Carussel
How Carussel handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.
What does Carussel do?
What Carussel is
Carussel is a embeddable content widget. It is an embeddable carousel and slider widget used to showcase images and content blocks on a web page. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.
Data and cookies Carussel collects
In a typical deployment Carussel processes display preferences, session identifiers and basic interaction events with the embedded content. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.
GDPR and ePrivacy implications
Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Carussel must have a valid legal basis, a clear retention period and transparent information for the data subject.
Consent requirements
The strictly necessary functions of Carussel can rely on contract or legitimate interest, but any analytics, marketing or personalisation cookies layered on top still require prior consent. Keep the essential and the optional layers clearly separated so the legal basis matches each purpose.
International data transfers
Carussel reports hosting in the European Union, which keeps the core processing inside the European Economic Area. You should still confirm the location of any subprocessors and content delivery nodes, because a single non European endpoint can still trigger a transfer.
Practical compliance steps
List Carussel in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.
Carussel and the GDPR
- Legal basis
- Contract (Art. 6(1)(b) GDPR) for core functionality; consent (Art. 6(1)(a) GDPR) for optional cookies
- Risk level
- low
- Applicable regulations
- GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)
Impact assessment (DPIA)
Assess the volume and sensitivity of data processed through Carussel, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Carussel enables large scale monitoring or combines data from several sources.
Sample text for your banner
This site uses Carussel to deliver core functionality. Optional analytics and marketing features of Carussel are activated only with your consent, which you can change at any time in the cookie settings.
What Carussel sets and contacts
- Tracking method
- First party preference cookies
- Server location
- the European Union
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| carussel_pref | preferences | 6 months | Stores the slide display preference |
| carussel_ses | necessary | Session | Maintains widget state during the visit |
Third-party domains contacted (1)
carussel.io
Frequently asked questions about Carussel
Can't find your question? Write to us, we answer fast.
What cookies does Carussel set?
Carussel typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.
Do I need consent to use Carussel?
For its strictly necessary functions Carussel can rely on contract or legitimate interest, but any analytics or marketing cookies it adds still require prior consent.
What is the legal basis for Carussel?
The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).
Does Carussel transfer data to the United States or other third countries?
Carussel reports hosting in the European Union, so by default data stays in the EEA. Verify subprocessors and CDN nodes, since one non European endpoint can still create a transfer to a third country.
Do I need a DPIA for Carussel?
A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Carussel monitors behaviour at scale or combines data sources, run a DPIA before going live.
How do I implement Carussel in a compliant way?
Load Carussel only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.
Are there alternatives to Carussel?
Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.
How do I update my cookie policy for Carussel?
Add Carussel to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.
BookVisit
BookVisit is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. BookVisit integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, BookVisit helps organizations maintain robust websites that meet user expectations and technical requirements.
Google Pay
Google Pay is a secure payment processing solution that enables businesses to accept online payments through multiple methods including credit cards, digital wallets, and bank transfers. It provides PCI-compliant transaction processing, fraud detection, and automated invoicing. Google Pay supports recurring billing, multi-currency payments, and seamless checkout experiences, helping merchants increase conversion rates while maintaining the highest standards of payment security and compliance.
Brownie
Brownie is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Brownie integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Brownie helps organizations maintain robust websites that meet user expectations and technical requirements.
AppSell
AppSell is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. AppSell integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, AppSell helps organizations maintain robust websites that meet user expectations and technical requirements.
Radial Ecommerce
Radial Ecommerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Radial Ecommerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.
DCKAP Commerce
DCKAP Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. DCKAP Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.