All rights reserved. 2011, EuroPriSe/ULD

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "All rights reserved. 2011, EuroPriSe/ULD"

Transcription

1 January 2011 Position paper on certifiability of online behavioural advertising systems according to EuroPriSe Follow-up

2 EuroPriSe - European Privacy Seal at the Unabhängiges Landeszentrum für Datenschutz (ULD) Holstenstr Kiel, Germany Website: All rights reserved. 2011, EuroPriSe/ULD

3 Content Introduction... 4 Current Situation... 4 Recent Industry Approaches... 5 (Draft) EASA Best Practice Recommendation... 5 Further Approaches... 7 EuroPriSe Requirements... 8 Requirements for transparency of behavioural advertising systems (No. 1)... 8 First steps towards implementation of opt-in mechanisms (No. 2) Requirements that were developed under the former legal situation (No. 3) Compliance of Industry Approaches with EuroPriSe Requirements Duration of Transition Period / Validity of (Re)Certifications Summary EuroPriSe / ULD 3

4 Introduction The European Privacy Seal (EuroPriSe) certifies compliance of IT products and ITbased services with EU data protection regulations. With the reform of Directive 2002/58/EC on privacy and electronic communications (hereafter, the "eprivacy Directive") EuroPriSe criteria for certification had to be adapted to reflect the new requirements. The consequences deriving from the reform package are subject to general discussion and a transition period. The European Commission as well as the Article 29 Data Protection Working Party (WP 29) called on the industry to make concrete suggestions especially concerning the transparent and consensual use of cookies deployed by online behavioural advertising (OBA) systems. OBA systems, among others, are subject to evaluation under the EuroPriSe certification scheme. EuroPriSe consequently engages in providing guidance for the transition period on the certifiability of online behavioural advertising systems. In July 2010 a Position paper on the impact of the new Cookie Law on certifiability of behavioural advertising systems according to EuroPriSe was released. 1 The present paper serves as a follow-up to the earlier paper. It specifies EuroPriSe requirements for (re)certification of online behavioural advertising systems during the transition period 2 and considers several industry approaches to provide notice and choice to users against these requirements. Finally, it specifies the conditions under which the transition period continues or (rather) ends and the impact of this on the validity of a Euro- PriSe (re)certification. Current Situation In December 2009, the so-called Telecoms Reform Package was published in the Official Journal of the European Union. This package provides for a comprehensive reform of the regulatory framework of the EU Telecommunication Market. Inter alia, it comprises some amendments of the eprivacy Directive. Member States shall adopt and publish the laws, regulations and administrative provisions necessary to comply with these amendments by May 25, Today s online behavioural advertising systems track users surfing behaviour on a website or across several websites by means of (browser) cookies. The use of cookies is regulated by Article 5(3) of the eprivacy Directive. This provision was amended by the Telecom Reforms Package to the effect that storing of cookies and gaining access to cookies necessitates users prior informed consent (so-called informed opt-in ). 1 This paper is available at 2 Information about the transition period is provided on p. 5 of the earlier EuroPriSe Position Paper (see footnote 1). 3 Details about the Telecoms Reform Package and the amendments of the eprivacy Directive are provided on p. 6 ff. of the earlier EuroPriSe Position Paper (see footnote 1). 4 EuroPriSe / ULD

5 The Article 29 Working Party expressed its view on the interpretation of the amended legal situation: In June 2010, it adopted Opinion 2/2010 on online behavioural advertising. 4 In its opinion the Working Party called upon industry to put forward technical and other means to comply with the new legal framework and to exchange views with the Working Party regarding such means during a so-called discussion period. Considering the findings of the Article 29 Working Party, EuroPriSe specified requirements for (re)certification of online behavioural advertising systems during a transition period. 5 (Re-)certification during this period is not made conditional on implementation of opt-in mechanisms that are fully in line with the new legal situation. Rather, the requirements concerning transparency of online behavioural advertising systems have been enhanced. However, applicants for a European Privacy Seal must nevertheless take first steps towards an implementation of opt-in mechanisms as required by the new legal situation. Specific information on the most relevant requirements is provided below. 6 Recent Industry Approaches In response to the imminent revision of applicable law in Europe and the US 7 industry stakeholders took several new approaches and designed new tools providing users with enhanced notice and choice in respect of the use of their online surfing behaviour data for advertising purposes. (Draft) EASA Best Practice Recommendation In September 2010, European Commission Vice-President Kroes called for a selfregulatory approach to the implementation of the amended eprivacy Directive on the storing and accessing of cookies and similar devices. 8 Responding to this call, stakeholders of the European OBA industry presented their plans for coordinated voluntary action at an EC roundtable on online behavioural advertising in Brussels in December These plans for a self-regulatory approach to OBA come in the form of a (Draft) EASA 9 Best Practice Recommendation (BPR) addressed to EASA Self- Regulatory Organisations (SROs) and industry members. 4 Opinion 2/2010 is available at 5 See footnote 2. 6 Cf. p. 8 ff. of this paper. 7 The US Federal Trade Commission (FTC) proposes a framework for business and policymakers similar to the EU approach but calls for self-regulation: Protecting Consumer Privacy in an Era of Rapid Change, Preliminary FTC Staff Report, US Federal Trade Commission, December According to Vice-President Kroes, the industry framework should include at least four elements: effective transparency; appropriate ways for users to consent; user friendliness; and effective enforcement. See 9 European Advertising Standards Alliance. See EuroPriSe / ULD 5

6 The BPR is based on five core principles: notice; user choice; sensitive segmentation; compliance and enforcement; and review. 10 In short, these principles are addressed as follows: Notice: Providers of OBA systems are required to make an enhanced notice available to users whenever they are processing data for OBA purposes on a website that is not operated by them. The enhanced notice shall provide the user with information about the identity of the company that is delivering the ad, about the fact that the ad is targeted based on previous web-viewing behaviour, and about the possibility to exercise a choice. This would introduce a common OBA icon across the EU, linking to comprehensible background information and mechanisms of control. It aims at creating a consistent experience for all users, together with regional and linguistic adaptation. User Choice: Each provider of an OBA system should make available a user friendly mechanism for web users to exercise their choice with respect to the collection and use of data for OBA purposes. This mechanism should be linked to the enhanced notice. Where a web user exercises his/her choice and objects to data processing for OBA purposes, OBA processes should no longer be used by the respective entity to facilitate the delivery of behavioural advertising to that user s browser. This mechanism would be introduced in the form of a control cockpit 11 that enables users to deactivate and reactivate behavioural advertising. Users would be able to exercise their choices in respect of different providers of OBA systems via this central platform. Sensitive Segmentation: Providers of OBA systems should not create segments that are specifically designed to target children using online behavioural advertising, unless local applicable law permits such activity with consent and the company requires such consent to be obtained in accordance with such applicable law. Furthermore, if a company seeks to create or use OBA segments relying on use of sensitive personal data as defined under Article 8(1) of Directive 95/46/EC, it must obtain a user s explicit consent, in accordance with applicable law, prior to engaging in OBA using that information. Compliance and Enforcement: Effective mechanisms to ensure compliance and complaint handling with the BPR standard are to be put in place. In particular, this would introduce a new procedure to measure compliance with the commitments of signatory companies and establish a system of enforcement and dispute resolution. Compliant companies would receive a periodically renewable B2B seal. Should a company fall behind and not remedy a significant breach of its obligations within a limited timeframe, the seal would be removed. Review: The BPR standard will need to be regularly reviewed in response to changes in the IAB Europe OBA Framework and other related codes, as well as the development of OBA and business practices. It should be modified as appropriate. 10 As part of the BPR, the Interactive Advertising Bureau (IAB) Europe is creating an OBA framework with the support of a wide range of industry stakeholders EuroPriSe / ULD

7 Further Approaches In October 2010, an industry group comprised of US media and marketing associations launched a self-regulatory program that aims at giving users a better understanding of and greater control over ads that are customised based on their online surfing behaviour. 12 In particular, the group promotes the use of a so-called Advertising Option Icon, to be displayed within or near online advertisements or on Web pages where data is collected and used for online behavioural advertising purposes. 13 By clicking on it, users shall be able to link to relevant information as well as to an opt-out option. The display of an icon and the words Interest Based Ads adjacent to an online advertisement has been suggested and piloted to test usability. 14 By clicking on the icon, users could access a widget providing them with information about online behavioural advertising and enabling them to decide whether they want to allow continuous tracking or opt-out of it. Online behavioural advertising systems use information about users online surfing behaviour to create interest categories supporting them in choosing ads that are tailored to users interests. Some companies developed tools that allow users to access and modify the interest categories that have been assigned to them. 15 More precisely, users are enabled to add and remove specific interest categories to / from their profiles (according to their real interests). Usually, these tools also allow users to opt-out completely from the respective online behavioural advertising system. Besides, all major browser vendors offer mechanisms to exercise control over online tracking (by means of http cookies). In this regard, it is to be highlighted that Microsoft recently announced a feature for the newest version of its browser, Internet Explorer 9 16, which would enable users to limit the ability of third-party companies to track their online surfing behaviour. 17 The new feature, called Tracking Protection, would build on lists generated by individuals or organisations. These lists would indicate websites that are (not) allowed to track users online surfing behaviour. The tracking protection feature would be turned off by default. 12 See the respective press release of the Interactive Advertising Bureau (IAB)), that is available at See at 14 The pilot was conducted by TRUSTe, a US based online privacy certification company. See the press release on the results of the pilot program, which is available at 15 E.g., Yahoo! Ad Interest Manager, and Google Ad Preferences, 16 IE9 will be released in See the respective entry in the IEBlog that is available at EuroPriSe / ULD 7

8 EuroPriSe Requirements Providers of OBA systems have been granted a transition period to put forward technical and other means in order to achieve compliance with the new legal situation. This results from the fact that the Article 29 Working Party announced the start of a discussion period in its Opinion 2/2010 and that Article 5(3) of the eprivacy Directive is not directly applicable, but to be transposed into national law by EU Member States. In this section, relevant requirements for (re)certification according to EuroPriSe during the transition period are explained. Hereby, three basic guidelines are followed: 1. Requirements for transparency of online behavioural advertising systems are enhanced. This concerns both the duty of information to users and the duty of enabling users to exercise their right of access. 2. Providers of online behavioural advertising systems need to take first steps towards an implementation of opt-in mechanisms as required by the new legal situation. 3. The requirements that were developed under the former legal situation (e.g., waiver of sensitive categories) retain their validity and must be met. Requirements for transparency of behavioural advertising systems (No. 1) Providers of online behavioural advertising systems are required to cooperate with publishers in order to ensure that users are provided with easily accessible and highly visible information if they visit a website on which they are tracked for behavioural advertising reasons. They must inform users about all relevant aspects of the respective system (as is required by Article 5(3) of the eprivacy Directive in connection with Article 10 of Directive 95/46/EC) 18. In particular, users must be provided with information about the identity of the entity that is responsible for serving the tracking cookie; the fact that the cookie will be used to create profiles; the type of information that will be collected to build such profiles; the fact that the profiles will be used to deliver behavioural advertising; the fact that the cookie will enable users identification across websites. 18 Cf. EuroPriSe requirements and as well as requirement The current version of the EuroPriSe Criteria (v 2010/11) is available at 8 EuroPriSe / ULD

9 For the purpose of making their services transparent to users, OBA companies must provide for the measures listed below: An icon must be attached to or displayed within online ads that have been tailored according to the user s online surfing behaviour. This icon must be easy to recognize and it is to be linked to information about online behavioural advertising (as specified below) as well as to a tool enabling users to opt-out from being tracked. o By clicking on the icon, users must be enabled to access detailed information about the functionality of online behavioural advertising. Hereby, the basic concept of this advertising method must be explained to users in a readily comprehensible manner. Users must also be enabled to access detailed information about all relevant aspects of the respective online behavioural advertising service (e.g., identity of the entity that is responsible for serving the tracking cookies). o Comprehensibility should be enhanced by means of concrete examples such as: A visits website B [ ] as well as by providing not only textual information, but also information by means of images and / or videos. Furthermore, the information must not be buried in lengthy privacy policies, but is to be presented separately. In addition, users are to be informed by means of privacy policies in close click-proximity. Efficient measures must be taken that aim at ensuring information of users on websites of publishers who make use of the respective online behavioural advertising system: As a minimum, meaningful privacy hints containing information on publishers obligations resulting from the EU Data Protection Directives should be handed over to customers who qualify as publishers. Preferably, these customers should be obliged to provide relevant information on their websites by means of contractual clauses (including the stipulation of contractual penalties). Users must be enabled to exercise their right of access (Article 12(a) of Directive 95/46/EC 19 ): They must be given the possibility to access the interest categories in which they have been classified. Preferably, users should also be enabled to modify these interest categories (i.e. to (de)select specific categories). Some behavioural advertising companies might strive for outstanding transparency in order to prove particular excellence of their services. These providers should contemplate about implementing additional transparency measures. An example would be regular notification of users about the fact that they are tracked by means of third party cookies: Such notifications should contain information on how to opt-out from being tracked and they should be provided by means of a pop-up window or a similar tool. 19 Cf. EuroPriSe requirement EuroPriSe / ULD 9

10 First steps towards implementation of opt-in mechanisms (No. 2) The icon to be attached to or displayed within online ads must be linked to a tool enabling users to opt-out easily from being tracked. In this regard, behavioural advertising companies applying for a European Privacy Seal should strive at implementing tools that respect users choices even when cookies including opt-out cookies are deleted. However, as the long-term objective is the implementation of opt-in mechanisms as required by Article 5(3) of the eprivacy Directive 20, (merely) increasing transparency of behavioural advertising systems and enabling users to opt-out from being tracked is not sufficient to successfully pass (re)certification during the transition period. Rather, online behavioural advertising companies applying for a European Privacy Seal must prove that they have already taken some (first) steps towards implementation of opt-in mechanisms. In practical terms, this means that a mechanism to obtain users consent must have been implemented. However, applicants are only required to prove that they offer opt-in mechanisms and have already made or for pioneering companies are in the process of making some experiences with obtaining users (opt-in) consent in order to identify suitable means for compliance with the new legal situation. Thus, for the purpose of this interim solution, it is not necessary that users consent is actually obtained on each initial setting of a cookie as required by Article 5(3) of the eprivacy Directive. Rather, it would be sufficient if users were informed about the possibility to opt-in in a visible manner and if they were enabled to easily express their consent. Online behavioural advertising companies may choose between different measures to ensure compliance with this requirement. One suitable measure is to enhance already existing tools enabling users to opt-out from being tracked. These tools may be extended by an additional functionality allowing users to explicitly opt-in to being tracked. Providers of online behavioural advertising systems making use of a suitable tool to collect users opt-in must be able to distinguish users who have explicitly opted in from those who are tracked but have not made any choice yet. This may be achieved, e.g., by utilising specific opt-in cookies. 21 Preferably, users should not only be enabled to explicitly opt-in to being tracked, but they should also be given the possibility to opt-in on a fine-granular basis by modifying the interest categories that have been assigned to them. 22 Providers of online behavioural advertising systems may choose to implement measures providing for regular notification of users. These notifications should not only contain information on how to opt-out from being tracked, but also on how to explicitly opt-in to it. 20 Cf. EuroPriSe requirement It may be justifiable to provide these cookies with a longer life time than ordinary tracking cookies that are stored on the terminals of users who are tracked but have not made any choice yet. 22 See footnote 15. This is not a mandatory requirement, but optional only. 10 EuroPriSe / ULD

11 Requirements that were developed under the former legal situation (No. 3) The requirements that have been developed under the former legal situation retain their validity. In particular, the following requirements must be met: The life time of both user profiles and cookies must be limited and proportional (Article 6(1)(c)+(e) of Directive 95/46/EC 23 ) especially in respect to the categories deployed. It is guaranteed that the provider of the online behavioural advertising system cannot gain knowledge of users IP addresses. This is to be ensured by means of an anonymisation service, operated by an independent third party (Articles 6 and 7 of Directive 95/46/EC 24 ). No use of sensitive categories for the creation of user profiles (Article 8 of Directive 95/46/EC 25 ). Sensitive categories are, for instance, such that allow for the drawing of conclusions on political opinions or the health status of a person. In addition, providers of OBA systems must not create categories that are specifically designed to target children using online behavioural advertising. Users must be enabled to exercise their right of access (Article 12(a) of Directive 95/46/EC 26 ). Preferably, users should be able to access all standard categories of the respective OBA system or (even) modify the categories that have been assigned to them. 27 Implementation of appropriate technical and organisational measures to protect personal data of users against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, and against all other unlawful forms of processing (Article 17(1) of Directive 95/46/EC 28 ). Existence of a legally compliant processing security agreement in respect of each processing of personal data by a processor on behalf of the controller that is related to the operation of the online behavioural advertising system (Article 17(2)-(4) of Directive 95/46/EC 29 ). Compliance of Industry Approaches with EuroPriSe Requirements Current approaches of the OBA industry address some of the relevant EuroPriSe requirements. This is illustrated by the tables below: 23 Cf. EuroPriSe requirements and Cf. EuroPriSe requirement Cf. EuroPriSe requirements and Cf. EuroPriSe requirement and the information above on page 9 of this paper. 27 See footnote 15. This is not a mandatory requirement, but optional only. 28 Cf. the requirements of Set 3 of the EuroPriSe Criteria (Technical-Organisational Measures). 29 Cf. EuroPriSe requirement EuroPriSe / ULD 11

12 Online Behavioural Advertisement (I) Relevant Legal Provisions EuroPriSe Requirements (former legal situation) EuroPriSe Requirements (new legal situation) EuroPriSe Requirements (transitional period) Self Regulatory Approaches by OBA Industry Stakeholders (examples) Article 5(3) 2002/58/EC Notice: Clear & comprehensive information must be provided to the user (Former and new legal situation) Clear and comprehensive Information about all relevant aspects in website privacy policy Close click-proximity of website privacy policy. Clear and comprehensive information about all relevant aspects ex ante (ex ante = prior to the storage / reading of the cookie or similar device) Enhanced Notice: Icons attached to or displayed within ads Icons must link to - General information about OBA (text, images, videos) - Specific information about the respective OBA system Information in website privacy policies EASA BPR DAA: Advertising Option Icon TRUSTe: Interest Based Ads-Icon ebay: AdChoice EASA: DAA: ( * refers to current seal holders) Measures ensuring information of users on publisher websites Optional: Regular notification of users --- Article 5(3) 2002/58/EC First steps towards Opt-In To be designed and implemented!!! Choice: User is offered the right to refuse (opt-out) (Former legal situation) User has given his or her consent (opt-in) (New legal situation) Users are given the opportunity to opt-out (e.g., users may opt-out by means of opt-out cookies) Prior opt-in consent: specific, informed, freely given (EuroPriSe adheres to the interpretation of the Article 29 Working Party WP 171) Opt-Out by means of opt-out cookies by other means EASA: DAA: NAI: TRUSTe: Trusted Ads Preferences Microsoft IE9 ( Tracking protection ) Mozilla Firefox ( Do not track ) Google Chrome ( Keep my opt-outs ) 12 EuroPriSe / ULD

13 Online Behavioural Advertisement (II) Relevant Legal Provisions EuroPriSe Requirements (former legal situation) EuroPriSe Requirements (new legal situation) EuroPriSe Requirements (transitional period) Self Regulatory Approaches by OBA industry stakeholders (examples) Art. 6 (1)(c)+(e) 95/46/EG Life time of cookies and user profiles must be proportional Life time of cookies and user profiles must be proportional Life time of cookies and user profiles must be proportional Art /46/EG Anonymisation of users IP addresses by means of an anonymisation service Anonymisation of users IP addresses by means of an anonymisation service Anonymisation of users IP addresses by means of an anonymisation service Art. 8 95/46/EG No use of categories relying on the use of sensitive personal data No use of categories relying on the use of sensitive personal data No use of categories relying on the use of sensitive personal data EASA BPR No use of categories that are specifically designed to target children No use of categories that are specifically designed to target children No use of categories that are specifically designed to target children EASA BPR Art. 12(1) 95/46/EG Users must be enabled to exercise right of access Users must be enabled to exercise right of access Users must be enabled to exercise right of access via a user-friendly interface out/tracking Optional: Users are enabled to access all standard categories of the respective OBA system or (even) modify the categories that have been assigned to them out/tracking Art. 17 (2)-(4) 95/46/EG Legally compliant processing security agreement(s) Legally compliant processing security agreement(s) Legally compliant processing security agreement(s) EuroPriSe / ULD 13

14 The tables visualise that the main challenge for providers of online behavioural advertising systems consists in developing suitable opt-in mechanisms. Building on current industry implementations and approaches, all remaining mandatory Euro- PriSe requirements are addressed. EuroPriSe is aware that it may be a particular challenge for OBA companies to provide for user-friendly access mechanisms as specified above. If requirements that are marked as optional are met, this fact indicates particular excellence of the OBA system in this respect and in developing towards a fully compliant system. 30 Duration of Transition Period / Validity of (Re-)Certifications In its opinion 2/2010, the Article 29 Working Party has not specified an end date for the discussion period. According to the stipulation in Article 4(1) of Directive 2009/136/EC, Article 5(3) of the eprivacy Directive is to be transposed into national law until May 25, It is expected that national regulators will introduce further specific transitional regulations and deadlines. In respect of (re)certification projects that are initiated and conducted during and after the transition period, the following will apply: The interim EuroPriSe requirements that have been specified for the transition period apply to all (re)certifications of OBA systems. However, since OBA systems qualify as IT-based services that have been implemented by their providers, the applicable national law is to be considered within the framework of a EuroPriSe (re)certification. The applicable law is determined by Article 4 of Directive 95/46/EC. 31 Consequently, if a Member State has transposed Article 5(3) of the eprivacy Directive into national law before or after the end of the transition period and if this national law applies to a particular OBA system that is target of a EuroPriSe evaluation, the relevant provision(s) of the national law is (are) to be complied with. 32 In case the Article 29 Working Party communicates a different ending date for the transition period, it will be prolonged or ended accordingly. If the Article 29 Working Party ends the transition period or issues a follow-up on Opinion 2/2010, EuroPriSe will apply Article 5(3) of the eprivacy Directive as it is interpreted by the Working Party from this date on, unless the provision is interpreted in another way by the European Court of Justice (ECJ) or modifications of Article 5(3) are initiated on EU level. 30 Note that a EuroPriSe certificate is granted only on condition that an IT product or IT-based service is rated as excellent in view of at least one applicable EuroPriSe requirement. 31 Detailed guidance on the applicable national law is provided by the Article 29 Working Party in its Opinion 8/2010 on applicable law, adopted on 16 December The opinion is available at 32 An overview of the national execution measures is available at

15 Summary OBA systems, among others, are subject to evaluation under the EuroPriSe certification scheme. Today s online behavioural advertising systems track users surfing behaviour on a website or across several websites by means of (browser) cookies. The use of cookies is regulated by Article 5(3) of the eprivacy Directive. In December 2009, this provision was amended by the EU Telecom Reforms Package to the effect that storing of cookies and gaining access to cookies necessitates users prior informed consent (so-called informed opt-in ). In response to the imminent revision of applicable law in Europe and the US industry stakeholders developed several new tools providing users with enhanced notice and choice in respect of the use of their online surfing behaviour data for advertising purposes. In particular, stakeholders of the European OBA industry presented their plans for coordinated voluntary action. These plans for a self-regulatory approach to OBA come in the form of a (Draft) EASA Best Practice Recommendation (BPR) addressed to EASA Self-Regulatory Organisations (SROs) and industry members. According to the Article 29 Working Party, the new legal situation requires OBA companies to switch from opt-out to opt-in solutions. Thus, the Working Party called upon industry to put forward technical and other means to comply with the amended legal requirements and to exchange views with the Working Party during a discussion period. Whilst this transition period, EuroPriSe applies interim requirements to (re)certifications of OBA systems. They are based on the following guidelines: 1. Requirements for transparency of online behavioural advertising systems are enhanced. This concerns both the duty of information to users and the duty of enabling users to exercise their right of access. 2. Providers of online behavioural advertising systems need to take first steps towards an implementation of opt-in mechanisms as required by the new legal situation. 3. The requirements that were developed under the former legal situation (e.g., waiver of sensitive categories) retain their validity and must be met. Current approaches of the OBA industry already address some of the relevant Euro- PriSe requirements. The main challenge for providers of online behavioural advertising systems consists in - making first steps towards - developing and implementing suitable opt-in mechanisms. Building on current industry implementations and approaches, the remaining EuroPriSe interim requirements can be met. EuroPriSe will apply the interim EuroPriSe requirements before and after the end of the transition period to all (re)certifications for OBA systems unless National law specifies further requirements (if applicable), The Article 29 Working Party issues a follow-up on Opinion 2/2010, Article 5(3) is interpreted in another way by the European Court of Justice, or Modifications of Article 5(3) are initiated on EU level. EuroPriSe / ULD 15

16 EuroPriSe/ULD EuroPriSe - European Privacy Seal at the Unabhängiges Landeszentrum für Datenschutz (ULD) Holstenstr Kiel Germany

European Self-regulation for Online Behavioural Advertising Transparency and Control for Consumers

European Self-regulation for Online Behavioural Advertising Transparency and Control for Consumers European Self-regulation for Online Behavioural Advertising Transparency and Control for Consumers IAB Europe and its members have worked on a European Framework for Online Behavioural Advertising that

More information

Data, Privacy, Cookies and the FTC in 2013. Kevin Stark - ExactTarget Maltie Maraj - ExactTarget Nicholas Merker - Ice Miller

Data, Privacy, Cookies and the FTC in 2013. Kevin Stark - ExactTarget Maltie Maraj - ExactTarget Nicholas Merker - Ice Miller Data, Privacy, Cookies and the FTC in 2013 Kevin Stark - ExactTarget Maltie Maraj - ExactTarget Nicholas Merker - Ice Miller BIOS Kevin Stark: Product Manager at ExactTarget. Focused on data security,

More information

Online Behavioural Advertising transparency and control for consumers

Online Behavioural Advertising transparency and control for consumers Online Behavioural Advertising transparency and control for consumers The European advertising ecosystem (including all involved industries such as publishers, advertisers, agencies, online advertising

More information

Privacy in the EU & Pan-European Self-Regulation of Online Behavioral Advertising The IAB Europe OBA Framework

Privacy in the EU & Pan-European Self-Regulation of Online Behavioral Advertising The IAB Europe OBA Framework Privacy in the EU & Pan-European Self-Regulation of Online Behavioral Advertising The IAB Europe OBA Framework 1 The European Trade Association of the digital and interactive marketing industry representing

More information

Short Public Report. Registry Information Service on European Residents (herein after referred to as RISER-Service, December 2010)

Short Public Report. Registry Information Service on European Residents (herein after referred to as RISER-Service, December 2010) Short Public Report 1. Name and version of the IT-based service (herein after referred to as RISER-Service, December 20) 2. Manufacturer or vendor of the IT product / Provider of the IT-based service Company

More information

PRIVACY POLICY Effective Date:, 2016. 1. INTRODUCTION AND OVERVIEW

PRIVACY POLICY Effective Date:, 2016. 1. INTRODUCTION AND OVERVIEW PRIVACY POLICY Effective Date:, 2016. 1. INTRODUCTION AND OVERVIEW This Privacy Policy describes how EPSON America, Inc. ( EPSON, we, our, or us ) collects, uses, and shares information about you and applies

More information

EASA Best Practice Recommendation on. Online Behavioural Advertising

EASA Best Practice Recommendation on. Online Behavioural Advertising in partnership with EASA Best Practice Recommendation on Online Behavioural Advertising Setting out a European advertising industry-wide self-regulatory standard and compliance mechanism for consumer controls

More information

Online Interest-Based Advertising: The Road Traveled and the Road Ahead

Online Interest-Based Advertising: The Road Traveled and the Road Ahead Online Interest-Based Advertising: The Road Traveled and the Road Ahead Genie Barton VP & Director, Online Interest-Based Advertising Program Advertising Self-Regulatory Council (ASRC)/ Council of Better

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 14-2012 COMPANY: Rocket Fuel, Inc. CHALLENGER:

More information

The Canadian Self-Regulatory Program for Online Behavioural Advertising

The Canadian Self-Regulatory Program for Online Behavioural Advertising 1 The Canadian Self-Regulatory Program for Online Behavioural Advertising Introductory Webinar Adam Kardash Bridget McIlveen Osler, Hoskin & Harcourt LLP Counsel to the Digital Advertising Alliance of

More information

Short Public Report. on the IT product and IT-based service. ProCampaign 2.0

Short Public Report. on the IT product and IT-based service. ProCampaign 2.0 Short Public Report on the IT product and IT-based service ProCampaign 2.0 1. Name and version of the IT product and IT-based service: IT product: ProCampaign, version 2.0 IT-based service: ProCampaign,

More information

ESOMAR PRACTICAL GUIDE ON COOKIES JULY 2012

ESOMAR PRACTICAL GUIDE ON COOKIES JULY 2012 ESOMAR PRACTICAL GUIDE ON COOKIES JULY 2012 Copyright ESOMAR 2012 TABLE OF CONTENTS 2 Objectives 2 Introduction 3 Definitions 4 SECTION 1: APPLICABLE LAW 4 SECTION 2: WHAT YOU NEED TO KNOW SOME FAQs 5

More information

Cookies Under Control

Cookies Under Control Cookies Under Control On June 5, 2012 the new Dutch legislation on the use of cookies enters into force. What does this mean for the online marketing business? 1 CONTENTS 3 4 4 7 8 NEW RULES FOR THE USE

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 08-2012 COMPANY: OxaMedia Corporation CHALLENGER:

More information

Cookies and consent. The Article 29 Working Party has identified seven types of cookies that are not subject to the consent requirement.

Cookies and consent. The Article 29 Working Party has identified seven types of cookies that are not subject to the consent requirement. Cookies and consent Cookies are small text files placed on a computer and accessed by the browser when opening a webpage. - DDMA 2012 The statutory requirements governing the placement of cookies were

More information

1. Introduction. 2. Sectoral Areas Affected. 3. Data Security. 4. Data Breach Requirements. 5. Traffic Data

1. Introduction. 2. Sectoral Areas Affected. 3. Data Security. 4. Data Breach Requirements. 5. Traffic Data 1. Introduction Special data protection rules apply to the protection of Personal Data by Data Controllers in the electronic communications sector. These are in addition to the general obligations that

More information

IAB Europe Guidance. Five Practical Steps to help companies comply with the E-Privacy Directive

IAB Europe Guidance. Five Practical Steps to help companies comply with the E-Privacy Directive IAB Europe Guidance Five Practical Steps to help companies comply with the E-Privacy Directive Foreword The steps laid out below are intended to help brand advertisers, publishers and advertising businesses

More information

Online Behavioural Advertising Privacy Notice

Online Behavioural Advertising Privacy Notice Rev. 01.04.2016 Online Behavioural Advertising Privacy Notice Table of Contents Introduction 1 Online Behavioural Advertising (OBA) 1 Performance Ads and OBA 2 Other 3 rd Parties involved in OBA 2 Data

More information

Personal Data Protection Policy

Personal Data Protection Policy Personal Data Protection Policy Please take a moment to read the following Policy. If there is anything you do not understand then please contact us. We are committed to protecting privacy. This Personal

More information

Safe Harbor Questionnaire

Safe Harbor Questionnaire Safe Harbor Questionnaire This questionnaire is aimed at gathering relevant information with regard to the Safe Harbor certification of the data importer. It should be completed by personnel with knowledge

More information

Brussels, 20 July 2010 (Case 2009-0215) 1. Proceedings

Brussels, 20 July 2010 (Case 2009-0215) 1. Proceedings Opinion on a notification for Prior Checking received from the Data Protection Officer of the European Investment Bank (EIB) concerning procedures related to "360 Leadership feedback report" Brussels,

More information

ES ET DE LA VIE PRIVÉE E 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS

ES ET DE LA VIE PRIVÉE E 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS ES ET DE LA VIE PRIVÉE E 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISS European Privacy Seal Kirsten Bock Independent Centre for Privacy Protection ULD Unabhaengiges Landeszentrum

More information

Questions regarding the OBA framework

Questions regarding the OBA framework Questions regarding the OBA framework Helsinki, 21 March 2013 Questions answered by Ionel Naftanaila, EDAA Law office: Only IAB members are obliged to follow the OBA framework (=use the icon etc.). The

More information

Privacy Agreement ( PA )

Privacy Agreement ( PA ) SoftLayer utilizes great care in keeping the information of the users of the Site (meaning www. (or such other location as SoftLayer may designate) (including clients) ( Users or Clients ) private and

More information

User tracking: Scope and Implementation eprivacy Directive Article 5(3)

User tracking: Scope and Implementation eprivacy Directive Article 5(3) User tracking: Scope and Implementation eprivacy Directive Article 5(3) Email Sender & Provider Coalition April 3, 2012 Presented By Karin Retzer 2012 Morrison & Foerster LLP All Rights Reserved mofo.com

More information

E-COMMERCE GOES MOBILE: SEEKING COMPETITIVENESS THROUGH PRIVACY

E-COMMERCE GOES MOBILE: SEEKING COMPETITIVENESS THROUGH PRIVACY E-COMMERCE GOES MOBILE: SEEKING COMPETITIVENESS THROUGH PRIVACY Oana Dolea 7 th Annual Leg@l.IT Conference March 26th, 2013 Montreal, Canada INTRODUCTION Mobile e-commerce vs. E-commerce Mobile e-commerce:

More information

eprivacyseal GmbH Criteria catalogue EU November 2013

eprivacyseal GmbH Criteria catalogue EU November 2013 eprivacyseal GmbH Criteria catalogue EU November 2013 The EPS data privacy seal certifies for the respective applicant that its product or service is in line with the detailed criteria in the following

More information

SAP Splash Privacy Statement

SAP Splash Privacy Statement SAP Splash Privacy Statement The SAP Splash Privacy Statement (this Privacy Statement ) applies to the use of this website, http://www.experiencesplash.com (the Website ) and any other subdomains or webpages

More information

PRIVACY POLICY (LAST UPDATED: 29.05.2015)

PRIVACY POLICY (LAST UPDATED: 29.05.2015) PRIVACY POLICY (LAST UPDATED: 29.05.2015) CONTENTS 1 Personally Identifiable Information... 3 2 Collection of Personally Identifiable and Other Data and Information... 3 2.1 When visiting our website www.zanox.com...

More information

nugg.ad Privacy Policy

nugg.ad Privacy Policy nugg.ad Privacy Policy Version 2.4.2 June 2015 Privacy Policy Page 2 The purpose of this privacy policy is to provide you with information regarding our privacy and security policy over and above our statutory

More information

Online Behavioral Advertising (OBA) Forum

Online Behavioral Advertising (OBA) Forum Online Behavioral Advertising (OBA) Forum Speakers Paul Fisher, Chief Executive Officer, IAB Australia Samantha Yorke, Legal Director Asia Pacific, Yahoo! Jenny Duxbury, Compliance, Regulatory & Corporate

More information

Privacy Policy Draft

Privacy Policy Draft Introduction Privacy Policy Draft Please note this is a draft policy pending final approval Alzheimer s Australia values your privacy and takes reasonable steps to protect your personal information (that

More information

IDT Financial Services Limited. Prime Card Privacy Policy

IDT Financial Services Limited. Prime Card Privacy Policy IDT Financial Services Limited Prime Card Privacy Policy Effective and Updated April 7, 2014 General IDT Financial Services Limited and its affiliates ( IDT, us, we, our ) are committed to protecting the

More information

Working Document 02/2013 providing guidance on obtaining consent for cookies

Working Document 02/2013 providing guidance on obtaining consent for cookies ARTICLE 29 DATA PROTECTION WORKING PARTY 1676/13/EN WP 208 Working Document 02/2013 providing guidance on obtaining consent for cookies Adopted on 2 October 2013 This Working Party was set up under Article

More information

Privacy and Online Behavioral Advertising

Privacy and Online Behavioral Advertising Event hashtag: #truste2011 TRUSTe Research In partnership with Harris Interactive 2011 Consumer Research Results Privacy and Online Behavioral Advertising July 25, 2011 1 Welcome: TRUSTe Overview Mission:

More information

ICC RESOURCE GUIDE FOR SELF-REGULATION OF ONLINE BEHAVIOURAL ADVERTISING (OBA)

ICC RESOURCE GUIDE FOR SELF-REGULATION OF ONLINE BEHAVIOURAL ADVERTISING (OBA) ICC RESOURCE GUIDE FOR SELF-REGULATION OF ONLINE BEHAVIOURAL ADVERTISING (OBA) Highlights Explanation of global framework available for OBA self-regulation Checklist from existing OBA self-regulatory mechanisms

More information

Abilities Centre collects personal information for the following purposes:

Abilities Centre collects personal information for the following purposes: Privacy Policy Accountability Abilities Centre is responsible for your personal information under its control. We have appointed a Privacy Officer who is accountable for our compliance with this Privacy

More information

BORKING CONSULTANCY. Ixquick Short Public Report. Surfboard Holding B.V. Date: 8 February 2011 Version: 2.1

BORKING CONSULTANCY. Ixquick Short Public Report. Surfboard Holding B.V. Date: 8 February 2011 Version: 2.1 BORKING CONSULTANCY Ixquick Short Public Report Document: Customer: CS-X-18-001 Surfboard Holding B.V. Author: Certified Secure Date: 8 February 11 Version: 2.1 Address: Loire 128-A 2491 AJ The Hague The

More information

Membership of the US Safe Harbor Program by Data Processors

Membership of the US Safe Harbor Program by Data Processors Membership of the US Safe Harbor Program by Data Processors Christopher KUNER* The EU Data Protection Directive1 restricts data transfers to determines the purposes and means of the processing of countries

More information

Speakers. Navigating Through The Legal Complexities And Cloudy Conditions To Implement A Successful Global OBA Program

Speakers. Navigating Through The Legal Complexities And Cloudy Conditions To Implement A Successful Global OBA Program Speakers Navigating Through The Legal Complexities And Cloudy Conditions To Implement A Successful Global OBA Program Speakers: Ashlen Cherry, Americas Privacy Officer, Dell, ashlen_cherry@dell.com Ruth

More information

TOY INDUSTRY CHECKLIST FOR MOBILE APPS AND PROMOTIONS

TOY INDUSTRY CHECKLIST FOR MOBILE APPS AND PROMOTIONS TOY INDUSTRY CHECKLIST FOR MOBILE APPS AND PROMOTIONS JULY 2012 Overview Members of the toy industry are fast embracing the world of mobile applications ( apps ). Apps offer a new world of engaging content

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 31-2013 COMPANY: 3Q Digital (formerly PPC Associates

More information

European Privacy Reporter

European Privacy Reporter Is this email not displaying correctly? Try the web version or print version. ISSUE 02 European Privacy Reporter An Update on Legal Developments in European Privacy and Data Protection November 2012 In

More information

Short Public Report. IT product: Test Data Migration Server (TDMS), Version 4.0. Volker von Seggern

Short Public Report. IT product: Test Data Migration Server (TDMS), Version 4.0. Volker von Seggern Short Public Report 1. Name and version of the IT product or IT-based service: IT product: Test Data Migration Server (TDMS), Version 4.0 2. Manufacturer or vendor of the IT product: Company Name: SAP

More information

Johnson Controls Privacy Notice

Johnson Controls Privacy Notice Johnson Controls Privacy Notice Johnson Controls, Inc. and its affiliated companies (collectively Johnson Controls, we, us or our) care about your privacy and are committed to protecting your personal

More information

Zubi Advertising Privacy Policy

Zubi Advertising Privacy Policy Zubi Advertising Privacy Policy This privacy policy applies to information collected by Zubi Advertising Services, Inc. ( Company, we or us ), on our Latino Emoji mobile application or via our Latino Emoji

More information

NAI Mobile Application Code

NAI Mobile Application Code 2013 NAI Mobile Application Code Introduction The NAI Mobile Application Code, like the 2013 NAI Code of Conduct, governs only NAI member companies. It does not govern all data collection by member companies,

More information

SAFE-BioPharma RAS Privacy Policy

SAFE-BioPharma RAS Privacy Policy SAFE HARBOR SAFE-BioPharma Association is certified compliant with the US Department of Commerce and European Union Safe Harbor requirements for the protection of personal data. SAFE-BioPharma s privacy

More information

Article 29 Working Party Issues Opinion on Cloud Computing

Article 29 Working Party Issues Opinion on Cloud Computing Client Alert Global Regulatory Enforcement If you have questions or would like additional information on the material covered in this Alert, please contact one of the authors: Cynthia O Donoghue Partner,

More information

AASA Online Privacy Policy CRP.020

AASA Online Privacy Policy CRP.020 Introduction Alzheimer s Australia SA Inc values your privacy and takes reasonable steps to protect your personal information (that is, information which identifies or may reasonably be used to identify

More information

HOW WE USE YOUR INFORMATION

HOW WE USE YOUR INFORMATION HOW WE USE YOUR INFORMATION This privacy notice tells you what to expect when University of Essex Students Union (referred to as the SU herein) collects personal information. It applies to information

More information

Opinion 2/2010 on online behavioural advertising

Opinion 2/2010 on online behavioural advertising ARTICLE 29 DATA PROTECTION WORKING PARTY 00909/10/EN WP 171 Opinion 2/2010 on online behavioural advertising Adopted on 22 June 2010 This Working Party was set up under Article 29 of Directive 95/46/EC.

More information

MIS Privacy Statement. Our Privacy Commitments

MIS Privacy Statement. Our Privacy Commitments MIS Privacy Statement Our Privacy Commitments MIS Training Institute Holdings, Inc. (together "we") respect the privacy of every person who visits or registers with our websites ("you"), and are committed

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 16-2012 COMPANY: Kia Motors America, Inc. CHALLENGER:

More information

POSITION ON THE COMMUNICATION FROM THE EUROPEAN COMMISSION. A comprehensive strategy on data protection in the European Union

POSITION ON THE COMMUNICATION FROM THE EUROPEAN COMMISSION. A comprehensive strategy on data protection in the European Union JANUARY 14 th, 2011 POSITION ON THE COMMUNICATION FROM THE EUROPEAN COMMISSION A comprehensive strategy on data protection in the European Union This Position Paper has been entered on the European Commission's

More information

Privacy and Electronic Communications Regulations

Privacy and Electronic Communications Regulations ICO lo Notification of PECR security breaches Privacy and Electronic Communications Regulations Contents Introduction... 2 Overview... 2 Relevant security breaches... 3 What is a service provider?... 3

More information

Cookies Compliance Advisory

Cookies Compliance Advisory Cookies Compliance Advisory Note: this is an advisory notice that summarises the current position of the Article 29 Working Group and makes suggestions as to how organisations might practically achieve

More information

Application of Data Protection Concepts to Cloud Computing

Application of Data Protection Concepts to Cloud Computing Application of Data Protection Concepts to Cloud Computing By Denitza Toptchiyska Abstract: The fast technological development and growing use of cloud computing services require implementation of effective

More information

I. Network Advertising Initiative ( NAI ) Overview

I. Network Advertising Initiative ( NAI ) Overview NETWORK ADVERTISING INITIATIVE SELF-REGULATORY PRINCIPLES FOR ONLINE PREFERENCE MARKETING BY NETWORK ADVERTISERS I. Network Advertising Initiative ( NAI ) Overview A. Network advertisers will adhere to

More information

eprivacy GmbH Criteria Catalogue "eprivacyapp" June 2015

eprivacy GmbH Criteria Catalogue eprivacyapp June 2015 eprivacy GmbH Criteria Catalogue "eprivacyapp" June 2015 The eprivacyapp seal for data security and data protection from eprivacy GmbH certifies the respective requester that his/her offer is compliant

More information

Privacy Policy. February, 2015 Page: 1

Privacy Policy. February, 2015 Page: 1 February, 2015 Page: 1 Revision History Revision # Date Author Sections Altered Approval/Date Rev 1.0 02/15/15 Ben Price New Document Rev 1.1 07/24/15 Ben Price Verify Privacy Grid Requirements are met

More information

LIDL PRIVACY POLICY. Effective Date: June 11, 2015

LIDL PRIVACY POLICY. Effective Date: June 11, 2015 LIDL PRIVACY POLICY Effective Date: June 11, 2015 Thank you for visiting Lidl US, LLC's (3500 S. Clark Street, Arlington, VA 22202) website (collectively, "Lidl," "we," or "us"). We are committed to providing

More information

Advertising on the Internet

Advertising on the Internet A Briefing by IAB Europe Advertising on the Internet A quick download for policy makers contents Page What is advertising on the Internet? What is advertising on the Internet? Page 2 Page 3 Page 3 Page

More information

COMMENTARY Scope & Purpose Definitions I. Education. II. Transparency III. Consumer Control

COMMENTARY Scope & Purpose Definitions I. Education. II. Transparency III. Consumer Control CONTENTS: SUMMARY SELF REGULATORY PRINCIPLES FOR ONLINE BEHAVIORAL ADVERTISING Introduction Definitions I. Education II. Transparency III. Consumer Control IV. Data Security V. Material Changes to Existing

More information

Office of Fair Trading (OFT) Online Targeting of Advertising and Prices Market Study Response by the Internet Advertising Bureau

Office of Fair Trading (OFT) Online Targeting of Advertising and Prices Market Study Response by the Internet Advertising Bureau Office of Fair Trading (OFT) Online Targeting of Advertising and Prices Market Study Response by the Internet Advertising Bureau 1. Introduction The Internet Advertising Bureau (IAB) is the UK industry

More information

NAI Code 2013 of Conduct

NAI Code 2013 of Conduct 2013 NAI Code of Conduct INtroduCtIoN The Network Advertising Initiative ( NAI ) is the leading self-regulatory body governing third parties in the online advertising ecosystem. The NAI is currently composed

More information

Data protection compliance checklist

Data protection compliance checklist Data protection compliance checklist What is this checklist for? This checklist is drawn up on the basis of analysis of the relevant provisions of European law. Although European law aims at harmonizing

More information

ADVANCED CABLE COMMUNICATIONS WEBSITE PRIVACY POLICY COLLECTION AND USE OF INFORMATION FROM USERS

ADVANCED CABLE COMMUNICATIONS WEBSITE PRIVACY POLICY COLLECTION AND USE OF INFORMATION FROM USERS ADVANCED CABLE COMMUNICATIONS WEBSITE PRIVACY POLICY Advanced Cable Communications ( Company ) strives to offer visitors to its website (the Site ) the many advantages of Internet technology and to provide

More information

UNILEVER PRIVACY PRINCIPLES UNILEVER PRIVACY POLICY

UNILEVER PRIVACY PRINCIPLES UNILEVER PRIVACY POLICY UNILEVER PRIVACY PRINCIPLES Unilever takes privacy seriously. The following five principles underpin our approach to respecting your privacy: 1. We value the trust that you place in us by giving us your

More information

Privacy Policy documents for

Privacy Policy documents for Privacy Policy documents for Praendex Incorporated doing business as PI Worldwide Product User Privacy Policy - For Customers, as well as those invited to our websites to complete a PI Survey or SSAT General

More information

Flat Privacy Policy - Version dated 5 January

Flat Privacy Policy - Version dated 5 January Flat Privacy Policy - Version dated 5 January 2016-1. FLAT APPROACH TO PRIVACY 1.1 We operate a service which allows you to create, edit, share and collaborate on music scores using our website located

More information

General Terms and Conditions of Trade for the use of the Bitplaces management platform and the Bitplaces software

General Terms and Conditions of Trade for the use of the Bitplaces management platform and the Bitplaces software General Terms and Conditions of Trade for the use of the Bitplaces management platform and the Bitplaces software I. Definitions, application area / conclusion of contract 1. Definitions 1.1 "App" in the

More information

AlixPartners, LLP. General Data Protection Statement

AlixPartners, LLP. General Data Protection Statement AlixPartners, LLP General Data Protection Statement GENERAL DATA PROTECTION STATEMENT 1. INTRODUCTION 1.1 AlixPartners, LLP ( AlixPartners ) is committed to fulfilling its obligations under the data protection

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 32-2013 COMPANY: MediaMath, Inc. CHALLENGER: Online

More information

New Relic EU Data Protection Whitepaper

New Relic EU Data Protection Whitepaper New Relic EU Data Protection Whitepaper November 2015 New Relic, Inc. 188 Spear Street San Francisco, CA 94105 1 Table of Contents I. Introduction II. Purpose III. Overview of Directive 95/46/EC IV. New

More information

BCS, The Chartered Institute for IT Consultation Response to:

BCS, The Chartered Institute for IT Consultation Response to: BCS, The Chartered Institute for IT Consultation Response to: A Comprehensive Approach to Personal Data Protection in the European Union Dated: 15 January 2011 BCS The Chartered Institute for IT First

More information

Guidelines on Executive Order on Information and Consent Required in Case of Storing and Accessing Information in End-User Terminal Equipment

Guidelines on Executive Order on Information and Consent Required in Case of Storing and Accessing Information in End-User Terminal Equipment Guidelines on Executive Order on Information and Consent Required in Case of Storing and Accessing Information in End-User Terminal Equipment ("Cookie Order") 2nd version, April 2013 Preface...3 1. Introduction...5

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 39-2014 COMPANY: Best Buy Co., Inc. CHALLENGER:

More information

Privacy Policy for Data Collected by Blue State Digital

Privacy Policy for Data Collected by Blue State Digital Privacy Policy for Data Collected by Blue State Digital Overview Blue State Digital LLC. ( Blue State Digital, BSD or we ) provides various services to non- profit entities and other related businesses

More information

SKoolAide Privacy Policy

SKoolAide Privacy Policy SKoolAide Privacy Policy Welcome to SKoolAide. SKoolAide, LLC offers online education related services and applications that allow users to share content on the Web more easily. In addition to the sharing

More information

US 2013 Consumer Data Privacy Study Advertising Edition

US 2013 Consumer Data Privacy Study Advertising Edition RESEARCH REPORT US Consumer Data Privacy Study Advertising Edition 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0

More information

PRIVACY POLICY AND INFORMATION ON COOKIES

PRIVACY POLICY AND INFORMATION ON COOKIES PRIVACY POLICY AND INFORMATION ON COOKIES This privacy policy governs the collection, storage and use of personal information (meaning any information about you which is personally identifiable namely:

More information

WHAT DOES CREDIT ONE BANK, N.A. DO WITH YOUR PERSONAL INFORMATION?

WHAT DOES CREDIT ONE BANK, N.A. DO WITH YOUR PERSONAL INFORMATION? M-112997 Rev 07/2015 FACTS Why? What? How? WHAT DOES CREDIT ONE BANK, N.A. DO WITH YOUR PERSONAL INFORMATION? Financial companies choose how they share your personal information. Federal law gives consumers

More information

Information We Collect and Store as You Access and Use the Site

Information We Collect and Store as You Access and Use the Site Effective Date: This Privacy Policy was last revised on January, 2015. 1. What Information Does the Site Collect? (a) Information You Provide to Us Personal Information and Demographic Information. On

More information

The Digital Marketing Ecosystem: Trends, Risks and Obligations

The Digital Marketing Ecosystem: Trends, Risks and Obligations The Digital Marketing Ecosystem: Trends, Risks and Obligations Teena H. Lee, Vice President, Privacy and E-commerce Counsel The Estée Lauder Companies Inc. Bridget C. Treacy, Partner, Hunton & Williams

More information

Policy and Procedure for approving, monitoring and reviewing personal data processing agreements

Policy and Procedure for approving, monitoring and reviewing personal data processing agreements Policy and Procedure for approving, monitoring and reviewing personal data processing agreements 1 Personal data processing by external suppliers, contractors, agents and partners Policy and Procedure

More information

Align Technology. Data Protection Binding Corporate Rules Processor Policy. 2014 Align Technology, Inc. All rights reserved.

Align Technology. Data Protection Binding Corporate Rules Processor Policy. 2014 Align Technology, Inc. All rights reserved. Align Technology Data Protection Binding Corporate Rules Processor Policy Confidential Contents INTRODUCTION TO THIS POLICY 3 PART I: BACKGROUND AND ACTIONS 4 PART II: PROCESSOR OBLIGATIONS 6 PART III:

More information

Behavioral (Interest Based) Advertising: State of the Industry going into 2014 November 7, 2013

Behavioral (Interest Based) Advertising: State of the Industry going into 2014 November 7, 2013 Behavioral (Interest Based) Advertising: State of the Industry going into 2014 November 7, 2013 SPEAKERS Todd B. Ruback, CIPP-US/E/IT, CPO of Evidon, Inc. Marc Groman, CIPP/US, Executive Director and General

More information

Data Protection and Cloud Computing: an Overview of the Legal Issues

Data Protection and Cloud Computing: an Overview of the Legal Issues Data Protection and Cloud Computing: an Overview of the Legal Issues Christopher Kuner Partner, Hunton & Williams, Brussels Research Assistant, University of Copenhagen Nordic IT Law Conference Copenhagen,

More information

Online Behavioral Advertising: Trends and Developments

Online Behavioral Advertising: Trends and Developments Online Behavioral Advertising: Trends and Developments D. Reed Freeman, Julie O'Neill and Nicholas Datlowe, Morrison & Foerster LLP Online behavioral advertising programs, which target consumers based

More information

Privacy Statement. What Personal Information We Collect. Australia

Privacy Statement. What Personal Information We Collect. Australia Privacy Statement Kelly Services, Inc. and its subsidiaries ("Kelly Services" or Kelly ) respect your privacy and we acknowledge that you have certain rights related to any personal information we collect

More information

Service Description for the Registration and Administration of Domain Names by Swisscom

Service Description for the Registration and Administration of Domain Names by Swisscom Service Description for the Registration and Administration of Domain Names by Swisscom 1 Area of application This Service Description govern the conditions for the registration, administration, and use

More information

PRIVACY POLICY. "Personal Information" comprising:

PRIVACY POLICY. Personal Information comprising: PRIVACY POLICY Uniqlo is committed to respecting the privacy rights of visitors to its website. This privacy policy ("Policy") explains how we collect, store and use personal data about you when you browse

More information

Binding Corporate Rules ( BCR ) Summary of Third Party Rights

Binding Corporate Rules ( BCR ) Summary of Third Party Rights Binding Corporate Rules ( BCR ) Summary of Third Party Rights This document contains in its Sections 3 9 all provision of the Binding Corporate Rules (BCR) for Siemens Group Companies and Other Adopting

More information

Acquia Comments on EU Recommendations for Data Processing in the Cloud

Acquia Comments on EU Recommendations for Data Processing in the Cloud Acquia Comments on EU Recommendations for Data Processing in the Cloud Executive Summary On July 1, 2012, European Union (EU) data protection regulators provided guidelines for service providers processing

More information

PRIVACY POLICY. Any form of reproduction in whole or in part of the content of this document is prohibited.

PRIVACY POLICY. Any form of reproduction in whole or in part of the content of this document is prohibited. Deck S.r.l. Via Cesareo Console 3 80132 Napoli (NA) P. iva: 04846431213 Cf: 04846431213 Rea 717835 Reg. Imp. di Napoli Cap. Soc. 15.000 PRIVACY POLICY Protecting and defending your privacy is important

More information

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION

ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS DECISION ADVERTISING SELF-REGULATORY COUNCIL/COUNCIL OF BETTER BUSINESS BUREAUS ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM FORMAL REVIEW Case Number: 43-2015 COMPANY: CBT Sports, LLC CHALLENGER: Online

More information

I. Personal data and its use in the business to business environment.

I. Personal data and its use in the business to business environment. RESPONSE FROM THE DIRECT MARKETING ASSOCIATION (UK) LTD. TO THE EUROPEAN COMMISSION'S CONSULTATION ON THE IMPLEMENTATION OF DIRECTIVE 95/46 EC ON THE PROTECTION OF INDIVIDUALS WITH REGARD TO THE PROCESSING

More information

San Juan County Abstract & Title Company 111 North Orchard Avenue Farmington, NM 87401 (505) 325-2808 FAX (505) 327-7483

San Juan County Abstract & Title Company 111 North Orchard Avenue Farmington, NM 87401 (505) 325-2808 FAX (505) 327-7483 San Juan County Abstract & Title Company 111 North Orchard Avenue Farmington, NM 87401 (505) 325-2808 FAX (505) 327-7483 PRIVACY POLICY November 3, 2014 San Juan County Abstract & Title Company (collectively,

More information

Legal Aspects of the MonIKA-Project - Privacy meets Cybersecurity

Legal Aspects of the MonIKA-Project - Privacy meets Cybersecurity Legal Aspects of the MonIKA-Project - Privacy meets Cybersecurity Sebastian Meissner Security Incident Information Sharing Workshop Berlin, 26.07.2013 Introduction Opening question Privacy & cybersecurity:

More information