Legal & Compliance

Privacy Policy

We respect people's right to privacy. We want you to be familiar with how we collect, use and share information, and the options available to you.

Section 1

Does This Apply to You?

In certain cases we act as a "joint controller" of your personal information, while in others we act as a "processor". This privacy policy is relevant when we act as a joint controller, but not when we act as a processor.

Whenever we act as a processor you should see the controller's (the property where you saw the ad) privacy policy. For your convenience, here are links to the privacy policies of those controllers:


Section 2

Definitions

The following terms are used throughout this policy:

"Applicable Data Protection Law" means applicable legislation protecting data subjects' right to privacy with respect to the processing of personal data, including but not limited to the GDPR and any local implementation laws.

"Consent", "Data Subject", "Personal Data", "Personal Data Breach", "Processing", "Supervisory Authority", "Controller", "Processor" and other terms in the GDPR have the same meaning as set out in the GDPR.

"GDPR" means the EU General Data Protection Regulation 2016/679, including any future amendments such as, for example, those imposed by the Implementing Decision 914/2021/EU.


Section 3

General Provisions

3.1 Ongoing Compliance

Adnuntius shall process, and demand from all its customers to process, all Personal Data in accordance with Applicable Data Protection Law. Adnuntius' responsible person (Data Protection Officer) as specified here shall take responsibility for Adnuntius' ongoing compliance with this policy.

3.2 Data Minimization

Adnuntius shall ensure that personal data are adequate, relevant and limited to what is necessary in relation to specified, explicit and legitimate purposes for which they are processed, and not further processed in a manner that is incompatible with those purposes. Data collection will be limited to what is necessary for the purposes as they are described in this Data Protection Policy.

Processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with these purposes. Furthermore, Personal Data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organizational measures required by the GDPR in order to safeguard the rights and freedoms of individuals.

3.3 Purposes

Adnuntius processes data for specific purposes, as specified here.

3.4 Accuracy

Adnuntius shall take reasonable steps to ensure personal data is accurate. Where necessary for the lawful basis on which data is processed, steps shall be put in place to ensure that personal data is kept up to date. Any inaccurate data, having regard to the purposes for which they are processed, shall be erased or rectified without undue delay.

3.5 Place of Storage

Adnuntius stores all data in locations in compliance with Applicable Data Protection Law. These locations shall ensure appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage. An overview of where we process data is found here.

3.6 Security Measures

Adnuntius shall have technical and organizational security measures aimed at protecting personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. These measures shall ensure a level of security appropriate to the risk presented to the processing and the nature of the personal data to be protected having regard to the state of the art and the cost of their implementation. Adnuntius shall limit access to the personal data to relevant personnel, and ensure that all personnel authorized to process the personal data have committed themselves to confidentiality.

3.7 Partners

Adnuntius works with partners that act as sub-processors of data. In cases where partners are involved, we shall ensure that we have data processing agreements in place that help ensure that these partners comply with Applicable Data Protection Law, meet the same requirements as we do, and provide industry-leading security.

3.8 Breach

Adnuntius shall have in place robust breach detection, investigation and internal reporting procedures. In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data, Adnuntius shall without undue delay assess the risk to people's rights and freedom, and if appropriate, report this breach as follows:

  • Within 72 hours of becoming aware of the breach, Adnuntius shall report that breach to supervisory authorities.
  • If the breach is likely to result in a high risk of adversely affecting individuals' rights and freedoms, Adnuntius shall also inform those individuals without undue delay.
  • Adnuntius shall also keep a record of any Personal Data breaches, regardless of whether we are required to notify.

In case of a data breach resulting in unauthorized disclosure of personal data, Adnuntius shall without undue delay restore appropriate security levels, and rectify any errors resulting in the breach.


Section 4

Provisions Specific to the Adnuntius.com Website

Adnuntius.com, our company website, is hosted on HubSpot. It collects personal data to power our site analytics, including (1) information about your browser, network, and device, (2) web pages you visited prior to coming to this website, and (3) your IP address. This information may also include details about your use of this website, including clicks, internal links, pages visited, scrolling, searches and timestamps.

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. Certain functional and required cookies are always used, which allow HubSpot, our hosting platform, to securely serve this website to you. Analytics and performance cookies are used on this site only when you acknowledge our cookie banner. We use analytics cookies to view site traffic, activity, and other data.

For further information about the cookies HubSpot sets, see HubSpot's cookie documentation.


Section 5

Provisions Specific to the Adnuntius Platform

5.1 Consumer Data

We deliver technologies that enable our customers to activate user information for advertising, analysis and personalization purposes. We use our own and partners' technologies to deliver this value proposition to our customers.

If our customers are required by Applicable data protection law to inform you about the Personal Data collected and used, we demand that they inform you, and if Applicable Data Protection Law requires it, enable you to opt in or out of being tracked for specific purposes. However, you can also choose whether or not to be tracked by Adnuntius (regardless of domain) here:

5.2 Consent vs Legitimate Interest

Adnuntius is compliant with IAB's Transparency and Consent Framework (TCF2.0), with vendor IDs 855 and 235 (the latter is for our CMP, which we offer to customers). We rely on the following purposes and legal bases for each:

  • Store and/or access information on a device: Consent as sole legal basis.
  • Use limited data to select advertising: Consent or legitimate interest as a legal basis; default legal basis is Legitimate Interest. We allow for legitimate interest as opt-in by default (but allow users to opt out), because the "limited data" we use involves no personally identifiable information. An example of this is information about the page visited, for example keywords, where we identify the content of the page, but do not store any of that information to a user profile.
  • Create profiles for personalised advertising: Consent as sole legal basis.
  • Use profiles to select personalised advertising: Consent as sole legal basis.
  • Measure advertising performance: Consent or legitimate interest as a legal basis; default legal basis is Legitimate Interest. We allow for legitimate interest as opt-in by default (but allow users to opt out), because the "limited data" we use involves no personally identifiable information. An example of this is counting how many times an ad has been shown on a page (an "ad impression"); we allow this to be counted, as long as it is not connected to any cookie, user or browser.

5.3 Admin Interface

If you are a customer of Adnuntius and use one of our services, you likely share some information with us such as email address and name for logging into the services. We use this information to authenticate you as a user. All information we gather is described here. If you want us to completely remove your login information, please contact us and provide your name, email and company name.

5.4 Ad Serving Domains

Here is a list of the domains we use for ad serving and data:

  • Ad serving: delivery.adnuntius.com
  • Ad serving: europe.delivery.adnuntius.com
  • Ad serving: limited.delivery.adnuntius.com
  • Ad serving: limited.europe.delivery.adnuntius.com
  • Ad serving: ads.adnuntius.delivery
  • Data collection and user tracking: data.adnuntius.com
  • Static assets (no user tracking): cdn.adnuntius.com
  • Static assets (no user tracking): assets.adnuntius.com
  • Static assets (no user tracking): assets2.adnuntius.com

Section 6

Provisions Specific to Our Efficiency and Communication Tools

In order to effectively communicate with customers and prospects we use a CRM system, an invoicing tool, and an email service provider.

We collect certain Personal Data to have a structured sales process where contact information to prospects are gathered in one place, to contact potential customers, and to market news and updates to existing and prospective customers. The personal data collected consists of names, phone numbers and/or email addresses.

If you do not wish to receive newsletters you can opt out of receiving future emails by clicking to opt out directly in any newsletter that we send to you, or letting us know by responding to the email. If you would like us to remove personal information about you altogether you can send us an email.