Audiens Srl (“we,” “our,” or “us”) is a data technology company that delivers innovative, device-centric and privacy-led data analytics and advertising solutions across industries. .
Our partners (“Data Partners”) are mobile network operators, mobile application providers, media and technology platform providers and others that have access to certain customer information (“User Data”) that they wish to monetize by using our services. Our services include data analytics and advertising services (“Services”). You can learn more about our Services on our website at www.audiens.com.
Our clients (“Clients”) are businesses, including brands and agencies (“Advertisers”), owners of media properties (“Publishers”), and other companies that send targeted advertising to mobile consumers. By using our Services, our Clients are able to address a particular audience and tailor advertisements to the likely interests and preferences of such audience. .
We work to ensure that our Services respect users’ privacy rights. To accomplish this goal, we adhere to privacy-by-design and privacy-by-default principles throughout the process of designing, building, and delivering our Services..
We do not process information that directly identifies a particular individual such as an unencrypted name, address or government-issued ID number. However, whether or not User Data we receive are considered personal or personally-identifiable data depends on, among other factors, the definition that applies in a user’s physical location. For example, in some locations a user’s IP address may be deemed to be personal data, while in others it is not. .
By law, we are required to provide you with information regarding :
The terms of this Policy apply to all User Data to the extent it contains your personal data as defined in the applicable laws and regulations. .
This Policy also does not apply to information collected by our Data Partners or other third parties who may provide information to us, as their information handling practices are covered by their own privacy policies.
This Policy may change from time to time, so please check back periodically to ensure that you are aware of any changes in our processing of your Personal Data. If at any time in the future we plan to use Personal Data in a way that differs from this Policy, we will post Policy edits here and place notices on other pages of the Site as applicable, or by other means if required by law. You are responsible for ensuring that you are aware of the most recent version this Policy. This Policy was last modified on: December 18th, 2019.
The Policy’s wording can be technical; in case you have any questions, do not hesitate to write to email@example.com.
We receive the following categories of User Data from our Data Partners:
Our Data Partners may collect data directly from users (both online and offline) or receive data from third parties.
We request that our Data Partners provide users with all required information about the use of their data and provide an opt in / opt out option according to applicable laws and regulations.
When we obtain different User Data pertaining to the same device from multiple Data Partners, we aggregate such User Data and store it against the same Advertising ID (“Ad IDs”) or cookie. Audiens also maintains a separate ID inventory, which connects the User Data into a common ID (“auId”) and is an internal pseudonymous identifier.
We enhance User Data to create de-identified data segments and aggregate such segments into segment lists or Ad ID / cookie lists based on our Clients’ preferences. We then share such lists with our Clients to enable them to effectively target the relevant users.
We do not interact directly with users or their devices, unless a user sends us a deletion request along with their Ad ID, as described below under “Choice and Control Rights you Have”.
Below we describe the User Data categories in more detail.
Advertising IDs (“Ad IDs”) are user-resettable, unique, anonymized identifiers for advertising. Ad IDs identify a specific device and are implemented both on Apple iOS (“Identifier for Advertising” / “IDFA”) and Google Android (“Advertising ID”).
We obtain Ad IDs associated with de-identified User Data from our Data Partners. Ad IDs are then used by our Clients to identify advertising requests and to deliver relevant advertisements.
We may also use Ad IDs to establish a relationship between different User Data attributes pertaining to the same user. For example, if we obtain User Data that indicates a certain user is between 25 and 30 years old, and later learn from another Data Partner that the user of the same device is interested in a healthy lifestyle, we combine this information against the same Advertising ID (“Ad IDs”) or cookie.
An HTTP cookie (also called web cookie, Internet cookie, browser cookie or simply a cookie) is a small piece of data sent from a website and is stored in the user’s web browser while the user is browsing.
We set third party cookies on behalf of Publishers who provide space for the display of advertising within websites.
We use this information to facilitate the delivery of our Clients’ targeted Ads.
In the course of the mapping activity described in the above paragraph, we receive such information as referral URLs (Uniform Resource Locators), user agent string, and IP addresses.
When you come to the website where Audiens cookies are set, the log file we automatically receive includes the referral URL, which is the address of the website that you came from. We do not use and discard referral URLs within reasonable time in compliance with our data retention period.
We use IP addresses to derive information such as country and carrier. Afterwards, we discard IP addresses within reasonable time in compliance with our data retention period.
We use user agent string information contained in the log file to determine your device operating system and device model. Afterwards, we discard user agent string within reasonable time in compliance with our data retention period.
Some Data Partners or Clients may provide their offline data such as hashed email addresses and hashed phone numbers. We require that such data are hashed using secure hashing algorithms prior to sharing with Audiens.
We use hashed emails or hashed phone numbers to establish a relationship between offline and online user profiles pertaining to a certain user. For example, our Client would like to run an advertising campaign on mobile devices targeting users whose hashed email addresses and / or hashed phone numbers the Client already has. However, without respective Ad IDs the Client cannot target the desired audience. By comparing hashed email addresses and hashed phone numbers provided by the Client with the User Data we have from our Data Partners, we can match hashed email addresses or hashed phone numbers to Ad IDs corresponding to the same user. As a result, we have a list of Ad IDs corresponding to the list of users the Client would like to target.
We may obtain demographic User Data from our Data Partners, such as:
Audiens uses this information to create demographic segments about users, for example users who are “males, 30 to 34, living in Milan.” We connect segments with Ad IDs so that our Clients can reach their target audiences on mobile devices.
We may obtain App Usage and Browsing Data from our Data Partners, such as:
URLs are web addresses, a specific character string that constitutes a reference to a resource. Most web browsers display the URL of a web page above the page in an address bar.
We transform App Usage and Browsing Data into aggregated segments based on interests or purchase intent (such as Sports Enthusiast, Health & Fitness Buffs) which are of interest for our Clients.
We may obtain purchase data from our Data Partners, such as:
We may receive data from Data Partners about the physical location of a specific device, including latitude-longitude coordinates obtained through GPS tools, Wi-Fi or cell tower triangulation techniques.
The location data we receive from Data Partners may be generalized, non-precise location data, or we may render the location data non-precise, in order to provide generalized location data to our Clients. Our Clients may use inferences from this information to send localized Ads or targeted Ads.
In real-time bidding (“RTB”), Publishers send advertising bid requests (“Bid Requests”) in real-time to Advertisers, indicating that they have an open advertising space (“Impression”) to sell. The Impression is auctioned among interested Advertisers and sold to the highest bidder.
Bid Requests from mobile apps usually contain an Ad ID alongside information such as the IP address, type of the Impression (banner, audio, video), format, app, publisher, device, etc. We collect and use the Bid Request and Ad ID in order to participate in the RTB process on behalf of our Clients.
We render IP-addresses we receive as part of the Bid Requests imprecise to prevent the identification of a user. However, we may store and process information derived from that IP address (information country and the telecom operator you are using). We delete IP addresses after we no longer need them to extract this kind of information.
Our Clients may then use de-identified IP addresses to localize Ads.
Our Services enable our Clients to tailor advertising you see on your mobile device to your interests and preferences. As a result, the number of ads that are not relevant or of interest to you will be reduced. To achieve this goal, we need to process your personal data.
The legitimate interest of facilitating targeted online marketing in combination with creating customized audience segments based on unified customer profiles is our basis for the processing of your data (art. 6(1)(f) GDPR). Our legitimate interest lies in conducting and managing our business. We consider and balance any potential (positive and negative) impact on you and your rights before we process your personal data for our legitimate interests to make sure that our interests are compelling enough. We will not use your personal data for activities where our interests will be overridden by the impact on you. We conducted and documented an internal legitimate interest assessment that determined: (i) our legitimate interests, (ii) that the processing is necessary for our legitimate interests; and (iii) that your interests and fundamental rights do not override those interests. You can obtain further information about how we assess our legitimate interests against any potential impact on you by contacting us at firstname.lastname@example.org
Our Data Partners or other third parties who provide User Data to us may use another basis; such as consent to process your personal data and share it with us according their respective privacy policies.
Any processing of your personal data by Audiens is subject to your rights of choice and control as explained below.
Audiens is dedicated to the highest standards of privacy and is a member of IAB (Interactive Advertising Bureau).
For information on opt-out options, please check the section ‘Your Rights with Respect to your Personal Data (INCLUDING OPT-OUT OPTIONS)’ below.
We share User Data with the following categories of third-parties:
Advertisers and Publishers do not receive access to Ad IDs, Cookies, hashed email addresses or hashed phone numbers. They may only see the list of segments created on the basis of User Data that serve as targeting criteria.
Data Platforms only receive access to segment names and respective Ad IDs or Cookies. With regards to the EU Personal Data, they are never granted access to hashed email addresses or hashed phone numbers.
With regards to the EU Personal Data, we only share hashed email addresses and hashed phone numbers with Advertisers that wish to match their offline users’ data to Ad IDs or Cookies to be able to target their customers on mobile devices. Data is not shared on a device-specific level but shared as a list. Outside of the EU, we may share broader data sets with Advertisers.
We also may make Personal Data accessible for Advertisers for data analytics purposes. In such case Advertisers are not in a position to see, have direct access or download individual data attributes.
Data Platforms we work with include: Xandr Inc., Widespace AB, Beeswax, Google Ireland Ltd., The Trade Desk Inc., Adform A/S, Adobe Systems Inc., LiveRamp Inc, Oath EMEA Limited, Facebook, Inc., Zeotap Gmbh, Captify Ltd, Experian Srl., Mailchimp, Verizon Media, Xandr.
We store User Data in data centers provided by third parties (such as by AWS).
We will also disclose your User Data in response to valid legal processes, for example, in response to a court order, a subpoena or other legal request for information, and/or to comply with applicable legal and regulatory reporting requirements. We also may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or to verify or enforce compliance with the policies governing our products and/or services and with applicable laws, or as otherwise required or permitted by law or consistent with legal requirements. We are required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
In addition, we may transfer your information to an entity or individual that acquires, buys, or merges with us, or our affiliates. In these cases, we will require the acquiring company to carry on the material terms of this Policy, including the requests for account deletion.
When we share User Data with the recipients described above, such sharing may constitute a transfer outside of your home location. By law, we are required to ensure that the level of protection guaranteed for your personal data by the European laws is not undermined by such transfer. Some recipients of data may be participants of programs like the Privacy Shield which enables them to ensure the appropriate level of protection. In other cases we enter the EU Standard Contractual Clauses with respective User Data recipients.
We take appropriate technical and organizational safeguards to protect any personal data we receive from theft, loss, and unauthorized access. We follow generally accepted standards to protect personal User Data throughout the entire use cycle starting from the initial transfer until deletion.
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Your personal data belongs to you. You have the following rights with respect to your personal data:
The options to exercise these rights are described below.
To make us erase your personal data associated with your Ad ID from our system, you can submit your Ad ID to our Privacy Team at email@example.com. We will delete all User Data associated with the submitted Ad ID. This will delete all related data and prevent any future collection and use of data associated with the Ad ID. If we did not have your Ad ID, but had some other data such as cookies, hashed email addresses or hashed phone numbers, we will keep this data unless our Data Partner informs us that these has to be deleted. Similarly, if we have your other Ad IDs and/or Cookie IDs, we will keep them together with associated data unless you file an opt-out request including such other Ad IDs and/or Cookie IDs. In order to find your Ad ID, please see here below a list of options:
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.
We retain data until the occurrence of the following events:
We do not knowingly collect, use, or share:
You have the right to request that Audiens deletes any of your Personal Information that we processed. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers and recipients to delete) your Personal Information from our records, unless an exception applies and according to the section “Information Retention” above.
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.
If you have any questions or suggestions about this Policy and our privacy practices, please contact us at: firstname.lastname@example.org