Privacy Policy

We want to offer the user a safe and reliable browsing experience and service on our website with the domain, from now on the “Platform” or the “Website“. We have therefore implemented the present Privacy Policy that complies with the security measures required by the European Data Protection Regulation 679/2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data (hereinafter, “GDPR”) to protect your privacy and be transparent with the use of your personal data.

As stated in the Legal Notice, the owner of the Platform and Controller of the processing of your personal data is:

  • Owner of the Platform & Controller: Smart Advertising Technology (henceforth, “EXADS”).

  • Registered office: Workhub, Office 1.6, 6 Fern Road, Sandyford, D18 FP98, Dublin, Ireland

  • VAT: 3179817IH.

  • E-mail:

This Privacy Policy only regulates the processing of personal data that takes place by the access, navigation, and use of the Platform. The processing of personal data that derives from the use of other services offered on the Platform shall be governed by the specific conditions provided in each case. However, this Privacy Policy provides a brief explanation of the data processing in our capacity as Data Processors.

For anything you may need as a user, you can contact us at the aforementioned e-mail or registered office.


Collection of data from legal entities or professionals

If you are a user contacting us but acting on behalf of a legal entity or if you are an independent professional, we will also collect your data for the provision of the requested service and may also process them for commercial purposes when you authorize us to do so, for example, by validating this policy.

Categories of personal data we collect: 

- Identification data such as your name and email address. 

Through our corporate emails

Through the following email addresses the user will be able to write to us and/or request the information they consider necessary to clarify doubts related to our services:

  • To resolve any questions about data protection and exercise of rights.

Categories of personal data we collect: 

- Identification data such as your name and email address. 

Social Networks

We may collect your data through your user profile in the social networks that we use from Facebook, Twitter, LinkedIn, YouTube, or Instagram, which are detailed in section 9 of this policy.

Behaviour and habits on the Website

It is also possible that we collect information about your behaviour on our Website through cookies, so the user can consult our Cookies Policy if needed.

Categories of personal data we collect:

- Identification data such as the IP address.

Online forms

Through our contact form, sign-up form, or any other online form on our Website, we will collect the data that are indicated and that are necessary to be able to send us your request or consultation.

Categories of personal data we collect:

- Identification data (name and surname, IP address, email address)

Provision of service: end user

Furthermore, the collection of data takes place on third-party websites that we do not control. As such, our DPA also provides that, as a software provider, we are not responsible for disclosing information to end users, and, nor for obtaining end users' consent to the collection and use of their data.

End users' data we obtain from our clients:

  • Referral URL 

  • IP address

  • Country, and geographical area 

  • User-agent: browser, operating system, and language

We regulate this processing under a Data Processing Agreement (“DPA”) with our clients which complies with the different aspects of the GDPR and applicable data protection laws. Furthermore, the collection of personal data takes place on third-party websites that we do not control. As such, our DPA also provides that, as a software provider, we are not responsible for disclosing information to end users, and, nor for obtaining end users' consent to the collection and use of their data.


The purpose of data collection in all the sections mentioned in the previous point is to maintain direct and personalized contact with our users. In this way, we will use your information to manage and respond to requests, and the provision of information and services of the entity.

In no case will the user receive information from third parties without having informed and requested their prior consent, thus ensuring compliance with the limits of the law.

We will send you information about our company, its actions, events, collaborations with third parties, commercial actions, and/or any other initiative related to EXADS depending on the type of consent that, in any case, you provide us.

The purposes of data processing by the means set out in point 1 will be, in detail, the following:

  1. Respond to queries or requests for information that the user may make.

  2. Send information that is considered to be of interest to the user.

  3. Inform of novelties that we may implement in the Platform.

  4. Notify promotional agreements that EXADS has subscribed with other entities or collaborating companies, all this to offer the user of the Platform, if applicable, certain functionalities or services similar to those previously acquired with EXADS.

  5. Provide our services to clients. Concerning the end users, their data will be processed to facilitate the transmission of the ad to fix errors and to save and communicate privacy choices. Therefore, EXADS may use Legitimate Interest via the Transparency & Consent Framework (“TCF”) for the following purposes

Fix errors

TCF Special purpose 1

EXADS' legitimate interest is to fix errors and maintain business continuity.

To process data for debugging purposes and troubleshooting ongoing or recent production incidents.

Deliver and present ads 

TCF Special Purpose 2

EXADS' legitimate interest is to conduct its technology by allowing the delivery of ads. To ensure the technical compatibility of the advertising and to facilitate the transmission of the ad to the end user's device.

Save and communicate privacy choices 

TCF Special Purpose 3

EXADS' legitimate interest is to conduct its business. Respect signals communicated by a CMP or received from a TCF Vendor (EXADS client)  who forwarded the signal originating from a CMP following the TCF Policies, and act accordingly.

EXADS acts as a Data Processor for all other purposes for which the Data Controller (client) responsible for the processing has established a legal basis. In such cases, EXADS as a Data Processor shall only process the data following the legal basis established by its clients.

This means that EXADS only provides the technology and, therefore, the cookies necessary for the optimal functioning of the platform, thereafter it is the client who configures and processes the data under their responsibility.


As already established in the previous points, EXADS will not provide users’ data to third parties, understood as third parties that are not directly related to the user or that do not carry out a function on behalf of or commissioned by the service provider or data controller, that is, EXADS.

We also inform you that your data may be communicated to those third parties when there is a legal obligation to do so.

Then, your data will be communicated to those entities that provide a service to EXADS when acting as Data Processors. In those cases, EXADS has subscribed to confidentiality and data processing agreements with them according to the requirements under GDPR and privacy applicable law.

In addition to this, we inform you that our servers are usually located in the European Union, and we generally hire service providers also located within the European Economic Area or in countries that have been declared with an adequate level of protection.

If we need to use external service providers that require the communication of personal data outside the European Union or in countries that have not been declared with an adequate level of protection, we will ensure that we guarantee the security and legitimacy of the processing of your data through adequacy decisions, standard clauses, binding corporate rules, exceptions or any other instrument approved by the supervisory authority that provides adequate guarantees for the performance of the international transfer of data.


In compliance with the requirements of the GDPR, and following our internal policies, when you provide us with your express and specific consent in any form or similar, or when you write to our contact email, you are expressly agreeing that we can process the data for the purpose or request that you have indicated.

With this/these action(s), you are freely and unequivocally declaring to us that you agree that we may process your data according to the purposes mentioned in the previous sections.

The acceptance that your data will be processed for the purposes referred to in this policy is always revocable, without retroactive effect, under the provisions of current legislation; therefore, you have the right to withdraw your consent at any time, without affecting the lawfulness of the treatment that had already been carried out based on your prior consent.

We also may process your personal data based on fulfillment of a contract, legitimate interest, and legal obligation.


The GDPR has implemented legal guarantees that allow the user to exercise rights and actions related to the processing of their data. EXADS offers this legal guarantee, whereby, at any time and/or when considered appropriate, the user may exercise the following rights:

  • Access to your personal data.

  • Rectify inaccurate or incomplete personal data.

  • Request the erasure of your personal data when, among other reasons, the data is no longer necessary for the purposes for which they were collected.

  • Obtain from EXADS the restriction of data processing when any of the conditions set out in data protection law are met.

  • Request the portability of your personal data or transfer your personal data to another Data Controller (when applicable).

  • Object to the processing of your personal data, under the circumstances set out in data protection legislation.

  • File a complaint before the relevant Supervisory Authority when you consider that EXADS has violated the applicable data protection law.

  • Where a processing operation is based on your consent, you may withdraw your consent at any time. To unsubscribe from marketing communications, you may exercise your right to revoke your consent at any time of such data processing, by clicking the unsubscribe link at the bottom of the communication submitted or by submitting your request for revocation to Nevertheless, the withdrawal of your consent to this processing will not affect the lawfulness of the processing carried out before that moment.

To exercise your data protection rights, you may contact EXADS at or their registered office: Please note that these rights may be limited and/or nuanced in some circumstances by local law.


The user:

  • Warrants that they are over 18 years old when accessing and using the Platform. The registration and use of the Platform is only for data subjects over 18.

  • Warrants that the personal data they provide to EXADS are true, exact, complete, and updated. In this sense, the user is responsible for the truthfulness of all the data they communicate and will provide updated information, when necessary, in a way that responds to their actual situation.

  • Warrants that they have informed third parties, where applicable, whose data have been provided to EXADS, of the aspects contained in this Privacy Policy. The user also guarantees that they have obtained their authorization to provide their data to EXADS.

  • Will be held liable for false or inaccurate information provided through the Platform and for direct or indirect damages that may be caused to EXADS or to third parties in this regard.

  • All personal data requested are mandatory unless expressly stated otherwise so that the refusal to provide them will result in the impossibility of providing the service.


To ensure the security of our Platform, we have integrated a security system that allows us to maintain the confidentiality and integrity of the data of our users that have been sent or collected through the means mentioned in the first point.

Thus, those responsible for this Website maintain the security levels of data protection required by the GDPR and have established all the technical means at their disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of data provided by the user through the Platform.

Notwithstanding the foregoing, as a user of our Website, you understand, accept, and understand that security measures on the Internet are not impregnable and that, therefore, you are obliged to adopt the necessary security measures that allow you to trust the veracity of our Website, in which you are entering your data. We will also do our best to always ensure the privacy and security of your personal data, using the utmost diligence and implementing the necessary measures.

Therefore, we inform the user that he/she shall be solely responsible for the security measures implemented concerning the protection of his/her data; EXADS shall not be liable for situations where the user has not implemented the corresponding security measures, nor for the consequences thereof, as well as for causes or damages caused by third parties unrelated to EXADS, including fortuitous and/or force majeure cases.

Under what has been established above, EXADS cannot guarantee that unauthorized third parties may know the type, conditions, characteristics, and circumstances of the use that users make of the services and functionalities offered on the web page; or that they may access or manipulate the messages and communications of any type that users disseminate or make available to third parties through these services and functionalities. However, as a measure, some conditions of use have been provided in our Legal Notice.


The personal data provided will be kept for the time necessary to fulfill the purpose for which they are collected and to determine the possible responsibilities that may arise from the purpose. However, to comply with the legally established deadlines, once the service has been completed and for the legal prescription period, they will be kept blocked, adopting for this purpose the appropriate technical and organizational measures to prevent their processing, including their visualization, and being only available to judges, courts, public prosecutors or public administrations, all this to address the legal responsibilities, if any. Once the required legal period has elapsed, these data will be definitively destroyed.

Regarding 'end users' data, we keep data only for the period necessary to fulfill the purposes for which it was collected and for any additional period as required by law. Thus, for all the purposes outlined in section 2.5., we will keep end users' data for a maximum of 365 days from the date of collection.


EXADS has a corporate profile in the social networks of Facebook, X, LinkedIn, YouTube, and Instagram.

Thus, under what is provided in the regulations and legislation of application of personal data protection, the company is the “Controller” of your data on the occasion of the existence of these profiles on social networks and the fact that you follow us, and we can follow you.

The above means that, if you decide to join our corporate profile as a follower or give a “Like” or similar to our content or profile, you accept this policy, where we explain your rights and how we use your data.

As Controller, we guarantee confidentiality in the processing and fulfillment of your rights, always under the effects of the applicable legislation and regulations. We also inform you that we will use these social networks to announce relevant news or information related to the services we provide or on topics that we consider to be of interest to you. The user must be aware that, using the functionalities of these social networks, they may receive on their wall or profile news with this type of information, not being responsible for this EXADS.

Now, we also let you know that there is no link between EXADS and these platforms or social networks, so you will accept their policy of use and conditions once you access them and/or validate their notices, terms, and conditions, in the registration procedure, the entity not being responsible for the use or processing of your data outside the strict relationship and provision of services indicated in this policy.


EXADS reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments, as well as to future uses that it plans to make of the personal data of the users of the Platform. If this modification affects you concerning the processing of your data, for example, because an additional processing of your data is carried out, and we have not previously informed you, we will proceed to notify you.

It is suggested, in any case, that the user proceed to read this policy each time they access it.


This Privacy Policy is complemented by the Legal Notice, the GDPR impact on EXADS, and the Cookies Policy, in addition to the rest of the information provided through the Website.

Last update: June 2024