> How Websale handles cookies and personal data, whether consent is required under the GDPR and ePrivacy, data transfers and how to use Websale compliantly.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/websale

E-commerce

# Websale

Preferences · [Official website](https://websale.de)

Websale is an online commerce platform. This page explains its cookies, your GDPR and ePrivacy obligations, data transfers and how to deploy it with valid consent.

[Block Websale until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  2

- Servers

  Germany (WEBSALE AG)

Overview

## What does Websale do?

## **What Websale is and how it works**

Websale is an online commerce service operated by WEBSALE AG. It powers the storefront, the basket and the checkout, so it processes the personal data your customers provide to place and manage an order.

## **What data and cookies Websale processes**

Websale processes the data needed to run a shop, including name, address, contact details, order history and a session cookie that keeps the basket and the login active during a visit.

## **GDPR and ePrivacy implications**

Running a shop mixes several lawful bases. Session and order data rest on the performance of the contract, while any analytics or marketing layered on top needs separate consent and a clear separation in the cookie banner.

## **Do you need consent**

Because Websale sets cookies or processes identifiers that are not strictly necessary, you must obtain prior, informed and freely given consent before it loads.

## **International data transfers**

WEBSALE AG operates its shop platform from data centres in Germany, so store and order data remain within the European Union. Even so, record the hosting location in your records of processing to demonstrate accountability under Article 30 GDPR.

## **How to stay compliant with Websale**

Separate the strictly necessary cookies from the optional ones in Websale, gate analytics and marketing behind consent, sign a data processing agreement with WEBSALE AG, and publish a clear privacy notice covering orders, payment and delivery.

Compliance

## Websale and the GDPR

Websale is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Contract (Art. 6(1)(b) GDPR) for the session, consent (Art. 6(1)(a) GDPR) for analytics and marketing

- Risk level

  low

- Applicable regulations

  GDPR, ePrivacy Directive (Cookie Law)

### Impact assessment (DPIA)

Websale is limited in scope and low risk, so a full DPIA is usually not required, but you should document your screening decision to evidence accountability.

### Sample text for your banner

> We use Websale to run the shop, your basket and the checkout. With your consent we store the cookies described in our cookie policy. You can accept, refuse or withdraw your choice at any time.

Cookies and trackers

## What Websale sets and contacts

- Tracking method

  First party session cookies with optional analytics and marketing tags

- Server location

  Germany (WEBSALE AG)

### Cookies set (3)

| Name             | Type               | Duration  | Purpose                                                                  |
| ---------------- | ------------------ | --------- | ------------------------------------------------------------------------ |
| websale\_session | Strictly necessary | Session   | Maintains the secure shopping session and checkout state                 |
| websale\_basket  | Functional         | 30 days   | Stores the basket contents so an order can be continued on a later visit |
| websale\_consent | Strictly necessary | 12 months | Saves the cookie consent decision made by the shopper                    |

### Third-party domains contacted (2)

- `websale.de`
- `websale.net`

Questions

## Frequently asked questions about Websale

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Websale set?

Websale sets the following cookies: websale\_session, websale\_basket, websale\_consent. Each one is listed in the cookie table on this page with its type, duration and purpose, and you should mirror that list in your own cookie policy.

### Is consent required to use Websale?

Yes. Websale relies on cookies or identifiers that are not strictly necessary, so under ePrivacy Article 5(3) you must collect prior, informed and freely given consent before it loads.

### What is the legal basis for Websale?

The lawful basis is Contract (Art. 6(1)(b) GDPR) for the session, consent (Art. 6(1)(a) GDPR) for analytics and marketing. Record this basis in your records of processing and state it in the privacy notice shown to visitors.

### Does Websale transfer data to a third country?

By default no transfer to a third country takes place. WEBSALE AG operates its shop platform from data centres in Germany, so store and order data remain within the European Union. Reassess if you later enable an external integration.

### Do I need a DPIA for Websale?

A DPIA is usually not required for Websale on its own because the processing is limited and low risk, but document your reasoning.

### How do I implement Websale in a compliant way?

Implement Websale through your consent layer: keep strictly necessary functions always on, gate optional ones behind consent, sign a data processing agreement with WEBSALE AG where it acts as a processor and keep your cookie policy in sync with the real cookies.

### What are the alternatives to Websale?

Alternatives include other commerce platforms, but every shop processes order data, so the contract basis and the need to gate optional tracking behind consent apply to all of them.

### How do I update my cookie policy for Websale?

List every cookie Websale sets in your cookie policy with its name, purpose and retention, state the legal basis, name WEBSALE AG where relevant, and update the policy whenever the tool changes so refusals in your banner are always honoured.

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [Kamva](https://www.flowconsent.com/en/services/ecommerce/kamva)

[Kamva is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Kamva supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Kamva ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/kamva)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/kamva)

·

### [Mojo](https://www.flowconsent.com/en/services/ecommerce/mojo)

[Mojo offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Mojo integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/mojo)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/mojo)

·

### [OXID eShop Professional Edition](https://www.flowconsent.com/en/services/ecommerce/oxid-eshop-professional-edition)

[OXID eShop Professional Edition is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. OXID eShop Professional Edition supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, OXID eShop Professional Edition ensures your website delivers a smooth, uninterrupted experience.](https://www.flowconsent.com/en/services/ecommerce/oxid-eshop-professional-edition)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/oxid-eshop-professional-edition)

·

### [Envíopack](https://www.flowconsent.com/en/services/ecommerce/enviopack)

[Enviopack is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Enviopack integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Enviopack helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/enviopack)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/enviopack)

·

### [RandemRetail](https://www.flowconsent.com/en/services/ecommerce/randemretail)

[RandemRetail is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. RandemRetail integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, RandemRetail helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/randemretail)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/randemretail)

·

### [Conjured](https://www.flowconsent.com/en/services/ecommerce/conjured)

[Conjured is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Conjured integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Conjured helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/conjured)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/conjured)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)