Privacy Policy

Last Updated: 2 March 2026

Our Commitment to You

Media Hafen GmbH ("we", "our", or "us") is committed to providing users and partners who interact with our services the highest level of transparency and control over the use of their data. In order for us to provide our services we are required to collect and process certain personal information about you and your activity.

This Privacy Policy explains how we collect, use, and share personal data in connection with our advertising technology, data, and analytics products.

We process data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

By entrusting us with your information, we want to assure you of our commitment to keeping such information secure. We have implemented measures to protect the confidentiality, security, and integrity of this information. We encourage you to review the following information carefully.

Who We Are

Data Controller:

Media Hafen GmbH

Mainzer Landstraße 10

60325 Frankfurt am Main

Germany

Email: privacy@mediahafen.com

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@mediahafen.com.

How do we receive data about you?

We receive your Personal Data from several sources:

Registration information

When you voluntarily provide personal details to create an account or register for our services (for example, your name and email address).

When you communicate with us

When you contact us directly, such as sending an email or submitting a support request, we collect the information you provide.

Technical information

When operating our services, we use technological tools that collect information about how users interact with our website and services. These may include:

• Cookies

• Pixels

• JavaScript

• Local storage technologies

These tools help store preferences and improve system functionality.

Third-party information

We may receive information from third-party providers who assist us in operating and maintaining our services, including:

• analytics providers

• advertising partners

• fraud-prevention vendors

• cloud infrastructure providers

What type of data do we collect?

We collect both personal data and non-personal data.

Personal Data

While using our services, we may collect certain information necessary to operate our platform or communicate with you.

Examples include:

Registration information

• Name

• Email address

• Phone number

• Business contact information

Website usage information

When visiting our website, we may collect:

• IP address

• general geographic location (city or country)

Non-Personal Data

We also collect data related to service usage and system activity that generally does not directly identify individuals.

Technical data

Examples include:

• browser type

• operating system

• device identifiers

• session timestamps

• network connection type

• cookie data

Advertising and analytics data

This may include:

• ad requests

• bid responses

• impressions

• clicks

• conversions

This data helps us and our partners analyze and optimize advertising performance.

Third-party partner data

We may receive pseudonymous identifiers from advertising partners such as:

• cookie identifiers

• mobile advertising identifiers (IDFA, GAID)

• other advertising IDs used in the digital advertising ecosystem

If personal and non-personal data are combined, the combined data will be treated as personal data.

Tracking Technologies

When you interact with our services we (and authorized partners) may use:

• cookies

• pixels

• device identifiers

• similar tracking technologies

These technologies help us:

• analyze service usage

• improve platform performance

• deliver and measure advertising

• prevent fraud and abuse

How do we use the data we collect?

Provision of services

We use data to operate and maintain our platform, including:

• maintaining infrastructure

• supporting partners

• responding to inquiries

• ensuring proper delivery of services

Advertising delivery and measurement

Data may be used to:

• deliver digital advertising

• measure campaign performance

• analyze audience reach

• optimize advertising delivery

Marketing communications

We may use contact information to send service updates or marketing communications. Users may opt out of marketing emails at any time.

Analytics and research

We may analyze aggregated or pseudonymous data to improve services and develop new features.

Security and fraud prevention

Data may be used to detect fraudulent activity, invalid traffic, or misuse of our services.

Legal compliance

We may process personal data when required to comply with legal obligations or regulatory requirements.

Legal Bases for Processing

We process personal data under the following legal bases:

Consent

For example when cookies access information on your device.

Legitimate Interest

For purposes including:

• advertising delivery

• campaign measurement

• fraud detection

• service improvement

Legal Obligation

Where processing is necessary to comply with applicable laws.

Cookies, Device Storage & Identifiers

We and our partners use technologies including:

• cookies

• local storage technologies

• pixels and beacons

• device identifiers

These technologies help support functionality, analytics, advertising, and fraud prevention.

Cookies and identifiers are generally retained for up to 13 months unless longer retention is required.

With whom do we share your Personal Data?

We may share data with:

Internal teams

Authorized employees responsible for operating and maintaining our services.

Third-party partners

Partners who help deliver and measure advertising services, including:

• supply-side platforms (SSPs)

• demand-side platforms (DSPs)

• identity providers

• analytics providers

• fraud-prevention vendors

• cloud service providers

All partners must comply with applicable data protection laws.

International Data Transfers

Some partners may operate outside the European Economic Area. In such cases we ensure appropriate safeguards including:

• Standard Contractual Clauses (SCCs)

• adequacy decisions

• other lawful transfer mechanisms

Data Retention

Pseudonymous advertising data is generally retained for up to 13 months, unless required longer for legal compliance.

Aggregated or anonymized data may be retained longer for analytics purposes.

Data Security

We implement technical and organizational security measures including:

• encryption

• access controls

• system monitoring

• internal security policies

Despite these safeguards, no system can guarantee absolute security.

Your Rights

Under GDPR you may have the following rights:

• Access

• Rectification

• Erasure

• Restriction of processing

• Data portability

• Objection

• Withdrawal of consent

Requests can be submitted to: privacy@mediahafen.com

You may also lodge a complaint with a supervisory authority.

Changes to This Policy

We may update this Privacy Policy periodically. Updates will be reflected in the "Last Updated" date.

Contact

Media Hafen GmbH

Mainzer Landstraße 10

60325 Frankfurt am Main

Germany

Email: privacy@mediahafen.com

We participate in the IAB Europe Transparency & Consent Framework (TCF v2.2). Our vendor relationships and lawful bases for processing can be reviewed in the IAB Global Vendor List (GVL). Mediahafen’s IAB Europe TCF Vendor ID is: 1555.