Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Tritac Katana Commerce is an online commerce platform. This page explains its cookies, your GDPR and ePrivacy obligations, data transfers and how to deploy it with valid consent.
Tritac Katana Commerce is an online commerce service operated by Tritac. It powers the storefront, the basket and the checkout, so it processes the personal data your customers provide to place and manage an order.
Tritac Katana Commerce processes the data needed to run a shop, including name, address, contact details, order history and a session cookie that keeps the basket and the login active during a visit.
Running a shop mixes several lawful bases. Session and order data rest on the performance of the contract, while any analytics or marketing layered on top needs separate consent and a clear separation in the cookie banner.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Because Tritac Katana Commerce sets cookies or processes identifiers that are not strictly necessary, you must obtain prior, informed and freely given consent before it loads.
Tritac is a Belgian provider that runs Katana Commerce on infrastructure within the European Union, so store data is not transferred outside the European Economic Area by default. Even so, record the hosting location in your records of processing to demonstrate accountability under Article 30 GDPR.
Separate the strictly necessary cookies from the optional ones in Tritac Katana Commerce, gate analytics and marketing behind consent, sign a data processing agreement with Tritac, and publish a clear privacy notice covering orders, payment and delivery.
Websites using Tritac Katana Commerce must obtain user consent under GDPR regulations.
DPIA considerations
A screening assessment is advisable for Tritac Katana Commerce, and a full DPIA may become necessary if you combine it with other tracking tools or process data on a large scale.
Sample consent text
We use Tritac Katana Commerce to run the shop, your basket and the checkout. With your consent we store the cookies described in our cookie policy. You can accept, refuse or withdraw your choice at any time.
Third-party domains contacted
tritac.comkatanacommerce.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| KATANA_SESSID | Strictly necessary | Session | Maintains the shopping session and keeps the visitor signed in during checkout |
| katana_cart | Functional | 7 days | Remembers the contents of the shopping basket between visits |
| katana_consent | Strictly necessary | 6 months | Stores the cookie consent preferences selected by the shopper |
Tritac Katana Commerce uses cookies for user preferences — inform visitors with a consent banner.
Tritac Katana Commerce sets the following cookies: KATANA_SESSID, katana_cart, katana_consent. Each one is listed in the cookie table on this page with its type, duration and purpose, and you should mirror that list in your own cookie policy.
Yes. Tritac Katana Commerce relies on cookies or identifiers that are not strictly necessary, so under ePrivacy Article 5(3) you must collect prior, informed and freely given consent before it loads.
The lawful basis is Contract (Art. 6(1)(b) GDPR) for the session, consent (Art. 6(1)(a) GDPR) for analytics and marketing. Record this basis in your records of processing and state it in the privacy notice shown to visitors.
By default no transfer to a third country takes place. Tritac is a Belgian provider that runs Katana Commerce on infrastructure within the European Union, so store data is not transferred outside the European Economic Area by default. Reassess if you later enable an external integration.
A full DPIA is not always mandatory for Tritac Katana Commerce, but a documented screening assessment is wise, especially alongside other tracking tools.
Implement Tritac Katana Commerce through your consent layer: keep strictly necessary functions always on, gate optional ones behind consent, sign a data processing agreement with Tritac where it acts as a processor and keep your cookie policy in sync with the real cookies.
Alternatives include other commerce platforms, but every shop processes order data, so the contract basis and the need to gate optional tracking behind consent apply to all of them.
List every cookie Tritac Katana Commerce sets in your cookie policy with its name, purpose and retention, state the legal basis, name Tritac where relevant, and update the policy whenever the tool changes so refusals in your banner are always honoured.