Privacy & GDPR

Cition is committed to protecting your personal data and to complying with the EU General Data Protection Regulation (GDPR) and applicable data-protection law. This notice describes how the partner portal processes data about referrals.

1. Controller

Cition (“we”). Contact hello@cition.net or your account manager.

2. Data we process

• Account — your name, email and password (stored only as a salted hash, never in clear text).
• Technical data — IP address and request logs, for security.

3. Why we process it & legal basis

• To operate and administer the referral relationship — performance of a contract (Art. 6(1)(b)).
• To meet our accounting and other legal obligations — legal obligation (Art. 6(1)(c)).
• To prevent fraud and keep the service secure — legitimate interest (Art. 6(1)(f)).

4. Sharing & processors

We share data only with service providers that help us run the portal — such as hosting and, where used, email delivery. They act on our instructions under appropriate agreements. We never sell your data.

5. Retention

We keep your data while your account is active and for as long as required by law; it is erased on request where no legal obligation requires us to keep it.

6. Your rights

You may access, correct, erase, restrict, object to or port your data, and withdraw consent at any time. Email hello@cition.net to exercise them. You may also lodge a complaint with your local data-protection supervisory authority.

7. Security

We protect your data with encryption in transit (HTTPS/HSTS), scrypt-hashed passwords, role-based access control, brute-force protection and session safeguards.

8. Cookies

The portal uses one strictly-necessary session cookie for sign-in. No tracking or advertising cookies.