Privacy policy

Privacy statement

Ad360 treats privacy and data protection as core operating responsibilities. This policy explains how we handle information connected with our website, advertising platform, and advertising technologies.

Ad360 operates as a demand-side platform (DSP) and Google Authorized Buyer. Ad360 acts as a controller for data where it determines the purposes and means of processing — including its advertising identifier, bid-request processing, audience statistics, fraud prevention, and service improvement — and as a processor for client Advertising Data, which clients own and instruct Ad360 to process under the applicable terms.

For advertising-related processing, this policy is supplemented by the Advertising Privacy & TCF Disclosure, which sets out Ad360's IAB Europe TCF v2.2 participation (Vendor ID 1071), purposes and legal bases, privacy-signal handling, identifiers, device storage, and retention. It should also be read together with the Cookie Policy.

What we do

Ad360 provides a digital advertising and media buying platform. The platform helps advertisers buy advertising space on digital properties such as websites and mobile applications in order to distribute their ads.

Ad360 provides tools to manage and buy data that can be used to personalize advertisements and make sure they are shown to users who will find them more relevant. The service also includes ad delivery technology, measurement and reporting tools, ad effectiveness tools, reach prediction tools, and tools to help prevent fraudulent activity and malware.

To perform the service, Ad360 collects some information from users exposed to its technologies or advertisements. We only collect information that is relevant to operate, analyze, or enhance the quality of the service for our customers.

Advertising and why we need data

Ad360 processes advertising-related data to deliver, measure, secure, and improve digital advertising services for customers.

Most internet users prefer to see ads that are relevant to their interests and needs. To relate appropriate ads to users and make the experience more relevant, we may collect information such as interests inferred through responses to ads, including clicks on display banners or video interactions.

We work to make sure that the data collection and ads we deliver are safe, unobtrusive, and as relevant as possible.

What information Ad360 collects

User Personal Information means any information about a user exposed to one of our advertisements or technologies that could, alone or together with other information, personally identify them or otherwise be reasonably linked or connected with them. An internet protocol address is one example.

Ad360 also processes pseudonymous identifiers — such as cookie, device, and the Ad360 advertising identifier. These are personal data under the GDPR even though they do not directly name an individual, and they are governed by the consent, legal basis, purpose, and retention controls described in this policy and the Advertising Privacy & TCF Disclosure.

Separately, Ad360 produces aggregated information that does not identify any user. Aggregated data is not personal data and may be used for research, reporting, and to operate, analyze, improve, and optimize the website and service.

Usage information, including pages viewed, referring site, IP address, session information, and the date and time of each request.
Cookies and similar technology information, including cookie IDs and settings, subject to consent where applicable.
Device information, including IP address, browser or client application information, language preference, operating system and application version, device type and ID, and device model and manufacturer.
Information from third parties, including vendors, partners, affiliates, publishers, exchanges, or supply-side platforms when users are exposed to Ad360 advertisements or technologies.

Ad360 ID and advertising-related information

We may assign a unique identifier called an Ad360 ID to a browser, device, connected device, or other screen when we serve an ad to it or when it is used to access a client's digital properties. The Ad360 ID is a pseudonymous identifier and constitutes personal data. It enables our advertising products to recognise a browser or device that has previously interacted with Ad360, where the applicable privacy signals permit.

Ad360 may receive personal data when we have the opportunity to show an ad on digital properties and may collect additional data when we deliver an ad. This includes bid request data and impression data from browsers, devices, publishers, exchanges, and supply-side platforms.

Bid request and impression data may include IP address, coarse location such as country, region, postal or zip code, browser type, operating system, browser language, internet service provider, and partner-assigned IDs.
Segment data may describe groups of users that share common attributes. Ad360 does not knowingly create segments based on sensitive categories of personal data for EEA users.
Artificial intelligence and automated decisioning may be used to decide how to respond to bid requests and which advertisements should be delivered, using data linked to the pseudonymous Ad360 ID, and only where the applicable privacy signals permit. Profile-based personalisation relies on consent.

What information Ad360 does not collect

We do not intentionally collect sensitive personal information such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for uniquely identifying a natural person, health data, or data concerning a person's sex life or sexual orientation.

Ad360 does not knowingly collect information from, or direct any of our content specifically to, children under the applicable age of digital consent — 16 in Ireland, with EU member states permitted to set this between 13 and 16. Child-directed treatment signals on a request are honoured.

How Ad360 collects information

The public website may use strictly necessary cookies or similar technical storage required to operate requested services. The current marketing site does not rely on non-essential analytics, advertising pixels, heatmaps, or retargeting scripts.

Ad360 advertising technologies may use cookies, pixels, tagging scripts, server-to-server connections, or secure file transfer where required to provide advertising services to customers and where a valid legal basis applies.

If non-essential website analytics or marketing technologies are introduced, Ad360 will update the Cookie Policy and implement consent controls before those technologies are used for EU or Irish visitors.

Ad360 honours the Global Privacy Control (GPC) signal as an opt-out of sale and sharing where applicable law recognises it, and makes a best effort to respect browser Do Not Track preferences. Advertising-platform signal handling — TCF, GPP, the US Privacy String, and GPC — is described on the Privacy Signals page.

Privacy Signals →

Our legal bases for processing information

Where Ad360's processing of User Personal Information is subject to international privacy laws, including the European Union General Data Protection Regulation, Ad360 processes User Personal Information on identified legal bases. For TCF-scoped advertising, the basis for each purpose is set out in the Advertising Privacy & TCF Disclosure; personalised advertising relies on consent, not legitimate interest.

Consent — for storing or accessing information on a device, creating and using profiles for personalised advertising, user-level advertising measurement, and understanding audiences through statistics. Consent may be withdrawn at any time through the consent interface or as described in this policy and the Cookie Policy.
Legitimate interests — for using limited data to select advertising, developing and improving the service, security, and maintaining the confidentiality, integrity, availability, and resilience of Ad360 systems, website, and service. Ad360 does not rely on legitimate interest for personalised advertising. The interests relied on and the assessment behind them are described on the Legitimate Interests page.
Legal obligation — where processing is required to comply with applicable law.

How we share the information we collect

We may share User Personal Information with a limited number of service providers who process it on our behalf to provide or improve the service and who have agreed to privacy restrictions similar to those in this policy.

Ad360 may disclose User Personal Information or other collected information to law enforcement or government authorities when required by a valid legal process or when we believe in good faith that disclosure is necessary to comply with legal obligations, protect our property or rights, or protect third parties or the public.

We may share User Personal Information if we are involved in a merger, sale, or acquisition of corporate entities or business units. If such a transfer occurs, we will seek terms that preserve confidentiality and provide notice through the website or by email before transfer.

We share certain aggregated, non-personally identifying information with others about how users collectively respond to Ad360 advertising products and services.

Ad360 does not sell personal data for monetary consideration. Certain advertising activities may constitute a 'sale' or 'sharing' under US state privacy laws; where they do, Ad360 honours opt-outs of sale, sharing, and targeted advertising through the GPP, US Privacy String, and Global Privacy Control signals, as described on the Privacy Signals page.

How you can access and control information

If Ad360 processes information about you, including information received from third parties, you may, subject to applicable law, access, update, alter, delete, or object to the processing of your personal information, or withdraw consent, by contacting privacy@ad360.media.

Residents of US states with applicable privacy laws may exercise rights to know, delete, and correct personal data, and to opt out of the sale or sharing of personal data and of targeted advertising. These rights can be exercised through the privacy signals described on the Privacy Signals page or by contacting privacy@ad360.media.

Because much advertising processing uses pseudonymous identifiers, requests relating to the Ad360 advertising identifier should reference the identifier or the context in which it was set. To remove cookies from your browser, refer to your browser settings and the Ad360 Cookie Policy.

How long we keep information

Ad360 retains personal data only as long as necessary for the purpose it was collected for, and applies per-purpose retention. Advertising and device identifiers used for permitted advertising purposes default to a maximum of 365 days, and only while the applicable privacy signal permits the relevant purpose.

Shorter periods apply to debugging-only data. Certain operational, contractual, accounting, security, fraud-prevention, attribution, or legal-obligation records may be retained for longer where required by applicable law or contractual obligations. The full schedule by category is published on the Data Retention page.

Data retention schedule →

How Ad360 secures information

Ad360 takes measures reasonably necessary to protect User Personal Information from unauthorized access, alteration, or destruction, maintain data accuracy, and help ensure appropriate use.

Ad360 maintains a written security information program aligned with recognized frameworks, designed to protect confidentiality, integrity, availability, and resilience, and appropriate to the nature, size, and complexity of Ad360's operations.

In the event of a data breach affecting User Personal Information, we will act promptly to mitigate the impact and notify affected users without undue delay. Transmission of data on Ad360 is encrypted using SSH and HTTPS (TLS). No method of transmission or electronic storage is 100% secure, so absolute security cannot be guaranteed.

Resolving complaints

If you have concerns about the way Ad360 handles User Personal Information, please contact us immediately. You may email privacy@ad360.media with the subject line "Privacy Concerns." We will respond within one month, which may be extended by two further months for complex or numerous requests, consistent with the GDPR.

If a dispute arises between you and Ad360 regarding our handling of User Personal Information, we will do our best to resolve it. If we cannot, we may use independent arbitration or cooperate with the relevant EU Data Protection Authority, a panel established by European data protection authorities, or the Swiss Federal Data Protection and Information Commissioner for Swiss individuals.

Residents of an EU member state also have the right to file a complaint with their local supervisory authority.

Changes to this Privacy Statement

Ad360 may change this Privacy Statement from time to time. We will provide notification of material changes through our website before the change takes effect, and we encourage users to check the Privacy Policy and Cookie Policy frequently.

Contacting Ad360

Questions regarding Ad360's Privacy Statement or information practices should be directed to privacy@ad360.media.

Menadex Limited. 25 Herbert Place, D02 AY86, Dublin 2, Dublin, Ireland.

Ad360 Privacy Policy