The Data Processing Agreement (DPA) forms part of the Terms of Service between the client (Controller) and 3DMA Ltd., dba AdTech Europe (Processor). It applies whenever AdTech Europe processes personal data on your behalf.
Data covered
- Online identifiers (cookie IDs, advertising IDs)
- IP addresses
- Device and browser information
- Approximate location
- Ad interaction events (impressions, clicks, conversions)
Data subjects: visitors to your websites and apps, and users who see or interact with your ads.
Key commitments
| Topic | What the DPA says |
|---|---|
| Instructions | Data processed only on your documented instructions |
| Security | Article 32 GDPR measures: encryption in transit, least-privilege access, logging, backups, network protection |
| Breaches | You are notified without undue delay, within 48 hours |
| Sub-processors | Listed publicly; 30 days' notice of a new one, during which you may object |
| Transfers outside the EEA | Adequacy decision or EU Standard Contractual Clauses |
| Audits | Information to show compliance, on reasonable written request, once a year |
| End of service | Data deleted or returned within 90 days, unless law requires keeping it |
Getting a signed copy
A signed copy is available on request: info@adtech.eu.
This article explains how the platform works — it is not legal advice. Take your own advice on your obligations.
Related: GDPR: who is the controller? · Data transfers, subprocessors and retention
Nov 13, 2026