What does order processing mean in affiliate marketing?

Order data processing (ODP) under the GDPR refers to the processing of personal data by a service provider (processor) on behalf of a controller. The controller remains responsible for compliance with data protection rules, while the processor handles data strictly according to instructions. An ODP agreement is required whenever personal data is processed by third parties on behalf of another party.

In the context of affiliate marketing, ODP becomes relevant when personal data is shared with partners or service providers and processed by them—for example, in tracking user behavior, analyzing campaign performance, or handling commission payouts.

On the selecdoo platform, however, an ODP agreement is generally not necessary, since no personal data is stored or processed. Instead, tracking and billing are usually based on anonymized or pseudonymized data, which means no legal obligation for ODP exists.

In summary:

• ODP governs the processing of personal data by third parties on behalf of a controller
• In affiliate marketing, it applies when personal data is being processed
• selecdoo does not store personal data, so ODP is typically not required here