Aimera is GDPR friendly and requires partners to comply with data protection regulations.
The majority of challenges offered to members are GDPR agnostic as they do not involve any personal data exchange between Aimera and partners.
However, some challenges are designed for personal data exchange. In these cases it is mandatory to inform individuals about personal data exchange, management and storage.
Data sharing consent challenge is offering an individual to share their personal data (phone or email) with the partner. The partner must provide a link to its own data protection policy and clearly explain the purpose of personal data usage.
API based challenges are designed to reward individuals for actions outside Aimera. To identify the individual phone, email or other identifier is used. The person must be acknowledged with Aimera Privacy policy and informed about the mentioned identifier passed to Aimera on the partner side.