Privacy Policy

Last updated: October 20, 2026

Who we are
Scope of this policy
Data we collect
How we use data
Legal bases
Sharing and disclosure
International transfers
Data retention
Security
Your rights
Opting out of ads
Children
Changes
Contact

1. Who we are

RTBNest is a brand of NEMESIDA SMART DATA LTD, a company registered in the Republic of Cyprus under registration number HE 465547 ("RTBNest", "we", "us", "our"). We operate a real-time bidding (RTB) advertising exchange that connects publishers, supply-side platforms (SSPs), demand-side platforms (DSPs), XML feed partners and advertisers, with a focus on Smart Link and Popunder traffic. We operate the website rtbnest.com and related services on its subdomains (together, the "Services").

NEMESIDA SMART DATA LTD is the data controller for personal data processed under this policy. Our lead supervisory authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

For questions about this policy or your personal data, contact us at support@rtbnest.com.

2. Scope of this policy

This policy describes how we handle personal data in three contexts:

Website visitors who browse rtbnest.com;
Business partners (publishers, advertisers, SSPs, DSPs and their representatives) who communicate with us or use our platform;
End users whose devices receive or interact with ads delivered through our exchange on partner websites and apps.

Our partners operate their own websites, apps and advertising technology and are responsible for their own privacy practices, including obtaining any consent required from end users before data is passed to us.

3. Data we collect

3.1 Website visitors

Technical data: IP address, browser type and version, operating system, referring URL, pages viewed and time of visit, collected in server logs;
Information you send us by email, such as your name, company, email address and the content of your message.

3.2 Business partners

Contact and account details: name, company name, job title, business email, messenger handles;
Billing and payment details: company registration and tax information, bank or payment-system details;
Platform usage data: login records, settings, campaign and traffic configuration, statistics.

3.3 End users (ad serving data)

When an ad request is processed through our exchange, we may receive and process:

IP address (which may be truncated or used to derive approximate location such as country, region and city);
User agent and device information: device type, make and model, operating system and version, browser, language, screen size, connection type and carrier;
Pseudonymous identifiers: cookie IDs, mobile advertising IDs where provided by the partner, and request or click IDs;
Context of the ad placement: publisher or source ID, sub-ID, page URL or app identifier, ad format;
Interaction events: impressions, clicks, conversions reported by advertisers via postback, and timestamps;
Consent and privacy signals passed with the request, such as IAB TCF strings, GPP strings, US Privacy strings and COPPA flags.

We do not intentionally collect names, postal addresses, phone numbers or other directly identifying information about end users, and we do not process special categories of personal data for advertising purposes.

4. How we use data

To run real-time auctions, select and deliver ads, and route Smart Link traffic to relevant offers;
To apply targeting, frequency capping, floor prices and partner rules;
To detect and prevent fraud, bots, invalid traffic, malware and abuse;
To measure impressions, clicks and conversions, produce statistics and calculate payments between partners;
To operate, maintain, secure and improve the Services;
To communicate with partners, provide support and send service-related messages;
To comply with legal obligations and enforce our Terms of Service.

5. Legal bases

Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

Consent, where required by law for storing or accessing information on a device and for personalised advertising, as collected by the publisher or its consent management platform and signalled to us;
Legitimate interests, for fraud prevention, security, non-personalised ad delivery, measurement and improving our Services, balanced against your rights;
Performance of a contract, for handling partner accounts, payments and support;
Legal obligation, for accounting, tax and responding to lawful requests.

We do not sell personal data of website visitors or business partners. In the course of ad serving, data may be shared with:

Demand partners (DSPs, XML feed partners and advertisers) who receive bid requests and may bid on them;
Supply partners (publishers and SSPs), who receive reporting on the traffic they send;
Service providers that host our infrastructure, provide anti-fraud, analytics, email and payment services, bound by confidentiality and data protection obligations;
Authorities, where required by law or to protect our rights, users or the public;
A successor in the event of a merger, acquisition or sale of assets.

Under some US state privacy laws, sharing data for targeted advertising may be considered a "sale" or "sharing" of personal information. See Opting out of ads for your choices.

7. International transfers

Our servers and partners may be located in countries other than your own. Where we transfer personal data from the EEA, UK or Switzerland to countries without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Data retention

Raw ad serving logs containing IP addresses and identifiers: up to 90 days, after which they are deleted or aggregated;
Aggregated, non-identifying statistics: for as long as needed for reporting and billing;
Partner account and billing records: for the duration of the relationship and as required by tax and accounting laws;
Email correspondence: up to 3 years after the last contact, unless longer retention is required.

9. Security

We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, network segmentation and monitoring. No system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

10. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you and receive a copy;
Correct inaccurate data or have it deleted;
Restrict or object to processing, including processing based on legitimate interests;
Withdraw consent at any time, without affecting earlier processing;
Data portability;
Opt out of the sale or sharing of personal information and of targeted advertising (for example under the California CCPA/CPRA and similar US state laws);
Lodge a complaint with your local data protection authority.

To exercise these rights, email support@rtbnest.com. Because we generally hold only pseudonymous data about end users, we may need you to provide an identifier (such as a cookie ID or advertising ID) so we can locate your data. We will not discriminate against you for exercising your rights.

11. Opting out of ads

Use the consent tools provided by the website or app you are visiting to refuse or withdraw consent;
Clear or block cookies in your browser settings (see our Cookie Policy);
Reset or limit your mobile advertising ID in your device settings;
Enable a Global Privacy Control (GPC) signal in your browser, which we treat as an opt-out request where required by law;
Email us to request an opt-out.

12. Children

The Services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under 16 (or under 13 in the United States). Partners must not send us traffic from sites or apps directed at children, and requests flagged under COPPA are not used for personalised advertising.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes will be highlighted on this page or communicated to partners directly.

14. Contact

NEMESIDA SMART DATA LTD (operator of RTBNest)
Registration number HE 465547
Republic of Cyprus
Email: support@rtbnest.com
Website: rtbnest.com