Data protection & your rights

White Label DSP, a project operated by AdTech Europe and 3DMA Ltd, is committed to processing personal data in line with the EU General Data Protection Regulation (GDPR) and applicable local laws.

This page is maintained by the project owners to explain in plain language how we apply GDPR principles to the platform.

When you sign up for the platform and configure your own White Label DSP, we act as the data controller for your account information (name, email, billing, authentication) and as a data processor for end-user data you process through the platform.

You are the controller for the advertising data you collect and process via your White Label DSP instance and are responsible for your own lawful basis, notices and consents toward end users.

Contract — to provide the service you subscribed to and to handle billing.

Legitimate interests — to secure, monitor and improve the platform, prevent fraud and abuse, and communicate service updates.

Consent — for optional analytics or marketing communications, where required by law.

Legal obligation — to comply with tax, accounting and other statutory requirements.

You have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability and the right to withdraw consent at any time.

You can exercise these rights from inside your account where applicable (profile, billing, deletion) or by contacting us through the contact form on this website.

You also have the right to lodge a complaint with your local data protection authority.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent mechanisms required by GDPR.

We use a limited number of vetted subprocessors for hosting, authentication, payment processing and email delivery. Each subprocessor is bound by contractual data protection obligations consistent with GDPR.

Personal data is retained only for as long as necessary to provide the service, comply with legal obligations and resolve disputes. When you delete your account, associated personal data is removed within a reasonable timeframe except where retention is required by law.

For privacy or GDPR-related requests, contact us through the contact form on this website. Where required, we will respond within the statutory timeframe.