Partner privacy notice
Version: 25 October 2026
Controller
EDELFUNDE EOOD, represented by Boyan Velikov, zh.k. Manastirski livadi B, bl. 48, et. 2, ap. 3, 1404 Sofia, Bulgaria. Privacy contact: kontakt@edelfunde.de.
Data and purposes
We process names, business contact and channel details, application information, account information, contract communications and necessary tax, invoice and SEPA payment details you provide. We also process partner identifiers, referral links and codes, recorded clicks, attributed order references, commission values and statuses, and technical access and security data. You supply application details; order and attribution data arise in our shop and partner system. Submit payment details only through the designated secure functions.
Application review, account management, contract performance and commission administration rely on Article 6(1)(b) GDPR. Statutory tax and accounting duties rely on Article 6(1)(c). Necessary fraud prevention, IT security and legal claims rely on Article 6(1)(f); our interests are secure systems and accurate accounting. Necessary business communications with contacts at legal entities rely on this legitimate interest. Optional advertising and tracking requiring consent rely on separate consent under Article 6(1)(a).
Providers and recipients
We use Shopify for the shop and GoAffPro for partner accounts, attribution and accounting. Necessary information may also go to banks and payment providers, IT providers, accountants, tax/legal advisers and legally authorised authorities. Participation does not authorise partners to use customer data for their own marketing.
GoAffPro identifies an operator in Haryana, India in its privacy notice and data centres in Germany and the USA in its compliance information. Processing exclusively within Europe is therefore not assured. Its privacy notice applies where it processes data as an independent controller; see also its compliance information. International transfers are subject to Articles 44 onwards GDPR. Contact us for information about recipients and safeguards applicable to a particular transfer. Joining does not constitute blanket consent to third-country transfers.
Tracking and cookies
GoAffPro identifies “ref” (partner identifier), “gfp_v_id” (visitor/session identifier) and “gfp_v_expires” (expiry information). The programme attribution window is 30 days; essential portal login functions are distinct. Non-essential device access requires prior consent where legally required. Partners must not circumvent this requirement. Link attribution may fail without technically and legally permitted tracking. An entered partner code may enable accounting independently of a referral link.
Retention and required information
We retain application and contract data only as needed for the application, active participation and subsequent settlement. After rejection or termination, unnecessary data is deleted; relevant evidence may remain until applicable limitation periods and statutory retention duties, particularly Bulgarian tax/accounting duties, expire. Data necessary for a specific dispute may remain until it is resolved. Retention depends on the data and legal purpose; account details do not all require the same retention as accounting records.
Without required contact, contract and accounting information we cannot process an application, participation or payment. Optional marketing consent is not a condition of participation. Admission is reviewed manually; we do not make solely automated admission decisions producing legal or similarly significant effects.
Your rights
Subject to legal conditions, you have rights of access, correction, erasure, restriction and portability. You may withdraw consent at any time for the future. You may object to legitimate-interest processing for reasons relating to your particular situation and to direct marketing at any time. You may complain to a supervisory authority, particularly where you live or work or where an infringement is alleged. Bulgaria’s authority is the Commission for Personal Data Protection.
Our shop privacy policy supplements this notice for other shop processing. This notice provides information and is not blanket consent. Rights requests: kontakt@edelfunde.de.