This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Website. For more information, please check the privacy policies of the relevant services.
Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section "How to opt-out of interest-based advertising" in this document.
Facebook Lookalike Audience (Facebook, Inc.)
Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Facebook, Inc. that uses Data collected through Facebook Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the base of their past use of this Website or engagement with relevant content across the Facebook apps and services.
On the base of these Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audience.
Users can opt out of Facebook's use of cookies for ads personalization by visiting this opt-out page.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
Google Ad Manager
Google Ad Manager is an advertising service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with.
In order to opt out from being tracked by various advertising networks, Users may make use of Youronlinechoices. In order to understand Google's use of data, consult Google's partner policy.
This service uses the “DoubleClick” Cookie, which tracks use of this Website and User behavior concerning ads, products and services offered.
Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Storage duration:
- AID: 2 years
- ANID: 2 years
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- TAID: 14 days
- __gads: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_ha: 3 months
- id: 2 years
- test_cookie: 15 minutes
Google AdSense
Google AdSense is an advertising service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing. This service uses the “DoubleClick” Cookie, which tracks use of this Website and User behavior concerning ads, products and services offered.
Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.
In order to understand Google's use of data, consult Google's partner policy.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- AID: 2 years
- ANID: 2 years
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- TAID: 14 days
- __gads: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_ha: 3 months
- id: 2 years
- test_cookie: 15 minutes
Microsoft Advertising (Microsoft Corporation)
Microsoft Advertising is an advertising service provided by Microsoft Corporation.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- MUID: 2 years
- _uetmsclkid: 3 months
- _uetmsclkid: indefinite
- _uetsid: 1 day
- _uetsid: indefinite
- _uetvid: 2 years
- _uetvid: indefinite
Index Exchange, Inc.
Index Exchange, Inc. (“Index Exchange”) believes in all Internet users’ rights to privacy. This Policy explains the information collection, use, and disclosure practices of Index Exchange. It applies to all information received by Index Exchange whether in electronic, paper or verbal format.
THE INDEX EXCHANGE BUSINESS
The Index Exchange Online Advertising Exchange (“Index Platform”) prides itself on providing an atmosphere that is non-disruptive to Internet users. Our proprietary ad personalizationmethodologies enable advertisers to effectively direct their campaigns to the audience(s) they are looking to reach without engaging in profiling practices. Services offered by Index Exchange include a Web-based advertising exchange marketplace that enables publishers, advertisers, and ad networks to efficiently market, buy and sell digital and mobile advertising and ad inventory.
Through its ad server, Index Exchange also acts as a service provider to enable its publishers, advertisers, ad networks and other clients to collect and use data for advertising purposes on their digital and mobile platforms across the Internet. Publishers may use our services to process consumer data, which they collect or source. Their data collection, use, and sharing practices may be governed by their own privacy policies and differ from those found in Index Exchange’s Privacy Policy. We encourage you to refer to the privacy policies of any websites you visit and apps you use, to learn about their privacy practices before disclosing any personal information to them.
INDUSTRY SELF–REGULATION
Index Exchange prides itself on conducting business in a transparent and open manner. In line with those values, we support efforts for self-regulation in the internet-based advertising industry.
NAI
Index Exchange is a member in good standing of the Network Advertising Initiative (NAI), a cooperative of online marketing and analytics companies committed to responsible data collection for digital advertising, building consumer awareness, and establishing responsible business and data management practices and standards. Index Exchange adheres to the NAI Code of Conduct in all its operations.
DAA
Index Exchange adheres to the standards and practices outlined by The Digital Advertising Alliance, a consortium of the leading national advertising and marketing trade associations, promoting a self-regulatory program for online interest-based advertising. More information on the program can be found here.
INFORMATION COLLECTION, USE, AND SHARING
In general, like most standard website servers, Index Exchange uses log files to track transactions. These log files include internet protocol (IP) addresses, browser types used, postal or zip codes, the internet service provider (ISP) utilised, referring/exit pages, platform type, date/time stamps, device IDs, and number of clicks among others. This information is then used to analyze trends, administer the site, and personalizeadvertisements to users accordingly. Index Exchange does not collect a website user’s Personally Identifiable Information (PII) as defined under United States federal law. However, in the course of and for purposes of conducting its business, Index Exchange may collect and process the following consumer information that is considered Personal Information (PI) under the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) or Personal Data under the European Union’s General Data Protection Regulation (GDPR):
(1) browser and device information received from publishers is shared with advertisers and agencies for responding to requests for advertisements, forecast advertising inventory and troubleshooting any operation issues related to the Index Platform;
(2) IP addresses, including both IPv4 and IPv6 are used to bid on advertising inventory;
(3) geo-location data is used to bid on advertising inventory;
(4) Precise Location Data (data obtained from a device about the physical location of the device) is used to bid on advertising inventory;
(5) GPS coordinates, where available;
(6) unique Index Exchange UserIDs, stored in browser cookies, are used for profiles on the ad server;
(7) mobile device identifiers are used to understand mobile traffic and are shared with advertisers and agencies to personalize the advertising experience;
(8) Pixel Data (data obtained through or in connection with the placement of any pixel mechanism) is used as part of the user matching process;
(9) people identifiers provided by Index Exchange’s partners are associated to audience segments, and shared with advertisers and agencies;
(10) data on whether a user viewed or clicked on an Ad is shared with advertisers and agencies.
Index Exchange’s internal processes treat personal data in accordance with regulatory requirements and applicable privacy laws to ensure that information is stored securely and used only for allowed and intended purposes.
Index Exchange may combine information that does not directly identify an individual with data collected from other sources to provide publishers, advertisers and ad networks with information to improve the relevance of advertising presented to users and determine whether to bid on ad inventory. In addition, although Index Exchange does not directly engage in Cross-App Advertising, our technology may collect and/or pass through Mobile Device IDs (the unique identifier assigned to a device by the manufacturer) or Advertising IDs (for iOS 6 and later), instead of cookies, to recognize you.
Do Not Track Signal
Index Exchange does not honor the ‘DNT’ browser signal. Instead, we utilize the cookie based opt-out mechanisms to allow users to opt-out of all advertising. For more information, please see the “Your Choices” section below.
Cross–Device Linking
Cross-Device Linking is the process of making assumptions that certain devices are related to each other, i.e. they belong to the same user/household. Index Exchange may engage in Cross Device Linking for personalized advertising, ad delivery, and reporting. If you would like to opt-out of having Cross-Device Linking used by Index Exchange on your devices, please see the “Your Choices” section below.
Cookies (HTTP Cookies and HTML5 Cookies or Local Storage)
An HTTP cookie is an object that stores a small amount of data on behalf of a browser on a given device. By saving information in a cookie, websites can remember preferences or recognize browsers from one visit to another or from one website to another. Index Exchange uses both session-only and persistent cookies. More specifically, Index Exchange uses certain cookies that last only for the duration of a user’s internet session and expire when that user closes his or her browser, as well as certain other cookies that are used to remember a user when he or she returns to a website and will last for longer.
HTML5 cookies, also known as HTML5 Web Storage, or local storage, is a technology that allows a website or application to store information locally on a user’s computer or mobile device. Index Exchange uses HTML5 cookies, or local storage, in connection with its platform and website to support publisher monetization objectives and speed up page load time.
Index Exchange ultimately uses these technologies (referred to as “cookies” going forward) to facilitate transactions between buyers and sellers of digital advertising inventory and, among other things, to enable its demand-side partners, publishers, data management platforms, and other third-party clients (collectively referred to as “Index Exchange clients/partners” moving forward) to effectively: (a) target advertisements to users of digital media properties, (b) evaluate and assess their advertisements and campaigns; and (c) view and enforce user opt-out choices. Index Exchange’s platform further uses cookies to associate information that does not directly identify an individual user with browsers and devices, so that Index Exchange’s platform and Index Exchange clients/partners can then use the information to select advertisements and campaigns for delivery via the Index Exchange platform. Index Exchange engages in cookie syncing, which is the matching of Index Exchange cookie IDs to Index Exchange clients’/partners’ cookie IDs.
Index Exchange collects and stores IDs from a variety of domains, including adsrvr.org and casalemedia.com. These IDs are stored in either Index Exchange’s domain (casalemedia.com) or the publisher’s first party domain.
PII, PI, and Personal Data of Index Exchange Clients
Registering to become a member of the Index Platform and use of the Index Exchange User Interface, either as an advertiser or a publisher, requires the submission of PI, PII or Personal Data to Index Exchange. This can include the full name, mailing and/or billing address, email address, company name, and website URL. Index Exchange uses this information to service its accounts and respond to inbound inquiries related to sales or technical support requests. Communications to business users are related to the Advertising Exchange. The Index Exchange User Interface also uses Google Analytics technology to monitor traffic on the UI. All such information submitted is held by Index Exchange in strict confidence and as prescribed by corresponding regulatory authorities.
Index Exchange does not engage in any form of distribution or sale of PII, PI or Personal Data to third parties for their own promotional use. Index Exchange does not sell, supply, or otherwise make user PII, PI or Personal Data available to any third party under any circumstances, unless ordered to do so by a court of competent jurisdiction.
Information Obtained from Third Parties
Index Exchange may obtain data from third party companies for the purpose of informing ad selection. This data may include Personal Data as defined under the GDPR. Advertisers who are clients of Index Exchange may collect PII and Personal Data on their own websites. These details are provided directly by the individual Internet user through online order forms, contests, etc. PII or Personal Data provided through an advertiser’s website is not visible to Index Exchange while being entered, nor provided to Index Exchange at any time in the future. This personal data collected by the advertiser is subject to the privacy policy of the individual advertiser involved.
YOUR PRIVACY CHOICES
Web Browser Option to Opt–Out
Some of the ads you see on the internet or in applications on your mobile device are tailored to your interests and based on your activity online or in the applications on your mobile device. This type of ad tailoring — sometimes called “interest-based” advertising — is enabled through various technologies, including browser cookies, mobile advertising identifiers as well as other non-cookie technologies. Tailored digital ads help support the free products, services and content you enjoy online. To help protect your privacy, Index Exchange (along with other NAI members) has voluntarily agreed to abide by high NAI standards including offering an opt-out mechanism.
Opting out of interest-based advertising means that you will no longer be shown ads that have been tailored to your interests. It does not mean you will no longer see advertising online. When you opt-out, an opt-out cookie will be stored in your web browser signaling your opt-out preference to NAI members including Index Exchange.
Please note that if your browser is configured to block third-party cookies, then the opt out cookie may not work. If you delete your browser cookies, you will need to opt out again. The opt-out will not apply to the specific browser in which you set it. The opt-out process must be repeated for each different browser.
CLICK HERE TO OPT-OUT
INDEX EXCHANGE INC. OFFERS INDIVIDUALS THE OPPORTUNITY TO CHOOSE WHETHER AN INDIVIDUAL’S PERSONAL DATA (OR SOMETIMES OTHERWISE REFERRED TO AS PERSONAL INFORMATION OR PERSONALLY IDENTIFIABLE INFORMATION) IS TO BE DISCLOSED TO A THIRD PARTY OR TO BE USED FOR A PURPOSE THAT IS MATERIALLY DIFFERENT FROM THE PURPOSE(S) FOR WHICH IT WAS ORIGINALLY COLLECTED OR FOR A PURPOSE THAT IS MATERIALLY DIFFERENT THAN ANY PURPOSE(S) SUBSEQUENTLY AUTHORIZED BY SUCH INDIVIDUAL.
IN THE EVENT THAT YOU WOULD LIKE TO EXERCISE YOUR CHOICE (I.E. OPT-OUT) TO SPECIFY THAT INDEX EXCHANGE INC. MAY NOT DISCLOSE YOUR COOKIE DATA TO A THIRD PARTY, PLEASE VISIT THE NAI’S OPT-OUT PAGE BY FOLLOWING THE LINK BELOW.
CLICK HERE TO OPT-OUT
IF INDEX EXCHANGE INC. USES YOUR PERSONAL DATA (AS SOMETIMES OTHERWISE REFERRED TO AS PERSONAL INFORMATION OR PERSONALLY IDENTIFIABLE INFORMATION) FOR A PURPOSE THAT IS MATERIALLY DIFFERENT FROM THE PURPOSE(S) FOR WHICH IT WAS ORIGINALLY COLLECTED OR SUBSEQUENTLY AUTHORIZED, INDEX EXCHANGE INC. WILL OFFER YOU THE OPPORTUNITY TO OPT OUT OF SUCH USES AND/OR DISCLOSURES.
DATA RETENTION
Index Exchange may retain data for as long as needed to provide services. We may retain data even after an account has been closed or is no longer engaged in business with Index Exchange if retention is reasonably necessary to comply with our legal obligations or meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our Privacy Policy or our contractual obligations. We also retain personal data for as long as is necessary to provide support-related reporting and trend analysis which is thirteen (13) months. After 13 months, we de-personalize data by creating data sets that cannot be traced back to individuals. Personal data will be destroyed according to our data destruction process.
INFORMATION SECURITY
Index Exchange follows strict Information Security policies to protect personal data submitted to us, both during transmission and once we receive it. Although we take steps to secure your information, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
In the unlikely event of a confirmed security breach, Index Exchange will investigate and contact impacted persons within 72 hours of the breach.
We reserve the right to disclose your personal data as required by law, in response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agency; when we believe that disclosure is necessary to protect or exercise our legal rights; or to defend against legal claims.
EUROPEAN UNION AND SWISS RESIDENTS
Index Exchange transfers data from the European Union and Switzerland to the United States in accordance with the EU-US and Swiss-US Privacy Shield Frameworks. More information on the Privacy Shield program set forth by the U.S. Department of Commerce can be found at https://www.privacyshield.gov/eu-us-framework.
Index Exchange is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission for any violations of the EU-US or Swiss-US Privacy Shield Framework. Index Exchange may be held responsible if third party controllers to whom it transfers personal information or third party agents it engages to process this data on its behalf, act in a manner inconsistent with the Privacy Shield Principles. Index Exchange is required to disclose personal information in response to lawful requests to meet national security or law enforcement requirements.
Access to and Deletion of Personal Data
Individuals residing in the European Union or Switzerland have the right to access any of their Personal Data retained by us. You also have the right to have the data corrected, amended or deleted where it is inaccurate or processed in violation of the Principles.
You can make a request to access or delete your Personal Data via Index Exchange’s User Access Request portal.
Data Protection Officer
If you have a complaint regarding the response to your request to access or delete information, please contact our Data Protection Officer:
Attn: Index Exchange Data Protection Officer
Legal Army, S.L.
B88103700
María de Molina, 60 4th
28006 Madrid (Spain)
Email: gdpr@legalarmy.net
Recourse Mechanisms
If you have any questions or complaints regarding Index Exchange’s compliance with the EU-US or Swiss-US Privacy Shield framework, please contact us. If we are unable to resolve your complaint, you may submit the matter to the ICDR-AAA, an independent dispute resolution body designated to addressing such complaints and providing appropriate recourse free of charge to you. You may also invoke, under specific conditions laid out by the EU-US and Swiss-US Privacy Shield, the right to binding arbitration to resolve your complaint.
CHANGES TO THIS PRIVACY POLICY
Index Exchange may find it necessary to update this Privacy Policy from time to time. Any changes will be posted at this site. Except as otherwise required by law, any modifications made to this Privacy Policy will not materially affect the privacy of data collected by Index Exchange prior to the effective date of the policy change.
CONTACT US
To inquire about privacy concerns, please contact Index Exchange by mail, as detailed below, or using our online form.
Attn: Privacy Team
Index Exchange
74 Wingold Avenue
Toronto, Ontario M6B1P5 Canada
Residents of the European Union can make a request to access or delete their Personal Data via Index Exchange’s User Access Request portal.
Index Exchange processes PII, PI and Personal Data in accordance with this Privacy Policy. In addition to Index Exchange being a controller, other controllers may exist depending on the use of your Personal Data. If you have questions regarding the collection and use of Personal Data, please contact our Privacy Team who will direct any inquiries to the proper controller as applicable.
Any user who has consented to the use of their Personal Data by Index Exchange in accordance with the uses disclosed in this Privacy Policy, has the right to withdraw their consent to such use. In order to withdraw your consent, please contact our Privacy Team.
OpenX Ad Exchange (OpenX Technologies, Inc.)
OpenX Ad Exchange is an advertising service provided by OpenX Technologies, Inc.
The service provides an ad exchange platform that facilitates the optimization of ads from multiple ad networks, which can be third parties to both OpenX and the Owner.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
Rubicon Project (The Rubicon Project, Inc.)
Rubicon Project is an advertising service provided by The Rubicon Project, Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- FPTrust: duration of the session
- audit: 1 year
- cd: duration of the session
- emilyRan: indefinite
- fcap: indefinite
- khaos: 1 year
- khaos: indefinite
- pux: indefinite
- sample_number: indefinite
- trp_optout: 5 years
- uids: 3 months
- uids-audit: 3 months
Sovrn (Sovrn Holdings Inc)
Sovrn is an advertising service provided by Sovrn Holdings Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration: up to 1 year
Smart AdServer (Smart AdServer SAS)
Smart AdServer is an advertising service provided by Smart AdServer SA.
Personal Data processed: Cookies and Usage Data.
Place of processing: France – Privacy Policy – Opt Out.
Storage duration:
- TestIfCookie: duration of the session
- TestIfCookieP: 2 years
- Trk*: 1 month
- cnfq: 6 hours
- comp: 2 years
- csfq: 6 hours
- csync: 2 years
- dyncdn: 1 day
- gid: 2 years
- lcsrd: 2 years
- partner-*: 2 years
- pbw: 2 days
- pdomid: 2 years
- pid: 2 years
- rpools: 2 years
- sas_euconsent: 1 month
- sas_euconsentv2: 1 month
- sasd: 1 day
- sasd2: 1 day
- vs: 30 minutes
- x-smrt-d: duration of the session
Smart Adserver (Smart Adserver)
Smart Adserver is an advertising service provided by Smart Adserver.
Personal Data processed: Cookies and Usage Data.
Improve Digital (Improve Digital International BV)
Improve Digital is an advertising service provided by Improve Digital International BV.
Personal Data processed: Cookies and Usage Data.
Place of processing: Netherlands – Privacy Policy – Opt out.
Storage duration:
- ad: 3 months
- fh: 24 hours
- ih: 3 months
- pct: 3 months
- pvt: 3 months
- pxl: 3 months
- sh: duration of the session
- tuuid: 3 months
- tuuid_lu: 3 months
- uids: 3 months
- um: 3 months
- umeh: 3 months
Media.net (Media.net Advertising FZ-LLC)
Media.net is an advertising service provided by Media.net Advertising FZ-LLC.
Personal Data processed: Cookies and Usage Data.
Place of processing: United Arab Emirates – Privacy Policy – Opt out.
Storage duration:
- _mNExInsl: 7 days
- _mNIDShownPrev: 7 days
- _mNInsChk: duration of the session
- _mNInsl: 7 days
- _mNIntDock: 7 days
- _mNOvl: 7 days
- _mNOvlShown: 7 days
- addtl_consent: 2 years
- atst: 7 days
- bids_map_v2: indefinite
- covkn: indefinite
- crtkn: indefinite
- data-*: 1 year
- eclstest: indefinite
- euconsent-v2: 2 years
- gdpr_oli: 2 years
- mnet_ad_pref_close: 30 minutes
- mnet_optout: 6 years
- mnet_session_depth: duration of the session
- mnsbucketExpiryTime: indefinite
- mnsbucketName: indefinite
- mnstestVersion: indefinite
- mnvid_day_cap: 1 day
- mnvid_ses_cap: duration of the session
- ra_depth_tracking: 15 minutes
- session_depth: 30 minutes
- usp_status: 7 months
- usprivacy: 2 years
- visitor-id: 1 year
- x-msedge-clientid: indefinite
Google Advertising Products (TCF integration) (Google Ireland Limited)
Google Advertising Products (TCF integration) is an advertising service provided by Google Ireland Limited.
Personal Data processed: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
RhythmOne (RhythmOne, LLC)
RhythmOne is an advertising service provided by RhythmOne, LLC.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt out.
Storage duration:
- _rxuuid: 1 year
- _rxuuid: 1 year
RTB House (RTB House S.A.)
RTB House is an advertising service provided by RTB House S.A.
Personal Data processed: Tracker and Usage Data.
Place of processing: Poland – Privacy Policy – Opt out.
Storage duration: up to 1 year