User Privacy Policy

Outbrain is committed to protecting your Personal Data. For the purposes of this Privacy Policy, “Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Residents from  “European Territories” mean the European Economic Area (EEA), the European Free Trade Area (EFTA) and Switzerland.

This Users Privacy Policy (“Users Privacy Policy”) governs Outbrain’s use of User Personal Data. You are a User when you visit a page of a website or application of one of Outbrain’s media partners (“Partners”) where the Outbrain technology is installed or our ads are being served (“Partner Sites”). For example, if you visit https://news.sky.com/uk, or www.cnn.com, the Outbrain technology is implemented on those websites. The Outbrain technology will be labelled with an AdChoices logo which, when clicked on, will enable you to navigate to this Users Privacy Policy and Outbrain’s Interest Profile. In some instances, a Partner may have a white-labelled version of Outbrain’s service for their own offering. In such an event, such Partners must disclose their use of Outbrain in their privacy policies.

You are a “business partner” if you are a media owner, advertiser or agency who contracts with Outbrain. You can access the Business Partner Policy here.

You are a “site visitor” if you visit outbrain.com websites or digital properties or any other sites in Outbrain. You can access the Site Visitor Policy here.

a) Who we are:

This Privacy Policy applies to Teads Holding Co. (formerly Outbrain Inc.), a corporation registered in Delaware (USA) whose main office is in New York; and its affiliated subsidiaries (collectively, “Outbrain,” or “we“, “us“, “our”). We operate in various offices around the world and we partner with publishers and marketers across the globe. For the purposes of data protection laws  in the UK and  European Territories, the controller of your data is Outbrain UK Limited.

Data Subjects can exercise their rights with either Outbrain or its partners (advertisers and publishers). You can action your rights via our self-serve portal, the Interest Profile or you can reach out to us via the contact details in Section 12 of this User Privacy Policy Outbrain handles these requests fairly, promptly, and in line with applicable timeframes. Outbrain maintains records of rights requests and related actions to ensure transparency and accountability in safeguarding Personal Data.

Individuals who interact with legacy Teads technology can exercise their rights via the Teads  Privacy Policy.

b) What we do:

Outbrain operates a two-sided marketplace, forming an end-to-end advertising platform with direct media owner and advertiser relationships. Outbrain is an intermediary in the online advertising industry, connecting publishers all over the world. To achieve this, we enter into agreements with:

• media partners who want to recommend relevant content to their readers ; and
• advertising partners who want readers to view their content .

c) How to contact us:

We regularly review our compliance with this Users Privacy Policy. Questions, comments and requests regarding this Users Privacy Policy are welcomed and should be addressed in the first instance to ob-privacy@teads.com.

If Outbrain does not satisfactorily answer your questions or concerns, you may also contact our Data Protection officer at ob-dpo@teads.com or your supervisory authority or advice, support or complaints, including the Information Commissioner’s Office if you are in the UK.

• We adhere to the Self-Regulatory Principles set forth by the Digital Advertising Alliance (DAA) and the European Interactive Digital Advertising Alliance (EDAA);
• We are members in good standing of the Network Advertising Initiative (NAI), an association dedicated to responsible data collection and its use for digital advertising. We also adhere to the NAI Code of Conduct. Outbrain also adheres to the Interactive Advertising Bureau’s (IAB) Self-Regulatory Principles for Online Behavioral Advertising, and the IAB Europe TCF vendor ID; and
• We are also TAG Brand Safety Certified here.

a) Why we collect your Personal Data

We mainly process your Personal Data so that we can serve interesting ads or content to you. We also process your Personal Data to create anonymized and aggregated reports (such as conversion reporting to our partners which show how many users clicked on their ads and achieved a desired outcome) and/or to prevent fraud. We do not process traditional personal data such as your name, email or address. Outbrain’ ads may be paid for by an advertiser linking you to a new website or we may be powering organic content for our media partner which may link to another page on the same Partner’s Site.

b) We collect and process the following Personal Data in the following ways:

Generally, we use cookies, pixels and other similar technologies to collect and store Personal Data about you. In particular:

• UUID (Unique User ID) and other online identifiers

When you, as a User, first visit a Partner Site (e.g., CNN.com), Outbrain drops a cookie on your device in order to generate a UUID. Alternatively, if you first interact with a Partner using that Partner’s application, Outbrain receives your advertiser ID which is assigned to you by your device. We catalogue and analyze the content you consume across Partner Sites. Our ads  are based on: (i) a UUIDs browsing history; (ii) similar browsing patterns of other Users; (iii) ads that are generally popular with Outbrain’s audience at this time; (iv) some randomness, and (v) targeting requirements that may be provided or requested by our Amplify clients. As an example, Outbrain may know that UUID 123 (which could be you on your iPhone X on The Guardian using Chrome as your browser) likes to read about far away holiday destinations and that people who like to read about far away holiday destinations also like to read about exotic food. When you interact with Outbrain we do not collect traditional Personal Data from you, like your email address or name.  Therefore, we cannot associate your name with your UUID (for example, we do not know that John Smith, who is also UUID 123, likes to read about far away holiday destinations).

The UUID is a sequence of numbers and/or letters. This UUID attaches itself to your device and varies depending on your browser combination. In other words, Outbrain records a different UUID depending on which device and/or which browser you use when accessing the Partner Sites. For example, you will have one UUID when you visit a Partner Site from your mobile phone using the browser Safari, and a different UUID when you visit a Partner Site from your iPad using the browser Safari. Outbrain will combine and consolidate a UUID from a mobile device (handheld or tablet) from a browser that then accesses an application (or vice versa) from that same device. Outbrain does not conduct cross device tracking and therefore cannot link, for example,  a user interacting with Outbrain on their phone as the same user who is interacting with Outbrain on their desktop.

• IP Address

In addition to your UUID, we process your IP address, which we translate into non-precise location data and delete the last characters of the postcode in order to mask the identifying information. We use your IP address, in conjunction with information we received from other third-party partners (such as MaxMind) to determine a broad understanding of where you are located (e.g., New York).

Other Usage Information

In addition to your UUID and IP address, we also collect the following information from you on:

• desktop and mobile web: (i) User Agent data: device type (e.g.,iPhone), browser type (e.g., chrome), operating system (e.g. iOS); (ii) the pages visited; (iii) the time of visit; and (iv) referring URLs and other information normally transmitted in HTTP requests. The above statistical information provides us with information about how many Users visited a specific page on our Partner Sites on which the Outbrain technology is installed, how long each User stayed on that page, the type of content on that page they clicked on and how they generally engaged with that page; and
• on applications: (i) application version (as it appears in App Store or Play Store); (ii) application ID or package name (as it appears in the App Store or Play Store); (iii) operating system ( e.g. IOS or Android); (iv) operating system version; and (v) device model (e.g. iPhone X).

We also use the Personal Data we collect and your interactions with our technology to make inferences about what you prefer (interest categories). We may also associate your profile with particular audience segments (for example, we may infer that UUID 123 is in an audience which likes dogs).  An non-exhaustive list of interest categories used by Outbrain include topics such as investing, hardware and technology, beauty and fitness. Please refer to Outbrain’s Interest Portal for a detailed understanding of your interests.

Bid Data

When you visit a website using our advertising technology, we collect technical data, such as your IP address, device type, and unique advertising IDs, to facilitate a real-time digital auction, this is bid stream data. We participate in this online auction directly, via the Outbrain DSP or via third party partnerships. This online auction allows advertisers and partners to bid in real-time to show you an ad. The data collected in this auction helps us and our partners determine which ads are most relevant to you and what you may be interested in. This bid stream data is added to your Outbrain user profile to help us further understand your interests and browsing patterns (for example, recognizing that a user interested in ‘travel’ might also enjoy ‘photography’).

c) Machine learning techniques

Outbrain uses non-generative machine learning techniques to process Users’ Personal Data and to analyze trends and popular recommendations to predict what you will be interested in and what advertisement to show you based on this.

d) Legal basis for processing and responsibility

As Outbrain does not control or operate the Partner Sites upon which its technology is implemented, Outbrain relies on its partners to provide Users with relevant notices and consent management solutions. Where required by your applicable jurisdiction, we will only process your Personal Data where we have a legal basis to do so. Under the UK and EU General Data Protection Regulation (GDPR) the legal basis will depend on the purposes for which we have collected and use of your Personal Data.  The legal basis will be one of the following:

• Consent: We rely on your consent obtained via a consent management platform, for example, for the delivery of advertisements.
• Our legitimate interests, or the legitimate interests of our partners: We rely on legitimate interests to process data in order to maintain a secure environment and prevent fraud, and deliver non-personalised ads. These processing activities correspond to the Special Purposes defined under the IAB TCF framework (the industry body framework that governs how much of the ad-tech ecosystem operates):
  • Ensure security, prevent and detect fraud, and fix errors (aligned with Special Purpose 1 in the IAB TCF framework), for example, your data can be used to monitor for and prevent unusual and possibly fraudulent activity.
  • Deliver and present advertising and content (i.e., non-personalised ads) (aligned with Special Purpose 2 in the IAB TCF framework), for example, this may include your approximate and non-precise location to select an appropriate language of the content or advertisement, and to ensure it is transmitted correctly to your device.
  • Save and communicate user’s privacy choices (aligned with Special Purpose 3 in the IAB TCF framework) for example, your choices are saved so that we can honour them.
• Compliance with law: Where we are subject to a legal obligation and need to use your Personal Data in order to comply with that obligation.

Oubtrain acts as an Independent Controller for the personal data we collect and process to deliver our services. However, in certain specific scenarios we  act as a Joint Controller with our advertising or publishing partners during the initial collection of data.

Our advertiser and publisher partners are joint controllers with Outbrain only for the initial processing that takes place when Personal Data is first collected via Outbrain’s pixel. Because these partners provide the direct interface you interact with, they are responsible for providing clear privacy notices and for capturing your preferences via an industry standard consent mechanism. They are required to pass these signals to us and we are required to honor your preferences. Although Outbrain is responsible with its advertisers and publishers for handling data subject requests, as advertiser and publisher partners do not have access to Outbrain user profiles, our partners generally refer users to the Outbrain Interest Profile to exercise their rights directly with Outbrain.

a) Outbrain cookies

Please see the Users Cookie Table for a detailed list of the cookies which may be dropped by the Outbrain technology or by our partners or client’s partners when you interact on sites where the Outbrain technology is present.

b) The Outbrain pixel

In addition to Outbrain’s technology on Partner Sites, certain Outbrain advertisers or publishers implement the Outbrain pixel on their own websites. When a user reaches a page where the pixel is installed, our pixel determines if an Outbrain UUID is present on the advertiser landing page (the pixel does not collect any further data). If a UUID is associated with a user, Outbrain provides advertisers with the total number of users that reached a particular page on an aggregated and anonymized basis. For example, an advertiser will see that one “conversion” occurred, but they cannot identify that a specific user (such as UUID1234) performed that conversion.  Partners using our pixel will receive information on an anonymised and aggregated basis. We require our partners to disclose the usage of the Outbrain pixel on their own websites via their privacy policy.

c) Third party pixels and/or cookies

If you click on a link of an ad served via the Outbrain technology, the advertiser sponsoring the ad may place its own cookies or cookies of third parties providing services to the advertiser on your device either through redirects prior to arriving on the destination page of the recommendations or upon reaching the destination page. Generally, such cookies are dropped for the purposes of providing analytics to the advertiser with regards to the advertiser’s campaign (for example, to see how many users viewed the advertiser’s campaign). We require our advertisers to disclose the use of third-party pixels and/or cookies to end users via their website. As these cookies and/or pixels are added at the sole discretion of our advertisers, you will be subject to that advertiser’s cookie and/or policy.

Outbrain also allows certain trusted third-party partners to collect data via cookies and/or pixels delivered via our technology. In such cases, Outbrain does not share its user profiles with these third parties; however, we share certain data points (such as bid request data) or we enable such third parties to collect data directly via their own tracking technology. This may be, for example, fraud and/or security purposes or in order to provide measurement information to advertisers (such as the number of conversions and/or impressions). You can find a list of Outbrain’s Trusted Partners here.

d) Mobile advertising identifiers

Mobile advertising IDs (like IDFA) are unique IDs associated with individual mobile devices which Outbrain uses to associate with a user profile. Users can reset them by instructing their device to do so.

e) General web analytics

We may use web analytics from time to time, for example, our DSP service integrates with its client and partner’s web analytics software in order to observe how users behave after clicking on ads. Any data collection via web analytics software is governed by such client’s and/or third party’s cookie and/or privacy policy.

a) Outbrain opt out on desktop and mobile web

You may opt out of Outbrain’s personalized ads (or, if you have opted out and would like to opt back in) at any time by moving the toggle below. You can also opt out of personalised recommendations via Outbrain’s Interest Profile which is a website that allows you to exercise your data subject rights, including opting out of behavioral advertising, deleting your user profile or accessing the data Outbrain may hold on you.

b) Outbrain opt out on apps

In order to opt-out of Outbrain’s recommendations on your mobile applications you can follow the steps below:

1. iOS Devices: Settings > Privacy > Advertising > Limit Ad Tracking
2. Android Devices: Google Settings App > Ads > Opt Out of Interest-based Advertising

Please note that an opt out via our Interest Profile and/or this Privacy Policy will not opt you out of personalized tracking on your applications. This opt out must be done via your device settings.

c) Additional opt-out options

You may also opt out of receiving personalized ads served by us or other advertising companies through industry powered tools such as the NAI or the various DAA-based pages (DAA, DAAC, and/or EDAA). Visiting the NAI, DAA, DAAC, or EDAA consumer choice pages allows you to opt out of all of the participating members’ services. Like Outbrain’s opt out, these opt outs do not mean you will no longer receive any advertising, the advertisements will just not be tailored to you. You will continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you visit the DAA, DAAC or EDAA consumer choice pages, your opt out may not be effective as our opt out is cookie based.

If you are located in the European Territories/UK, please see Section 8 below which outlines other rights that you may exercise.  If you are a resident of California or certain other states within the United States, please see Section 9 below which outlines other rights that you may exercise, depending on your state of residency.

IMPORTANT INFORMATION

Even though you have opted out of Outbrain’s personalized ads:

• You will still see Outbrain ads. Opting out of Outbrain personalized ads does not mean you will no longer receive ads served by  Outbrain Technology.Our publisher partners use ads monetisation to give you access to free content as you browse their page. Instead, it means the  ads you are seeing will no longer be personalized (i.e. they will be context-based recommendations). Like when you walk through a shopping mall, read a magazine or drive along a road with billboards, these advertisements are placed on someone else’s property that you are accessing, in this case, a website or a mobile application and generally allow you to access content for free.
• Your opt out will be cookie based and device/browser specific. If you browse the web from several devices and/or browsers, you will need to opt out from each device and/or browser to ensure that we prevent personalization tracking on all of them. For the same reason, if you buy a new device, change browsers or delete or clear cookies, the opt out cookie will be cleared and you will need to opt-out again. Opting out of personalization ads is not the same as blocking cookies.
• As with most opt out cookies, the Outbrain browser opt out relies upon a cookie. Traditional opt out methods rely on opt out cookies. Modern browser privacy features, such as Apple’s intelligent tracking prevention or Google Chrome’s privacy settings may automatically delete or limit the lifespan of these opt out cookies. To ensure your preferences are permanently respected, we recommend using your browser’s native settings to block third party cookies or enable a global privacy control signal. Utilizing these browser-level controls ensures you remain “opted-out” across the web without needing to rely on individual company opt-out methods.

Your local storage will not be cleared. Even though you have opted out of Outbrain’s personalized ads your local storage will not be automatically cleared and therefore you need to clear this at a browser level in addition to your opt out.

a) Security

Please see our security standards for more information on a high level overview of the security standards that Outbrain has in place. Please remember that, unfortunately, the transmission of information via the internet or mobile devices is never completely secure. We do not control, recommend or endorse the content, products, services, privacy policies or practices of these third party websites. Please be aware that the internet contains fraudulent links, ‘phishing’ scams and deceptive content, be alert when browsing on sites and report any potential issues to content@teads.com.

If you choose to click on these links, you should know that these sites are not owned or operated by Outbrain and therefore these third party websites may send their own cookies to your device and they may independently collect Personal Data. It is therefore important that you get familiar with the privacy policies of these third party websites.

b) Sharing

Outbrain may share certain elements of a user profile (for example, UUID) with the following partners, including:

• Advertising and Demand-Side Partners: We may share parts of your user profile such as identifiers, with DSPs, SSPs and ad exchanges to facilitate real-time bidding and serve personalized advertisements based on your interests.
• Measurement and Analytics Providers: These partners receive data to verify ad delivery, measure campaign performance.
• Cloud and Infrastructure Service Providers: Your data is processed by third-party hosting and security vendors who maintain the technical infrastructure required to power our services and store information securely.
• Fraud and Brand Safety Partners: We work with specialized vendors to detect bot traffic, prevent advertising fraud, and ensure ads appear in safe, high-quality environments.
• Legal and Regulatory Authorities: Personal data may be disclosed to government bodies or law enforcement when we are legally required to comply with a valid subpoena, court order, or regulatory audit.

Please see here for a list of our Trusted Partners and/or the Users section of our Cookie Policy (which may be updated from time to time). Many of our partners are registered as IAB TCF Global Vendors and can be found here.

In addition, we may also disclose Personal Data as follows:

• within the family of companies controlled by Outbrain for internal reasons, primarily for business and operational purposes;
• if we go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Data will likely be among the assets transferred;
• when legally required to do so (e.g., to cooperate with law enforcement investigations or other legal proceedings);
• to investigate reports of fraud or otherwise suspected unlawful conduct, or to otherwise protect against unauthorized use;
• to protect Outbrain’s rights and property; and/or
• to respond to a genuine emergency.

We may take your personal data and those of other users, remove the identifiers and aggregate the datasets to be able to share trend information, anonymized and aggregated user statistics with our clients and trusted partners. If you are opted out, your data will be deleted and will not form part of any aggregated and anonymized reporting.

If you are a United States resident, please see Section 9 below for more information on how your Personal Data may be sold, “shared” and disclosed, as defined by the California Consumer Privacy Act and other state privacy laws.

c) Data Retention

The retention period for each of the cookies Outbrain uses (whether our own or on our behalf by third parties) is stated in the Cookie Table.

More specifically, the Outbrain cookie (OBUID), which is used to track user interactions such as clicks, expires in our records 30 days after the user’s last interaction on any website within our network. The cookie will persist for as long as the user interacts with our technology.

Any information associated with a user who has an active and continuing profile is retained in the User Profile for no more than 90 days from the date of last interaction.

Our internal policies and binding contractual agreements with our media partners expressly prohibit the targeting of children or the transmission of any “Sensitive Categories” of data to our platforms.

a) Your rights

In compliance with certain privacy laws, in particular the European General Data Protection Regulation (GDPR) and the UK GDPR, you have certain rights in relation to your Personal Data. More specifically and under certain circumstances:

• the right to request information about whether and which Personal Data is processed by us, and the right to request that such Personal Data is rectified or amended;
• the right to request that your Personal Data be deleted;
• the right to request that the processing of your Personal Data be restricted or object to the processing of your information on grounds relating to his or her particular situation, or at any time for direct marketing purposes;
• withdraw your consent to the processing and use of your data completely or partially at any time with future application.
• have the right to obtain your Personal Data in a common, structured and mechanically readable format, and to transmit those data to another controller;
• contact our data protection officer if there are any questions, comments, complaints or requests in connection with our statement on data protection and the processing of your Personal Data; and
• the right to complain to the responsible supervisory authority if believed that the processing of your Personal Data is in violation of the legislation. In the UK, the supervisory authority is the Information Commissioner’s Office.

We have created a self-serve portal which allows you to self-action many of these rights such as opting out, deleting your personal data or accessing the information we may hold on you. Please visit our Interest Profile to access this self-serve portal.

If you require us to assist you with  exercising any of these rights or have any questions, please email ob-privacy@teads.com.

b) Data transfers outside the European Territories/UK to non-US territories 

We operate a global infrastructure that utilizes both physical data centers and secure, cloud-based hosting environments. Our primary physical infrastructure is located in the United States, the Netherlands, and Singapore, and we utilize major cloud service providers to ensure the high-speed processing of data worldwide. When we transfer Personal Data, we will ensure such transfers are in compliance with relevant data protection laws, including, if applicable, EU/UK Standard Contractual Clauses, or a European Commission/UK Government positive adequacy decision.

In other words, your rights and protections remain with your data and we use approved contractual clauses and other measures designed to ensure that the recipients of your Personal Data protect it. Outbrain has in place a data sharing agreement, including the Standard Contractual Clauses, between Outbrain group entities to govern the transfer of data outside of the EEA/UK. To obtain more information as to the safeguards that we implement in this respect or to obtain a copy of them, please email ob-privacy@teads.com.

For more detail on transfers to the United States, please see below.

c) Data transfers outside the European Territories/UK to US territories – EU-US Data Protection Framework (DPF) Participation and the UK Extension to the EU-U.S. DPF

i. EU-US Data Protection Framework (DPF) Participation and the UK Extension to the EU-U.S. DPF

Teads Holding Co. (including its subsidiary Zemanta Inc.)  complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we  adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have certified to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, the EU-U.S. DPF Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit www.dataprivacyframework.gov.

ii. Complaint and Dispute Resolution Procedure under the DPF

Our internal complaints mechanism

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, we commit to resolve EU-U.S. DPF Principles and UK Extension to the EU-U.S. Principles-related complaints about our collection and use of your Personal Data. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact us  at: ob-dpo@teads.com.

You may have the right to lodge a complaint with the data protection authority of your country of residence. If you live in the UK, you can make a complaint with the Information Commissioner’s Office (ICO) at this address. If you live in the EU, you can find the relevant data protection authority here. We are subject to the investigatory enforcement powers of the U.S. Federal Trade Commission (FTC). To submit a complaint to the FTC, click here.

Independent Recourse Mechanism

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, we  commit to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF and UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgement of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related compliant to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Arbitration

You may also be able to invoke binding arbitration for unresolved complaints but prior to initiating such arbitration, a resident of a European country (including Switzerland) participating in the DPF must first:

1. contact us and afford us the opportunity to resolve the issue;
2. seek assistance from JAMS (an independent recourse mechanism); and
3. contact the U.S. Department of Commerce (either directly or through a European Data Protection Authority) and afford the Department of Commerce time to attempt to resolve the issue.

If such a resident invokes binding arbitration, each party shall be responsible for its own attorney’s fees. Please be advised that, pursuant to the DPF, the arbitrator(s) may only impose individual- specific, non-monetary, equitable relief necessary to remedy any violation of the DPF Principles with respect to the resident. The arbitration option may not be invoked if the individual’s same claimed violation of the Principles has previously been subject to binding arbitration; was the subject of a final judgement entered in a court action to which the individual was a party; or was previously settled by the parties. For more details, please click here.

iii. Choice and means for limiting use and disclosure of personal data

We do not disclose Personal data to non-agent third parties or use Personal data for purposes materially different from that which the data was originally collected or subsequently authorized by individuals. Should this change in the future, we will offer individuals opt-out choice or opt-in (for sensitive data) prior to any disclosures. iv. Outbrain’ liability in cases of onward transfers to third parties.

In the context of an onward transfer, we have responsibility for the processing of Personal Data it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. We remain liable under the DPF Principles if its agent processes such Personal Data in a manner inconsistent with the DPF Principles, unless we  prove  that we are  not responsible for the event giving rise to the damage.

This United States Consumer Privacy Notice (“State Notice”) supplements the Outbrain Privacy Policy and provides additional information for residents of certain states with comprehensive privacy laws, such as California and other similar state laws. Under these applicable U.S. state laws, processing Personal Data across various websites, apps, and devices to deliver targeted advertising may be classified as ‘selling’ or ‘sharing’ your information. Accordingly, this State Notice provides required disclosures regarding how we collect, use and disclose that Personal Data.

a) Your U.S. State privacy rights

As a resident of certain U.S. states (for example, California, Virginia, Colorado, Utah, Connecticut) you may have the right to submit certain requests relating to your Personal Data, as listed below, depending on your state of residency. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Right to Know: You may have the right to request information regarding the categories of Personal Data we collect, the sources of that data, our business purposes for processing it, and the categories of third parties with whom we share or sell that information.
• Right to access, confirm and data portability: You may have the right to confirm whether we are processing your Personal Data, to access your Personal Data, and to obtain a copy of Personal Data you provided to us in a portable format.
• Right to delete: You may have the right to delete the Personal Data that we have collected from you, subject to certain exceptions.
• Right to correct: You may have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and our purposes for processing it.
• Right to opt out of sales and sharing of personal data for targeted advertising: You may have the right to opt out of the sale of your Personal Data, and to request that we do not share your Personal Data for targeted or cross-context behavioral advertising. See section (c) below for further information.
• Right to withdraw consent or limit use and disclosure of sensitive personal data: If we process Sensitive Personal Data from you, you may have the right to withdraw a previously provided consent for processing your Sensitive Personal Data for a specific purpose.  We do not use or disclose Sensitive Personal Data for purposes to which the right to limit use and disclosure applies.
• Right to know third party disclosures: You may have the right to request a list of third parties to which we have disclosed Personal Data.
• Rights related to automated decision-making or profiling: We do not use your information for profiling in furtherance of decisions that produce legal or similarly significant effects or for the purposes of automated decision-making as defined under currently applicable law.
• Right to appeal: Sometimes we are unable to process requests relating to your Personal Data, in which case, your request will be denied. If you have previously submitted a privacy rights request to us that has been denied and you believe that we denied it in error, you may have the right to appeal for reconsideration of your request by emailing us at ob-privacy@teads.com or by calling us toll free on 1-866-I-OPT-OUT and entering service code 253# to leave us a message.
• Non-discrimination. You are entitled to exercise the rights described above free from discrimination.

b) How to exercise your rights

You may exercise your privacy rights described above as follows:

• By calling us toll free on 1-866-I-OPT-OUT and entering service code 253# to leave us a message.
• By emailing ob-privacy@teads.com.

c) Further information on the right to opt-out of the “sale” or “sharing” for targeted advertising of your Personal Data. 

We do not sell your Personal Data in the conventional sense (i.e., for money). However, like many companies, we use services that help deliver personalized ads to you. Under certain United States state privacy laws, some of the ways in which we share Personal Data for targeted or cross-context behavioural advertising or analytics may be considered “sales” or “sharing”. To opt-out from this “sale” or “share” for targeted advertising, click on this link which will take you to our Interest Profile where you can opt out of personalized recommendations. If you choose to use the Global Privacy Control (GPC) browser signal, you will only be opted out of online sales or sharing of Personal Data, and will need to turn it on for each device/browser combination that you use.

We will need to confirm your identity and state of residency to process your requests. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. Depending on your state of residency, you may be able to designate an authorized agent to make a request on your behalf; however, you may still need to verify your identity with us before your request can be processed. An authorized agent may submit a request on your behalf using the methods listed above.

d)  Summary of California Consumer Requests

This is a summary of the requests that Outbrain received and honoured from California residents in the last calendar year.

Some browsers transmit Do Not Track (DNT) signals to websites. Because there is no common understanding of how to interpret the DNT signal, Outbrain does not currently alter, change, or respond to DNT requests or signals from these browsers. We will continue to monitor industry activity in this area and reassess our DNT practices as necessary. In the meantime, you can use the range of other tools we provide to control data collection and use, including the ability to opt out of receiving personalized recommendations in the “Your Rights”  section. We also honour the GPC browser signal, as described in Section 9 above. Please note that since GPC is a browser-level setting, your preference is tied to that specific browser. If you use multiple devices or clear your cookies, you may need to ensure GPC is enabled across all environments. You may also manually exercise your right to opt-out at any time through our Interest Profile.

a) Data Protection Officer (DPO)

To communicate with our Data Protection Officer, please email at ob-dpo@teads.com or use the contact details below. You may also contact your local data protection authority. A list of local data protection authorities is available here.

b) General questions

If you have any questions or concerns about your privacy you may contact us at:

Att: Privacy Team
Teads Holding Co. (formerly Outbrain Inc.)
111 West 19th Street 3rd Floor
New York, NY 10011, USA

Outbrain UK Limited
70 New Oxford St
London
WC1A 1EU
Email: ob-privacy@teads.com or ob-dpo@teads.com