At Exponential, we are proud to have direct relationships with hundreds of publishers worldwide, and we’re always striving to help our partners navigate the ever-changing industry landscape. With the new EU General Data Protection Regulation (GDPR) representing the latest such change, we’re here to help.
Regarding the second area, legal basis, there are two fundamental aspects of the GDPR that mean we all have to take stock and adapt what we do. Firstly, any unique (or potentially unique) data is now regarded as “personal data”, including IP address and cookie id. And as with the existing law, anyone using such data must have a legal basis for doing so. There are only two legal bases which are relevant for AdTech – consent and legitimate interest.
It is our opinion, along with the DPN’s, that direct relationships such as ours constitute a legitimate interest. We have carried out the necessary balancing assessment, weighing the rights of users with our (and your) legitimate interest to provide them an improved advertising experience. That balancing assessment is available for your review.
If you agree with our assessment that Exponential has a legitimate interest in helping monetize your site, please use the button below to let us know via email. This will maintain our relationship in its current form in a way that satisfies GDPR.
Of course, we realize many of our publishers work with other parties, perhaps not all via direct relationships, and thus may choose to implement IAB Europe’s consent mechanism (as consent is the other legal basis mentioned above). We are also going to be integrated with that mechanism for the transactions we carry out programmatically where there is no direct contact, and therefore legitimate interest carries less weight.
If you are planning to use the IAB Europe consent mechanism, please let us know by filling out the form below.
Please let us know if you’d like a follow-up discussion with our Data Protection Officer and we’ll be happy to accommodate!