Privacy statement – General Information

About this privacy statement

Our data privacy statement, sets out how we handle personal data. We are aware of the importance to users of how personal data are handled and we assure you that we observe all relevant legal requirements. We consider the protection of your privacy to be of paramount importance. For this reason, compliance with the legal requirements on data privacy is, for us, a matter of course.We reserve the right to make amendments at any time to this data privacy statement for future effect.

Contact

Nano Interactive GmbHMoosstraße 7, 82319 Starnberg, Germanyprivacy@nanointeractive.com

Data protection commissioner

You can contact our data protection officer(s) at:ePrivacy GmbHrepresented by Prof. Dr. Christoph BauerGroße Bleichen 2120354 Hamburgc.bauer@eprivacy.eu

Personal Data

Personal data refers to any information about personal or factual circumstances of an identified or identifiable person. This includes information and details such as your name, home address or other postal address, telephone number and also your e-mail address.

Requirement or obligation to provide data

Insofar as this is not expressly stated, when data are collected, the provision of data is neither required nor obligatory.

Legal basis

Your data are handled according to the following legal provisions:• With regard to data communicated in forms, etc. with your consent, Art. 6(1) (a) GDPR• With regard to services you use for the performance of a contract , Art. 6(1)(b) GDPR• With regard to our targeting service, your consent, Art. 6(1) (a) GDPR

Data sources

Unless otherwise specified, we obtain the data from you (including via devices used by you).

Retention period

We retain your data,• if you have consented to this as part of processing, until such time as you withdraw your consent. In any case we delete data collected on the basis of consent after 12 months.• if we need the data to undertake an agreement, until such time as the contractual relationship with you ceases or legal retention periods expire,• if we use the data on the basis of a legitimate interest, until such time as your overriding interest obliges us to delete or anonymise them. In any case we delete data collected on the basis of legitimate interest after 12 months.

Information regarding our targeting service

Data collection and usage

We specialize in displaying ads that are relevant to you.We do this by collecting the following kinds of data on the websites or apps of our publisher partners or advertisers:

• Events related to your browsing behavior on one of our partner publishers’ websites or apps

• Events related to our ad serving activities (e.g. Impressions, Impressions per user, clicks, viewability, conversions, fraud)

• We process truncated IP adresses (last three digits anonymized)

This allows us to show you advertising that is more relevant to you. We do not at any point collect contact information such as your name, address, phone number, email address, credit card information, or anything else that can allow us or our clients to contact you directly. There is no way for us to know who you are. We only collect data from our trusted data partners and do not collect data from public sources.

In order for us to process your data, you will have already accepted cookies or similar technologies from one of the publishers or advertiser we work with. You can change your preferences at any time as set out in Section 6. below.

Data Sharing

We provide insights to our advertisers and publishers in the form of aggregated data. This does not include any individual personal data.

Non-aggregated data may be stored by third parties such as data-centers and hosting providers who provide their services on our behalf. These companies are authorized to use the information we provide only as necessary to provide these services to us.

Additionally, we work with external data processors, to which we provide certain data which may include personal data, in order to provide our services, In the following table you may find the partner name, their web address and a link to their privacy statement:

Partner	Website	Privacy Statement
Doubleclick	https://www.doubleclickbygoogle.com/	https://policies.google.com/?hl=en
Appnexus	https://www.appnexus.com	https://www.appnexus.com/en/company/privacy-policy
Oracle	https://www.oracle.com/index.html	https://www.oracle.com/legal/privacy/index.html
Improve Digital BV	https://www.improvedigital.com	https://www.improvedigital.com/platform-privacy-policy
AdLoox Ltd	https://www.adloox.com	https://www.adloox.com/en/privacy-policy

The recipients of forwarded data are sometimes seated outside of the European Union. Nano Interactive transfers forwarded data only to third countries, if the data protection level of the third country is adequate or the recipients has provided appropriate safeguards.

Forwarded data is transferred to the following countries:• USA (EU-US-Privacy-Shield and EU Standard Contract Clause)

The Privacy Shield treaty, the Adequacy decision and the EU Standard Contract Clause can be reviewed at the website of the EU commission ( https://ec.europa.eu/info/law/law-topic/data-protection_en )

Information regarding our website

Data collection and usage

Personal data will only be collected by us to the extent and for the purpose for which you provide the data to us, e.g. for contact requests or registration.We use and store your personal data as part of our services for the following purposes only if you have provided us with your express consent:• Marketing• PR• Communication with business partners

Web analysis

Like almost all website operators, we use analytical tools in the form of tracking software to ascertain the number of users using our website and how frequently they visit.To enable us to optimise our website and our service, we use Google Analytics, which is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses what are known as “cookies”: these are text files stored on your computer and used to analyse your website usage. The information generated by the cookie about your use of this website (including your IP address) will be sent to a Google server in the USA and stored there. However, if IP anonymisation is enabled on this website, within member states of the European Union, or in other states that are party to the agreement on the European Economic Area Google first abbreviates your IP address. The full IP address will only be transmitted in exceptional circumstances to one of Google’s servers in the USA, where it will then be abbreviated. Google will use this information on behalf of our website operator to analyse your use of the website in order to compile reports about website activities for the website operator and to perform other services connected with the use of the website and of the Internet. The IP address transmitted by your browser as part of Google Analytics will not be merged or combined with other data by Google. You can prevent cookies from being stored by applying the appropriate settings in your browser software; please note, however, that in this case you may not be able to use all of the functions of this website to their full extent. You may also prevent Google from collecting data generated by the cookie referring to your website usage (including your IP address), and from processing these data by downloading and installing the browser plug-in available from the following link tools.google.com/dlpage/gaoptout?hl=de . As an alternative to the browser add-on or within browsers on mobile devices, please click on this link to prevent Google Analytics from collecting data in this website in future (the opt-out only works in this browser, and only for this domain). This stores an opt-out cookie on your device. If you delete your cookies in this browser, you need to click on this link again. Further information is available at tools.google.com/dlpage/gaoptout?hl=de or at www.google.com/intl/de/analytics/privacyoverview.html(general information on Google Analytics and data protection).Please note that on this website, Google Analytics has been extended by the code “gat._anonymizeIp();”, to ensure anonymised collection of IP addresses (known as IP masking).

Usage-related advertising

From time to time we run ad campaigns for our own services. For these campaigns we use our own targeting technology (please see section 2.).The advertising displayed on certain partner websites is optimized for you through anonymously collected and processed data about how you use our services, so that you can see advertisements relevant to your interests. For this purpose, a cookie will be stored on your computer.

Nano’s commitment and adherence

Nano Interactive adheres to the principles of the EDAA OBA Framework, which helps you choose and control what types of advertising you see on the internet. More information on the EDAA OBA Framework can be found here: http://www.edaa.eu

Data protection

We have taken extensive technical and organizational measures to secure your data against potential risks, such as unauthorized login or access, unauthorized perusal, amendment or distribution, as well as against loss, deletion or misuse.In order to protect your personal data against unauthorized access by third parties when being transmitted, we secure data transmissions, if necessary, using SSL encryption. This is a standard encryption procedure for online services, particularly for the Internet.
Cookies

Cookies are small files that your browser stores on your PC in a directory designated specifically for this purpose. These cookies can be used e.g. to find out whether you have already visited a website. Most browsers accept cookies automatically. Nevertheless, you can change the settings in your browser, so that no cookies can be stored or so that your explicit agreement is required before any cookies are stored. You can also delete previously set cookies at any time. Please note that disabling cookies may result in your use of our website being restricted.

If you do not want us to collect data via cookies you can use the cookie setting in your browser to block cookies (all or only certain types). To do so, please refer to the user manual of your browser. You get there by clicking the “Help” button of your browser.

Additionally, you have the choice to Opt Out of our technology, by clicking here: https://audiencemanager.de/public/opt-out . Please be aware that the Opt Out is technically realized also via a cookie. So it has to be done in every browser on every device and if you delete your cookies you will need to Opt Out again.

Another option for disabling cookies with regard to usage-based advertising is offered by the BVDW preference manager, www.meine-cookies.org/cookies_verwalten/praeferenzmanager-beta.html and the preference management of YourOnlineChoices, www.youronlinechoices.com/de/praferenzmanagement/

Please note that deleting and/or blocking cookies or opting out will not prevent you from getting online-advertisements. You will still get banners but they will be shown randomly and not based on any cookie data.

Rights of the data subject

Right to access, rectification, right to object, to complaint, erasure and blockage.• You have the right to request information about whether and which personal data is processed by our company. You also have the right to demand that your personal data is rectified or amended.• Under certain circumstances, you have the right to request that your personal data should be deleted.• Under certain circumstances, you have the right to demand that the processing of your personal data should be restricted.• You can withdraw your consent to the processing and use of your data completely or partially at any time with future application.• You have the right to obtain your personal data in a common, structured and mechanically readable format.• If you have any questions, comments, complaints or requests in connection with our statement on data protection and the processing of your personal data, you can also contact our data protection officer in detail.• You also have the right to complain to the responsible supervisory authority if you believe that the processing of your personal data is in violation of the legislation.

Date of issue of this data privacy statement

17.04.2018