1. Data controller
Immunity Invest Holdings Plc. (Immunity Invest Holdings Plc.; official foreign language full and abbreviated name: Immunity Invest Holdings Plc.; "Zrt." is Hungarian, "Plc." is part of the official foreign language company name; Cg. 01-10-047725; tax number: 24310334-1-43; social tax number: HU24310334). Data Protection Contact: support@aios-business.com.
2. Processed data
The program manages the partner's name, company name, e-mail address, country and tax status, partner ID, chosen commission model, payment method, beneficiary name, encrypted IBAN or PayPal data, masked ending of payment data, as well as click, registration, subscription, commission and payment events.
For abuse prevention, the system can create a session ID, time, a device fingerprint from the technical environment, and a SHA-256 fingerprint salted from the IP address. The raw IP address is not displayed on the partner or operator interface.
3. Purpose and legal basis
- registration, contract fulfillment, partner link and settlement: GDPR Article 6 (1) b);
- invoicing, taxation and accounting obligations: GDPR Article 6 (1) c);
- fraud prevention, IT security, legal claims and assignment to the first partner: GDPR Article 6 (1) f), the legitimate interest of the Data Controller;
- separate marketing message with voluntary consent only: GDPR Article 6 (1) a).
4. Recipients and data transfer
Only authorized operators and financial staff, as well as storage, database, security and payment service providers, can access the data to the extent necessary for their tasks. When choosing PayPal, the data required for payment can be forwarded to PayPal, which acts according to its own conditions. International data transfer can only take place on the basis of a legal guarantee.
5. Preservation
Partner account and performance data can be managed until the legal relationship exists. Accounting and payment receipts are kept until the end of the mandatory retention period, and data of legal disputes or suspected fraud until the end of the required statute of limitations or investigation period. Technical risk data that has become unnecessary will be deleted or permanently anonymized.
6. Rights of stakeholders
The partner may request access, correction, deletion, restriction or data portability, may object to processing based on legitimate interest, and may withdraw consent at any time. The application is a support@aios-business.com. Complaints can be made to the competent supervisory authority; In Hungary, at the National Data Protection and Freedom of Information Authority.
7. Automated risk indication
The system can suggest a suspended or blocked status based on a matching e-mail, organization, IP or device fingerprint. The suspicious indication alone does not result in a final decision with legal effect: the disputed assignment can be reviewed manually.
8. Security
Payment target data is protected by encryption, access by role-based authorization, data transmission by an encrypted connection, and abuse investigation is protected by logging. The system follows the principle of data minimization and does not display the entire bank account or PayPal data in the statements.
9. Related documents
This information is AIOS Business with its general data management information and that Affiliate Program Rules is used together.