Scope
This policy covers the commercial website, inquiries, professional relationships and their administration. Our services target businesses and professionals, not children. Personal data about business contacts remain protected by the GDPR and Spanish LOPDGDD.
Since 2017, WAADBY has provided professional Amazon seller account management alongside its technology integration services. Authorised staff act in Seller Central on the seller’s behalf, within the contracted service and authorised scope, to open and follow up cases and handle catalogue issues, claims, appeals and operational tasks. Where agreed, WAADBY prepares documentation for the seller to carry out the action.
Human account management and technology integration through Amazon SP-API are different service modalities. A seller’s authorisation of an SP-API integration does not replace the authorisations and permissions applicable to staff managing the account.
The corporate website does not perform the SP-API connection or receive orders or buyer data through that integration. The connectivity application has a separate Amazon SP-API privacy policy.
Controller
WAADBY DATA MARKET S.L., tax ID B87900247, Calle Ayala, 85, 2.º B, 28006 Madrid, Spain. Contact: info@waadby.com. Telephone: +34 686 978 212.
Data we process
Contact forms collect name, company, email, subject and message; telephone is optional. FAQ feedback collects a rating and optional comment and email for a reply. Data come from the person submitting them. Do not submit sensitive information or buyer data through these forms.
Optional analytics uses random visitor and session identifiers, visited pages, interactions, origin and campaigns, language and general device characteristics. These data are pseudonymous, not anonymous. Inquiry content is not included in analytics.
Professional account management uses the account and issue information needed to open and follow up cases and perform the contracted tasks, provided by the seller or consulted by authorised staff in Seller Central within the assignment.
Purposes and legal bases
Inquiries and proposals: requested pre-contractual steps (GDPR Art. 6(1)(b)). For company representatives and general inquiries, legitimate interest in responding to professional communications (Art. 6(1)(f) and LOPDGDD Art. 19). Required fields are needed to handle the request; telephone is optional.
Customers and administration: contractual performance, professional contact management and accounting or tax obligations, as applicable (GDPR Art. 6(1)(b), (c), (f)).
Feedback and support: legitimate interest in improving answers and handling comments; an optional email is used to reply.
Analytics: optional consent, withdrawable through Configure cookies (Art. 6(1)(a)). Security and abuse prevention rely on the legitimate interest in protecting the service.
We do not use automated decisions with legal or similarly significant effects or advertising profiles.
Hosting, email and recipients
Hetzner Online GmbH provides hosting and email in Germany as processor subject to GDPR Article 28 terms. Staff access is limited to their duties and confidentiality obligations. Data are disclosed to authorities where legally required. We do not sell data or provide contacts to advertisers.
In the logistics flow described here, WAADBY provides the client seller with the logistics information relating to the service. Where applicable, the seller manages subsequent actions with transport operators. In this flow, WAADBY does not communicate that information directly to carriers.
WhatsApp contact
Links open the external service of WhatsApp Ireland Limited. This website does not embed a Meta widget or transmit contact forms to WhatsApp. Opening a link allows WhatsApp to process connection data and information you provide under its privacy policy, including its international processing safeguards.
If you contact us there, we use your number, profile and messages to handle the inquiry on the same bases as the form. Email and the contact form are alternatives. Do not send sensitive information or buyer data through this channel.
Data location
Contracted Hetzner hosting and email are located in Germany, within the EEA. Voluntary use of WhatsApp is subject to the processing and safeguards described by that provider. Any change of provider or additional transfer is disclosed with the relevant safeguards under GDPR Articles 44–49.
Retention and deletion
Non-contractual inquiries and feedback are retained for up to 3 months after resolution or the last interaction. Business conversations follow the same rule. Customer data remain during the relationship and are subsequently restricted where necessary for legal obligations or liabilities.
Analytics is retained for a maximum of 3 months. Browser identifiers last no longer than the consent or session period specified in the cookie inventory. Withdrawal stops collection and removes browser identifiers. Previous lawful processing is unaffected; erasure and objection rights remain available.
Rights and complaints
Request access, rectification, erasure, restriction, objection and portability where applicable at info@waadby.com or our postal address. Withdraw consent without affecting prior lawful processing. You may object to legitimate-interest processing based on your particular situation.
We respond within one month; where complexity justifies up to two additional months, we inform you within the first month. Additional identification is requested only when necessary. You may complain to the Agencia Española de Protección de Datos (AEPD).
Administration and information protection
Our administration policy restricts access to authorised staff using individual accounts and role-appropriate permissions. It requires confidentiality, access review and removal, credential protection, proportionate traceability and management of retention, backups and incidents. Data are not used for personal purposes or included in source-code repositories.
Technical and organisational measures reflect risk. Breaches are documented and notified to authorities and affected individuals where required by the GDPR.
News and marketing
Sending an inquiry or contacting us through WhatsApp does not subscribe you to a mailing list. No newsletter subscription is currently offered. Promotional messages require prior authorisation except for the lawful exception for existing customers and similar own services. In that case a free opt-out is available at collection and in every message. Opting out does not prevent necessary service communications.
Updates
Last review: 19 October 2026. Significant changes are disclosed and new consent requested where required. Contact: info@waadby.com.