My AccountBook a Demo
Legal

Data Processing Agreement.
Clear and fair.

How we process personal data for you.

This Data Processing Agreement ("DPA") forms part of the Terms of Service between the client ("Controller") and 3DMA Ltd., dba AdTech Europe ("Processor"). It applies whenever we process personal data on the Controller's behalf while providing our platform and services.

1. Definitions

"GDPR" means Regulation (EU) 2016/679. "Personal data", "processing", "controller", "processor" and "data subject" have the meanings given in the GDPR.

2. Roles and scope

The Controller decides why and how personal data is processed. We process it only to run the platform and services described in the Terms of Service and on the Controller's documented instructions.

2.1 Data processed

Online identifiers (cookie IDs, advertising IDs), IP addresses, device and browser information, approximate location, and ad interaction events (impressions, clicks, conversions).

2.2 Data subjects

Visitors to the Controller's websites and apps, and users who see or interact with the Controller's ads.

2.3 Duration

For as long as the Controller uses the services, plus any retention period set out below.

3. Our obligations

  • Process personal data only on documented instructions.
  • Ensure everyone with access is bound by confidentiality.
  • Apply appropriate technical and organisational security measures (Article 32 GDPR).
  • Help the Controller answer data subject requests.
  • Help with data protection impact assessments where required.
  • Notify the Controller without undue delay, and within 48 hours, of a personal data breach.

4. Sub-processors

The Controller authorises the sub-processors listed on our Sub-processors page. We give at least 30 days' notice of a new sub-processor, during which the Controller may object. We remain responsible for our sub-processors.

5. International transfers

Where personal data leaves the EEA, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

6. Security measures

Encryption in transit, access control with least privilege, logging, regular backups, network protection and staff confidentiality.

7. Audits

On reasonable written request, once a year, we provide information needed to show compliance with this DPA.

8. Return and deletion

When the services end, we delete or return the personal data within 90 days unless the law requires us to keep it.

9. Contact

Data protection requests: info@adtech.eu. A signed copy of this DPA is available on request.