Privacy in the Partner Area
DRAFT. Awaiting owner approval and legal review. Retention periods are a proposal and are not yet enforced automatically.
The Partner Area is a separate application, apart from the biro404.rs website. This page says what it stores, why and for how long.
Who is responsible
The controller is BIRO 404: NENAD JOKIĆ PR USLUGE PRIPREME ZA ŠTAMPU I KONSALTING SANCOM NOVI PAZAR · MB 65403340 · PIB 111428891. Questions and requests: studio@biro404.rs, +381 60 041 11 00.
Partner data
- Name, company or line of work, email, phone and a short description of your network, if you send them in an access request.
- Academy progress, your chosen path and the email from a new-link request.
- The access link and session are stored only as a hash; we cannot read the link again.
Client data in a referral
- Company, contact name, phone, email, description of the need, service, level of interest, consent note and optional budget, deadline and note. Reward records, if there is an agreement.
- Contacts are compared across referrals to detect duplicates; other partners do not see this.
- Send a referral only if the client has agreed that BIRO 404 may contact them about this need and knows you are sending it. Without that the form will not submit.
Purpose
Opening and managing access, processing referrals, contacting a client who agreed, and showing status to the partner. We do not sell data or use it for advertising.
Who else processes it
Cloudflare (hosting and D1 database) and Google Workspace (email). A partner sees only their own referrals; clients have no access to the Partner Area.
Proposed retention
- Unsent referral draft: 90 days after the last change.
- Rejected, duplicate or lost referral: contact details for 12 months, then deleted.
- Accepted referral: while the work and the written reward agreement last, then as tax obligations require.
- Rejected access request: 6 months. Partner account: 12 months after the cooperation ends.
- Technical request counter (shortened hash of the IP address): short-lived; entries older than an hour are removed on later requests.
Your rights
You may request access, correction or deletion, withdraw consent or object, including to the Serbian Commissioner for Information of Public Importance and Personal Data Protection. A client who says they do not want contact is removed from the referral.
Pilot rules
Access is opened personally, after a conversation. A partner does not promise a price, deadline or outcome. For most services the commission is 20 % of the contracted base; for some it is agreed in writing. It arises only once the client pays; payouts are not automatic, and the date and method go into a written agreement.