Privacy Policy – Adserver Module
Version 4.0 – [Publication date to be filled in]
Overview
Nexx360 SAS places great importance on the protection of personal data.
This privacy policy describes the data processing carried out by Nexx360 in connection with its Nexx360 Pulse adserver module, when you browse the websites or applications of our publishers and partners.
Nexx360 Pulse is a technology solution enabling publishers and sales houses to deliver digital advertising campaigns across their digital properties and measure their performance.
In this context, Nexx360 acts on behalf of the publishers and sales houses that use Nexx360 Pulse. They remain your primary points of contact for the collection of your consent and the management of your data.
Nexx360 SAS – 144 avenue Charles de Gaulle – 92200 Neuilly-sur-Seine – RCS Nanterre 891 857 674 Contact: dpo@nexx360.io
Nexx360 acts as a technical service provider on behalf of the publishers and sales houses that use Nexx360 Pulse. The purposes of advertising campaigns are defined by these clients — advertisers, agencies and publishers. Nexx360 technically executes delivery according to their instructions.
User consent choices are collected by consent management platforms (“cookie banners” or CMPs) implemented by partner publishers, and transmitted to Nexx360 via the IAB Europe Transparency and Consent Framework (TCF v2.2). Nexx360 est enregistré dans ce cadre sous le Vendor ID [to be filled in].
| Programmatic partners (SSPs, DSPs, ad exchanges and other players) involved in the advertising delivery chain process data under their own responsibility, within the framework of their contractual relationship with the relevant website publisher. Nexx360 has no direct contractual relationship with these parties and they have their own privacy policies. |
Nexx360 Pulse uses a technical cookie stored on your browser, subject to your consent expressed via the cookie banner of the visited website.
| Cookie | Domain | Duration | Purpose |
| xxuID | nexx360.io | 3 months | Technical identifier used for frequency capping (limiting the number of times an advertisement is displayed) and synchronisation with programmatic partners. |
In the context of advertising delivery via Nexx360 Pulse, the following data may be processed:
| Category | Examples |
| Technical identifiers | Nexx360 identifier (xxuID) – pseudonymous, with no link to your civil identity |
| Browsing data | IP address (truncated – only the approximate geographic area is retained), device type, browser, URL and category of the page visited |
| Advertising data | Impression and click statistics, campaign performance data |
| Contextual data | Page content category, approximate location (country, region) |
| Consent choices | Recording of your advertising preferences expressed via the cookie banner |
| What Nexx360 Pulse does not doNexx360 Pulse does not collect data enabling direct identification (name, first name, email address, phone number).Nexx360 Pulse does not process sensitive data (health, political opinions, religious beliefs, etc.).Nexx360 Pulse does not build audience profiles or create advertising segments. Personalised campaigns use profiles provided by publishers or their partners.The IP address is systematically truncated – only the approximate geographic area is retained. |
The processing carried out via Nexx360 Pulse is based exclusively on your consent, collected by the publisher of the visited website. You may withdraw this consent at any time via the cookie banner of the website.
| Purpose TCF | Title | Legal basis | Duration |
| Purpose 1 | Store and/or access information on your device | Your consent | 3 months |
| Purpose 2 | Select contextual advertisements | Your consent | 3 months |
| Purpose 4 | Deliver personalised advertisements | Your consent | 3 months |
| Purpose 7 | Measure advertising performance | Your consent | 30 days (individual data)No limit (anonymised aggregated data) |
| Purpose 10 | Improve our services for the benefit of all our clients | Your consent | Anonymised aggregated data only |
| Nexx360 Pulse does not declare Purpose 3 (audience profiling): we do not build profiles on users.All purposes are based on your consent. No processing is carried out on the basis of legitimate interest for advertising purposes.Purpose 10: aggregated and anonymised data from the Nexx360 Pulse network improves the quality of our service for all our publisher clients. This data is not resold and is not used to create proprietary commercial offerings. |
Within the strict framework of the purposes described above, your data may be transmitted to the following recipients:
◦ OVH SAS (Europe) – server hosting
◦ Cloudflare, Inc. (United States) – network protection and routing
◦ GitHub, Inc. (United States) – development tools
| Nexx360 does not sell your personal data to third parties and does not use it to create proprietary commercial offerings. |
Nexx360’s servers are hosted in the European Union. Some of our technical service providers (Cloudflare, GitHub) are U.S. companies. Data transfers to these providers are governed by appropriate safeguards, including the standard contractual clauses approved by the European Commission and adherence to the EU-U.S. Data Privacy Framework.
Some programmatic partners of our publisher partners may be located outside Europe. These transfers are carried out under their own responsibility.
For more information: dpo@nexx360.io.
| Data | Duration maximale |
| Cookie xxuID | 3 months |
| Data de diffusion et de performance | 30 days |
| Data agrégées et anonymisées(statistiques de performance accessiblesvia the publisher dashboard) | Conservation non limitée(anonymised data) |
| Note interne – Durations de conservation – à retirer avant publicationDurations modifiables par l’éditeur RT dans le DPA – mention interne uniquement. |
In accordance with Articles 15 to 21 of the General Data Protection Regulation (GDPR), you have rights regarding your personal data.
| Right | How to exercise it |
| Erasure, objection, and access as defined in Articles 17, 21, and 15 of the GDPR | Visit our dedicated page [link – to be added] for instructions on how to find your technical ID (xxuID) and submit your request. |
| Withdrawal of consent | Directly via the cookie banner of the visited website. Withdrawal takes effect immediately. |
| Rectification (Art. 16 GDPR) | Not applicable: Nexx360 does not know your civil identity and holds no inaccurate data about you. |
| Portability (Art. 20 GDPR) | Very limited applicability: the only available data are technical data with no link to your identity. Requests should be addressed to dpo@nexx360.io. |
For any request: dpo@nexx360.io or via the publisher of the website where you saw a Nexx360 advertisement. Response time: maximum one month.
If your complaint remains unresolved: CNIL – www.cnil.fr
The simplest and most immediate way to withdraw your consent is to use the cookie banner of the visited website. Upon receipt of a withdrawal signal, Nexx360 Pulse immediately ceases to read and update your cookie. No new data is collected without consent.
Withdrawal of consent and erasure of existing data are two distinct things. Withdrawal of consent stops future processing. Pour demander la suppression des données déjà collectées, rendez-vous sur notre page dédiée [lien – à compléter].
You can also opt out of targeted advertising via the Digital Advertising Alliance portal: optout.aboutads.info.
Nexx360 implements appropriate technical and organisational measures to protect your data against any unauthorised access, loss or alteration, in accordance with Article 32 of the GDPR. These measures include, in particular, data flow encryption, strict access controls, activity logging and incident management procedures.
Nexx360 is committed to SOC 2 (Service Organization Control) certification, an international security framework that attests to the robustness of the controls put in place to protect data entrusted by its clients.
Nexx360 may amend this policy to reflect regulatory or operational developments. The date of the last update appears at the top of this document. La version en vigueur est toujours accessible à l’adresse [URL – à compléter].
