Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Konfidency is a Brazilian product reviews and ratings platform that collects and displays customer reviews on online stores. It loads a widget that can set cookies and processes reviewer data in Brazil, so it carries consent and international data transfer obligations under the GDPR.
Konfidency is a customer reviews and ratings platform, developed in Brazil, that online stores use to collect, moderate, and display product and store reviews. It embeds a widget that shows ratings and review content and invites customers to leave their own feedback, often after a purchase.
Konfidency sets functional cookies to display the widget and may add analytics cookies that measure engagement with reviews. It processes the personal data of reviewers, such as name, email, order reference, and the review text, and may collect device data, all of which are personal data under the GDPR.
Displaying existing reviews can rest on legitimate interest, while analytics or personalisation cookies require consent under Article 5(3) ePrivacy. Collecting and publishing a customer review is processing that needs transparency and a basis. Because Konfidency operates from Brazil, a country without an EU adequacy decision, the data is transferred to a third country and needs Standard Contractual Clauses.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Load only the functional review widget by default and gate analytics cookies behind consent. When inviting customers to submit a review, tell them their input will be published and processed in Brazil, and obtain consent where the publication or any profiling goes beyond what they reasonably expect.
Sign a data processing agreement, put Standard Contractual Clauses in place for the Brazil transfer, and complete a transfer impact assessment. Disclose the reviews processing and transfer in your privacy notice, set retention for review data, and give reviewers a way to edit or delete their content.
Websites using Konfidency Reviews must obtain user consent under GDPR regulations.
DPIA considerations
Konfidency processes reviewer personal data and transfers it to Brazil, so a transfer impact assessment is required and a DPIA is advisable where reviews are collected at scale or linked to detailed customer profiles. Document the transfer safeguards and retention.
Sample consent text
We use Konfidency to collect and display customer reviews. Analytics cookies and the processing of your review in Brazil are only used if you accept them or choose to submit a review.
Third-party domains contacted
konfidency.com.brcdn.konfidency.com.brCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| kf_session | Functional | Session | Displays the reviews widget during a visit |
| kf_visitor | Functional | 6 months | Recognises a visitor to associate a submitted review |
| kf_analytics | Analytics | 1 year | Measures engagement with reviews and ratings |
Konfidency Reviews uses cookies for user preferences — inform visitors with a consent banner.
Konfidency sets a functional cookie to display the reviews widget and recognise a visitor, and may add an analytics cookie that measures engagement with reviews. The analytics cookie is non essential and needs consent.
Displaying reviews can rest on legitimate interest, but analytics and personalisation cookies require prior consent. Collecting a review also requires clear information, including that data is processed in Brazil.
Showing existing reviews can rely on legitimate interest under Article 6(1)(f), while analytics cookies rely on consent under Article 6(1)(a) and Article 5(3) ePrivacy. The Brazil transfer needs its own safeguard.
Yes. Konfidency is operated from Brazil, which has no EU adequacy decision, so reviewer data is transferred to a third country. You need Standard Contractual Clauses, a transfer impact assessment, and clear disclosure.
A transfer impact assessment is required for the Brazil transfer, and a DPIA is advisable where reviews are collected at scale or linked to detailed customer profiles. Document the safeguards and retention.
Block analytics cookies until consent, inform reviewers that their input is published and processed in Brazil, sign a data processing agreement with the SCCs, complete a transfer impact assessment, and let reviewers edit or delete content.
EU based reviews platforms keep reviewer data within the EEA and avoid the international transfer. Any reviews tool that adds analytics cookies still requires consent for those purposes.
List the Konfidency functional and analytics cookies with their purpose and duration, state that reviewer data is transferred to Brazil, and name the safeguard. Explain how reviewers can manage their content.