Privacy notice for advertising

Who is responsible

The website you visited works with Dokira to show advertising. Dokira's ad tag runs on that website and collects the data described below. For that collection and its transmission to advertising partners, the website operator and Dokira are joint controllers (Art. 26 GDPR). The essence of our arrangement: the website operator informs you and obtains consent through its consent banner; Dokira runs the tag, passes your choices on to partners, and handles questions about the advertising. You can contact either of us; we pass requests on to each other.

Dokira

ReVantage GmbH , Leipziger Strasse 48/27 , 1200 Vienna , Austria, publishers@dokira.com

Advertising partners that receive bid requests decide themselves what they do with them and are controllers in their own right. Their names are listed in the consent banner of the website.

What happens when an ad loads

When the page loads, Dokira's tag holds a real-time auction for each ad space: it asks advertising partners whether they want to show an ad there and at what price, and shows the winning ad. Each request carries:

• your IP address (sent by your browser with every request), browser and device type, screen size and language;
• the address of the page and the ad space's size and position;
• your consent choices, as the standard signals your consent banner produces (TCF, GPP or US privacy strings);
• where you consented, a pseudonymous identifier stored on your device (see below);
• information identifying Dokira and the website as sellers of the ad space.

Partners may derive your approximate location (country, region, city) from the IP address. Dokira does not receive your name, email address or anything you type on the website.

What is stored on your device

• _sharedID (cookie, 30 days): a random identifier that lets partners recognise the same browser across visits to this website, for frequency capping and, with consent, more relevant ads. Set only where consent is given or not required.
• Your consent choices, stored by the consent banner (up to 13 months).
• Partner cookies: with your consent, partners may set their own cookies through user syncing, to match their identifiers with each other.
• Google cookies, where Google Ad Manager / AdX serves the ad.

The cookie policy lists these in detail.

Why, and on what basis

• Storing and reading information on your device, and personalised advertising and measurement: only with your consent (section 165(3) TKG 2021, Art. 6(1)(a) GDPR), given in the website's consent banner.
• Showing non-personalised ads, preventing fraud and keeping ads secure: our and the website's legitimate interest in financing the website through advertising (Art. 6(1)(f) GDPR), as far as no storage on your device is involved.

Where your consent banner indicates no consent, the tag either does not run the auction or sends requests that tell partners not to personalise. Ads may still appear, but they are not based on your profile.

Your choices and how to opt out

• Change or withdraw consent at any time through the website's consent banner, usually reopened from a "Privacy" or "Cookie settings" link at the bottom of the page.
• Delete cookies in your browser's settings; this removes the identifier above.
• Industry opt-outs: youronlinechoices.eu (Europe), optout.aboutads.info and optout.networkadvertising.org (USA).
• Global Privacy Control: where your browser sends a GPC signal, it is passed on as an opt-out of sale and sharing.

For residents of US states

Making ad space available to partners in an auction can count as "selling" or "sharing" personal information, or as "targeted advertising", under state laws. Categories involved: identifiers (IP address, cookie identifiers), internet activity (the page you are viewing), and approximate geolocation. Recipients: advertising partners. Dokira does not knowingly process data of anyone under 16 for targeted advertising.

You can opt out of sale, sharing and targeted advertising through the website's consent banner ("Do Not Sell or Share My Personal Information") or with Global Privacy Control. You also have the right to know, access, correct and delete your personal information, and to appeal a refusal, by writing to publishers@dokira.com. We will not discriminate against you for using these rights.

Transfers and retention

Some partners are based in the USA and elsewhere outside the EU. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Dokira keeps auction records in aggregated form for statistics and billing; it does not keep a profile of you. Server logs of the tag's delivery are deleted after 14 days.

Your rights under the GDPR

You have the rights to access, correction, erasure, restriction, portability and objection (Art. 15 to 21 GDPR), and to withdraw consent. Because Dokira holds no name or contact details for you, we may need the identifier from your browser to find your data (Art. 11 GDPR). Write to publishers@dokira.com. You may complain to the Austrian data protection authority (dsb.gv.at) or the authority where you live.