Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
eKomi is an EU based customer reviews and ratings provider from Berlin whose review widget and trust seal display seller and product reviews and may set cookies.
eKomi is a customer reviews and ratings provider operated by eKomi Ltd in Berlin, Germany. It collects verified seller and product reviews and displays them through a review widget and trust seal that brands embed on their websites and checkout pages.
The eKomi widget and trust seal load third party assets from eKomi servers and can set session and widget cookies to keep settings and exchange data with the eKomi system. The service collects review submissions, which may include a reviewer name, an order reference and free text feedback, and displays aggregate ratings and individual reviews.
Because the widget loads third party content and may set non essential cookies, Article 5(3) of the ePrivacy Directive and German TTDSG rules require consent before it loads. Collecting and publishing reviews is processing of personal data under the GDPR, so reviewers must be informed and their rights respected.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent under Article 6(1)(a) is the safer basis where the widget sets non essential cookies or loads third party content. Displaying aggregate ratings and inviting existing customers to review can sometimes rest on legitimate interest under Article 6(1)(f), but you should document the balancing test and be precise about each purpose.
eKomi is based in Berlin and processes data mainly within the European Union, so a typical setup involves no transfer to a third country. Verify the current sub processor list, since some integrations or analytics could introduce transfers that would need Standard Contractual Clauses or another safeguard.
Load the eKomi widget only after consent where it sets non essential cookies, list any eKomi cookies in your policy, sign a data processing agreement, document the legal basis for review collection and display, and handle reviewer access and erasure requests.
Websites using eKomi must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is often not required for displaying aggregate ratings, but assess the widget where it loads third party assets and sets cookies, and where it collects review submissions containing personal data such as names, order references and free text. Review the sub processor list, the legal basis for each purpose and retention of review content and reviewer identifiers.
Sample consent text
We use the eKomi reviews widget and trust seal to show customer ratings and collect feedback. This loads content from eKomi and may set cookies. Do you consent to loading the eKomi widget?
Third-party domains contacted
ekomi.deekomi.comwidget.ekomi.comsw-assets.ekomi.comapi.ekomi.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| ekomi_session | Third-party | Session | Maintains the eKomi widget session so the review widget and trust seal load correctly and settings persist during a visit. |
| ekomi_widget | Third-party | Persistent | Stores eKomi widget settings and state to exchange data with the eKomi system and remember widget preferences across page loads. |
| PHPSESSID | Third-party | Session | Standard server session cookie used by eKomi to keep a visitor session when interacting with the widget or review submission flow. |
eKomi places tracking cookies for advertising — comply with GDPR using FlowConsent.
The eKomi review widget and trust seal can set session and widget cookies as small text files that keep settings and exchange data with the eKomi system through your browser. The exact cookies depend on the integration, so check the live widget and document them in your cookie policy.
Consent is recommended where the widget loads third party content and sets non essential cookies, since the ePrivacy Directive and German TTDSG require it before such cookies are stored. Displaying aggregate ratings alone can sometimes rest on legitimate interest, but be precise per purpose.
Consent under Article 6(1)(a) covers the widget cookies and third party loading. Collecting and displaying reviews and showing aggregate ratings can rest on legitimate interest under Article 6(1)(f) where documented, while inviting customers to review often relies on consent or the customer relationship.
eKomi is based in Berlin and processes data mainly within the European Union, so a standard setup involves no third country transfer. Verify the current sub processor list, since some integrations could introduce transfers that would need Standard Contractual Clauses or another safeguard.
A full DPIA is often not required for displaying aggregate ratings, but it is wise to assess the processing where the widget sets cookies and where reviews contain personal data such as names and free text. Document the legal basis, retention and sub processors as part of your records.
Load the eKomi widget only after consent where it sets non essential cookies, list any eKomi cookies in your policy, sign a data processing agreement, document the legal basis for review collection and display, inform reviewers and handle their access and erasure requests.
Alternatives include other review providers such as Trusted Shops, Trustpilot, Bazaarvoice and Yotpo. Prefer EU based providers like Trusted Shops and eKomi itself to keep processing within the EEA, and compare cookie behavior, sub processors and transfer safeguards.
List any eKomi session and widget cookies with their purposes and durations, explain that they support the reviews widget and trust seal, note that processing is mainly within the EU and link to eKomi privacy information. Check the live widget regularly and keep the list current.