ADNUNTIUS
Search…
Privacy Details
Here you will see details about how we collect and use user data.
This page is work in progress; while we are working on it you will find all the information here: https://docs.google.com/spreadsheets/d/1zXJAlqvrKLZGEIESO4iadutV2g0rr_1bmKg7IKOfL6s/edit?usp=sharing

Personal Data Stored in Device Cookies

Name
Purpose
Expiry
usi
Identify the user across multiple sessions
30 days
sessionId
Identify the user session across multiple requests
Length of browser session
i
Records a history of advertisements shown to the user
30 days
r
Records a history of advertisements shown to the user
30 days
s
Records a history of advertisements shown to the user
30 days
v
Records a history of advertisements shown to the user
30 days
c
Records a history of advertisements shown to the user
30 days
cnv
Records the most recent time that a specific advertisement was seen by the user. Used to track conversions e.g. if the user subsequently performs an eligible action, such as purchasing a product, on the advertiser's website.
30 days
t
User retargeting. Records data about the user when they are browsing an advertiser's website, and then uses this data to select advertisements when the user is browsing a publisher's website.
30 days
Storage: Cookies are stored on the user's personal device and are transmitted with each request to the Adnuntius platform, where they are read by the Adnuntius software. The cookie data is not stored or accessible anywhere on the Adnuntius servers. The personal information that is stored on Adnuntius servers is outlined in a separate tab in this file.
Please note that Adnuntius offers a privacy-safe ad serving alternative commonly referred to as "cookieless ad serving" (more details here: https://docs.adnuntius.com/adnuntius-advertising/requesting-ads/cookieless-advertising If you use the cookieless alternative Adnuntius will not set any of these cookies, and also not set a user ID. For more information, please visit the page linked to above.

Viewing History Stored in Databases

Personal information: User Identifier and list of advertisements and Timestamps
Purpose: To allow control of how many times, per unit time, that an advertisement is shown to an individual ("frequency capping"). For example: show an advertisement no more than twice per week to each unique viewer. This data replicates what is also stored in device cookie storage, but is also stored on the Adnuntius servers to allow cross-device frequency capping.
Expiry: 30 days after last update.
Storage: Data is stored on servers controlled by Adnuntius and delivered by sub-processor Hetzner.

Location Targeting

Named locations derived from IP addresses

Purpose: Enable Controller and potentially its customers to target by country, region, city and/or post/zip code.
Expiry: All information is discarded immediately after looking up and matching the information to a named location.
Storage: No location data is stored under this Purpose. The IP addresses are checked against named locations stored on our servers. No data is sent to any external party.
Involved sub-processors: Adnuntius uses Digital Envoy, who supplies us with a file mapping IP addresses to named locations. This file is stored on Adnuntius servers (Hetzner) as described under "Sub-Processors" found below.

Longitude and latitude

Please note: this data is only processed if actively sent by the Controller.
Purpose: Enable Controller and potentially its customers to target by exact location.
Expiry: All information is discarded immediately after any advertisements are matched to the location.
Storage: No location data is stored under this Purpose.
Involved sub-processors: None.

Device Targeting

Data: As the user agent string is sent to Adnuntius the following data is stored:
  • Name, supplier and version of browser (example: Mobile Safari)
  • Family, model, supplier and name of hardware (example: iPad Pro 9.7)
  • Name, supplier and version of platform (example: Apple)
  • Type of device (example: Desktop)
  • Operating system (example: Android)
Purpose: Enable Controller and potentially its customers to target advertisements to the collected information.
Expiry: All information is discarded immediately after looking up and matching the collected information to device information stored on our servers.
Storage: No device data from Data Subjects is stored under this Purpose.
Involved sub-processors: Adnuntius uses 51 Degrees, who supplies us with a file mapping the device information we collect to the details of a device. This file is stored on Adnuntius servers as described under the tab "Sub-Processors" found here.

Segment Targeting

User identifier and list of pages viewed.

  • Details: page domain-name (NOT the full URL); content categories of the page; content keywords of the page; device type used to view the page; user location (country and region) when viewing the page.
  • Purpose: Enable Controller to build segments (Data Subjects grouped by their common behavior and/or characteristics) based on their consumption of pages on Controller's Properties.
  • Expiry: 30 days.
  • Storage: Data is stored on servers controlled by Adnuntius and its sub-processors.
  • Involved sub-processors: Adnuntius uses providers of data centers to store data. Please see "Sub-Processors" below for more information.

Profile fields

  • Details: firstName, lastName, title, dateOfBirth, age, gender, status, language, description, company, website, rank, level, type, emailPrivate, emailWork, phone, mobilePhone, addressLine1, addressLine2, state, city, areaCode, zipCode, postCode, region, country, educationName, educationType, educationDegree, educationSchool, educationField, educationStartYear, educationEndYear, skills, facebook, instagram, snapchat, twitter, avatar, transactions, lastLogin, logins, products, favouriteTopics, personalInterests.
  • Purpose: Enable Controller to build segments (Data Subjects grouped by their common behavior and/or characteristics) based on their characteristics.
  • Expiry: 180 days.
  • Storage: Data is stored on servers controlled by Adnuntius and its sub-processors.
  • Involved sub-processors: Adnuntius uses providers of data centers to store data. Please see "Sub-Processors" below for more information.

Segments pre-built by Controller before sent to Adnuntius

CRM Matching

The following description is an example to support better understanding of how CRM matching is performed by Adnuntius. The example uses the scenario where a publisher ("Publisher") and an advertiser ("Sporting Goods Store") wish to engage in CRM matching (in this example using email addresses to match IDs) so that Sporting Goods Store can target ads for slalom boots to Data Subjects who have previously purchased slalom skis from Sporting Goods Store.
Step
Details
1: Publisher sends email addresses and any other data as wanted to Adnuntius in accordance with tab 3.4 in this document, along with Publisher's Folder ID (always required in order for the data to be safely stored in a cleanroom available to Publisher alone).
A Folder ID is an identifier unique to Publisher and only available to them. More information: https://docs.adnuntius.com/adnuntius-data/user-interface-guide/segmentation/folders
2: Sporting Goods Store sends email addresses and the relevant purchase information in accordance with section 3.4 in this document, along with Sporting Goods Store's Folder ID (always required in order for the data to be safely stored in a cleanroom available to Sporting Good Store alone).
3: Sporting Goods Store sends its Folder ID to Publisher in an email or similar. The Folder ID can be found here: https://admin.adnuntius.com/folders
The common user identifier is used to identify a Data Subject across domains, and the Folder ID is to confirm that such cross-domain identification is authorized by Controller.
4: Publisher implements the Folder ID in its consent tool (CMP) to ensure that only users who consent will be matched.
When a request for an ad is sent from Publisher then Sporting Goods Store's segment identifier (a unique identifier for the segment created) is sent with the ad request, so that ads can match the request.
5: When steps 1-4 are set up and an ad request is sent from Publisher's pages to Adnuntius, any Segment ID that the user belongs to will be sent along with the ad request so that Sporting Goods Store's ads can be targeted. No user data is shared between the parties.
Expiry: The connection between Publisher and Sporting Goods Store remains in place until Sporting Goods Store removes the Folder ID from the data sent to Adnuntius.

Reporting

Standard reporting

Data: Please see https://docs.adnuntius.com/adnuntius-advertising/admin-ui/reports/the-statistics-defined for information about which metrics are stored.
Purpose: Enable Controller and potentially its customers to obtain insights about campaigns' performance.
Expiry: No expiry.
Storage: Data is stored on servers controlled by Adnuntius and its sub-processors.
Involved sub-processors: Adnuntius uses providers of data centers to store data. Please see the tab "Sub-Processors" here for more information.

Raw data

Adnuntius offers its customers to transfer raw data to its own databases. If customers choose to do so, then Adnuntius will hold on to user data for 24 hours before it is permanently deleted from our servers. Customers will in that time period have the opportunity to access the database and transfer the data to their own servers.
  • User agent strings as explained below are Recorded if Network Config is set to "No Consent Required". They are not recorded if Network Config is set to "Consent Required".
  • Latitude and longitude are recorded only if consent is provided.
  • Other data is always recorded.
Storage: All data is stored in Hetzner's data centers (see "Sub-Processors" for more information) in Germany and Finland. Snapshots of Adnuntius data are periodically saved to Amazon Simple Storage Service (AWS S3)'s Frankfurt data center. All data is encrypted with AES prior to leaving the Germany and Finland data centers, is transmitted via a secured channel, and is stored in its encrypted form in a private S3 bucket.
Data stored and made available
Example values
Time Of The Event
2019-07-08T22:18:51.766Z
Referrer Url
https://www.adnuntius.com
User Agent String
Mozilla/5.0 (Linux; Android 6.0.1; SM-N910C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36
Behavioral Segment From Any Data Fed To Adnuntius From Third Party Data Sources
Interested in reading about cars
Key Values (Custom Data Points Sent To Adnuntius By Our Customer With A Request For An Ad)
cars, business, finance
Site
Keywords (Words From Article Texts That Users Are Reading)
audi, sedan, luxury car
Pageclass (Frontpage Or Article)
article
Language Of The Site
en
Ad Units
52e2e0ca-f63e-4147-ad10-078fb30407e3, "Adnuntius example ad unit"
Line Items (Campaigns)
p1xcxcf5p0366tdb, "Adnuntius example campaign"
Creatives
53cf9jggyn7fh513, "Adnuntius example creative 1000x300"
Advertisers
tdshgfv5h6q827hx, "Coco Cola"
Iab Category
food and drink
Currency And Cost Of Impression
"USD", 0.05
Device: Hardware Vendor
Samsung
Device: Hardware Name
Galaxy Note 4
Device: Platform Vendor
Google
Device: Hardware Model
SM-N910C
Device: Browser Version
NA

Login and Changes

Data
Purpose
Email address and name associated with a user account
The email address provides a unique login identifier for users managing their Adnuntius account using the administration user interface (UI) or application programming interface (API). The email address is also used for password reset and other communications with the user as required. The name is used throughout the UI, and there are no requirements or validations on the data used in this field.
All changes made by a user account
Customers expect to see who have made which changes to campaigns and other objects in Adnuntius. We therefore need to store when a change was performed, by who, and what change occured.
Last login and password change
Control who have visited the portal and made certain changes, and to provide support to people who need to change their passwords.
Expiry: No expiry.
Storage: Data is stored on servers controlled by Adnuntius and its sub-processors.
Involved sub-processors: Adnuntius uses providers of data centers to store data. Please see "Sub-Processors" below for more information.

Responsibles

Data Protection Officer, and responsible on behalf of the Processor:
Stian Remaad, CEO Adnuntius | Email: [email protected]

Sub-Processors

Hetzner Online GmbH

Contact information: Industriestrasse 25, 91710 Gunzenhausen, Germany - [email protected] - +49 (0)9831 505-0
Sub-Processor's role: Hetzner is Adnuntius' supplier of servers in Europe, and stores data about all users tracked by any of the tracking mechanisms specified in this document.
Locations of servers: Germany and Finland.
Basis for transfer: EU standard clauses.

Digital Envoy

Sub-Processor's role: Digital Envoy provides Adnuntius with location targeting technology, enabling Adnuntius to translate an IP address to a named location. Digital Envoy provides files that are stored on our databases, and no data is as such transferred to Digital Envoy.
Locations of servers: Germany and Finland.
Data processing agreement: No data is sent to nor processed by the supplier.

51 Degrees

Contact information: https://51degrees.com/about-us
Sub-Processor's role: 51 Degrees provides Adnuntius with device targeting technology, enabling Adnuntius' customers to target users by the devices they use. 51 Degrees provides files that are stored on our databases, and no data is as such transferred to 51 Degrees.
Locations of servers: Germany and Finland.
Data processing agreement: No data is sent to nor processed by the supplier.

Amazon Web Services

Sub-Processor's role: Snapshots of Adnuntius data are periodically saved to Amazon Simple Storage Service (AWS S3)'s Frankfurt data center. All data is encrypted with AES prior to leaving the Hetzner data centers (Germany and Finland) and sent to this Frankfurt data center, is transmitted via a secured channel, and is stored in its encrypted form in a private S3 bucket.
Locations of servers: Germany
Basis for transfer: EU standard clauses.

Adnuntius Australia PTY LTD

Contact information: Antonios Sarhanis; [email protected]; +61 416 173 732
Sub-Processor's role: Adnuntius Australia is a company fully owned by Adnuntius AS, and is the company where several of our developers are employed. These developers need to access databases to develop functionality, and the purpose of the attached agreement is to ensure transparency in how our developers located outside of EU may access personal information.
Locations of servers: Not applicable.
Basis for transfer: EU standard clauses.

Leaseweb Asia Pacific

Contact information: [email protected]; 11 Collyer Quay, The Arcade #16-02 049317, Singapore
Sub-Processor's role: Leaseweb is Adnuntius' supplier of servers in Asia, and stores data about all users in Asia tracked by any of the tracking mechanisms specified in this document.
Locations of servers: Singapore

Paypal

Sub-Processor's role: Our customers who use Adnuntius Self-Service may use a payment service provider to charge self-service advertisers. PayPal is one of the options available.
Locations of servers: Please see PayPal's privacy policy.
Basis for transfer: EU standard clauses.

Pin Payments

Contact information: https://pinpayments.com/dpa
Sub-Processor's role: Our customers who use Adnuntius Self-Service may use a payment service provider to charge self-service advertisers. PinPayments is one of the options available.
Data processing agreement: https://pinpayments.com/dpa
Basis for transfer: EU standard clauses.

Cloudflare

Contact information: 101 Townsend Street San Francisco, CA 94107, USA; Emily Hancock, Data Protection Officer, [email protected]
Sub-Processor's role: Cloudflare terminates prebid requests at the edge, decrypts it, and tunnels it to our adservers for a fast ad response.
Locations of servers: Worldwide points of presence
Basis for transfer: EU standard clauses.

Vultr

Contact information: [email protected]
Sub-Processor's role: Vultr handles all non-prebid traffic at the edge, leaving it encypted, and directs it to the nearest data center for processing.
Locations of servers: Frankfurt, Stockholm, Singapore.

CDN77

Contact information: DataCamp Limited, 207 Regent Street, London, UK; [email protected]
Sub-Processor's role: CDN77 stores creative assets for fast worldwide ad delivery. CDN77 does not handle any data subject information and is as such not subject to privacy legislation.
Locations of servers: Worldwide points of presence.

Security Measures

Please visit https://adnuntius.com/security-measures. Password is granted on request to [email protected]