Controller of Personal Data
The controller of the personal data provided in connection with the Partner Program is Hexa Prop Ltd., a company registered under Maltese law.
ADD Malta Level 2
Hardrocks Business Park, Triq Burmarrad, Naxxar, NXR 6345 Malta
Registration number: C 107882
VAT: MT 30856628

Purposes of Data Processing
The Provider processes personal data for the following purposes: (i) administration of the Partner Profile and fulfillment of the Provider’s obligations, (ii) compliance with legal obligations, particularly in accounting, taxation, and international sanctions, (iii) fraud prevention, and (iv) resolution of complaints and disputes and protection of the Provider’s legitimate interests.

Scope of Processed Personal Data
For the purposes listed above, we process the following personal data: identification data (name, date of birth, nationality, business, VAT ID), contact information (address, phone number, email), bank account number, billing information, data from international sanctions screenings, and content of mutual communications. Providing this data is voluntary; however, without it, a contractual relationship between you and the Provider cannot be established.

Recipients of Personal Data and Transfers to Third Countries
We may grant access to personal data to external legal advisors, accounting service providers, IT providers, and, in accordance with legal requirements, to public authorities upon specific request. In rare cases, personal data may be transferred to so-called third countries (countries outside the European Economic Area). In such cases, the Provider acts in compliance with legal requirements and uses the European Commission’s standard contractual clauses or other appropriate safeguards for data transfer.

Retention Period of Personal Data
The Provider retains personal data for the duration of the contractual relationship and for 10 years thereafter.

Automated Decision-Making Information
The Provider does not perform decision-making solely based on automated data processing, including profiling, that would have legal effects or similarly significant impacts on you.

Partner’s Rights
Regarding the processing of personal data, you have the following rights: (i) access to the personal data processed by the Provider, (ii) correction of personal data, (iii) deletion of personal data, (iv) restriction of data processing, (v) right to data portability, (vi) right to object to data processing based on legitimate interest or direct marketing, (vii) right to object to automated decision-making, and (viii) right to withdraw consent. You can exercise these rights by contacting the Provider at the following email address: [email protected]

Amendments to This Document
This document may be amended unilaterally from time to time.