> How Contabo hosting handles personal data as a processor, where its servers are located, and how to keep it GDPR compliant for EU projects.
>
> Canonical: https://www.flowconsent.com/en/services/hosting/contabo

Hosting

# Contabo

Unclassified · [Official website](https://contabo.com)

Contabo is a German hosting provider offering virtual private servers, dedicated servers, and web hosting. As infrastructure it acts as a processor for the websites and applications it runs and does not add marketing cookies or tracking to them. Because its default data centres are in Germany, it is often a low risk choice for European projects, with the main considerations being the data processing agreement and the chosen server location.

[Block Contabo until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=hosting) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Hosting](https://www.flowconsent.com/en/services/hosting)

- Consent

  Unclassified

- Prior consent

  Not required

- Documented cookies

  2

- Third-party domains

  2

- Servers

  Germany, additional regions available

Overview

## What does Contabo do?

## What Contabo is

Contabo is a hosting provider based in Munich, Germany, known for affordable virtual private servers, dedicated servers, and web hosting. It is used to run websites, applications, and back end services, and it competes mainly on price and on the availability of European data centres.

## What data it processes and what cookies it sets

As infrastructure, Contabo processes the data your application sends through it, including visitor IP addresses in server logs. It does not add analytics or marketing cookies to the websites it hosts. Any cookies a visitor encounters come from the hosted application, although a strictly necessary technical cookie may be used at the server level.

## GDPR role and implications

Contabo acts as a processor under Article 28 of the GDPR, processing data on the instructions of the website owner, who remains the controller. A data processing agreement is required, and being a German company under EU law can simplify accountability compared with providers based outside the European Economic Area.

## Consent requirements

Hosting does not normally require consent. Serving the requested website and the strictly necessary cookies that support it are exempt under the ePrivacy Directive. Your consent obligations come from the analytics and marketing tools your application loads, not from Contabo.

## Data location and transfers

Contabo offers data centres in Germany and the European Union as well as locations in the United States and Asia. If you choose a German or EU location, data stays within the European Economic Area. A non EU location introduces a transfer that must be covered by Standard Contractual Clauses or another valid mechanism.

## Practical compliance steps

Sign the Contabo data processing agreement, choose a German or EU data centre for European users, and document Contabo in your records of processing. Configure backups, security, and log retention, and keep consent management focused on the analytics and marketing tools in your application.

Compliance

## Contabo and the GDPR

- Legal basis

  Contract and legitimate interest (processor, Art. 28 GDPR)

- Risk level

  low

- Applicable regulations

  GDPR

### Impact assessment (DPIA)

As a hosting processor, assess the chosen data centre location, the data processing agreement and any sub processors, the security measures, and whether a non EU location introduces transfers. A DPIA is rarely needed for hosting alone.

### Sample text for your banner

> Our website is hosted with Contabo. Hosting uses only strictly necessary technologies to deliver the site and does not track you for marketing.

Cookies and trackers

## What Contabo sets and contacts

- Tracking method

  Web hosting and server infrastructure, no client side tracking by default

- Server location

  Germany, additional regions available

- Cookieless mode available

  Yes

- Data transferred outside the EU

  Contabo is headquartered in Germany and its default data centres are in the European Union. It also offers locations outside the EEA, such as the United States and Asia, where transfers must rely on Standard Contractual Clauses. Choosing a German or EU location keeps data in the region.

### Cookies set (2)

| Name             | Type       | Duration | Purpose                                                                                         |
| ---------------- | ---------- | -------- | ----------------------------------------------------------------------------------------------- |
| contabo\_session | Functional | Session  | Strictly necessary session cookie used by the hosting and control panel to deliver the service. |
| csrftoken        | Functional | Session  | Strictly necessary security cookie that protects forms against cross site request forgery.      |

### Third-party domains contacted (2)

- `contabo.com`
- `contabo.net`

Questions

## Frequently asked questions about Contabo

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Does Contabo set cookies on my visitors?

Contabo does not add marketing or analytics cookies to the sites it hosts. Visitor facing cookies come from your application, while the server may use a strictly necessary technical cookie that does not require consent.

### Do I need consent for Contabo?

No, not for hosting. Delivering the requested website and its strictly necessary cookies are exempt from consent. Consent applies to the analytics and marketing tools your application loads.

### What is the legal basis for Contabo?

Contabo is a processor under Article 28 of the GDPR, acting on your instructions under a data processing agreement. You remain the controller for the personal data your website handles.

### Does Contabo keep data in the EU?

Its default data centres are in Germany, so a German or EU location keeps data within the European Economic Area. Contabo also offers United States and Asian locations, which would introduce transfers requiring Standard Contractual Clauses.

### Is a DPIA needed for Contabo?

A DPIA is rarely needed for hosting alone. If your application performs high risk processing, the assessment focuses on the application, with Contabo documented as the hosting processor.

### How do I use Contabo compliantly?

Sign the data processing agreement, choose a German or EU data centre, record Contabo in your processing records, and apply appropriate security and log retention. Handle consent at the application level.

### Are there alternatives to Contabo?

Alternatives for EU hosting include Hetzner, OVH, Scaleway, and IONOS. All keep data in the EU when an EU region is selected, which simplifies the transfer analysis.

### How do I reflect Contabo in my cookie policy?

List Contabo as a hosting processor in your privacy notice rather than the cookie banner, since it does not set non essential cookies. Note the data centre location and document your application cookies separately.

Same category

## More services: Hosting

[See the whole category](https://www.flowconsent.com/en/services/hosting)

### [Acquia Cloud Platform](https://www.flowconsent.com/en/services/hosting/acquia-cloud-platform)

[Acquia Cloud Platform is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Acquia Cloud Platform provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Acquia Cloud Platform ensures optimal performance at scale.](https://www.flowconsent.com/en/services/hosting/acquia-cloud-platform)

[Hosting](https://www.flowconsent.com/en/services/hosting/acquia-cloud-platform)

·

### [Koa](https://www.flowconsent.com/en/services/hosting/koa)

[Koa is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Koa integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Koa helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/hosting/koa)

[Hosting](https://www.flowconsent.com/en/services/hosting/koa)

·

### [mod\_dav](https://www.flowconsent.com/en/services/hosting/mod-dav)

[mod\_dav is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. mod\_dav supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, mod\_dav ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/hosting/mod-dav)

[Hosting](https://www.flowconsent.com/en/services/hosting/mod-dav)

·

### [lighttpd](https://www.flowconsent.com/en/services/hosting/lighttpd)

[lighttpd is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. lighttpd integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, lighttpd helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/hosting/lighttpd)

[Hosting](https://www.flowconsent.com/en/services/hosting/lighttpd)

·

### [Google Cloud Storage](https://www.flowconsent.com/en/services/hosting/google-cloud-storage)

[Google Cloud Storage is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Google Cloud Storage provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Google Cloud Storage ensures optimal performance at scale.](https://www.flowconsent.com/en/services/hosting/google-cloud-storage)

[Hosting](https://www.flowconsent.com/en/services/hosting/google-cloud-storage)

·

### [Kestrel](https://www.flowconsent.com/en/services/hosting/kestrel)

[Kestrel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Kestrel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Kestrel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/hosting/kestrel)

[Hosting](https://www.flowconsent.com/en/services/hosting/kestrel)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)