Services Privacy Policy

This Privacy Policy is designed to describe how we approach your privacy as an Internet user interacting with websites that have implemented our advertising technology.

Please note that this Policy does not pertain to the processing of personal data we collect through the hybrid.ai website. This issue is comprehensively addressed in Hybrid Website Privacy Policy.

Hybrid Adtech GmbH provides data that allow for revenue generation through digital advertising. We believe in transparency and respecting consumer choice as a foundation of trust, so we have crafted this Privacy Policy to help you understand how we handle Information, and your privacy choices.

Our products are used on websites and other internet-connected services (such as smart TV’s and mobile devices). A more in-depth description of our Services can be found at our Publisher Products site.

This “Privacy Policy” describes how Hybrid Adtech GmbH collects and uses information.

If unsure about any of the information provided, please reach out to privacy hybrid.ai.

Definition of Terms

Throughout this Privacy Policy, we use some phrases that are unique to our business or the technology underlying our Services or may just be new to you. The following are definitions of some of the key terms that you’ll need to know to make it easier to understand this Privacy Policy:

• “Advertiser” means an entity providing ads to be placed on Publisher websites.

• “Interest-Based Advertising” is an umbrella term used throughout this Privacy Policy to indicate cross-device targeting, targeted advertising, cross-contextual behavioral advertising, and similar activities related to the use of profiles to understand the browsing and/or purchasing behaviors of consumers. For more information, please see the BBB National Programs site.

• “Personal Information” means any information that can be used to directly or indirectly identify a natural person, such as contact information (i.e., name, address, e-mail address, and/or phone number), and/or information that uniquely and persistently identifies a browser or device, such as an IP address, mobile advertising identifier, unique online identifiers, email address that has been hashed to generate an alphanumeric identifier, or combination of information about a browser or device (such as IP address and browser type/settings).

• “Publishers” are websites or publications that use Hybrid Adtech GmbH Services, or natural persons who interact with Hybrid Adtech GmbH on behalf of such websites or publications. Publishers are also Hybrid Adtech GmbH customers.

• “Readers or users” are individuals who visit our Publishers’ websites or the Site. “Hybrid Adtech GmbH” or “we,” “us,” or “our” means Hybrid Adtech GmbH.

1. General information

We are an advertising technology company that provides online advertisement services to advertisers (e.g., e-shops) in the programmatic advertising environment. Our role is to give advertisers an effective tool to display ads of their products or services on publishers’ websites and mobile applications you visit (e.g., news portals). Our ads are nonpersonalized, i.e., based on content information with which the user interacts.

Hybrid Adtech GmbH supports industry self-regulatory principles and endorses industry recognized practices and self-regulatory standards.

Hybrid Adtech GmbH also adheres to the Interactive Advertising Bureau (“IAB”)

Code of Conduct, and actively participates in the IAB Europe Transparency & Consent Framework (TCF 2.0) We comply with IAB’s Specifications and Policies under vendor identification number 206.

We aim at ensuring the highest level of privacy protection and transparency. We strictly comply with all applicable privacy laws, in particular the EU General Data Protection Regulation (GDPR), Directive on Privacy and Electronic Communications (E-Privacy Directive), as well as established best practices on the digital advertising market.

2. How do we collect data?

In order to collect your data, we use cookies, which are text files inserted in your web browser when you visit advertisers’ or publishers’ websites or apps, as well as other tracking technologies available on your device.

3. About Our Cookies

Hybrid Adtech GmbH provides technology-based services that allow our customers to generate revenue by selling advertising space on their websites or other internet-connected properties, or by connecting people to goods and services offered by various merchants and/or brands. Hybrid Adtech GmbH does not collect, nor do our services require, any information that could identify an individual ‘in the real world.’

Cookies are widely used to support information gathering that provides insights into how individuals are interacting with websites, and to provide website performance data. A cookie is a small bit of information that is sent to and stored in a browser by a website you visit or by that website’s service partners. They are used to store and receive identifiers and other information on computers, phones and other devices. By saving information in a cookie, websites can remember preferences or recognize browsers from one visit to another or from one website to another. Only the site or service that places a particular cookie can read the contents of that cookie each time it communicates with your browser. Other technologies, including data we store on your web browser or device and identifiers associated with your device are used for similar purposes. In this policy, we refer to all of these technologies as “cookies.”

Most web browsers will allow you to turn off cookies. To do this, look at the “help” menu on your browser. However, switching off cookies may restrict your use of the website and/or affect the way in which it performs. We should add that opting out of advertising cookies will not mean you won’t see ads, just that they won’t be tailored to you. Visit www.allaboutcookies.org to learn more about cookies and how to block cookies using different types of browsers or mobile devices.

Hybrid Adtech GmbH operates the following websites where cookies and similar technologies are used for varying purposes, depending on the site. For more information on the types of data we process and our privacy practices, please review the Hybrid Adtech GmbH Privacy Policy.

4. What data we process

We process the following two main groups of data:

1. (a) Information that you are currently entering a publisher’s website or app, where we may display an ad to you — it comes within a so-called bid request, which is an offer to buy an advertising space on the publisher’s website or app in order to display an ad. We process this information as a data controller for the purposes of displaying ads, ad measurement, brand safety, product development, and fraud detection.
2. (b) Information regarding the delivery of our ads, i.e., impressions of an ad (e.g., whether we displayed an ad to you and, if so, which ad we selected) and your interactions with an ad (e.g., whether you clicked on it). We process this information as a data controller for the purposes of displaying ads (in particular for frequency capping and ad rotation), ad measurement, and product development.

You may find a full list of categories of data we process as a data controller in our GDPR privacy notice (see Section 6 below).

While providing our services, we do not collect personally identifiable information (PII), such as names, e-mail addresses, postal addresses, telephone numbers, or financial data, such as credit card details.

We do not receive any additional data from advertisers or partners, which, along with the data collected by our technology, would enable us to directly identify you.

5. How we use your data

While such a website is loading, a bid request is sent to us by the publisher or our business partner cooperating with the publisher (e.g., supply-side platform, SSP) inviting us to buy a certain ad space. After receiving such a bid request, our technology uses information about your previous browsing activity on advertisers’ websites or apps to decide whether to buy the auctioned ad space and, if so, which ad to display.

We use information on the content of the website where the ad is to be displayed for the additional personalization of this particular ad. However, we never use such website content to personalize future ads, in particular we do not assign this information to your user profile in order to categorize you (e.g., by assigning you to a particular population segment) or try to determine your shopping interests on the basis of your browsing history on publishers’ websites or apps.

Moreover, we do not use your browsing data across advertisers, which means that a browsing activity from one advertiser’s website or app does not affect other advertisers’ ads we display. For instance, the fact that you looked for swimming equipment in an e-shop of our client “A” will not result in us displaying you swimming equipment from an e-shop of our client “B” (unless you had previously browsed similar products on “B” e-shop as well).

After we display an ad to you, we collect information regarding ad impressions (e.g., that we indeed displayed an ad to you, which ad was selected, and when and on what type of device it was displayed) and your interactions with the ad (mainly whether you clicked on it or not). We use this information for the analysis of how our ads perform, for the creation of statistical reports for advertisers regarding the delivery of their ads, and subsequently for attribution and billing purposes. We also process this data for the control of the frequency of ads we display to you (frequency capping) and for product development purposes.

Our platform is integrated with the Hybrid Adtech GmbH environment through matching of our technical identifiers, e.g., cookie IDs or mobile advertising IDs (“cookie matching”) with those used by our business partners. It enables us to (a) receive a bid request and eventually serve an ad on a publisher’s website or app that uses our business partners’ digital advertising technology and (b) collect information related to our ad serving activities.

Upon an advertiser’s specific request and on the basis of the information provided by such advertiser, we may perform cross-device tracking that consists of displaying the same categories of ads of this particular advertiser’s products or services on different devices you use (e.g. laptops and smartphones). We do not, however, perform specific data analyses in order to link the devices you use on the basis of the patterns of your online behavior (i.e., we do not conduct probabilistic cross-device tracking).

We also use your personal data for the detection of frauds and other potential dangers to privacy security, for the calculation of the usage levels of our technology, and for brand safety purposes, i.e., to analyze whether publishers’ websites are a suitable environment for our ads to be displayed and to develop and improve our products.

We do not purchase any third-party data from data providers for service optimization purposes or sell data we process to any third parties.

Advertisers and publishers whose websites or apps you visit may independently collect and use your data for different purposes. Please consult their privacy policies for more information in this regard.

6. Personal Data Processing (GDPR)

Although, as described above, we do not collect personally identifiable information (PII), the data we do process is tied to unique online identification numbers that, under the GDPR, are considered “online identifiers” that allow us to “single out” a specific user from other users. According to the GDPR, such information may be considered personal data (this type of non-personally identifiable data is referred to as “pseudonymous data”). Consequently, in cases where the GDPR applies to our services, we assure compliance with all the requirements established by this regulation.

We have also appointed a data protection officer, whom you may contact if you have further questions. Please see Section 10 below for the Data Protection Officer contact details. As a part of the GDPR compliance program, we have joined the IAB Europe Transparency & Consent Framework (TCF) as a registered vendor (ID No.: 206) and comply with the TCF policies. For more information, please visit https://iabeurope.eu/.

As mentioned above, some of the data we use for providing services, we process as a data controller, which means we are solely responsible for it, and some – as a data processor i.e. on behalf of advertisers. You may access a set of information required by the GDPR pertaining to our data processing activities as a data controller in our GDPR Privacy Notice.

6.1 Data Controllers

1. Hybrid AdTech GmbH
2. Potsdamer Straße 92
3. 10785 Berlin / Germany
4. Phone: +48 601 265 678
5. acting as Joint Controllers

6.2. The substantial terms of the arrangement between the joint controllers

1. Hybrid Adtech GmbH acts as a Leading controller.
2. The processing of personal data of data subjects is carried out via the bidding system, an IT system which is owned and managed by the Leading Controller.
3. The Controllers jointly agree and implement all relevant security policies and procedures regarding personal data to achieve a coherent protection system.
4. The Leading Controller is obliged to assure that the data subject receives a notification compliant with requirements laid down in Articles 13 or 14 of the GDPR. Each of the Joint Controllers is obliged to reveal to the Leading Controller any recipients to whom it has disclosed personal data.
5. Joint Controllers have appointed a single Data Protection Officer who is responsible for handling data subjects’ requests.
6. The Controllers jointly make decisions regarding data subject’s rights laid down in the GDPR.
7. The lead supervisory authority for the group of undertakings is located in Poland.

6.3. Purpose of the processing

We will process your personal data, which includes storing and accessing certain information on your device (such as cookies or device identifiers) in order to carry out the following:

Understanding your audience through statistics or a combination of data from various sources

Development and improvement of services

1. a. storing or accessing information on your device
2. b. use limited data to select advertising,
3. c. create profiles for personalised advertising,
4. d. use profiles to select personalised advertising,
5. e. creating profiles to personalize content,
6. f. using profiles to select personalized content,
7. g. measuring content effectiveness,
8. h. measure advertising performance,
9. i. understand audiences through statistics or combinations of data from different sources,
10. j. develop and improve services.

6.4. Categories of personal data For the above purposes, we will process the following categories of your personal data:

1. unique online identifiers (including cookie IDs and mobile advertising IDs);
2. URLs of the web pages you visited (“referrer”);
3. data related to ad impressions and your interactions with our ads on publishers’ websites or apps;
4. technical browser and device information (“user agent”);
5. timestamps
6. IP addresses indicating your general (non-specific) location.

6.5. Legal basis for the processing

The legal basis for storage and/or access information on your device as well as for the processing of your personal data for the purposes:

1. 1.storing or accessing information on your device
2. 2. use limited data to select advertising,
3. 3. create profiles for personalised advertising,
4. 4. use profiles to select personalised advertising,
5. 5. Creating profiles to personalize content
6. 6. Using profiles to select personalized content
7. 7. Measuring content effectiveness
8. 8. measure advertising performance,
9. 9. understand audiences through statistics or combinations of data from different sources,
10. 10. develop and improve services,

is the consent you give on publishers’ websites or apps. You are entitled to withdraw the consent to the processing of your personal data and storing and/or accessing information on your device by us at any moment. You may do so by clicking an opt-out button on our opt-out page: hybrid.ai or by contacting us directly at: dpo@hybrid.ai

6.6. Sources of the personal data

We obtain your data either from publishers, on whose digital properties we display our advertisements, or from supply-side platforms (SSPs), cooperating with publishers for the purposes of delivering personalized advertisements.

We collect some of the information, such as data related to ad impressions and your interactions with ads, ourselves from publishers’ websites or apps.

6.7. Recipients of the personal data

We may transfer your data to our processors (e.g., IT service providers and data centers) where such entities process data on the basis of a contract with us and only in accordance with our instructions.

We may also transfer very limited amounts of data to our business partners (e.g., SSPs) in a response to a bid request in order to be technically able to display an ad.

6.8. Data subject’s rights

1. You have the following rights with respect to your personal data:
2. the right to withdraw your consent to the processing at any time, e.g., by means of an opt-out procedure without affecting the lawfulness of processing based on consent before its withdrawal;
3. the right to object to the processing of the personal data for direct marketing purposes or, on grounds relating to your particular situation, whenever the legal basis for processing is controllers’ legitimate interest;
4. the right to access to the personal data;
5. the right to obtain from the controller restriction of processing as referred to in Article 18 of GDPR;
6. the right to request that your personal data be corrected if it is found to be inaccurate or out of date;
7. the right to request your personal data be erased where it is no longer necessary for us to retain such data;
8. the right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing; and
9. the right to request that we provide you with your personal data and where possible to transmit that data directly to another data controller. You are entitled to request a copy of your personal data processed by us.

6.9. Profiling

Within the scope of processing that we undertake as a data controller, we conduct activities that may be deemed “profiling” of your personal data only to a very limited extent (i.e., analysis of data regarding ad impressions and your interactions with our ads for ad measurement purposes).

We do, however, conduct profiling with respect to the data related to your browsing activity on advertisers’ websites or apps (i.e., data we process on behalf of advertisers, as a data processor). We analyze it in order to display to you an ad that we believe you will be most interested in, as described in Section 4 above.

In any case, the profiling does not produce any legal effects toward users or similarly significantly affects them. In particular, it does not result in price discrimination among the users based on their behavioral profile.

6.10. Retention periods

We immediately delete all data received in bid requests, except for a minor fraction needed for statistical and analytical purposes (including brand safety and fraud detection), which is stored for no more than 180 days.

The data regarding ad impressions and your interactions with the ad is kept as long as it is needed for statistical, settlement, and product development purposes. It is stored for no longer than 180 days from its collection, except that the data from ad interactions is stored for additional 65 days on our backup systems, where it is not actively used and is deleted according to the predefined retention schedule.

After the lapse of periods specified above, the data is truncated or effectively anonymized.

In any case, we promptly respond to data subject requests related to the execution of the right to be forgotten by deleting all personal data covered by a given request.

6.11. Transfers to third country and safeguards

We shall not transfer or permit any of your personal data to be transferred to a territory outside of the European Economic Area unless we have taken such measures that are necessary to ensure that the transfer is in compliance with applicable laws. Such measures may include (without limitation) transferring personal data to a recipient in a country that the European Commission has decided provides adequate protection for personal data as referred to in Article 45 of the GDPR.

If you wish to find the list of the countries that the European Commission recognized as providing adequate protection, then click here.

6.12. Further Processing

If we need to use your personal data for a purpose not covered by this notice, then we will provide you with a new notice explaining such new use, prior to commencing the processing, and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing operation.

6.13. Data Protection Officer

We have appointed a data protection officer. It is a person you may contact regarding any issues related to privacy issues at Hybrid Adtech GmbH and the exercise of your rights concerning the processing of your personal data.

You may contact our Data Protection Officer:

1. by mail to the following address: (personal data)

6.14. Contact details and lodging a complaint with supervisory authority

To exercise all relevant rights and the queries of complaints, please contact Hybrid Adtech GmbH via e-mail

You are also entitled to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work, or an alleged infringement of the GDPR. Please find the contact details to supervisory authorities that have jurisdiction over our activity.

POLAND Prezes Urzędu Ochrony Danych Osobowych https://www.uodo.gov.pl/pl/p/kontakt 2 Stawki St. 00-193 Warszawa, Poland T: + 48 606-950-000

GERMANY Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219 10969 Berlin Tel.: +49 30 13889-0 Fax: +49 30 2155050 E-Mail: mailbox@datenschutz-berlin.de

CZECH REPUBLIC Úřad pro ochranu osobních údajů posta@uoou.cz Pplk. Sochora 27 170 00 Praha 7 T: +420 234 665 111

UNITED KINGDOM Information Commissioner’s Office casework@ico.org.uk Wycliffe Water Lane, Wilmslow Cheshire, SK9 5AF T: + 44 0303 123 1113

SWEDEN Datainspektionen datainspektionen@datainspektionen.se Drottninggatan 29, 5th floor Box 8114 SE-104 20 Stockholm T: +46-70 736 10 80

FRANCE Commission Nationale de l’Informatique et des Libertés 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07, France T: +33 (0)1 53 73 22 22

NETHERLANDS Autoriteit Persoonsgegevens Postbus 93374 2509 AJ DEN HAAG T: +31 – (0)70 – 888 85 00

HUNGARY Nemzeti Adatvédelmi És Információszabadság Hatóság privacy@naih.hu H-1125 Budapest Szilágyi Erzsébet fasor 22/C T+: +36 -1-391-1400 F

ITALY Garante per la protezione dei dati personali, Piazza Venezia n. 11 – 00187 Roma, garante@gpdp.it

SPAIN Agencia Española de Protección de Datos, C/ Jorge Juan, 6. 28001 – Madrid

CYPRUS Office of the Commissioner for Personal Data Protection Iasonos 1, 1082 Nicosia, Cyprus P.O.Box 23378, 1682 Nicosia, Cyprus

7. CCPA Privacy Policy

In these California Consumer Privacy Act Disclosures (“CCPA Disclosures”), we, Hybrid Adtech GmbH Inc. (“Hybrid Adtech GmbH ”, “we”) disclosure information about our data processing practices as required by the California Consumer Privacy Act of 2018 (“CCPA). These CCPA Disclosures are effective January 1, 2020.

1. I. Who and what information is subject to these CCPA Disclosures? California residents are protected as “consumers” by the California Consumer Privacy Act of 2018 (“CCPA”) with respect to personal information.
2. II. How can a consumer with a disability access these CCPA Disclosures? Consumers who have a visual disability may be able to use a screen reader or other text-to-speech or text-to-Braille tool to review the contents of this notice.
3. III. CCPA Privacy Policy We are providing the disclosures about consumer rights and our personal information handling practices in the preceding twelve months, as required by the CCPA and regulations of the California Attorney General, including §999.308. You may access a set of information required by the CCPA pertaining to our data processing activities as a business under the CCPA in our CCPA Privacy Policy

7.1. Right to Know About Personal InformationCollected, Disclosed, or Sold

This CCPA Privacy Policy describes personal information we generally collect, use, disclose about California residents. You have the right to request that we disclose what personal information we collect, use and disclose about you specifically (“right to know”). To submit a request to exercise the right to know, please submit an email request to dpo@hybrid.ai and include “California Request to Know” in the subject line or call our toll-free phone number [+1 0000000000]. Please specify in your request the details you would like to know, including any specific pieces of personal information you would like to access.

We will ask that you provide certain information to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. We will respond to your request in accordance with the CCPA. If we deny your request, we will explain why.

7.2. Our Personal Information Handling Practices

We have set out below categories of personal information we have collected about California residents in the preceding 12 months and, for each category of personal information collected, the categories of sources from which that information was collected, the business or commercial purposes for which the information was collected and the categories of third parties with whom we shared the personal information.

7.2.1. Category of personal information Identifiers such as an unique online identifiers (including cookie IDs and mobile advertising IDs)

We collected such personal information to use for the following business or commercial purposes: (a) use limited data to select advertising, (b) create profiles for personalised advertising, (c) use profiles to select personalised advertising, (d) measure advertising performance, (e) understand audiences through statistics or combinations of data from different sources, (f) develop and improve services, (g) ensure security, prevent and detect fraud, and fix errors (h) deliver and present advertising and content.

We have collected such personal information from the following categories of sources: Our business partners i.e.: (a) Supply Side Platforms (b) Publishers

We shared such personal information with the following categories of third parties: We share this information with our service providers such as data centers and companies of Hybrid Adtech GmbH Corporate Group that provide us with technical support and campaign management services.

In addition, we share this information with the Supply Side Platforms in order to receive from them the bid requests concerning digital properties.

7.2.2. Category of personal information Identifiers such as an Internet Protocol address indicating your general (non-specific) location (Geolocation data.)

We collected such personal information to use for the following business or commercial purposes: (a) use limited data to select advertising, (b) create profiles for personalised advertising, (c) use profiles to select personalised advertising, (d) measure advertising performance, (e) understand audiences through statistics or combinations of data from different sources, (f) develop and improve services, (g) ensure security, prevent and detect fraud, and fix errors (h) deliver and present advertising and content.

We have collected such personal information from the following categories of sources: Our business partners i.e.: (a) Supply Side Platforms (b) Publishers.

We shared such personal information with the following categories of third parties: We share this information only with our service providers such as data centers and companies of Hybrid Adtech GmbH Corporate Group that provide us with technical support and campaign management services.

7.2.3. Category of personal information Internet or other electronic network activity information, including browsing history and information regarding a consumer’s interaction with an Internet Web site, application or advertisement i.e.: (a) URLs of the web pages you visited (“referrer”) (b) data related to ad impressions and your interactions with our ads on publishers’ websites or apps (c) technical browser and device information (“user agent”) (d) timestamps.

We collected such personal information to use for the following business or commercial purposes:

1. 1.storing or accessing information on your device
2. 2. use limited data to select advertising,
3. 3. create profiles for personalised advertising,
4. 4. use profiles to select personalised advertising,
5. 5. Creating profiles to personalize content
6. 6. Using profiles to select personalized content
7. 7. Measuring content effectiveness
8. 8. measure advertising performance,
9. 9. understand audiences through statistics or combinations of data from different sources,
10. 10. develop and improve services,

We have collected such personal information from the following categories of sources: Our business partners i.e.: (a) Supply Side Platforms (b) Publishers.

We shared such personal information with the following categories of third parties: We share this information only with our service providers such as data centers and the company of Hybrid Adtech GmbH that provide us with technical support and campaign management services.

7.3. Disclosures and Sale of Personal Information

Over the preceding 12 months, we have not sold any categories of California residents’ personal information to third parties. We disclosed the following categories of California residents’ personal information to Supply Side Platforms: online identifiers.

7.4. Right to Request Deletion of Personal Information

You have a right to request the deletion of personal information that we collect or maintain about you. To submit a request to delete personal information, please submit an email request to dpo@hybrid.ai and include “California Request to Delete” in the subject line. Please specify in your request the personal information about you that you would like to have deleted, which can be all of your personal information as required by the CCPA. We will ask that you provide certain information to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. Once we have verified your identity, we will ask you to confirm that you wish to have your personal information deleted. Once confirmed, we will respond to your request in accordance with the CCPA. If we deny your request, we will explain why.

7.5. Right to Opt-Out of the Sale of Personal Information

You have the right to opt-out of the sale of your personal information by a business. We do not, and will not, sell your personal information. However, if you wish for Hybrid Adtech GmbH to stop providing personalized advertisements for you, you can opt-out of our technology.

7.6. Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

You may not be discriminated against because you exercise any of your rights under the CCPA in violation of Cal. Civ. Code §1798.125.

7.7. Authorized Agent

You can designate an authorized agent to make a request under the CCPA on your behalf if:

If you use an authorized agent to submit a request to exercise your right to know or your right to request deletion, please have the authorized agent take the following steps in addition to the steps described in Sections 2 and 3 above:

If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.

7.8. Contact for More Information

If you have questions or concerns regarding our privacy policy or practices, you may contact us using the following details: Email address: dpo@hybrid.ai Postal address: Hybrid Adtech GmbH: Potsdamer Straße 92, 10785 Berlin / Germany Phone: +48 601 265 678

Updated: March 1, 2024

7.9. PROCESSING PERSONAL INFORMATION AS A SERVICE PROVIDER

As a service provider of our Clients, Hybrid Adtech GmbH processes the following categories of personal information on behalf of our clients for the purpose of direct marketing of Client’s goods or services: (a) unique online identifiers, including cookie IDs and mobile advertising IDs; (b) technical browser and device information (“user agent”); (c) timestamps recording consumer’s activity on the Client’s websites.

In the event that the California Consumer Privacy Act (“CCPA”) applies, Hybrid Adtech GmbH : (a) will not sell any consumer personal information collected on our Client’s website in relation to providing digital advertising services to the Client (“Consumer Personal Information”); (b) will not retain, use or disclose the Consumer Personal Information for any purposes, other than for the specific purpose of performing the services specified in the agreement i.e. direct marketing of the Client’s goods or services, by optimization, selection and delivery of personalized advertisements to consumers on third party digital properties, or as otherwise permitted by the CCPA; (c) will not retain, use or disclose the consumer personal information outside of the direct business relationship between Hybrid Adtech GmbH and the Client under the agreement; and (d) will honor the request of any consumer to delete that Consumer Personal Information, however that request may be received – either directly from the consumer, from an authorized agent of the consumer, or from the Client – unless Hybrid Adtech GmbH , otherwise is permitted by law to not delete the consumer personal information.

8. Data Security Measures

We have implemented organizational and technical measures to assure an appropriate level of security of your data. We have deployed procedures regarding every aspect of data processing, and we carefully select technologies used for such processing and any data recipients.

Your data is protected against human interactions, equipment malfunctions, internal or external attacks, losses, or misuses. We store it in top-tier multi-tenant data centers operated by market-leading companies with appropriate data security certifications (in particular ISO 27001). In order to ensure the ongoing confidentiality and availability of your data, we use encryption and a back-up mechanism.

We constantly monitor the implemented security measures and develop the awareness and knowledge about privacy and personal data protection at our company on an ongoing basis.

We have implemented organizational and technical measures to assure an appropriate level of security of your data. We have deployed procedures regarding every aspect of data processing, and we carefully select technologies used for such processing and any data recipients.

Your data is protected against human interactions, equipment malfunctions, internal or external attacks, losses, or misuses. We store it in top-tier multi-tenant data centers operated by market-leading companies with appropriate data security certifications (in particular ISO 27001). In order to ensure the ongoing confidentiality and availability of your data, we use encryption and a back-up mechanism.

We constantly monitor the implemented security measures and develop the awareness and knowledge about privacy and personal data protection at our company on an ongoing basis.

9. Exercising Your Privacy Rights

If, after having been acquainted with the extent of data collected about your online activity, you have any concerns about your privacy, then you may disallow the collection of data by means of tracking technologies used by us specifically or by all providers in the following ways.

You may disable cookies in your web browser and mobile devices, which will prevent the collection of data by all providers.

For web browsers, please refer to your browser’s settings, as the procedure may depend on the browser you use. Please note that, due to the common use of cookies, turning them off may prevent you from using a variety of websites.

For mobile devices, please use device settings.

1. For iOS, select “Privacy” → “Tracking” → disable “Allow Apps to Request to Track”.
2. For Android, select “Users Area” → “Google” → “Ads” → “Opt out of Ads Personalization”.

The GDPR grants you additional rights, such as the right of access, rectification, erasure, or portability of your personal data and the right to object to or restrict the processing and to lodge a complaint with a supervisory authority. Furthermore, where we have collected and processed your personal data subject to your consent, you can withdraw it at any time. Such withdrawal does not affect the lawfulness of the processing we have conducted prior to your withdrawal. To learn more contact our Data Protection Officer.

10. Privacy Policy Changes

In order to develop the privacy protection, we may deem it fit or necessary to update this Privacy Policy at any time. Please follow our website where we will inform you about any material changes to our Privacy Policy.

10. Contact

If you have any further questions related to your privacy, please do not hesitate to contact our Data Protection Officer at the following:

1. Hybrid AdTech GmbH
2. Potsdamer Straße 92
3. 10785 Berlin / Germany
4. Phone: +48 601 265 678
5. dpo@hybrid.ai