Jump to content

GDPR - Download personal data. Purchases are missing


hjmaier
 Share

Recommended Posts

  • Management

Are they personal data though? The export contains stored email addresses, credit cards and customer data in the XML.

I wouldn't consider data such as:

invoice_id: 12345
invoice_total: 12.00

As data required in the export.

Link to comment
Share on other sites

@Matt I think about adresses. Are they only stored once as a master date? Or are invoice an delivery addresses stored for each invoice/transaction? If yes, this is a personal data. 

Same is with custom fields for transactions. I can request personal data with custom fields. They need to be included in the download as well. 

I did not check custom profile fields. Are they in the XML?

But thank you very much for your efforts regarding GDPR compliance. 

edit:

Additional: I am not sure if the purchase/ invoice itself is considered a personal data. I guess yes, because I can tell which product a specific user had purchased in the past. 

Edited by hjmaier
Link to comment
Share on other sites

22 hours ago, hjmaier said:

Additional: I am not sure if the purchase/ invoice itself is considered a personal data. I guess yes, because I can tell which product a specific user had purchased in the past. 

PII covers data that can be used to identify a person - an invoice (absent other data about the person) can't really be used to identify them.

Link to comment
Share on other sites

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...