> Running a Jimdo website under GDPR: strictly necessary session cookies, EU hosting, German supervisory authority, consent for Jimdo Statistics and widgets. > > Canonical: https://www.flowconsent.com/en/services/cms/jimdo CMS # Jimdo Unclassified · [Official website](https://www.jimdo.com) Jimdo is a German website builder targeted at small businesses and freelancers, with an AI website builder (Dolphin), a classic editor (Creator) and integrated ecommerce. Hosted in Frankfurt and Dublin, fully under German data protection authority oversight. [Block Jimdo until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cms) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [CMS](https://www.flowconsent.com/en/services/cms) - Consent Unclassified - Prior consent Required - Documented cookies 6 - Third-party domains 5 - Servers Jimdo is operated by Jimdo GmbH, a German company headquartered in Hamburg. The Jimdo platform runs primarily on Amazon Web Services in Frankfurt (eu-central-1) and Dublin (eu-west-1) for the EU customer base. Static site assets are served from a global CloudFront distribution but the management layer, the customer accounts and the published content stay inside the EU by default. Jimdo is fully under German data protection authority oversight. Overview ## What does Jimdo do? ## **What Jimdo is** Jimdo is a German website builder founded in Hamburg in 2007 and operated by Jimdo GmbH. The product line has three pillars: Jimdo Dolphin (an AI guided builder that generates a complete site from a few questions), Jimdo Creator (a classic block based editor) and Jimdo Shop (integrated ecommerce with checkout, PayPal and SEPA payments). The company is fully European, headquartered in Germany and subject to the German Federal Data Protection Act (BDSG) and the Hamburg DPA as lead authority. ## **Cookies set by Jimdo** Strictly necessary: JIMDO\_SESSION (session, login and editor session), jimdo\_locale (1 year, preferred language), \_jimdo\_csrf (session, anti CSRF token), jimdo\_legacy\_id (1 year, legacy customer reference). With Jimdo Statistics activated: jimdo\_visitor (1 year, anonymous visitor identifier), jimdo\_pv\_session (session, page view counter). Jimdo offers a built in cookie banner that gates the optional categories. Third party widgets (Google Analytics, Facebook Pixel, Mailchimp) add their own cookies. ## **GDPR, ePrivacy and the German context** The strictly necessary cookies are exempt under ePrivacy art. 5(3) and German TTDSG paragraph 25. Jimdo Statistics and the optional integrations require consent under GDPR art. 6(1)(a). The Jimdo cookie banner widget natively supports the IAB TCF v2.2 signal and the German TTDSG categorisation (technisch erforderlich, statistik, marketing). The email marketing list requires explicit consent under the German UWG for direct marketing. ## **EU data residency** Jimdo primary hosting runs on AWS Frankfurt (eu-central-1) and Dublin (eu-west-1). Static assets are served from the CloudFront EU edges. Customer billing, account and analytics records remain in the EU. Limited transfers occur to US sub processors for support tools (Zendesk, HubSpot) under the 2021 Standard Contractual Clauses. As a fully German company Jimdo is not subject to the US CLOUD Act on its core infrastructure. ## **Recommended setup for European customers** Sign the Jimdo Auftragsverarbeitungsvertrag (DPA), activate the Jimdo cookie banner with the German TTDSG categories, list strictly necessary cookies in the privacy notice, gate Jimdo Statistics and external widgets behind statistik or marketing consent, document the form submission flow with a clear consent text for the email marketing list under UWG and document Jimdo as a sub processor in your record of processing under GDPR art. 30. Compliance ## Jimdo and the GDPR Jimdo is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis For checkout, account creation and form submissions: performance of a contract (GDPR art. 6(1)(b)). For strictly necessary cookies (JIMDO\_SESSION, jimdo\_locale, \_jimdo\_csrf): legitimate interest (art. 6(1)(f)) and the ePrivacy art. 5(3) exemption. For Jimdo Statistics, the Jimdo native analytics, the Jimdo Email Marketing module and any installed widget (Google Analytics, Facebook Pixel, Mailchimp): consent under GDPR art. 6(1)(a) and ePrivacy art. 5(3). - Risk level low - Applicable regulations GDPR, ePrivacy Directive, German TTDSG, BDSG, German Telemediengesetz, CNIL guidance on website builders, AEPD ecommerce guidelines, EDPB guidelines 2/2023 ### Impact assessment (DPIA) A DPIA is generally not required for a standard Jimdo website with the strictly necessary cookies only. A DPIA is recommended when Jimdo Statistics, the Jimdo Email Marketing module or third party integrations (Google Analytics, Facebook Pixel, Mailchimp) are activated. The DPIA should document the EU hosting commitment, the retention of the visitor analytics data, the consent flow on the Jimdo cookie banner and the legal basis for the email marketing list collected by forms. ### Sample text for your banner > Our website is built with Jimdo and hosted by Jimdo GmbH in Hamburg (Germany), with infrastructure in AWS Frankfurt and Dublin. Strictly necessary cookies (JIMDO\_SESSION, jimdo\_locale, \_jimdo\_csrf) keep the site working. With your consent we activate Jimdo Statistics and any external widget such as Google Analytics, Facebook Pixel or Mailchimp. Your data stays in the European Union by default. You can accept, refuse or withdraw at any time. Cookies and trackers ## What Jimdo sets and contacts - Tracking method hosted\_website\_builder\_with\_first\_party\_session\_cookies\_and\_optional\_marketing\_integrations - Server location Jimdo is operated by Jimdo GmbH, a German company headquartered in Hamburg. The Jimdo platform runs primarily on Amazon Web Services in Frankfurt (eu-central-1) and Dublin (eu-west-1) for the EU customer base. Static site assets are served from a global CloudFront distribution but the management layer, the customer accounts and the published content stay inside the EU by default. Jimdo is fully under German data protection authority oversight. ### Cookies set (6) | Name | Type | Duration | Purpose | | ------------------ | ---------------------------------------- | -------- | --------------------------------------------------------------------------------- | | JIMDO\_SESSION | First party (Jimdo) | Session | Login and editor session token for the Jimdo customer area and the published site | | jimdo\_locale | First party (Jimdo) | 1 year | Stores the visitor preferred language for the Jimdo site | | \_jimdo\_csrf | First party (Jimdo) | Session | Anti CSRF token for form submissions on the Jimdo site | | jimdo\_legacy\_id | First party (Jimdo) | 1 year | Legacy customer reference used when migrating from the Jimdo Creator to Dolphin | | jimdo\_visitor | First party (Jimdo Statistics, optional) | 1 year | Anonymous visitor identifier used by the optional Jimdo Statistics module | | jimdo\_pv\_session | First party (Jimdo Statistics, optional) | Session | Page view counter for the optional Jimdo Statistics module | ### Third-party domains contacted (5) - `jimdo.com` - `jimdo.de` - `jimdosite.com` - `page.jimdo-app.com` - `static.jimdo-static.com` Questions ## Frequently asked questions about Jimdo Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Jimdo set? Strictly necessary: JIMDO\_SESSION (session), jimdo\_locale (1 year), \_jimdo\_csrf (session), jimdo\_legacy\_id (1 year). With Jimdo Statistics: jimdo\_visitor (1 year, anonymous), jimdo\_pv\_session (session). Installed widgets add their own cookies. ### Is consent required for Jimdo? Strictly necessary cookies do not need consent. Consent is required for Jimdo Statistics, external widgets (Google Analytics, Facebook Pixel, Mailchimp) and email marketing. The Jimdo built in cookie banner handles the categorisation under the German TTDSG. ### What is the legal basis for Jimdo? Legitimate interest and ePrivacy art. 5(3) exemption for session cookies. Contract for form submissions you fulfil. Consent for Jimdo Statistics, marketing widgets and the email marketing list (with UWG explicit opt in for German residents). ### Are data transferred outside the EU? No for the core platform. Jimdo hosts on AWS Frankfurt and Dublin. Limited transfers to US sub processors (Zendesk, HubSpot) under SCC 2021 for support. Jimdo is a German company not subject to the US CLOUD Act on its core infrastructure. ### Do I need a DPIA for Jimdo? Usually no for a standard Jimdo site with strictly necessary cookies. Recommended when Jimdo Statistics, Jimdo Email Marketing or third party widgets are activated. ### How do I implement Jimdo compliantly? Sign the Jimdo AVV, activate the Jimdo cookie banner with TTDSG categories, list strictly necessary cookies in the Datenschutzerklärung, gate statistics and external widgets behind consent, document form submission consent under UWG and document Jimdo as a sub processor. ### What are the alternatives to Jimdo? Other EU centric builders: 1&1 IONOS MyWebsite (Germany), Strato Homepage Baukasten (Germany), Webnode (Czech Republic), Hostinger Website Builder (Lithuania), WiX (Israel with EU storage), Squarespace, Wordpress.com. For developers: WordPress self hosted with a German host like Hetzner or Mittwald. ### How do I update my cookie policy after adding Jimdo? List Jimdo GmbH (Hamburg) as the data processor, declare the strictly necessary cookies and the consent based cookies separately, mention the EU hosting in AWS Frankfurt and Dublin, link to the Jimdo Datenschutzerklärung and provide a DSAR contact via the Jimdo customer area. Same category ## More services: CMS [See the whole category](https://www.flowconsent.com/en/services/cms) ### [Textpattern CMS](https://www.flowconsent.com/en/services/cms/textpattern-cms) [Textpattern CMS provides a robust content management platform that enables organizations to create, organize, and distribute web content efficiently. Built with scalability and performance in mind, Textpattern CMS supports multi-site management, role-based access control, and advanced publishing workflows. Whether running a corporate website or a complex digital portal, Textpattern CMS delivers the flexibility and reliability needed to manage content at scale while maintaining optimal page load speeds.](https://www.flowconsent.com/en/services/cms/textpattern-cms) [CMS](https://www.flowconsent.com/en/services/cms/textpattern-cms) · ### [JACKLIST](https://www.flowconsent.com/en/services/cms/jacklist) [Jacklist is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Jacklist offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Jacklist empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/cms/jacklist) [Analytics](https://www.flowconsent.com/en/services/cms/jacklist) · ### [Invision Power Board](https://www.flowconsent.com/en/services/cms/invision-power-board) [Invision Power Board is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Invision Power Board integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Invision Power Board helps organizations maintain robust websites that meet user.](https://www.flowconsent.com/en/services/cms/invision-power-board) [CMS](https://www.flowconsent.com/en/services/cms/invision-power-board) · ### [MODX](https://www.flowconsent.com/en/services/cms/modx) [MODX is a development framework and toolkit providing developers with a structured foundation for building modern web applications. It offers reusable components, standardized architecture patterns, and comprehensive documentation. MODX accelerates development through code generation, testing utilities, and build optimization. With an active community and extensive ecosystem, MODX enables teams to build scalable, maintainable applications following industry best practices.](https://www.flowconsent.com/en/services/cms/modx) [CMS](https://www.flowconsent.com/en/services/cms/modx) · ### [Heights Platform](https://www.flowconsent.com/en/services/cms/heights-platform) [Heights Platform is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Heights Platform supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Heights Platform ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/heights-platform) [CMS](https://www.flowconsent.com/en/services/cms/heights-platform) · ### [Ycode](https://www.flowconsent.com/en/services/cms/ycode) [Ycode is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Ycode supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Ycode enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/cms/ycode) [CMS](https://www.flowconsent.com/en/services/cms/ycode) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)