AFFILIATE PRIVACY POLICY & DATA PROTECTION NOTICE
1. Introduction & Data Controller
1.1 This Affiliate Privacy Policy explains how Check for Trips GmbH (hereinafter referred to as "Company", "We", "Us", or "Our") collects, processes, uses, stores, and protects personal data obtained from participants (hereinafter referred to as "Affiliates" or "You") of the IWC Affiliate Program operated via affiliates.istanbulwelcomecard.com (hereinafter referred to as the "Platform").
1.2 Data Controller: The entity responsible for data processing on this Platform within the meaning of the General Data Protection Regulation (GDPR / DSGVO) and the Turkish Personal Data Protection Law No. 6698 (KVKK) is:
- Company Name: Check for Trips GmbH
- Address: Hintergasse 6, 65428 Rüsselsheim, Germany
- E-Mail: info@istanbulwelcomecard.com
1.3 Scope: This policy specifically covers the personal data of our business partners (Affiliates). For information regarding the privacy practices applied to end-customers buying tourism products on our primary store, please refer verbatim to the file named "IWC_PRIVACY POLICY.docx".
2. Categories of Personal Data Collected
We collect and process only the minimum amount of personal data necessary to establish, maintain, and audit your commercial affiliate relationship with us. This includes:
- Personal Identification Information: Full name, corporate/business entity name, email address, physical address, registration country, and unique account login credentials.
- Financial & Payment Information: Bank account holder name, IBAN, bank name, and SWIFT/BIC codes required exclusively to execute monthly commission payouts.
- Technical Tracking Data: Unique referral IDs, technical tracking cookies, IP addresses, browser types, and device identification logs generated during navigation.
3. Purposes and Legal Basis for Data Processing
Pursuant to the GDPR and KVKK frameworks, we process your personal data under the following strict legal bases:
- Contractual Necessity (Art. 6 para. 1 lit. b GDPR / KVKK Art. 5/2-c): Processing is mandatory to establish your account, operate the affiliate dashboard, track your referral sales correctly, and execute monthly commission transfers.
- Legal Obligations (Art. 6 para. 1 lit. c GDPR): We process and retain financial data to comply with statutory accounting laws, tax declarations, and anti-money laundering regulations in Germany and Europe.
- Legitimate Commercial Interest (Art. 6 para. 1 lit. f GDPR): We process technical data, log files, and fraud verification details to maintain the security of our platform, detect self-referrals, and prevent double-accounting or bot manipulation.
4. Platform Cookies & Technical Tracking Disclaimers
4.1 Essential & Functional Tracking: This Platform uses strictly necessary system cookies and specialized affiliate tracking scripts. These technical tools are required to keep you securely logged into your dashboard, protect user sessions, and accurately attribute end-customer purchases to your affiliate ID.
4.2 Absence of a Consent Panel:
Important Technical Notice: Because all cookies utilized on affiliates.istanbulwelcomecard.com are technically and operationally essential for the execution of your commercial contract and commission calculation, we do not offer a separate cookie settings banner or opt-out panel on this sub-domain.
If you do not wish for tracking cookies to be stored on your device, you must adjust your internet browser settings to block cross-site tracking. However, please note that blocking these cookies will prevent our tracking infrastructure from attributing sales to your account, resulting in a total forfeiture of potential commissions.
5. Data Transfer & Sborder Compliance
5.1 Local Operational Transfers: To process operational transactions and review marketing performance, your registration and metadata may be shared securely with our regional operation offices, secure servers, and local managers located in Istanbul, Turkey.
5.2 Safeguards: Cross-border data transfers originating from the European Union (EU) to third-party territories (such as Turkey) are strictly protected under appropriate contractual mechanisms, including Standard Contractual Clauses (SCCs) issued by the European Commission, ensuring a mirrored, rigorous level of data safety.
6. Data Security and Retention Measures
6.1 Technical Protections: We implement comprehensive organizational and technical security measures, including advanced SSL/TLS encryption, secure HTTPS pathways, restricted internal staff access, and routine data security audits to safeguard your banking and corporate data from unauthorized exploitation.
6.2 Retention Periods: Financial and banking logs associated with payouts are stored for a mandatory period of 10 years in accordance with German commercial and fiscal preservation regulations (HGB and AO). Standard profile metadata is preserved for as long as your Affiliate account remains active and will be purged upon account termination, subject to legal overrides.
7. Rights of the Data Subject
You possess robust, non-waivable statutory data rights under Art. 15-22 of the GDPR and Article 11 of the KVKK. You have the right to request:
- Access to and copies of your stored personal profile data.
- Rectification of outdated, inaccurate, or incomplete information (e.g., banking updates).
- Erasure of your personal data ("Right to be Forgotten") upon the formal termination of our agreement, provided no legal retention laws bar the erasure.
- The Right to Object: You may object at any time to data processing carried out under our legitimate commercial interests.
To exercise these rights, please contact our data safety desk at info@istanbulwelcomecard.com.
8. Minor Policy & Terms Modifications
8.1 Corporate/Adult Restriction: This Program is strictly intended for B2B transactions executed by adult commercial operators. We do not knowingly collect, review, or store data from individuals under the age of 18.
8.2 Amendments: We reserve the right to modify or adjust this Affiliate Privacy Policy at any time to reflect software changes or updated legal codes. The newest version will instantly be published on this page, and your continued usage of the tracking platform represents formal assent.
