Privacy Policy
Last updated: October 2026
This Privacy Policy explains how AEMEDIA OÜ processes personal data when you visit aemedia.ee, contact us, or when our advertising platform processes data in the course of providing services to our business partners. We process personal data in accordance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and the Estonian Personal Data Protection Act.
1. Controller
- Company
- AEMEDIA OÜ
- Registry code
- 12902156
- Address
- Narva mnt 7B, 10117 Tallinn, Estonia
- Privacy contact
- [email protected]
2. Data we process
Business contacts. When you or your company contacts us or enters into an agreement with us: name, business e-mail, company name, position, and correspondence.
Website visitors. Technical data such as IP address, browser type, device type, pages visited and time of visit, collected through server logs and, where you consent, cookies.
Platform data. When our platform takes part in real-time auctions, partners send us device-level bid request data, which may include: IP address (truncated where possible), user-agent and browser information, device type and operating system, coarse geolocation (country, region, city), page or app URL, language and time-zone settings, and consent signals (e.g. IAB TCF strings). This data relates to devices and is not used by us to identify individuals by name.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and managing business relationships | Contract or steps prior to a contract (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) |
| Selecting and delivering ads through our platform | Consent collected by the publisher (Art. 6(1)(a)) or legitimate interest, as signalled in the bid request |
| Detecting and preventing fraud and invalid traffic | Legitimate interest in secure, trustworthy advertising (Art. 6(1)(f)) |
| Reporting, billing and accounting | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Website operation and security | Legitimate interest (Art. 6(1)(f)); consent for non-essential cookies |
4. Recipients
We do not sell personal data. Data may be shared with: our business partners (advertising exchanges, SSPs, DSPs and ad networks) to the extent required to run auctions and deliver ads; service providers acting as our processors (hosting, infrastructure, accounting) under data processing agreements; and public authorities where required by law.
5. International transfers
Where data is transferred outside the European Economic Area, we rely on an adequacy decision of the European Commission or Standard Contractual Clauses, together with appropriate supplementary measures.
6. Retention
We keep personal data only as long as necessary for the purposes above. Data processed for ad delivery and fraud prevention, including raw bid-level logs, is kept for a maximum of 12 months from collection and then deleted or irreversibly aggregated. Business and accounting records are kept for the periods required by Estonian law.
7. Security
We apply technical and organisational measures appropriate to the risk, including access control, encrypted connections and restricted access to production systems.
8. Your rights
Under the GDPR you have the right to:
- access your personal data;
- request rectification or erasure;
- restrict or object to processing, including processing based on legitimate interest;
- data portability, where applicable;
- withdraw consent at any time, without affecting earlier processing.
To exercise your rights, write to [email protected]. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
9. Cookies
aemedia.ee uses only cookies necessary for the website to function, unless you consent to others. Cookies used in ad delivery are placed only where the publisher has obtained the user's consent as required by law.
10. Changes
We may update this policy. The current version is always published on this page with its date of last update.