Privacy policy and Cookies

This chapter of our privacy policy informs you about the purposes of data collection and the processing we perform on the personal data of users when they browse our partner websites. It also details the rights and how users can exercise their choices regarding the collection and processing of their personal data by Nexx360.

 

Nexx360 participates in the IAB Europe’s “Transparency & Consent Framework” and complies with its Specifications and Policies. Our identification number is ID965.

 

1/ How are your data collected?

 

Nexx360 uses text files, in the form of a character string called cookies, to collect and store data from visitors to its partners’ websites. We may place these cookies on a user’s browser, subject to their explicit consent. Cookies allow us to recognize a user’s device during their validity period. Only the issuer of a cookie can read or modify its content.

 

2/ What data is collected?

 

When a user browses one of the partner websites and/or applications, Nexx360 may collect the following personal data:

• IP address;
• Advertising identifier (user ID) assigned by companies offering advertising technology services (SSP) ;
• Approximate location (country) indicated by IP address.

 

Nexx360 does not collect or process, directly or indirectly, any information that could directly identify a user, such as their name, first name, address, email, or date of birth. We do not collect or process sensitive information, such as health data, political or religious beliefs, sexual orientation, or ethnic origins of users.

 

3/ What are the purposes and legal bases for processing personal data?

 

Nexx360 collects and processes the personal data of visitors to its partners’ websites for the following purposes:

 

Purposes	Legal Bases
Store and/or access information on a device	Consent
Develop and improve our services	Consent

 

4/ To whom are personal data transferred?

 

The service provided by Nexx360 enables the optimal transmission of data concerning the visitors of its clients’ websites to Intermediaries (SSP) operating in the programmatic advertising inventory chain. These Intermediaries can thus have the necessary information for auctioning the programmatic advertising of Nexx360’s clients.

 

The nature of the operations carried out on the personal data of users is:

–       Their transmission to Intermediaries;

–       Their analysis by our clients so that they can decide whether to delete a request (in case of suspicion of bots or fraud, quality or carbon impact issues) before transmission to each of their contractual partners (Intermediaries).

 

Furthermore, Nexx360 may share information with third-party service providers such as:

–       Internet hosting (OVH)

–       Cloud servers (Scaleway)

 

We may transfer the personal data of our customers and other affiliated information to any successor entity in the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate change.

 

5/ Are data transferred outside the European Union?

 

Personal data may be transferred to an Intermediary located outside the European Union (EU) or the European Economic Area (EEA), including to third countries for which the European Commission has not yet adopted an adequacy decision. In their contractual relationship with these Intermediaries, our partners implement appropriate protection measures to ensure an adequate level of protection for your personal data.

 

6/ What is the data retention period?

 

Cookies deposited by Nexx360 have a retention period of 6 months. At the end of the data processing services, Nexx360 ensures the destruction of these cookies. Nexx360 does not retain any personal data after transmitting them to the Intermediaries of its partners.

 

7/ Rights of users under the GDPR

 

In accordance with articles 14 to 22 of Regulation 2016/679 of April 27, 2016, any natural person has the right to exercise the following rights:

–       Right of access, rectification, and deletion of collected data,

–       Right to object to the processing of their data,

–       Right to limit processing,

–       Right to data portability,

–       Can formulate directives regarding the retention, erasure, and communication of their personal data after their death.

 

However, Nexx360 collects and processes personal data on behalf of its clients, publishers of content or online services. It is therefore recommended for users to exercise their rights directly with the publishers of the websites they have visited. Nexx360 undertakes to promptly and in writing respond to information requests made by its clients to enable them to respond to users’ requests to exercise their rights.

 

If necessary, you can address your requests to dpo@nexx360.io.  The response time is one month. This period may be extended by an additional two months depending on the complexity and number of requests received. We may refuse to respond to your request, subject to providing clear and legitimate explanations.

 

In case of non-response or unsatisfactory response, the user can contact the supervisory authority of their country of residence, for France, the CNIL: https://www.cnil.fr/

 

Finally, if we detect a personal data breach that may pose a high risk to the rights and freedoms of our users, we undertake to inform the affected users as soon as possible.

 

8/ Withdrawal of consent

 

The withdrawal of consent to the placement of Nexx360 cookies on the user’s device can be exercised directly from the consent management platform of the publisher.

 

You can also accept or refuse certain or all cookies (e.g., by blocking all third-party cookies) directly in your browser settings. However, please note that some websites may not be accessible or may not function properly if you decide to refuse all cookies. If you are unsure how to proceed, the links below provide information on how to change the settings of your browser for some of the most used web browsers:

–       Chrome

–       Safari

–       Firefox

–       Internet Explorer

–       Microsoft Edge

For mobile devices, you can also refer to the following links:

–       Chrome

–       Safari

 

9/ What security measures are in place?

 

Nexx360 is committed to implementing the following security measures:

–       Means to ensure the constant confidentiality (pseudonymization, encryption of personal data, etc.), integrity, availability, and constant resilience of processing systems and services;

–       Means to restore the availability of personal data and access to them within appropriate timeframes in the event of a physical or technical incident;

–       A procedure to regularly test, analyze, and evaluate the effectiveness of technical and organizational measures to ensure the security of processing, and to provide proof at the first request of the client or the data protection authority.