With respect to GDPR and Alexa, is Amazon acting in the capacity of a data controller or data processor, or even a subprocessor?
The GDPR EU.org website describes the roles as follows:
Article 4 defines data controllers and data processors in the following way:
(7) "controller" means the natural or legal person, public authority, agency or other body that, alone or in conjunction with others, determines the purposes and means of processing personal data; when the purposes and means of such processing are determined by the legislation of the Union or of the Member State, the controller or the specific criteria for its nomination may be provided for by the legislation of the Union or of the Member State;
(8) "processor" means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;
If Amazon is acting as a processor or subprocessor, who are the other parties, for example. Controller and / or processor.