Contabo
Contabo is a German hosting provider offering virtual private servers, dedicated servers, and web hosting. As infrastructure it acts as a processor for the websites and applications it runs and does not add marketing cookies or tracking to them. Because its default data centres are in Germany, it is often a low risk choice for European projects, with the main considerations being the data processing agreement and the chosen server location.
What does Contabo do?
What Contabo is
Contabo is a hosting provider based in Munich, Germany, known for affordable virtual private servers, dedicated servers, and web hosting. It is used to run websites, applications, and back end services, and it competes mainly on price and on the availability of European data centres.
What data it processes and what cookies it sets
As infrastructure, Contabo processes the data your application sends through it, including visitor IP addresses in server logs. It does not add analytics or marketing cookies to the websites it hosts. Any cookies a visitor encounters come from the hosted application, although a strictly necessary technical cookie may be used at the server level.
GDPR role and implications
Contabo acts as a processor under Article 28 of the GDPR, processing data on the instructions of the website owner, who remains the controller. A data processing agreement is required, and being a German company under EU law can simplify accountability compared with providers based outside the European Economic Area.
Consent requirements
Hosting does not normally require consent. Serving the requested website and the strictly necessary cookies that support it are exempt under the ePrivacy Directive. Your consent obligations come from the analytics and marketing tools your application loads, not from Contabo.
Data location and transfers
Contabo offers data centres in Germany and the European Union as well as locations in the United States and Asia. If you choose a German or EU location, data stays within the European Economic Area. A non EU location introduces a transfer that must be covered by Standard Contractual Clauses or another valid mechanism.
Practical compliance steps
Sign the Contabo data processing agreement, choose a German or EU data centre for European users, and document Contabo in your records of processing. Configure backups, security, and log retention, and keep consent management focused on the analytics and marketing tools in your application.
Contabo and the GDPR
- Legal basis
- Contract and legitimate interest (processor, Art. 28 GDPR)
- Risk level
- low
- Applicable regulations
- GDPR
Impact assessment (DPIA)
As a hosting processor, assess the chosen data centre location, the data processing agreement and any sub processors, the security measures, and whether a non EU location introduces transfers. A DPIA is rarely needed for hosting alone.
Sample text for your banner
Our website is hosted with Contabo. Hosting uses only strictly necessary technologies to deliver the site and does not track you for marketing.
What Contabo sets and contacts
- Tracking method
- Web hosting and server infrastructure, no client side tracking by default
- Server location
- Germany, additional regions available
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Contabo is headquartered in Germany and its default data centres are in the European Union. It also offers locations outside the EEA, such as the United States and Asia, where transfers must rely on Standard Contractual Clauses. Choosing a German or EU location keeps data in the region.
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| contabo_session | Functional | Session | Strictly necessary session cookie used by the hosting and control panel to deliver the service. |
| csrftoken | Functional | Session | Strictly necessary security cookie that protects forms against cross site request forgery. |
Third-party domains contacted (2)
contabo.comcontabo.net
Frequently asked questions about Contabo
Can't find your question? Write to us, we answer fast.
Does Contabo set cookies on my visitors?
Contabo does not add marketing or analytics cookies to the sites it hosts. Visitor facing cookies come from your application, while the server may use a strictly necessary technical cookie that does not require consent.
Do I need consent for Contabo?
No, not for hosting. Delivering the requested website and its strictly necessary cookies are exempt from consent. Consent applies to the analytics and marketing tools your application loads.
What is the legal basis for Contabo?
Contabo is a processor under Article 28 of the GDPR, acting on your instructions under a data processing agreement. You remain the controller for the personal data your website handles.
Does Contabo keep data in the EU?
Its default data centres are in Germany, so a German or EU location keeps data within the European Economic Area. Contabo also offers United States and Asian locations, which would introduce transfers requiring Standard Contractual Clauses.
Is a DPIA needed for Contabo?
A DPIA is rarely needed for hosting alone. If your application performs high risk processing, the assessment focuses on the application, with Contabo documented as the hosting processor.
How do I use Contabo compliantly?
Sign the data processing agreement, choose a German or EU data centre, record Contabo in your processing records, and apply appropriate security and log retention. Handle consent at the application level.
Are there alternatives to Contabo?
Alternatives for EU hosting include Hetzner, OVH, Scaleway, and IONOS. All keep data in the EU when an EU region is selected, which simplifies the transfer analysis.
How do I reflect Contabo in my cookie policy?
List Contabo as a hosting processor in your privacy notice rather than the cookie banner, since it does not set non essential cookies. Note the data centre location and document your application cookies separately.
Acquia Cloud Platform
Acquia Cloud Platform is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Acquia Cloud Platform provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Acquia Cloud Platform ensures optimal performance at scale.
Koa
Koa is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Koa integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Koa helps organizations maintain robust websites that meet user expectations and technical requirements.
mod_dav
mod_dav is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. mod_dav supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, mod_dav ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
lighttpd
lighttpd is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. lighttpd integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, lighttpd helps organizations maintain robust websites that meet user expectations and technical requirements.
Google Cloud Storage
Google Cloud Storage is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Google Cloud Storage provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Google Cloud Storage ensures optimal performance at scale.
Kestrel
Kestrel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Kestrel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Kestrel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.