Geminos Connect

Privacy Notice for Geminos Connect

Last updated: December 2025

I. Information on the processing of your data under Art. 13 GDPR

1. Controller and data protection contact

The controller for data processing within the Geminos Connect platform is:

Geminos – Amelie & Leena Kaijo GbR
Eichendorffstraße 5
48291 Telgte
Email: hello@geminosconnect.info

Data protection contact:
hello@geminosconnect.info
or by post to: Geminos – Amelie & Leena Kaijo GbR, Mika Kaijo, Eichendorffstraße 5, 48291 Telgte.

2. Data processed when visiting the website and portal

a. What data is processed and for what purpose?

Whenever you access the Geminos Connect website or portal, the following data is collected automatically:

  • Date and time of access
  • IP address (truncated or hashed depending on the platform area)
  • Hostname of the accessing device
  • Website from which access occurs
  • Subpages accessed
  • Status of the request (success/failure)
  • Transferred data volume
  • Browser type and version
  • User operating system

Purposes of processing:

  • Ensure technical operation of the website
  • Deliver content
  • Maintain system security
  • Detect abuse and prevent fraud

This data is technically required to display the website and portal.

b. Legal basis

Art. 6(1)(f) GDPR (legitimate interest in providing a secure, functional web offering).

c. Storage duration

  • Session data: deleted at the end of the session
  • Log files: accessible only to administrators, retained for a maximum of 4 weeks

3. Data processed during registration, login, and use of Geminos Connect

a. Registration and account data

When registering as a creator or company, we process:

  • First and last name
  • Company name (for companies)
  • Email address
  • Country/region of residence or business
  • Website URL
  • Password (encrypted)
  • LinkedIn profile (for creators)
  • Gender (creator)
  • Language preference
  • Tax information (upon first payout)
  • Double opt-in confirmation

Purpose: Create user accounts, identify users, and handle the contractual relationship.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

b. Matching profile / questionnaire data

Creators answer questions on:

  • Industries
  • Topics
  • Target groups
  • Languages
  • Posting frequency
  • Personal preferences

Companies provide:

  • Industry
  • Target groups
  • Campaign data and descriptions
  • Logo and company profile

Purpose: Run the automated matching process (“Perfect Match”).

Legal basis: Art. 6(1)(b) GDPR.

c. Tracking and click data

For compensation and fraud prevention we process:

  • IP hash
  • Device fingerprints
  • Timestamps
  • Click source
  • UTM parameters
  • Campaign ID
  • Association with creator and company

Purpose: Billing, fraud detection, platform functionality.

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.

d. Payment data (Stripe & other payment providers)

Geminos Connect uses Stripe for payments and billing. The following may be processed:

  • Bank details (IBAN/BIC)
  • PayPal address (if chosen)
  • Successful/failed transactions
  • Payout amounts
  • Transaction IDs

Purpose: Execute payments.

Legal basis: Art. 6(1)(b) GDPR. Stripe acts as an independent controller. See Stripe’s privacy notice at https://stripe.com/privacy

e. Support data (AI chat + ticket system)

When using the AI support bot, we process:

  • Entered text
  • Technical data (browser, time, language)
  • Created support tickets

Purpose: Handle support requests and forward them to human support.

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.

4. Data subject rights

  • Right of access (Art. 15 GDPR)
  • Right to object (see section II)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to lodge a complaint with the competent supervisory authority: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia – https://www.ldi.nrw.de/kontakt/ihre-beschwerde
  • Right to data portability (Art. 20 GDPR), where technically feasible.

II. Right to object under Art. 21(1) GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR.

We will then no longer process your personal data unless:

  • there are compelling legitimate grounds for the processing, or
  • the processing serves the establishment, exercise, or defense of legal claims.

The collection of technical data necessary to provide the website is mandatory and cannot be opted out.