AffiliationSoftware is committed to meeting our General Data Protection Regulation (GDPR) obligations and helping our customers meet theirs. Here are the steps we have taken to reach this goal.\u00a0<\/p>\n
What is GDPR<\/strong>?<\/strong> Our responsibilities<\/strong> Our obligations as data processor:<\/strong><\/p>\n Obligations for data controllers<\/strong> There can be more than one data controller for the same information, in which case they are jointly responsible for complying with the GDPR. Customers sponsoring an affiliate program should assess, together with their affiliates, whether the GDPR is applicable to their marketing activities. As joint data controllers, they should divide responsibility for GDPR compliance, such as preparing privacy policies to inform end users of their rights and obtaining consent to process their personal data, if necessary.<\/p>\n AffiliationSoftware has developed many features to compliance with GDPR and to assist customers fulfill their GDRP obligations.<\/p>\n Secure by design<\/strong> Server firewall HTTPS encryption Passwords encryption API security<\/strong> We offer the following solutions to some of the most common GDPR challenges.<\/p>\n AffiliationSoftware give customers the option to delete Service Data that may contain personal data, such as profiles, commissions, IP addresses, logs, and other data.<\/p>\n Delete Affiliate data Delete IP\/tracking data<\/strong> Cookieless Tracking Data processing agreement<\/strong> AffiliationSoftware uses certain subprocessors to assist it in providing the AffiliationSoftware service<\/p>\n What is a Subprocessor:<\/strong> AffiliationSoftware undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed subprocessors that will or may have access to process Service Data.<\/p>\n This policy does not give customers any additional rights and should not be construed as a binding agreement. The information herein is only provided to illustrate AffiliationSoftware’s engagement process for subprocessors as well as to provide the actual list of third party subprocessors as of the date of this policy.<\/p>\n AffiliationSoftware owns or controls access to the infrastructure that AffiliationSoftware uses to host Service Data submitted to the Services. Currently, the AffiliationSoftware production systems for the Services are located in co-location facilities in the United States and Europe.<\/p>\n Customer accounts are established in one of these regions; the Customer’s Service Data subsequently remains in that region unless agreed between Customer and AffiliationSoftware, but may be shifted among data centers within a region to ensure performance and availability of the Services. Below are described the countries and legal entities engaged in the storage of Service Data by AffiliationSoftware.<\/p>\n Linode LLC. (EU location)<\/strong> To ensure 24\/7 customer service availability, AffiliationSoftware may works with multiple subcontractors, who may access Service Data. All subcontractors have contracts in place and must follow security guidelines one of which is accessing such data only with prior consent of the Customer.<\/p>\n If you have any question or concerns about GDPR please feel free to contact us via email here<\/a>.<\/p>\n Everything you need to know about AffiliationSoftware’s GDPR compliance AffiliationSoftware is committed to meeting our General Data Protection Regulation (GDPR) obligations and helping our customers meet theirs. Here are the steps we have taken to reach this goal.\u00a0<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-700","page","type-page","status-publish","hentry"],"yoast_head":"\n
\nThe General Data Protection Regulation was created to harmonize privacy laws across Europe, to empower EU citizens with respect to their personal data, and to reshape the way organizations approach data privacy. EU residents will now have greater say over what, how, why, where, and when their personal data is used, processed. The reach of the GDPR extends even beyond the borders of the EU. Any organization that markets products and services to individuals in the EU is obligated to comply with the GDPR, regardless of where the company is located.<\/p>\n
\nThe GDPR divides responsibility for data protection between data controllers and data processors. Data controllers determine what data they collect, the purpose and the means. Data processors assist them to complete these tasks. In affiliate marketing, advertisers and affiliates decide when to run or participate in affiliate programs and the operational framework, meaning that they act as data controllers. AffiliationSoftware provides services that help customers manage their affiliate programs, this means that we act as a data processor, as we store and process data relating to individual affiliates and end users on behalf of our customers.<\/p>\n\n
\nThe GDPR expands the responsibilities of data controllers. Among other obligations, data controllers must:<\/p>\n\n
\nOur security measures<\/h5>\n
\nAffiliationSoftware has been developed to be secure and protect against attacks like cross-site scripting, cross-site request forgery, SQL injection, session hijacking, and more.<\/p>\n
\n<\/strong>Each one of our servers run its own firewall. A firewall is a network security system that monitors and filters incoming and outgoing traffic.<\/p>\n
\n<\/strong>All AffiliationSoftware websites run over a secure Hyper Text Transfer Protocol Secure (HTTPS) connection, which is the secure version of the HTTP protocol. It means all communications between your browser and AffiliationSoftware are encrypted, including email communications.<\/p>\n
\n<\/strong>Both customers and affiliates passwords are stored encrypted. We use multiple secure and irreversible algorithms to add an extra protection layer for our users.<\/p>\n
\nAffiliationSoftware API is restricted to accredited users based on unique API access tokens.<\/p>\n
\nFetaures to help our customers with GDPR<\/h5>\n
\n<\/strong>One of the rights affiliates have is to request cancellation of their personal data. AffiliationSoftware allows customers to delete an affiliate and all his\/her related data (including trackings). This can be done in the AffiliationSoftware admin panel at: Users > Affiliates.<\/p>\n
\nOne of the rights end-users have is to request cancellation of their personal data. AffiliationSoftware allows customers to delete IP addresses and invalidate cookies from visitor logs in response to such requests. This can be done in the AffiliationSoftware admin panel at: Statistics > Detailed.<\/p>\n
\n<\/strong>AffiliationSoftware allows customers to set the tracking cookies\u2019 lifetime or to use a Cookieless tracking. Our cookieless tracking Solution preserves tracking even when a tracking cookie isn\u2019t present on a consumer\u2019s browser. This tracking enhancement is fully compatible with GDPR legal requirements.<\/p>\n
\nWe have prepared a Data Processing Agreement template for our customers who process the personal data of EU residents.<\/p>\n
\nSubprocessors<\/h5>\n
\nA subprocessor is a third party data processor engaged by AffiliationSoftware, who has or potentially will have access to process Service Data (which may contain Personal Data). AffiliationSoftware uses various types of sub-processors to perform different functions as explained below.<\/p>\nInfrastructure subprocessors<\/h5>\n
Server providers<\/h5>\n
\nAffiliationSoftware servers are hosted at Tier III+ or IV SSAE-16 compliant facilities. Data center facilities are powered by redundant power, each with UPS and backup generators.<\/p>\nSubcontractors<\/h5>\n
\nYou might be also interested in:<\/h5>\n
\n