Last Updated: October 4, 2023
If you are a resident of the European Economic Area, Switzerland or the United Kingdom and want to find out more about your data protection rights, please see “Your Data Protection Rights“.
If you have any questions, you may contact us (see “Contact Us”)
- PRIVACY FOR THE PUBMATIC PROPERTIES
This Policy explains the process of collecting and utilizing information when a user interacts with or uses any of the PubMatic properties (for example, when a user interacts with www.pubmatic.com), which may include: “PubMatic Corporate” website, our “Community Portal”, our “Publisher Console” and “Media Console”, our “Investor Relations” page, and our “Contact Us” page (collectively, “PubMatic Properties”).
This policy outlines the choices available to you regarding our use of your personal information and your rights. This policy does not apply to the privacy practices of other websites that are linked from our websites. PubMatic is not responsible for the privacy practices of these other websites. We encourage you to read the privacy policies of those websites to understand their data privacy practices.
- WHO WE ARE
- WHAT INFORMATION DO WE COLLECT?
- HOW DO WE USE YOUR INFORMATION?
- COOKIES AND SIMILAR TRACKING TECHNOLOGIES
- USE OF PUBMATIC PROPERTIES BY MINORS
- HOW WE SHARE YOUR DATA
Information we collect may be disclosed for the following purposes:
To our affiliates: We may disclose your information to our affiliates (see “Who We Are“) for the purposes described in this Policy. PubMatic, Inc. is the party responsible for the management of your personal information jointly used by it and its affiliates.
Attribution and Analytics Partners: If you are an End User, we may share your information (such as your cookie ID, mobile device ID, or other unique identifier) with our attribution and analytics partners to validate and measure the success and effectiveness of ads delivered to you.
With our vendors, consultants, and other service providers: We may share your information with our third-party service providers, vendors, contractors, or agents who perform functions required for the operation of the business. Examples include providing data storage and processing services, lead management, campaign management, technical support for our Platform and PubMatic Properties and fraud prevention.
Website advertising partners: We may partner with certain third parties to collect information on the PubMatic Properties to engage in analysis, auditing, research, and reporting, as well as to deliver advertising that we believe may interest you based on your activity on the PubMatic Properties and other websites over time. We may share information with them for this purpose.
Business transfers: We may share your information with a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
For legal purposes: We may share your information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with subpoenas, warrants, or other legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to establish or exercise our legal rights or defend against legal claims.
With consent: We may disclose an individual’s information to any other person with the individual’s consent to such disclosure.
On message boards or other public webpages: Individuals may choose to share information on message boards, chat, profile pages and blogs and other services that allow visitors to post information and materials (including, without limitation, our social media pages). Please note that any information posted or disclosed through these services and forums will become public information and may be available to users of the PubMatic Properties and to the public. We urge you to be very careful when deciding to disclose your personal information, or any other information, on the PubMatic Properties.
- INTERNATIONAL TRANSFERS; EU-US DATA-PRIVACY FRAMEWORK
To get in touch with us, please see the “Contact Us” section of this document.
Information that individuals provide voluntarily
Certain parts of the PubMatic Properties may ask visitors to provide personal information voluntarily. For example, we may collect personal information when a visitor registers for a PubMatic account, expresses an interest in obtaining additional information about PubMatic or our products and services, subscribes to our marketing, or otherwise contacts us.
The personal information we collect may include contact information (such as name, address, telephone number, or email address) and contact preferences. It may also include professional information, such as job title, department or job role, and the nature of an individual’s request or communication. We also collect information that visitors choose to provide to us when completing any ‘free text’ boxes in our forms (for example, for event sign-up, product feedback, or survey requests). Please do not post any information that you do not want to reveal to the public at large.
Information we or our third-party partners collect automatically
When using the PubMatic Properties, we or our third-party partners may automatically collect certain information from an individual’s device. In some countries and states, including countries in the EU and the State of California, this information may be considered personal data under applicable data protection laws.
Information that individuals provide voluntarily
We may use information collected from the PubMatic Properties for the following purposes:
Purposes of Use
To send marketing and promotional communications
For example, we and/or our third-party marketing partners may use the information for our marketing purposes (for example, to send promotional emails), in accordance with an individual’s marketing preferences. You may opt out of our marketing at any time (see “Your Opt-Out Choices“).
To send administrative information
For example, to send information regarding our services and changes to our terms, conditions, and policies.
To engage in and process transactions
For example, we may use personal information to process your transactions and for billing purposes.
To post testimonials
We post testimonials on the PubMatic Properties that may contain personal information. Prior to posting a testimonial, we will obtain your consent to use your name and testimonial. If you wish to update or delete your testimonial, please contact us at firstname.lastname@example.org and be sure to include your name, testimonial location, and contact information.
Interest-based advertising and analytics
To manage accounts and provide customer support or other services
For example, we may use information to create or administer PubMatic accounts and to provide customer support or other requested services or information about PubMatic’s services.
To select content and improve quality
We may use information to help improve the PubMatic Properties and PubMatic Ad Services and to ensure that content on the PubMatic Properties is presented in the most effective manner for your device.
For legal purposes
We may use information as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with subpoenas, warrants, or other legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to establish or exercise our legal rights or defend against legal claims.
For our business purposes
We may use information for our business purposes, such as data analysis, audits, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our products, services, marketing, and client relationships.
The PubMatic Properties are not intended for nor directed to individuals that are deemed to be children under applicable data protection or privacy laws, rules, or regulations, and we request that such individuals do not provide information through any of the PubMatic Properties.
In connection with the PubMatic Properties and Ad Services, your personal information may be transferred to, and processed by PubMatic, its service providers, and partners in countries other than the country in which you are resident, including in the United States, India, and other locations where we have offices or employees or engage service providers or our partners. These countries may have data protection laws that are different from the laws of your country of residence and may not provide the same level of protection as your jurisdiction. Regardless of where your data is located, PubMatic shall process your personal information in accordance with this Policy.
If you are resident in the EEA, UK or Switzerland, we will protect your personal information when it is transferred outside of your jurisdiction by (i) processing it in compliance with the EU-US Data-Privacy Framework (EU-U.S. DPF, as described below); (ii) processing it in a territory that provides an adequate level of protection for personal information based on the receiving country’s data protection laws; and/or (ii) to the extent that the EU-U.S. DPF is unavailable, implementing appropriate safeguards to protect your personal information, such as requiring the recipient to comply with the Standard Contractual Clauses, or another lawful and approved transfer mechanism.
The Federal trade Commission has jurisdiction over PubMatic’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, PubMatic commits to refer unresolved complaints concerning our handling of personal data received in reliance on EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to our U.S.-based third-party dispute resolution provider (free of charge), TRUSTe. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit at https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. The services of TRUSTe are provided at no cost to you.
Under certain conditions, more fully described on the DPF website, https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2 you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Residents of the EEA, UK and Switzerland may also request our data processing agreements in addition to relying on PubMatic’s DPF certification.
- YOUR OPT-OUT CHOICES
How to opt-out of receiving electronic communications from us
If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt out of receiving these marketing-related emails by contacting us at email@example.com or by clicking on the opt-out link within the email message that you receive from us. Please also note that if you do opt out of receiving marketing-related emails from us, we may still be required to send you administrative messages relating to our services from time to time.
Opting out of our sharing of your personal information with affiliates for their direct marketing purposes
If you would prefer that we do not share your personal information in the future with our affiliates for their direct marketing purposes, you may opt out of this sharing by contacting us at firstname.lastname@example.org.
Opting out of interest-based advertising from Cookies
We are a member of the Network Advertising Initiative (NAI) and adhere to the NAI Code of Conduct. We also adhere to the Digital Advertising Alliance’s (DAA) Self-Regulatory Principles for Online Behavioral Advertising and Multi-Site Data, the Application of Self-Regulatory Principles to the Mobile Environment, and the Application of the DAA Principles of Transparency and Control to Data Used Across Devices. If you go to optout.networkadvertising.org, or optout.aboutads.info, you can learn how to exercise choice regarding the collection of information about your online activities over time and across multiple third-party websites, online services, devices, or applications for interest-based advertising purposes.
Currently, we do not honor “Do Not Track” headers and similar mechanisms.
- YOUR DATA PROTECTION RIGHTS
You may have the right to review, update, correct, access, obtain a copy of, port or delete the information PubMatic processes related to you. You may also have a right to restrict or limit the ways in which your information is processed, and the right to object to the processing of your personal data in certain circumstances. Depending on where you reside, you may designate someone to submit a request on your behalf as your authorized agent and appeal a decision denying your request by contacting us using the information provided below. You can find information regarding submitting a request and details regarding our process for responding to requests on our DSR Notice page.
If we process your information based on our legitimate interests or those of a third party you can object to this processing, and we will cease processing your information, unless the processing is based on overriding legitimate grounds or is needed for legal reasons.
If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
If you are a resident of the European Economic Area (EEA) or the UK, you may also have the following rights:
The right to object to processing your personal information, restrict processing of your personal information, or request portability of your personal information. To exercise these rights please see our DSR Notice to submit a request; and
The right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are here and the UK here.
Please note that because most of the information we store can only identify a particular browser or device, and cannot directly identify you personally, you may need to provide us with additional information to enable us to identify the personal information we hold about you and ensure that we accurately fulfill your request and do not infringe on the privacy rights of other individuals.
- UPDATES TO THIS POLICY
We will review and update this Policy periodically and will note the date of its most recent revision at the top of this Policy. If we make material changes to this Policy, we will post the revised Policy on our website and may take additional measures to inform you about such changes prior to such changes taking effect. We encourage you to review this Policy frequently.
We use reasonable organizational, technical, administrative, and physical safeguards to protect the personal information we collect and process. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information and to help ensure that your data is safe and secure. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the “Contacting Us” section below.
- CONTACT US
If you have any questions about this Policy or PubMatic’s privacy practices, please contact us by email at email@example.com, or by mail using the details provided below.
Please note that email communications are not always secure, so please do not include sensitive information in your emails to us.
Residents outside the European Economic Area (EEA):
PubMatic, Inc. c/o Privacy
601 Marshall Street
Redwood City, California 94063, USA
European Economic Area (EEA), and Swiss Residents:
Attn: EEA Representative
Barbara Strozzilaan 101
1083 HN Amsterdam, Netherlands
Attn: UK Representative
18 – 22 Stoney Lane
Yardley, Birmingham B25 8YP, England
To comply with our obligations under EU/ UK data protection legislation, we have appointed a Data Protection Officer (DPO). Our DPO is contactable at firstname.lastname@example.org or by mail using the details provided above. Who is the controller of my data? For the purposes of EU/UK data protection legislation, PubMatic, Inc is the controller of your personal information