Privacy Notice
for Influencer Card and influencer dashboard
Effective as of April 2026
1. Who processes your data
The data controller is:
Cookielab s.r.o.
Company ID No.: 06809804
Registered seat: Pobřežní 249/46, Karlín, 186 00 Prague 8
(“Cookielab”)
Contact e-mail for privacy-related questions: privacy@cookielab.io
2. What this notice covers
This notice explains how Cookielab processes personal data of the influencer and, where relevant, other individuals appearing in the content of connected accounts in connection with the connection of an account to the Influencer Card solution and the use of the related dashboard. This reflects the intended consent flow and consent recordkeeping described in the source materials.
3. What data may be processed
Cookielab may process, in particular, the following categories of data:
- identification and contact details of the influencer;
- data relating to connected accounts and profiles;
- public and non-public data available through the connected account integration;
- content published on the connected accounts, including posts, stories, reels, videos, comments, captions, hashtags, tags and metadata;
- analytical and performance data such as reach, impressions, engagement, audience data, saves, shares, clicks and similar metrics;
- technical and operational data, including logs, timestamps, device or session identifiers and records of consent being granted or withdrawn;
- data concerning third parties, where such third parties appear in the influencer's content.
4. Why we use the data
Cookielab may use personal data for the following purposes in particular:
- setting up and operating the account connection;
- making the dashboard available to the influencer;
- analytics, reporting, benchmarking and performance comparison;
- presenting relevant outputs to Cookielab's business partners and clients;
- enabling business matching between the influencer and brands or sponsors;
- technical administration, security, audit, troubleshooting and consent recordkeeping;
- protection of Cookielab's rights and defence of legal claims;
- compliance with legal and contractual obligations;
- internal development and improvement of products and analytical models to the extent legally permissible.
5. Legal bases for processing
We process personal data primarily on the following legal bases:
a) consent, granted by the influencer when connecting the account, in particular for the collection, monitoring, analysis and sharing of data from the connected accounts;
b) performance of a contract or taking steps at the data subject's request prior to entering into a contract, where relevant for making the dashboard and related services available;
c) Cookielab's legitimate interests, in particular system security, technical logging, compliance recordkeeping, protection of rights and defence of legal claims;
d) compliance with legal obligations, where retention or disclosure of certain data is required by law.
6. Who may receive the data
Personal data may be disclosed or made available in particular to:
- Cookielab's employees and contractors;
- hosting, infrastructure, analytics and support providers;
- Cookielab's business partners;
- Cookielab's clients;
- clients of Cookielab's business partners;
- advisers, auditors, legal counsel or public authorities where necessary.
If data was validly disclosed to third parties, exported, downloaded, archived or otherwise taken outside Cookielab's direct control while the consent was in effect, Cookielab may not be able to ensure its complete deletion.
7. How long we keep the data
We keep the data for the duration of the account connection and thereafter for as long as necessary to:
- evidence the consent granted and its scope;
- comply with legal and contractual obligations;
- handle disputes, complaints, audits and inspections;
- protect Cookielab's legitimate interests;
- operate backups, logs and retention layers where immediate deletion is not reasonably possible.
If the influencer withdraws consent, Cookielab will stop further active collection of data where technically and contractually possible and will delete or anonymise data under its direct control unless further retention is necessary to comply with legal obligations, protect Cookielab's legitimate interests, defend legal claims or perform contractual obligations towards persons to whom the data was made available while the consent was valid.
8. Your rights
To the extent provided by applicable law, you may request in particular:
- access to your personal data;
- rectification of inaccurate data;
- erasure or restriction of processing;
- objection to certain types of processing;
- data portability, where applicable;
- withdrawal of consent at any time for the future.
If you believe the processing violates applicable law, you may lodge a complaint with the competent supervisory authority.
9. Consent records and technical logs
Cookielab may retain a record of the consent granted, its wording and scope, timestamp, technical identifier, the flow used and any subsequent changes or withdrawals in order to demonstrate when and to what the influencer consented. Consent evidence and workflow tracking are expressly contemplated in the source materials.
10. Changes to this notice
Cookielab may reasonably update this notice from time to time. The current version will always be made available through the relevant link in the app or dashboard.