Terms & Conditions – Advertisers
By participating in Company’s advertising programs, or by executing an Insertion Order or other form that reference these terms, you hereby agree to the terms set forth herein, including any terms specified herein (the “Agreement”), as may be amended from time to time.
This Agreement is between you, as an individual or the entity you represent (hereinafter referred to as “Advertiser” “You” or “Your”) along with its affiliate, and our entity details of which are incorporated in the respective Insertion Order along with its affiliates, group Companies (hereinafter referred to as “Company”).
INTERPRETATION-
Unless the context otherwise requires, this Agreement shall be construed as follows: –
1. In this Agreement, each of the aforesaid shall be individually referred to as a “Party” and collectively referred to as the “Parties”.
2. The title of each paragraph is written only for the convenience of reading and does not have any legal or contractual obligations.
3. Any reference to a “person” includes any natural person, partnership, firm, company, governmental authority, joint venture, association or other entity (whether or not having separate legal personality).
4. The words “include” and “including” shall not be construed as terms of limitation.
5. References to any statute or provision include a reference to that statute or statutory provision as from time to time amended, extended, re-enacted or consolidated and to all statutory instruments made pursuant to it.
6. Words denoting the singular shall include the plural and vice versa.
BACKGROUND
1. Company operates an advertising platform offering multiple services including without limitation serving advertisements on Publisher’s websites, applications and other Internet-accessible devices and destinations.
2. Advertiser owns or is authorized by the lawful owner of Advertisement to use the Service(s) of the Company to place the Advertisements on Company Platform in accordance with the terms and conditions of the Agreement.
3. This agreement explains how the Parties agree to conduct business in relation to Advertiser’s use of Company’s suite of advertising services, platform and technologies.
1. DEFINITIONS.
1.1. “Ads” means all text, images, links, web pages, signs, banners, audio, video, visual works, or any other content owned by or licensed to Advertiser for the purpose of promotion and display on the Inventory (as defined herein), including any Proprietary Rights contained therein, including any content to which the Ads direct end users (such as landing pages) along with the related URLs and redirects all related content, materials and metadata submitted by Advertiser to Company.
1.2. “Affiliate”- means any entity that controls, is controlled by, or subject to common control with a party. The term “control”, including the terms “controlling”, controlled by” and “under common control with”, means the possession, direct or indirect, of the power to direct or cause the direction of management and policies through the ownership of voting shares.
1.3. Applicable Laws”- means all applicable laws, codes, ordinances, orders, rules, and regulations of local, state, and federal governments and agencies , including without limitation the California Consumer Privacy Act and the General Data Protection Regulation of the European Union (GDPR).
1.4. “Campaign Data” shall mean data regarding a campaign gathered during delivery of Ads pursuant to the Agreement (e.g., number of impressions, interactions, and header information), as well as any data that identifies or allows identification of Publisher, Publisher’s site, app, brand, content, context, or users as such, and any details set forth herein (including on the Insertion Order, if applicable) including pricing information, placement and targeting information.
1.5. “Confidential Information” shall mean any non-public, proprietary, confidential and/or trade secret information of a Party hereof, whether furnished before or after the Effective Date (as set forth in the Insertion Order), and furnished in any tangible form, and which given the totality of the circumstances, a reasonable person or entity should have reason to believe is proprietary, confidential, or competitively sensitive, including, without limitation, business procedures, technology and any related documentation, client list, developments, business partners or other information disclosed by a Party (the “Disclosing Party“) to the other Party (the “Receiving Party“) either directly or indirectly in writing. Confidential Information shall not, however, include any information which: (i) was known to the Receiving Party or in its possession at the time of disclosure without any confidentiality obligation; (ii) becomes publicly known and made generally available after disclosure by the Disclosing Party to the Receiving Party through no action or inaction of the Receiving Party; (iii) is independently developed by the Receiving Party without reliance on or use of the Confidential Information or any part thereof and the Receiving Party can show written proof of such independent development; (iv) required to be disclosed by applicable law, regulatory authority or a valid court order, provided that the Receiving Party shall provide the Disclosing Party with reasonable prior written notice of the required disclosure in order for the Disclosing Party to obtain a Protective Order and the disclosure shall be limited to the extent expressly required; (v) is approved for release by prior written authorization of the Disclosing Party; or (vi) the Receiving Party can demonstrate it was disclosed by the a third party without any obligations of confidentiality.
1.6. Effective Date- The Date as set forth in the IO or the date where the Advertiser starts to avail services of the Company
1.7. “Insertion Order” means a schedule or other document entered into or accepted by Company and Advertiser that incorporates this Agreement.
1.8. “Objectionable Content” shall mean content that is, promotes or contains links to content that is (i) pornographic, sexually explicit, obscene or adult content, (ii) harassing, threatening, abusive, offensive, violent, shocking, racist, or any content that promotes hatred or intolerance against others; (iii) illegal, contrary to public policy or that could facilitate the violation of any applicable law, regulation or government policy, (iv) libelous or defamatory, (v) infringes upon the Proprietary Rights or other right of any third party, including privacy or publicity rights; (vi) offers or disseminates any counterfeit or fraudulent goods (such as replicas or knockoffs), or services, schemes, investment opportunities or promotions or advice not permitted by law; (vii) containing misleading, deceptive or unrealistic promotions (such as by portraying nonexistent functionality (such as a non-operable “play” or “close” button), making false statements or claims, falsely implying affiliation with, or endorsement by another organization or service, misleading or tricking the user into interacting with the Ads, or impersonating system or browser warnings or error messages); (viii) promoting the use of drugs and drug paraphernalia, illegal substances or dangerous products (such as firearms or explosives), tobacco or alcohol products; (ix) harmful to Company’s or any other party’s systems and networks, including any Malicious Code; (x) facilitating illegal activity under applicable law or regulations; (xi) offering little or non-unique value to end users, or is focused primarily on traffic generation; (xii) directed to children under the age of 16; or (xiii) does not comply with the Store Policies.
1.9. “Malicious Code” shall mean viruses, worms, malware, spyware, adware, time bombs, Trojan horses, drive-by download applications or other harmful or malicious code, files, scripts, agents or programs, including code that: (i) is intended to or has the effect of misappropriating, hijacking, commandeering, or disrupting access to or use or operation of any information, device, hardware, system or network, or (ii) materially interferes with or disrupts the end users’ web or mobile navigation or intervenes with the end users’ control over the operating system, browser settings, browser functionality or webpage’s display.
1.10. “Payment Model” shall mean any of the following: (i) cost per installation (“CPI“) model; (ii) cost per thousand impressions (“CPM“) model; (iii) cost per action (“CPA“) model; or (iv) cost per click (“CPC“) model.
1.11. “Proprietary Rights” shall mean all intellectual property rights, including, without limitation: (a) all inventions, whether patentable or not, all improvements thereto and derivatives thereof, and all patents and patent applications; (b) all registered and unregistered: marks, trademarks, service marks, trade names, trade dress and associated logos, domain names and registrations and applications for registration thereof; (c) all copyrights in copyrightable works, all other rights of authorship, including without limitation moral rights, and all applications and registrations in connection therewith; (d) all trade secrets and Confidential Information; (e) all rights in databases and data compilations, whether or not copyrightable; and (f) all copies and tangible embodiments of any or all of the foregoing (in whatever form, including electronic media).
1.12. “Store” means the Google Play Store or the App Store, as applicable.
1.13. “Store Policies” means Google Play Content Policies (as available here: https://developer.apple.com/app-store/review/guidelines/), or the App Store Review Guidelines, (as available here: https://developer.apple.com/app-store/review/guidelines/), as applicable.
1.14. “User Action” means any user’s interaction with the Ads, including without limitation impressions, clicks, conversions, installations, and any other user action.
1.15. “User Data” means any personal and non-personal information pertaining to users, including User Actions, and including any custom audience segmentation, post-install events, unique device identifiers and attribution data.
2. LICENSE AND SERVICE.
2.1. Advertiser hereby grant to Company and its affiliates a worldwide, non-exclusive, royalty-free right and license to use, serve, copy, reproduce, distribute and display, in any known medium or hereafter developed, the Creative and/or Ads, on any online properties (“Inventory” or “Placements“) made available by Company’s publishers (“Publishers“), and promote the Ad Campaign(s), subject to this Agreement and/or (if applicable) the Insertion Order (the “Service“).
2.2. In the event the Parties has entered into an Insertion Order, the Parties acknowledge that such Insertion Order may set forth the details of the Ad Campaign, including the type and quantity of ad placements, the rate price per ad placement, the daily budget target allotted to the campaign, etc., and which shall incorporate by reference these Advertiser Terms.
2.3. Company and its affiliates may make available to Advertiser certain features to assist Advertiser with the generation, selection and optimization of users’ targeting decisions (“Targeting“). Advertiser hereby acknowledges that the Advertiser is solely responsible for the Ads (including any content made available thereof) and for the Targeting.
2.4. Company shall use commercially reasonable efforts to serve or place the Ads on the Inventory, pursuant to the Targeting. Advertiser acknowledges that Company shall be under no obligation to display or deliver a minimum number of Ads’ impressions, clicks or other User Actions, .
2.5. Company may make available to Advertiser certain automated tools (including without limitation APIs, SDKs, JavaScript, tags, tracking and/or attribution tools), whether operated by Company or licensed from its respective third parties (collectively “Tracking and Attribution Tools”), in connection with the performance of the Service. The Tracking and Attribution Tools shall be considered as a part of the Service.
3. AD CAMPAIGNS.
3.1. Advertiser shall develop all aspects of the Ad Campaign, and shall provide Company all creative and substantive materials (“Creative“) required for the promotion or distribution of the Ads in connection with a campaign (“Ad Campaign“), in whatever format (including without limitation banners, links, fields, video, rich media, and any other creative content as required, including any content to which the Creative directs users, along with the related URLs), together with any measurements or specifications parameters for the Ads’ units (“Measurements“).
3.2. Ad Campaigns may be accessible through whatever online means or devices, including (without limitation) on websites, non-mobile websites, mobile applications, and/or mobile websites or by any other online and mobile marketing means as determined by Company.
3.3. Company shall exercise reasonable efforts to endeavor that the Ads are delivered in accordance with the Measurements specified by the Advertiser; however, Company does not warrant or otherwise undertake that the Creative shall be used in any Ad Campaign, or that the Ad Campaign shall achieve any specific performance or volumes within the term of the Ad Campaign and with the budget agreed for such Ad Campaign.
3.4. Company makes no guarantee regarding the placement, positioning, specifications, dimensions, frequency, volume, ranking or timing of Ads delivery, and any editorial decisions related to the Creative and/or Ads, which shall be made by the Publishers in their sole discretion. Company makes no representation as to the performance of any Ads or Ad Campaign and disclaims all representations, warranties and liability with respect to the success or return on investment of any Ads or Ad Campaigns, including with respect to User Actions.
3.5. Although Company shall exercise reasonable efforts to endeavor that Advertiser’s daily target budget shall not exceed the amount set forth in the Insertion Order, Advertiser shall remain liable to pay for any User Actions in accordance with this section even if the daily target budget is exceeded.
3.6. Advertiser acknowledges and agrees that Company is not responsible and has no liability whatsoever for the Ads and the Creative, and that Company has no obligation to monitor the foregoing. Notwithstanding anything to the contrary stated in this Agreement, Company reserves the right at its discretion and without notice, to remove or refuse to distribute any Ads and/or Creative or any content associated therewith.
3.7. Company reserves the right, in its reasonable discretion and without liability to reject, limit, remove, exclude, suspend or terminate any Ad Campaign, for any reason at any time, whether or not such Ad Campaign was previously acknowledged, accepted or published by Company.
3.8. Advertiser is responsible for immediately terminating expired Ad Campaigns or Ad Campaigns which suffer from technical problems (e.g. broken links). In case of a failure by Advertiser to terminate such Ad Campaigns, Advertiser shall be liable to pay for lost clicks – $0.10 per click.
3.9. Tracking. Company will host the Ad Campaign and provide the tracking solution or otherwise enable the Advertiser to provide a different tracking solution. Notwithstanding the foregoing, Company’s tracking count shall be used for all purposes under the Agreement, including billing and measurement of Ad Campaign’s performance.
3.10. Unless otherwise stated in writing by Company, each Creative used by Company in connection with an Ad Campaign must include, in an unaltered form, the special transaction tracking computer code or tracking link provided by Company (“Tracking Codes“). In the event the Parties agreed to utilize a tracking solution offered by a third party provider recognized by Company (“Tracking Partner”), Company shall reserve the right to count additional installations and/or conversions which it has recognized in addition to those tracked by the Tracking Partner. Advertiser shall deliver to Company on a real-time basis the performance reports with respect to each Ad Campaign, based on the results measured by the Tracking Partner, and as requested by Company upon demand. The reports shall meet, in form and substance, the reasonable requirements of Company.
3.11. The Advertiser acknowledges that Company may also be entitled to prepare a tracking report based on the results measured by the Tracking Partner and for such purpose shall have the additional right, to interface with the tracking solution offered by the Tracking Partner.
3.12. It is noted that for accurate attribution Ad effectiveness, Company shall activate an installations’ and/or conversions’ attribution for any installation or conversion made 24 hours following a view of an Ad, regardless of the last click.
4. PAYMENTS.
4.1. Advertiser shall pay all charges incurred in connection with the Service by Company, in accordance with the rates communicated to the Advertisers, which shall be based on the Payment Model agreed upon between the Parties. Company may determine a minimum rate which can be changed by Company from time to time.
4.2. Advertiser acknowledges that it shall remain liable to pay for any User Actions: (i) generated from different territories than those set forth in the Insertion Order or otherwise specified by the Advertiser, up to a number of installations equal to 10% of the total number of installations from such territories; and (ii) which occur up to 30 days following the termination of an applicable Ad Campaign.
4.3. Unless otherwise agreed between the Parties, the Advertiser shall be charged by Company through the payment method approved by the Parties (credit card). Without limiting the foregoing, the Advertiser may pre-pay Company through wire transfer.
4.4. The Advertiser will be charged automatically each time activity reaches a predetermined amount ($200 by default or the equivalent agreed by both parties), or at the end of the month, whichever comes first.
4.5. All charges as reflected in the invoice shall be calculated solely based on Company’s measurements and applicable billing metrics; Company shall track, manage and report such measurements in good faith to Advertiser.
4.6. Company will bill for all charges and fees at the end of the month or week (as agreed) or upon completion for usage of services whichever comes earlier. Company will submit an invoice to the Advertiser through e-mail or mailing address indicated on the Insertion order or Agreement.
4.7. The Advertiser alone shall bear any and all wire transfer fees and processing fees related to its payment (e.g. bank fees, PayPal, credit card, etc.). Payment will be made in the currency specified in the invoice. Where applicable the Advertiser shall bear the processing fees .
4.8. Advertiser shall submit to Company any disputes relating to the measurement or calculation of any User Action, in writing or by email specifying the reason for such objection, including providing reasonable proof, within seven (7) days as of the occurrence of said User Action. If no such dispute has been made within the foregoing time period, the User Action shall be deemed as accepted by Advertiser and billed accordingly. Any portion of a charge not disputed in good faith must be paid in full, and Company will not process or accept any refunds and/or chargebacks related to disputes that were not raised with the seven (7) days as of the occurrence of any User Action.
4.9. Company will not process any refunds and/or chargebacks to Advertiser accounts which have been suspended, blocked or terminated due to fraudulent activities.
4.10. It is hereby affirmed that without concrete and specific proof of fraudulent activity by one of the Publishers through the Service, Company shall not be entitled to reimburse any fees, any complaint in regards to low retention rates for the Service and other performance indicators will not serve as proof of fraud and as such Company shall not be obliged to reimburse any fees.
4.11. Advertiser will have no right to setoff, withhold or otherwise deduct any amount owed to Company hereunder (and accordingly transfer to Company when due any such amount whether in dispute or not) against any amount owed or claimed to be owed by Company to Advertiser (under any theory of liability).
4.12. All charges shall be remitted to Company in U.S. dollars or any other currency that both parties agree within thirty (30) days from the date of receipt of invoice. Late payments shall bear interest at the rate of 1.5% per month (compounded and computed daily). Advertiser shall pay reasonable expenses and attorneys’ fees Company incurs in collecting late payments. Company reserve the right to use the Advertiser’s information for debt collection purposes and send the Advertiser’s details for collection of non- payments.
4.13. All charges due to Company under this Agreement will be exclusive of taxes, duties, levies, tariffs, and other governmental charges (including, without limitation, VAT and GST) (collectively, “Taxes“). Advertiser will be responsible for payment of all Taxes and any related interest and penalties resulting from any payments made hereunder, other than any taxes based on Company’s net income. If Advertiser is required by any law or regulation to make any withholding or deduction from fees payable to Company on account of any Taxes, Advertiser shall, together with the relevant payment, pay such additional amount and will ensure that Company receives an amount equal to the sum it would have received if no such withholding or deduction had been required. Upon Advertiser’s request, Company shall provide it with such available information and documents as reasonably necessary for obtaining an exemption from the withholding or deduction of amounts or for a refund of the amounts withheld or to be withheld by Advertiser on the account of taxes, duties or levies under any applicable tax jurisdiction.
4.14. Advertiser must ensure that any payment mechanism (e.g. credit card, direct transfer, etc.) which Advertiser elects to utilize remains current and operable throughout the term of the applicable Service. Advertiser shall be responsible for any fees and/or charges that Company may levy upon Advertiser because of late or delinquent payments resulting from invalid payment authorization.
5. INTELLECTUAL PROPERTY.
5.1. Without limiting the rights herein, Advertiser shall have all right, title and interest in its Creative. Company retains all right, title and interest in the Proprietary Rights in the Service, as well as any derivative therefrom, and Company or Company’s Publishers as applicable retain all right, title and interest in the Proprietary Rights in the Inventory. If Advertiser provides Company with any feedback regarding the Service, Company may use all such feedback without restriction. Nothing herein shall be interpreted to provide Advertiser any rights in the Service and/or the Inventory except the limited right to use the Service as set forth herein.
5.2. In the event Company develops any Creative and/or Ads for Advertiser, or in the event any content provided by Company (such as logos, designs, or other promotional artwork) is used to create such Creative and/or Ads, whether by Company or any third party, then Company retains all right, title and interest in the foregoing.
5.3. Nothing in this Agreement shall be construed as providing the Advertiser a right to use any of Company or its affiliates’ trade names, trademarks, service marks, logos, or other distinctive brand features. Company reserves all rights in the Service not expressly licensed above. Advertiser agree that the use of any components of the SDK that are licensed under an open-source software license are subject to and governed solely by the terms of the applicable license(s) for that software, and not by this Agreement.
6. WARRANTIES.
6.1. Mutual Warranties. Each Party represents and warrants that:
a. it is duly organized under applicable law and has sufficient authority to enter into this Agreement and that,
b. the execution and performance under this Agreement does not conflict with any contractual obligations such party has to any third party.
6.2. Company Warranties. Company represents and warrants that the Service:
a. does not, to the best of its knowledge, infringe the intellectual property rights of any third party.
b. comply with all applicable law and regulations.
c. does not to the best of its knowledge contain any Malicious Code.
6.3. The Company reserves the right, in its sole discretion and without liability, to reject or remove any Ads or Creative from the Service. Advertiser acknowledges that any campaign may be terminated or suspended, whether by Company or its Publishers, at any time and without notice to Advertiser. Advertiser hereby acknowledges that Company is providing the Service as an intermediary between Advertisers and Publishers and as such Company shall not be held responsible or liable for any actions or omissions performed or omitted by any third parties (including with respect to the content of the Creative or Ads, or the Inventory).
6.4. Advertiser Warranties.
6.4.1. Advertiser represents and warrants that the Creative does not contain any Objectionable Content. The Ads or any material and content (including, but not limited to, text, graphics, images, photographs, sounds, etc.) shall not be illegal or objectionable (for example, materials that may be considered obscene, pornographic or defamatory) and Malicious.
6.4.2. The Advertiser is responsible for the content of any Creative, including with respect to complying with applicable laws and regulatory guidelines, including age-gating where necessary, as well as any additional guidelines issued by Company.
6.4.3. It is properly licensed and obtained sufficient rights to submit the Creative pursuant to this Agreement;
6.4.4. It shall submit the Creative in accordance with any technical specifications provided by Company;
6.4.5. It complies with, and shall continue to comply with, all applicable laws and regulations for the performances under this Agreement including but not limited to applicable Data Protection laws such as GDPR and CCPA, applicable Trade Laws, Anti Bribery and Corruption Laws
6.4.6. The Ad will not infringe or violate the rights of any third party or violate Legal Requirements
6.4.7. Any information the Advertiser provides Company (including contact information or payment information) will at all times be complete and accurate, and will be maintained up-to-date at all times.
6.4.8. It shall make available to Company, upon request, with any information relating to the Ad Campaign, and shall ensure that the distribution or promotion of the Ads is in compliance with the Campaign Conditions.
6.5. Advertiser further represents and warrants that it will not :
6.5.1. promote any mobile applications (“Application“) which are not available for download on the applicable Store. Upon removal of an Application from the Store, Advertiser shall promptly inform Company of such occurrence and immediately cease to run the Ad Campaign associated with such Application.
6.5.2. Use the Service to syndicate, mediate or broker campaigns or the distribution of Ads through other third parties or affiliates, without the express written approval of Company, except where the Advertiser has entered into a direct relationship with the third party or affiliate wherefrom the Ads are sourced.
6.5.3. Copy, decompile, disassemble, adapt, translate, create derivatives works of, reverse engineer or attempt to find the underlying source code of, the Service;
6.5.4. Modify, change, edit, amend, truncate, alter, disable, bypass or reorder any aspect of the Service or the Inventory, or in any other way manipulate the Service in any way;
6.5.5. Sell, re-sell, lease, rent, sublicense, distribute, display or make any other use of Service or the Inventory, except as expressly permitted hereunder;
6.5.6. Remove or obscure any credits, watermarks, tradenames, trademarks, logos, service marks or copyright notices set on the Ads;
6.5.7. Use the Service to create (or facilitate the creation of) any product or service that is competitive with the Service;
6.5.8. Copy, crawl, index, cache or store any information derived by Company, except as expressly permitted hereunder, or otherwise use robots, spiders, scraping or other technology to access or use the Service to obtain any information beyond what Company provides Advertiser under the Agreement.
6.5.9. Engage in any action or practice that disparages or devalues Company, or the reliability, reputation or goodwill of Company or its affiliates, or engage in any action or practice that might impede the performance, reliability or quality of the Service.
6.6. To the extent any of the restrictions set forth above are not enforceable under applicable law, Advertiser shall inform Company in writing prior to engaging in any of the applicable activities.
6.7. Advertiser acknowledges and agrees that at any time during the term of the Agreement, if Company believes, in its reasonable discretion, that Advertiser or anyone on its behalf is engaged in any conduct or activity which is prohibited under this Agreement, Company or any of its Publishers reserve the right without prior notice to Advertiser to (i) remove or reject and Ads and/or Creative, or suspend or terminate any Ad Campaign, or take any measures needed to prevent or correct such conduct or activity from being used in connection with the Service, without any liability to Advertiser whatsoever as a result of any of the foregoing actions taken by Company or its Publishers.
7. CONFIDENTIALITY
7.1. During the course of services, parties have or shall receive, or access to records and information of confidential and proprietary nature to Disclosing Party. The Receiving Party acknowledges and agrees that such information is an asset of Disclosing Party, is not generally known to the trade, is of a confidential nature and, must be kept strictly confidential and used only in the performance of Receiving Party duties under this Agreement. The Receiving Party agrees that it will not use, disclose, communicate, copy or permit the use or disclosure of any such information to any third party in any manner whatsoever except for the purpose of this agreement or as otherwise directed by written consent of Disclosing Party. The Receiving Party shall disclose only such information to employees who “need to know” the Confidential Information in connection with the Agreement and only after such employees have been informed of the confidential nature of the information and have agreed to be bound by a similar binding obligation of confidentiality and non-disclosure. The Receiving Party further agrees that the Disclosing Party Confidential Information shall remain the sole property of the Disclosing Party. No license shall be granted by the Disclosing Party to the Receiving Party with respect to Confidential Information disclosed hereunder unless otherwise expressly provided therein.
7.2. Upon termination of this Agreement or upon the request of Disclosing Party, the Receiving Party shall return to Disclosing Party all of the confidential information, and all copies or reproductions thereof, which are in Receiving Party possession or control. If the Receiving Party breaches any of its obligations with respect to confidentiality and unauthorized use of the Disclosing Party’s Confidential Information, Disclosing Party will be entitled to seek equitable and injunctive relief to protect rights and interest as-well as other remedies available to the Disclosing party under law and equity. This section shall survive the expiry or termination of this agreement for a period of 1 year post expiry or termination of this agreement.
8. DATA PROTECTION.
8.1. Advertiser warrants and represents that it:
8.1.1. User Data shall be collected in accordance with Company privacy policy, available at Company’s website.
8.1.2. Except where authorized by Company, Advertiser shall collect and use the User Data only on an anonymous basis, and shall not collect, use or share any User Data which may be considered as personal data under applicable laws and regulations, for the purpose of delivering Ads, retargeting users or constructing profiles of end users;
8.1.3. Where Advertiser collects from the Publisher’s Inventory or otherwise shares with Company any Campaign Data or User Data that may be considered as personal data under applicable laws and regulations (such as through the use of Tracking and Attribution Tools), then the Advertiser shall comply with the Data Protection Addendum annexed hereto.
8.1.4. Shall provide the end users with any notice and obtain any consent from end users as required by applicable laws and regulations in connection with the collection, use and disclosure of User Data, and shall maintain, and require that all third parties that collect User Data maintain a publicly available online privacy policy that provides notice of User Data collection practices related to the Ads, including without limitation use of a cookie, web beacon or other tracking mechanisms;
8.1.5. Without limiting from the foregoing, Advertiser shall collect, use and disclose User Data in accordance with any applicable laws, its privacy policy, and with the applicable Store Policies relating to data usage and the use of mobile advertising IDs (e.g., IDFA and Android Advertising ID), and shall allow Company to provide any link it seems necessary for the provision of any disclosure or notice in or around the Ads.
8.1.6. Advertiser shall use User Data and Campaign Data solely to the extent necessary for the performance of this Agreement, and/or on an aggregated basis for its internal business analysis or internal reporting.
9. INDEMNIFICATION.
9.1. Company Indemnification. Company shall defend, indemnify and hold harmless Advertiser from and against any direct damages, costs, losses, liabilities or expenses (including court costs and reasonable attorneys’ legal fees; collectively “Damages“)) which Advertiser may suffer or incur in connection with any actual claim, demand, action or other proceeding by any third party (“Claim“) arising from: (a) any breach of Company’s obligations, representations or warranties herein; or (b) a claim that the underlying technology of the Service infringes the intellectual property rights of a third party. Notwithstanding the foregoing, Company shall have no responsibility or liability for any claim to the extent resulting from or arising out of (a) the use of the Service not in compliance with this Agreement or applicable law, (b) the combination of the Service with any code or services not provided by Company, (c) the modification of the Service by any party other than Company.
9.2. Advertiser Indemnification. Advertiser shall defend and indemnify Company (and its affiliates, officers, directors and employees) from and against any and all Damages which Company may suffer or incur in connection with any Claim arising from: (a) any breach of Advertiser’s obligations, representations or warranties herein; (b) any use of the Service in violation of any applicable law or regulations or breach of third Party IP; and (c) the Creative.
9.3. Procedure. The obligations of either Party to provide indemnification under this Agreement will be contingent upon the indemnified party (i) providing the indemnifying party with prompt written notice of any claim for which indemnification is sought (provided that the indemnified party’s failure to notify the indemnifying party will not diminish the indemnifying party’s obligations except to the extent that the indemnifying party is materially prejudiced as a result of such failure), (ii) cooperating fully with the indemnifying party (at the indemnifying party’s expense), and (iii) allowing the indemnifying party to control the defense and settlement of such claim, provided that no settlement may be entered into without the consent of the indemnified party if such settlement would require any action on the part of the indemnified party other than to cease using any allegedly infringing or illegal content or services. Subject to the foregoing, an indemnified party will at all times have the option to participate in any matter or litigation through counsel of its own selection at its own expense.
10. DISCLAIMER OF WARRANTIES.
10.1. Except as expressly provided herein, Advertiser accepts the Service on an “AS IS” and “AS AVAILABLE” basis and acknowledges that Company makes no other warranty and disclaims all implied and statutory warranties, including, but not limited to, any implied warranty of merchantability, fitness for a particular purpose or non-infringement.
10.2. The Company does not guarantee that the Service will always be complete, accurate, safe, secure, bug-free or error-free, or that the foregoing will always function without disruptions, delays or imperfections. The Company may change, suspend or discontinue the Service at any time, including the availability of any feature or database, without notice or liability. In addition, the Company may modify, remove or limit certain features or restrict the Advertiser’s access to the Service without notice or liability.
11. LIMITATION OF LIABILITY.
11.1. In no event shall Company, its directors, officers, affiliates or agents be liable for any consequential, indirect, special or punitive damages, arising out of or relating to the Service or the arrangements contemplated herein.
11.2. Except for intentional misconduct or gross negligence, Company’s entire liability for the provision of the Service or under any provision of this Agreement shall not exceed the amount of payment received by Company from Advertiser in the one (1) month preceding the applicable claim.
12. TERM AND TERMINATION-
12.1. The term of this Agreement shall commence on the Effective Date and shall continue until terminated by either Party pursuant to this Agreement (“Term“).
12.2. Either Party may terminate this Agreement at any time by providing prior written notice of 30 days to the other Party, without liability to the other Party.
12.3. Upon any termination or expiration of this Agreement, Company will cease providing the Service and all licenses and rights provided herein shall be revoked.
12.4. In the event of any termination any outstanding amounts due to the Company shall be paid immediately without delay to the Company.
12.5. Any obligations of the Parties that by their nature are intended to survive the termination or expiration of this Agreement, including the obligations of the Parties in Sections 3 and 5 – 14 of this Agreement, shall survive any termination thereof.
12.6. Either Party may terminate this Agreement immediately if the other party materially breaches this Agreement and the non-breaching party provides the breaching party with a written notice of the breach, and the breaching party does not cure such breach within 15 days of the provision of such notice.
13. REFUND POLICY.
13.1. Company offers refund in accordance with the Company Refund Policy and Procedures. All refunds are made at our sole discretion and without admission of liability.
13.2. Refunds will be paid to the Advertiser who has a valid written Agreement.
13.3. This clause should be only applicable to any prepay accounts, where payment is paid via Credit card or Wire Transfer. For calculating the permissible refund, set off for any spending, relating to the current period, for the same advertiser, will be considered.
Advertiser should be active in the Platform within last 90 days.
13.4. Refunds shall be applied within 12 months from the date of Payment. It takes 2 to 4 weeks for a refund to be issued. Company issues credits to the payment method on the account where possible. Where this isn’t possible, company may issue refunds in the form of account credit.
13.5. The Banking costs/fees shall be borne by the advertiser.
14. MISCELLANEOUS.
14.1. Updates. If Company provides Advertiser with any upgrades, patches, enhancements, or fixes for the Service (“Updates”), or if Company notifies of such Updates through its platform or integration section, then such Updates will become part of the Service and subject to this Agreement. The Company is required to use the most updated and current version of the Service . Company shall have no obligation, however, under this Agreement to provide any Updates or any other support to the Advertiser for the Service.
14.2. Modifications. The Company makes no guarantees with respect to the availability or uptime of its Service. However, the Company shall use its reasonable commercial efforts to ensure that the availability or uptime of the Service shall meet industry standards. The Company may change the method of access to the Service at any time. In the event of degradation or instability of the Service or an emergency, the Company may, in its sole discretion, temporarily suspend the Advertiser’s access to the Service.
14.3. Publicity. During the Term, Company may refer to Advertiser as a business Partner of Company, including by displaying Advertiser’s name and logo on Company’s website and other marketing materials.
14.4. Export Controls. Advertiser represents and warrants that it is not located in, under the control of, or a national or resident of any country to which the United States has embargoed goods or services; (ii) is not identified as a “Specially Designated National;” by the Office of Foreign Assets Control; (iii) is not placed on the U.S. Commerce Department’s Denied Persons List; and (iv) will not access or use any Service if any applicable laws in Advertiser’s country prohibit Advertiser from doing so in accordance with this Agreement.
14.5. Neither Party shall be (i) an entity or person, or owned or controlled by an entity or person, that (A) is currently the subject of any economic sanctions or restrictive measures administered or imposed by the Office of Foreign Assets Control of the U.S. Department of the Treasury, the U.S. Department of State, the U.S. Department of Commerce, the United Nations Security Council, the European Union, the United Kingdom, the United Arab Emirates, the Philippines or any other relevant authority (collectively, “Sanctions”) or (B) resides, is organized or chartered, or has a place of business in a country or territory that is currently the subject of Sanctions; or (ii) is engaging or will engage in any dealings or transactions prohibited by Sanctions or will directly or indirectly use the proceeds of any transactions contemplated hereunder, or lend, contribute or otherwise make available such proceeds to or for the benefit of any person or entity, for the purpose of financing or supporting, directly or indirectly, the activities of any person or entity that is currently the subject of Sanctions; or (iii) is violating or will violate any applicable anti-bribery and anti-corruption laws.
14.6. Entire Agreement. This Agreement and any amendments thereto, represent the entire and complete agreement between the Parties regarding the subject matter hereof and supersedes any and all other agreements between the Parties, whether written or oral, regarding the subject matter hereof. This Agreement may be executed in two or more counterparts, each of which shall be deemed an original, but all of which together shall constitute one and the same instrument. Either Party may enter into this Agreement by executing any such counterpart manually or electronically (such as Adobe Sign or DocuSign) and deliver the executed counterpart by facsimile or electronic means to the other Party. The receiving Party may rely on the receipt of such document so executed and delivered as if the original had been received. The Parties agree that this Agreement, if executed in accordance with this Clause, shall be deemed to be valid, accurate and authentic, and given the same effect as, a written and signed agreement between or amongst the Parties in hard copy.
14.7. Severability- If any provision of this Agreement is held by a court of competent jurisdiction to be invalid, illegal, or unenforceable, the remainder of this Agreement will remain in full force and effect.
14.8. Relationship. No agency, partnership, joint venture, or employment relationship is created as a result of this Agreement, and neither Party has any authority of any kind to bind the other in any respect. The parties will perform under this Agreement as independent contractors. This Agreement does not create a joint venture, partnership, or formal business organization of any kind. This Agreement is binding upon, inures to the benefit of, and is enforceable by the parties and their respective successors and assigns.
14.9. Force Majeure. Either Party shall not be liable for any failure to perform its obligations hereunder where such failure results from any cause beyond its reasonable control, including, without limitation, fires, epidemic, Pandemic, explosions, telecommunications, Internet or network failure, results or vandalism or computer tracking hacking, storm or other natural occurrence, national emergencies, insurrections, riots, wars, strikes or other labour difficulties. The parties agree to promptly notify the other of any force majeure event which impairs the ability of the affected party to perform its obligations under this Agreement. If such force majeure event continues for a period of more than 30 days from the date of notification of such event, either party has the right to terminate this agreement with no liability whatsoever.
14.10. No Waiver- The failure of either Party to exercise any right provided for herein shall not be deemed a waiver of any further rights hereunder. Any waiver of any provision of this Agreement will be effective only if in writing and signed by the Party. A waiver of any default hereunder or of any of the terms and conditions of this Agreement shall not be deemed to be a continuing waiver or a waiver of any other default or of any other term or condition but shall apply solely to the instance to which such waiver is directed.
14.11. Notices- The Company may provide Advertiser with notices required hereunder by contacting Advertiser at any email address Advertiser provided, including in its registration information. All notices under this Agreement must be delivered in writing by courier, certified or registered mail (postage prepaid and return receipt requested), or by email to the other party at the address set forth in the Insertion Order.
14.12. Amendments- Company may revise this Agreement from time to time, in its sole discretion, and the most current version will always be posted on Company’s website (as reflected in the “Last Revised” heading). By continuing to access or use the Service after any revisions become effective, the Advertiser agrees to be bound by the revised Agreement.
14.13. Assignment- Advertiser may not assign any of its rights or obligations under this Agreement without the prior written consent of Company, except in the event of an assignment by Advertiser to a purchaser of all or substantially all of the Advertiser’s assets or share capital, in which event the Advertiser shall provide Company with written notice of the assignment. Assignment in violation of the foregoing shall be void.
14.14. Governing law- This Agreement shall be governed by the laws of Singapore. Any dispute or claim arising out of or relating to this Agreement, or any breach thereof shall be solely settled by arbitration in Singapore in accordance with the Arbitration Rules of the Singapore International Arbitration Centre (“SIAC”) for the time being in force, which rules are deemed to be incorporated by reference in this Section. The arbitration tribunal shall consist of one (1) arbitrator to be appointed by the Chairman of SIAC. The language of the arbitration shall be English. Subject to the above, the courts in Singapore shall have exclusive jurisdiction.
Data Protection Addendum
This Data Processing Addendum (“DPA”) is entered into between Parties or Company Insertion Order and applicable terms and conditions (the “Agreement”). You acknowledge that you, (collectively, “You”, “Your”, or “Data Controller”, “Business”, “Advertiser”) have read and understood and agree to comply with this DPA, and are entering into a binding legal agreement with the Company (“Company” or “Data Processor”) to reflect the parties’ agreement with regard to the Processing of Personal Data. Both parties shall be referred to as the “Parties” and each, a “Party”.
WHEREAS, Company operates an advertising platform offering multiple services including without limitation serving its Advertiser’s advertisements on Publisher’s websites, applications and other Internet-accessible devices and destinations. (collectively, the “Services” ),; and
WHEREAS, In the course of providing the Services pursuant to the Agreement, Company may process Personal Data on Your behalf, in the capacity of a Data Processor; and the Parties wish to set forth the arrangements concerning the Processing of Personal Data (as defined below) within the context of the Services and agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.
NOW THEREFORE, in consideration of the mutual promises set forth herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged by the Parties, the parties, intending to be legally bound, agree as follows:
1. INTERPRETATION AND DEFINITIONS
1.1 The headings contained in this DPA are for convenience only and shall not be interpreted to limit or otherwise affect the provisions of this DPA.
1.2 References to clauses or sections are references to the clauses or sections of this DPA unless otherwise stated.
1.3 Words used in the singular include the plural and vice versa, as the context may require.
1.4 Capitalized terms not defined herein shall have the meanings assigned to such terms in the Agreement.
1.5 Definitions:
(a) “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
(b) “Controller” or “Data Controller” or “Business” means the entity which determines the nature, purposes and means and the types of targeted individuals of the Processing of Personal Data. For the purposes of this DPA only, and except where indicated otherwise, the term “Data Controller” shall include the Organization and/or the Organization’s Authorized Affiliates.
(a) “CCPA” means the California Consumers Privacy Act of 2018, and its modifications, amendments and regulations, including the California Privacy Rights Act of 2020.
(b) “Data Protection Laws and Regulations” means the applicable laws and regulations of the European Union, the European Economic Area and their Member States, Switzerland and the United Kingdom and US, applicable to the Processing of Personal Data under the Agreement.
(c) “Data Subject” means the identified or identifiable person to whom the Personal Data relates.
(d) “GDPR” means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data repealing Directive 95/46/EC (General Data Protection Regulation).
(e) “Member State” means a country that belongs to the European Union and/or the European Economic Area. “Union” means the European Union.
(f) “Personal Data” or “Personal Information” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. For the avoidance of doubt, Advertiser’s business contact information is not by itself deemed to be Personal Data subject to this DPA.
(g) “Process(ing)” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
(h) “Processor” or “Data Processor” or “Service Provider” means the entity which Processes Personal Data on behalf of the Controller.
(i) “Security Documentation” means the Security Documentation as stated in ANNEX-III.
(j) “Standard Contractual Clauses” or “SCCs” means (i) the standard contractual clauses for the transfer of Personal Data to Data processors established in third countries which do not ensure an adequate level of protection as set out in Regulation (EU) 2016/679 of the European Parliament and of the Council from June 4, 2021, as available here, as updated, amended, replaced or superseded from time to time by the European Commission; or (ii) where required from time to time by a supervisory authority for use with respect to any specific restricted transfer, any other set of contractual clauses or other similar mechanism approved by such Supervisory Authority or by Applicable Laws for use in respect of such Restricted Transfer, as updated, amended, replaced or superseded from time to time by such Regulatory Authority or Data Protection Laws and Regulations;
(k) “Sub-processor” means any Processor engaged by Company and/or Company Affiliate to Process Personal Data on behalf of Advertiser.
(l) “Supervisory Authority” means an independent public authority which is established by an EU Member State pursuant to the GDPR.
(m) “UK GDPR” means the Data Protection Act 2018, as updated, amended, replaced or superseded from time to time by the ICO.
(n) “UK Standard Contractual Clauses” or “UK SCCs” means the standard contractual clauses for the transfer of Personal Data to Data processors established in third countries which do not ensure an adequate level of protection as set out by the ICO, as available here, as updated, amended, replaced or superseded from time to time by the ICO.
2. PROCESSING OF PERSONAL DATA
2.1 The Parties acknowledge and agree that with regard to the Processing of Personal Data, the Advertiser is the Controller of the Personal Data and Company is the Data Processor of such Personal Data. In no event will the Parties process Personal Data jointly as joint or separate Controllers.
3. ADVERTISER OBLIGATIONS
3.1 Advertiser shall, in its use of the Services, at all times (by itself and/or on behalf of the applicable advertiser) comply with any and all applicable laws, rules, regulations, platform policies, any applicable self-regulatory regimes and best industry standards, including, without limitation and as applicable: U.S. laws; the rules, codes and guidelines of the Digital Advertising Alliance; the Network Advertising Initiative; the Transparency and Consent Framework (as amended from time to time); any platform restrictions such as the Apple Tracking Transparency Framework (or similar to this framework, for example, from Google); any and all applicable laws. Company does not have a direct relationship with any End User that Advertiser wants to target, re-target or deliver ads, therefore, Advertiser shall ensure that it collects, Processes and shares Personal Data with Company in accordance with the requirements of Data Protection Laws and Regulations and comply at all times with the obligations, including, without limitation, the obligations applicable to Data Controllers. Advertiser agrees that it is responsible and shall be fully liable and responsible at all times for providing any and all required notices, disclosures and obtaining any and all End Users consents required by Data Protection Laws and Regulations (or any other applicable and lawful legal basis) on behalf of itself, Company and all applicable publishers, with respect to processing Personal Data, location data, user device identification and/or any other information of the End Users with respect to the Services provided by Company (including, without limitation, targeting, re-targeting, amongst others). Advertiser represents and warrants that it shall, at all times allow End Users to withdraw consent, in accordance with applicable Data Protection Laws and regulations.
3.2 Without derogating from the Advertiser’s responsibilities set out in this Section 3, Advertiser shall display an accessible privacy policy to the End Users with all disclosures required by applicable privacy, spam, marketing and/or advertisement Data Protection Laws and Regulations of the jurisdiction in which such End Users reside, including, without limitation: (i) data collection practices, purposes, processing activities, usage or any other detail required by applicable Data Protection Laws and Regulations (including, without limitation, the collection of the IP addresses and/or the ID Advertisement); (ii) expressly identifying that the Advertiser uses third-party partners to serve ads (including, re-targeting practices); and (iii) to the extent required by Data Protection Laws and Regulations, full and complete details of the Advertiser, Company, and any other relevant third party.
3.3 For the avoidance of doubt, Advertiser’s instructions for the Processing of Personal Data shall comply with Data Protection Laws and Regulations. Advertiser shall have sole responsibility for the means by which Advertiser acquired, collected, Processes and shares Personal Data. Without limitation, Advertiser shall comply with any and all transparency-related obligations (including, without limitation, displaying any and all relevant and required privacy notices or policies) and shall at all times have any and all required ongoing legal bases in order to collect, Process and transfer to Company the Personal Data and to authorize the Processing by Company of the Personal Data to provide the Services described in the Agreement.
3.4 Advertiser shall, at all times, comply with Data Protection Laws and Regulations and respect all End User – or device – based privacy choices, including, without limitation, those limiting ad tracking, age (e.g., children data), geolocation data, targeting and re-targeting practices, and etc. Whether Advertiser receives any complaint, claim or other request from the End User regarding the Processing of the End User’s Personal Data, Advertiser agrees to fulfill such request without undue delay. Where needed, Advertiser shall notify Company of the necessary assistance and in such case, insofar as possible, Company agrees to assist Advertiser with the fulfillment of relevant End User’s requests.
3.5 Advertiser hereby agrees and acknowledges that Company may monitor its use of the Services, either by Company and/or by third-parties fraud track technology for fraud detection purposes, for as long as Advertiser uses the Services and/or any campaign is still active.
3.6 If Advertiser is unable to comply with its consent and notice obligations or any other obligation with respect to Personal Data, including, as described in this Section 3, Advertiser shall promptly notify Company. Advertiser shall defend, hold harmless and indemnify Company, its Affiliates and subsidiaries (including without limitation their directors, officers, agents, subcontractors and/or employees) from and against liability of any kind related to breach, violation or infringement by Advertiser and/or its authorized users of any Data Protection Laws and Regulations and/or this DPA and/or this Section 3.
4. COMPANY’S PROCESSING OF PERSONAL DATA.
4.1.1 Subject to the Agreement, Company shall Process Personal Data in accordance with Advertiser’s documented instructions as necessary for the following purposes: (i) Processing in accordance with this DPA and the Agreement to provide the Services, and Data Protection Laws and Regulations; (ii) Processing for Advertiser to be able to use the Services; (iii) Processing to comply with other documented reasonable instructions provided by Advertiser (e.g., via email) where such instructions are consistent with the terms of the Agreement; and Data Protection Laws (iv) Processing when required by Union or Member State law or any other applicable law to which Company is or may, and its Affiliates are or may, be subject to, in which case, Company shall inform Advertiser of the legal requirement before Processing, unless that law prohibits such information on important grounds of public interest.
4.1.2 To the extent that Company and its Affiliates cannot comply with a request (including, without limitation, any instruction, direction, code of conduct, certification, or change of any kind) from Advertiser and/or its authorized users relating to Processing of Personal Data or where Company considers such a request to be unlawful, Company (i) shall inform Advertiser, providing relevant details of the problem (but not legal advice), (ii) Company may, without any kind of liability towards Advertiser, temporarily cease all Processing of the affected Personal Data (other than securely storing those data), and (iii) if the Parties do not agree on a resolution to the issue in question and the costs thereof, each Party may, as its sole remedy, terminate the Agreement and this DPA and the Advertiser will have no further claims against Company due to the termination of the Agreement and/or the DPA in the situation described in this paragraph.
4.1.3 Company will not be liable in the event of any claim brought by a third party, including, without limitation, a Data Subject, arising from any act or omission of Company, to the extent that such is a result of Advertiser’s instructions.
4.2 The subject-matter of Processing of Personal Data by Company is the performance of the Services pursuant to the Agreement. The duration of the Processing, the nature and purpose of the Processing, as well as the types of Personal Data Processed and categories of Data Subjects under this DPA are further specified in Schedule 1 (Details of the Processing) to this DPA.
5. RIGHTS OF DATA SUBJECTS
5.1 If Company receives a request from a Data Subject to exercise the Data Subject’s right as described under Data Protection Laws and Regulations (“Data Subject Request”), Company shall, to the extent legally permitted and insofar as possible, notify and forward such Data Subject Request to Advertiser. Taking into account the nature of the Processing, Company shall reasonably assist Advertiser by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of Advertiser’s obligation to respond to a Data Subject Request under Data Protection Laws and Regulations..
6. COMPANY PERSONNEL
6.1 Company shall grant access to the Personal Data to persons under its authority (including, without limitation, its personnel) only on a need to know basis and ensure that such persons engaged in the Processing of Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
6.2 Company may disclose and Process the Personal Data (a) as permitted hereunder (b) to the extent required by a court of competent jurisdiction or other Supervisory Authority and/or otherwise as required by applicable laws or applicable Data Protection Laws and Regulations (in such a case, Company shall inform the Advertiser of the legal requirement before the disclosure, unless that law prohibits such information on important grounds of public interest), or (c) on a “need-to-know” basis under an obligation of confidentiality to legal counsel(s), data protection advisor(s), accountant(s), investors or potential acquirers.
7. AUTHORIZATION REGARDING SUB-PROCESSORS
7.1 The Advertiser may email the Company to receive Company’s current list of Sub-processors.
7.2 In case Company intends to add a Sub Processor, It shall notify the Advertiser and the Advertiser may reasonably object to Company’s use of a Sub-processor for reasons related to the GDPR by notifying Company promptly in writing within three (3) business days after receipt of Company’s notice in accordance with the mechanism set out above and such written objection shall include the reasons related to the GDPR for objecting to Company’s use of such Sub-processor. Failure to object to such Sub-processor in writing within three (3) business days following Company’s notice shall be deemed as acceptance of the Sub-Processor. In the event Advertiser reasonably objects to a Sub-processor, as permitted in the preceding sentences, Company will use reasonable efforts to make available to Advertiser a change in the Services or recommend a commercially reasonable change to Advertiser’s use of the Services to avoid Processing of Personal Data by the objected-to Sub-processor without unreasonably burdening the Advertiser or change the Sub-Processor. If Company is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, Advertiser may, as a sole remedy, terminate the applicable Agreement and this DPA by providing written notice to Company. Until a decision is made regarding the Sub-processor, Company may temporarily suspend the Processing of the affected Personal Data. Advertiser will have no further claims against Company due to the termination of the Agreement and/or the DPA in the situation described in this paragraph.
7.3 This Section 7 shall not apply to subcontractors of Company which provide ancillary services to support the performance of the DPA. This includes, for example, telecommunication services, maintenance and user service, cleaning staff, or auditors.
8. SECURITY
8.1 Taking into account the state of the art, the costs of implementation, the scope, the context, the purposes of the Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, Company shall maintain all industry-standard technical and organizational measures required pursuant to Article 32 of the GDPR for protection of the security, confidentiality and integrity of Personal Data, as set forth in the Security Documentation stated in Schedule-3 of this DPA which are hereby approved by Advertiser.
8.2 To the extent that Advertiser cannot satisfy its audit requirements by sending privacy and security questionnaires/assessments, at Advertiser’s cost and expense, and upon Advertiser’s prior written notice of 30 days to Company, and subject to confidentiality obligations set forth in the Agreement and this DPA, Company shall allow for and contribute to audits, including inspections of Company, conducted by the controller or another auditor mandated by the controller (who is not a direct or indirect competitor of Company) provided that the parties shall agree on the scope, methodology, timing and conditions of such audits and inspections. Notwithstanding anything to the contrary, such audits and/or inspections shall not contain any information, including without limitation, personal data that does not belong to Advertiser. The audit right is conditioned upon providing 30 days prior notice of the controller’s intention to audit. The right to Audit, at the controller’s expense, shall take place during normal business hours, and the Controller’s auditors take all reasonable measures to prevent unnecessary disruption to the processor’s operations. This audit right may be exercised up to once per year. The Audit and the Auditor shall be bound by the confidentiality obligations. The audit shall only be related to the scope of the agreement and the DPA entered into between the parties.
9. PERSONAL DATA INCIDENT MANAGEMENT AND NOTIFICATION
Company shall notify Advertiser without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data, including Personal Data, transmitted, stored or otherwise Processed by Company (a “Personal Data Incident”). Company shall make reasonable efforts to identify the cause of such Personal Data Incident and take those steps as Company deems necessary, possible and reasonable in order to remediate the cause of such a Personal Data Incident to the extent the remediation is within Company’s reasonable control. The obligations herein shall not apply to incidents that are caused by Advertiser or Advertiser’s users or are otherwise unrelated to the provision of the Services. In any event, Advertiser will be the party responsible for notifying supervisory authorities and/or concerned data subjects (where required by Data Protection Laws and Regulations).
10. DELETION OF PERSONAL DATA
Subject to the Agreement, Company shall delete the Personal Data after the end of the provision of the Services relating to Processing and shall delete existing copies unless applicable law requires storage of the Personal Data. In any event, to the extent required or allowed by applicable law, Company may retain one copy of the Personal Data for evidence purposes and/or for the establishment, exercise or defense of legal claims and/or to comply with applicable laws and regulations. Company will retain the Personal Information described above for the life of an active campaign and for six (6) months thereafter, or until the Advertiser instruct otherwise to delete such Personal Information, noting that Company will continue to retain the Personal Information for longer periods only to the extent required or allowed by applicable law or auditing requirements.
11. AUTHORIZED AFFILIATES
11.1 The Parties acknowledge and agree that, by executing the DPA, the Advertiser enters into the DPA on behalf of itself and, as applicable, in the name and on behalf of its Authorized Affiliates, thereby establishing a separate DPA with the Company. Each Authorized Affiliate agrees to be bound by the obligations under this DPA. All access to and use of the Services by Authorized Affiliates must comply with the terms and conditions of the Agreement and this DPA and any violation of the terms and conditions therein by an Authorized Affiliate shall be deemed a violation by Advertiser.
11.2 The Advertiser shall remain responsible for coordinating all communication with Company under the Agreement and this DPA and shall be entitled to make and receive any communication in relation to this DPA on behalf of its Authorized Affiliates.
11.3 Upon Advertiser’s request, Company shall provide Advertiser, at Advertiser’s cost and expenses, with reasonable cooperation and assistance needed to fulfill Advertiser’s obligation under the GDPR to carry out a data protection impact assessment related to Advertiser’s use of the Services, to the extent Advertiser does not otherwise have access to the relevant information, and to the extent such information is available to Company. Company shall provide, at Advertiser’s cost, reasonable assistance to Advertiser in the cooperation or prior consultation with the Supervisory Authority, to the extent required under the GDPR.
12. TRANSFERS OF DATA
12.1 Transfers to countries that offer adequate level of data protection. Personal Data may be transferred from the EU Member States, the three EEA member countries (Norway, Liechtenstein and Iceland) (collectively, “EEA”) and the United Kingdom to countries that offer adequate level of data protection under or pursuant to the adequacy decisions published by the relevant data protection authorities of the EEA, the Union, the Member States or the European Commission (“Adequacy Decisions”), without any further safeguard being necessary.
12.2 Transfers to other countries. If the Processing of Personal Data includes transfers from the EEA to countries which do not offer adequate level of data protection or which have not been subject to an Adequacy Decision (“Other Countries”), the Parties shall comply with the below terms:
12.2.1 With respect to the EU transfers of Personal Data, Advertiser as a Data Exporter (as defined in the SCCs) and Company on behalf of itself and each Company’s Affiliate hereby enter into the Standard Contractual Clauses (Module-2 Controller to Processor) set out in Schedule 2. To the extent that there is any conflict or inconsistency between the terms of the Standard Contractual Clauses and the terms of this DPA, the terms of the Standard Contractual Clauses shall take precedence.
12.2.2 With respect to the UK transfers of Personal Data (from the UK to other countries which have not been subject to a relevant Adequacy Decision), Advertiser as a Data Exporter (as defined in the UK SCCs) and Company on behalf of itself and each Company’s Affiliate (as applicable) as a Data Importer (as defined in the UK SCCs), hereby enter into the UK SCCs set out in Schedule 2.
12.3 For clarity, responsibility for compliance with the obligations corresponding to Advertisers under Data Protection Laws and Regulations shall rest with Advertiser and not with Company. Company may, at Advertiser’s cost, provide reasonable assistance to Advertiser with regards to such obligations.
13. TERMINATION
This DPA shall automatically terminate upon the termination or expiration of the Agreement under which the Services are provided. Sections 3, 10 and 15 shall survive the termination or expiration of this DPA for any reason. This DPA cannot, in principle, be terminated separately to the Agreement, except where the Processing ends before the termination of the Agreement, in which case, this DPA shall automatically terminate.
14. CCPA
14.1. To the extent that the Personal Data is subject to CCPA, Company shall not sell or share Advertiser’s Personal Data. Company acknowledges that when processing Personal Data in the context of the provision of the Services, Advertiser is not selling or sharing Personal Data to Company.
14.2. Company is considered a Service Provider (as defined by CCPA), and agrees not to retain, use or disclose Advertiser’s Personal Data: (i) for any purpose other than the Business Purpose (as defined below); (ii) for no other commercial or Business Purpose; or (iii) outside the direct business relationship between Company and Advertiser. Notwithstanding the foregoing, Company may use, disclose, or retain Personal Data to: (i) transfer the Personal Data to other Company’s entities (including, without limitation, affiliates and subsidiaries), service providers, third parties and vendors, in order to provide the Services to Advertiser; (ii) to comply with, or as allowed by, applicable laws; (iii) to defend legal claims or comply with a law enforcement investigation; (ii) for internal use by Company to build or improve the quality of its services and/or for any other purpose permitted under the CCPA; (iii) to detect data security incidents, or protect against fraudulent or illegal activity; and (iv) collect and analyse anonymous information. Company shall use commercially reasonable efforts to comply with its obligations under CCPA. If Company becomes aware of any material and applicable requirement (to Company as a service provider) under CCPA that Company cannot comply with, Company shall use commercially reasonable efforts to notify Advertiser. Upon written Advertiser’s notice, Company shall use commercial reasonable and appropriate steps to stop and remediate Company’s alleged unauthorized use of Personal Data; provided that Advertiser must explain and demonstrate in the written notice which processing activity of Personal Data it considers to be unauthorized and the applicable reasons. Company shall use commercially reasonable efforts to enable Advertiser to comply with consumer requests made pursuant CCPA. Notwithstanding anything to the contrary, Advertiser shall be fully and solely responsible for complying with its own requirements under CCPA. “Business purpose” means the Processing activities that Company will perform to provide Services (as described in the Agreement), this DPA and any other instruction from Advertiser, as otherwise permitted by applicable law, including, CCPA and the applicable regulations, or as otherwise necessary to provide the Services to Advertiser.
In circumstances where Advertiser uses or otherwise exploits the Services in a way that causes Company to collect Personal Information subject to the CCPA and/or any other applicable US laws, Advertiser shall provide the data subjects with all notices and disclosures as required by the CCPA, including by clearly and conspicuously posting a link to communicate to California residents that they may opt out of any sale of their Personal Information (according to the Advertiser’s then-current applicable tools, at Advertiser’s sole election and responsibility, which enable California residents to exercise their right of opting out of their Personal Information). Advertise undertakes to immediately notify Company in writing when and if Advertiser receives from any California resident their demand to opt out of the sale of their Personal Information.
15. RELATIONSHIP WITH AGREEMENT
In the event of any conflict between the provisions of this DPA and the provisions of the Agreement, the provisions of this DPA shall prevail over the conflicting provisions of the Agreement. Notwithstanding anything to the contrary in the Agreement and/or in any agreement between the parties and to the maximum extent permitted by law: (A) Company’s (including Company’s Affiliates’) entire, total and aggregate liability, related to personal data or information, privacy, or for breach of, this DPA and/or Data Protection Laws and Regulations, including, without limitation, if any, any indemnification obligation under the Agreement or applicable law regarding data protection or privacy, shall be limited to the amounts paid to Company under the Agreement within three (3) months preceding the event that gave rise to the claim. This limitation of liability is cumulative and not per incident; (B) In no event will Company and/or Company Affiliates and/or their third-party providers, be liable under, or otherwise in connection with this DPA for: (i) any indirect, exemplary, special, consequential, incidental or punitive damages; (ii) any loss of profits, business, or anticipated savings; (iii) any loss of, or damage to data, reputation, revenue or goodwill; and (C) The foregoing exclusions and limitations on liability set forth in this Section shall apply: (i) even if Company, Company Affiliates or third-party providers, have been advised, or should have been aware, of the possibility of losses or damages; and (iii) regardless of the form, theory or basis of liability (such as, but not limited to, breach of contract or tort).
16. AMENDMENTS
This DPA may be amended at any time by a written instrument duly signed by each of the Parties.
17. LEGAL EFFECT
Company may assign this DPA or its rights or obligations hereunder to any Affiliate thereof, or to a successor or any Affiliate thereof, in connection with a merger, consolidation or acquisition of all or substantially all of its shares, assets or business relating to this DPA or the Agreement. Any Company’s obligation hereunder may be performed (in whole or in part), and any Company’s right or remedy may be exercised (in whole or in part), by an Affiliate of Company.
18. SIGNATURE
The Parties represent and warrant that they each have the power to enter into, execute, perform and be bound by this DPA.
You, as the signing person on behalf of Advertiser, represent and warrant that you have, or you were granted, full authority to bind the Organization and, as applicable, its Authorized Affiliates to this DPA. If you cannot, or do not have authority to, bind the Organization and/or its Authorized Affiliates, you shall not supply or provide Personal Data to Company.
By signing this DPA, Advertiser enters into this DPA on behalf of itself and, to the extent required or permitted under applicable Data Protection Laws and Regulations, in the name and on behalf of its Authorized Affiliates.
19. Governing Law and Jurisdiction- This DPA shall be governed by laws and jurisdiction as stated in the Principle Agreement.
List of Schedules
SCHEDULE 1 – DETAILS OF THE PROCESSING
SCHEDULE 2 – STANDARD CONTRACTUAL CLAUSES
Schedule-3- Technical and Organizational measures
SCHEDULE 1 – DETAILS OF THE PROCESSING
Subject matter
Company will Process Personal Data as necessary to perform the Services pursuant to the Agreement, as further instructed by Advertiser in its use of the Services.
Nature and Purpose of Processing
● Performing the Agreement, this DPA and/or other contracts executed by the Parties, including, providing the Service(s) to Advertiser and providing support and technical maintenance, if agreed in the Agreement.
● For Company to comply with documented reasonable instructions provided by Advertiser where such instructions are consistent with the terms of the Agreement.
Duration of Processing
Subject to any Section of the DPA and/or the Agreement dealing with the the consequences of the expiration or termination thereof, Company will Process Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing.
Type of Personal Data
Advertiser may submit Personal Data to the Services, the extent of which is determined and controlled by Advertiser in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:
● Device Identifiers and type of application
● IP Address, country/city
● Advertising ID
● IP address and other non-Personal Information in providing the Services including:
● Device make, model and operating system;
● Device properties related to screen size & orientation, audio volume and battery;
● Carrier;
● Operating system;
● Name and properties of mobile application through which a consumer interacts with the Services;
● Country, time zone and locale settings (country and preferred language);
● Network connection type and speed;
● Activity of a user on an application following installation; and
● Internet browser user-agent used to access the Services.
Categories of Data Subjects
Advertiser may submit Personal Data to the Company, the extent of which is determined and controlled by Advertiser in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:
● Advertiser’s End Users
The frequency of the transfer. Continuous basis
The period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period
As described in this DPA and/or the Agreement
For transfers to (sub-) processors, also specify subject matter, nature and duration of the processing. The Advertiser may email the Company to receive Company’s current list of Sub-processors.
SCHEDULE 2 – STANDARD CONTRACTUAL CLAUSES
EU SCCs. If the Processing of Personal Data includes transfers from the EEA to countries outside the EEA which do not offer adequate level of data protection or which have not been subject to an Adequacy Decision, the Parties shall comply with Chapter V of the GDPR. The Parties hereby agree to execute the Standard Contractual Clauses incorporated herein by reference as follows:
a) The Standard Contractual Clauses Module -2 (Controller-to-Processor), will apply, with respect to restricted transfers between Advertiser and Company that are subject to the EU GDPR.
b) The Parties agree that for the purpose of transfer of Personal Data between Advertiser (as Data Exporter) and Company (as Data Importer), the following shall apply: (i) Clause 7 of the Standard Contractual Clauses shall be applicable; (ii) In Clause 9, option 2 shall apply and the method described in Section 7 of the DPA (Authorization Regarding Sub-Processors) shall apply; (iii) Clause 11 of the Standard Contractual Clauses shall be not applicable; (iv) In Clause 13: The Data Protection Authority of Spain shall act as the Supervisory authority; (v) In Clause 17, option 1 shall apply. The Parties agree that the Standard Contractual Clauses shall be governed by the laws of Spain; and (vi) In Clause 18(b) the Parties choose the courts of Spain, as their choice of forum and jurisdiction.
c) Annex I.A: With respect to Module Two: (i) Data Exporter is Advertiser as a data controller and (ii) the Data Importer is Company as a data processor. Data Exporter and Data Importer Contact details: As detailed in the Agreement. Signature and Date: By entering into the Agreement and this DPA, each Party is deemed to have signed these Standard Contractual Clauses incorporated herein, including their Annexes, as of the Effective Date of the DPA.
d) Annex I.B of the Standard Contractual Clauses shall be completed as described in Schedule 1 (Details of the Processing) of this DPA.
e) Annex I.C of the Standard Contractual Clauses shall be completed as follows: The competent supervisory authority is the Spain supervisory authority.
f) Annex II of the Standard Contractual Clauses shall be as described and agreed between the parties in Schedule-3 of this DPA.
g) Annex III of the Standard Contractual Clauses- The Advertiser may email the Company to receive Company’s current list of Sub-processors.
UK SCCs. If the Processing of Personal Data includes transfers from the UK to countries which do not offer adequate level of data protection or which have not been subject to an Adequacy Decision, the Parties shall comply with Article 45(1) of the UK GDPR and Section 17A of the Data Protection Act 2018. The Parties hereby agree to execute the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses as follows:
a) The UK Standard Contractual Clauses (Controller-to-Processor and Processor to Processor) if applicable, will apply with respect to restricted transfers between Advertiser and Company that are subject to the UK GDPR.
b) The Parties agree that for the purpose of transfer of Personal Data between Advertiser (as Data Exporter) and Company (as Data Importer), the following shall apply: (i) Clause 7 of the Standard Contractual Clauses shall be applicable; (ii) In Clause 9, option 2 shall apply and the method described in Section 7 of the DPA (Authorization Regarding Sub-Processors) shall apply; (iii) Clause 11 of the Standard Contractual Clauses shall be not applicable; (iv) In Clause 17, option 1 shall apply. The Parties agree that the Standard Contractual Clauses shall be governed by the laws of England and Wales; and (v) In Clause 18(b) the Parties choose the courts of England and Wales. The Parties agree to submit themselves to the jurisdiction of such courts, as their choice of forum and jurisdiction.
c) Annex I.A: With respect to Module Two: Data Exporter is Advertiser as a data controller and the Data Importer is Company as a data processor. With respect to Module Three: Data Exporter is Advertiser as a data processor and the Data Importer is Company as a data processor (sub-processor). Data Exporter and Data Importer Contact details: As detailed in the Agreement. Signature and Date: By entering into the Agreement and this DPA, each Party is deemed to have signed these UK Standard Contractual Clauses incorporated herein, including their Annexes, as of the Effective Date of the DPA.
d) Annex I.B of the UK Standard Contractual Clauses shall be completed as described in Schedule 1 (Details of the Processing) of this DPA.
e) Annex I.C of the UK Standard Contractual Clauses shall be completed as follows: The competent supervisory authority is the ICO supervisory authority.
f) Annex II of the UK Standard Contractual Clauses shall be as described and agreed between the parties in the Schedule-3 of this DPA.
g) Annex III of the UK Standard Contractual Clauses- The Advertiser may email the Company to receive Company’s current list of Sub-processors.
TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES
This document describes technical and organizational security measures and controls implemented by Company to protect Personal Data and ensure the ongoing confidentiality and integrity.
1. Security measures
The servers for the online and offline systems, databases, and data protection (backup) are run and maintained at Amazon Web Services (AWS)/ Google Cloud Services (GCP) in professional and secured data centers. The subcontractors are selected carefully and with respect to their security awareness and their expertise based on audits and certificates. Some of the relevant safeguards of the following checklist are not shown separately because it is the responsibility of subcontractors or is not published in detail for the sake of maintaining the security of confidentiality.
2. Access control
The access control to the server infrastructure occurs by the security infrastructure of Amazon web services IAM security policies and there through AWS ensured control system. During all operations time, the entrance to Company premises is secured by a personalized fingerprint detection system. Also, outside of the times of business operation, the office entrance is permanently and automatically monitored by cameras. In addition, the outer doors of the building are closed mechanically. An access control by key cards allow entrance to the building, while in the reception area is manned during times of the business operations. The entrance area is secured with optical space surveillance (video).
Internet lines are secured with firewall and every computer runs an anti-virus and malware detection system.
3. Admission control
The unauthorized use of computer systems is prevented by:
Personal Computers:
Company uses Google GSuite as its office services tool and relies on google security systems and password management via google gsuite.
Each owner has his own passwords known only to him, which may not be distributed. In case of any disclosure of one of the passwords, it has to be changed immediately. The quality of passwords is subject to defined requirements and is continuously checked. For all activities related to the DP system, reports shall be created automatically.
● Password assignment,
● Blocking multiple incorrect password attempts,
● Multi-factor authentication if possible,
● Use one-time passwords if possible.
Servers/ databases/ services:
● Private/public key authentication as required by Amazon Web Services
● VPN secured connections from outside of AWS premises.
● Multi-tier provisioned personal private/public key authentication for different users
● Access control and permissions per key – managed in AWS Identity and Access Management system (IAM)
The restriction of access possibility of beneficiary for using a data processing system exclusively on the data authorized for access is controlled via AWS/ GCP Identity and Access Management system (IAM).
The unauthorized reading, copying, modification, or removal of data during transfer is prevented by SSL and SSH encryption of data transmission, Completeness checks if relevant, and Development of the transport connection is only between defined and secured certificates of systems.
4. Availability Control
The data security from accidental loss or destruction is guaranteed by:
Redundant data storage in AWS S3/ GCP Cloud Storage service, timely data aggregations per days, weeks, and months periods, Software exclusion: Breakdown of the servers for independent and autonomous fulfillment of the tasks (shared-nothing between server architecture), Multiple incremental data backup, Data backups with a timetable which appropriately reflects data changes while using, Multiple data nodes in a distributed data system and Data Base redundancy via real-time replications, Additional measures of AWS/ GCP data integrity systems.
5. The separation rule according to the principle of earmarking
Personal data is permitted to be used only for the purpose for which they were originally collected.
Data collected for different purposes can be processed separately and is guaranteed by:
● Software exclusion (client separation, multi-tenant architecture)
● The database principle, separation by access control
● Separation of test and production data
● Separation of development and production environment.