1. Our Commitment to Data Privacy
The security of personal information relating to our clients and other end users is treated as a matter of critical importance within adMarketplace. adMarketplace follows industry best practices for stewardship of data, including transparency, accountability, and choice regarding the collection, use, and disclosure of information. adMarketplace is committed to protecting the data from any users of our services and our partners and maintaining compliance with all applicable laws, including the EU’s General Data Protection Regulation ("GDPR"). As our company, technology, and services evolve, this Privacy Notice may be revised to reflect those changes. Notice of such amendments will be posted as an updated Privacy Notice on this website. Please review this Privacy Notice periodically in order to keep up to date with any modifications.
2. Who is adMarketplace?
The entity that decides how and for what purpose data is processed (also referred to as a "data controller") is:
Inc. 1385 Broadway,
19th Floor New York, NY 10018 USA
Tel. +1 212 925 2022
We have also appointed a representative in the European Union who can be contacted as follows:
adMarketplace UK Limited
New Penderel House, 4th Floor
283-288 High Holborn,
London WC1V 7HP United Kingdom
Tel. +44 20 7404 4140
3. Purposes of and Legal Bases for Data Processing
adMarketplace uses personal data relating to identifiable individuals (“personal data”) as set out below:
We ensure ads comply with applicable regulations and our obligations, to provide our customers with reports to analyze their campaigns (such as which ads were delivered and the number of clicks) and to detect and prevent fraud.
Using IP addresses helps us ensure ads are running in permitted territories, to better place ads, and flag fraudulent traffic. Cookies may be used to track how you interact with the advertisement and the publisher’s website (please see section 10 below).
This Privacy Notice does not apply to personal data processing that relates to our employees or other staff, or to applicants for positions with any of our group of companies, as these activities are governed by separate privacy notices. Please contact our HR department for more information.
4. What Personal Data do we Collect?
adMarketplace applies commercially reasonable security measures to protect data from unauthorized access, corruption or loss. These include storing information in databases which are protected by security measures such as password protection and encryption at rest using Transport Layer Security technology (TLS), so that even if the data is improperly accessed, it is less likely to be in an intelligible format. When no longer required, this data is moved to our secure archive server, also encrypted and password protected and only accessed for regulatory, legal or business reasons.
6. Third Parties
We may provide data for specific purposes to data processors (e.g. for storage, analytics, or fraud detection), especially our publisher partners, agencies and advertisers. Our contracts for these services comply with the Privacy Shield Principles for onward data transfers, including obligations to provide the same level of protection.
We may also disclose your personal information, where we believe this to be necessary or appropriate: (a) under applicable local, national, or international laws; (b) to comply with legal processes; (c) to respond to requests from any public and government authorities; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our group companies; (f) to protect our rights, privacy, safety or property, and/or that of our group companies, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain
Although this website contains links to other websites, please be aware that we do not endorse and are not responsible for the privacy practices of those, or any other sites. If you follow a link to another website you should carefully read their privacy notice and terms and conditions.
Publishers, agencies or advertisers with whom we work may use additional cookies, web beacons and other technology to collect information about you, including for advertising purposes. adMarketplace does not control publishers’ or advertisers’ use of such technology. To learn about how a particular publisher may use your information, you should read their privacy notices and terms and conditions.
7. International Data Transfers
adMarketplace stores and process data in the USA. adMarketplace complies with the requirements of the EU-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from customers in the European Union and EEA member countries. Data from the UK is specifically included for such proposes. For the purposes of enforcing compliance with the Privacy Shield, we are subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission. adMarketplace has certified that it adheres to the Privacy Shield Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, recourse, enforcement and liability.
adMarketplace does not knowingly or specifically collect information about children under the age of 13. If you believe that we have mistakenly or unintentionally collected such information, please notify us at firstname.lastname@example.org
9. Retention of Data
We retain personal data for as long as necessary for the purpose provided.
For internet users to whom we show ads, we keep this for up to sixty-one (61) days for advertising purposes. Aggregated and anonymized or statistical data may be retained for a longer period for reporting to and billing our customers.
For website visitors we may retain data for as long as it takes to answer your queries. We may also continue to use data in aggregated and anonymized form to analyze and improve our website and products.
For business contacts, data will normally be kept for the duration of any contractual relationship and for six years after it ends (in order to be in a position to address any legal claims that could be made). We may need to keep data for longer for legal compliance, accounting, tax or recordkeeping purposes, in which case it will be kept and used only for such purposes
If we don’t have a contractual relationship then we will regularly review the data and delete it when no longer necessary for the original purpose, but we will retain it for as long as we are in contact (e.g. if you have subscribed to a newsletter or other publications from us, or we are evaluating a business relationship).
A cookie is a small piece of data sent from a website and stored in a user’s web browser. When the user loads a website that is set up to react to that cookie, the browser sends cookie information to the server and the website that it recognizes the user.
You can find more information about different types of cookies at allaboutcookies.org.
For opting out from mobile devices please review your privacy control settings. For more information visit: https://www.networkadvertising.org/mobile-choice
11. GDPR Rights
If you are in the EEA, including in the EU or the UK, you have various rights in relation to your personal data which may include the rights:
to request access to it
to request rectification of incorrect data
to ask for it to be erased (the "right to be forgotten")
to object to its processing
to ask for a copy to take to another service provider ("data portability").
If our data processing is based on your consent, then you can always withdraw that consent (but any processing that took place before the withdrawal will still be legal).
If you request that data should be erased, the usual method for this is to remove all personally identifying elements so that the data is permanently anonymized and cannot be traced back to you.
In case of any issue, please contact us using the details in this Notice and we will help as far as we can. If you believe that we have not respected your rights then you also have a right to make a complaint to the Supervisory Authority in your country (e.g. in the UK, the Information Commissioner’s Office: www.ico.org.uk)
You may ask to exercise any of your rights by submitting a request to email@example.com or using the Contact Request Form.
12. EU-U.S. Privacy Shield
To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov
Any questions or complaints concerning our Privacy Shield compliance may be directed to firstname.lastname@example.org. If we have not been able to satisfactorily resolve the issue, then, you may submit your complaint to JAMS using this link:
https://www.jamsadr.com/eu-us-privacy-shield, adMarketplace’s designated Privacy Shield dispute resolution provider. Under certain conditions specified by the applicable Privacy Shield Principles, you may also be able to invoke binding arbitration to resolve your complaint.
Your rights under the CCPA:
Your rights under the CCPA can broadly be divided into the following categories: (1) right to notice, (2) right to access, (3) right to opt-out (or right to opt-in), (4) right to request deletion, and (5) right to equal services and prices.
Right to notice: Under the CCPA, businesses must inform consumers at or before the point of collection what categories of personal information will be collected and the purposes for which these categories will be used.
Right to access: Consumers have the right to request that a business disclose the categories of personal information collected; the categories of sources from which personal information is collected; the business or commercial purpose; the categories of third parties with which the business shares personal information; and the specific pieces of personal information the business holds about a consumer. If a business sells personal information or discloses it for business purposes, consumers have the right to request the categories of information so sold or disclosed.
Right to opt-out: Consumers have the right—at any time—to direct businesses that sell personal information about the consumer to third parties to stop this sale, known as the right to opt-out. If a consumer is a minor, the CCPA provides for a right to opt-in to the sale of data (exercised by the minor if the consumer is between 13 and 16 years of age, or by the minor’s parent or guardian if the consumer is under 13 years old). Businesses must wait at least 12 months before asking consumers to opt back in.
Right to request deletion: Consumers also have the right to request the deletion of personal information, but only where that information was collected from the consumer. Like the right to erasure under the GDPR, this right is subject to exceptions. For instance, businesses need not delete personal information necessary for detecting security incidents, exercising free speech, protecting or defending against legal claims, or—in what is potentially a broad and likely contentious category—for internal uses reasonably aligned with the consumer’s expectations.
Right to equal services and prices: The CCPA prohibits businesses from discriminating against consumers by denying goods or services, charging a different price or rate for goods or services, providing a different level or quality of goods or services, or suggesting that they will do any of these things based upon a consumer’s exercise of any CCPA rights. Put differently, consumers have a right to equal services and prices.
Exercising your rights under the CCPA:
According the law (see paragraph above), you are entitled to request specific pieces of personal information (as defined under the CCPA) that we have about you, the business purpose for which the personal information was collected, categories of personal information, categories of sources from which the personal information was collected, categories of personal information that we either shared, transferred, sold with a business purpose, categories of those third parties to which the personal information was sold for a business purpose.
If you want to do such a request, you can write to email@example.com and we will respond within 45 days as per the law.
We reserve the right to verify your identity if you make such a request.
However, we may not be able to respond to your request if it goes against applicable law. (Please note that we do transfer personal information collected through our network of partners to third parties and as such are considered as having disclosed or sold data (as defined under the CCPA) over the past twelve months.)
Opt-Out Request Form Effective Date: Jan 1st, 2020
Updated: Jan 1st 2020