FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

OXID eShop Professional Edition

PreferencesOfficial website

How OXID eShop Professional Edition handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.

Block OXID eShop Professional Edition until consentScan my site
Overview

What does OXID eShop Professional Edition do?

What OXID eShop Professional Edition is

OXID eShop Professional Edition is a self hosted ecommerce platform. It is a German online shop system that merchants install on their own servers to run a product catalogue, basket and checkout. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.

Data and cookies OXID eShop Professional Edition collects

In a typical deployment OXID eShop Professional Edition processes shopping basket contents, order and account data, session identifiers and, where analytics modules are enabled, usage statistics. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.

GDPR and ePrivacy implications

Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so OXID eShop Professional Edition must have a valid legal basis, a clear retention period and transparent information for the data subject.

Consent requirements

Because OXID eShop Professional Edition sets cookies or identifiers that are not strictly necessary to deliver a service the visitor explicitly requested, prior, freely given, specific and informed consent is required before it loads. Scripts must stay blocked until the visitor accepts, and refusal must be as easy as acceptance.

International data transfers

OXID eShop Professional Edition reports hosting in Germany (European Union), which keeps the core processing inside the European Economic Area. You should still confirm the location of any subprocessors and content delivery nodes, because a single non European endpoint can still trigger a transfer.

Practical compliance steps

List OXID eShop Professional Edition in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.

Compliance

OXID eShop Professional Edition and the GDPR

OXID eShop Professional Edition is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract (Art. 6(1)(b) GDPR) for core functionality; consent (Art. 6(1)(a) GDPR) for optional cookies
Risk level
medium
Applicable regulations
GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)

Impact assessment (DPIA)

Assess the volume and sensitivity of data processed through OXID eShop Professional Edition, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where OXID eShop Professional Edition enables large scale monitoring or combines data from several sources.

Sample text for your banner

We use OXID eShop Professional Edition to power parts of this site. It may store cookies and identifiers on your device and process related data. With your consent we activate OXID eShop Professional Edition. You can withdraw your consent at any time from the cookie settings.
Cookies and trackers

What OXID eShop Professional Edition sets and contacts

Tracking method
First party cookies and server side sessions (self hosted)
Server location
Germany (European Union)

Cookies set (4)

NameTypeDurationPurpose
sidnecessarySessionMaintains the visitor shopping session and basket
oxidcookienotenecessary1 yearStores whether the cookie notice has been acknowledged
languagepreferencesSessionStores the selected shop language
_gaanalytics2 yearsSet only when a Google Analytics module is enabled

Third-party domains contacted (1)

  • oxid-esales.com
Questions

Frequently asked questions about OXID eShop Professional Edition

Can't find your question? Write to us, we answer fast.

What cookies does OXID eShop Professional Edition set?

OXID eShop Professional Edition typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.

Do I need consent to use OXID eShop Professional Edition?

Yes. OXID eShop Professional Edition sets cookies or identifiers that are not strictly necessary, so under Article 5(3) ePrivacy you must obtain prior consent before it loads.

What is the legal basis for OXID eShop Professional Edition?

The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).

Does OXID eShop Professional Edition transfer data to the United States or other third countries?

OXID eShop Professional Edition reports hosting in Germany (European Union), so by default data stays in the EEA. Verify subprocessors and CDN nodes, since one non European endpoint can still create a transfer to a third country.

Do I need a DPIA for OXID eShop Professional Edition?

A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where OXID eShop Professional Edition monitors behaviour at scale or combines data sources, run a DPIA before going live.

How do I implement OXID eShop Professional Edition in a compliant way?

Load OXID eShop Professional Edition only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.

Are there alternatives to OXID eShop Professional Edition?

Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.

How do I update my cookie policy for OXID eShop Professional Edition?

Add OXID eShop Professional Edition to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.

Same category

More services: E-commerce

See the whole category

Video Greet

Video Greet is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Video Greet supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Video Greet ensures smooth playback across all devices and network conditions for engaging video experiences.

Preferences

Magento

Magento is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Magento supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Magento remains a leading web development choice.

Preferences

Deutsche Post

Deutsche Post is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Deutsche Post integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Deutsche Post helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Anexis

Anexis is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Anexis provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Anexis helps deliver the right message to the right audience at the right time.

Marketing

Regiondo

Regiondo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Regiondo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Regiondo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

CoverManager

CoverManager is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. CoverManager provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, CoverManager helps deliver the right message to the right audience at the right time.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site