> Is FinConnect GDPR compliant? Cookies it sets, consent and legal basis, data transfers and a practical compliance checklist for European websites. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/finconnect E-commerce # FinConnect Preferences · [Official website](https://finconnect.nl) How FinConnect handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way. [Block FinConnect until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Preferences - Prior consent Not required - Documented cookies 2 - Third-party domains 1 - Servers the European Union Overview ## What does FinConnect do? ## **What FinConnect is** FinConnect is a payment and checkout service. It is a financial connectivity service that links merchant checkouts with banking and payment providers. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors. ## **Data and cookies FinConnect collects** In a typical deployment FinConnect processes transaction and order amounts, fraud prevention signals, device identifiers and account data. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device. ## **GDPR and ePrivacy implications** Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so FinConnect must have a valid legal basis, a clear retention period and transparent information for the data subject. ## **Consent requirements** The strictly necessary functions of FinConnect can rely on contract or legitimate interest, but any analytics, marketing or personalisation cookies layered on top still require prior consent. Keep the essential and the optional layers clearly separated so the legal basis matches each purpose. ## **International data transfers** FinConnect reports hosting in the European Union, which keeps the core processing inside the European Economic Area. You should still confirm the location of any subprocessors and content delivery nodes, because a single non European endpoint can still trigger a transfer. ## **Practical compliance steps** List FinConnect in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made. Compliance ## FinConnect and the GDPR - Legal basis Contract (Art. 6(1)(b) GDPR) for core functionality; consent (Art. 6(1)(a) GDPR) for optional cookies - Risk level medium - Applicable regulations GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI) ### Impact assessment (DPIA) Assess the volume and sensitivity of data processed through FinConnect, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where FinConnect enables large scale monitoring or combines data from several sources. ### Sample text for your banner > This site uses FinConnect to deliver core functionality. Optional analytics and marketing features of FinConnect are activated only with your consent, which you can change at any time in the cookie settings. Cookies and trackers ## What FinConnect sets and contacts - Tracking method First party cookies for payment connectivity - Server location the European Union ### Cookies set (2) | Name | Type | Duration | Purpose | | ------------------- | --------- | -------- | ------------------------------------------------- | | finconnect\_session | necessary | Session | Maintains the secure connection session | | finconnect\_csrf | necessary | Session | Protects forms against cross site request forgery | ### Third-party domains contacted (1) - `finconnect.io` Questions ## Frequently asked questions about FinConnect Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does FinConnect set? FinConnect typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ. ### Do I need consent to use FinConnect? For its strictly necessary functions FinConnect can rely on contract or legitimate interest, but any analytics or marketing cookies it adds still require prior consent. ### What is the legal basis for FinConnect? The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f). ### Does FinConnect transfer data to the United States or other third countries? FinConnect reports hosting in the European Union, so by default data stays in the EEA. Verify subprocessors and CDN nodes, since one non European endpoint can still create a transfer to a third country. ### Do I need a DPIA for FinConnect? A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where FinConnect monitors behaviour at scale or combines data sources, run a DPIA before going live. ### How do I implement FinConnect in a compliant way? Load FinConnect only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor. ### Are there alternatives to FinConnect? Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply. ### How do I update my cookie policy for FinConnect? Add FinConnect to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [Klarna Virtual Shopping](https://www.flowconsent.com/en/services/ecommerce/klarna-virtual-shopping) [Klarna Virtual Shopping is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Klarna Virtual Shopping enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Klarna Virtual Shopping empowers marketing teams to.](https://www.flowconsent.com/en/services/ecommerce/klarna-virtual-shopping) [Marketing](https://www.flowconsent.com/en/services/ecommerce/klarna-virtual-shopping) · ### [Colissimo](https://www.flowconsent.com/en/services/ecommerce/colissimo) [Colissimo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Colissimo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Colissimo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/colissimo) [Preferences](https://www.flowconsent.com/en/services/ecommerce/colissimo) · ### [Optimizely Commerce](https://www.flowconsent.com/en/services/ecommerce/optimizely-commerce) [Optimizely Commerce is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, Optimizely Commerce delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.](https://www.flowconsent.com/en/services/ecommerce/optimizely-commerce) [Preferences](https://www.flowconsent.com/en/services/ecommerce/optimizely-commerce) · ### [Australia Post](https://www.flowconsent.com/en/services/ecommerce/australia-post) [Australia Post is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Australia Post supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Australia Post ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/australia-post) [Preferences](https://www.flowconsent.com/en/services/ecommerce/australia-post) · ### [Convious](https://www.flowconsent.com/en/services/ecommerce/convious) [Convious is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Convious provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Convious helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/convious) [Marketing](https://www.flowconsent.com/en/services/ecommerce/convious) · ### [PriceSpider](https://www.flowconsent.com/en/services/ecommerce/pricespider) [PriceSpider is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. PriceSpider supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, PriceSpider enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/ecommerce/pricespider) [Analytics](https://www.flowconsent.com/en/services/ecommerce/pricespider) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)