> Is Firefish Software GDPR compliant? Cookies it sets, consent and legal basis, data transfers and a practical compliance checklist for European websites.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/firefish-software

E-commerce

# Firefish Software

Preferences · [Official website](https://www.firefishsoftware.com)

How Firefish Software handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.

[Block Firefish Software until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  1

- Servers

  the United Kingdom

Overview

## What does Firefish Software do?

## **What Firefish Software is**

Firefish Software is a recruitment and applicant tracking software. It is a recruitment customer relationship and applicant tracking software used by agencies to manage candidates and vacancies. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.

## **Data and cookies Firefish Software collects**

In a typical deployment Firefish Software processes candidate profiles and applications, contact data, session identifiers and recruiter analytics. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.

## **GDPR and ePrivacy implications**

Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Firefish Software must have a valid legal basis, a clear retention period and transparent information for the data subject.

## **Consent requirements**

Because Firefish Software sets cookies or identifiers that are not strictly necessary to deliver a service the visitor explicitly requested, prior, freely given, specific and informed consent is required before it loads. Scripts must stay blocked until the visitor accepts, and refusal must be as easy as acceptance.

## **International data transfers**

Firefish Software hosts data in the United Kingdom, a third country covered by a UK adequacy decision, and may use further subprocessors. Transfers of personal data outside the European Economic Area need an appropriate safeguard such as an adequacy decision or Standard Contractual Clauses, together with a transfer impact assessment where required.

## **Practical compliance steps**

List Firefish Software in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.

Compliance

## Firefish Software and the GDPR

Firefish Software is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR) together with Art. 5(3) ePrivacy Directive for non essential cookies

- Risk level

  medium

- Applicable regulations

  UK GDPR and PECR; GDPR; ePrivacy Directive 2002/58/EC

### Impact assessment (DPIA)

Assess the volume and sensitivity of data processed through Firefish Software, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Firefish Software enables large scale monitoring or combines data from several sources.

### Sample text for your banner

> We use Firefish Software to power parts of this site. It may store cookies and identifiers on your device and process related data. With your consent we activate Firefish Software. You can withdraw your consent at any time from the cookie settings.

Cookies and trackers

## What Firefish Software sets and contacts

- Tracking method

  Hosted platform cookies and analytics scripts

- Server location

  the United Kingdom

- Data transferred outside the EU

  Firefish Software hosts data in the United Kingdom, a third country covered by a UK adequacy decision, and may use further subprocessors.

### Cookies set (3)

| Name              | Type      | Duration | Purpose                         |
| ----------------- | --------- | -------- | ------------------------------- |
| firefish\_session | necessary | Session  | Maintains the logged in session |
| \_ga              | analytics | 2 years  | Audience measurement            |
| \_hjSessionUser   | analytics | 1 year   | Session replay and heatmaps     |

### Third-party domains contacted (1)

- `firefishsoftware.com`

Questions

## Frequently asked questions about Firefish Software

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Firefish Software set?

Firefish Software typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.

### Do I need consent to use Firefish Software?

Yes. Firefish Software sets cookies or identifiers that are not strictly necessary, so under Article 5(3) ePrivacy you must obtain prior consent before it loads.

### What is the legal basis for Firefish Software?

The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).

### Does Firefish Software transfer data to the United States or other third countries?

Firefish Software hosts data in the United Kingdom, a third country covered by a UK adequacy decision, and may use further subprocessors. Any such transfer needs Standard Contractual Clauses or an adequacy decision and a transfer impact assessment.

### Do I need a DPIA for Firefish Software?

A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Firefish Software monitors behaviour at scale or combines data sources, run a DPIA before going live.

### How do I implement Firefish Software in a compliant way?

Load Firefish Software only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.

### Are there alternatives to Firefish Software?

Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.

### How do I update my cookie policy for Firefish Software?

Add Firefish Software to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [AppSell](https://www.flowconsent.com/en/services/ecommerce/appsell)

[AppSell is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. AppSell integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, AppSell helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/appsell)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/appsell)

·

### [Sogecommerce](https://www.flowconsent.com/en/services/ecommerce/sogecommerce)

[Sogecommerce is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Sogecommerce integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Sogecommerce helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/sogecommerce)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/sogecommerce)

·

### [Homerr](https://www.flowconsent.com/en/services/ecommerce/homerr)

[Homerr is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Homerr supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Homerr ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/homerr)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/homerr)

·

### [Four](https://www.flowconsent.com/en/services/ecommerce/four)

[Four is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Four supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Four ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/four)

[E-commerce](https://www.flowconsent.com/en/services/ecommerce/four)

·

### [Bottle360](https://www.flowconsent.com/en/services/ecommerce/bottle360)

[Bottle360 is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Bottle360 supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Bottle360 ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/bottle360)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/bottle360)

·

### [Booking Factory](https://www.flowconsent.com/en/services/ecommerce/booking-factory)

[Booking Factory is an online scheduling and booking platform that enables businesses to automate appointment management and reduce no-shows. It provides a customizable booking interface, calendar synchronization, and automated reminders via email and SMS. Booking Factory supports multiple service types, staff scheduling, and payment collection. With timezone detection and availability management, Booking Factory simplifies scheduling across any industry and business size.](https://www.flowconsent.com/en/services/ecommerce/booking-factory)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/booking-factory)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)