Omiser Logo
Back to homepage

Cookie Policy

Last updated: April 2026

Cookie Policy

Omiser (hereinafter "we", "us" or "our") operates the website omiser.com and the associated SaaS services. This Cookie Policy explains which cookies and similar technologies we use on our website, for what purpose, on what legal basis the processing takes place, and how you can manage your settings.

1. What Are Cookies?

Cookies are small text files that are stored on your terminal device (computer, tablet, smartphone) by your web browser when you visit a website. They contain information that can be read on a subsequent visit to the website. Cookies can be set directly by the website being visited ("first-party cookies") or by third-party providers whose services are integrated into the website ("third-party cookies").

Cookies serve different functions: some are technically necessary to make the website functional (e.g., session management, security), while others enable the analysis of user behaviour or the display of personalised advertising.

In addition to cookies, other technologies such as local storage, session storage, and pixel tags (tracking pixels) may also be used. Further information can be found in Section 5.

2. Legal Basis

2.1 TDDDG Section 25 (Telecommunications Digital Services Data Protection Act)

Pursuant to Section 25(1) TDDDG, the storage of information on the end user's terminal device or access to information already stored on the terminal device is only permissible if the end user has consented on the basis of clear and comprehensive information. Consent is given in accordance with the requirements of Regulation (EU) 2016/679 (GDPR).

2.2 Exception: Technically Necessary Cookies (Section 25(2) TDDDG)

No consent is required if the storage of or access to information is strictly necessary for the provider of a telemedia service to provide a service expressly requested by the user (Section 25(2) No. 2 TDDDG). For these technically necessary cookies, we base the processing of the collected personal data on Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in providing a functional, secure, and user-friendly website.

2.3 Consent-Required Cookies (Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR)

For all other cookies — in particular functional cookies, analytics cookies, and marketing cookies — we obtain your explicit, voluntary, and informed consent via our cookie consent banner before they are set. The legal basis for the associated data processing is Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time with effect for the future (see Section 8).

3. Types of Cookies

3.1 Strictly Necessary Cookies

These cookies are essential for the proper operation of the website. Without them, basic functions such as page access, authentication, and security cannot be guaranteed. They are set without consent, as they fall under the exception of Section 25(2) No. 2 TDDDG.

| Name | Provider | Purpose | Type | Storage period | Legal basis | | --- | --- | --- | --- | --- | --- | | cookie_consent | Omiser | Storage of the cookie preferences selected by the user in the consent banner, so that the banner is not displayed again on subsequent visits | First-party, HTTP cookie | 12 months | Section 25(2) No. 2 TDDDG; Art. 6(1)(f) GDPR | | theme | Omiser (next-themes) | Storage of the theme preference (light/dark) to restore the preferred display on subsequent visits | First-party, local storage | Permanent | Section 25(2) No. 2 TDDDG; Art. 6(1)(f) GDPR |

3.2 Authentication Cookies

When logging in via Google OAuth, additional cookies may be set on your terminal device. These cookies are essential for the authentication process and are only set within the scope of the login process expressly initiated by you.

| Name | Provider | Purpose | Type | Storage period | Legal basis | | --- | --- | --- | --- | --- | --- | | Google OAuth cookies | Google Ireland Limited | Authentication via the Google account; transmission of authentication tokens to verify identity | Third-party, HTTP cookie | End of session | Section 25(2) No. 2 TDDDG; Art. 6(1)(f) GDPR |

3.3 Analytics Cookies

Analytics cookies enable us to statistically evaluate the use of our website and improve our offering. The data collected is processed in an anonymised or pseudonymised manner. These cookies are only set with your explicit consent.

| Name | Provider | Purpose | Type | Storage period | Legal basis | | --- | --- | --- | --- | --- | --- | | _ga | Google Ireland Limited (Google Analytics 4) | Distinguishing unique users by assigning a randomly generated number as a client identifier; creating anonymous usage statistics (page views, session duration, bounce rates) | Third-party, HTTP cookie | 14 months | Section 25(1) TDDDG; Art. 6(1)(a) GDPR (consent) | | _ga_* | Google Ireland Limited (Google Analytics 4) | Storage of session state for Google Analytics 4; linking page views within a session | Third-party, HTTP cookie | 14 months | Section 25(1) TDDDG; Art. 6(1)(a) GDPR (consent) |

Note: We use Google Analytics 4 with IP anonymisation enabled. Transfer of personal data to the USA takes place on the basis of the EU-US Data Privacy Framework (adequacy decision of the EU Commission) and additionally on the basis of Standard Contractual Clauses (Art. 46(2)(c) GDPR).

3.4 Marketing Cookies (Marketing / Advertising)

Marketing cookies are used to display relevant advertisements to visitors on third-party platforms and to measure the effectiveness of advertising campaigns (conversion tracking). These cookies are only set with your explicit consent.

The following marketing services are currently supported. The respective cookies are only set if the service is actively configured AND you have given your consent:

| Name | Provider | Purpose | Type | Storage period | Legal basis | | --- | --- | --- | --- | --- | --- | | _gcl_* | Google Ireland Limited (Google Ads) | Conversion tracking for Google advertisements | Third-party, HTTP cookie | 90 days | Section 25(1) TDDDG; Art. 6(1)(a) GDPR (consent) | | _fbp, _fbc | Meta Platforms Ireland Limited (Meta Pixel) | Conversion tracking for Facebook and Instagram advertising | Third-party, HTTP cookie | 90 days | Section 25(1) TDDDG; Art. 6(1)(a) GDPR (consent) | | _ttp | TikTok Technology Limited (TikTok Pixel) | Conversion tracking for TikTok advertisements | Third-party, HTTP cookie | 13 months | Section 25(1) TDDDG; Art. 6(1)(a) GDPR (consent) | | _twq | X Corp. (Twitter/X Pixel) | Conversion tracking for Twitter/X advertisements | Third-party, HTTP cookie | 14 days | Section 25(1) TDDDG; Art. 6(1)(a) GDPR (consent) |

4. Third-Party Cookies

We integrate services from third-party providers on our website that may set their own cookies. Below is an overview of the integrated third-party providers with information on the respective purpose of use and a link to the provider's privacy policy:

| Provider | Location | Service / Purpose | Privacy policy | | --- | --- | --- | --- | | Google Ireland Limited | Gordon House, Barrow Street, Dublin 4, Ireland | Google Analytics 4 (analytics), Google Ads (marketing), Google OAuth (authentication) | https://policies.google.com/privacy | | Vercel Inc. | 440 N Baxter St, Los Angeles, CA 90012, USA | Hosting and content delivery | https://vercel.com/legal/privacy-policy |

Where the integration of third-party services results in the transfer of personal data to third countries (particularly the USA), this is done on the basis of:

  • the EU-US Data Privacy Framework (adequacy decision of the EU Commission pursuant to Art. 45 GDPR), where the respective provider is certified, and/or
  • Standard Contractual Clauses of the EU Commission pursuant to Art. 46(2)(c) GDPR.

5. Other Tracking Technologies

In addition to cookies, the following technologies may also be used on our website:

5.1 Local Storage

Local storage is a web browser technology that allows data to be stored permanently in the browser. Unlike cookies, data stored in local storage is not automatically transmitted to the server. We use local storage for, among other things, storing user interface settings and cached data to improve loading times. The same legal bases apply to local storage as for cookies (Section 25 TDDDG, Art. 6 GDPR).

5.2 Session Storage

Session storage works similarly to local storage, but the stored data is automatically deleted when the browser tab is closed. We use session storage for temporary data during your active session, such as form drafts or intermediate results within a multi-step process.

5.3 Pixel Tags (Tracking Pixels / Web Beacons)

Pixel tags are invisible graphics (usually 1x1 pixel in size) that can be embedded in web pages or emails. They make it possible to determine whether and when a page was accessed or an email was opened. The analytics and marketing services mentioned above (Google Analytics, Meta Pixel, TikTok Pixel, Twitter/X Pixel) use pixel tags in addition to cookies. These are only activated if you have consented to the respective cookie category. The same legal bases and consent requirements apply to pixel tags as for the associated cookies.

6. Managing and Deleting Cookies

You can configure your browser so that:

  • You are informed about the setting of cookies,
  • Cookies are only permitted on a case-by-case basis,
  • The acceptance of cookies is excluded for specific cases or in general,
  • Automatic deletion of cookies when closing the browser is activated.

Please note: Disabling or deleting technically necessary cookies may result in certain functions of our website being unavailable or only available to a limited extent.

Browser-Specific Instructions

Below you will find links to the instructions of the most common browsers for managing and deleting cookies:

For other browsers, please consult the help function or documentation of your browser.

7. Changing Cookie Settings

You can change your cookie settings at any time by clicking on the "Cookie Settings" link in the footer of our website. There you can call up the cookie consent banner again and adjust your preferences for each cookie category individually or revoke previously granted consent.

8. Consent and Revocation

8.1 Consent

When you visit our website for the first time, a cookie consent banner is displayed. Through this banner, you can:

  • Accept all cookies (including functional, analytics, and marketing cookies),
  • Accept only technically necessary cookies (all consent-required cookies will not be set), or
  • Make individual settings and decide for each cookie category individually.

Your selection is stored in the cookie_consent cookie and taken into account on future visits. Consent-required cookies are only set after you have given your explicit consent — not before and not without it.

8.2 Revocation of Consent

You have the right to revoke consent once given at any time with effect for the future (Art. 7(3) GDPR). The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its revocation.

You can exercise your revocation in the following ways:

  1. Cookie settings in the footer: Click on the "Cookie Settings" link in the footer of our website and deactivate the desired cookie categories.
  2. Browser settings: Delete the relevant cookies manually via your browser settings (see Section 6).
  3. Contact: Send us an email to the address stated in our legal notice with the subject "Revocation of cookie consent".

After revocation, the affected cookies will no longer be set. You can delete cookies that have already been set via your browser settings.

9. Changes to this Cookie Policy

We reserve the right to amend this Cookie Policy at any time, in particular:

  • upon the introduction of new services or features that require cookies,
  • upon changes to the third-party services used,
  • upon changes to legal or regulatory requirements (e.g., changes to the TDDDG, GDPR, or new guidelines from data protection authorities).

The current version of this Cookie Policy can always be found on this page. We will additionally inform you of material changes by means of a corresponding notice on our website. In the case of changes that require renewed consent, the cookie consent banner will be displayed again.

10. Further Information

For further information on the processing of your personal data, please refer to our Privacy Policy. Information about the controller and contact details can be found in our Legal Notice.

If you have any questions about this Cookie Policy or the processing of your data, you can contact us at any time using the contact details provided in the legal notice.

Last updated: April 2026