is in the EU, mainly France and Italy. Some advertising and measurement partners operate from the US or other third countries. In that case the transfer relies on standard contractual clauses, the EU US Data Privacy Framework where applicable, and a transfer impact assessment by the relevant Stellantis entity. ### Do I need a DPIA for Stellantis sites? Yes, a DPIA is appropriate at group level. The processing is large scale, combines behavioural data across brands, uses persistent identifiers and feeds CRM and advertising activation. This meets several criteria of Article 35 GDPR and the EDPB Guidelines on DPIA. ### How do we implement Stellantis tags in a compliant way? Document the joint controllership, deploy a granular consent management platform that blocks all non essential tags by default, configure short retention for raw event logs, maintain a register of partners with hosting and safeguards, document data subject request workflows and review the cookie banner regularly against CNIL, Garante and AEPD guidance. ### Are there alternatives to the Stellantis stack? For the analytics layer, brands can complement or replace the Stellantis pixel with EU based, consent friendly tools such as Matomo, Piwik PRO, Plausible, AT Internet (Piano Analytics) or Adobe Analytics with EU residency. The corporate cross brand reconciliation remains specific to the group. ### How do I update my cookie policy for Stellantis sites? List the Stellantis first party cookies and partner cookies, identify the brand entity and Stellantis NV as joint controllers, explain the cross brand audience reconciliation, mention the EU hosting and any US partners with the safeguards used, link to the Stellantis privacy notice and explain how visitors can refuse or withdraw consent. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Splitbee](https://www.flowconsent.com/en/services/analytics/splitbee) [Splitbee is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Splitbee supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Splitbee enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/splitbee) [Analytics](https://www.flowconsent.com/en/services/analytics/splitbee) · ### [Plausible](https://www.flowconsent.com/en/services/analytics/plausible) [Plausible is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Plausible offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Plausible empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/plausible) [Analytics](https://www.flowconsent.com/en/services/analytics/plausible) · ### [Microsoft Power BI](https://www.flowconsent.com/en/services/analytics/microsoft-power-bi) [Microsoft Power BI is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Microsoft Power BI supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Microsoft Power BI enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/microsoft-power-bi) [Analytics](https://www.flowconsent.com/en/services/analytics/microsoft-power-bi) · ### [Rudderstack](https://www.flowconsent.com/en/services/analytics/rudderstack) [Rudderstack is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Rudderstack supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Rudderstack enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/rudderstack) [Analytics](https://www.flowconsent.com/en/services/analytics/rudderstack) · ### [SuperStats](https://www.flowconsent.com/en/services/analytics/superstats) [SuperStats is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. SuperStats offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, SuperStats empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/superstats) [Analytics](https://www.flowconsent.com/en/services/analytics/superstats) · ### [Lexity](https://www.flowconsent.com/en/services/analytics/lexity) [Lexity is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Lexity supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Lexity enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/lexity) [Analytics](https://www.flowconsent.com/en/services/analytics/lexity) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)