> Is Hermes GDPR compliant? Cookies it sets, consent and legal basis, data transfers and a practical compliance checklist for European websites.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/hermes

E-commerce

# Hermes

Preferences · [Official website](https://www.hermesworld.com)

How Hermes handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.

[Block Hermes until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  2

- Servers

  Germany (European Union)

Overview

## What does Hermes do?

## **What Hermes is**

Hermes is a delivery and parcel logistics service. It is a European parcel delivery service that handles shipping, drop off points and online parcel tracking. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.

## **Data and cookies Hermes collects**

In a typical deployment Hermes processes recipient and address details, tracking identifiers and, on tracking widgets, device and connection data. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.

## **GDPR and ePrivacy implications**

Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Hermes must have a valid legal basis, a clear retention period and transparent information for the data subject.

## **Consent requirements**

Because Hermes sets cookies or identifiers that are not strictly necessary to deliver a service the visitor explicitly requested, prior, freely given, specific and informed consent is required before it loads. Scripts must stay blocked until the visitor accepts, and refusal must be as easy as acceptance.

## **International data transfers**

Hermes reports hosting in Germany (European Union), which keeps the core processing inside the European Economic Area. You should still confirm the location of any subprocessors and content delivery nodes, because a single non European endpoint can still trigger a transfer.

## **Practical compliance steps**

List Hermes in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.

Compliance

## Hermes and the GDPR

Hermes is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Contract (Art. 6(1)(b) GDPR) for core functionality; consent (Art. 6(1)(a) GDPR) for optional cookies

- Risk level

  medium

- Applicable regulations

  GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)

### Impact assessment (DPIA)

Assess the volume and sensitivity of data processed through Hermes, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Hermes enables large scale monitoring or combines data from several sources.

### Sample text for your banner

> We use Hermes to power parts of this site. It may store cookies and identifiers on your device and process related data. With your consent we activate Hermes. You can withdraw your consent at any time from the cookie settings.

Cookies and trackers

## What Hermes sets and contacts

- Tracking method

  First party cookies and analytics scripts

- Server location

  Germany (European Union)

### Cookies set (3)

| Name            | Type        | Duration | Purpose                             |
| --------------- | ----------- | -------- | ----------------------------------- |
| hermes\_session | necessary   | Session  | Maintains the website session       |
| track\_pref     | preferences | 6 months | Stores tracking display preferences |
| \_ga            | analytics   | 2 years  | Audience measurement                |

### Third-party domains contacted (2)

- `hermesworld.com`
- `myhermes.de`

Questions

## Frequently asked questions about Hermes

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Hermes set?

Hermes typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.

### Do I need consent to use Hermes?

Yes. Hermes sets cookies or identifiers that are not strictly necessary, so under Article 5(3) ePrivacy you must obtain prior consent before it loads.

### What is the legal basis for Hermes?

The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).

### Does Hermes transfer data to the United States or other third countries?

Hermes reports hosting in Germany (European Union), so by default data stays in the EEA. Verify subprocessors and CDN nodes, since one non European endpoint can still create a transfer to a third country.

### Do I need a DPIA for Hermes?

A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Hermes monitors behaviour at scale or combines data sources, run a DPIA before going live.

### How do I implement Hermes in a compliant way?

Load Hermes only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.

### Are there alternatives to Hermes?

Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.

### How do I update my cookie policy for Hermes?

Add Hermes to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [Line-Up](https://www.flowconsent.com/en/services/ecommerce/line-up)

[Line-Up is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Line-Up enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Line-Up empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/ecommerce/line-up)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/line-up)

·

### [CStore](https://www.flowconsent.com/en/services/ecommerce/cstore)

[cStore is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. cStore supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, cStore ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/cstore)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/cstore)

·

### [Premmerce](https://www.flowconsent.com/en/services/ecommerce/premmerce)

[Premmerce is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Premmerce integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Premmerce helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/premmerce)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/premmerce)

·

### [Qumra](https://www.flowconsent.com/en/services/ecommerce/qumra)

[Qumra is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Qumra provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Qumra ensures optimal performance at scale.](https://www.flowconsent.com/en/services/ecommerce/qumra)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/qumra)

·

### [Next Total](https://www.flowconsent.com/en/services/ecommerce/next-total)

[Next Total is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Next Total integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Next Total helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/next-total)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/next-total)

·

### [JoomShopping](https://www.flowconsent.com/en/services/ecommerce/joomshopping)

[JoomShopping is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, JoomShopping delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.](https://www.flowconsent.com/en/services/ecommerce/joomshopping)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/joomshopping)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)