Last Updated: January 21, 2022
SECTION 1 – CALIFORNIA RESIDENT RIGHTS
If you are a resident of California, you have the following rights under the California Consumer Privacy Act (“CCPA”):
- You have the right to request deletion of your personal information that we have collected, subject to certain exemptions, and to have such personal information deleted, except where necessary for certain exempt purposes.
- You have the right to request a copy of the specific pieces of personal information that we have collected about you in the prior 12 months.
- You have the right to request a description of the categories of personal information about you that we have collected, used, disclosed or sold in the prior 12 months. Specifically, you may request a description of the:
- categories of personal information we have collected;
- categories of sources from whom we have collected personal information;
- business and/or commercial purposes for collecting or selling your personal information;
- categories of third parties with whom we have disclosed or shared your personal information;
- categories of personal information that we have disclosed or shared with a third party for a business purpose; and
- categories of third parties to whom we have sold personal information and the specific categories of personal information sold to each category of third party.
- You have the right to opt out of the sale of your personal information.
- You have the right not to be discriminated against because you exercise your rights under the CCPA.
SECTION 2 – HOW TO SUBMIT A REQUEST
You may submit a CCPA rights request through our Consumer Privacy Request page, by calling 855-550-0007 or by contacting us at firstname.lastname@example.org. You may also designate an authorized agent to make a request to delete, or request a copy or a description of the categories of, the personal information we collect about you on your behalf. We may require you to provide the agent with signed permission to submit a request, require that you verify your identity directly, or otherwise require you to confirm you have provided the authorized agent with permission. You may submit a request as frequently as you would like, but we are not required to respond to requests to provide personal information to you more than twice in any 12-month period.
To submit a verifiable Consumer request, you will be asked to provide certain information to help us verify your identity. The information we ask you to provide to initiate a request may differ depending upon the type of request, the type, sensitivity and value of the personal information that is the subject of the request, and the risk of harm to you that may occur as a result of unauthorized access or deletion, among other factors. Please note that because most of the information we store can only identify a particular browser or device, and cannot directly identify you personally, you may need to provide us with some additional information to enable us to identify the information we hold about you and ensure that we accurately fulfill your request and do not infringe on the privacy rights of other individuals.
SECTION 3 – HOW WE COLLECT, USE AND SHARE PERSONAL INFORMATION OF CALIFORNIA RESIDENTS
Personal Information We Collect and Sources from which We Collect Personal Information
Preference cookies on your browser capture and store information about your choices and preferences, such as your preference to opt out of other cookies that may be applied by the Platform.
Categories of Sources from which Personal Information is Collected
Categories of Personal Information Collected
Examples of Personal Information Collected
|Providing our Ad Services||Through automated means such as cookies and other data collection tools when you visit a Digital Property that uses our advertising services technology.||Internet or other electronic network activity information.||Browser and device information, such as device type and model; manufacturer; operating system type and version (e.g. iOS or Android); web browser type and version (e.g., Chrome or Safari); user-agent; carrier name; time zone; network connection type (e.g., Wi-Fi or cellular); IP address; general location inferred from IP address; hardware-based identifiers (e.g. MAC address); information about our Publisher Client’s apps and versions currently active on a device (but not any other apps); identifiers assigned to a device, such as its iOS Identifier for Advertisers (IDFA), Android/Google Advertising ID (AAID or GAID), or other unique device identifier (typically an alphanumeric string allocated to a device by the device manufacturer, a Publisher Client’s Digital Property, or PubMatic, including identifiers stored in a cookie, ETag, or browser or web cache).
Information about the activities or actions on our Publisher Clients’ Digital Properties, such as information about the activities or actions on those Digital Properties, session start/stop time.
Information about ads served, viewed, or clicked on, such as the type of ad, where the ad was served, whether the End User clicked on it, the number of times an End User has seen the ad, and whether the End User visited the Media Buyer’s website or relevant app store.
|Commercial information||Whether an End User purchased or installed the product or service advertised. Whether an End User purchased or installed the product or service advertised.|
|Geolocation data||Geolocation (including latitude and longitude co-ordinates, but only if the Publisher Client’s Digital Property (like an app) has enabled location services on the device and the End User has granted the Publisher Client permission to collect and share this information for advertising purposes).|
|Inferences||We may use the information we collect to infer End User preferences and consuming patterns.|
|From our Publisher Clients and third party data aggregators.||Internet or other electronic network activity information||Network, type of an End User’s device and mobile device IDs, content viewed, or actions taken on a website or app.|
|Demographic data||Demographic or interest data.|
|Geolocation data||Precise geolocation (where permitted by law).|
|Characteristics of protected classifications under California or federal law||Age; ethnicity (where permitted by law); and gender.|
|Identifiers||Unique IDs our external partners or Publisher Clients have assigned to End Users.|
|Inferences||We may use the information we receive from our Publisher Clients and thirdparty data aggregators to help infer End User preferences and consuming patterns.|
|Operating PubMatic Properties (such as our Websites)||From you directly when you provide such information or through automated means such as cookies and other data collection tools when you visit a PubMatic Property.||Contact information||Name; address; telephone number; email address; and contact preferences.|
|Internet or other electronic network activity information||IP address; operating system type and version; browser type and version; cookie ID; an individual’s activities on the PubMatic Properties; and other information about the individual’s system and connection and how the individual interacts with the PubMatic Properties and other websites.|
|Professional or employment-related information||Job title; department or job role; and the nature of an individual’s request or communication.|
Business / Commercial Purpose for Collection of Personal Information
PubMatic collects the personal information described above for a variety of business and commercial purposes.
Categories of Third Parties to Whom We May Disclose or Sell Personal Information
We may disclose any of the personal information we collect for our business purposes, or sell the personal information, to the following categories of third parties:
- PubMatic’s Publisher Clients
- Media Buyers
- PubMatic’s other clients including brands, agencies, and other third parties
- Attribution and Analytics Partners
- PubMatic vendors, consultants, and other service providers
- Website advertising parties
SECTION 4 – UPDATES TO THIS POLICY
SECTION 5 – CALIFORNIA “SHINE THE LIGHT” LAW
Under California Civil Code Section 1798.83, also known as California’s “Shine the Light” law, California residents with whom we have an established business relationship are entitled to request and receive, free of charge, once per calendar year, information about certain personal information we shared, if any, with other businesses for their own direct marketing uses in the previous calendar year. To request a copy, please contact us at email@example.com or the mailing address noted below. Please be aware that not all personal information sharing is covered by the “Shine the Light” law requirements and only personal information on covered sharing will be included in our response.
SECTION 6 – CCPA Request Statistics
Below are the metrics related to the CCPA data subject requests we received for the previous calendar year:
|Access Requests||Number of Requests Received||23|
|Number of Requests Fulfilled||23|
|Number of Requests Denied||0|
|Median Fulfillment Time||18 Days|
|Deletion Requests||Number of Requests Received||58|
|Number of Requests Fulfilled||58|
|Number of Requests Denied||0|
|Median Fulfillment Time||14 Days|
|“Do not sell” Requests||Number of Requests Received||65|
|Number of Requests Fulfilled||65|
|Number of Requests Denied||0|
|Median Fulfillment Time||14 Days|
SECTION 6 – CONTACT FOR MORE INFORMATION
PubMatic, Inc. c/o Privacy
601 Marshall Street
Redwood City, California 94063, USA