RAICOM s.r.o., Sportovní 574/15, 360 01 Karlovy Vary, Czech Republic, Company ID 279 416 71. Website: stuza.cz. Privacy and data-handling enquiries: office@stuza.cz.
Amazon information is obtained through the Amazon Selling Partner API (SP-API) and related Amazon-authorized interfaces connected to our seller operations. We request and process only the information necessary for the approved business function.
Amazon information is processed only for authorized business purposes connected with our Amazon selling activity, including order processing, manufacturing, seller-fulfilled delivery, permitted customer support, accounting, reconciliation and legally required record keeping.
Restricted personally identifiable information (PII) is used only where required for the approved restricted function, such as fulfilling and delivering a seller-fulfilled customer order. Restricted PII is not used for advertising, unrelated analytics, profiling, resale or data enrichment.
Restricted customer information is separated from general operational and analytics data. Restricted PII is stored in a dedicated protected environment and encrypted at the application layer using AES-256-GCM. The underlying Restricted Data storage is maintained on encrypted storage. Encryption keys and credentials are stored separately from application source code and databases with restricted administrative access.
Amazon information is encrypted in transit using secure protocols. Administrative access is restricted and security-relevant access and configuration events are logged. Restricted PII is not written to application or security logs.
Restricted shipping PII is retained only for the period required to complete the approved fulfillment purpose and is scheduled for deletion no later than 30 days after order delivery, unless a longer period is required by applicable law. Expired Restricted PII is deleted automatically by the Restricted Data service.
Non-PII Amazon information is retained only for legitimate operational, accounting or legal purposes and is subject to applicable retention limits. When information is no longer required, it is removed from active systems and disposed of using controlled deletion procedures.
Backups containing Amazon information are encrypted and stored in a geographically separate off-site backup location. Backup and recovery procedures are tested on a recurring basis. Current recovery objectives for the Amazon automation environment are an RPO of 24 hours and an RTO objective of 4 hours.
Security logs are retained for investigation and monitoring purposes and protected against unauthorized modification. Security activity is reviewed on a recurring basis, and vulnerability scanning and remediation are part of the operational security process.
RAICOM s.r.o. maintains an incident response procedure covering identification, evidence preservation, containment, credential revocation, Restricted Data ingestion shutdown, eradication, recovery and post-incident review. Security incidents are escalated and notified to Amazon and other relevant parties where required by applicable obligations.
Amazon information is not sold. Information is shared only where necessary to perform an authorized business function, comply with legal obligations, protect systems, or use an approved service provider subject to appropriate confidentiality and security safeguards.
Production Amazon PII is not copied into development or test fixtures. Security testing of Restricted Data functions uses synthetic data. Credentials and secrets are not permitted in source code, workflow definitions, public repositories, tickets or application logs.
Questions regarding this notice or our handling of Amazon information can be sent to office@stuza.cz.