What's DSGVO?
DSGVO stands for Data Protection Regulation, in English it is as GDPR or referred to General Data Protection Regulation. This is a regulation of the European Union, which regulates how personal data is deal by private companies. The regulation came into force on 05.24.2016 and must be applied compulsory from 05.25.2018.
What is the ePrivacy Directive?
also be mentioned in connection with DSGVO is the planned so-called ePrivacy Directive. You should regulate the handling of personal data, especially in the electronic communications (Internet, email, ...) in the future. The directive is not yet final and can therefore still subject to change; It is expected that the current draft will also appear largely unchanged at 25.05.2018 into force.
The current draft of the directive restricts example, a use of tracking cookies, therefore, is already implementing a precaution AdSpirit these regulations.
To whom DSGVO to follow?
In terms of online advertising DSGVO should always be used, among other things, if ...
- residence of the publisher in the EU
- the Advertiser in the EU is established
- of / mediators / networks / broker ... is established in the EU / / are
- is the visitor to the Website / recipient of the advertising in the EU resident
- a third party involved (eg ad server provider) is established in the EU
Since AdSpirit is based in the EU, hence the DSGVO must always be applied and all data, even if the user / visitor in question is not in the EU.
What is personal data?
Personal information is any information that are related to a person directly or mittlebar language and allow identification of the data subject is possible. Examples of data with a direct reference to individuals is about the name, address, telephone number, email address, bank details, order number or IP address. All other data, such as age, gender or hair color are always people relation, when combined with the aforementioned data (can).
How should the future to deal with personal information?
Personal data require a separate protection. In particular, the user must, in future, unless a contract or legitimate interest so requires, explicitly give their consent before the user's data processed, stored, or may be disclosed.
What does DSGVO for my Online Marketing?
Online advertising DSGVO shall have the following meanings:
- The use of cookies is no longer possible without consent. Keeping track of actions on the basis of cookies is therefore given no permission for users no longer possible.
- The storage of personal data is no longer possible without consent. In the context of online marketing, this applies in particular to the visitor's IP address.
- The transfer of personal data is no longer possible without consent. As under OpenRTB or as placeholders data may not be passed on as the visitor's IP address.
What AdSpirit doing in general?
Company-internal AdSpirit has already been prepared for months for the DSGVO and taken the necessary steps to all the requirements of DSGVO cover. In coordination with our firm, we have put together documents, our staff trained, appointed a data protection officer and done much further.
What does AdSpirit contract?
His Conditions will AdSpirit for 01/05/2018 adapt to the DSGVO. A separate plant will be included in the new terms and conditions then that controls the data processing between AdSpirit and its customers ( "Treaty order processing"). For new customers, the terms are automatically part of the contract; Existing customers need to explicitly sign a contract amendment, this we will send you in the next few days.
I am a publisher, what should I do/consider?
- Conclude a contract for data processing with your advertisers if you pass on personal data to them
- Conclude an order data processing contract with your other technical service providers (DMP, Analytics, CRM, …)
- Include CMP to obtain consent for data use (only mandatory if you process data yourself, but existing consent can help your advertisers improve campaign delivery)
- Post a privacy statement on your website
I am a marketer/networker, what should I do/consider?
As a marketer/network you should:
- Enter into a data processing contract with your publishers if you receive personal data from them
- Conclude an order data processing contract with your advertisers if you pass on personal data to them
- Conclude an order data processing contract with your other technical service providers (DMP, Analytics, CRM, ...)
- If not already done by the publisher: Include CMP to obtain consent for data use (only mandatory if you are processing data yourself, but existing consent can help your advertisers improve campaign delivery)
- Post a privacy statement on your website
I am an advertiser/agency, what should I do/consider?
As an advertiser/agency you should:
- conclude an order data processing contract with your partners if you receive personal data from them
- Conclude an order data processing contract with your other technical service providers (DMP, Analytics, CRM, ...)
- Post a privacy statement on your website
How do I obtain the consent of the users?
See the help section on TC strings.
How long are logs containing personal data stored?
AdSpirit only creates logs for clicks and actions (see Click Protocol and Action Protocol). The click log is valid for 14 days, the action log for an unlimited period. All other visitor data is only stored anonymously or grouped.