Skip to main content
The WEBSALE shop system stands out due to particularly high security and data protection standards, which are monitored by external data protection officers. The technical and organizational measures are complemented by protection against attacks through dedicated DDoS appliances and protection systems. This gives you a shop solution with globally outstanding security for the shop system and the data. This page introduces the building blocks of the security concept: the protection of customer data, access protection in the Online-Servicebereich, external audits, and the data protection officer. Finally, references to further security-related topics of this documentation are provided. The protection of customer-related data of a shop has the highest priority in the WEBSALE V8s shop system. That is why WEBSALE developed the “WEBSALE Data Security System™” (WS-DSS™) for the protection of data during transmission and storage. Since its introduction, it has been and continues to be continuously adapted to current conditions.
Security
Particularly sensitive customer and purchase data is handled specifically by the WS-DSS™ and therefore not only transmitted from the buyer to the server SSL-encrypted, as in most shops, but additionally stored encrypted in the shop databases and also transmitted encrypted from the shop server to the merchant. On the shop server system, this particularly sensitive data is stored with strong encryption. For credit card data, the card verification code (CVC) required to pay is not stored, for reasons of additional security. It must therefore be entered by the buyer on every purchase.

​
Protection of data in the Online-Servicebereich (OSB)

The Online-Servicebereich is protected with a user ID and password and only allows the respective user access to the services and data specifically enabled for them. The login process and access to shop data take place encrypted using SSL.

​
External security audits

As a company, WEBSALE AG, together with its organization and its complete shop server system, undergoes regular external security audits and certifications. One of the results of these audits is PCI certification. This certification is in turn a prerequisite for the permission granted by the credit card industry to process credit card data and payments. All shops operated with WEBSALE V8s that offer online credit card payment are PCI-certified. The shop system, including the shop software and shop operation, as well as WEBSALE AG, holds a general “s@fer-shopping” pre-certification from TÜV SÜD. To be allowed to display the TÜV “s@fer-shopping” quality seal in your own shop, additional certification of the individual shop or merchant is required. Thanks to the pre-certification of the shop system, this is cheaper and quicker to obtain than with conventional shop software or conventional servers. Other quality seals, such as EHI or Trusted Shops, are also optionally possible.

​
Data protection officer

The data protection officer of WEBSALE AG is provided by a specialized external company in order to increase and safeguard the particular quality of data protection. On request, the public procedure directory of WEBSALE AG can be made available to the shop operator. In this documentation, you can find further information on security-related topics:
  • Session management
  • Secure login procedure
  • Setting a customer-specific shop timeout
  • Keeping the session after an order