Within Knorex, we have reviewed and made appropriate changes and improvements to our business processes, IT systems, and information security policy. Externally, we work closely with our partners and customers to comply with GDPR obligations.

Some of our key initiatives include the following:

• We have been approved as a vendor on the Global Vendor List (GVL) under the IAB Europe Transparency & Consent Framework (TCF) v2.0. This requires us to adhere to the TCF Policy and Terms & Conditions, to provide transparency on how we comply with GDPR requirements, and to work closely with publishers under GDPR rules.
• We have been part of the AdChoices program for a few years, providing consumers with the option to opt-out easily from ad tracking and targeting. Whenever an ad using Knorex platform is shown to a consumer, the consumer can easily discover that Knorex is responsible for displaying that ad and begin to find out how we are using the data and protecting their privacy. The consumer also has the option to opt out from further targeting or tracking via the linked webpage from the ad.
• We have established our Privacy & Data Protection team and appointed a Data Protection Officer to educate, inform, and advise our organization on privacy compliance matters, including technical and organisational measures to protect personal data from unlawful processing, unauthorised access or accidental loss/destruction.
• We have set up a dedicated user support team to address any queries and requests relating to personal data and privacy protection.
• We have reviewed and revised our privacy policies to incorporate our obligations under the GDPR. Users accessing and/or using our services will have the choice to accept or reject our terms of use, including opting in and opting out of tracking and cookie storage.
• We have made technical changes to our platform, products and related services, and infrastructure, to ensure compliance and, more importantly, to give our customers and users more control over their data.
• We have prepared relevant documents and information as guidance to our vendors and customers.
• We have applied data hashing techniques to pseudonymize data to reduce privacy risks to individuals. Additionally, we also use our in-house contextual targeting technology that does not rely on sensitive personal data to advertise to audience segments.
• We have collected and processed pseudonymous data with just enough detail to help our customers target their intended audience. Our technology helps customers make more relevant, personalized product recommendations, and promote those items most likely to interest and engage consumers.
• We have provided tools for individuals to easily opt out from ad tracking and to allow them to exercise their rights and choices regarding the processing of their personal data.