End-Users Privacy Policy

Summary

Nowtilus (Equativ group) is a German company specializing in digital video advertising with their Serverside.ai solution. Our Customers are broadcast-quality media owners ("Customers") and they ask us to offer the best advertising experience possible for the Viewer. Our technology is integrated at the heart of video players used by our Customers and delivers personalized video streams combining video content and video advertising for each individual end-user. To do so we only process limited personal data provided Your prior consent was given by You through the consent management platform of the broadcaster as described below. Your privacy is protected and Your personal data is processed according to demanding security standards and in compliance with applicable laws. You will find on this page all the details on our operation and the various means to assert Your rights.

Who we are

Nowtilus (“Nowtilus”, “our”, “us”, “we”) has created an innovative Server Side Ad Insertion ("SSAI") technology which integrates with content and ad stack of our Customers in order to deliver personalized video streams to each individual Viewer ("User", "Viewer", "You", "Your") browsing their digital properties. We help our Customers to monetize their digital inventories ("Services") while they offer You qualitative content.
Our technology collects information about You so that, when we are allowed to do it, we help our Customers to deliver the right video content and the right video ads, in the right format at the right moment ; and we produce statistics which help our Customers to better understand Viewer’s engagement.
Nowtilus is located at Prenzlauer Promenade 190, 13189 Berlin, Germany. If You have any questions regarding privacy and the protection of Your personal data, You can contact us at privacy.serversideai@equativ.com.
The purpose of this Privacy Policy ("Policy") is to explain what information we gather, for which purposes, how we use that information and what we do to protect it in the context of the provision of our services to our Customers.

This Policy provides details about choices You can make with regards to how we gather and use information about You (“Personal Data”). This Privacy Policy applies when we receive Your Personal Data when navigating on digital properties (websites and applications across devices such as desktop, mobile and CTV) of our Customers using our Services. For more information regarding the processing of Your Personal Data and the use of cookies when navigating on our corporate website please read our Corporate Privacy Policy here.

Nowtilus participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies.

How do we collect data?

Nowtilus is a server to server technology, it means that we never directly collect data from Your device. All the data we process is sent to us by our Customers at the moment You request to view one of their video content. We use pixel tags and software development kit (SDK) in order to make sure the video ads we sent to Your video player were actually broadcasted and to build the reporting we provide to our Customers. Pixel tags are transparent images, iFrames, or JavaScript that are placed on a site. The use of a pixel tag allows a website to measure the actions of the visitor opening the page that contains the tag. An SDK is the software used by our Customers to integrate Nowtilus Ad tracking mechanism to their mobile application (iOS and Android).

What data do we process?

When navigating on our Client’s digital properties and on any connected devices (including connected TV), we may collect:

Your IP address;
Your device identifier (eg: Identifier for advertising (IDFA), Android Advertising ID (AAID);
Your user ID as provided by our Customers (Publisher Provided ID);
Your alternative ID as provided by some universal ID providers;
Technical information about the device (eg: user agent, browser, operating system, screen size, device manufacturer, device model, etc.);
Information about the video content You requested to view (eg: content format, category of content, name of the channel/digital property You are viewing or browsing);
Your consent string as defined by the Consent Management Platform of our Customers’ digital properties when You expressed Your choices with regards to the processing of Personal Data.

Please note that as part of our Services we do not collect any information that could directly identify You. This means we do not know who You are. We do not know Your name, Your address, Your place of work, Your date of birth, Your email address, or Your phone number. We do not collect sensitive information as defined under the General Data Protection Regulation (GDPR) such as Your religious affiliation, political opinions or health details. We do not create segments and do not specifically target children under 13 years old or 16 years old respectively according to applicable laws.

For which purposes and on which legal grounds will Personal Data be processed?

a. Purposes

Nowtilus receives, collects or processes Personal Data for the following purposes:

Store and/or access information on a device
Use limited data to select advertising
Create profiles for personalized advertising
Use profiles to select personalized advertising
Measure advertising performance
Develop and improve services
Ensure security, prevent and detect fraud and fix errors
Deliver and present advertising and content
Save and communicate privacy choices

b. Legal grounds

When operating as a data controller, meaning that we determine the purposes and the means of the processing, we rely on either: i) User consent, if required; or ii) our legitimate interest.
When operating as a data processor, we process the data on behalf of our Customers based on their instructions. Therefore, they are accountable for the establishment of an appropriate legal basis for the processing of the data. You can find this information in their own Privacy Policy available on their website.

To whom do we provide Your Personal Data? Who can have access to Your Personal Data?

We may share information, including Personal Data, to our affiliates, our Customers’ ad servers and to trusted third parties that provide services for Nowtilus, such as our hosting and internet connectivity providers, third-party advertising technologies, and anti-fraud tools providers. When permitted we may also share data with trusted business partners in order to perform or enhance our products and services.
We may also disclose information if:

We are required by national or international law or legislation to do so;
We must comply with an authorized request or demand;
It is necessary in order to defend our own rights or interests.

Finally, we may transfer Your data to a successor entity in connection with a corporate merger, consolidation, sale of assets, bankruptcy, or other corporate change.

How long do we store the data?

We process Personal Data for no longer than is necessary for the purposes of providing our Services to our Customers. Your Personal Data is kept for a maximum of 6 months after their lawful collection in our logs. Please note that Nowtilus does not setup any cookies on Your device.

Your GDPR privacy rights

In most cases we process Personal Data on behalf of our Customers, which means that it is generally more appropriate for You to exercise Your rights directly on the website of the concerned Customer.

However, when operating as a data controller, You can exercise Your rights and address Your request directly to Nowtilus at any time and according to legal requirements:

To confirm Your Personal Data is being processed and/or to provide You with a copy of Your Personal Data;
To rectify Your Personal Data if it is inaccurate or incomplete;
To withdraw Your consent, when this legal basis was used;
To erase Your Personal Data, for instance if it is unlawfully processed or if You withdraw Your consent;
To opt out the process of any data;
To restrict the processing of Your Personal Data, (i) if the information is inaccurate, (ii) the processing is unlawful, (iii) You need us to retain the information after the retention for a legal claim, or (iv) You have objected to the processing and a verification of our legitimate interests is pending;
To provide You with an electronic file of Your Personal Data, or to transfer Your Personal Data to a third party, if technically feasible (portability).

Before sending any requests, please note and consider that it is not feasible for us to provide Personal Data that is tied to Your identity. To address your request you must provide us with one of the identifiers listed above in section What data do we process (eg: IP address, device ID, etc.) and only then, will we be able to link the Personal Data tied to this ID (see section: How to find Your ID below).
Your request should be addressed to privacy.serversideai@equativ.com. We will respond within one month. According to applicable law, we may extend the response period to two months if such is necessary due to the complexity and number of requests. In such situation, we will notify and explain the reasons for any extension to You. If we deny Your request, we will inform You of the reasons for such denial.
If You consider Your rights have been infringed upon according to applicable laws, or regarding the denial of a request, You may lodge a complaint towards Your local competent supervisory authority.

How to find Your ID

The method will vary depending on the way you access to digital contents of our Customers. Please contact your service provider to identify your device ID (e.g. from a Settop Box or TV set) or IP address.

Transfer of Personal Data outside of the European Union

Personal Data may be transferred to our affiliates or a partner located outside the EU/EEA including to third-countries for which the European Commission has not adopted an adequacy decision yet. With these partners, we ensure that appropriate safeguards are implemented to ensure an adequate level of protection including but not limited to the signature of standard contractual clauses adopted by the European Commission.

Opt-out and withdrawing of consent (GPDR)

Your service provider or Nowtilus shall provide an option to opt out of our service using a Consent Management Platform, TV Set remote control commands or through some other channel related to your service (e.g. Post, Telephone). You can withdraw Your consent, as the case may be, at any time directly on the digital properties of our Customers.
You can also accept or reject some or all cookies (for example, blocking all third-party cookies) directly on Your browser by adjusting Your browser settings. However, please note that some websites may not be accessible or function properly if You decide to opt-out from all cookies. If You do not know how to do this, the links below set out information about how to change Your browser settings for some of the most commonly used web browsers:

• Chrome
• Safari
• Firefox
• Internet Explorer
• Microsoft Edge

For mobile devices You can also refer to the following links:

• Chrome
• Safari

How do we ensure the security of Your Personal Data?

In order to ensure and maintain the security of Your Personal Data, we have implemented all technical and organizational measures at our disposal to prevent Your data from being unintentionally and accidentally lost, used, altered, or made available to the public without Your authorization.
Should such an event occur, we have implemented measures to react promptly and to inform You and the competent authorities when necessary and required by applicable law.
Amendment of this Privacy Policy
We reserve the right to update this Privacy Policy from time to time in order to reflect any change to our products or services or to comply with changes in our legal and/or regulatory obligations. Please check this page for any updates.