Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Excentos is a German guided selling and product advisor platform. Retailers embed its on-site widget so shoppers answer questions and receive tailored product recommendations. The widget loads third party JavaScript and sets analytics and recommendation cookies, which triggers GDPR and ePrivacy obligations.
Excentos is a German software vendor offering guided selling and product advisor technology. Retailers embed an interactive advisor on product and category pages where shoppers answer a few questions and receive tailored recommendations. The advisor runs as third party JavaScript inside the store and communicates with Excentos services to compute suggestions.
The advisor captures the answers a shopper gives, interaction events and outcomes, and may set analytics and recommendation cookies to remember sessions, measure performance and personalise suggestions. These can include first party session identifiers and measurement cookies. Where answers reveal preferences or needs, the resulting profile is personal data.
Answers, behavioural events and any derived profile are personal data under the GDPR, and Excentos typically acts as your processor under a data processing agreement. Under ePrivacy, the analytics and recommendation cookies are non essential, so storing or reading them requires prior consent. Only cookies that are strictly necessary to render the advisor the user asked for are exempt.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Because the widget sets analytics and recommendation cookies, you need freely given, specific, informed and unambiguous opt in consent before those cookies load. Configure the integration so the advisor either runs in a strictly necessary mode without profiling until consent is given, or loads fully only after the user accepts the relevant cookie category.
Excentos is based in Germany and hosts primarily within Germany and the EU, so cross border transfer risk is low. You should still confirm the hosting region in your contract, check whether any analytics sub processor sits outside the EEA, and ensure Standard Contractual Clauses and a transfer impact assessment cover any flow to a third country such as the United States.
Sign a data processing agreement with Excentos, gate the advisor cookies behind your consent management platform, document the answer data you collect and how long you keep it, and disclose Excentos in your privacy and cookie notices. Re test the consent flow after configuration changes and keep your cookie inventory current.
Websites using Excentos must obtain user consent under GDPR regulations.
DPIA considerations
Assess whether the advisor builds user profiles from answers and behaviour. If recommendation logic profiles individuals or processes special category hints, screen for a DPIA. Document data minimisation, retention of answer sets and the role split between you and Excentos.
Sample consent text
We use the Excentos product advisor, which sets analytics and recommendation cookies to personalise the suggestions you see. These non essential cookies load only after you accept.
Third-party domains contacted
www.excentos.comcdn.excentos.comapi.excentos.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| excentos_session | Strictly necessary | Session | Maintains the advisor session so answers and navigation work during a single visit |
| excentos_state | Functional | 30 days | Remembers the advisor state and prior answers so the user can resume the guided flow |
| excentos_reco | Functional | 6 months | Stores recommendation context to personalise the product suggestions shown |
| excentos_analytics | Analytics | Up to 13 months | Measures advisor usage and conversion, loaded only after consent |
Excentos uses cookies for user preferences — inform visitors with a consent banner.
The advisor can set first party session and measurement cookies along with recommendation cookies that remember answers and personalise suggestions. The exact set depends on your configuration, so audit your live pages and classify each cookie as strictly necessary or non essential.
Yes. The analytics and recommendation cookies are non essential, so under the ePrivacy rules they require prior opt in consent. Only cookies strictly needed to display the advisor the user requested can load without consent.
Strictly necessary delivery of the advisor can rest on legitimate interest where no profiling occurs, but analytics, personalisation and any profiling of shoppers require consent. Record the basis for each purpose in your records of processing.
Excentos is German and hosts mainly in Germany and the EU, so US transfers are not a core feature. Confirm the hosting region in your contract, check any analytics sub processor, and apply Standard Contractual Clauses with a transfer impact assessment if data leaves the EEA.
If the advisor only suggests products without building persistent profiles, a full DPIA is often unnecessary. If it profiles individuals at scale or infers sensitive needs, run a screening assessment and document the outcome.
Sign a data processing agreement, gate the analytics and recommendation cookies behind your consent platform, run the advisor in a no profiling mode until consent, minimise and time limit the answer data, and disclose Excentos in your notices.
Alternatives include other guided selling tools, a self hosted recommendation engine that keeps data in your own systems, or static filtering and faceted search that needs no profiling cookies. Each option has a different cookie and consent footprint.
List the Excentos cookies with their names, purposes, durations and first or third party status, state the legal basis, name Excentos as a processor, and explain how users withdraw consent. Review it after each configuration change.