> How Creatium handles cookies, data and transfers to Russia under GDPR and ePrivacy. Legal basis, Transfer Impact Assessment, DPIA and a sample consent text. > > Canonical: https://www.flowconsent.com/en/services/cms/creatium CMS # Creatium Analytics · [Official website](https://creatium.io) No code website builder originating from Russia that lets users create landing pages, blogs and small online shops with drag and drop blocks and templates. Hosting and integrated analytics are operated by Creatium. [Block Creatium until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cms) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [CMS](https://www.flowconsent.com/en/services/cms) - Consent Analytics - Prior consent Required - Documented cookies 5 - Third-party domains 5 - Servers Russia (primary), with CDN nodes in additional regions Overview ## What does Creatium do? ## **What Creatium is** Creatium is a no code website builder originating from Russia. Users assemble landing pages, blogs and small online shops from drag and drop blocks and templates. Hosting, CDN and integrated analytics (typically Yandex Metrica) are operated by Creatium on Russian infrastructure. ## **Data and cookies** Creatium hosts the website content, processes account and billing data of the site owner, and through its built in analytics captures IP addresses, page views, referrers and visitor identifiers. Integrated messengers, forms and CRM connectors may add further personal data flows. ## **GDPR, ePrivacy and Russia transfer concerns** Russia is not covered by an EU adequacy decision and, since February 2022, EU regulators flag it as a high risk destination. Standard Contractual Clauses must be accompanied by strong supplementary measures (encryption at rest with merchant held keys, pseudonymisation, organisational safeguards) or the EU operator should consider not transferring at all. ## **Consent requirements** Non essential cookies, integrated analytics and messengers must be blocked until consent. For the international transfer, many EU authorities recommend an explicit notice and, in many cases, the consent derogation of Article 49(1)(a) GDPR (with all the conditions it implies: occasional, informed and explicit). ## **International data transfers** All personal data on a Creatium hosted site sits in Russia. EU customer obligations include a Transfer Impact Assessment, an evaluation of supplementary measures, a clear data subject notice and, often, an evaluation of EU alternatives. If sensitive categories or large volumes are involved, an EU based builder should be preferred. ## **Practical compliance steps** Document the Russia transfer in your ROPA, sign the Creatium DPA (verify the SCCs version), implement encryption and access controls, run a DPIA, inform visitors clearly about hosting in Russia, gate analytics and messengers behind consent, restrict admin access, set short retention and seriously evaluate EU alternatives for any sensitive use case. Compliance ## Creatium and the GDPR Creatium is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Article 6(1)(a) GDPR (consent) for non essential cookies, embedded analytics and any marketing connector. Article 6(1)(b) (contract) for the strictly necessary parts of the site editor when the website owner uses it for their business. Article 49(1)(a) consent or 49(1)(b) contract derogations may be needed for transfers to Russia. - Risk level high - Applicable regulations GDPR, ePrivacy Directive, German TTDSG, French CNIL guidance on transfers to high risk third countries, Spanish LOPDGDD, Russian Federal Law 152 FZ on personal data ### Impact assessment (DPIA) A DPIA is strongly recommended because Creatium hosts sites in Russia, a third country with significant data protection risks since February 2022. The DPIA must cover the international transfer, fallback hosting, supplementary measures, integrated analytics, retention and the rights of EU data subjects. ### Sample text for your banner > With your consent we use Creatium (Russia) to host this website and capture aggregated traffic data via its integrated analytics. Hosting in Russia involves a transfer outside the European Economic Area without an adequacy decision; we have implemented supplementary safeguards and you can object at any time. Cookies and trackers ## What Creatium sets and contacts - Tracking method No code website builder JavaScript, first party session cookies, integrated analytics counter (Yandex Metrica by default), optional connectors to messengers and CRM - Server location Russia (primary), with CDN nodes in additional regions - Data transferred outside the EU Creatium is operated from Russia, which is not covered by an EU adequacy decision. Following the European Commission's position after February 2022, transfers to Russia raise specific risks and require strong supplementary measures, a Transfer Impact Assessment and, in many EU jurisdictions, an explicit notice to data subjects. ### Cookies set (5) | Name | Type | Duration | Purpose | | ----------------- | ---- | -------- | --------------------------------------------------------------------------------------------------------------- | | creatium\_session | http | Session | Strictly necessary session cookie that keeps the site editor / visitor signed in. | | creatium\_csrf | http | Session | CSRF protection token used by the Creatium dashboard and forms. | | creatium\_locale | http | 1 year | Stores the language and country preference. | | \_ym\_uid | http | 1 year | Yandex Metrica cookie used by the integrated analytics module to identify returning visitors; requires consent. | | \_ym\_d | http | 1 year | Yandex Metrica cookie storing the date of the first visit; requires consent. | ### Third-party domains contacted (5) - `creatium.io` - `creatium.ru` - `cdn.creatium.io` - `mc.yandex.ru` - `mc.yandex.com` Questions ## Frequently asked questions about Creatium Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Creatium set? Creatium sets strictly necessary cookies (creatium\_session, creatium\_csrf, creatium\_locale) and, through its integrated Yandex Metrica analytics, cookies such as \_ym\_uid and \_ym\_d that require user consent. ### Is user consent required? Yes for the analytics and any optional messenger or chat integration. The transactional shop or login flows can rely on contract performance. For the underlying transfer to Russia, an explicit notice and often the consent derogation of Article 49(1)(a) GDPR are advisable. ### What is the legal basis? Article 6(1)(b) GDPR (contract) for site editor and account, 6(1)(f) (legitimate interest) for security and platform stability, 6(1)(a) (consent) for the analytics and marketing integrations. Article 49(1)(a) or 49(1)(b) can act as derogation for the international transfer. ### Does Creatium transfer data to a non adequate country? Yes. Creatium hosts in Russia, a third country without adequacy and currently considered high risk. Standard Contractual Clauses must be paired with strong supplementary measures and a Transfer Impact Assessment. ### Do I need a DPIA? Yes, in practice. The combination of behavioural analytics, hosting in Russia and potential lack of effective enforcement makes a DPIA strongly advisable for any EU controller. ### How do I implement Creatium compliantly? Sign the DPA, configure encryption and access controls, gate analytics and messengers behind consent, inform users that hosting is in Russia, document the SCC and TIA, run a DPIA, set short retention and review the integration regularly. ### What are the alternatives? EU based website builders include Webflow (with EU hosting plans), Squarespace EU, Wix, Strikingly, Tilda (Latvia EU operations), Hostinger Builder, Carrd and Framer. EU based hosting is preferable when handling EU customer data. ### How do I update the cookie policy? List Creatium as a processor under hosting and analytics, declare the Yandex Metrica cookies, mention the transfer to Russia, link to the Creatium privacy policy, document the supplementary measures and refresh the policy whenever you enable a new integration. Same category ## More services: CMS [See the whole category](https://www.flowconsent.com/en/services/cms) ### [Twenty Twenty-Three](https://www.flowconsent.com/en/services/cms/twenty-twenty-three) [Twenty Twenty-Three is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Twenty Twenty-Three supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Twenty Twenty-Three remains a leading web development choice.](https://www.flowconsent.com/en/services/cms/twenty-twenty-three) [CMS](https://www.flowconsent.com/en/services/cms/twenty-twenty-three) · ### [WebWave](https://www.flowconsent.com/en/services/cms/webwave) [WebWave is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. WebWave supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, WebWave enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/cms/webwave) [CMS](https://www.flowconsent.com/en/services/cms/webwave) · ### [Halo](https://www.flowconsent.com/en/services/cms/halo) [Halo is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Halo integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Halo helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/halo) [CMS](https://www.flowconsent.com/en/services/cms/halo) · ### [Bricksite](https://www.flowconsent.com/en/services/cms/bricksite) [Bricksite is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Bricksite supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Bricksite enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/cms/bricksite) [Analytics](https://www.flowconsent.com/en/services/cms/bricksite) · ### [BUROGU](https://www.flowconsent.com/en/services/cms/burogu) [BUROGU is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BUROGU supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BUROGU ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/burogu) [CMS](https://www.flowconsent.com/en/services/cms/burogu) · ### [Animation Addons](https://www.flowconsent.com/en/services/cms/animation-addons) [Animation Addons is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Animation Addons offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Animation Addons empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/cms/animation-addons) [CMS](https://www.flowconsent.com/en/services/cms/animation-addons) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)