> How PowerGap handles shop cookies, customer data and orders under GDPR, ePrivacy and TTDSG. EU hosting in Germany, legal basis, DPIA notes. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/powergap E-commerce # PowerGap Preferences · [Official website](https://powergap.de) German B2C and B2B e commerce platform from PowerGap GmbH that combines shop frontend, checkout, order management, multi channel fulfillment and payment processing for online retailers in the DACH region. [Block PowerGap until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Preferences - Prior consent Required - Documented cookies 5 - Third-party domains 4 - Servers Germany (PowerGap data centres, EU hosting) Overview ## What does PowerGap do? ## **What PowerGap is** PowerGap is a German e commerce platform that integrates shop frontend, product catalogue, checkout, order management and multi channel fulfillment. It is widely used by B2C and B2B merchants in the DACH region who need a turnkey shop and operations stack hosted in Germany. ## **Data and cookies** PowerGap sets first party session and cart cookies, processes customer accounts, billing and shipping addresses, order data, payment metadata and CRM information. Optional modules (recommendations, personalisation, analytics, marketing) can introduce additional cookies that fall under ePrivacy consent rules. ## **GDPR and ePrivacy implications** Strictly necessary shop cookies (session, cart, security) can be set without prior consent under Article 5(3) ePrivacy and § 25(2) TTDSG. Optional marketing, recommendation and analytics cookies are non essential and require an opt in compliant consent banner. ## **Consent requirements** Operate the shop without consent for transactional functions; gate any optional module behind a consent manager. The banner must list PowerGap and its optional modules, allow rejection as easily as acceptance and store proof of consent. ## **Data transfers and hosting** PowerGap is hosted in Germany. Connected payment providers, marketing platforms or analytics tools may transfer data outside the EU under their own legal basis. Audit each integrated subprocessor and align retention with PSD2 and AMLD requirements for payment data. ## **Practical compliance steps** Sign the DPA with PowerGap, list the platform and its subprocessors in your ROPA and privacy notice, configure a consent banner that gates optional modules, restrict admin access by role, define retention for orders and abandoned carts (commercial law typically requires 10 years for invoices), and run a DPIA when adding behavioural analytics or AI personalisation. Compliance ## PowerGap and the GDPR PowerGap is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Article 6(1)(b) GDPR (contract performance) for transactional shop cookies, order processing and customer accounts. Article 6(1)(a) (consent) for optional marketing, behavioural analytics or personalisation modules. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, German TTDSG, French CNIL guidance, Spanish LSSI, PSD2 and AMLD for payment data ### Impact assessment (DPIA) A DPIA is not normally required for a standard PowerGap shop. It becomes recommended when the platform is combined with behavioural analytics, AI personalisation, large scale profiling or sensitive product categories (medical devices, pharmacy, food supplements with health claims). ### Sample text for your banner > We use PowerGap (PowerGap GmbH, Germany, EU hosting) to operate this online shop. Strictly necessary cookies enable cart, checkout and account features. With your consent we also use recommendation, personalisation and analytics modules that can set additional cookies. Cookies and trackers ## What PowerGap sets and contacts - Tracking method First party session and cart cookies, server side order processing, optional analytics integration on the shop frontend - Server location Germany (PowerGap data centres, EU hosting) ### Cookies set (5) | Name | Type | Duration | Purpose | | ----------------- | ---- | -------- | ------------------------------------------------------------------------------------------------------- | | powergap\_session | http | Session | Identifies the user session, keeps the cart and login state on the merchant domain. | | powergap\_cart | http | 30 days | Persists the cart ID across visits. | | powergap\_csrf | http | Session | CSRF protection for forms and checkout actions. | | powergap\_locale | http | 1 year | Stores the language and country preference. | | powergap\_mkt | http | 90 days | Marketing cookie set when the optional newsletter / personalisation module is active; requires consent. | ### Third-party domains contacted (4) - `powergap.de` - `cdn.powergap.de` - `static.powergap.de` - `api.powergap.de` Questions ## Frequently asked questions about PowerGap Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does PowerGap set? PowerGap sets first party cookies on the merchant domain for session (powergap\_session), cart (powergap\_cart), CSRF (powergap\_csrf), language (powergap\_locale) and an optional marketing cookie (powergap\_mkt) used when the newsletter or personalisation module is active. ### Is user consent required? No for the strictly necessary shop functions. Yes for any optional module (marketing, personalisation, behavioural analytics) and for embedded third party services such as payment widgets or recommendation engines. ### What is the legal basis? Article 6(1)(b) GDPR (contract performance) for orders, accounts and payment. Article 6(1)(a) (consent) for marketing personalisation and behavioural analytics. Article 6(1)(c) for invoicing and tax retention. Article 6(1)(f) for fraud prevention and IT security. ### Does PowerGap transfer data outside the EU? The platform itself is hosted in Germany. Optional integrations (payment, marketing, analytics) may transfer data outside the EU and must be assessed individually with SCCs and the EU US Data Privacy Framework where applicable. ### Do I need a DPIA? Not for a standard PowerGap shop. A DPIA becomes recommended when you combine the suite with behavioural analytics, AI personalisation or sensitive product categories (medical devices, pharmacy, food supplements with health claims). ### How do I implement PowerGap compliantly? Sign the DPA with PowerGap, declare it in your ROPA, gate optional modules behind a consent banner, restrict admin access, set retention periods aligned with commercial and tax law, document subprocessors and run a DPIA before activating sensitive modules. ### What are the alternatives? Comparable platforms include Shopware, Shopify, commercetools, OXID eShop, Magento (Adobe Commerce), Spryker, JTL Shop and Plentysystems. Each has a different hosting, consent and DPA profile. ### How do I update the cookie policy? Run a cookie scan of your live shop, list each PowerGap cookie and its purpose, declare PowerGap and its subprocessors in the privacy notice, document the EU hosting, link to PowerGap's privacy policy and refresh whenever you enable a new module. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [WHMCS](https://www.flowconsent.com/en/services/ecommerce/whmcs) [WHMCS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. WHMCS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, WHMCS helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/whmcs) [E-commerce](https://www.flowconsent.com/en/services/ecommerce/whmcs) · ### [Darwin Pricing](https://www.flowconsent.com/en/services/ecommerce/darwin-pricing) [Darwin Pricing is a pricing optimization platform that helps businesses set competitive prices and manage pricing strategies across products and markets. It provides dynamic pricing algorithms, competitor monitoring, and price elasticity analysis. Darwin Pricing supports A/B price testing, markdown optimization, and promotional pricing management. With real-time market data and predictive analytics, Darwin Pricing helps businesses maximize revenue and margins through intelligent pricing.](https://www.flowconsent.com/en/services/ecommerce/darwin-pricing) [Preferences](https://www.flowconsent.com/en/services/ecommerce/darwin-pricing) · ### [HikaShop](https://www.flowconsent.com/en/services/ecommerce/hikashop) [HikaShop is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. HikaShop integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, HikaShop helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/hikashop) [Preferences](https://www.flowconsent.com/en/services/ecommerce/hikashop) · ### [futureshop](https://www.flowconsent.com/en/services/ecommerce/future-shop) [Future Shop offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Future Shop integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/future-shop) [Preferences](https://www.flowconsent.com/en/services/ecommerce/future-shop) · ### [GLAMI](https://www.flowconsent.com/en/services/ecommerce/glami) [Glami is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Glami provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Glami helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/glami) [Marketing](https://www.flowconsent.com/en/services/ecommerce/glami) · ### [Nody](https://www.flowconsent.com/en/services/ecommerce/nody) [Nody is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Nody integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Nody helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/nody) [Preferences](https://www.flowconsent.com/en/services/ecommerce/nody) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)