FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

commercetools

PreferencesOfficial website

commercetools is a German headless and composable commerce platform built on Google Cloud Platform, with EU regions and a strong fit for European retailers, B2B players and marketplaces.

Block commercetools until consentScan my site
Overview

What does commercetools do?

What commercetools is

commercetools is a German headless and composable commerce platform operated by commercetools GmbH in Munich. It exposes a REST and GraphQL API for product, cart, order and customer management, and runs on Google Cloud Platform with regions in Frankfurt and Belgium. It is widely used by European retailers, B2B brands and marketplaces.

Data and cookies set

As a headless backend, commercetools does not set browser cookies by itself. The storefront built on top (Next.js, Nuxt, Hybris frontend) sets session and cart cookies. Marketing, recommendation and personalisation features add consent based cookies, depending on the integration.

GDPR and ePrivacy implications

Order, customer and cart data are processed under Article 6(1)(b) GDPR. Personalisation, behavioural recommendations and marketing analytics require consent under Article 6(1)(a) GDPR and Article 5(3) ePrivacy.

Consent requirements

You do not need consent for the headless commerce APIs that support order processing, but every script attached to the storefront for analytics, advertising or personalisation must be loaded only after a valid consent recorded through a CMP.

Data transfers outside the EEA

commercetools provides EU regions on GCP. The vendor signs a GDPR aligned data processing agreement with SCCs for any global support function. Watch sub processors and Google Cloud disclosures, and run a transfer impact assessment if global support is engaged for production.

Practical compliance steps

Pin projects to an EU region, restrict API tokens with scoped roles, separate order data from marketing analytics, integrate a CMP on the storefront, document GCP sub processors and run a DPIA for personalisation modules.

Compliance

commercetools and the GDPR

commercetools is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Performance of a contract (Article 6(1)(b) GDPR) for order processing, consent (Article 6(1)(a) GDPR and Article 5(3) ePrivacy) for marketing and personalisation features added on top
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive 2002/58/EC, German TDDDG, French CNIL guidelines, Spanish LSSI, PCI DSS

Impact assessment (DPIA)

A DPIA is generally limited for commercetools itself because hosting stays in the EU. It can be triggered by personalisation, recommendation or marketing modules and by integrations with third party CRMs, especially when they involve US processors.

Sample text for your banner

Our commerce backend is powered by commercetools, operated by commercetools GmbH (Germany), and hosted on Google Cloud Platform in the European Union. Marketing and personalisation features are activated only with your prior consent.
Cookies and trackers

What commercetools sets and contacts

Tracking method
api_integration
Server location
European Union (Google Cloud Platform, Frankfurt or Belgium)
Cookieless mode available
Yes

Cookies set (2)

NameTypeDurationPurpose
ctsessfirst_partySessionMaintains the API session between the storefront and the commercetools backend (strictly necessary).
ct-anonymous-cartfirst_party30 daysStores the anonymous cart identifier for guest checkout (strictly necessary).

Third-party domains contacted (3)

  • api.europe-west1.gcp.commercetools.com
  • auth.europe-west1.gcp.commercetools.com
  • mc.europe-west1.gcp.commercetools.com
Questions

Frequently asked questions about commercetools

Can't find your question? Write to us, we answer fast.

Which cookies does commercetools set?

commercetools is headless and does not set browser cookies itself. The storefront on top sets session and cart cookies which are strictly necessary, while integrations such as analytics or recommendations may add consent based cookies.

Do I need consent?

Not for order processing, which relies on Article 6(1)(b) GDPR. Yes for marketing, recommendation and analytics features that store or read information on the device.

What is the legal basis?

Contract performance for order data. Consent for marketing cookies, behavioural recommendations and analytics.

Are any data transferred to the United States?

In EU configuration no. The platform runs on GCP Frankfurt or Belgium. Global support engagements should be analysed for any US access.

Is a DPIA needed?

Generally limited for the core platform. Run a DPIA for personalisation, recommendation, marketing automation and any integration with US sub processors.

How do I implement compliance correctly?

Pin projects to an EU region, scope API tokens, integrate a CMP on the storefront, gate analytics and personalisation behind consent, and document sub processors.

What are the alternatives?

Spryker, SAP Commerce Cloud, Salesforce Commerce Cloud, Adobe Commerce (Magento), Shopify Plus and BigCommerce. EU based options reduce transfer complexity.

How do I update the cookie policy?

Inventory cookies from the storefront and every integration, separate strictly necessary from consent based, version the policy in your CMS and update it on every release.

Same category

More services: E-commerce

See the whole category

Tebex

Tebex is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tebex supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tebex ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

RandemRetail

RandemRetail is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. RandemRetail integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, RandemRetail helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

AppSell

AppSell is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. AppSell integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, AppSell helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Feefo

Feefo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Feefo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Feefo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Intiaro

Intiaro is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Intiaro supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Intiaro ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Kibo Commerce

Kibo Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Kibo Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site