EU and UK General Data Protection Regulation (GDPR) Privacy Policy Addendum

Last updated October 26, 2022

​

If you are located in the European Economic Area (EEA) or in the United Kingdom (UK), the EU General Data Protection Regulation (GDPR) and the UK GDPR, respectively, provide you with additional rights regarding our collection and use of your personal data. This Addendum describes those additional rights and is intended to supplement Onemata’s Privacy Policy. If you are not located in the EEA or in the UK, this Addendum does not apply to you.

​

Data Controller

Onemata acts as data controller by collecting and processing personal data you provide us. We also act as a data controller when we process your personal data received or obtained through third-parties. For our contact information, please refer to the Contact Us section.

What Personal Data Do We Collect?

We collect different types of personal data depending on the source of the information, which are third parties, information collected automatically, and information you give us directly.

Personal Data from Third Parties: Most of the information about you we collect is obtained from trusted third-party data partners, and the personal data we collect from them includes:

• Information about your mobile device, which includes:

  • Its mobile advertising identifier (MAID) also known as a IDFA for Apple products or a GAID or AAID for Google/Android products

  • Its coarse and/or precise geolocation, comprised of latitude, longitude, time stamp of when its location was observed, country of where its location was observed, speed of movement when its location was observed, and the horizontal and vertical accuracy of the latitude/longitude coordinates

  • Available or connected wifi SSID and/or BSSID names

  • Internet protocol (IP) address

  • Operating system (OS)

  • User agent (i.e. browser identification)

• Encrypted hashed email address

• Cookie identifiers and web activity

Personal Data Collected Automatically: We also automatically collect and store certain types of data about your use of Onemata’s website. Like most websites, we use “cookies” and other unique identifiers, and we obtain certain types of information when your web browser or device accesses Onemata’s website, onemata.com. Examples of this type of data include:

• The date and time of your visit to onemata.com

• The IP address used to connect your computer or device to the internet

• The type of browser and operating system used to visit onemata.com (if provided by the browser)

• The uniform resource locator (URL) of the website referring you to onemata.com (if provided by the browser)

• The webpages seen during the visit to the onemata.com domain

For more information on cookies, and how we collect and use them, click here.

Personal Data You Give Us: You can voluntarily provide us your contact information through onemata.com and information regarding you, your business and your/its needs. Your choice to submit personal data is completely voluntary, and to indicate your consent you will be required to opt-in to our collection of such data before it is first provided to us through the website. Examples of the personal data we would collect when you choose to provide it include:

• First and Last Name

• Email address

• Phone number

• Employer

• Any free-text information you provide in the comment box

For more information on how we collect and use this voluntarily provided information, click here.

​

How Do We Source Your Personal Data?

We collect most of our personal data about you from a network of trusted third-party data originators and compilers. These third parties include publishers (such as mobile applications, or “apps”, and desktop and mobile websites), software development kit (SDK) networks, data brokers and marketing services companies.

​

We also collect personal data through publicly available sources, such as search engines or websites.

​

Information About Persons Under 16 Years of Age

We do not knowingly collect personal information from minors under 16 years of age in the EEA or UK unless we have received legal consent to do so. If we learn that personal information from such EEA or UK residents has been collected, we will take reasonable steps to remove their information from our database (or to obtain legally required consent).

How Do We Use Your Personal Data?

Onemata compiles the personal data collected from our network of trusted data partners and from publicly available third-party sources to provide a variety of data products and services to our customers. These products and services assist our customers provide more targeted, efficient and relevant marketing and communications, and/or enable them to perform research and attribution and create analytics for various purposes, such as to better understand their consumers. More specifically, our products and services are intended for general audience segmentation for ad targeting (i.e. building segments of an audience based on preferences), device presence/movement analysis (i.e. determining movement in a particular area), competitive location information (i.e. analyzing high-density areas or repeat occurrences between physical locations), market research (i.e. tracking consumer trends based on device presence/movement concentration), and more.

Onemata also uses personal data to develop derivative products or variations of data-derived products or software solutions. For example, we may utilize an IP recognition data set to enhance a web chat to identify website visitors before they enter any information, link hashed email addresses to mobile advertising identifiers (MAIDs), develop derivative search engines and application programming interface (API) products.

Onemata also uses personal data for internal purposes, including quality checking (i.e. validating our collected data sets), for our own B2B (business-to-business) sales and marketing purposes, and to operate, maintain and improve the products and services we offer. We may also use and share personal data for legal, auditing and accounting purposes, such as in good faith compliance with a request from law enforcement or a governmental agency; to evaluate or enhance the security or quality of our information; or to detect, prevent and investigate security incidents and illegal, deceptive or fraudulent activity. Additionally, in the event of any potential merger or acquisition, any personal data we hold will likely be transferred to the successor entity and shared with others in preparation or anticipation of such an event such as legal due diligence.

Onemata does not use automated decision making or profiling which produce legal effects or significantly affect you in any of the processing detailed above.

How Does Onemata Collect and Use Personal Information From its Website?

As part of our normal business practice, we use onemata.com to facilitate communication with the general public and our potential and existing customers. As part of that process it is often necessary, but completely voluntary, to collect your personal data. For example, if you are a potential customer seeking information about our products or services, you can provide us your contact information through onemata.com and information regarding your business and its needs. By entering your personal data and opting in on onemata.com, you are providing your consent for us to use your data for the purposes described below, and, if you are a current customer of ours, for purposes of enabling us to fulfill our contractual obligations to you. If you choose to submit any personal data to us through onemata.com by completing forms containing personal data and pressing the “send,” “get started,” “submit,” or similar buttons, such data may be used and shared by us as described below.

We use and share the personal data we collect from you within our organization, which includes representatives, agents, and third-party service providers to respond to your immediate request, to verify your authority to enter certain sections of onemata.com, to offer you other products or services that we believe may be of interest to you, and for future contact and communication with you. We may also contact you via surveys to conduct research about your opinion of current services or of potential new services that may be offered. We may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your personal data (such as your email, name, and telephone number) is not transferred to the external business partner. Onemata also uses personal data for internal purposes as described above.

We occasionally hire other companies to provide limited services on our behalf, such as handling the processing and delivery of mailings, providing customer support, processing payment transactions, or performing statistical analysis of our services. We will only provide those companies the minimum necessary personal data they need to deliver the service. They are required to maintain the confidentiality of your information and are prohibited from using that data for any other purpose. Except as described above, we do not sell, lease or disclose our customer lists to third parties.

Users of our website are under no statutory or contractual requirement or other obligation to provide personal data to us via our website.

What is our Lawful Basis for Using Your Personal Data?

We collect and process your personal data only where we have lawful bases for doing so under applicable EU and UK laws. The legal bases depend on the purpose of the processing, as outlined below: