Effective as of May 15th 2018
1. Fusio Platform: data processing
2. Website and Social Networks: data processing
3. Information applicable for both Platform and Website
4. Website Cookies Policy
5. General provision
S4M is a global provider of mobile advertising media and data management technology.
S4M’s proprietary technology (the “Platform” – marketed under the name “FUSIO”), provides tools and services that enable buying and bidding in real time and the delivery of advertising on Ad networks, Publisher mobile devices, websites and apps. Furthermore, the Platform allows Advertisers and their Media Agencies to learn more about their advertisements through a set of analytic tools. We are looking at impressions (when the ad displays), click (when you click on the ad) and post-click traffic in aggregate (statistics report), trying to determine how the advertisements can be optimized, which are the most efficient publishers and ad formats.
- The Platform owned by SUCCESS 4 MOBILE SAS (the “Company”, “S4M”, “we” or “us”);
- The following websites: s4m.io, www.yanco.io, www.fusio.io, www.success4mobile.com, s4mdsp.com, sam4m.com and any subsidiary websites owned by S4M or its affiliates (“Website”);
- The following social networks: Facebook https://www.facebook.com/S4Mob; Twitter https://twitter.com/S4Mobile; Linkedin https://www.linkedin.com/company/sam4mobile; Intagram https://www.instagram.com/s4mobile/ Vimeo https://vimeo.com/user45898886 and any subsidiary social networks owned by S4M and its affiliates (“Social Networks”).
- Herein named all together “S4M Tools”.
S4M Tools use are primarily directed to digital professionals (BtoB). However, they are two categories of users of S4M Tools:
- Digital professional such as Media Agencies and Advertisers (“Customer(s)”), Ad networks and other partners (“Partner(s)”)
- End-users, who are visitors, prospects or users of our Website and/or Social Networks, individual users of mobile, tablet applications or individual visitors of a mobile website or app (herein “End- user(s)”)
- Herein named all together “You”, “Your”.
The purpose of this Policy is to set out:
- How S4M processes information collected via its Platform, Website and Social Networks,
- How S4M protects the collected information as well
- Inform You how S4M collects and processes information about You, and the way to exercise Your rights in respect with data protection
For more information, please contact us at firstname.lastname@example.org
Advertising and Media industry standards
S4M and its affiliates are member of the main industry’s associations. Hence, S4M and its affiliates comply with the applicable industry standards, guidelines and best practices.
Moreover, S4M asks their partners and sub-contractors to comply with those standards as well. To this end, S4M only works with partners that meet S4M business ethical requirements and agree to sign S4M business code of conduct.
1. FUSIO PLATFORM: DATA PROCESSING
1.1 Purpose of data processing
The data is processed to allow our Customers to buy and release behavioral advertising through our Platform.
Processing data also allow us to improve the technical functionality of our Platform, as well as our products and services.
1.2 Type of data processed
General. S4M does not process data for its own purposes but on behalf of its Customers. To this end, S4M only processes data that are relevant for the performance of its Platform’s services, whether by nature or volume. By delivering an ad to you via the Platform, S4M does not intentionally collect information that reveals your real-world identity, such as your name, address or phone number. S4M collects data about End-user’s mobile device (such as smartphone, tablet etc) using specific technology, as explained below.
Platform customers’ data. When the Customer or Partner register to the Platform we ask for basic registration information, such as name, company, position, address, email address, phone, and other contact information. We may ask for voluntary personal information at other times, including but not limited to when Customer or Partner report a problem with the Platform.
This type of information is deemed personal data and is used to contact Customer or Partner or determine its specific identity. When other information is linked to this information, it also becomes personal data.
We may also automatically receive and record information in our server logs from Customer or Partner’s browser type (e.g., Chrome or Internet Explorer); User-agent string; browser language (e.g., English or French); device timestamp and time zone; Device screen size; Internet Protocol (IP) address, and other generally-accepted log information. We may also record page views (hit counts) and other general statistical and tracking information.
Customer or Partner can access or correct certain personal information, such as applicable passwords, directly in the Account sections of the Platform. If Customer or Partner have provided personal data, such as his/her e-mail address when registering for our Platform, Customer or Partner may modify that information at any time by visiting your Account settings. Notably, since we may use its user name as the account identifier, Customer or Partner may not be able to change its user name. In addition, Customer or Partner can delete its account at any time.
End-users data processed through the platform. When an End-User views an ad on a site or app which uses our services, we collect information about the ad that he/she has viewed (e.g. advertiser’s name, type of advert, etc) and the web site or the app where the ad was delivered. This information does not enable us to work out any End-users identity in real life but does enable us to recognize from which advertisements End-users are coming from thanks to the following main data collected: device timestamp and time zone, device type, network provider, Mobile advertising ID, IP address, the geolocation of used device such as Lat/long, user-agent string, operating system, operating system version, and screen size.
Depending on domestic regulation, these data may be considered as personal data, for example, like under GDPR regulation.
We may specifically collect the information about the ad End-users have viewed or clicked on. We collect some or all of the following information about the ad End-users have viewed, clicked on: (i) the content type of the ad (what the ad is about, e.g. games, finance, entertainment, news); (ii) the ad type (e.g. whether the ad is a text, image, richmedia or video based ad); (iii) where the ad is being served (e.g. the address of the website on which the ad appears); and (iv) certain information about post-click activity in relation to the ad (e.g. whether you proceed to fill-in form, purchase the product or service advertised).
Cookies and finger printing. We use a session first party cookie to track the user is coming to view a mobile website. The cookies contain a unique tracking ID per Ad placement and a session ID, and a user ID and will expire after 20 minutes. The user ID expires after 13 months.
In certain instances, S4M may use HTML5 storage for enabling, tracking functionalities within an ad or for counting purposes. This can be removed by clearing your browser’s cache.
In other instances, S4M technology solution may use all public information provided by users’ navigation:
- User-Agent: String sent to web server which specifies client software navigation, smartphone’s OS version,
- Device screen size,
- Device timestamp and time zone,IP addresses,
- Accept-Encoding: data which indicates if the request support encodings,
- Accept-language: indicates what are the acceptable languages for response,
- Accept-charset: indicates the character sets that are
S4M reconciles those data to track the user along his ads-navigation: Ad display, Ad click, Click to store, Download of an application.
In particular, S4M compares data collected from the advertising to data collected from the launch of an application (made easier by the use of our iOS/Android SDK) and reproduced navigation sessions per track code (used in all ads) to know exactly where the customer comes from.
Sensitive data. S4M do neither collect nor process any sensitive data such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation, where the domestic regulation prohibits the processing of a such data, like under GDPR regulation.
Children privacy. The Platform service is not directed to children (persons under the age of 13), and we do not knowingly collect, either online or offline, personal data from children. If we become aware that we have collected personal information about a child under the age of 13, that information will be immediately deleted from our database.
Data retention is decided by the Customer when it acts as Controller. S4M undertakes not to keep any said data beyond the agreed term. In the case where this information is not provided by the Controller, S4M delete by default the data processed through the Platform within 13 months.
1.4 Data transfer
S4M is an international group with its offices in Europe, United States and Asia. To this end, the Platform is supported by a technology that enables S4M to perform its services worldwide. Depending of the service used, the Platform is hosted in Ireland or in United States with relay server in Singapore. Hence, the information that we collect from You and about You may be transferred to and stored in a country other than Your country of residence, which may offer different level of protection of personal data as Your country of residence. However, S4M ensures to comply with relevant regulation and takes appropriate measures to keep your personal data protected. Especially, S4M ensures to comply with GDPR requirement regarding lawful transfer mechanism.
The Platform is hosted by Amazon Web Services, that complies with the principles of the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. More information about EU-US Privacy Shield on the Official European Commission site
1.5 How to reset Mobile Advertising ID
If You don’t want your data to be used for behavioral advertising services, You can reset by yourself Your Mobile Advertising ID by following the processes described below:
- IOs: go to “Settings” then “Privacy”, then “Advertising” and then “Reset Advertising ID” (see demo on Apple Support)
- Android : go to “Settings” then “Google” then in “Ads” then “Reset Advertising ID” (see demo on Google Support)
Be aware. Free media content is financed by advertising release. By resetting Your Mobile Advertising ID, You will still receive advertising on Your mobile phone, but this will not be “behavioral advertising” anymore and may not correspond to Your interests.
1.6 How to reset cookies
The “Help” section of the browser indicates how to set and disable cookies. Your browser may be: Internet Explorer, Firefox, Safari or Chrome.
2. WEBSITE AND SOCIAL NETWORKS - DATA PROCESSING
2.1 Purpose and Type of data processed
General. We process the data you may provide us with through the Website and/or Social Networks for internal use only, and for the sole purposes set out hereafter.
Email contact. The Website includes the access to a generic email address email@example.com
This email address allows You to contact S4M communication services for general purpose. By sending an email through this email addresses, You accept that S4M communication services may forward Your queries and personal data provided such as: Your name, Your Surname and Your email address, to the relevant S4M employees that may contact you to answer your queries.
We recommend to only send over relevant information needed to answer your queries.
Press Contact form. The Website includes the access to a press contact form, dedicated to journalist and other Press and Public relation officer. By filling in this contact form, you accept to provide us with personal information such as: your name, company, position, address, email address, phone, and other contact information that are relevant for communication and marketing purposes. We recommend to only send over relevant information needed to answer your professional queries.
Personal data processed by S4M through contact email address or Press contact form are deleted from S4M database within 13 months after the end of the business relationship and/or the end of the service provided.
Please refer section 4 below.
2.4 Your rights
S4M acts as Controller for personal data that are processed through the Website.
In respect with applicable law, especially GDPR, you can exercise the following rights with S4M, by contacting S4M Data Protection Officer as explained article 5.2.
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
2.5 International Users
The Website is hosted in France. If you access the Website from the European Union, Asia, United States or any other region with laws or regulations governing personal data collection, use, and disclosure that differ from French laws, please be advised that through your continued use of the Website You are transferring your personal data to France and You are consenting to that transfer.
3. INFORMATION APPLICABLE TO BOTH PLATFORM AND WEBSITE
3.1 The Internet.
S4M services are provided thanks to the Internet. Hence, the use of S4M services includes the processing of data found in every communication sent over the Internet, such as: browser type (e.g., Chrome or Internet Explorer); User-agent string (e.g operating system; operating system version); browser language (e.g., English or French); referrer addresses, Internet Protocol (IP) address;
3.2 How data is shared and processed
Data is shared with and processed by authorized person such as:
- Platform Customers, who are Advertisers and their media agency, that use the platform to deliver advertisements for their own purpose (or on behalf of the advertiser);
- S4M qualified partners, who are companies contributing to improve the service (e.g. audience measurement, viewability measurement, fraud detection);
- S4M authorized employees, who are the people who operate the Platform or process information disclosed from Website and Social
These authorized persons are bound to S4M by a contract where the respect of data protection and confidentiality is a key engagement.
More generally, any of our subsidiaries, joint ventures, or other companies under common control as us are required to honor this Policy. Additionally, in the event we go through a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, we expect that any and all information that we have will be among the assets transferred.
S4M takes all reasonable measures to protect the security of Your personal data during transmission. We also take reasonable measures to safeguard personal data and to protect against unauthorized access, alteration, disclosure or destruction of such information through our data collection, storage and security practices. However, no transmission of data over the Internet is guaranteed to be completely secure.
You should take further precautions to protect personal data by safeguarding your user name and password and by limiting the use of shared computers.
3.4 Limitation of liability
S4M makes its best efforts to protect user privacy. However, S4M does not control the privacy practices of the Ad Networks, Publishers, Advertisers and Social Networks. For details regarding their own privacy policies, we recommend visiting or contacting them directly.
4.1 Cookie banner.
In respect with Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications), except cookie that are deemed essential to the proper use of the service, S4M does not place any cookie, without your explicit consent. To this end, when you first visit our Website, a banner informs You about the purpose of such cookie deposit and requests and collects your express consent.
4.2 Cookie processing.
A cookie is a small text file that a website saves on your computer or mobile device when You visit the Website. Cookies that are installed by S4M are relating for two specific uses:
- Services cookies: required to ensure the proper functioning of the Website (essential).
- Functional cookies: used to determine Your usage and improve user experience (not essential).
The cookie-related information is not used to identify you personally and the pattern data is fully under Your control. These cookies are not used for any purpose other than those described in this section.
Service cookies. To make this site work properly, we install small data files called cookies on your device in order to provide the service. These cookies are strictly necessary for the website to work:
- to adapt the presentation of the Website to the display preferences of the terminal (display resolution, operating system used, etc.) during visits, according to the hardware and software of the terminal concerned;
- to memorize information related to the contact form filled in by the Website’s user;
- if necessary, to allow the Website’s user to access the reserved and personal areas without
registering at each visit;
Functional cookies. It enables S4M to improve the user experience, for example:
- to establish statistics and volumes of use and use of the various elements composing the Website, to better understand the behavior of S4M Website’s users;
Enabling these cookies is not strictly necessary for the website to work but it will provide you with a better browsing experience. You can refuse, delete or block these cookies, but if you do that some features of this site may not work as intended. If you want to block cookies, please refer to section 1.6 above.
To comply with applicable law, S4M deletes by default the Cookie processed through the Website within 13 months. In another words, at the end of this period, S4M shall collect your consent thought the Cookie banner as explained above.
5. GENERAL PROVISION
5.1 Policy Updates
SUCCESS 4 MOBILE SAS
Attention to DPO
43 / 45 avenue de Clichy
5.3 Governing law
As used in this Policy, the following terms shall have the meanings set forth below:
Behavioral advertising: Uses information collected across multiple web sites, in app, that you visit in order to predict your preferences and to show you ads that are most likely to be of interest to you.
Browser: A software application for retrieving, presenting, and traversing information resources on the World Wide Web.
Cookies: A small piece of information (i.e., program code) that is stored on a browser for the purpose of identifying that browser during audience activity and between visits or sessions. Cookies are typically set to expire. Some cookies are intended to remain on the browser temporarily (for example, during a session) and some are persistent in that they are intended to be retained for longer periods.
1st Party Cookie: A small amount of text stored in a user’s browser that is created by the site the user is
visiting. By default, first-party cookies are allowed in every browser.
3rd Party Cookie: A small amount of text stored in a user’s browser that is created by a site with a domain name other than the one the user is currently visiting. 3rd party cookies are not always allowed by a browser and often, they may be blocked. These are predominantly used an ad server to identify and categorize a user into a targeting segment or classification.
Lat/Long: is an abbreviation of latitude and longitude (location)
Mobile advertising ID: are unique identifiers that are associated with individual mobile devices. They usually are user-resettable and are separate from hardware serial numbers. They are not permanently tied to a mobile device, as users can reset their Mobile advertising ID at any time for added security or opt out of ad tracking. As a result, the Mobile advertising ID can no longer be easily linked to specific devices/users.
Types of mobile advertising IDs:
- Android ID is named GAID
- Apple ID is named IDFA or IFA is an Apple Device ID released with iOS 6 and is a cross application / publisher identifier.
SDK: A software development kit (SDK or devkit) is typically a set of software development tools that allows the creation of applications for a certain software package, software framework, hardware platform, computer system, video game console, operating system, or similar development platform. To enrich applications with advanced functionalities, advertisements, push notifications and more, most app developers implement specific software development kits. Some SDKs are critical for developing a platform-specific app.