{"id":18266,"date":"2026-02-03T11:58:36","date_gmt":"2026-02-03T10:58:36","guid":{"rendered":"https:\/\/www.ideal-group.de\/?page_id=18266"},"modified":"2026-02-03T11:58:57","modified_gmt":"2026-02-03T10:58:57","slug":"privacy-policy-amazon","status":"publish","type":"page","link":"https:\/\/www.ideal-group.de\/en\/privacy-policy-amazon\/","title":{"rendered":"Privacy Policy Amazon"},"content":{"rendered":"<div id='intro'  class='avia-section av-1xkfj-23ffaa4a5ce8b1f7e6b82ae518fc0621 main_color avia-section-large avia-no-border-styling  avia-builder-el-0  avia-builder-el-no-sibling  __section--container--full avia-bg-style-scroll container_wrap fullsize'  ><div class='container av-section-cont-open' ><main  role=\"main\" itemprop=\"mainContentOfPage\"  class='template-page content  av-content-full alpha units'><div class='post-entry post-entry-type-page post-entry-18266'><div class='entry-content-wrapper clearfix'>\n<div  class='flex_column av-5dmn-aa2da736838c5328f5f170cfcd79dee4 av_one_fifth  avia-builder-el-1  el_before_av_four_fifth  avia-builder-el-first  first flex_column_div  '     ><\/div><div  class='flex_column av-t8t7-b2010e03ca6d98650a33025a7f323585 av_four_fifth  avia-builder-el-2  el_after_av_one_fifth  avia-builder-el-last  flex_column_div  '     ><section  class='av_textblock_section av-lwrxh3l3-12514f5ce3220abbef0e300ca96a641b '   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\" ><div class='avia_textblock'  itemprop=\"text\" ><h1>Privacy Policy \u2013 Amazon SP-API &amp; Personally Identifiable Information (PII)<\/h1>\n<p><i>Last updated: <\/i>3. February 2026<\/p>\n<h2>1. Scope and Role<\/h2>\n<p>This Privacy Policy describes how IDEAL ALPHA GmbH, Kaiser-Friedrich-Str. 90, 10585 Berlin (&#8220;we&#8221;, &#8220;us&#8221;) processes personal data in connection with the use of the Amazon Services API (SP-API).<\/p>\n<p>We act exclusively as a <strong>data processor<\/strong> on behalf of Amazon sellers and vendors (&#8220;Authorized Users&#8221;). The respective seller remains the <strong>data controller<\/strong> at all times. We process personal data solely based on the documented instructions and authorization provided by the seller.<\/p>\n<h2>2. Source of Personal Data<\/h2>\n<p>Personal data is obtained exclusively via the <strong>Amazon Services API (SP-API)<\/strong> after explicit authorization by the respective Amazon seller. We do not collect Amazon customer data from any other sources.<\/p>\n<h2>3. Categories of Personal Data<\/h2>\n<p>Depending on the authorized services, we may process the following categories of personal data:<\/p>\n<ul>\n<li>Buyer name<\/li>\n<li>Shipping address<\/li>\n<li>Contact details (email address, phone number, if provided by Amazon)<\/li>\n<li>Order-related information required for fulfillment or legal documentation<\/li>\n<\/ul>\n<p>We do not process payment data, marketing data, or profiling information.<\/p>\n<h2>4. Purpose Limitation<\/h2>\n<p>Amazon customer personal data is processed <strong>solely<\/strong> for the following permitted purposes:<\/p>\n<ul>\n<li>Merchant-fulfilled order processing and shipping<\/li>\n<li>Tax calculation and tax reporting<\/li>\n<li>Invoice generation and legally required documentation<\/li>\n<li>Customer support activities explicitly authorized by the seller<\/li>\n<\/ul>\n<p>Personal data is <strong>never<\/strong> used for marketing, advertising, analytics, profiling, aggregation across sellers, AI training, or any other non-permitted purposes.<\/p>\n<h2>5. Data Minimization<\/h2>\n<p>We collect and process only the <strong>minimum personal data strictly necessary<\/strong> to perform the permitted purposes defined above.<\/p>\n<h2>6. Data Retention<\/h2>\n<p>Personal data is retained for <strong>no longer than 30 days after order delivery<\/strong>, unless a longer retention period is required by applicable law (e.g. tax or regulatory obligations).<\/p>\n<p>Where longer retention is legally required, the data is securely archived, access-restricted, and retained only for the mandatory statutory period.<\/p>\n<h2>7. Secure Deletion<\/h2>\n<p>Upon expiration of the retention period or upon request by Amazon or the authorized seller, personal data is permanently and securely deleted in accordance with industry standards such as <strong>NIST 800-88<\/strong>.<\/p>\n<h2>8. Data Security Measures<\/h2>\n<p>We implement appropriate technical and organizational security measures, including but not limited to:<\/p>\n<ul>\n<li>Encryption in transit using <strong>TLS 1.2 or higher<\/strong><\/li>\n<li>Encryption at rest using <strong>AES-256<\/strong> or equivalent industry standards<\/li>\n<li>Role-based access controls following the principle of least privilege<\/li>\n<li>Mandatory multi-factor authentication (MFA) for systems handling personal data<\/li>\n<li>Centralized logging and security monitoring<\/li>\n<\/ul>\n<h2>9. Access Control<\/h2>\n<p>Access to personal data is restricted to authorized personnel on a strict <strong>need-to-know basis<\/strong>. Unique user IDs are used at all times. Shared or generic accounts are prohibited.<\/p>\n<p>Access rights are reviewed regularly and revoked immediately upon role change or termination.<\/p>\n<h2>10. Subprocessors<\/h2>\n<p>We may engage carefully selected subprocessors (e.g. hosting or infrastructure providers) solely to support the provision of our services.<\/p>\n<p>All subprocessors are contractually bound to data protection and security obligations that are <strong>at least equivalent<\/strong> to those described in this Privacy Policy and Amazon\u2019s Data Protection Policy.<\/p>\n<p>A current list of subprocessors is available upon request.<\/p>\n<h2>11. Data Subject Rights<\/h2>\n<p>We support Amazon sellers in fulfilling data subject rights under applicable data protection laws, including the right of access, rectification, erasure, and restriction of processing.<\/p>\n<p>We act exclusively on the documented instructions of the respective seller when responding to such requests.<\/p>\n<h2>12. Incident and Breach Notification<\/h2>\n<p>In the event of any actual or suspected personal data breach, we notify affected sellers and Amazon <strong>without undue delay and no later than 24 hours after detection<\/strong>, in accordance with applicable laws and Amazon policies.<\/p>\n<p>All incidents are investigated, documented, and remediated to prevent recurrence.<\/p>\n<h2>13. International Data Transfers<\/h2>\n<p>Personal data is processed and stored within the European Union. If data transfers outside the EU become necessary, such transfers are conducted in compliance with applicable data protection laws and with appropriate safeguards in place.<\/p>\n<h2>14. Contact Information<\/h2>\n<p><strong>IDEAL ALPHA GmbH<\/strong><br \/>\n<strong>Kaiser Friedrich Str. 90<br \/>\n<\/strong><strong>10585 Berlin<br \/>\nGermany<br \/>\n<\/strong><a href=\"mailto:security@ideal-alpha.com\">privacy@ideal-alpha-com<\/a><\/p>\n<p>For Amazon-related security incidents, our designated Incident Management Point of Contact (IMPOC) can be reached at:<\/p>\n<p><strong>Email:<\/strong> <a href=\"mailto:security@ideal-alpha.com\">security@ideal-alpha.com<\/a><\/p>\n<\/div><\/section><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-18266","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/pages\/18266","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/comments?post=18266"}],"version-history":[{"count":1,"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/pages\/18266\/revisions"}],"predecessor-version":[{"id":18267,"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/pages\/18266\/revisions\/18267"}],"wp:attachment":[{"href":"https:\/\/www.ideal-group.de\/en\/wp-json\/wp\/v2\/media?parent=18266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}