To provide advertising services based on user behavior, which is the delivery and optimization of digital advertisements to each user, on third party digital properties.

In order to provide our services, we collect:
• Attribution of unique identifiers, such as cookie IDs and mobile advertising IDs;
• Technical browser and device information as ("user agent");
• URLs of the web pages visited by each user ("referrer")
• Data related to each user activity on the digital environment held by our Client, as IDs of products or product categories seen by the user (we act as data processor on behalf of our clients);
• Timestamps (to understand when the user visited our client's environment and saw products so we understand when he is more likely to convert);
• IP addresses (collected outside of advertiser's website for fraud detection / general geo location purposes).

The legal basis of the processing operations is user consent. Each user has the right to withdraw his consent for the processing of his personal data at any moment by opting out from our services at: https://www.getblue.io/optout due to identifying non-human traffic, and bots and assuring the safety and continuity of our services, we may process user's personal data pursuant to Article 6 Section 1 (f) of GDPR.

• BLUE DAWN MARKETING CONSULTING GROUP, S.L.
• Our Business partners (e.g. Supply Side Platforms, which support us in delivery of personalised advertisements);
• Our Processors (e.g. Data Centers, IT service providers) where such entities process data on the basis of a contract with the Controller and only in accordance with the Controller's instructions.

Users have the following rights related to his personal data:
• The right to withdraw the consent of usage to the processing at any time;
• The right to request the personal data to be erased where it is no longer necessary for BLUE DAWN MARKETING CONSULTING GROUP, S.L. to retain such data;
• The right to request that BLUE DAWN MARKETING CONSULTING GROUP, S.L. corrects any personal data if it is found to be inaccurate or out of date;
• The right, where there is a dispute in relation to the accuracy or processing of personal data, to request a restriction to be placed on further processing;
• The right to obtain the controller restriction of processing as referred to in Article 18 of GDPR;
• The right to object to processing personal data for direct marketing purposes;
• The right to access to personal data;
• The right to request that the data controller provides you with your personal data and where possible, to transmit that data directly to another data controller. You are entitled to request a copy of your personal data which BLUE DAWN MARKETING CONSULTING GROUP, S.L. holds about you.

We have appointed a Data Protection Officer (DPO), which is the person the user can contact when issues related to the processing of personal data and the exercise of rights concerning processing personal data are found. Our DPO can be reached through the following means: – by mail, to the following address: C Santa Rita 1 Numeros 1 y 2, San Pedro de Alcantara, 29670, Malaga, Spain – by e-mail: dpo@getblue.io

While processing user's personal data, we make a certain type of profiling with the objective to create and understand segments of interests, based on their personal preferences. Besides, this action in retargeting services does not affect any legal part concerning data subjects. Furthermore, the services we provide does not result in price discrimination among user, based on their behavioural profile.

The personal data collected within our activity is stored for the time it is necessary for performance of retargeting services and for client's requests regarding to the services. After that, the data is encrypted, anonymised and stored on the Controller's servers only for archival, statistical and settlement purposes. At any time, we respond to any data issue that may refer to the right of being forgotten by deleting or anonymising any personal data related to such data subject.

Coveny Limited shall not transfer or permit any Personal Data to be transferred to a territory outside of the EEA unless the proper measures were taken in order to ensure the transfer is in compliance with Applicable Laws. Such measures may include transferring the Personal Data to a recipient in a country that the European Commission has decided that provides adequate protection for Personal Data as referred to in Article 45 of GDPR or to a recipient in the United States that has certified compliance with the EU-US Privacy Shield framework. It is possible to check the list of the countries which the European Commission recognised as providing adequate protection by clicking here. Furthermore, it is possible to obtain a copy of the security policy of transferring the data outside the EEA and in order to obtain it, please contact our Data Protection Officer.

In case our company decides to use user's personal data for a new purposes, not covered by this notice, we will provide a notice containing the explanation of the new usage, detailing the relevant purposes and processing conditions. In all cases, we will seek each user consent to new processing.