Privacy Policy of Orange Link Marketing B.V.
Effective date: 17 July 2026
1. Introduction and company information
This Privacy Policy explains how Orange Link Marketing B.V. (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data when you interact with us, use our services, visit our website, communicate with us, or otherwise engage with our partnership-marketing business.
Orange Link Marketing B.V. is the data controller for the processing of personal data described in this Privacy Policy.
Contact details:
- Company name: Orange Link Marketing B.V.
- Address: Keizersgracht 555, 1017 DR Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 794 6837
As a partnership-marketing business, Orange Link Marketing B.V. may process personal data in connection with lead generation, affiliate and partner campaigns, commercial communications, relationship management, analytics, attribution, fraud prevention, and related business operations.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your relationship with us and how you interact with our services:
- Identification data: name, surname, title, company name, role or job title.
- Contact data: email address, telephone number, postal address, business address.
- Communication data: messages, correspondence, call notes, support requests, meeting notes, and preferences.
- Business and partnership data: partner details, campaign information, lead information, referral data, performance metrics, contractual records, invoicing and payment-related information.
- Technical data: IP address, device identifiers, browser type, operating system, language settings, log files, and online identifiers.
- Usage data: pages visited, clicks, interaction patterns, referral sources, time spent, and similar analytics information.
- Marketing and preference data: consent status, opt-in/opt-out choices, communication preferences, and engagement data.
- Any other data you provide to us: information included in forms, surveys, event registrations, or similar submissions.
We may collect personal data directly from you, automatically through our websites and digital tools, from our business partners, from service providers, from publicly available sources, or from other lawful sources relevant to our activities.
Where required, we will process personal data in a manner consistent with applicable data protection principles, including fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our partnership-marketing services;
- to communicate with clients, prospects, partners, and website visitors;
- to assess, manage, and develop commercial partnerships;
- to generate, qualify, route, and analyse leads;
- to operate affiliate, referral, attribution, and campaign tracking programs;
- to administer contracts, billing, bookkeeping, and business records;
- to personalise and improve our services, content, and communications;
- to carry out analytics, performance measurement, and reporting;
- to detect, prevent, and investigate fraud, misuse, security incidents, and unlawful activity;
- to comply with legal obligations and regulatory requirements;
- to establish, exercise, or defend legal claims;
- to send marketing communications where permitted by law and subject to your choices;
- to maintain and secure our systems, networks, and operations.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the processing activity, the legal basis may include:
- Consent: where you have given clear consent for one or more specific purposes, such as receiving certain marketing communications or using non-essential cookies where applicable;
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or to take steps at your request before entering into a contract;
- Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided these interests are not overridden by your rights and freedoms. This may include partnership management, business development, analytics, fraud prevention, network security, and internal administration;
- Legal obligation: where processing is required to comply with applicable laws, regulations, tax rules, accounting obligations, or lawful requests from public authorities;
- Vital interests: where processing is necessary to protect someone’s life or physical integrity in exceptional cases.
Where we rely on legitimate interests, we carry out an assessment to balance our interests against your rights. Where consent is the legal basis, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
5. Data sharing and third parties
We may share personal data with third parties only where necessary and lawful. Such third parties may include:
- Service providers: hosting providers, IT support, cloud services, analytics tools, customer relationship management systems, communications tools, and security providers;
- Business partners and clients: where required to provide partnership-marketing services, administer campaigns, or fulfil contractual obligations;
- Professional advisers: lawyers, accountants, auditors, insurers, and other professional consultants;
- Payment and invoicing providers: where payment processing or financial administration is involved;
- Authorities and regulators: where disclosure is required by law, court order, or other lawful request;
- Successors in interest: in connection with a merger, acquisition, reorganisation, sale of assets, or similar corporate transaction.
We require third parties to process personal data in accordance with applicable data protection laws and, where relevant, contractual confidentiality and security obligations. We do not sell personal data in a manner prohibited by applicable law.
6. Data transfer to third countries
Where personal data is transferred outside the European Economic Area or to another jurisdiction with a different level of data protection, Orange Link Marketing B.V. will take appropriate safeguards to protect the data. These safeguards may include:
- adequacy decisions issued by competent authorities;
- standard contractual clauses or equivalent approved transfer mechanisms;
- supplementary technical and organisational measures where necessary;
- binding corporate rules or other legally recognised transfer instruments, where applicable.
You may contact us for further information about international data transfers and the safeguards we apply.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. The retention period depends on factors such as:
- the nature of the data and the purpose of processing;
- contractual requirements and business needs;
- statutory retention obligations;
- limitation periods for legal claims;
- security, audit, and compliance requirements.
When personal data is no longer needed, we will delete it, anonymise it, or securely archive it in accordance with applicable law and our internal retention procedures.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Right of access: to obtain confirmation as to whether we process your personal data and to receive a copy of that data;
- Right to rectification: to request correction of inaccurate or incomplete personal data;
- Right to erasure: to request deletion of personal data in certain circumstances;
- Right to restriction: to request restriction of processing in certain situations;
- Right to data portability: to receive certain personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible;
- Right to object: to object to processing based on legitimate interests and to object at any time to processing for direct marketing purposes;
- Right not to be subject to automated decision-making: where applicable, to request human review and to obtain meaningful information about the logic involved.
To exercise any of these rights, please contact us using the details set out below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
9. Withdrawal of consent
Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You may withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management mechanism made available in our communications, where applicable.
If you withdraw consent, we may still process your personal data if another lawful basis applies.
10. Right to complain
If you believe that our processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with a supervisory authority in the jurisdiction where you live, work, or where the alleged infringement occurred.
If you are located in the Netherlands, you may also contact the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
We encourage you to contact us first so that we can try to resolve your concern directly and promptly.
11. Data security
Orange Link Marketing B.V. implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and authentication measures;
- encryption where appropriate;
- network and system security controls;
- regular monitoring and logging;
- backup and recovery procedures;
- staff confidentiality obligations and security awareness;
- vendor and supplier security assessment where appropriate.
No method of transmission or storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security.
12. Contact information
If you have any questions about this Privacy Policy, our data processing practices, or your rights, please contact:
- Orange Link Marketing B.V.
- Address: Keizersgracht 555, 1017 DR Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 794 6837
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, legal requirements, or data processing practices. When we make changes, we will revise the effective date at the top of this document and, where appropriate, provide additional notice.
We encourage you to review this Privacy Policy periodically to stay informed about how Orange Link Marketing B.V. processes personal data.
By using our services or interacting with us, you acknowledge that you have read and understood this Privacy Policy.