Last Updated: June 2018
For guidance on how you can opt-out of the delivery of advertisements which are based on your information / browsing preferences, please see the section headed “Opting Out and Your Privacy Rights” below.
PART I. GENERAL
Our commitment to privacy
Introduction to dataxu
Advertising supports free content and experiences we all love on the web, social media platforms, connected television platforms and on Internet-enabled mobile devices such as smartphones and tablets. dataxu’s goal is to make advertising more effective by helping to display content that may be of interest to you. Relevant advertising is less annoying and assists the services that depend on advertising because advertisers pay more for effective content.
To deliver relevant advertising to you, we may collect information about your activity across multiple third-party websites or mobile applications. We may use this information to predict the types of ads that may interest you and to display advertising to you based on that information (“Interest-Based Advertising”). For example, if you visit multiple websites that feature articles about travel or you use a travel app, we may display travel-related ads to you on another website or app.
To learn more about Interest-Based Advertising and your choices with respect to it, please visit www.aboutads.info/consumers, https://www.networkadvertising.org/understanding-online-advertising/ and http://www.youronlinechoices.eu/
PART II. INFORMATION COLLECTION AND USE
What information do we collect via the Website and how do we use it?
Personal information that you provide voluntarily
Certain parts of our Website may ask you to provide personal information voluntarily: for example, we may ask you to provide your contact details in order to subscribe to marketing communications from us or to obtain content such as whitepapers and reports, and/or to submit enquiries to us. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
You may also voluntarily supply us with personal information when you submit information on our “Contact Us” page or when you leave a comment and your name on our blog).
When you provide personal information directly to us via the Website or email, it is used by dataxu solely for the purposes identified at the point at which you provide the information (e.g. for general marketing purposes or to notify you regarding updates to our products and services).
Personal information that we collect automatically
When you visit our Website, we may collect certain information automatically from your device. In some countries, including countries in the European Economic Area (“EEA”), this information may be considered personal information under applicable data protection laws.
Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked.
Collecting this information enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors.
Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “what technologies do we deploy to collect and use behavioral information?” below.
What information do we collect via the Platform?
dataxu does not collect health information or create data segments that are based upon sensitive information and we adhere to the codes and principles of the NAI, DAA and EDAA with respect to such activities. Outside of the EEA, Platform users may use general health-related segments which do not contain sensitive health data. Click here for a list of the standard health-related segments provided by third-party data providers.
We do not collect personal information such as your name, address, phone number, e-mail address, Social Security Number, credit card information, insurance plan numbers, financial account numbers or health related information. We do not link or combine personal information with Behavioral Information.
What information do our customers / partners collect via the Platform?
Sometimes our customers include their own (or their partners’) pixels or similar technologies within advertisements that dataxu serves to websites. This is in order for our customers to set and read their own cookies (which are not subject to the control of dataxu).
dataxu is not responsible for and cannot control the data collection and use practices of its customers. You should read the privacy policies of the websites you visit and the online services and interactive ads that you use in order to understand the type of information companies collect and how they use that information.
Third Party Data Sources
Our customers may purchase data from approved data vendors and will input that data into the Platform to perform online behavioral advertising. Dataxu only works with vendors or partners who represent and warrant that they will only provide data that has been collected in compliance with applicable law and self-regulatory guidelines, and on an opt-in basis wherever required.
How do we use Behavioral Information collected via the Platform?
We use Behavioral Information collected via the Platform for a variety of purposes, including to:
- deliver Interest-Based Advertising to websites and mobile applications on behalf of advertisers;
- enable our customers to determine which advertisement may be suitable to be delivered to you;
- to monitor the success of and manage advertising campaigns; and
- compile statistics, create reporting and analytics – all of which are done in the aggregate and without identifying you.
PART III. WHAT TECHNOLOGIES DO WE DEPLOY TO COLLECT AND USE BEHAVIORAL INFORMATION?
We use a variety of technologies on our Website and our Platform including cookies, pixel tags and scripts to collect and use Behavioral Information.
dataxu cookies may be served from any of the following domains: dataxu.net, us.dataxu.net, www.w55c.net, cdn.w55c.net, tags.w55c.net, cti.w55c.net, cts.w55c.net, ads.w55c.net, and i.w55c.net. For more information on our operation of these domains, click https://www.w55c.net/.
Pixel tags are small, invisible images on a webpage or other document. Pixel tags allow the operator of the webpage or other document, or a third party who serves the pixel tag, to set, read and modify cookies.
Our pixel tags allow dataxu cookies to be set, read and modified when you visit the websites of our partners. Our pixel tags also allow our partners to better understand how you interact with their websites by observing which pages on their websites are visited.
Server to server technology with third parties
We may synchronize Behavioral Information with the behavioral information of third parties (including cross-device identifiers as described below). We do not control the privacy practices of these third parties.
Cross-device and cross-app technology
We and our customers may use technology that establishes deterministic or statistical connections among related devices (such as smartphones, tablets, and computers) to deliver more relevant advertising to you and for advertising analytics and reporting purposes. For example, dataxu or its partners may match your devices if you log into the same online service on multiple devices or web browsers, or if your devices share similar attributes that support an inference that they are used by the same person or household. This means that information about your use of websites or applications on your current device may be combined with information from your other devices. This allows, for example, ads you see on your tablet to be based on activities you engaged in on your smartphone.
We may partner with third parties to provide such cross-device technology to our customers, and we may share anonymous identifiers (such as cookies or your mobile device’s IDFA or Google adID) with those third parties to make connections among related devices. We may also use your device’s IP address to infer connections among related devices within the same household. To opt out of dataxu’s use of such technologies for each web browser and on each of your devices, please follow the instructions for Opting Out in both web browsers and mobile applications, as described in the Opting Out section below.
We and our customers may collect information about your activity across multiple unaffiliated third-party mobile applications. We may share this information with our customers to help them predict the types of ads that may interest you and to display advertising to you based on that information. For example, if you use a travel app, we or our customers may display travel-related ads to you on another app. We or our customers may combine this information with a mobile advertising identifier (such as your mobile device’s IDFA or Google adID), and we may retain it for up to 13 months, as described in the Security and Storage section below. If you would like to opt out of Interest-Based Advertising practices in mobile applications, please follow the instructions in the Opting Out section below.
Do Not Track (“DNT”) and “Limit Ad Tracking”
DNT is a privacy preference that users may set in certain web browsers. It is intended to allow users another method of informing websites and services that they do not want certain information about their website visits to be collected over time and across websites.
Our technology does not respond to “do not track” (a/k/a DNT) signals or similar mechanisms transmitted by web browsers or mobile device operating systems. In the event that dataxu identifies the “Limit Ad Tracking” feature in Apple iOS version 9 and earlier, the device will be opted-out of advertising. To learn more about how you can exercise choices about the collection and use of certain data online for purposes of Interest-Based Advertising, please see the Opting Out section below.
PART IV. LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION (EEA VISITORS ONLY)
If you are a member from the European Economic Area, our legal basis for collecting and using the Personal information described above will depend on the personal information concerned and the specific context in which we collect it.
However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you.If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading below.
PART V. INTERNATIONAL TRANSFERS, SECURITY, AND RETENTION
EU-US Privacy Shield
dataxu complies with the EU-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries.
dataxu’s accountability for personal data that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, dataxu remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless dataxu proves that it is not responsible for the event giving rise to the damage.
We have further committed to refer unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.
If your complaint is not satisfactorily addressed, and your inquiry or complaint involves human resources data, you may have your complaint considered by an independent recourse mechanism: for EU/EEA Data Subjects, a panel established by the EU data protection authorities (“DPA Panel”). To do so, you should contact the state or national data protection or labor authority in the jurisdiction where you work. Dataxu agrees to cooperate with the relevant national DPAs and to comply with the decisions of the DPA Panel.
For residual disputes that cannot be resolved by the methods above, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel. To find out more about the Privacy Shield’s binding arbitration scheme, please see: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
The Federal Trade Commission has investigation and enforcement authority over our compliance with the Privacy Shield.
International Data Transfers Using Model Contracts
dataxu also relies on Model Clauses set forth by the European Commission for intercompany transfers of personal data from the EEA to our data centers located in Singapore. Dataxu also has in place model clauses with any third-party vendors or partners to whom it may pass personal information.
We use appropriate technical, organizational and administrative measures to protect any Personal Information we process about visitors to our Website and/or users of our Platform.
dataxu is committed to respecting your privacy in the provision of our Platform. In particular, dataxu is a member of the Network Advertising Initiative (“NAI“) and complies with the 2018 NAI Code of Conduct.
dataxu also adheres to the Digital Advertising Alliance’s (“DAA“) Self-Regulatory Principles for Online Behavioral Advertising and related DAA guidance, as well as the European Interactive Digital Advertising Alliance’s (“EDAA“) principles.
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
We retain the information collected via the Platform and via the Website for up to 13 months. Any information stored in our global logs will be retained for no more than 60 days to calculate aggregated metrics required by our products. As of May 25th, 2018, our data warehouses will not contain any personal information.
The cookies set out on our device expire 365 days after they were last accessed.
In some cases, we may keep some of the user information for longer periods of time where required under certain laws – for example, those relating to corporate governance, taxation, money laundering and financial reporting legislation.
PART VI. OPTING OUT AND YOUR PRIVACY RIGHTS
You may opt out of dataxu’s Interest-Based Advertising by following the instructions below for web browsers and mobile applications.
Please note that web browsers and mobile applications operate using different identifiers
Web Browser Opt Out
To opt out of dataxu’s Interest-Based Advertising on your computer or mobile web browser, please click the link below:
If you choose to opt out by clicking the link above, dataxu will set a cookie that tells dataxu not to display Interest-Based Advertising. If you delete your cookies or change computers, mobile devices or browsers, you will need to repeat this process for each computer or device and in each browser. You may download a browser plugin that will help you maintain your opt out choices, even if you delete certain cookies from your browser, by visiting http://www.aboutads.info/PMC.
Once you have elected to opt out, our system may take up to twenty-four hours to refresh, but following the refresh, this will prevent the Platform from using any interest-based data associated with your browser for Interest-Based Advertising. Please note that you will continue to see generic advertising.
Mobile Application Opt Out
To opt out of dataxu’s Interest-Based Advertising in mobile applications if you are resident in the United States, you can download the AppChoices mobile application consumer transparency tool for your device operating system and set your preferences in the application.
Please note that if you use the settings on your mobile device to reset the mobile operating system advertising ID, you will also need to reset the preferences you select in AppChoices.
We will also provide an individual opt-out or opt-in choice before we share their data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To limit the use and disclosure of your personal information, please submit a written request to email@example.com.
Unsubscribe from our mailing list
You may at any time ask us to remove you from any mailing list on which you previously asked us to include you by sending us an email at firstname.lastname@example.org, by calling us on (857) 244-6200, by contacting using the contact details provided under the “How to contact us” heading below or by clicking “Unsubscribe” in any e-mail communications we send you.
Your Privacy Rights
You have the following data protection choice and rights:
- If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below.
- In addition, if you are located in the EEA, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. You can exercise these rights by completing this PDF form and sending via email to email@example.com.
- Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
- You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the EEA are available here.)
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
PART VII. OTHER IMPORTANT INFORMATION
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from such individuals. If you become aware that a child has provided us with information, please contact us at firstname.lastname@example.org. If we become aware that a child under the age of 16 has provided us with personal information, we will take steps to delete such information.
How to contact us
Address: 281 Summer Street, 4th Floor, Boston, MA 02110, Attn: Legal Department
For EEA Users
Phone: +44 (20) 37445990
Address: 6 Ramillies Street, London, W1F 7TY, UK, Attn: Legal Department
For the purposes of EU data protection legislation, [dataxu, inc.] is the controller of your Personal Information. Our Data Protection Officer can be contacted at email@example.com.