E-commerce

Oracle Commerce Cloud

Oracle Commerce Cloud is Oracle's enterprise e commerce platform for building and running online stores. It sets functional cookies for the storefront and can add analytics and personalisation, and because it runs on Oracle infrastructure that can include the United States, it raises consent and data transfer obligations under the GDPR.

Overview

What does Oracle Commerce Cloud do?

What Oracle Commerce Cloud is

Oracle Commerce Cloud is an enterprise e commerce platform from Oracle that businesses use to build and operate online stores, manage catalogues, and personalise the shopping experience. It runs as a managed cloud service and processes customer, order, and behavioural data to power the storefront and its features.

What data and cookies Oracle Commerce Cloud collects

Oracle Commerce Cloud sets functional cookies for the session, cart, and checkout, and can add analytics and personalisation cookies that profile shoppers to tailor content and recommendations. It processes account, order, and behavioural data, which is personal data under the GDPR.

GDPR, ePrivacy and data transfers

The functional commerce cookies are exempt under Article 5(3) ePrivacy, while analytics, personalisation, and marketing cookies require consent. Because Oracle Commerce Cloud runs on Oracle infrastructure that can include the United States, personal data may be transferred to a third country, so you need a valid mechanism such as the EU US Data Privacy Framework or Standard Contractual Clauses.

Consent requirements

Load only the strictly necessary commerce cookies by default and gate analytics, personalisation, and marketing behind consent. Confirm which Oracle regions process your data, and make the transfer and the personalisation clear in your privacy and cookie notices.

Practical compliance steps

Sign a data processing agreement with Oracle, confirm the data location and transfer safeguard, and document the bases for the core platform and for any profiling. Block non essential cookies until consent, run a transfer impact assessment where data goes to the US, and set retention aligned with your obligations.

Compliance

Oracle Commerce Cloud and the GDPR

Oracle Commerce Cloud is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract under Article 6(1)(b) for store functions and consent under Article 6(1)(a) plus Article 5(3) ePrivacy for analytics, personalisation, and marketing cookies
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, EU US Data Privacy Framework

Impact assessment (DPIA)

Oracle Commerce Cloud can profile shoppers for personalisation and may transfer data to the United States, so a DPIA is advisable where personalisation is extensive. Document the data flows, the transfer safeguard, and the profiling logic.

Sample text for your banner

We use Oracle Commerce Cloud to run our online store. Analytics, personalisation, and marketing cookies, and any transfer outside the EU, are only used if you accept them.
Cookies and trackers

What Oracle Commerce Cloud sets and contacts

Tracking method
Commerce platform with functional cookies and optional analytics and personalisation
Server location
Oracle Cloud data centres, including the United States
Data transferred outside the EU
Oracle Commerce Cloud runs on Oracle Cloud infrastructure that can include data centres in the United States. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.

Cookies set (4)

NameTypeDurationPurpose
oracle_atg_sessionFunctionalSessionMaintains the storefront and checkout session
oracle_cc_prefFunctional6 monthsRemembers store preferences such as language and region
oracle_cc_personalizePersonalization1 yearProfiles the shopper to personalise content and recommendations
oracle_cc_analyticsAnalytics1 yearMeasures how visitors use the store

Third-party domains contacted (2)

  • oracle.com
  • oraclecloud.com
Questions

Frequently asked questions about Oracle Commerce Cloud

Can't find your question? Write to us, we answer fast.

What cookies does Oracle Commerce Cloud set?

It sets functional cookies for the session, cart, and checkout, plus optional personalisation and analytics cookies that profile shoppers and measure usage. Only the commerce cookies are strictly necessary.

Is consent required for Oracle Commerce Cloud?

The functional commerce cookies are exempt under Article 5(3) ePrivacy, but analytics, personalisation, and marketing cookies require prior consent and must stay blocked until the visitor accepts.

What is the legal basis for Oracle Commerce Cloud?

Running the store relies on performance of a contract under Article 6(1)(b), while analytics and personalisation cookies rely on consent under Article 6(1)(a) and Article 5(3) ePrivacy.

Does Oracle Commerce Cloud transfer data to the US?

It can. Oracle Commerce Cloud runs on Oracle infrastructure that may include United States data centres, so you need a transfer mechanism such as the EU US Data Privacy Framework or Standard Contractual Clauses and must disclose it.

Is a DPIA needed for Oracle Commerce Cloud?

A DPIA is advisable where the platform profiles shoppers for personalisation and where data is transferred to the US. Document the data flows, profiling logic, and transfer safeguards.

How do I implement Oracle Commerce Cloud compliantly?

Sign a data processing agreement, confirm the data region, block non essential cookies until consent, run a transfer impact assessment for US processing, and document the bases for commerce and profiling.

Are there alternatives to Oracle Commerce Cloud?

EU based commerce platforms can keep data within the EEA and reduce transfer exposure. Any platform with personalisation or analytics still requires consent for those cookies.

How do I update my cookie policy for Oracle Commerce Cloud?

List the functional, personalisation, and analytics cookies with their purpose and duration, state whether data is transferred to the US, and name the safeguard. Keep the entry current as you change features.

AlumnIQ

AlumnIQ is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AlumnIQ supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AlumnIQ ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

American Express

American Express is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. American Express supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, American Express ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Wizpay

Wizpay is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Wizpay supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Wizpay ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

MyRest

MyRest is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. MyRest enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, MyRest empowers marketing teams to achieve measurable growth.

Preferences

Vanco Payment Solutions

Vanco Payment Solutions is a secure payment processing solution that enables businesses to accept online payments through multiple methods including credit cards, digital wallets, and bank transfers. It provides PCI-compliant transaction processing, fraud detection, and automated invoicing. Vanco Payment Solutions supports recurring billing, multi-currency payments, and seamless checkout experiences, helping merchants increase conversion rates while maintaining the highest standards of payment security.

Preferences

OXID eShop

OXID eShop is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. OXID eShop integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, OXID eShop helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.