As part of our operations, we use Tax Invoicing (TI) Restricted (PII) SP-API role to programmatically access specific Amazon order reports to ensure proper shipping, invoicing and tax documentation for our clients (hereinafter referred to as “sellers”) in compliance with the requirements of the General Data Protection Regulation (DSGVO).
Order Report: GET_ORDER_REPORT_DATA_INVOICING
We process the following personal data:Shipping address
Billing address
Buyer information (name, phone number, email address)
This data is used solely to provide sellers with the necessary invoice and buyer details for their Amazon orders. The buyer’s name and phone number are only retrieved from this report if such information is missing in the Amazon Order API.
Order Report: GET_FLAT_FILE_ORDER_REPORT_DATA_INVOICING
We access this report to obtain the buyer’s company name when it is not available in the API.The data processing serves exclusively to correctly identify the full billing recipient for sellers.
Tax Report: SC_VAT_TAX_REPORT
This report contains the relevant tax information for an order.
The information is used to determine the total VAT rate of an order and thereby ensure proper tax handling of business transactions. This allows the seller to identify the applicable total VAT rate for business orders.
Legal Basis for Processing
Processing is carried out in accordance with Art. 6 (1)(b) DSGVO (performance of a contract) and Art. 6 (1)(f) DSGVO (legitimate interest) to ensure proper invoicing, tax calculation, and provision of relevant order data for sellers.
Storage and Security
All personal data is treated confidentially, processed solely for the purposes stated above, and not disclosed to unauthorized third parties. Data is stored only as long as necessary to meet accounting, statutory retention, or tax documentation obligations.
Your Rights
Data subjects have the right to access, rectification, erasure, restriction of processing, and data portability pursuant to Art. 15–20 DSGVO. They also have the right to object to processing under Art. 21 DSGVO.