Privacy Policy

To address your enquiries

If you contact us about our services, the forms you complete or the emails you send may include information about you, such as your name, your email address and your enquiry.

In line with the legitimate interest we have in promoting and operating our business, we will process your enquiries to reply and provide you with information about the services we offer.

To send you news and updates

If you ask to be added to our mailing list, we will keep you updated with information on news by email unless you would like to be removed from that list (in which case please let us know by clicking unsubscribe at the bottom of any marketing email that you receive).

We use Salesforce Marketing Cloud Account Engagement (“Pardot”), Salesforce Inc and its affiliate entities, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 9410, USA, for sending marketing emails and newsletters.

Pardot’s privacy policy can be found here.

For the sending of newsletters, we further use "MailChimp", a newsletter platform. The e-mail addresses of our newsletter recipients, as well as further data described in the context of this information, are being stored on the servers of MailChimp in the USA. MailChimp uses this information to send out and evaluate the newsletters on our behalf. In addition, MailChimp can use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter. However, MailChimp does not use the data of our email recipients to contact them independently or transfer data to third parties.

MailChimp's privacy policy can be found here.

Social plugins

Awin participates in and markets via social networks and has implemented certain social plugins on our websites. All social media plugins are used in the pursuit of our legitimate interest of marketing our business and communicating with our business partners and the public.

Visitors wishing to avoid connecting to plugins used on our websites can install privacy-enhancing browser plugins, such as Ghostery (https://www.ghostery.com/), NoScript (https://noscript.net/) or DoNotTrackMe (https://www.abine.com/index.html).

When you enter a page on our website that contains a social network plugin, your browser or app will establish a direct connection to the social network’s servers. The information that your browser has visited the Awin page will be transmitted to the social network, even if you do not have an account with that social network or are not logged into your account. If you are logged in to your account at the same time, a page impression may be assigned to your profile there.

Our website connects to the following social networks:

• Facebook, see Facebook’s Data Privacy Policy 
• Twitter, see Twitter’s Privacy Policy
• LinkedIn, see LinkedIn's Privacy Policy 
• Disqus, see Disqus Privacy Policy 
• YouTube, see Youtube’s Privacy policy 

Website Analytics

We use Google Analytics on our website for anonymous reporting of website usage.  If you would like to opt-out of Google Analytics monitoring your behaviour on our website please use this link: https://tools.google.com/dlpage/gaoptout/.

Website chat functionality

We have a live chat functionality in order to provide you with further information on Awin’s services following-up your enquiry and upon your consent. The personal data collected in the course of this chat function are the following: name, email address, website URL. We use Salesforce for this chat functionality including Sneak Peak. You may find Salesforce’s Privacy Policy here. The consent you provide for this service can be withdrawn at any time via global-livechat@awin.com.

We process personal data for the legitimate interests of ensuring that use of our services is lawful and non-fraudulent, does not disrupt the operation of our services, does not harass our staff or other individuals, and to enforce our legal rights and comply with our legal obligations.   

Where we reasonably believe that you are or may be in breach of any of the applicable laws, we may use your personal data to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.

Group members, personnel, service providers: We keep your personal data confidential, but disclose it to our group members, our personnel, suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this Privacy Policy. However, this is on the basis that they do not make independent use of the personal data, and have agreed to safeguard it. Activities which are carried out by third party service providers include: CRM management software (Pardot, MailChimp), website hosting, website analytics and IT support.   

Merger or acquisition: If we are involved in a merger, acquisition or sale of all or a portion of our assets, you will be notified via email, account message and/or a prominent notice on our website of any change in ownership or uses of personal data, as well as any choices you may have regarding this personal data.  

Required by law: In addition, we disclose your personal data to the extent that we are required to do so by law (e.g. to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).  

Enforcement: We disclose your personal data to third parties in order to enforce or apply the terms of agreements, to investigate potential breaches or to protect the rights, property or safety of Awin, our customers or others. 

We will take appropriate technical and organisational precautions to prevent the loss, misuse or alteration of your personal data.

Please be aware that, although we endeavour to provide security for information we process and maintain, no security system can prevent all potential security breaches.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.   

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We will honour your rights under applicable data protection laws. These rights are not absolute and they do not always apply in all cases. You may:  

• request access to your personal data and information related to our use and processing of your personal data;  
• request the correction or deletion of your personal data;  
• request that we restrict our use of your personal data;  
• request a machine-readable copy of your personal data or that your personal data be transferred to other IT systems;  

• object to the processing of your personal data; and/or  
• withdraw your consent to our use of your personal data at any time where we rely on your consent to use or process that personal data.  

   Please send your requests to global-privacy@awin.com.   

If you are unhappy with the way we are processing your personal data, please let us know by contacting us. If you do not agree with the way we have processed your data or responded to your concerns, you can submit a complaint to a Data Protection Supervisory Authority.

We are established in the following countries and in the course of business we may transfer personal data to other entities in our group in those countries. We also transmit your data to our subcontracted service providers, both in and out of the EU.  

Where we transfer your personal data to entities in our group or service providers in countries which have not been deemed to have an adequate level of protection under an adequacy decision of the EU Commission, we have put in place specific contracts containing the EU Commission’s standard contractual clauses (the “SCCs”) to ensure that your personal data is treated by all parties in a way that is consistent with and which respects laws on data protection, in particular the GDPR.  

If you require further information about these protective measures, please contact global-privacy@awin.com. 

This Privacy Policy may be updated from time to time. We will notify you of any changes by posting the new policy here.

Awin primarily uses end user data for the purpose of tracking an end user from a Publisher to an Advertiser. Tracking enables Awin and ShareASale to see that an end user has visited a publisher's service, found a product/service, and clicked the link to be taken to the advertiser's service to review or purchase the product/service.

The purpose of tracking is to attribute sales and marketing effort by a Publisher to a particular transaction, to enable Advertisers to reward Publishers on a per transaction basis. Tracking also allows Awin to provide Publishers and Advertisers with related reports. The majority of these reports contain only aggregated statistical data.

Awin doesn’t know who the end user is, simply that the same end user started their journey with the Publisher and completed it with the Advertiser and that the affiliate marketing campaign was therefore successful in respect of that end user.

By maintaining a limited user profile which does not reveal an end user’s name or identity, Awin can also understand an end user journey when it starts on one device, and ends on a different device. Through this functionality, Awin can understand whether a referral is commenced on one device and completed on another device. The profile is only used to attribute sales and marketing effort to a Publisher, even if the end user has changed devices before completing a transaction.

Awin permits Publishers to enquire as to whether an action by a user ought to have generated a commission for that Publisher. This necessitates the sharing of information, between Publishers and Advertisers. Advertisers use the information provided by Publishers to verify against their own records. Awin enables this data sharing and the payment of any commission due to the Publisher as a result.

The main technologies used for Awin’s tracking are Tracking Domain Cookies, Journey Tags and Device Fingerprinting.

Awin Tracking Domain Cookies: These are cookies served by Awin’s own domain when an end user clicks on an advertisement displayed by a Publisher. We use this information to understand which end users are referred by which Publishers to which Advertiser. Please find some general information on cookies here. Our tracking cookies are listed here.

Advertiser Journey Tag: This is JavaScript code integrated into the Advertiser’s service to enable Awin to receive transactional information from Advertisers. Awin uses this information to record, validate and report the completion of transactions, for the purposes of apportioning commissions to Publishers.

Fingerprinting: This is a method by which Awin can uniquely identify a device by considering certain attributes of the browser or the device (incl. screen size/resolution and user configurations).

We take care to collect only the data that we need. The majority of the data Awin uses is machine generated. It lets us single out a person but it does not reveal who that person is. We do not use this data to make predictions or evaluations of users’ interest or personalities.

Awin is one part of the affiliate marketing ecosystem (see our Agreement with Advertisers and Publishers below) and does not always have absolute control over the personal data that it receives from users, Publishers or Advertisers.

Awin participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Awin’s identification number within the framework is: 907.

Awin stores an individual sequence of figures in respect of a transaction that does not reveal the name of a particular end user and contains information on the Advertiser’s campaign, the Publisher, the end user action (i.e. a click or a view and in which country it occurred), and the device that is used.

Awin also receives limited transactional information via the Journey Tag, to confirm that a transaction has occurred and carry out accurate commission allocating, billing and reporting. Such information includes the order value, whether a voucher has been used, product type, and sales channel.

Awin's data processing activities relating to end user data, do not require the direct identification of an individual and therefore Awin mostly holds what is known as “pseudonymous” data in this respect. Pseudonymisation is privacy-enhancing. It is the separation of data from direct identifiers so that data can no longer be attributed to a specific individual without the use of additional information. Pseudonymisation, therefore, reduces the risks associated with data processing, while also maintaining the data’s utility.

We have carried out a balancing test and have identified legitimate interest as a basis for processing user data for the purposes set out in this section of the Privacy Policy.

When assessing Awin’s reliance on legitimate interest, the interests of the full affiliate ecosystem were considered. A balancing test was carried out and it was confirmed that tracking carries a low risk of undue negative impact on the end user’s interests or fundamental rights and freedoms. Legitimate interests are not limited to the interests of Awin, but can be legitimate interests of a third party or to society as a whole. In the context of our service, we consider that:

• Advertisers have an interest in carrying on an online advertising campaign, paid for on a performance basis, whereby third party referrers of customers or potential customers of the Advertiser are compensated for referrals which generate revenue for the Advertiser or which undertake another act desired by the Advertiser.
• Publishers have an interest in monetising their content, services or other aspects of the Publisher website by generating advertising revenue which is paid on a performance basis.
• Advertisers and publishers have an interest in obtaining reports relevant to their respective business revenue generation.
• Awin has an interest in operating an affiliate marketing platform, and to provide technology, services and reporting, in return for payment from Advertisers.
• Awin, Advertisers, Publishers and society at large have an interest in preventing fraud, misuse of services, or money laundering.

Awin's affiliate marketing network connects Advertisers and Publishers, as well as third-party technology partners in some instances, so that they can work together to run affiliate marketing campaigns.   

In running the campaign each party plays their part in pursuing the common purposes and each party can make certain decisions about the way data is used.   

Awin contractually requires that participation in its network is compliant with data protection law and that participants each fulfil their obligations to respond to requests to exercise data subject rights. You can approach each party, if you intend to exercise your rights in respect of the data which that party controls.   

Awin works with these Advertisers. For guidance on how to make a request to a Publisher or an Advertiser, please check their respective privacy notices. For more information of how to make a request to Awin, “What rights do you have in respect of user data” below.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.   

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.  

As a general rule, Awin retains tracking data for 36 months after collection.

We will honour your rights under applicable data protection laws. These rights are not absolute and they do not always apply in all cases. If you wish to make a request in respect of your user data, as described in this section of the Privacy Policy, please contact global-privacy@awin.com   

You may:  

• request access to your personal data and information related to our use and processing of your personal data;  
• request the correction or deletion of your personal data;  
• request that we restrict our use of your personal data;  
• request a machine-readable copy of your personal data or that your personal data be transferred to other IT systems;  
• object to the processing of your personal data ; and  
• withdraw your consent to our use of your personal data at any time where we rely on your consent to use or process that personal data.  

Please note that, as described under “What data do we collect from users?”, Awin mostly holds what is known as “pseudonymous” data in respect of users. Pseudonymisation means that we may not be in a position to identify the individual behind the data we hold and that we therefore cannot provide them with access, rectification, erasure or data portability without the provision of additional data (for example your IP address, or device ID).

We process personal data for the legitimate interests of ensuring that use of our services is lawful and non-fraudulent, does not disrupt the operation of our services, does not harass our staff or other individuals, and to enforce our legal rights and comply with our legal obligations.   

Where we reasonably believe that you are or may be in breach of any of the applicable laws, we may use your personal data to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.

Partners on the Awin network: Your personal data may be shared to the extent necessary for us to provide our services (i.e. to advertisers and publishers and/or third-party technology partners engaged by those parties). 

Group members, personnel, service providers: We keep your personal data confidential, but disclose it to our group members, our personnel, suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this Privacy Policy. However, this is on the basis that they do not make independent use of the personal data, and have agreed to safeguard it. Activities which are carried out by third party service providers include: CRM management software (Pardot, MailChimp), website hosting, [website analytics] and IT support.   

Merger or acquisition: If we are involved in a merger, acquisition or sale of all or a portion of our assets, you will be notified via email, account message and/or a prominent notice on our website of any change in ownership or uses of personal data, as well as any choices you may have regarding this personal data.  

Required by law: In addition, we disclose your personal data to the extent that we are required to do so by law (e.g. to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).  

Enforcement: We disclose your personal data to third parties in order to enforce or apply the terms of agreements, to investigate potential breaches or to protect the rights, property or safety of Awin, our customers or others.

We will take appropriate technical and organisational precautions to prevent the loss, misuse or alteration of your personal data.

Please be aware that, although we endeavour to provide security for information we process and maintain, no security system can prevent all potential security breaches.

We are established in the following countries and in the course of business we may transfer personal data to other entities in our group in those countries. We also transmit your data to our subcontracted service providers, both in and out of the EU.  

Where we transfer your personal data to entities in our group or service providers in countries which have not been deemed to have an adequate level of protection under an adequacy decision of the EU Commission, we have put in place specific contracts containing the EU Commission’s standard contractual clauses (the “SCCs”) to ensure that your personal data is treated by all parties in a way that is consistent with and which respects laws on data protection, in particular the GDPR.  

If you require further information about these protective measures, please contact global-privacy@awin.com. 

This Privacy Policy may be updated from time to time. We will notify you of any changes by posting the new policy here.