Home
User Guide
The information contained in this section applies to WebSphere Commerce Version 8. The documentation also applies to all subsequent releases and modifications until otherwise indicated in a newer section.WebSphere Commerce is a single, unified e-commerce platform that offers the ability to do business directly with consumers (B2C), directly with businesses (B2B), and indirectly through channel partners (indirect business models). WebSphere Commerce is designed to be a customizable, scalable, and high availability solution that is built to leverage open standards. It provides easy-to-use tools for business users to centrally manage a cross-channel strategy. Business users can create and manage precision marketing campaigns, promotions, catalog, and merchandising across all sales channels.
Compliance
The following section describes how you can leverage WebSphere Commerce features and functionality to help your site be compliant with different privacy and security standards.
GDPR and WebSphere Commerce
WebSphere Commerce provides documentation and functions that your organization can use to help it on the journey to GDPR readiness. If your store operates within the European Union (EU), sells products or services to those people in the EU, or monitors the behavior of EU data subjects, your site likely needs to be GDPR compliant from May 25, 2018.
Right to erasure
Right to erasure, in accordance with the GDPR, is the right for an individual to require that their personal data is deleted when the individual requests it. To help support this requirement, WebSphere Commerce provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to erasure requests.
Data retention
As part of getting your site GDPR ready, your organization is responsible for creating any plans or documents that detail how long your site retains any personal data that is collected. WebSphere Commerce does not provide any functionality for creating a retention plan.

User Guide
The information contained in this section applies to WebSphere Commerce Version 8. The documentation also applies to all subsequent releases and modifications until otherwise indicated in a newer section.WebSphere Commerce is a single, unified e-commerce platform that offers the ability to do business directly with consumers (B2C), directly with businesses (B2B), and indirectly through channel partners (indirect business models). WebSphere Commerce is designed to be a customizable, scalable, and high availability solution that is built to leverage open standards. It provides easy-to-use tools for business users to centrally manage a cross-channel strategy. Business users can create and manage precision marketing campaigns, promotions, catalog, and merchandising across all sales channels.
- Planning
  Creating a custom implementation of a WebSphere Commerce store requires a significant amount of planning. From gathering client needs, to deploying the live solution, much work is needed to successfully deploy a custom client store. Use the resources in here to help you plan every phase of store creation.
- Installing
  Review the following sections for information about installing the WebSphere Commerce product, associated maintenance, and WebSphere Commerce enhancements.
- Migrating
  Before you migrate to WebSphere Commerce Version 8.0, review this information to help plan and execute your migration.
- Deploying
  The topics in this section describe how to publish stores to either a test or production environment, and how to deploy customized code.
- Operating
- Integrating
  Topics in the Integrating category highlight the tasks that are commonly performed for using WebSphere Commerce in combination with other products.
- Administering
- Tutorials
  WebSphere Commerce provides many tutorials to help you customize and understand your WebSphere Commerce instance and stores.
- Samples
- Developing
  The topics in the Developing section describe tasks performed by an application developer.
- Compliance
  The following section describes how you can leverage WebSphere Commerce features and functionality to help your site be compliant with different privacy and security standards.
  - GDPR and WebSphere Commerce
    WebSphere Commerce provides documentation and functions that your organization can use to help it on the journey to GDPR readiness. If your store operates within the European Union (EU), sells products or services to those people in the EU, or monitors the behavior of EU data subjects, your site likely needs to be GDPR compliant from May 25, 2018.
    - Privacy and consent
      WebSphere Commerce provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.
    - Right to access
      Right to access, in accordance with the GDPR, is the right for an individual to access their personal data upon request. To help support this requirement, WebSphere Commerce provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to access requests.
    - Right to erasure
      Right to erasure, in accordance with the GDPR, is the right for an individual to require that their personal data is deleted when the individual requests it. To help support this requirement, WebSphere Commerce provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to erasure requests.
      - SQL statements: Right to erasure
        Individuals have the right to ask your organization to delete any personal information about them that your organization holds. The following table lists personal data that is stored in WebSphere Commerce and shows how to delete the data by using an SQL query.
      - Data retention
        As part of getting your site GDPR ready, your organization is responsible for creating any plans or documents that detail how long your site retains any personal data that is collected. WebSphere Commerce does not provide any functionality for creating a retention plan.
    - Data protection by design and default
      Data protection by design and default, in accordance with the GDPR, requires that customer data is encrypted during all communications, internal and external. Enable a Secure Sockets Layer (SSL) connection for data transfer between WebSphere Commerce servers and the database.
  - WebSphere Commerce and the PCI Data Security Standard
    The Payment Card Industry (PCI) Data Security Standard (DSS), developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International, facilitates the global adoption of consistent data security measures.
- Securing
  These topics describe the security features of WebSphere Commerce and how to configure these features.
- Performance
- Troubleshooting

WebSphere Commerce Version 8.0.4.12

Data retention

As part of getting your site GDPR ready, your organization is responsible for creating any plans or documents that detail how long your site retains any personal data that is collected. WebSphere Commerce does not provide any functionality for creating a retention plan.

WebSphere Commerce does provide functionality that your organization can use to delete data from your database when your organization no longer needs the data or when you need to directly erase data. Your organization is responsible for erasing any collected personal data that is retained within your system when the data is no longer needed. Your organization is responsible for determining the data retention period for specific personal data types. For instance, order history data might need be retained while any return policies or warranties are in effect. Order the data might also need to be retained for a specific period for auditing and other business purposes. After the retention period elapses and the data is no longer needed, you can erase the data.

To help your organization delete data when that data is no longer needed, WebSphere Commerce provides a database cleanup utility. Your organization can run the utility on a schedule to erase personal data that is no longer needed. This utility is configured by default to delete some types of data based on parameters that you can configure when you run the utility. If your site collects more personal data than can be collected with the sample store pages and features that are provided with WebSphere Commerce, you can configure the utility to erase the additional data.

By default, WebSphere Commerce is configured to store data within only the WebSphere Commerce database. The Database Cleanup utility can remove data from only this database. If you store data in another database or location, you are responsible for developing a method to remove data from that database or location.

If you need to directly erase personal data from the WebSphere Commerce database, such as when a user submits a request for their data to be erased, you can customize and use SQL statements to erase the data. For more information, see SQL statements: Right to erasure.