Data Protection

I. Introduction

Controller
Meetrics GmbH, Alexanderstraße 7, 10178, Berlin, +4930555757855, datenschutz@meetrics.com – the Controller – will explain as follows what data we process from you and how we do it.

Data protection officer
Our Data protection officer Ms Beatrice Botti is available to answer any questions you may have about data protection.

She can be reached here:
DoubleVerify GmbH – Alexanderstraße 7 – 10178 Berlin – privacy-policy@doubleverify.com

Below, you will find information about which personal data (this is all data that identifies you or makes you identifiable as a natural person (hereinafter referred to as the “Data subject”), such as name, address, email address or even user behaviour) we collect during your visit to our site and how it is used. Data subjects are visitors to our website and users of our online services.

II. Data subjects’ rights

Pursuant to Art. 15 GDPR, you have the right to obtain information about the personal data stored including any recipients and envisaged storage period. If the personal data which are processed are incorrect, you have a right of rectification pursuant to Art. 16 GDPR. If the legal requirements are fulfilled you can ask for erasure or the restriction of processing as well as object to the processing (Arts. 17,18 and 21 GDPR).

If you wish for your data to be erased but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same shall apply to objections. You can exercise your right to data portability insofar as the recipient and us both have the technical means to do so.

Our data protection officer is available to answer any of your questions about data protection rights at info@werning.com.

If you believe that the processing of personal data concerning you is in violation of GDPR, you have a right to lodge a complaint with the competent data protection authority – the Berlin Commissioner for Data Protection and Freedom of Information, https://www.datenschutz-berlin.de/, or with any other data protection authority.

III. Legal basis

According to Art. 13 GDPR, the legal basis for our data processing is as follows:

  • 6 para. 1 sentence 1 lit. a GDPR for the processing of personal data with the consent of the data subject.
  • 6 para. 1 sentence 1 lit. b GDPR for processing personal data necessary for the performance of a contract to which the data subject is party as well as for carrying out certain pre-contractual steps.
  • 6 para. 1 sentence 1 lit. c GDPR for the processing of personal data necessary for compliance with a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country where the GDPR applies in whole or in part.
  • 6 para. 1 sentence 1 lit. f GDPR for the processing of personal data necessary for the purposes of the legitimate interests pursued by us or by third parties, unless such interests are overridden by the fundamental rights and freedoms of the data subject.
    Legitimate interests include, in particular, our commercial interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with other legal requirements.

For this purpose, we use service companies that have a special commitment to maintaining secrecy and data protection as part of providing their services. Data will only be passed on to the authorities in the event of overriding legal provisions.

IV. Right to withdrawal

You are free to withdraw your consent with effect for the future in accordance with Art. 7 GDPR.

V. Data security/encryption

This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.

VI. Purposes of processing

General: To present the company, provide services and/or for the sale of products as well as Internet communication. The purpose of the data processing on this website is to provide information about our company’s products and services and, if necessary, to process applications with the possibility for users to make direct contact with the contact persons in the company.

1. General

Insofar as you have provided us with personal data, we use this to answer your enquiries, to advise you and process contracts concluded with you, as well as for technical administration. Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of contract processing or for billing purposes or if you have given your prior consent. You have the right to withdraw your consent at any time with effect for the future (see right of withdrawal).

Legal basis for the collection, processing and disclosing of data is Art. 6 para. 1 sentence 1 GDPR.

After the applicable statutory retention obligations cease to apply, the data will be erased. Insofar as we are not subject to any statutory retention obligations, the data will be erased when the purpose ceases to apply.

You have the right to be informed about and the right to object to your data stored by us at any time. You can find more information under “Data subject rights” and “Right of withdrawal”.

2. Server data collection

Purpose of processing

When you visit our site, different server statistics are automatically stored, which your browser sends to our provider’s server: The following are logged (non-exhaustive): IP address of your device, the date and time of access, name and URL of accessed files, the website from which our site was accessed, or from which you were directed to our site (referrer URL), browser used and, where applicable, the operating system of your device as well as the name of your ISP.

The aforementioned data is processed by us for the purposes ensuring a smooth connection and system security. This data is not merged with data from other sources. The IP address is anonymised. The resulting connection data is automatically deleted; usually after seven days. If our website is misused, log data whose further storage is necessary for evidence purposes will be retained until the incident has been clarified.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the fact that we want to ensure that the website runs securely and to be able to identify possible attacks.

3. Contact form and email enquiries

Purpose of processing

When using our contact form, we collect and store the name and email address entered for the purpose of answering your enquiry. In order to check whether the sender is the owner of the email address provided, we also collect information about the company and the country. Providing a telephone number for a call back is optional. If you send us a contact request by email, we collect and store the email address and the data contained in the email.

Legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR, since by using the form as well as sending an email you are giving your consent to the processing of your data. Art. 6 para. 1 sentence 1 lit. b, as the storage of the data is necessary for the fulfilment of a pre-contractual or potential subsequent contractual relationship.

The data are erased as soon as the purpose of the storage ceases to exist, i.e. after answering your email/contact form enquiry or when the matter of the enquiry has been conclusively clarified.

You have the right to withdraw your consent given at any time without affecting the lawfulness of the processing carried out on the basis of consent.

You can find information about the right of erasure and right to obtain information under “Data subject’s rights”.

4. Online applications

Purpose of processing

If you apply with us in response to a job advertisement, we will collect your personal data, such as your first and surname, address, phone number, email address, attachments (covering letter, curriculum vitae, certificates, photograph) and store this information for the duration of the selection process.

Upon activating the check box and sending the form, you explicitly agree that we may collect, process and use the transmitted data, in particular sensitive information about your mental and physical health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union or political party memberships or sex life, for the purpose of the application.

Your data will be used by authorised members of the personnel department and company management  for processing in the context of the selection process only. Your personal data will not be disclosed to third parties.

If the specific position you have applied for has already been filled, but you might qualify for future employment or employment with a partner company or subsidiary, we will request your explicit approval before we continue to store your data or pass on your application, unless you have agreed to such storage or disclosure when applying.

If you send an unsolicited application to our general contact email address, the content of your application email may be viewed by unauthorised staff members. They have been instructed to pass on any application documents to the personnel department immediately without opening them, and to delete the incoming email. If you wish to prevent this, please call us before sending your application, and we will provide you with the contact details of the correct contact partner.

Legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR, for the processing of pre-contractual measures.

If you do not instruct us otherwise, we will erase your data six (6) months after the end of the application process. We will destroy any applications received by postal mail.

Provided that the relevant legal requirements apply, you have the following rights: Right of access to your data stored with us, rectification, erasure, restriction of the processing of your data or objection to the processing, as well as data portability. Of course you are also free to request at any time that your entire application documents are deleted or destroyed. To do so, send an email to: jobs@meetrics.com.

5. Use of Matomo Tracking

Purpose of processing

This website uses the web analytics service Matomo (Piwik). No cookies are used for this purpose. If you do not agree to the storage and analysis of this data from your visit, you can object to its storage and use at any time by clicking on the following link. In this case, a so-called opt-out cookie is placed in your browser, which means that Matomo does not collect any session data. Please note that completely deleting your cookies will result in the opt-out cookie also being deleted and you may have to reactivate it.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the fact that we use the statistical analysis of user behaviour to make adjustments for optimisation and marketing purposes as well as for security.

OPT-OUT link: meetrics.com/datenschutz/matomo-opt-out/

6. Newsletter

Purpose of processing

If you would like to receive the newsletter advertised on our website, we will require your email address. Registration for the newsletter uses the double opt-in process. After registration you will receive an email with which you have to confirm your registration. This process prevents an unauthorised person from using your email address to register. Information about your registration for the newsletter is recorded (the registration and confirmation times are logged, as well as the IP address). These logs provide evidence of the registration process in line with legal requirements.

You are free to withdraw your consent to the storage of your email address (and if fields are offered for this purpose: company, country; optional first name, surname and telephone number, for the purpose of personalised address) and its use for sending the newsletter including performance measurement at any time. An Unsubscribe link is provided at the end of each newsletter. Before erasing unsubscribed email addresses, we may store them for up to three (3) years as evidence of consent being granted.

Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the fact that we use the statistical analysis of user behaviour to make adjustments for optimisation and marketing purposes as well as for security.

7. Cookies

Purpose of processing

Cookies are small text files that are stored in your internet browser (e.g. Firefox, Google Chrome, Microsoft Explorer/Edge, Safari, etc.) or by it on your computer (i.e. your operating system) when you visit our site. A cookie, which contains a specific string of characters, helps our website recognise your internet browser when you visit it again. We use our own cookies, so-called session cookies. The cookie called PHPSESSID is set by PHP to handle requests from different concurrent sessions separately. We use WPML to offer our website in several languages. WPML sets the cookie wpml_browser_redirect_test to check whether your browser allows cookies to be stored. The cookie _icl_visitor_lang_js then stores the language you have chosen. These three cookies are only valid for the duration of your browser session and are deleted when you leave our site.

Legal basis for our own cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interest results from the fact that we only use the above cookies to make it easier to retrieve the page for you. We do not collect any tracking data in the process and therefore there is no interference with your personal rights and fundamental freedoms.

You can deactivate cookies in your web browser. However, this may lead to impairments in functionality.

If you use the above mentioned opt-out function of Matomo, an opt-out cookie will be saved.

We use cookies from the following third-party providers: N/A

VII. Data transfer to third countries

We do not transfer data to third countries.

VIII. Topicality and changes to this privacy policy

We reserve the right to adjust the content of this privacy policy at any time. We usually do so in the case of any further developments or service adjustments. You can view the current privacy policy on our website. This policy was last updated on: 31.08.2021

Additional information on how personal data is handled can be found under https://www.meetrics.com/en/compulsory-data-protection-information/

Meetrics' Service Data Protection

I. Purpose of measurements performed by Meetrics:

Meetrics performs analyses for the purpose of determining the quality of advertising environments, on behalf of advertisers, media agencies, online marketers and website operators. As a result, customers are provided with information about the following aspects:

  • the share of advertising materials that became visible as a percentage of all delivered advertising materials
  • whether advertising was displayed in environments that might be harmful to the brand
  • whether calls were generated by botnets or other fraudulent delivery situations

Meetrics Viewability measuring does not require any personal attributes. Meetrics Viewability measuring is based solely on websites’ internal visibility properties.

II. Technical basics

Meetrics uses a javascript that is integrated into an HTML document in the course of advertising delivery to analyse visits to a page. As part of the analysis, aggregated evaluations are created based on individual visits, to provide information about the advertising positions used. The evaluation objects in this context are advertising positions in individual sections of a page (on the most granular assessment level for example, information could be provided that out of 1,000 instances of advertising delivery within a campaign, 800 instances have become effectively visible in a particular advertising position of a domain).

III. Data collected

In order to be able to provide the full scope of our services, user interaction with the website and the advertising material may be saved.

For this purpose, data about the user’s operating system and browser will be collected.  Interaction with the website is also recorded in order to determine the visibility of advertising media and to distinguish human visitors to a website from automated calls.

In order to account for the environments in which advertising is placed, it is also verified whether specified keywords are present in advance.

We do not create profiles.

Meetrics does not collect, retain or share any personally identifiable information gathered on sites or apps not owned by Meetrics. This includes both unique user identifiers, as well as IP addresses (except for the limited purpose of ad fraud prevention, upon which it is retained for only 12 hours).

 

User IP address

Meetrics saves IP addresses for a short time, in order to identify the geographical origin of the traffic.

Furthermore, Meetrics is also tasked by customers to identify fraudulent advertising delivery and to present this as an aggregated result for each analysed advertising position. Storage time is extended to 12 hours, only for IP addresses that show a suspect frequency of calls.  IP Addresses which do not show any signs of fraud are removed immediately.

The aggregation of calculated performance key figures based on different aggregation criteria takes place based on campaign information and no personal attributes are used at any time.

 

Meetrics Audience Verification

This service allows advertisers to determine the socio-demographic spread of users of an online access panel found in specific advertising positions. For preparing this statistical analysis, Meetrics cooperates with online panel providers. In the course of registering users for this type of panel on the panel operator’s website, users explicitly grant consent for personal data to be captured by the panel provider. Furthermore, a cookie containing a pseudonymised user ID is placed by Meetrics following opt-in by the panel lists. The content of the cookie is also transmitted if an accordingly marked user retrieves a file from the Meetrics server as part of a Meetrics Ad Attention Monitor script delivery. This data is only provided to our customers in aggregated form. Transmission of results based on individual panel lists is excluded.

V. Disclosure and duration of storage

Under no circumstances will personal data collected on the customers’ websites be sold or otherwise disclosed to third parties. Aggregated data to assess the quality of advertising positions (e. g. advertising format x on domain y) is provided to Meetrics’ customers (protected by a password). Meetrics uses a data centre in Germany to perform data processing and storage (https://wiki.hetzner.de/index.php/Datenschutz-FAQ). Aggregated data may be saved for up to 2 years.

VI. Your legal rights

Affected users are entitled to information, correction, deletion, restriction, data portability, revocation and opposition. In the case of that the processing of data violates data protection law or data protection claims have otherwise been violated in any way, a complaint to the supervisory authority is possible.

You can reach the Meetrics Privacy Team at:

Meetrics GmbH, Alexanderstr. 7, 10178 Berlin

Our Privacy Officer Thomas Werning :

Email: datenschutz@meetrics.de

May 2018

VII. Lega base

Meetrics Viewabilty and Fraud detection is based on Article 6. (1) f. GDPR.

GDPR Art. 6 (1)f -,,processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data”

Reason for one’s own legitimate interest

Recital: The processing of personal data within the necessary quantity for the prevention of fraud constitutes a legitimate interest of the responsible person. The processing of personal data for the purpose of direct advertising can be considered as serving the legitimate interest of a person.

It is within the legitimate internal interest of the website operator to prevent fraudulent web page visits from generating on his website. In the end this damages the operation of the website. Meetrics clients have an interest in playing their advertisement out to people. Only then will the advertisement have the chance to unfold its effect.

The determination of the country of origin is furthermore essentially important for billing of the advertisement call ups, since it is only through this that it can be ensured that the call ups are suitable to the advertisement.

 

Are there milder options which could achieve this goal

In order to prevent the call ups of automated visitors a fingerprint of the computer initiating the call ups could be formed. But Meetrics does not do this. The IP address is only stored for a short period of time. It is stored for a maximum time of 12 hours within the system.

External Service providers can be used to determine the geographical origin. They are in the position to make a more precise determination of the country of origin. Meetrics has decided not to pass on the IP address to the outside world. The IP address will be synchronized internally only the assignment of a country will take place.

The privacy policy of Meetrics provides transparency concerning the use of Information from the IP address.

 

When can the processing be reasonably expected by the involved parties

Recital

The existence of a legitimate interest would have to be carefully evaluated. It is necessary to examine whether the person concerned, at the time of collecting the personal data and considering the circumstances in which the collection occurred could reasonably foresee that the processing would be carried out for that purpose.

In the privacy policy of the website, the user can also see that tracking by Meetrics can take place through an external script. More detailed information can be found by the user on the Meetrics website.

By calling up the website, it must be clear to the affected person that this will transfer their IP address to the server of the website. This is processed to prevent mass page views so that fraud and possible impairment of the operation of the website is prevented.

 

What are the legitimate interests of the person concerned

Website visits which do not form personality profiles which could then be used on other websites for further profiling.

 

Result 

It is in the interest of the website operator whom finances the operation of the website through advertising, to protect it against fraudulent call ups. The IP address is furthermore briefly stored for the purpose of documentation and the determination of fraud and will be deleted afterwards. This is stated in the privacy policy of Meetrics . Meetrics continually works on saving the smallest possible amount of data.

 

Opt-out possibilities from the Meetrics tracking:

Chrome User:
– https://chrome.google.com/webstore/detail/meetrics-optout/kghcchdcafccddoihjihdeoacllhlenh

FireFox Users:
– https://addons.mozilla.org/en/firefox/addon/meetrics-optout/