Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Qiyeku is an enterprise website builder and SaaS site platform operated from China, using first party cookies for session and site functionality with analytics possible.
Qiyeku is an enterprise website builder and SaaS site platform that helps organisations create and run business websites. It is operated from qiyeku.com with infrastructure located in China, and it provides the hosting, templates, and site management tools needed to publish and maintain a corporate web presence. Companies in the European market should understand its data handling before adopting it because of where the platform is hosted.
Qiyeku sets first party cookies that support the user session and the general functionality of the site it powers. Depending on configuration, analytics may also be present to measure how visitors use the website. The session and functional cookies keep the site working, while any analytics cookies serve measurement and fall outside the strictly necessary category.
Strictly necessary cookies that keep the site functioning can be set without prior consent, but any non essential cookies, including analytics, require informed consent from the visitor. Given the platform hosting in China, the consent flow should also make visitors aware that their data may be transferred to a third country. A clear banner should let visitors accept or decline non essential cookies before they load.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
This is the central compliance point for Qiyeku. Because the servers are in China, a country without an EU adequacy decision, personal data leaving the European Economic Area must rely on Article 46 safeguards such as standard contractual clauses. Organisations must also carry out a transfer impact assessment and add any supplementary measures needed, because the destination country lacks an adequacy finding that would otherwise simplify the transfer.
To use Qiyeku compliantly, put standard contractual clauses in place, document a transfer impact assessment, and apply supplementary measures where the assessment identifies risks. Add a consent banner that blocks non essential cookies until the visitor agrees, and publish a privacy notice that clearly states the transfer to China and the safeguards used. Review the arrangement periodically, since the medium to high risk profile warrants ongoing attention.
Qiyeku is an enterprise website builder whose main compliance challenge is its hosting in China, a third country without an EU adequacy decision. Necessary cookies keep the site working, while non essential cookies need consent, and cross border transfers require Article 46 safeguards plus a transfer impact assessment. The risk profile is medium to high, so organisations should approach adoption with clear documentation, valid transfer mechanisms, and an accurate privacy notice.
Websites using Qiyeku must obtain user consent under GDPR regulations.
DPIA considerations
Because Qiyeku hosts data on servers in China, a country without an EU adequacy decision, a data protection impact assessment is strongly advisable for organisations subject to the GDPR. The assessment should focus on the international transfer, evaluating the legal environment in China, the safeguards in place, and any supplementary measures needed to protect the data. Operators should also document the categories of personal data processed through the site and the lawful basis for each transfer.
Sample consent text
This website is built with Qiyeku, whose servers are located in China. We use necessary cookies for site functionality, and with your consent we may use analytics cookies. By accepting, you also agree that your data may be transferred to China under appropriate safeguards. You can decline non essential cookies at any time.
Third-party domains contacted
qiyeku.comqiyeku.cnwww.qiyeku.cnhm.baidu.comcdn.qiyeku.comstatic.qiyeku.cnCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| qyk_session | Functional | Session | Maintains the login session for account holders managing their listing or website |
| qyk_csrf | Functional | Session | Security token protecting forms against cross site request forgery |
| Hm_lvt | Analytics | 6 months | Baidu analytics cookie recording the time of a visit to measure traffic |
| Hm_lpvt | Analytics | Session | Baidu analytics cookie recording the time of the last page view in a session |
| qyk_lang | Functional | 1 year | Stores the language or region preference of the visitor |
| qyk_consent | Functional | 1 year | Remembers cookie and transfer consent choices made by the visitor |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
Qiyeku typically sets session and security cookies needed to log in and operate, plus Baidu analytics cookies such as Hm_lvt and Hm_lpvt to measure traffic. It may also store language and consent preferences. The analytics cookies are non essential and the data they generate is processed in China.
Yes, consent is required before the analytics and any marketing cookies load, and the banner should keep them off until the visitor agrees. Because data is processed in China, you should also inform users about the transfer and in many cases obtain explicit consent for it. Strictly necessary session cookies can be used without consent.
Necessary session cookies rely on contract or legitimate interest, while analytics and marketing cookies rely on consent under ePrivacy. The transfer of personal data to China needs its own basis, usually Standard Contractual Clauses, or explicit consent for the transfer in specific cases. Document each basis clearly.
Yes, Qiyeku is operated and hosted in China, so personal and business data is transferred to and processed in China. China has no EU adequacy decision, so the transfer must rely on Standard Contractual Clauses supported by a transfer impact assessment. Residual risk from state access may remain even with safeguards.
Yes, a DPIA is recommended for EEA users because of the transfer to China and the public exposure of business and contact data in listings. The assessment should cover data categories, retention, analytics, the feasibility of safeguards and the risk of government access. It should also consider whether the transfer can be justified at all.
Run a DPIA and a transfer impact assessment, sign Standard Contractual Clauses and add supplementary technical and organizational measures. Gate analytics behind consent, disclose the China transfer prominently and minimize the personal data you publish in listings. Review the arrangement regularly and consider an EEA hosted alternative if the risk is too high.
EEA or other adequacy covered website builders and directories avoid the China transfer problem entirely and are often easier to justify. Self hosted options inside the EEA give you full control over location and trackers. The right choice depends on your audience, your risk tolerance and whether you specifically need a presence in the Chinese market.
Audit the cookies your Qiyeku site actually sets, including Baidu analytics cookies, and reflect them in your cookie policy and banner. Update the policy whenever Qiyeku changes its analytics or features, and keep the description of the China transfer current. Make sure durations and purposes match what is really happening.