Privacy Policy

GDPR-compliant data protection information

English Deutsch

GDPR Compliance

This privacy policy complies with the European General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG). The original German version has legal precedence.

Data Controller

Responsible Entity

Company: [Your Company Name] GmbH

Address: [Your Address]

Email: privacy@[yourdomain].com

Phone: +49 (0) [Your Phone]

Data Protection Officer

Name: [DPO Name]

Email: dpo@[yourdomain].com

Address: [DPO Address]

Data Processing Overview

Personal Data

Name, email, encrypted personal information for account management and legal compliance.

Analytics Data

Google Analytics data for campaign performance tracking and commission calculations.

Security

AES-256 encryption, TLS 1.3, EU servers, comprehensive audit logging and consent management.

Legal Basis for Processing

Art. 6(1)(a) GDPR - Consent

For Google Analytics integration, data sharing with promoters, and marketing communications. You can withdraw consent at any time through your account settings.

Art. 6(1)(b) GDPR - Contract Performance

For account management, service provision, and commission calculations necessary to fulfill our contractual obligations.

Art. 6(1)(c) GDPR - Legal Obligation

For tax compliance, financial record keeping, and other legal requirements under German and EU law.

Art. 6(1)(f) GDPR - Legitimate Interest

For platform security, fraud prevention, and service improvement. Our legitimate interests are balanced against your privacy rights.

Google Analytics Integration

Data We Access

• Website traffic and user behavior metrics
• Conversion tracking and goal completions
• Campaign performance data (UTM parameters)
• Geographic and demographic insights (anonymized)
• E-commerce transactions and revenue data

How We Use It

• Calculate fair commissions for promoters
• Provide performance dashboards
• Generate automated reports
• Optimize referral campaign effectiveness
• Ensure transparent revenue sharing

Your Control

You maintain full control over your Google Analytics data. You can revoke access at any time through your account settings or Google's security settings. Data processing stops immediately upon withdrawal of consent.

Data Retention

Retention Periods

Account Data: Until account deletion

Analytics Data: 24 months

Financial Records: 10 years (legal requirement)

Log Files: 30 days

Automatic Deletion

• Personal data is automatically deleted after the retention period

• Backups are securely destroyed after 90 days

• Anonymous analytics may be retained for statistical purposes

• You can request immediate deletion at any time

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Restrict Processing

Limit how we process your data under certain circumstances.

Right to Data Portability

Receive your data in a structured, commonly used, and machine-readable format.

Right to Object

Object to processing based on legitimate interests.

Contact & Complaints

Exercise Your Rights