TCF Compliance Statement

1. Introduction

AdFixus Pty Ltd (“AdFixus”, “we”, “us”, or “our”) is committed to adhering to the principles and requirements of the Transparency and Consent Framework (TCF) of the Interactive Advertising Bureau (IAB) Europe.

This statement provides transparency regarding our data processing practices within the AdFixus Platform, as detailed in our Platform Privacy Policy.

2. Public Attestation of Compliance

AdFixus declares its compliance with TCF Policies, including:

• Adherence to data processing purposes and legal bases.
• Consent management practices.
• Transparency obligations for end-users and Clients.

Key practices include:

3. Transparency and Consent

• End-users receive clear and accessible information regarding:
  • Data processing purposes.
  • Categories of data collected.
  • Data recipients.
• Clients are responsible for obtaining and communicating consent to AdFixus as required under applicable laws and TCF guidelines.

4. Legal Basis for Processing

• AdFixus processes data only under legitimate legal bases, including consent and legitimate interest, as defined under privacy laws and TCF.
• Clients are responsible for obtaining valid consent for all data processing purposes.

5. Consent Management

• A robust consent management system records and manages end-user consent status.
• Data processing activities are aligned with consent preferences and TCF Policies.
• If consent is not obtained, Clients must implement the DNT Feature, preventing identifier creation by setting the DNT flag ('Consent: dnt = true') in cookies.

6. Data Minimisation and Security

• AdFixus implements data minimisation measures and ISO27001:2022 certified security protocols.
• Data is encrypted in transit and at rest using industry-standard cryptography.

7. Data Subject Rights

• AdFixus upholds rights provided under GDPR, CCPA, and other regulations, including:
  • Access
  • Rectification
  • Deletion
  • Objection to processing
• Clients are responsible for facilitating these rights; AdFixus cooperates as necessary.

8. Data Profiling and Retention

• AdFixus does not create, maintain, or monetise Visitor profiles.
• Data, including AdFixus Identifiers and Visitor Data, is processed in memory and not stored, except for fraud prevention and security purposes.
• Retained data is kept for a maximum of 90 days before secure deletion.

9. Data Transfers and International Compliance

• For any international transfer of personal data, AdFixus ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).
• Compliance with applicable privacy laws is maintained at all times.

10. Public Access to Compliance Information

• Our public TCF compliance attestation can be accessed here:
  https://www.adfixus.com/tcf-compliance
• For inquiries, data subject rights requests, or TCF compliance concerns, contact:
  📧 privacy@adfixus.com

11. Updates to this Statement

• AdFixus reserves the right to update this TCF Compliance Statement to reflect:
  • Changes in TCF requirements.
  • Updates to privacy laws.
  • Changes in data processing practices.