A Beginner’s Guide: Supply-Side Platforms (SSPs) 101
A whole system works behind the scenes of online ads, connecting advertisers with websites and apps where they can show their ads. Supply-side platforms (SSPs) help websites and apps (the publishers) sell ad space to advertisers.
In this guide, we'll explore supply-side platforms (SSPs) and explain everything you need to know. SSPs facilitate transactions between publishers and advertisers. Today, we’ll explore the importance of SSPs—what they do, how they've evolved, and why they're essential in the digital advertising landscape.
What Are Supply-Side Platforms (SSPs)?
What exactly do SSPs do? They make managing and selling ad space for websites and apps accessible. “SSPs let publishers (aka suppliers) sell impressions to a greater pool of potential buyers, and allows suppliers to set the bidding range to maximize their revenue.”
SSPs also ensure publishers get the best offers for their ad space. They do this by running real-time bidding, where advertisers bid to show their ads on different websites and apps. It's like a digital bidding war but for ad space.
It's not just about showing ads; SSPs also track their performance. They give publishers information, like how often an ad was seen or clicked on, to help them determine which ads are working and which aren't.
SSPs are a key part of programmatic advertising's real-time bidding (RTB) process. They enable publishers to optimize yield by connecting their inventory to multiple ad exchanges and demand-side platforms (DSPs).
How Do SSPs Work?
Publisher Connects with SSP: A website or app owner (the publisher) signs up with a Supply-Side Platform (SSP) to monetize their content through ads.
Inventory Setup: The publisher sets up their ad inventory within the SSP's platform, defining details like ad formats, targeting options, and pricing preferences.
Ad Space Auction: When a user visits the publisher's website or app, the SSP quickly assesses available ad space and conducts a lightning-fast auction among potential advertisers.
Real-Time Bidding (RTB): Advertisers bid in real-time to display their ads in the available space. The highest bidder wins the auction, and the ad is displayed on the publisher's platform.
Ad Serving: The SSP ensures that the winning ad is displayed seamlessly within the publisher's content, adhering to any specifications or rules the publisher sets.
Performance Monitoring: The SSP tracks ad performance, collecting data on metrics like impressions, clicks, and conversions. This data helps publishers and advertisers optimize their strategies.
Revenue Distribution: Once the ad is displayed and engagement occurs, the publisher and the SSP share the revenue generated from the ad, often based on pre-agreed revenue-sharing models.
Overall, an SSP acts as a bridge between publishers and advertisers, facilitating the efficient buying and selling of ad space in real-time while ensuring both parties a seamless and profitable experience.
What Is the Difference Between an SSP and DSP?
Simply put, a Demand-Side Platform (DSP) and a Supply-Side Platform (SSP) connect to different parts of the programmatic ecosystem. A DSP helps advertisers organize ad buying, whereas publishers use an SSP to automate the sale of advertising space.
Let's consider an example to understand the roles of Supply-Side Platforms (SSPs) and Demand-Side Platforms (DSPs) in the:
Imagine you run a popular website that publishes news articles. Your website attracts a large audience, making it an attractive platform for advertisers to display ads.
Supply-Side Platform (SSP):
As the website owner, you integrate your digital property with an SSP. The SSP helps you manage and sell your ad space efficiently. You set up parameters within the SSP, such as ad formats, targeting options, and pricing preferences. When a user visits your website, the SSP conducts a real-time auction among advertisers interested in displaying ads to that specific audience.
The SSP ensures that the winning ad is seamlessly delivered to the user's device while adhering to your specifications.
Demand-Side Platform (DSP):
On the other hand, let's say a marketing agency represents a company that sells sports equipment. This agency uses a DSP to manage its digital advertising campaigns. Using the DSP, the agency sets targeting criteria, such as demographics, interests, and behavior, to reach potential customers interested in sports equipment.
When your website's ad space becomes available through the SSP's auction, the DSP automatically bids for it if it aligns with the agency's campaign objectives. If the agency wins the auction, its ad promoting sports equipment will be displayed on your website to your audience.
In summary, the SSP facilitates selling ad space on your website, ensuring optimal revenue generation for you as the publisher. Meanwhile, the DSP helps advertisers like the sports equipment company to efficiently manage their advertising campaigns and reach their target audience across various digital platforms, including your website.
Together, SSPs and DSPs streamline buying and selling digital ad inventory, benefiting both publishers and advertisers in the digital advertising ecosystem.
Learn more about Klever solutions for your industry.
A Closer Look at Supply-Side Platform Features
Supply-Side Platforms (SSPs) offer a range of features and capabilities designed to help publishers manage and monetize their digital advertising inventory effectively. Some standard features and capabilities include:
Inventory Management: SSPs provide tools for publishers to organize and manage their ad inventory. Publishers can categorize their inventory based on factors such as ad formats, targeting options, pricing, and placement preferences.
Real-Time Bidding (RTB): SSPs facilitate real-time auctions for ad space, allowing advertisers to bid on impressions as they become available. RTB enables publishers to maximize the value of their inventory by selling it to the highest bidder in real-time.
Header Bidding Integration: Many SSPs support header bidding. This technique allows publishers to simultaneously offer their ad inventory to multiple demand sources before making ad calls to their servers. This increases competition among advertisers and can result in higher ad revenues for publishers.
Ad Quality Control: SSPs offer features to help publishers maintain control over the quality of ads displayed on their platforms. This includes tools to block or filter inappropriate or non-compliant ads with publisher guidelines.
Ad Performance Reporting: SSPs provide publishers with insights and analytics on the performance of their ad inventory. Publishers can track metrics such as ad impressions, click-through rates, fill rates, and revenue generated, allowing them to optimize their ad strategies and maximize their income.
Audience Segmentation: SSPs enable publishers to segment their audience based on demographics, interests, and behavior. This allows publishers to offer targeted advertising opportunities to advertisers, increasing the relevance and effectiveness of ads displayed on their platforms.
Supply Path Optimization (SPO): SSPs may offer SPO features to help publishers optimize their relationships with demand partners. These features include tools to identify and prioritize the most valuable demand sources, reduce supply chain inefficiencies, and increase ad revenue.
Integration with Ad Exchanges and DSPs: SSPs integrate with ad exchanges and demand-side platforms (DSPs) to access a wide range of advertisers and demand sources. This enables publishers to maximize demand for their ad inventory and achieve higher fill rates and CPMs (cost per thousand impressions).
Mobile and Video Ad Support: Many SSPs support mobile and video ad formats, allowing publishers to monetize their inventory across various platforms and devices.
Data Monetization: Some SSPs allow publishers to monetize their first-party data through audience segmentation and targeting. This will enable publishers to generate additional revenue by offering advertisers access to their audience data for more precise targeting.
These are just some features and capabilities SSPs offer to help publishers optimize their digital advertising revenue and effectively monetize their ad inventory.
Key Takeaways
In conclusion, Supply-Side Platforms (SSPs) play a crucial role in the digital advertising ecosystem, empowering publishers to effectively manage and monetize their ad inventory while providing advertisers access to targeted audiences at scale. With many features and capabilities ranging from real-time bidding and ad quality control to audience segmentation and performance reporting, SSPs offer publishers the tools they need to optimize their ad strategies and maximize revenue.
As publishers navigate the complexities of the digital advertising landscape, partnering with a trusted agency like Klever Programmatic can unlock new opportunities for growth and success.
If you're ready to elevate your digital advertising efforts and unlock the full potential of your ad inventory, contact our team today.
%401x.svg)
Klever Programmatic, Inc- Privacy Notice
1. INTRODUCTION
Klever provides trading desk services to support our customers in buying, managing, and optimizing data-driven digital advertising campaigns across multiple platforms, devices and formats. In providing these services we may process your data if you are a user or potential user of our customers’ products, services, websites or media, or if you are or work for one of our customers or other business contacts.
This Privacy Notice explain show Klever uses and protects personal data and information. Klever is committed to respecting all applicable privacy laws and ensuring your data is secure. This Notice does not apply to our processing of data of Klever employees or employment candidates, which will be communicated separately.
Klever may change this Notice from time to time by updating this page. You should check back to ensure that you are up to date with any changes.
2. WHO WE ARE
The entity that takes decisions regarding why and how your personal information is processed (also referred to as a “Data Controller”) is:
Klever Programmatic, Inc. (“Klever”) (incorporated in Canada)
6000 Boulevard Rome, Suite410
Brossard, Québec J4Y 0B6
Canada
We have appointed our Chief Operating Officer as our Privacy Officer to oversee our data processing compliance and to be a point of contact for inquiries, who may be reached at the above addresses.
3. CATEGORIES OF DATA THAT WE PROCESS
A. Internet and media users: In providing our advertising-related services we may have access to data generated by publishers or advertisers from viewers of their websites, apps, connected televisions, or other media. We ourselves do not collect this data, but this data may be disclosed to us by customers or advertising technology partners who work with us on advertising campaigns.
In general, this information relates to online behavior and does not contain real life names or addresses orany other information that could allow anyone directly to identify or contact a particular person. Information we receive may include the following:
- cookie IDs
- device IDs
- advertising IDs (such as mobile advertising IDs)
- mobile device usage data (such as apps used)
- browser and device type, version and settings (“user agent”)
- IP addresses
- location of the device
- webpage browsing information e.g. urls visited or searched
- interactions with ads (e.g. views, clicks, purchases)
- advertising bid requests
- profile data, including likely characteristics, interests orintentions, which either we infer from the above information or is provided tous by customers and partners.
B. Business contacts: If you or your employer is a Klever customer (or potential customer), or one of our suppliers (or potential suppliers), an investor or potential investor, or other business contact, then we will need to collect certain personal contact information in connection with our relationship with you. This information may also come from our third party marketing partners. This may include:
- your name
- company name
- position
- professional qualifications or interests
- mailing address
- web address
- telephone numbers
- e-mail addresses
- details of products and services, and
- information provided to us in the course of correspondence with you (e.g. by email, phone, or online messaging).
4. PURPOSES FOR WHICH WE PROCESS DATA
We collect and use personal data for the following purposes:
A. Internet and media users
- personalizing, targeting and delivering ads
- limiting the number of times ads are seen
- measuring effectiveness and viewability of ads
- measuring clicks, purchases or other actions
- keeping records, reporting to customers and billing for adcampaigns
- making links between devices that might relate to the same users
- preventing fraud or invalid activities.
In Canada, the EU/EEA and UK our legal basis for this data use is your consent, which the relevant publisher or brand needs to have obtained from you in accordance with local laws. You can manage your consents as set out in Section 9.
B. Business contacts
- setting up, renewing, updating, and managing your or your organization’s contract or account with us
- billing and collections for services we provide
- making payments for products and services supplied to us
- evaluating new services and products
- investor relations
- recordkeeping, accounting and meeting other legal requirements
- managing, improving and expanding our business and resources
- communicating with you and managing our relationship with you
- answering inquiries including email, telephone, and chatconversations with sales and customer support staff
- responding to customer services requests
- organizing events such as webinars
- sending promotional communications and offers
- sending PR or company information (e.g. if you are a journalist or influencer)
- asking for feedback on our products and services
- understanding visitors’ navigation on our websites to understand trends and user interests and requirements.
In the EU/EEA and UK our legal basis for this data use is compliance with our legal obligations, performance of our contracts, or our legitimate interests which are compatible with your interests and rights. In Canada our legal basis for this data use is where possible your consent, which may be express or implied in accordance with local laws.
5. MEANS OF DATA COLLECTION AND DATA SOURCES
A. Internet and media users: This data may be disclosed to us by our customers in connection with their ad campaigns, or by or through demand-side platforms (DSPs) or ad exchanges through whom we buy online advertising or receive information in relation to pricing and performance of advertising.
B. Business contacts: We obtain this information directly from you or your employer, for example through exchanging emails or business cards, industry events, online or offline net working, business directories, publicly available information such as your organisation’s website and online channels, requests for proposals, or in-person meetings. In addition, if you visit our website, we may collect data using cookies and similar technologies.
6. RECIPIENTS AND INTERNATIONAL TRANSFERS
Our corporate headquarters is located in Brossard, Québec, Canada. Your personal information may be stored and processed in any country where we have facilities or service providers that we work with, e.g. for audience measurement, secure hosting, data storage, ad exchanges and DSPs.
We also provide data to ourcustomers in relation to their campaigns and contracts with us in order toensure proper billing and improve future campaigns.
Where we send data originating from the EU/EEA, the UK, or Switzerland internationally (other than to Canada or other places that are officially regarded as having adequate data protection laws), we put in place safeguards designed to ensure that data is processed in a way equivalent to the rules applicable under the EU and UK General Data Protection Regulations. These may include standard contract clauses for data transfers as approved by the European Commission or other supervisory authorities. A copy of these safeguards may be made available if we receive a valid request. When transferring data outside Québec or Canada, we will do so where we have assessed any privacy impact and concluded that the data will receive adequate protection.
Occasionally we may receive are quest from a government, law enforcement agency or regulator requesting data from us, and we would normally comply with such request without having to notify you.
7. DATA RETENTION PERIODS
We only retain data for as long as necessary for the purpose for which the data was collected. So we will retain your account data for at least the time that you or your organization has an account or contract with us. If you have subscribed to a newsletter or other communications, we will keep your contact details until you unsubscribe.
We retain device IDs and related data for up to eighteen months for billing and service management purposes. Aggregated and anonymized or statistical data may be retained for a longer period for reporting, testing, tax or legal reasons.
8. SECURITY
Once the retention periods are reached and data is no longer required, such data is anonymized so that it does not relate to any identifiable person and is not used for our services.
We implement and require our third party suppliers to implement security measures, including physical, logical, contractual, and organizational safeguards, to prevent unauthorized access to, loss, misuse, or alteration of the information that we process in connection with our services. We consider these measures to be appropriate given the low levels of sensitivity of the data that we access, and in line with all applicable laws and good industry standards.
9. PRIVACY TRAINING AND GOVERNANCE
We ensure that our personnel in roles that have a need to access personal information have appropriate and recent training regarding provincial, national and international personal information protection laws and practices. We also have in place internal policies which set out our framework for the keeping and destruction of personal information, limiting its collection, use, disclosure and retention, the roles and responsibilities of staff throughout all stages of its processing, including dealing with requests and complaints from individuals, data incident response plans, and all other aspects addressed by this Privacy Notice.
10. COOKIES
A cookie is a small piece of data sent from a website and stored in a user’s web browser or device. Every time the user loads the website, the browser sends cookie information back to the server to notify the website that it recognizes the user. You can find more information about different types of cookies here:
https://cookieinformation.com/what-is-a-cookie/.
We use cookies when you visit our websites, for the purposes of analyzing use of our websites, and improving and optimizing our websites and services.
You can remove cookies from your web browser by following the directions provided in your browser’s “help” or “settings” sections. Some cookies may be essential for using different features of certain websites, so if you clear all cookies then those features may not work as expected, or you may need to accept some cookies on your next visit. For mobile devices please review the privacy controls within your mobile operating system.
11. YOUR RIGHTS
In relation to online advertising data, there are various methods that enable you to manage consents and data use directly, without contacting publishers or media owners:
- for the USA: www.aboutads.info/choices and www.networkadvertising.org/choices
- for Europe: www.youronlinechoices.com
- for Canada: youradchoices.ca/choices
- for mobile devices: http://www.networkadvertising.org/mobile-choice
- for connected TVs: https://www.networkadvertising.org/internet-connected-tv-choices/
Some of these methods may place a cookie on your device to identify you as not wanting to receive targeted ads so, if you change devices or delete cookies, you may need to repeat this process.
In addition, under international data protection laws, including the GDPR in the EU/EEA or the UK and PIPEDA in Canada, you may have various additional rights such as the following:
- to access your personal data
- to require us to correct mistakes in your personal data
- to have personal data concerning you erased (“the right to beforgotten”)
- to receive personal data which you have provided to us (“portability”)
- to object to processing of your personal data for direct marketingor for certain other purposes
- to restrict our processing of your personal data in certaincircumstances
Consumers who are resident in US states such as California, Colorado, Virginia, Connecticut, Utah, Texas, Florida, Oregon, and Montana (and others in the future) may have additional rights under state privacy legislation. Depending on the particular provisions of such local laws, you may have some or all of the following rights:
- to have inaccurate data corrected
- to access and know what personal information we collect and hold, from which types of sources it was obtained, for what purposes, and the types of third parties it is shared with
- to optout of sales or sharing of personal information
- to request deletion of personal information that we collected from you
- to limit use of sensitive information
- to not be discriminated against for exercising your rights (e.g. we would not deny you goods or services, charge you a different price, or provide you a different level of quality).
Where our use or communication of your data is based on your consent, then you can always withdraw that consent (but any processing that took place before withdrawal will still be legal).
If you wish to exercise any of your legal rights, or have another issue or inquiry, it may be easiest to contact the publisher or media provider to whom you originally gave your consent. In other cases, please contact us using the details in this Notice and we will help as far as possible. Please note that we may ask you to verify your identity before acting on your request. If you believe that we have not respected your rights then you may also have a right to challenge our compliance before the supervisory authority in your country.
12. Additional Information For California Consumers
12.1 Personal Information Collected in the past 12 months
Category
Examples
Source
Business or Commercial Purpose
Categories of third parties disclosed to
Identifiers
Unique personal identifier, online identifier, Internet Protocol address (e.g. device and cookie IDs)
From ads
From our customers From third party data providers
Providing and improving our services which include ad targeting and performance measurement
Providing and improving our services which include ad targeting and performance measurement
Providing and improving our services which include ad targeting and performance measurement
Providing and improving our services which include ad targeting and performance measurement
Providing and improving our services which include ad targeting and performance measurement
Providing and improving our services which include ad targeting and performance measurement
- Our customers
- Our data hosting and storage providers
- Our providers of advertising technology and services such as demand side providers,
data management platforms, and ad networks
- Our data processing service providers (for purposes such as analytics, database management, customer support)
Commercial information
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies (e.g. sites visited, apps used, searches, views, clicks, and purchases)
As above
As above
As above
Internet or other electronic network activity information
Information regarding interactions with ads, websites and applications (e.g. sites visited, apps used, searches, views, clicks, and purchases)
As above
As above
As above
Geolocation Data
Approximate geolocation from information provided by a device (e.g. IP address)
As above
As above
As above
Sensitive personal information
Information concerning a consumer’s health (where permitted); precise geolocation
As above
As above
As above
Professional or employment-related information
Contact information used for managing and transacting with business contacts (e.g. customers and suppliers)
From individuals directly, e.g. via correspondence, chat, telephone, or web forms. From events and online and offline networking. From private and public sources such as websites and trade directories.
Promoting and managing our business
- Our data processing service providers (for purposes such as analytics, database management, email management, customer support)
- Our other group companies
12.2. Personal Information Sold or Shared in the past 12 months
We have sold and/or shared (with our customers) the following categories of personal information in the past 12 months: (a) Identifiers; (b) Commercial information; (c) Internet or other electronic network activity information; (d) Geolocation Data; (e) Inferences; and (f) Sensitive Personal Data.
12.3. Personal Information disclosed for a business purpose in the past 12 months
We have disclosed the following categories of personal information for a business purpose in the past 12 months: (a) Identifiers; (b) Commercial information; (c) Internet or other electronic network activity information; (d) Geolocation Data; (e) Inferences; (f) Sensitive Personal Data; and (g) Professional or employment-related information.
These business purposes comprise:
- Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
- Helping to ensure security and integrity.
- Debugging to identify and repair errors that impair existing intended functionality.
- Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf.
- Undertaking internal research for technological development and demonstration.
- Undertaking activities to verify or maintain the quality or safety of our Services, and to improve, upgrade, or enhance our Services.
Last updated: July 2024
Privacy - Privacy Notice
1. INTRODUCTION
Klever provides trading desk services to support our customers in buying, managing, and optimizing data-driven digital advertising campaigns across multiple platforms, devices and formats. In providing these services we may process your data if you are a user or potential user of our customers’ products, services, websites or media, or if you are or work for one of our customers or other business contacts.
This Privacy Notice explain show Klever uses and protects personal data and information. Klever is committed to respecting all applicable privacy laws and ensuring your data is secure. This Notice does not apply to our processing of data of Klever employees or employment candidates, which will be communicated separately.
Klever may change this Notice from time to time by updating this page. You should check back to ensure that you are up to date with any changes.
2. WHO WE ARE
The entity that takes decisions regarding why and how your personal information is processed (also referred to as a “Data Controller”) is:
Klever Programmatic, Inc.(“Klever”) (incorporated in Canada)
6000 Boulevard Rome, Suite410
Brossard, Québec J4Y 0B6
Canada
We have appointed our Chief Operating Officer as our Privacy Officer to oversee our data processing compliance and to be a point of contact for inquiries, who may be reached at the above addresses.
3. CATEGORIES OF DATA THAT WE PROCESS
A. Internet and media users: In providing our advertising-related services we may have access to data generated by publishers or advertisers from viewers of their websites, apps, connected televisions, or other media. We ourselves do not collect this data, but this data may be disclosed to us by customers or advertising technology partners who work with us on advertising campaigns.
In general, this information relates to online behavior and does not contain real life names or addresses orany other information that could allow anyone directly to identify or contact a particular person. Information we receive may include the following:
● cookie IDs
● device IDs
● advertising IDs (such as mobile advertising IDs)
● mobile device usage data (such as apps used)
● browser and device type, version and settings (“user agent”)
● IP addresses that reveal approximate location of the device
● webpage browsing information e.g. urls visited or searched
● interactions with ads (e.g. views, clicks, purchases)
● advertising bid requests
● profile data, including likely characteristics, interests or intentions, which either we infer from the above information or is provided to us by customers and partners.
B. Business contacts: If you or your employer is a Klever customer (or potential customer), or one of our suppliers (or potential suppliers), an investor or potential investor, or other business contact, then we will need to collect certain personal contact information in connection with our relationship with you. This information may also come from our third party marketing partners. This may include:
● your name
● company name
● position
● professional qualifications or interests
● mailing address
● web address
● telephone numbers
● e-mail addresses
● details of products and services, and
● information provided to us in the course of correspondence with you (e.g. by email, phone, or online messaging).
4. PURPOSES FOR WHICH WE PROCESS DATA
We collect and use personal data for the following purposes:
A. Internet and media users
● personalizing, targeting and delivering ads
● limiting the number of times ads are seen
● measuring effectiveness and viewability of ads
● measuring clicks, purchases or other actions
● keeping records, reporting to customers and billing for ad campaigns
● making links between devices that might relate to the same users
● preventing fraud or invalid activities.
In Canada, the EU/EEA and UK our legal basis for this data use is your consent, which the relevant publisher or brand needs to have obtained from you in accordance with local laws. You can manage your consents as set out in Section 9.
B. Business contacts
● setting up, renewing, updating, and managing your or your organization’s contract or account with us
● billing and collections for services we provide
● making payments for products and services supplied to us
● evaluating new services and products
● investor relations
● recordkeeping, accounting and meeting other legal requirements
● managing, improving and expanding our business and resources
● communicating with you and managing our relationship with you
● answering inquiries including email, telephone, and chat conversations with sales and customer support staff
● responding to customer services requests
● organizing events such as webinars
● sending promotional communications and offers
● sending PR or company information (e.g. if you are a journalist or influencer)
● asking for feedback on our products and services
● understanding visitors’ navigation on our websites to understand trends and user interests and requirements.
In the EU/EEA and UK our legal basis for this data use is compliance with our legal obligations, performance of our contracts, or our legitimate interests which are compatible with your interests and rights. In Canada our legal basis for this data use is where possible your consent, which may be express or implied in accordance with local laws.
5.MEANS OF DATA COLLECTION AND DATA SOURCES
A. Internet and media users: This data may be disclosed to us by our customers in connection with their ad campaigns, or by or through demand-side platforms (DSPs) or ad exchanges through whom we buy online advertising or receive information in relation to pricing and performance of advertising.
B. Business contacts: We obtain this information directly from you or your employer, for example through exchanging emails or business cards, industry events, online or offline net working, business directories, publicly available information such as your organisation’s website and online channels, requests for proposals, or in-person meetings. In addition, if you visit our website, we may collect data using cookies and similar technologies.
6. RECIPIENTS AND INTERNATIONAL TRANSFERS
Our corporate headquarters is located in Brossard, Québec, Canada. Your personal information may be stored and processed in any country where we have facilities or service providers that we work with, e.g. for audience measurement, secure hosting, data storage, ad exchanges and DSPs.
We also provide data to ourcustomers in relation to their campaigns and contracts with us in order toensure proper billing and improve future campaigns.
Where we send data originating from the EU/EEA, the UK, or Switzerland internationally (other than to Canada or other places that are officially regarded as having adequate data protection laws), we put in place safeguards designed to ensure that data is processed in a way equivalent to the rules applicable under the EU and UK General Data Protection Regulations. These may include standard contract clauses for data transfers as approved by the European Commission or other supervisory authorities. A copy of these safeguards may be made available if we receive a valid request. When transferring data outside Québec or Canada, we will do so where we have assessed any privacy impact and concluded that the data will receive adequate protection.
Occasionally we may receive are quest from a government, law enforcement agency or regulator requesting data from us, and we would normally comply with such request without having to notify you.
7. DATA RETENTION PERIODS
We only retain data for as long as necessary for the purpose for which the data was collected. So we will retain your account data for at least the time that you or your organization has an account or contract with us. If you have subscribed to a newsletter or other communications, we will keep your contact details until you unsubscribe.
We retain device IDs and related data for up to eighteen months for billing and service management purposes. Aggregated and anonymized or statistical data may be retained for a longer period for reporting, testing, tax or legal reasons.
8. SECURITY
Once the retention periods are reached and data is no longer required, such data is anonymized so that it does not relate to any identifiable person and is not used for our services.
We implement and require our third party suppliers to implement security measures, including physical, logical, contractual, and organizational safeguards, to prevent unauthorized access to, loss, misuse, or alteration of the information that we process in connection with our services. We consider these measures to be appropriate given the low levels of sensitivity of the data that we access, and in line with all applicable laws and good industry standards.
9. PRIVACY TRAINING AND GOVERNANCE
We ensure that our personnel in roles that have a need to access personal information have appropriate and recent training regarding provincial, national and international personal information protection laws and practices. We also have in place internal policies which set out our framework for the keeping and destruction of personal information, limiting its collection, use, disclosure and retention, the roles and responsibilities of staff throughout all stages of its processing, including dealing with requests and complaints from individuals, data incident response plans, and all other aspects addressed by this Privacy Notice.
10. COOKIES
A cookie is a small piece of data sent from a website and stored in a user’s web browser or device. Every time the user loads the website, the browser sends cookie information back to the server to notify the website that it recognizes the user. You can find more information about different types of cookies here.
We use cookies when you visit our websites, for the purposes of analyzing use of our websites, and improving and optimizing our websites and services.
You can remove cookies from your web browser by following the directions provided in your browser’s “help” or “settings” sections. Some cookies may be essential for using different features of certain websites, so if you clear all cookies then those features may not work as expected, or you may need to accept some cookies on your next visit. For mobile devices please review the privacy controls within your mobile operating system.
11. YOUR RIGHTS
In relation to online advertising data, there are various methods that enable you to manage consents and data use directly, without contacting publishers or media owners:
● for the USA: www.aboutads.info/choices and www.networkadvertising.org/choices
● for Europe www.youronlinechoices.com
● for Canada: youradchoices.ca/choices
● for mobile devices: http://www.networkadvertising.org/mobile-choice
● for connected TVs: https://www.networkadvertising.org/internet-connected-tv-choices/
Some of these methods may place a cookie on your device to identify you as not wanting to receive targeted ads so, if you change devices or delete cookies, you may need to repeat this process.
In addition, under international data protection laws, including the GDPR in the EU/EEA or the UK and PIPEDA in Canada, you may have various additional rights such as the following:
● to access your personal data
● to require us to correct mistakes in your personal data
● to have personal data concerning you erased (“the right to be forgotten”)
● to receive personal data which you have provided to us(“portability”)
● to object to processing of your personal data for direct marketing or for certain other purposes
● to restrict our processing of your personal data in certain circumstances
Consumers who are resident in US states such as California, Colorado, Virginia, Connecticut, or Utah (and others in the future) may have additional rights under state privacy legislation. Depending on the particular provisions of such local laws, you may have some or all of the following rights:
● to have inaccurate data corrected
● to access and know what personal information we collect and hold, from which types of sources it was obtained, for what purposes, and the types of third parties it is shared with
● to opt out of sales or sharing of personal information
● to request deletion of personal information that we collected from you
● to limit use of sensitive information
● to not be discriminated against for exercising your rights (e.g. we would not deny you goods or services, charge you a different price, or provide you a different level of quality).
Where our use or communication of your data is based on your consent, then you can always withdraw that consent (but any processing that took place before withdrawal will still be legal).
If you wish to exercise any of your legal rights, or have another issue or inquiry, it may be easiest to contact the publisher or media provider to whom you originally gave your consent. In other cases, please contact us using the details in this Notice and we will help as far as possible. Please note that we may ask you to verify your identity before acting on your request. If you believe that we have not respected your rights then you may also have a right to challenge our compliance before the supervisory authority in your country.
Last updated: 26 January 2023