Last change: 23.02.2021
1. General information
Yieldlab, a company of the ProSiebenSat1 Group, offers technologies that enable operators of websites and other digital content to generate revenues by displaying target-group oriented ads. The aim of this privacy policy is to inform you in a transparent and easily understandable way about our technology, our services and the associated processing of personal data. We know that what we do is a bit complicated, naturally we are therefore at your disposal for further questions via our contact page
2. Contact
The controller responsible for data collection and processing is: Yieldlab AG Colonnaden 41 20354 Hamburg You can reach our data protection officer at
Attorney Daniel Raimer Kanzlei Daniel Raimer Ernst-Gnoß-Str. 22 40219 Düsseldorf
Phone: 0211 4167 4600
E-Mail: office@kanzlei-raimer.com
3. Information relating to the collection and processing of data through our products
3.1 What kind of products do we offer?
We enable our customers to offer their digital advertising inventory in near real time and provide the necessary technology for this. For us and the advertisers it is important to display ads that are as relevant as possible. Therefore, we also offer our customers the possibility to display target group-specific or user-oriented advertising. Advertisers decide which ads are displayed to which user based on the interests and preferences of the users.
3.2 How do we collect data?
Our customers allow us to use so-called “third-party cookies” on their respective digital resources. These are small text files that are stored in your browser on your device. In some cases we use similar technologies such as so-called SDKs, which are mainly used in mobile applications, or so-called pixels or tags, which can be integrated into our customers’ websites and which are used by us like cookies. If you view content on your mobile device, we use the Mobile Advertisement ID (MAID) stored on your device. This ID is unique and assigned to your mobile device and serves us to identify your device. We summarize all these technologies below under the term “Cookies”. Our customers will inform you about the use of Cookies and obtain your consent to use these Cookies.
Cookies allow us to recognize your device when you visit other digital resources, which also include one of our products, by assigning a random number to your device.
The Cookies we use can only be read and used by us. The same applies to other providers with comparable or supplementary services to ours. When cooperating with these providers, it is advantageous if all parties involved agree on which user or device certain information refers to. For this reason we match our cookies with those of our partners.
With regard to Cookies, you have a wide range of options, which we explain in more detail under section 4.
3.3 What data does Yieldlab collect?
We collect and use the following data about you: :
• Information about your Internet connection: We collect data on which provider you use, how fast your connection is, and how high the latency is
• Information about your browser: We collect information about which browser you use, its version, the language set in the browser, and information about how your browser handles cookies.
• Information about your device: In this regard, we collect information about the operating system used, language settings, the brand of your device, device identification numbers, mobile operating system manufacturer advertising identifiers (IDFA or AAID) and the IP address of the device.
• Information about the website/app you visit: The content of the website/app, the type and nature of the web page, the domain of the web page or name of the app, technical information about the web page including referral URL (i.e. the URL of the web page from which you were referred to a web page) and the date and time of the visit.
• Information about your behaviour on websites: This includes information about the content you viewed, how long you viewed it, and which apps you used.
• Information about advertising materials: We record which adverts you have been shown, whether you have clicked on them or visited the advertiser’s website or downloaded their app.
• Information about your decisions: We also receive information on whether you have been informed about processing activities or whether you have consented to them. We also receive information on whether you have partially or completely objected to the processing and/or whether you would like your Cookie to no longer be used in the future.
• Location information: If you are viewing digital content or advertising on a mobile device, we can collect your exact location if you have enabled the appropriate feature on your mobile phone. Regardless of whether you are using a mobile device or a stationary device, we can obtain your approximate location or postcode area.
Our products allow the exchange of data with other publishers, advertisers or third parties to make ads more relevant.
Website operators may have additional information about you, or may purchase this information from so-called data management platforms. This data was previously collected about you and you were informed about its collection. We use this information to enrich the offer for an advertising space to be displayed to you. We will share this information with the bidders so that they can make an informed decision as to whether their ads are relevant and of interest to you.
We do not collect your name, e-mail address or any other information that could be used to directly identify you.
3.4 What this policy does not cover
Many website operators (Publisher) work with several companies to enrich their offer with online advertising. Like us, many of these providers rely on the use of Cookies or the MAID (see 3.2 above). For example, it is possible that several Cookies are stored on your device when you visit a website. In some cases this happens when you call up the website, in others only when you interact with an advertising medium. This privacy policy only applies to processing carried out by Yieldlab and the Cookies we use.
If you would like to receive more detailed information on the other companies engaged by the website operator and their processing, please contact them directly. If the website operator already supports the IAB TCF 2.0 (see section 3.11 below), you can also obtain much of this information via the CMP used by the website operator (see also section 3.11 below).
3.5 What we use your information for
We use the data described above for the following purposes:
Store and/or access information on a device
As described above (see section 3.2), we may store Cookies on your device. If such a Cookie already exists, no further Cookie is stored, rather the existing one is read. The storing or reading of Cookies and Mobile Identification Numbers serves to identify your device. This enables us to offer advertising inventory for your specific device. In addition, we can link information about your device and about you with the unique Cookie or mobile identification number. Information about Cookies is exchanged between the cooperating partners to determine whether two Cookies belong to the same device. This makes it easier for us to coordinate among the various vendors when providing advertising services. This step is necessary because each vendor issues its own unique Cookie and cannot directly access the Cookies of other Vendors (see also section 3.2 above).
Basic selection of ads
We use your information to provide basic selection mechanisms for displaying ads. For example, this selection is based on content you are viewing, the app you are using, your approximate location, or the type of device you are using. This includes ensuring that you do not see the same ad over and over again. We do this based on information about who else is viewing such content or using the app. These assumptions do not necessarily apply to you.
Creation of a personalised ads profile
We can create a profile about you and your interests. We refer to this profile as a personalised ads profile. It assigns you to certain groups or segments that allow potential conclusions about your interests and preferences. We combine this segmentation with the Cookies or mobile identification numbers mentioned above. Segments usually consist of a number of characteristics, such as an interest in sports, linked to a specific region (e.g. Hamburg) and an estimated age range (e.g. 30 – 40 years). The characteristics of the segments can be flexibly adapted and are oriented, among other things, to the advertisers target groups. We do not create segments based on sensitive data, such as health data, political beliefs, sexual identity, religious or philosophical beliefs, racial or ethnic origin or trade union membership. We neither collect nor store such data.
Selection of personalised ads
We allow our customers to pass on your personalised ads profile to potential bidders for advertising space of our customers. Based on the personalised ads profile, these bidders can decide whether they want to bid on an advertising space. The aim is to ensure that you receive the most personalised, and therefore relevant, ads possible on our customers’ websites. However, the bidders themselves decide whether they consider their advertising material to be relevant.
Measure ad performance
We measure the performance or effectiveness of the ads you see or interact with. To do this, we record whether you have seen the ad, how long it has been displayed to you, whether you have clicked or otherwise interacted with the ad. These values are important, among other things, so that Yieldlab’s customers can ensure that they are properly remunerated for their advertising inventory.
Development and improvement of products
We may use your information to improve our existing systems and software and to develop new products.
Ensure security, prevent fraud and debug
We may use your information to look for and prevent fraudulent activities. We may also use it to ensure that our systems and processes function properly and securely. For example, we will analyse behaviour of real users in order to distinguish them from computer-generated signals that are often used for fraudulent purposes.
Technically deliver ads or content
Your device sends and receives data that allows you to view and interact with content and ads. This means the display of a webpage/app. If you enter a URL, your device sends a request to load the associated web page. A similar signal is generated when you click on a link (this can also be an image) on a web page. We use the same data that allows the operator of the website to show your device the website, so that the right advertising material can be displayed in the right place.
Match offline and online data
We may link data collected about you offline with your online data. However, we only do this if there is a legal basis for the collection of offline data and its matching. We may use the linked data to support the other purposes indicated here.
Linking different devices
We may use your information to identify different devices as belonging to you or your household. For this purpose, we group Cookies that we believe are used by the same person or within the same household. We use this information to provide this information to bidders in order to improve personalized advertising and content. We also use this information to ensure that you do not see certain ads too often.
Receive and use of automatically-sent device characteristics for identification
We use your data to distinguish your device from other devices. To do this, we use information that your device sends automatically without us requesting it separately. Such data are, for example, the IP address as well as system and device information.
Use of precise geolocation data
We can enable our customers to provide bidders with precise location data for your device. Precise here means that your location can be accurate to within a few meters. This information is used to display advertisements or content that is of particular relevance to you based on your location.
3.6 To whom may Yieldlab pass on your information?
3.6.1 Yieldlab passes on your personal data to partner companies that want to purchase advertising inventory to display ads to you. In addition, Yieldlab passes on an identifier to companies that provide additional information about users or market such information for third parties. In both cases this data has been collected from you beforehand. If such additional information about you is available, we will check whether it is legally permissible to pass it on to us. If this is the case, we can use this additional data to enrich the information on an advertising space and thus enable bidders to make an informed decision. The data will only be passed on if we have received the relevant consent or if we can invoke our legitimate interests.
Joint responsibility
Yieldlab is a service provider, so we work with partners when processing data. This also includes those partners on whose websites or mobile applications we collect data through the cookies described above. With some of these partners, we are joint controllers within the meaning of data protection law (Art. 26 DSGVO). This joint responsibility generally relates to the collection and transmission of data to us. A current list of those partners with whom we are jointly responsible is available on request.
We and our partners have divided certain tasks and activities among each other within the framework of joint responsibility. The division is as follows:
Yieldlab provides the partner with a technical solution (here tag) which the partner integrates on its offers. This tag enables the collection of the data described in more detail above. Yieldlab also supports the partner, in particular in the processing of inquiries from affected parties..
Our partner will take care of obtaining consent and/or the implementation of transparency requirements towards you. He passes this information on to us, in order to communicate the scope and permissibility of the data processing. This includes informing you about our cooperation in the partner’s privacy policy.
Each of the parties shall in particular ensure that the necessary data security is given. Both we and our partner will fulfil our reporting and notification obligations individually, but will support and inform us to the extent necessary.
You can exercise your rights described below as a data subject (Ref.: 3.10) both towards us and towards our partner. We and our partner are liable for any processing that does not comply with the provisions of the GDPR in accordance with Art. 82 GDPR.
Do you have any further questions on the subject of joint responsibility? We would be happy to provide you with further information on our cooperation with certain partners.
3.6.2 We may also disclose your information to governmental authorities, courts or third parties if such disclosure is necessary or appropriate to enforce or defend our claims, interests or rights, or to protect the vital interests of the data subject or another individual.
3.6.3 We may also disclose your information to an acquirer or potential acquirer of our business or parts of our business to the extent that your information is related to the part to be acquired and to the extent necessary to enable the acquirer or potential acquirer to evaluate our business or the part of our business in question. In the event of an acquisition, we may also transfer your data to the acquirer.
3.7 On what legal basis does Yieldlab process your data?
Yieldlab always complies with the applicable data protection laws and regulations when processing your data. For some processing operations, our legitimate interests form the basis for the processing. Other processing operations require your consent. Our respective customers make sure that you have given such consent before we process your data and of course we verify this. Of course, you have the possibility to change your mind and to withdraw your consent, we explain how to do this under section 4.
3.8 How long do we store your data?
The third party Cookies we use are generally valid for 30 days, after which time they and the data associated with them are deleted. If the Cookie on your device is recognized by us again within this period, the runtime is extended again by 30 days. The information associated with the Cookie can be stored for up to 24 months in agreement with our customers. Such data that we have received from a data management platform (see above) will be deleted after 30 days regardless of the Cookie’s duration.
3.9 Transfer of your data abroad
Yieldlab and its servers are located in Germany. However, some of our Partners and Customers are located outside of the European Union. If we transfer your data to a Partner or a Customer who is based outside of the European Union, we will ensure that data is processed with an appropriate level of protection. To this end, we make use of legally provided and permissible measures, such as an adequacy decision by the European Commission (cf. Art. 45 para. 1 GDPR) for the third country concerned; the use of the European standard contractual clauses (cf. Art. 46 para. 2 c) GDPR) or other effective safeguards provided for in the GDPR.
3.103 Your rights
It is important to us that you do not lose control over how we handle your data. Under the General Data Protection Regulation (“GDPR”), you have the following rights towards us:
Right to object to processing (Art. 21 GDPR)
You can object to the further processing of your data at any time.
Right of rectification (Art. 16 GDPR)
You can request us to correct the personal data stored about you.
Right to erasure (Art. 17 GDPR)
Under certain circumstances, you have the right to request us to delete your personal data.
Right to restrict processing (Art. 18 GDPR)
You may also have the right to request a restriction of the processing.
Right to data portability (Art. 20 GDPR)
If the requirements of Art. 20 GDPR are met, you have the right to receive from us a structured version, stored in a common machine-readable format, of the personal data concerning you.
Right to lodge a complaint regarding our processing of your personal data with a data protection supervisory authority (Art. 77 GDPR)
If you believe that our processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority.
Right to revoke consent
You can withdraw your previously given consent for the processing of your data at any time. In order to make this process as easy as possible for you, you can do this via the following link: Opt-out. For more information about your choices, please see section 4 below.
3.11 What is the IAB Transparency and Consent Framework (IAB TCF)?
We participate in the IAB TCF. The IAB TCF is a common standard for dealing with transparency obligations and obtaining consent in connection with online advertising. The companies organised in the IAB TCF undertake to comply with standards that go beyond the GDPR. Yieldlab is registered as a so-called vendor under the IAB TCF. Further information about the IAB TCF can also be obtained from the following link https://iabeurope.eu/tcf-2-0/. We recommend all our customers to also register with the IAB TCF. If you use a service from a company that is already registered as a Publisher in the IAB TCF, you will benefit, as the IAB TCF offers you transparency and control over the use of your personal data.
On a technical level, the latest version of the IAB TCF (currently version 2.0) allows each participating company to understand which processing activities are permissible in individual cases based on the user’s choice.
For you as a user, the IAB TCF means a highly granular freedom of choice. Of course, you can still either agree or disagree with the use of your data in general. In addition, you can precisely understand who will receive your data and for what purposes. Of course, you are free to exclude individual recipients or to limit the purposes for which your data is used individually. Limiting the purposes is only excluded in exceptional cases, such as security-relevant processing activities.
We recommend that you consider the various options available to you under the IAB TCF in order to make a decision that best suits your interests. You will receive more information on these options and how to implement them in the following section.
4. Your choices
It is particularly important to us to enable you to make an informed decision about the use of your data. To this end, we would like to explain the options available to you at a glance. Should you have any questions, especially regarding the options we ourselves offer, please contact us at info@yieldlab.de. However, generally speaking, the following applies: If you delete the cookies stored on your device or update the Mobile Advertising ID (MAID) of your device, all previous choices will be lost. You will then have the opportunity to choose again as soon as a cookie is set again. Finally, it should be noted that these choices do not mean that you will no longer be displayed ads. However, the ads that are still displayed may be less relevant to you.
4.1 Using the CMP or the settings on the website
As described above, your data is collected when you visit websites or use apps. Those websites that participate in the IAB TCF especially offer you detailed possibilities to influence the processing of your data. For this purpose, these websites usually make use of a third-party provider, a so-called CMP (Consent Management Platform). This CMP clearly shows you your options when you visit a site. The CMP will allow you to generally agree to or reject the processing of your data. However, the CMP also allows you to make more minute choices. If you so wish, you can decide on each purpose and recipient separately. The CMP recognizes you by means of the Cookie. This does not apply if you have deleted the Cookie in the meantime or if it has been deleted due to time lapse. After you have made your choice in the CMP, the CMP will then ensure that this information is forwarded.
Since we and the publishers (website operators) want to offer you the greatest possible freedom of choice, these options are available to you on each individual website and generally only apply to that individual website. We understand that your choice may be different depending on the website operator.
Publishers who do not yet use the IAB TCF and a CMP still offer you possibilities to control their processing. The design may vary from website to website, so we cannot give you exact details, but we recommend that you check the privacy policy of the website in question.
4.2 Use of our opt-out possibility
Independently of the website operators, you can also object directly with us regarding the processing of your data by us. This option is also bound to the Cookie. You can make these settings under the following link: Opt-out. Your advantage: This choice then applies to all our services for all our customers. However, it only applies to our processing activities and has no effect beyond that. Other contractual partners of the Publisher and its partners are not covered by this choice.
4.3 Deletion or blocking of Cookie IDs
While we have defined the term “Cookie” broadly elsewhere in this document, here we mean the cookie in the technical sense. These explanations therefore only apply if you use a browser and cannot be applied to the use of apps. In addition, these explanations refer to third-party cookies (i.e. those that do not originate from the website operator).
Many browsers already offer you the possibility to handle cookies automatically. They often offer the following options:
• Cookie blocking
• Automated deletion of cookies at a certain time (e.g. after closing the browser).
• Manual deletion at a desired time
The browser you are using may offer additional or different possibilities. In order to make it as easy as possible for you to use these functions, we have put together links to the corresponding instructions or assistance pages of the most frequently used browsers:
Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/de-de/guide/safari/sfri11471
However, as mentioned above, deleting cookies results in a new cookie being set the next time you visit a website, for which previous choices do not apply. If you want to prevent this completely, you may wish to block the cookies.
4.4 Mobile Advertising ID (MAID)
Unlike those in websites, advertisements displayed in programs (apps) on mobile phones use the so-called MAID to identify the device. This MAID is a unique identifier that is stored on your device and linked by apps. Its use and purpose is otherwise equivalent to a Cookie.
If you wish to object to our use of the MAID, you can do so by clicking on the following link: Opt-out. The app you are using will also provide you with appropriate options. Where these options can be found and how they are designed can vary from app to app. If you would like to make more fundamental changes with regard to the MAID, there are two main options available to you. You can renew the MAID or block it completely.
For devices running the Apple operating system, you can find this information under preferences, then under privacy, then under advertising. There you have the possibility to limit or reset Ad-Tracking. If you have a device running the Android operating system, you can usually find these settings under “Settings”, then under “Google” and then “Advertising”.
5. FAQ
We are aware that many of the concepts explained here are complicated. Some important answers can therefore be found in the following FAQ:
Does Yieldlab know who I am?
No. Although we make some assumptions about your person, we do not know any directly identifying information about you. We do not know your name, e-mail address, postal address or telephone number. We are also not interested in finding out about them.
What about my IP address?
We know your IP address, but we only use it in its unabridged form to send your device the ads, or to enable others to do so. Otherwise, we use your IP address only in a highly abbreviated form, which is no longer sufficient to identify you or your device directly.
Just as a side note, let us be clear that it is theoretically possible to identify you by your IP address. However, this is an extremely complex process which, if at all, is only possible in cooperation with your internet service provider (ISP). However, your ISP will only disclose the relevant information on the basis of a court decision. It is therefore not possible for us to identify you by your IP address.
You say you “personalize” advertising, but then you must know more about me!
The personalization is based on probabilistic assumptions and is therefore only a probability value. The assumptions may or may not apply to you. Often the segments formed are so vague that they apply to a large number of people. For example, if we estimate that you could be between 20 and 28 years old.
Which cookies are stored on my device, can anyone read these cookies?
A cookie can only be read by the person who set it. This way Yieldlab can only read its own cookies. The same applies to the website operators. You can easily find out which cookies are stored on your device. You can find this information in the settings of the browser you are using. There you will also find the options for deleting the cookies described in section 4.3.
I do not want to be shown online advertising, is it enough to block/delete cookies?
No. If you object to the use of cookies, you will usually still see ads. However, these ads will then be displayed regardless of your preferences and interests and may be less relevant to you.
Why is there online advertising at all and what is the benefit of personalized advertising online?
VMany providers make their services available to the user free of charge. At the same time these providers often have high costs relating to employees, the operation of the website and other expenses.
One of the few options available to website operators to finance their services is the possibility of displaying ads., This enables a free, diverse range of services on the Internet that are accessible to everyone, regardless of the financial position of the individual user.
The website operator as well as the advertisers have an interest in showing you the most relevant advertising. As such, the website operator does not want the ads to be perceived as annoying. This is not the case if, for example, the ad is relevant to the user and he does not encounter it too often. For both purposes, however, the companies involved must be able to distinguish one user from another. The Cookies already described serve this purpose.
At the same time, it is important to all parties involved that you have the most precise options possible available to you to determine how your data will be used for advertising purposes. We firmly believe that the acceptance of online advertising depends crucially on you, the recipient, being able to understand and influence the processes behind it.
Many players are involved in the description. What do these companies do?
Online advertising is a complex industry with many players. But it can be presented in a simple way: There are companies that act on the side of the providers of websites and other digital content and help them to market the advertising inventory, and there are companies that help advertisers to target the ads as accurately as possible.
Content providers usually do not have the technical means to offer and market the advertising inventory themselves, so they work together with an SSP (Supply Side Platform). This supply side platform recognises when a user visits the site and an advertising space is available. At that moment it sends out a corresponding offer.
This offer is received by the DSPs (Demand Side Platform). These DSPs work for advertisers (directly or through an agency). They determine whether the advertising space is interesting to the advertiser. If it is, they place a bid, should several actors place a bid, the highest bidder wins.
All parties involved benefit from having additional information about the users who are currently visiting digital content. Some advertisers therefore collect information about users on their own websites (e.g. when you visit a webshop). This information can in turn be used by both SSPs and DSPs to determine which user should be advertised to.
Of course, this presentation is a little simplified, but it reflects the basic relationships and functions of the individual participants.