FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Mollie

PreferencesOfficial website

Mollie is a Dutch licensed Electronic Money Institution and one of the largest EU based payment processors, serving merchants in the Netherlands, Belgium, Germany, France, the UK and beyond. Its infrastructure is hosted entirely in the EU. The hosted checkout pages set only strictly necessary cookies for fraud prevention and session management.

Block Mollie until consentScan my site
Overview

What does Mollie do?

What is Mollie?

Mollie is a Dutch licensed Electronic Money Institution founded in 2004 in Amsterdam. It is one of the largest EU based payment service providers, supporting credit and debit cards, iDEAL, Bancontact, SEPA Direct Debit, Apple Pay, Google Pay, Klarna, PayPal and many local methods. Merchants integrate Mollie via the API or via plugins for Shopify, WooCommerce, Magento, PrestaShop and similar platforms.

Cookies and data collected

Mollie processes payment data submitted by the customer (card number, account details, billing address, IP), order metadata sent by the merchant and risk signals required for fraud prevention and SCA. On the Mollie hosted checkout, only strictly necessary first party cookies are set: a session cookie, a CSRF token and a small risk score cookie. No advertising or analytics cookies are deployed.

GDPR and ePrivacy implications

For the cookies set during the checkout, the strict necessity exemption of Art. 5(3) ePrivacy applies, so no consent banner is required to render the Mollie payment page. Payment data is processed under contract performance (Art. 6(1)(b) GDPR) and AML / PSD2 record keeping is processed under legal obligation (Art. 6(1)(c)). The merchant must still mention Mollie as a processor in its privacy policy.

Data transfers and hosting

Mollie hosts its payment infrastructure within the European Union. There is no transfer to the United States in the standard flow. Card scheme communication with Visa, Mastercard or international wallets may technically traverse non EEA networks, but this happens under Mollie's own controllership and is governed by the card scheme rules and PSD2.

Practical compliance steps

Sign the Mollie Data Processing Agreement available from your dashboard. Add Mollie to the list of processors in your privacy notice with EU hosting and PSD2 context. Configure SCA correctly so PSD2 obligations are met. Use the hosted checkout where possible to limit your PCI DSS scope. Define a retention period for order metadata aligned with your AML and tax obligations.

Compliance

Mollie and the GDPR

Legal basis
Contract performance (Art. 6(1)(b) GDPR) for processing payment data necessary to complete a transaction the customer has initiated. Legal obligation (Art. 6(1)(c)) for AML, PSD2 and tax record keeping. Cookies on the Mollie hosted checkout are strictly necessary and exempt from consent under Art. 5(3) ePrivacy Directive.
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive 2002/58/EC, PSD2 (Directive 2015/2366), AMLD5, Dutch Wft, EBA RTS for SCA

Impact assessment (DPIA)

A DPIA is generally not required for standard online payment use of Mollie. It may become relevant for very large transaction volumes combined with extensive fraud profiling or biometric SCA flows.

Sample text for your banner

Payments on this site are processed by Mollie (Mollie B.V., Netherlands), a licensed EU payment provider. Your payment data is handled by Mollie under PSD2 and the GDPR. See our privacy policy for details.
Cookies and trackers

What Mollie sets and contacts

Tracking method
server side payment processing with hosted checkout pages, no client side tracking by default; first party session cookies on the Mollie hosted checkout for fraud prevention
Server location
European Union (Mollie B.V., Amsterdam, Netherlands)
Cookieless mode available
Yes

Cookies set (3)

NameTypeDurationPurpose
mollie_sessionfirst_partySessionMaintains the customer session on the Mollie hosted checkout while a payment is in progress.
mollie_csrffirst_partySessionCSRF protection token used to validate the payment form submission.
_mol_riskfirst_party30 minutesStrictly necessary risk score cookie used by Mollie for fraud prevention during the transaction.

Third-party domains contacted (4)

  • www.mollie.com
  • api.mollie.com
  • pay.mollie.com
  • js.mollie.com
Questions

Frequently asked questions about Mollie

Can't find your question? Write to us, we answer fast.

What cookies does Mollie set?

Only strictly necessary first party cookies are set on the Mollie hosted checkout: a session cookie, a CSRF protection token and a small risk score cookie used for fraud prevention during the transaction. No advertising or analytics cookies are set by Mollie itself.

Do I need consent to use Mollie on my website?

No banner is required to display the Mollie hosted checkout because the cookies in question are strictly necessary under Art. 5(3) ePrivacy. Consent only becomes relevant if you embed additional Mollie components such as marketing pixels on your own pages, which Mollie does not require by default.

What is the legal basis for processing payment data through Mollie?

Contract performance (Art. 6(1)(b) GDPR) for processing payment data necessary to complete the transaction. Legal obligation (Art. 6(1)(c)) for AML, PSD2 and tax record keeping. Strictly necessary cookies on the Mollie checkout rely on Art. 5(3) ePrivacy.

Does Mollie transfer data to third countries?

For standard online payments, no. Mollie hosts its infrastructure within the EU and operates as a Dutch licensed Electronic Money Institution. Card scheme communication with Visa, Mastercard or international wallets may technically traverse non EEA networks, but this happens under Mollie's controllership and the card scheme rules.

Do I need a DPIA for Mollie?

Standard online payment use of Mollie does not normally require a DPIA. A DPIA may become relevant for very large transaction volumes combined with extensive fraud profiling or biometric SCA flows.

How do I implement Mollie compliantly?

Sign the Mollie DPA in your dashboard. Mention Mollie as a processor in your privacy notice with the EU hosting and PSD2 context. Use the hosted checkout to limit your PCI DSS scope. Configure SCA correctly. Define a retention period for order metadata aligned with your AML and tax obligations.

Are there alternatives to Mollie for EU based payments?

Other EU licensed payment providers include Adyen (Netherlands), Stripe (Ireland based EU entity), PayPlug (France), Worldline (France) and Klarna (Sweden). The privacy outcome is broadly similar provided the EU entity and EU hosting are used.

How should I update my cookie policy for Mollie?

For most setups no update to the cookie banner is needed because the Mollie hosted checkout sets only strictly necessary cookies under Art. 5(3) ePrivacy. Update your privacy notice to mention Mollie as a payment processor, the EU hosting and the legal basis. If you embed any optional Mollie marketing components, list those cookies in your declaration.

Same category

More services: E-commerce

See the whole category

Shoplo

Shoplo is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Shoplo integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Shoplo helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

InEvent

InEvent is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. InEvent enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, InEvent empowers marketing teams to achieve measurable growth.

Preferences

Partial.ly

Partial.ly is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Partial.ly supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Partial.ly ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Mokka

Mokka is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Mokka integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Mokka helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

WooCommerce Subscriptions

WooCommerce Subscriptions is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. WooCommerce Subscriptions offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, WooCommerce Subscriptions empowers organizations to optimize strategy and maximize return on investment.

Preferences

AstraFit

AstraFit is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AstraFit supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AstraFit ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site