Privacy Policy

Stailamedia adheres to the principles of the European Interactive Digital Advertising Alliance (EDAA) Online Behavioural Advertising (OBA) Framework.

Stailamedia AG is a technology‑enabled media services provider whose customers include both online advertisers (“Advertisers”) and website publishers (“Publishers”). We offer innovative products and services that enable Advertisers to better reach their target audiences and enable Publishers to promote, grow, and monetize their websites by selling ads.

We believe that safe, protected, and respectful practices in handling consumer information are fundamental to our company’s success and to the growth and viability of the internet as a whole. We are a corporate partner of IAB Europe, the trade association for Europe’s digital and interactive marketing industry (“IAB”). Stailamedia follows the Europe‑wide self‑regulatory principles of the digital advertising industry for interest‑based online advertising.

This Privacy Policy is intended to provide users with clear and comprehensive information about the data we collect in connection with our product offerings and services (collectively, the “Services”), as well as how data is retained and used by our company, our Advertisers, and our Publishers. This Privacy Policy also explains users’ choices to manage information preferences. For a comprehensive description of our Services, please visit our website at www.stailamedia.com.

Information about our privacy measures that relate to our website can be found below. By using the website or the Services, the user accepts this Privacy Policy.

Information Collected in the Context of Our Services

As part of its services, Stailamedia AG generally does not collect, store, or distribute any personal data. We do not collect or further process names, home addresses, email addresses, or similar information. Only the IP address is used—after prior encryption—to identify a user profile.

We deliver ads from hundreds of advertisers across a wide variety of websites. When a user visits one of the websites in our network, the automated systems of our service providers, as well as our data management platform, may collect anonymous usage data relating to the visit to that website.

This data is not personal and includes information such as IP address, websites visited, the date and time those pages were viewed, and interactions between content and ads. The technologies used to collect this data include cookies and web beacons, which are deleted after a defined period.

During registration or newsletter subscription, data with demographic information such as postal code, age, gender, or similar may be collected. Under no circumstances do we process or store personal data such as names, addresses, email addresses, or similar information that would allow direct identification of a specific person.

In addition to the collected information, we enrich the data pool with attributes estimated by us or our service providers. These essentially include segment identifiers such as “football fan,” “smart shopper,” “adventure traveler,” or similar. We never determine probabilities regarding creditworthiness, susceptibility to illness, political orientation, or similar for individuals.

In cooperation with reputable data providers, we use information originating from websites that we do not market ourselves. In return, we provide information to third parties in the form of anonymized cookies, i.e., non‑personal data.

To improve performance, our service providers augment data with non‑personally identifiable and demographic information from publishers and other partners. This anonymous data may include information such as postal code, age, gender, and income bracket.

We use the non‑personal information described above to tailor the ads that users see on a website. We also collect anonymous cookie information to identify larger user groups, which helps Advertisers align campaigns with the right online audiences. Our service providers store the collected information in log files, which are retained in their systems for an appropriate period. Anonymous data stored in these log files and used to associate log data with a specific computer may include IP address and user ID.

Consumer Choice – Disable Cookies (Opt‑Out)

For optimized delivery of our Services, we use third‑party technologies (e.g., Xandr) that include cookies and web beacons. We believe that using these tools provides users with a more meaningful online experience and higher ad quality. Users can change their web browser settings to block all cookies. However, because cookies are widely used, blocking them may limit the use of various websites.

You can object to the processing of such cookies for advertising purposes here (opt‑out): https://platform.xandr.com/privacy-center/opt_out

During this deactivation process, your computer will be asked for an ID tag for the “opt‑out cookie,” which prevents anonymous data from being associated with your computer and thus prevents us from using this data to send targeted advertising or other content to your web browser. Please note that this deactivation process replaces the cookie ID associated with your computer but does not delete the cookie itself—the cookie must remain on your computer so we can recognize the user’s opt‑out. This means that users with multiple computers or browsers must disable receipt of cookies on each computer or browser. If users change computers or delete cookies from their computer, they must repeat the deactivation process.

Information Collected in the Context of Our Company Website

We collect and store personal or usage‑related data only to the extent necessary to fulfill a contractual or legal obligation (e.g., orders, quotes, newsletter delivery, etc.). We always handle personal data in accordance with the strict provisions of the applicable data protection regulations.

If you wish to contact us in connection with this Privacy Policy or a matter relating to customer service, including delivery of a newsletter subscribed to with us, you may provide us with your personal data (such as name, email address, home address, or telephone number). We use such personal information solely to respond to your inquiry or to deliver the subscribed newsletter. However, we reserve the right to maintain documentation of such correspondence.

We also reserve the right to disclose personal data provided to us by the user in response to legal proceedings or court orders, or to provide information to law enforcement authorities or disclose it in connection with investigations of incidents affecting public safety, as permitted by law.

Data Transfer

Data collected by us on our own behalf or on behalf of our clients may be stored and processed in any country where our subsidiaries, branches, representatives, or clients maintain facilities. The user acknowledges and agrees that information provided by the user may be transferred outside the country of the user’s residence and to any company belonging to Stailamedia. By providing this information, the user consents to such data transfer.

Data Security

We follow generally accepted industry standards to protect against unauthorized access to, destruction of, or disclosure of data. This includes taking necessary technical, electronic, and administrative measures to protect data security and the access to and use of data. All data stored on our servers is treated confidentially and is not made generally accessible to the public. Our servers are protected by firewalls and are located in secure data protection facilities to further enhance security. Please note, however, that despite reasonable efforts to protect the data on our servers, no method of transmission over the Internet is guaranteed to be secure. Although we strive to protect your personal data at all times, we cannot guarantee absolute security and are not liable for any security breach by external third parties.

Data Transfer Due to Change of Control

If another company acquires all or substantially all of the assets of our company as a result of consolidation, merger, asset purchase, or other transactions, we reserve the right to transfer all data (including personal data) in our possession or under our management to the acquiring party.

Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy by posting an updated version on this page. The date on which the current Privacy Policy was published will always be stated at the top of this page. All changes to this Privacy Policy will be made in accordance with applicable law.

Correspondence

If you contact us, we may store such correspondence, including your email address. This applies exclusively to your correspondence with us—we do not store users’ email addresses as part of our online advertising activities. If you believe we are violating official principles, please contact us at info@stailamedia.com.

Implemented Technologies

Amazon Web Services

Description of Service

This is a cloud computing service.

Processing Company

Amazon Web Services EMEA SARL

38 Avenue John F. Kennedy, L-1855, Luxembourg

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

eu-privacy@amazon.co.uk

Data Purposes

Cloud computing

Technologies Used

Data Collected

Accessed applications
Authentication and security credential information
Browser plug-ins
Browser type
Browser version
Click path
Content interaction information
Cookie ID
Cookie information
Device information
Device type
Download errors
Downloaded content from AWS
Duration and number of simultaneous streams and downloads
E-mail address
Full URL clickstream to, through, and from AWS website (including date and time)
Geographic location
Interactions or communications with AWS
Internet service provider
IP address
Mouse movements
Network connection type
Opened emails or clicks on links in emails from AWS
Operating system information
Page interaction information
Page response times
Playback details
Streams
Telephone number
Time zone
Usage data
Views and interactions with content and ads
Visits to, interactions with, and use of AWS offerings

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union

Retention Period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

United States of America

Data Recipients

Amazon Web Services Inc.
Amazon Web Services EMEA SARL

Read the processor’s privacy policy: https://aws.amazon.com/privacy/?nc1=f_pr

Read the processor’s cookie policy: https://aws.amazon.com/legal/cookies/

Stored Information

Name: AWSALB – cookie – 7 days – keeps the user on the same server for load balancing
Name: AWSALBCORS – cookie – 7 days – managed by AWS for load balancing

Google Fonts

Description of Service

A collection of fonts for commercial and personal use.

Processing Company

Google Ireland Limited

Gordon House, 4 Barrow St, Dublin 4, Ireland

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

Providing fonts
Improvement of service

Technologies Used

APIs

Data Collected

IP address
Aggregated usage numbers
Font file requests
Referrer URL
CSS requests
User agent
Browser information

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union

Retention Period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

United States of America
Singapore
Taiwan
Chile

Data Recipients

Alphabet Inc., Google LLC, Google Ireland Limited

Read the processor’s privacy policy: https://business.safety.google/privacy/?hl=en

Read the processor’s cookie policy: https://policies.google.com/technologies/cookies?hl=en

Google Maps

Description of Service

An integrated map service.

Processing Company

Google LLC

1600 Amphitheatre Parkway Mountain View, CA 94043, United States of America

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

Displaying Maps

Technologies Used

APIs

Data Collected

Date and time of visit
Location information
IP address
URL
Usage data
Search terms
Geographic location

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union

Retention Period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

Singapore
Taiwan
Chile
United States of America

Data Recipients

Google Ireland Limited
Google LLC
Alphabet Inc

Read the processor’s privacy policy: https://business.safety.google/privacy/

Read the processor’s cookie policy: https://policies.google.com/technologies/cookies

Stored Information

Name: NID – cookie – 6 months – stores user preferences

Google Tag Manager

Description of Service

A tag management system for integrating and controlling tags (small code snippets) across websites.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

Tag Management

Technologies Used

Website tags

Data Collected

Aggregated data about tag firing

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union

Retention Period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

Singapore
Taiwan
Chile
United States of America

Data Recipients

Alphabet Inc., Google LLC, Google Ireland Limited

Read the processor’s privacy policy: https://business.safety.google/privacy/?hl=en

Read the processor’s cookie policy: https://policies.google.com/technologies/cookies?hl=en

Usercentrics Consent Management Platform

Description of Service

Consent management service used as a processor for websites and apps.

Processing Company

Usercentrics GmbH

Sendlinger Str. 7, 80331 Munich, Germany

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

datenschutz@usercentrics.com

Data Purposes

Compliance with legal obligations
Consent storage

Technologies Used

Local storage
Pixel

Data Collected

Opt-in and opt-out data
Referrer URL
User agent
User settings
Consent ID
Time of consent
Consent type
Template version
Banner language
IP address
Geographic location

Legal Basis

Art. 6 para. 1 s. 1 lit. c GDPR

Location of Processing

European Union

Retention Period

Consent data (given consent and revocation) are stored for one year, then deleted immediately.

Data Recipients

Usercentrics GmbH

Read the processor’s privacy policy: https://usercentrics.com/privacy-policy/

Stored Information

Name: ucString – web – holds ControllerID/SettingsID, language, settings version, services and consent history
Name: ucData – web – holds information about Google Consent Mode

Webflow

Description of Service

A service for designing and building websites.

Processing Company

Webflow, Inc.

398 11th Street, 2nd Floor, San Francisco, CA 94103, United States of America

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

privacy@webflow.com

Data Purposes

Website building

Technologies Used

Cookies
Log files

Data Collected

IP address
Browser name
Browser fingerprint
Browser version
Geographic location
Screen resolution
HTTP headers
Browser language
Log data

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

United States of America

Retention Period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Read the processor’s privacy policy: https://webflow.com/legal/privacy

Read the processor’s cookie policy: https://webflow.com/legal/cookie-policy

Facebook Pixel

Description of Service

Tracking technology offered by Facebook (Meta) used for conversion tracking and retargeting.

Processing Company

Meta Platforms Ireland Ltd.

4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://www.facebook.com/help/contact/1650115808681298

Data Purposes

Analytics
Marketing
Retargeting
Advertisement
Conversion Tracking
Personalisation

Technologies Used

Cookies
Pixel

Data Collected

Ads viewed
Content viewed
Device information
Geographic location
HTTP header
Interactions with advertisement, services, and products
IP address
Items clicked
Marketing information
Pages visited
Pixel ID
Referrer URL
Usage data
User behaviour
Facebook cookie information
Facebook user ID
Usage/click behaviour
Browser information
Device operating system
Device ID
User agent
Browser type

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union

Retention Period

User interactions tracked on websites are not stored longer than two years; data is deleted once no longer needed.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

Singapore
United States of America
United Kingdom

Data Recipients

Meta Platforms Ireland Ltd.
Meta Platforms Inc.

Read the processor’s privacy policy: https://www.facebook.com/privacy/explanation

Read the processor’s cookie policy: https://www.facebook.com/policies/cookies

Stored Information

Max cookie storage age: 1 year
Name: messaging_plugin_# – cookie – duration n/a
Name: fr – cookie – duration n/a
Name: _fbp – cookie – duration n/a
Name: pxcelBcnLcy – cookie – duration n/a
Name: _fbp – web – duration n/a

Google Analytics

Description of Service

Web analytics service to measure advertising ROI and track user behavior across flash, video, websites, and apps.

Processing Company

Google Ireland Limited

Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

Marketing
Analytics

Technologies Used

Cookies
Pixel
JavaScript

Data Collected

Click path
Date and time of visit
Device information
Location information
IP address
Pages visited
Referrer URL
Browser information
Hostname
Browser language
Browser type
Screen resolution
Device operating system
Interaction data
User behaviour
Visited URL
Cookie ID

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union

Retention Period

Retention depends on the type of data saved; each user can choose how long Google Analytics retains data before automatic deletion.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

Singapore
Chile
Taiwan
United States of America

Data Recipients

Google Ireland Limited
Alphabet Inc.
Google LLC

Read the processor’s privacy policy: https://business.safety.google/privacy/?hl=en

Read the processor’s cookie policy: https://policies.google.com/technologies/cookies?hl=en

Stored Information

Name: __utmb – cookie – Session – tracks time of visit
Name: _ga – cookie – 2 years – distinguishes users
Name: _gid – cookie – 1 day – identifies the user
Name: __utma – cookie – Session – records first visit time/date, total visits, start time of current visit
Name: __utmz – cookie – Session – records where the visitor came from
Name: IDE – cookie – 1 year, 1 month – used to show personalised ads
Name: CONSENT – cookie – 2 years – stores consent choices
Name: __utmt – cookie – 10 minutes – throttles request rate
Name: _gat – cookie – 1 minute – reads and filters bot requests
Name: __utmc – cookie – 30 minutes – stores time of visit
Name: FPID – cookie – 2 years – value for Client ID setting in requests
Name: FPLC – cookie – 20 hours – registers a unique ID for statistical usage data

Opt‑out across all domains: https://tools.google.com/dlpage/gaoptout?hl=de

LinkedIn Insight Tag

Description of Service

Conversion tracking and retargeting service.

Processing Company

LinkedIn Ireland Unlimited Company

Wilton Place, Dublin 2, Ireland

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://www.linkedin.com/help/linkedin/ask/TSO-DPO

Data Purposes

Marketing
Retargeting
Analytics

Technologies Used

Cookies
Pixel

Data Collected

Device information
IP address
Referrer URL
Timestamp
Browser information

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

Singapore, European Union, United States of America

Retention Period

Data will be deleted after 90 days.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

Singapore
United States of America

Data Recipients

LinkedIn Ireland Unlimited Company

Read the processor’s privacy policy: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com

Read the processor’s cookie policy: https://www.linkedin.com/legal/cookie-policy

Stored Information

Name: BizographicsOptOut – cookie – 10 years – indicates opt‑out from targeted ads
Name: UserMatchHistory – cookie – 30 days – used by Insight tag for campaign reporting
Name: U – cookie – 2 months, 29 days – browser ID for users outside EU/EEA
Name: li_sugr – cookie – 2 months, 29 days – probabilistic match outside EU/EEA
Name: bscookie – cookie – 2 years – remembers two‑factor verification
Name: bcookie – cookie – 2 years – browser identifier to detect abuse

Global opt‑out: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com

Mailchimp

Description of Service

Advertising and email campaign service.

Processing Company

The Rocket Science Group LLC (Intuit Inc.)

675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, United States of America

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

privacy@mailchimp.com

Data Purposes

Advertisement
Email Campaigns

Technologies Used

Data Collected

Browser ID
Browser information
Date and time of email access
Device operating system
E‑mail address
IP address
Metrics related to performance of services
Pages visited
Unique device identifier
Usage data

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

United States of America

Retention Period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients

The Rocket Science Group LLC
Intuit Inc.

Read the processor’s privacy policy: https://mailchimp.com/legal/privacy/

Read the processor’s cookie policy: https://mailchimp.com/legal/cookies/

Xandr

Description of Service

An advertising platform that enables addressing individuals with products and services they may be interested in.

Processing Company

Xandr Inc.

28 West 23rd Street, Fl 4, New York, NY 10010, United States of America

Data Protection Officer of Processing Company

Below you can find the email address or contact of the data protection officer of the processing company.

https://about.ads.microsoft.com/en-us/solutions/xandr/dpo-privacy-form

Data Purposes

Functionality
Optimization
Advertisement
Analytics
Reportings
Targeting
Personalisation

Technologies Used

Cookies
Tracking Pixel
Mobile SDKs

Data Collected

Browser information
Browser language
Cookie information
Ads viewed
Device operating system
Device information
Device identifiers
iOS identifier for advertisers
IP address
Geographic location
Search terms
Videos viewed
Pages visited
Clicked advertisements
Internet service provider
Surfing history
Device model
Data connection type
Search history
Interaction data
Interaction with advertisement
Ads shown
Hashed version of email address

Legal Basis

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

European Union, United States of America

Retention Period

Data will be deleted no later than 18 months after retrieval.

Transfer to Third Countries

This service may forward collected data to other countries. These may not always have the required data protection standards.

United States of America

Data Recipients

Xandr Inc.
Service partners

Read the processor’s privacy policy: https://www.xandr.com/privacy/platform-privacy-policy

Stored Information

Name: uuid2, uids – cookie – 2 months, 29 days – distinguishes browsers and devices
Name: sess – cookie – Session – tests whether Xandr cookies are accepted
Name: icu – cookie – 2 months, 29 days – selects ads/limits frequency
Name: anj, usersync – cookie – 2 months, 29 days – tracks cookie ID sync with partners
Name: token – cookie – 1 day – helper cookie for industry opt‑out pages
Name: pses – cookie – Session – measures time spent on site

Questions and Comments

Please address questions and comments regarding this Privacy Policy to info@stailamedia.com or by post to: Stailamedia AG, Weststrasse 86, CH‑8003 Zurich, Switzerland.

Zurich, May 2022

Built in Switzerland. Trusted worldwide.

Contacts