ITORIS

ITORIS is a web development company that has built Magento and Adobe Commerce extensions and web tools since 2007, including product configurators, grouped product options, form builders and dynamic product options. On its own website and within the tools it hosts, ITORIS relies on standard functional and analytics cookies, which brings it within the scope of GDPR and the ePrivacy Directive whenever those pages reach visitors in the European Union.

What ITORIS is

ITORIS Inc is a Canadian registered web development company with development operations in Eastern Europe. It is best known for its catalogue of Magento and Adobe Commerce extensions, alongside hosted web tools such as configurators and form builders. When you visit the ITORIS website to evaluate or buy an extension, or when you use one of its embedded tools, your browser interacts with ITORIS systems that may place cookies.

Data and cookies collected

ITORIS uses two broad categories of cookies. Functional cookies keep your session active, remember your preferences and support core features of the website and embedded tools, and these are strictly necessary for the service to work. Analytics cookies, typically through a provider such as Google Analytics, measure page views, traffic sources and how visitors move through the site. The data involved includes IP addresses, device and browser details and usage events, which can qualify as personal data under GDPR.

GDPR and ePrivacy implications

Under the ePrivacy Directive, storing or reading non essential cookies on a user device requires prior consent, and the GDPR sets the standard for that consent as freely given, specific, informed and unambiguous. Functional cookies that are strictly necessary do not need consent, but the analytics cookies that ITORIS uses do. Because the company processes personal data, it must also offer transparency, honour data subject rights and document its processing activities.

Consent requirements

Analytics and other non essential cookies must be blocked until the visitor actively agrees, so a consent banner that loads analytics only after an explicit opt in is the safest approach. The banner should let users accept, reject or choose categories with equal ease, and it should record when and how consent was given. Strictly necessary functional cookies can rely on legitimate interest or contractual necessity rather than consent, which keeps core features working even before a choice is made.

Data transfers

Because ITORIS is based in Canada and may use analytics services and content delivery networks operated from the United States, data from European visitors can leave the European Economic Area. Transfers to Canada are covered by the European Commission adequacy decision, while transfers to the United States rely on the EU US Data Privacy Framework or Standard Contractual Clauses. You should confirm which providers are in scope and ensure a valid transfer mechanism is in place for each one.

Practical compliance steps

Map every cookie set by the ITORIS website and any embedded tools, classify each as functional or analytics and block the analytics ones until consent is captured. Publish a clear cookie policy that names the providers and transfer mechanisms, connect a consent management platform that logs choices, and review the setup whenever you add new tools. These steps keep your use of ITORIS aligned with GDPR and the ePrivacy Directive at a consistently low risk level.