Personal Data. Your Personal Data (as described above) will be stored until we: (i) no longer need the information and proactively delete it or (ii) you send a valid deletion request. Please note that we will retain it for a longer or shorter period in accordance with data retention laws. We have an internal data retention policy to ensure that we do not retain your Personal Data perpetually.

Cookies. This depends on the cookie in question. Some cookies (e.g. essential cookies) cannot be disabled. You may also control and delete these cookies through your browser settings. Read more in our cookie policy (available in the link provided above)

Your Internet browser stores IBA-related data as cookies. If you have cookies disabled, if you delete your cookies, or if other software deletes the cookies used for that data storage, Undertone will no longer be able to recognize your browser for the purpose of IBA. The cookies that store data related to Undertone’s IBA will in any case expire, at latest, one year after the last time such information is stored, barring any technical malfunction. In the mobile environment, if you reset your device ID on your device, Undertone will no longer be able to recognize your device for the purpose of IBA.

Advertising information: Undertone retains information regarding ad delivery (see, “Ad Delivery & Reporting” above) for up to fourteen (14) months. However, Undertone may retain aggregate statistics, reports and summaries regarding ad delivery for a longer period.

Security. We have implemented appropriate technical, organizational and security measures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to such information appropriate to the nature of the information concerned. However, please note that we cannot guarantee that the information will not be exposed as a result of unauthorized penetration to our servers. As the security of information depends in part on the security of the computer, device or network you use to communicate with us and the security you use to protect your user IDs and passwords, please make sure to take appropriate measures to protect this information.

Retention of your Personal Data. In addition to the retention periods mentioned in Section 2 above, in some circumstances we may store your Personal Data for longer periods of time, for example (i) where we are required to do so in accordance with legal, regulatory, tax or accounting requirements, or (ii) for us to have an accurate record of your dealings with us in the event of any complaints or challenges, or (iii) if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.

We will share your data with several categories of recipients, for the following activities:

• With multinational CRM providers (such as Salesforce) for customer management;
• With multinational cloud providers (such as Amazon) for hosting purposes;
• With multinational word press service providers in order to help us manage our subscription and blog service;
• With US and EU based recruitment companies in order to manage our recruitment life cycle;
• With US and EU based marketing companies to assist with our marketing needs (such as event planning);
• With US and EU based analytic companies to help us understand and analyze data we collect (which may include Personal Data) in accordance with
  this policy; and
• With US and EU based ad exchanges companies to help us to deliver our ads.

In addition to the categories of recipients described above, we may share your Personal Data as follows:

• To the extent necessary, with regulators, courts or competent authorities, to comply with applicable laws, regulations and rules (including, without limitation, federal, state or local laws), and requests of law enforcement, regulatory and other governmental agencies or if required to do so by court order;
• If, in the future, we sell or transfer, or we consider selling or transferring, some or all of our business, shares or assets to a third party, we will disclose your Personal Data to such third party (whether actual or potential) in connection with the foregoing events;
• In the event that we are acquired by, or merged with, a third party entity, or in the event of bankruptcy or a comparable event, we reserve the right to transfer, disclose or assign your Personal Data in connection with the foregoing events; and/or
• Where you have provided your consent to us sharing or transferring your Personal Data (e.g., where you provide us with marketing consents or opt-in to optional additional services or functionality).
• While Undertone strongly encourages its advertising customers, service providers, partners, and members of the Undertone Site Network to adopt responsible approaches to online marketing, Undertone, to the maximum extent permitted under applicable law is not and will not be responsible for the information practices of any of the third party entities referenced in this Privacy Policy, which may use the information we share with them for the same purposes as we use the information, or for their own independent purposes. The collection, use, and disclosure of information by clients and partners are subject to their respective privacy policies, which may differ from this Privacy Policy. If you want to exercise your right of access information, please make your request by contacting us to privacy@undertone.com.

Internal transfers:
We ensure transfers with the affiliated companies of Undertone will be covered by an agreement entered into by members of the such group of companies (an intra-group agreement) which contractually obliges each member to ensure that Personal Data receives an adequate and consistent level of protection wherever it is transferred to;.

External transfers:
Where we transfer your Personal Data outside of EU/EEA, for example to third parties who help provide our products and services, we will obtain contractual commitments from them to protect your Personal Data or rely on adequacy decisions issued by the European Commission. You can read more here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en

Some of these assurances are well recognized certification schemes like the EU – US Privacy Shield for the protection of Personal Data transferred from within the EU to the United States.

Where we receive requests for information from law enforcement or regulators, we carefully validate these requests before any Personal Data is disclosed.

Rights: The following rights (which may be subject to certain exemptions or derogations) shall apply to certain individuals (some of which only apply to individuals protected by the GDPR or the CCPA):

GDPR Rights:

• You have a right to access Personal Data held about you. Your right of access may normally be exercised free of charge, however we reserve the right to charge an appropriate administrative fee where permitted by applicable law;
• You have the right to request that we rectify any Personal Data we hold that is inaccurate or misleading;
• You have the right to request the erasure/deletion of your Personal Data (e.g. from our records). Please note that there may be circumstances in which we are required to retain your Personal Data, for example for the establishment, exercise or defense of legal claims;
• You have the right to object, to or to request restriction, of the processing;
• You have the right to data portability. This means that you may have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and that you have the right to transmit that data to another controller;
• You have the right to object to profiling;
• You have the right to withdraw your consent at any time. Please note that there may be circumstances in which we are entitled to continue processing your data, in particular if the processing is required to meet our legal and regulatory obligations. Also, please note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
• You also have a right to request certain details of the basis on which your Personal Data is transferred outside the European Economic Area, but data transfer agreements and/or other details may need to be partially redacted for reasons of commercial confidentiality;
• You have a right to lodge a complaint with your local data protection supervisory authority (i.e., your place of habitual residence, place or work or place of alleged infringement) at any time or before the relevant institutions in your place of residence. We ask that you please attempt to resolve any issues with us before you contact your local supervisory authority and/or relevant institution.

CCPA Rights:

• You have the right to know what personal information is being collected about you in the twelve months preceding your request;
• You have the right to request the erasure/deletion of your personal data (e.g. from our records and the records of our service providers). Please note that there may be circumstances in which we are required to retain your personal data, for example for the establishment, exercise or defense of legal claims;
• You have the right to know whether your personal information is sold or disclosed and to whom in the twelve months preceding your request;
• You have the right to say no to the sale of your personal information;
• You have the right to equal service and price, even if you exercise your privacy rights;
• You have a right to lodge a complaint with your local data protection supervisory authority (i.e., your place of habitual residence, place or work or place of alleged infringement) at any time or before the relevant institutions in your place of residence (e.g. the Attorney General in your State). We ask that you please attempt to resolve any issues with us before you contact your local supervisory authority and/or relevant institution.

You can exercise your rights in the CCPA request page. Subject to legal and other permissible considerations, we will make every reasonable effort to honor your request promptly in accordance with applicable law or inform you if we require further information in order to fulfil your request. When processing your request, we may ask you for additional information to confirm or verify your identity and for security purposes, before processing and/or
honoring your request. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. In the event that your request would adversely affect the rights and freedoms of others (for example, would impact the duty of confidentiality we owe to others) or
if we are legally entitled to deal with your request in a different way than initial requested, we will address your request to the maximum extent possible, all in accordance with applicable law.

Undertone is very sensitive to the issue of children’s privacy. Some of Undertone’s products and services are developed for, or directed to children. However, Undertone does not collect, use, or disclose personal information from children under 13, as that is defined by the FTC under the Children’s Online Privacy Protection Act (COPPA), and Undertone is fully compliant with COPPA. If you believe your child has provided us with PII through the Undertone corporate site or through our corporate marketing materials, please contact us and we will delete any such data.

The AdTech ecosystem is intended to provide more relevant advertising to you and other visitors allows owners of website and applications to generate more advertising revenue. This revenue pays for the free content that they may publish for you, or free services that they may deliver to you. It also means that you are more likely to see online advertising that meets your interests.

In an effort to deliver relevant advertising to you, we collect data across the Undertone Site Network and from third party data vendors with whom we have engaged with in order to categorize likely consumer interest segments for use in advertising online (“Interest-Based Advertising” or “IBA”) such as the web pages you visit or applications you use, the content you see, access and utilize on such web pages and applications; for example, offerings and advertisements that you view, use and access, how you use them and your response to them (i.e., clickstream data), how frequently and when you use them. For example, we can analyze data to determine that a visitor of a particular site at 6:30PM is more likely to be interested in pizza, or antique cars, or a classic movie. We can then serve an ad to the web page the visitor is viewing that offers a discounted pizza, car show tickets, or classic movie DVD—importantly—without ever knowing the identity of the visitor.

As part of our ad delivery and reporting, we log page views and collect information for the purpose of delivering ads or providing advertising-related services, including, without limitation, providing a specific advertisement based on a particular type of browser or time of day; statistical reporting in connection with the activity on a website or application; and tracking the number of ads served on a particular day to a particular website or application. To do so, we collect certain technical information about an end user when they interact with our services including the type of device, browser, mobile application and operating system used including the particular version or model and certain configurations and settings, non-precise geographical location (through IP addresses and regional data), device identifiers such as IDFA for IOS and the Advertising ID for Android, ISP (Internet Service Provider) and ISP location, as well as the domain name or details of the application, day and time of visit, and page(s) visited. We do so across multiple web domains and applications owned or operated by different entities within the Undertone Site Network. Undertone may also collect this information when you are visiting the Undertone corporate site.

a) IBA Opt-Out

• Undertone is committed to providing consumers notice and choice regarding IBA. Undertone offers an “opt-out cookie” for those that wish to opt-out of Undertone IBA activities on the web. This cookie will honor your IBA preferences for a period of five (5) years. We may increase this period, which means your opt-out choice will continue for a longer period. If you have multiple Internet browsers or users on the same computer, you will need to perform the opt-out operation for each browser and/or user. If you or your anti-virus or other software deletes the opt-out cookies from your computer, if you re-install your browser, or if you delete your cookies (which can happen if you clear or delete your browser history), then you will need to repeat the process. Undertone may be unable to provide you with an opt-out cookie if your browser is set to block third-party cookies.
• To opt-out of IBA, please use our opt-out tool. You may also opt-out of web IBA conducted by Undertone and other member companies of the Network Advertising Initiative (NAI) by visiting the NAI website. Or you may opt-out of IBA by Undertone and other member companies of the Digital Advertising Alliance (DAA) by visiting the DAA website.
• Undertone adheres to the Digital Advertising Alliance of Canada (“DAAC”) principles.
  For Canadian consumers, you may also access the opt-out tool on the Digital Advertising Alliance of Canada (DAAC) website or the Ad Choices Canada
  website (en Français).
• If you are a California resident and wish to opt-out from having your data used for interest-based advertising (also called by the CCPA regulation “data selling”), you may exercise your right here.
• Please report any problems related to the opt-out process to privacy@undertone.com.
• You may also be able to configure your IBA preferences and opt-out of the collection of information for advertising purposes from your Internet connected devices (e.g., Smart TVs or Set-Top boxes). Depending on the model of your Internet connected device, please refer to the applicable manual and/or settings menu of the applicable device. In addition, you may also refer to the NAI Connected TV choices opt-out page, which explains how users can activate privacy features in many common TV and OTT environments.

b) Mobile Opt-Out

• Undertone is also committed to providing customers the ability to opt-out of IBA in the mobile setting. For mobile opt-outs, we rely on the standard opt-out mechanism for ad traffic that we get from mobile applications. Users may choose not to be tracked for advertising purposes by accessing their mobile device’s privacy settings. When Undertone receives an in-app ad request from an in-app advertising partner, it also receives a “DNT” (do not track) indication in the ad request. The value for the DNT parameter is captured from the user’s privacy settings. When Undertone receives a DNT=1, we honor this as an opt-out request. Additional information and instructions on opting-out on mobile devices may be available on the NAI Mobile Device Opt-out page. 

c) User Choice and Privacy Generally

• Undertone is a member of the Network Advertising Initiative (“NAI”) and adheres to the NAI’s Code of Conduct. The NAI is a cooperative of online marketing and analytics companies committed to building consumer awareness and establishing responsible business and data management practices and standards. For more information, please visit www.networkadvertising.org.
• AdChoices: Undertone supports deployment of AdChoices icon, in partnership with Ghostery Enterprise, as part of its compliance with Digital Advertising Alliance self-regulation program. As part of this service, online advertisements served by Undertone are sometimes delivered with icons that help consumers understand how their data is being used and provide choice options to consumers that want more control.

d) Internet Technology

• We, our advertising partners and certain technology vendors collect the information described above by using log files, pixels or web beacons and cookies. We often engage or cooperate with service and technology companies to collect this information. If you want to receive the list of recipients of your Personal Data, please make your request by contacting us to privacy@undertone.com While this tracking and collection technology is commonly used, you might not be familiar with it, and we would like to explain it:
  • “Log files” track actions occurring on websites and collect data including your IP address, browser type, Internet service provider, referring/exit pages, platform type, date/time stamp, click data and types of advertisements viewed.
  • “Pixels” or “Web beacons” are electronic files or tags that reside on web pages and applications and are used to track your navigation of a website or collection of sites, the completion of transactions, submittal of applications and browsing behavior.
  • “Cookies” are files (e.g. HTTP cookies) that are stored on your Internet enabled device (which includes your computer, tablet, or mobile device). Cookies are mostly used to record what pages and ads you have already viewed. Cookies are used to facilitate website navigation (for example, so your bank knows that you logged in), make sure that you are forwarded to the appropriate website when you click on an ad, and generally improve your web browsing experience. Cookies are also used to control the delivery of a series of advertisements to a web browser, and to limit the number of times a web browser receives any one advertisement. We also use cookies to estimate the total reach of an advertising campaign, as well as frequency of display.
• In the mobile environment, we use device identifiers such as the IDFA (Identifier for Advertisers used in IOS) and the Advertising ID (Identifier for Advertisers used in Android) in the same way as we use cookies to identify your device for IBA purposes.
• In addition to the uses set forth below, our primary use of the information we collect is for marketing and advertising purposes, to determine which ads perform well, to better match ads and website content to your interests, to assist us in improving the operation of our services, to maintain the quality of our services, to enhance our services to our business partners and clients, to provide general statistics to our business partners and clients regarding use of Undertone’s services, and for the other purposes described below.

Access Requests. California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@undertone.com.
Please note that we are only required to respond to one request per customer each year.

Our California Do Not Track Notice. Do Not Track is a privacy preference that can be configured in certain web browsers (the “DNT Feature”); the DNT Feature, when enabled on a web browser, signals the websites you visit that you do not want certain information about your visit collected. Undertone does not currently respond or recognize DNT Feature signals.

Deletion of Content From California Residents. If you are a California resident under the age of 18 and a registered user, California Business and Professions Code Section 22581 permits you to remove content or Personal Data you have publicly posted. To remove, please send an email to privacy@undertone.com. Please be aware that after removal you will not be able to restore removed content. In addition, such removal does not ensure complete or comprehensive removal of the content or Personal Data you have posted and that there may be circumstances in which the law does not require us to enable removal of content.

In the event that Undertone is acquired by or merged with a third party entity, we reserve the right to transfer or assign the information we have collected from you as part of such merger, acquisition, sale, or other change of control. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your information is treated, transferred, or used.

If you have any questions, concerns or complaints regarding our compliance with this notice and the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us at to privacy@undertone.com.

TO THE MAXIMUM EXTENT PERMIITED BY LAW, YOU UNDERSTAND AND AGREE THAT UNDERTONE’S LIABILITY FROM ANY DISPUTE OVER PRIVACY OR THIS PRIVACY POLICY WILL BE LIMITED AS SET FORTH IN THE TERMS AND CONDITIONS OF OUR APPLICABLE WEBSITE TERMS AND CONDITIONS.

Intercept Interactive, Inc. d.b.a. Undertone

Attn: Chief Compliance Officer

One World Trade Center, 77th Floor, Suite A

New York, NY 10007