Legal Notices, Cookie Banners & Product Safety

To change a legal text

1. Open CMS → CMS Manager.
2. Click “Edit” next to the page, such as “Terms and Conditions” or “Privacy Policy.”
3. Replace the text in each language tab.
4. Save and review the page in the store.

Why the required pages cannot be disabled

The Legal Notice, Privacy Policy, Terms and Conditions, Right of Withdrawal, Shipping and Payment, and almost all other pages that come with the store are system pages. Their status toggle is locked, and the “Store Content Page” toggle is missing. The store references these pages in many places: in the cookie banner, in emails, and during the checkout process.

For these system pages, the “CMS Page Name” is predefined; the store displays it as the page title, for example, in the cookie banner. You can edit the text, the SEO name, and the meta tag title. You can enable or disable pages that you create yourself. If a required page in an older store is set to “inactive,” please contact us.

Settings

Under Settings → Privacy → General:

• “Cookie Consent Tool: Mode” set to “ modal ” (default). With “ false,” the store does not display a banner and treats all services as if visitors had consented.
• “Cookie Consent Tool: Button Display”: “ equal ” (default) makes the “Accept” and “Reject” buttons look the same; “ performance ” highlights “Accept All Cookies.”
• “Privacy Consents for Tracking Scripts” on false (default). In this case, no category is preselected.

What the visitor sees

• A window with your notification text and the buttons “Accept All Cookies” and “Only Technically Necessary Cookies.”
• Under “Individual Cookie Settings,” one category per configured service, saved by clicking “Save Settings.”
• Your privacy policy and legal notice can be expanded in the window.

Chat Services

You can enable Userlike, Smartsupp, and crispAI under Settings → Interfaces → Chat Tools. Each service is assigned its own category in the cookie banner, named after the provider.

The chat window won’t load until the visitor has consented to this category, starting with the next page view. If the window is missing, check in a private browser window: consent, then reload the page. If the category is also missing from the banner, the service isn’t fully set up—for example, because an access key is missing.

Videos and Maps

The store initially displays embedded videos from YouTube and Vimeo and maps from Google Maps as placeholders with “Load video” or “Load map” and a note that data will be sent to the provider in the process. Consent applies to the current visit. YouTube videos load via youtube-nocookie.com.from 4.9.144

This applies to the map in the footer and legal notice, the Content Editor blocks, and any videos or maps you’ve inserted into text. Product videos in the image gallery already had this prompt previously.

What Is Recorded

• Every selection made in the cookie banner and in “My Data” is recorded as “Customer Information and Privacy Settings Updated,” with the specific selection for each service
• Registration, newsletter subscription and unsubscription, contact and product inquiries, callbacks, review emails, and the sharing of the email address with the shipping provider
• The deletion of a customer account by the customer or by you

Searching and Storing

The live search finds entries by email address or phone number. Entries from guests do not include an email address. The button next to the type shows the saved selection for each service. The IP address displays a truncated version of the list.

Each entry is assigned a deletion date ten years after creation. The store automatically deletes expired entries when logging into the backend.from 4.10

Enter Manufacturer Information

1. Open Products → Manufacturers and edit the manufacturer.
2. Fill in “Manufacturer’s Address”: Company name or first and last name, street, ZIP code, city, country, plus email address or website.
3. If the manufacturer is located outside the EU, the form will display the “Address of the Responsible Person” fields. Enter the responsible person in the EU there.
4. Assign the manufacturer to the items.

This is how it appears in the store

The product page displays the “About the Manufacturer…” tab with the heading “Contact Information per Art. 19 EU GPSR,” including the mailing address and email address; for manufacturers outside the EU, it also includes the responsible person.

The tab appears only if the name, street, ZIP code, city, and country are complete and Settings → Design → Product Detail View → Product Detail View: Automatic Manufacturer Description Yes/No is set to “ true ” (default). Select “Product Detail View: Automatically expand manufacturer description (yes/no)” to open it from the start.

What the Store Offers

• Sufficient contrast for text and user interface elements
• Keyboard navigation with a visible focus indicator
• Labeled form fields

What’s left for you to do

• Meaningful alternative text for images, for example in the “Image Title / Alt Text” field of the image blocks in the Content Editor
• Clear text and headings on your pages
• Checking your own templates and customizations
• An accessibility statement as a separate page in the CMS Manager; see the CMS Manager & Emails Guide

Delete Account

• By the customer: Settings → Checkout → Customer Details → Delete Customer Account. Using delete (default), the customer requests deletion in “My Data”; the account is immediately locked and will be deleted after clicking the link in the confirmation email. “ deactivate ” only deactivates the account, while “ false ” hides the function. This requires “Allow customers to change their address” to be enabled in the same group.
• By you: under Customers → Customers, select “Delete.” The store deletes the account, addresses, shopping carts, and wish lists; orders remain until the end of the retention period. The data protection management team records the process.

Information and Deadlines

• Information: There is no dedicated button for this. The data is available in the customer account, in the orders, and under Tools → Data Protection Management; if needed, you can export customer data using the Porter—see the Import & Export Guide.
• Orders: Settings → Data Protection → General → Retention Period for Orders (default 10 years). The shop automatically deletes older orders. Please consult your tax advisor to determine the correct retention period.
• Logs: “xoLog: Retention Period” in the same group (default: one month).

GDPR Audit Reports

These reports list what a website loads and stores when it’s accessed. Check each item in your own store, preferably in a private browser window before making a selection in the cookie banner:

• Every online store sets a session cookie for the shopping cart and login. The store also stores your cookie preferences in cookies.
• The default template does not load fonts from Google servers.
• With Google Consent Mode enabled by default, Google scripts load before the selection is made, with the status “rejected”—see the cookie banner.
• Videos, maps, and reCAPTCHA are loaded only after a click or interaction—see Chat, Videos, Maps.from 4.9.144
• The store does not check scripts that you have inserted yourself into text, blocks, or a custom template.

Card Payments, PCI-DSS, and ASV Scan

Your payment provider or bank determines whether you need an ASV scan or a self-assessment questionnaire (SAQ). With Stripe, your customers pay on Stripe’s payment page; with PayPal, they enter their card information into embedded PayPal fields. The older “Credit Card” module captures card data within the shop itself; do not use it—see the Payment Methods Guide.

If your provider requires a scan, hosting information, or a self-assessment questionnaire (SAQ), please contact us. For the hosting and operation of your store, you must enter into a data processing agreement with XONIC; if you do not have one, please request it from us.

Withdrawal button

The button that allows consumers to cancel a contract online, including exceptions for services, digital content, and personalized goods: Cancellation Button Guide.

EU Warranty Label

The harmonized notice regarding the statutory warranty and the EU-GARAN label, which displays the warranty period on the product: EU Warranty Label Guide.