Privacy Policy

As an innovative player in the digital economy, we are particularly concerned with the protection of personal data from our stakeholders.

Below, you will find TrackAd France’s Privacy Policy, explaining our practices and commitments regarding the processing of your personal data, in compliance with the General Data Protection Regulation (GDPR).

Aware of the importance of clear and transparent information on this matter, we have incorporated tables and visuals to help you better understand and exercise your rights.

This policy was last updated on November 14, 2022.

1.Who is responsible for processing your data?

The activities of the TrackAd group within the European Union are managed by TrackAd France (hereinafter referred to as “TrackAd” or “we”), a simplified joint-stock company registered with the Paris Trade and Companies Register under number 831 322 938, with its headquarters located at 3, rue du Colonel Moll, 75017 PARIS.

TrackAd collects and processes a number of personal data for its own purposes, as outlined below – for example: for measuring traffic on the trackad.ai website, or for promoting its marketing analytics services.

In these cases, TrackAd is considered the data controller; this means that we are your point of contact for any questions or concerns regarding these various uses of your data. You can contact us at gdpr@trackad.ai.

Important:
These cases, where we process your data for our own purposes, differ from those where we collect and process data on behalf of our clients as part of providing our services.

The services marketed by TrackAd involve the collection of personal data related to the customers, prospects, and end-users of our clients. In these cases, TrackAd is not the data controller, but only a data processor for its clients.

Google API Disclosure: TrackAd’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Service User Data Policy, including the Limited Use requirements.

If you have any questions or concerns regarding the processing of your data as part of our services, and provided we can identify the client on whose behalf we processed your data, we will connect you with the relevant client, who will be responsible for responding according to the GDPR.

2. What data is collected about you and why?

a. Connection to the trackad.ai website and SaaS services

When you connect to the trackad.ai website or any of our SaaS services, a number of data points are automatically collected by the site/service host regarding your device (computer, smartphone, tablet) and your browser. This includes your IP address. These data points are collected to ensure the connection between your device and the corresponding servers, and later to detect bugs and attempted cyber-attacks. They are kept for 12 months following the relevant HTTP request. The collection and processing of this data are justified by TrackAd’s legitimate interest in providing a functional and secure website and SaaS services, adapted to the different types of devices and browsers on the market, in accordance with Article 6.1.f) of the GDPR. The trackad.ai website uses audience measurement cookies. These cookies collect data related to your browsing, such as the pages visited, content viewed, and browsing duration. This data is used to create statistics about the site’s traffic and understand visitor preferences to improve the site’s presentation and content. This data processing is justified by TrackAd’s legitimate interest in improving its website and its content, in accordance with Article 6.1.f) of the GDPR.

b. Service demonstration requests

The trackad.ai website allows you to request a demonstration of our services. You must enter all the mandatory data marked with an asterisk (*) in the relevant form on the site (name, first name, company, professional email address, phone number, country where you operate). This data is used to contact you to organize a demonstration of our products and to follow up as needed (proposal of a quote). They will be kept for three years following your last contact. We then use Internet telephony services (VoIP) to perform the demonstration remotely; these services collect and process personal data, such as connection identifiers and copies of written exchanges, if applicable, through the service’s instant messaging module. These various data processes are justified by TrackAd’s legitimate interest in promoting its services to a professional audience, in accordance with Article 6.1.f) of the GDPR.

c. Managing business relationships

We collect personal data about our contacts at our various clients (employees and representatives of said clients) and the individuals using our services on behalf of these clients (users), for the purposes of managing the business relationship in a broad sense (including invoicing and receiving payments). This data includes primarily names, email addresses, and phone numbers of our contacts, as well as written exchanges and data related to the use of our products (connection logs, etc.).
They are kept for the duration of the business relationship with the client in question. The processing of this data is justified by TrackAd’s legitimate interest in managing and tracking its business relationships with its clients, in accordance with Article 6.1.f) of the GDPR.
Some of this data may also be subsequently processed and kept after the business relationship ends with the client in question, for the evidentiary purposes described below (retaining evidence for potential litigation).

Sharing of Google User Data: We do not sell or rent Google user data. We only disclose such data to provide our services, comply with the law, or with your explicit consent. Any service providers used are bound by strict confidentiality and data protection standards.

Data Protection Mechanisms: We use industry-standard security to protect sensitive information, including SSL/TLS encryption for all data in transit. Access is restricted to authorized personnel via internal access controls to ensure data confidentiality.

d. Commercial prospecting

We may promote our services via email marketing campaigns, for which we use professional email addresses that have been provided by you or our business introducers or that we have collected from public sources such as professional social networks. This use of professional email addresses is justified by TrackAd’s legitimate interest in promoting its services to a professional audience, in accordance with Article 6.1.f) of the GDPR. We will stop using your professional email address for prospecting purposes upon your objection or no later than three years after your last contact.

e. Targeted advertising

We also promote our services through targeted advertising on different social networks. We use the services of third-party providers (identified in the cookie management module at the bottom left of each page of the site), who rely on trackers such as cookies and pixels and collect identifiers such as your IP address to display targeted ads for our services on the corresponding social networks. These identifiers are automatically deleted 180 days after your last visit to our trackad.ai site, per the commitments of these providers. This processing of your data for targeted advertising is based on your consent, which you give when you accept the use of the corresponding cookie/pixel on our site, in accordance with Article 6.1.a) of the GDPR.

f. Recruitment

The “Culture & Jobs” section of the trackad.ai website allows you to apply for various positions within TrackAd or other TrackAd group companies or submit a spontaneous application. To do so, you must enter a number of required details, marked with an asterisk (*) in the application form; you can also supplement your application by adding optional information (no asterisk). This data is collected and processed by TrackAd to review your application and respond if necessary. They are kept for the duration of the recruitment process; we may also process and retain them after this period, in case your application is rejected, to offer you other positions within TrackAd or another TrackAd group company for up to two years. The processing of data during the recruitment process is justified by pre-contractual measures taken at your request, per Article 6.1.b) of the GDPR; their further processing and retention for two years is justified by TrackAd’s legitimate interest in meeting its recruitment needs, in accordance with Article 6.1.f) of the GDPR.

g. Retention of data for litigation or regulatory purposes

We may retain all or part of the data mentioned above as evidence. We may use it, if necessary, to prevent, initiate, or respond to any dispute in which it may be relevant, whether you are a party to that dispute or not.
This retention is justified by TrackAd’s legitimate interest in protecting and defending its rights and interests, including in court, per Article 6.1.f) of the GDPR.
We will thus retain all relevant data from a probative standpoint for the legally applicable prescription period, typically five years (general civil prescription period).

►Summary table

Type of data collected	Purpose (intended or potential use of data)	GDPR justification	Maximum retention period (identifiable form)
Information about your browser and device (HTTP request)	Allow your connection to the trackad.ai website and SaaS services; detect bugs and cyber-attack attempts	Legitimate interest of TrackAd (Article 6.1.f) GDPR	12 months
Browsing data (collected via audience measurement cookies)	Create site traffic statistics; understand your preferences to improve the site and its content	Legitimate interest of TrackAd (Article 6.1.f) GDPR	Anonymization of data shortly after collection
Data entered to request a demonstration and VoIP service data used for remote demonstrations	Provide you with a demonstration of our services	Legitimate interest of TrackAd (Article 6.1.f) GDPR	3 years following the last contact
Contact information of client representatives and written exchanges; data related to users’ use of our services	Manage and track business relationships with our clients	Legitimate interest of TrackAd (Article 6.1.f) GDPR	Duration of the business relationship with the client
Your professional email address	Promote our services through email marketing campaigns (commercial prospecting)	Legitimate interest of TrackAd (Article 6.1.f) GDPR	3 years following the last contact received from you
Data collected through targeted advertising cookies	Promote our services in the form of targeted advertising	Your consent (Article 6.1.a GDPR)	180 days after your last visit to the site trackad.ai
Data provided in the recruitment form	Review and process your application	Pre-contractual measures taken at your request (Article 6.1.b GDPR)	Duration of the recruitment process
Data provided in the recruitment form	Contact you for another position at TrackAd or another TrackAd Group company	Legitimate interest of TrackAd (Article 6.1.f) GDPR	2 years following the rejection of your initial application
Data deemed relevant for potential litigation or regulatory review	Defend the interests of TrackAd, including in legal proceedings, if necessary	Legitimate interest of TrackAd (Article 6.1.f) GDPR	Legally applicable retention period (typically 5 years)