This documentation always describes the latest published version.
The module processes order data to create invoices from it. This page describes which data is kept where. It is a technical description and not legal advice.
| Location | Content |
|---|---|
Table mmd_pdfinvoice, column SNAPSHOT_DATA |
Order data at the time of invoice creation as JSON: billing and delivery address, phone, fax, email address, VAT ID, items, totals and payment method |
Table mmd_pdfinvoice, other columns |
Order ID, shop ID, invoice number, invoice date, file path, hash value, sent status with timestamps |
Table mmd_pdfinvoice_seq |
Counter per shop and year, no personal data |
| PDF files in the storage path | The finished invoice with the customer's name and address |
For the payment method direct debit (oxiddebitnote) the snapshot additionally contains the customer's IBAN, BIC or bank code, bank name and account holder. The customer's IBAN is also printed in full on the PDF.
The module only sends data by email:
The module itself does not connect to any external service. The PDF is created locally in the shop with Dompdf.
export/invoices and writes an .htaccess with Deny from all into it. This only protects the files on Apache servers that evaluate .htaccess..htaccess. You then have to block access to the directory yourself.