In the course of our business activities, Mediaocean collects, stores and processes data defined as personal information under privacy laws such as the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).  Although we do not collect any information from our users that is defined as Sensitive (for example, Special Categories of Data under the GDPR, Social Security Numbers or credit card information), we have implemented a Privacy Policy to ensure that all personal information is collected, stored, and processed properly and in accordance with applicable laws and regulations

Mediaocean commits to processing all personal client data that users enter into our hosted systems solely in accordance with client instructions. Mediaocean will not sell or otherwise profit from personal client data.  Please refer to our privacy notice for more information.  

Where we appoint other companies to process personal information on our behalf, we ensure that contracts are in place that govern the handling of the personal information, including, as applicable, appointment of sub-processors, cross-border transfers and technical & organizational security measures.  Please click here for information.  

Mediaocean complies with local privacy laws like GDPR and CCPA. We maintain a full register of all of our personal information processing activities and conduct impact assessments where appropriate.  In the event of a breach of personal information, we follow our incident-management procedures as described in our Security Incident Response Plan. This includes procedures for escalations and breach notifications.

See a copy of our Data Processing Addendum describing how we meet those obligations.

GDPR 

The GDPR legislation came into full effect within the European Union (EU) on 25 May 2018.    

GDPR updates and replaces the European Data Protection directive of 1995 and the related Data Protection laws passed in individual EU territories, though individual countries have since  published their own data protection laws to enforce specific requirements to the extent permitted by the GDPR. The law reflects technological and social changes over the past years and strengthens the rights of individuals using social media, on-line financial services and so on, in the face of new techniques such as biometrics and profiling.

Click here to learn more about the GDPR and what Mediaocean has done to ensure compliance.

Mediaocean commits to processing all personal data that your organisation transfers to us solely in accordance with our clients' instructions and in line with the obligations for Processors detailed in Article 28 of the GDPR.  

CCPA

The CCPA came into effect in California on 1 January 2020. Exemptions in relation to the processing of employee data and business-to-business data have been extended until 1 January 2023.

Here's more information about your rights under CCPA and about the types of personal data that Mediaocean collects.