Oracle Commerce Cloud
Oracle Commerce Cloud is Oracle's enterprise e commerce platform for building and running online stores. It sets functional cookies for the storefront and can add analytics and personalisation, and because it runs on Oracle infrastructure that can include the United States, it raises consent and data transfer obligations under the GDPR.
What does Oracle Commerce Cloud do?
What Oracle Commerce Cloud is
Oracle Commerce Cloud is an enterprise e commerce platform from Oracle that businesses use to build and operate online stores, manage catalogues, and personalise the shopping experience. It runs as a managed cloud service and processes customer, order, and behavioural data to power the storefront and its features.
What data and cookies Oracle Commerce Cloud collects
Oracle Commerce Cloud sets functional cookies for the session, cart, and checkout, and can add analytics and personalisation cookies that profile shoppers to tailor content and recommendations. It processes account, order, and behavioural data, which is personal data under the GDPR.
GDPR, ePrivacy and data transfers
The functional commerce cookies are exempt under Article 5(3) ePrivacy, while analytics, personalisation, and marketing cookies require consent. Because Oracle Commerce Cloud runs on Oracle infrastructure that can include the United States, personal data may be transferred to a third country, so you need a valid mechanism such as the EU US Data Privacy Framework or Standard Contractual Clauses.
Consent requirements
Load only the strictly necessary commerce cookies by default and gate analytics, personalisation, and marketing behind consent. Confirm which Oracle regions process your data, and make the transfer and the personalisation clear in your privacy and cookie notices.
Practical compliance steps
Sign a data processing agreement with Oracle, confirm the data location and transfer safeguard, and document the bases for the core platform and for any profiling. Block non essential cookies until consent, run a transfer impact assessment where data goes to the US, and set retention aligned with your obligations.
Oracle Commerce Cloud and the GDPR
Oracle Commerce Cloud is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Contract under Article 6(1)(b) for store functions and consent under Article 6(1)(a) plus Article 5(3) ePrivacy for analytics, personalisation, and marketing cookies
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, EU US Data Privacy Framework
Impact assessment (DPIA)
Oracle Commerce Cloud can profile shoppers for personalisation and may transfer data to the United States, so a DPIA is advisable where personalisation is extensive. Document the data flows, the transfer safeguard, and the profiling logic.
Sample text for your banner
We use Oracle Commerce Cloud to run our online store. Analytics, personalisation, and marketing cookies, and any transfer outside the EU, are only used if you accept them.
What Oracle Commerce Cloud sets and contacts
- Tracking method
- Commerce platform with functional cookies and optional analytics and personalisation
- Server location
- Oracle Cloud data centres, including the United States
- Data transferred outside the EU
- Oracle Commerce Cloud runs on Oracle Cloud infrastructure that can include data centres in the United States. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| oracle_atg_session | Functional | Session | Maintains the storefront and checkout session |
| oracle_cc_pref | Functional | 6 months | Remembers store preferences such as language and region |
| oracle_cc_personalize | Personalization | 1 year | Profiles the shopper to personalise content and recommendations |
| oracle_cc_analytics | Analytics | 1 year | Measures how visitors use the store |
Third-party domains contacted (2)
oracle.comoraclecloud.com
Frequently asked questions about Oracle Commerce Cloud
Can't find your question? Write to us, we answer fast.
What cookies does Oracle Commerce Cloud set?
It sets functional cookies for the session, cart, and checkout, plus optional personalisation and analytics cookies that profile shoppers and measure usage. Only the commerce cookies are strictly necessary.
Is consent required for Oracle Commerce Cloud?
The functional commerce cookies are exempt under Article 5(3) ePrivacy, but analytics, personalisation, and marketing cookies require prior consent and must stay blocked until the visitor accepts.
What is the legal basis for Oracle Commerce Cloud?
Running the store relies on performance of a contract under Article 6(1)(b), while analytics and personalisation cookies rely on consent under Article 6(1)(a) and Article 5(3) ePrivacy.
Does Oracle Commerce Cloud transfer data to the US?
It can. Oracle Commerce Cloud runs on Oracle infrastructure that may include United States data centres, so you need a transfer mechanism such as the EU US Data Privacy Framework or Standard Contractual Clauses and must disclose it.
Is a DPIA needed for Oracle Commerce Cloud?
A DPIA is advisable where the platform profiles shoppers for personalisation and where data is transferred to the US. Document the data flows, profiling logic, and transfer safeguards.
How do I implement Oracle Commerce Cloud compliantly?
Sign a data processing agreement, confirm the data region, block non essential cookies until consent, run a transfer impact assessment for US processing, and document the bases for commerce and profiling.
Are there alternatives to Oracle Commerce Cloud?
EU based commerce platforms can keep data within the EEA and reduce transfer exposure. Any platform with personalisation or analytics still requires consent for those cookies.
How do I update my cookie policy for Oracle Commerce Cloud?
List the functional, personalisation, and analytics cookies with their purpose and duration, state whether data is transferred to the US, and name the safeguard. Keep the entry current as you change features.
AlumnIQ
AlumnIQ is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AlumnIQ supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AlumnIQ ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
American Express
American Express is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. American Express supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, American Express ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Wizpay
Wizpay is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Wizpay supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Wizpay ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
MyRest
MyRest is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. MyRest enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, MyRest empowers marketing teams to achieve measurable growth.
Vanco Payment Solutions
Vanco Payment Solutions is a secure payment processing solution that enables businesses to accept online payments through multiple methods including credit cards, digital wallets, and bank transfers. It provides PCI-compliant transaction processing, fraud detection, and automated invoicing. Vanco Payment Solutions supports recurring billing, multi-currency payments, and seamless checkout experiences, helping merchants increase conversion rates while maintaining the highest standards of payment security.
OXID eShop
OXID eShop is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. OXID eShop integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, OXID eShop helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.