Privacy policy

Version 2.0 | Last Updated: Apr 2, 2026

This Privacy Notice describes how SeenThis, as controller, within the meaning of the General Data Protection Regulation ("GDPR"), processes personal data.

Who are we and how do we collect data?

Seenthis AB, Reg. No. 556920-5452, Hammarby Allé 14, SE 120 32 Stockholm, Sweden ("SeenThis", "we" or "us") is a technology company.

We provide advertisers, agencies, publishers, and other businesses ("Customers") with proprietary adaptive streaming technology for the delivery of video advertising across the open web.

Individuals who are served advertising powered by our technology ("Users") are visitors to websites on which our Customers' advertisements are displayed.

Customers and Users provide us with most of the personal data we receive.

SeenThis and its internal group structure

SeenThis Group consists of several companies, located in Europe, North America and Asia. In order to provide certain services, we sometimes need to share personal data with other companies in the Group. When we share personal data within the group, we have entered into an internal arrangement to regulate the processing.

SeenThis and a data processor

In certain circumstances, SeenThis acts as a data processor (or sub-processor) on behalf of our Customers, who act as data controllers for the personal data they provide to us or that we collect on their behalf. When our Customers use our services, they may provide us with personal data or instruct us to collect personal data on their behalf. In these situations, our Customers determine the purposes and means of processing, and SeenThis processes the data solely on their instructions.

If you are an individual whose personal data is processed through our Customer's use of our services, please note that our Customer is the data controller responsible for that personal data. Our Customer determines how your personal data is collected, used, and protected.

If you have any questions, requests, would like to exercise your rights, or have complaints regarding your personal data you shall contact that Customer directly, as they are the data controller. Our Customer is the first point of contact for all data subject requests. If you are unsure which Customer to contact, please email us at contact@seenthis.se and we will direct you appropriately.

How do we process data

Data related to Users


Technical Delivery of Content

Purpose: To technically deliver content (videos/images) via browser request. Data: IP address, user agent request header. Legal Basis: Legitimate interest. Retention: Not stored or logged after delivery. Third Country Transfer: If you are located outside of the EU, your IP address may be processed outside of the EU/EES due to our CDN provider. Third Party Transfer: No transfer.

Data related to Customers

Use of SeenThis Platform(s)

Purpose: To provide and manage our Platform(s). Data: Customer contact and account details (e.g., name, email, job title, company, billing address). Legal Basis: Legitimate interest. Retention: Retained for the duration of the commercial relationship and for a period thereafter as required by law for legal, tax, and audit compliance. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Manage the customer relationship


Purpose: To provide and manage our commercial relationship, e.g. day-to-day contact regarding our services, customer support, sending service information, and updates. Data: Customer contact and account details (e.g., name, email, job title, company, billing address). Legal Basis: Legitimate interest. Retention: Retained for the duration of the commercial relationship and for a period thereafter as required by law for legal, tax, and audit compliance, in Sweden 7 years. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Marketing Communications

Purpose: To provide you with marketing material, e.g. sending service information, updates, newsletters. Data: Customer contact and account details (e.g., name, email, job title, company, billing address). Legal Basis: Consent. Retention: Retained until you retract your consent. You can opt out from us sending you newsletters at any time. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Payment processing

Purpose: To facilitate and complete financial transactions for the purchase of our services, including issuing invoices, managing recurring payments, and ensuring the accuracy and security of billing operations. Data: Customer contact and account details (e.g., name, email, job title, company, billing address). Legal Basis: Legitimate interest (processing payments) and legal obligation (archival). Retention: Retained for the duration of the commercial relationship and for a period thereafter as required by law for legal, tax, and audit compliance. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Events

Purpose: To organize and manage events (such as webinars, conferences, or workshops) for Customers and prospective Customers, including processing registrations, sending event-related communications, and facilitating networking opportunities. Data: Name, email, job title, company name, registration status, attendance status, event preferences (e.g., dietary, accessibility), correspondence related to event communications, photos and video. Legal Basis: Legitimate interest (organizing the event) and consent (if you choose to share dietary restrictions with us). Retention: Retained for the duration of the commercial relationship and for a period thereafter as required by law for legal, tax, and audit compliance. You can opt-out to us sending you newsletters at any time. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Data related to SeenThis website visitors

Contact Form

Purpose: To respond to your queries and information requests submitted via our contact form. Data: Contact details you provide (e.g., name, email address, phone number) and any personal data contained in or connected to your message/inquiry. Legal Basis: Legitimate interests. Retention: Retained for as long as necessary to respond to your inquiry. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Marketing Communications


Purpose: To provide you with marketing material, e.g. sending service information, updates, newsletters. Data: Contact information (e.g., name, email, job title, company, billing address). Legal Basis: Consent. Retention: Retained until you retract your consent. You can opt-out to us sending you newsletters at any time. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Website Security and Fraud Prevention

Purpose: To prevent fraudulent activity and misuse of our website through Google's reCAPTCHA service. Data: Device information (e.g., IP address, browser type, device identifiers) collected by Google reCAPTCHA. Legal Basis: Legitimate interests. Retention: Processed by Google in accordance with Google's retention policies as specified in their privacy policy. Third Country Transfer: Google may transfer and process your data outside the European Economic Area, including to the United States. Such transfers are subject to appropriate safeguards in accordance with Google's terms of service and privacy policy. Third Party Transfer: Google receives and processes device information through the reCAPTCHA service in accordance with its terms of service and privacy policy (links are available to you before you contact us via our website).

Website Optimization

Purpose: To help us manage the functionality of our website and understand a visitor's use of our website. Data: Website usage data and analytics information (as detailed in our Cookie Policy). Legal Basis: Legitimate Interest. Retention: As specified in our Cookie Policy. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Platform integration


Technical Delivery of Content to Users

Purpose: To technically deliver content (videos/images) via browser request. Data: IP address, user agent request header. Legal Basis: Legitimate interest. Retention: Not stored or logged after delivery. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Customer Relationship Management and Service Provision

Purpose: To manage customer relationships, provide services and send information about product and service updates. Data: Contact details (name, email, phone number), job title, UserID, identifiers, payment information. Legal Basis: Legitimate interest. Retention: As long as necessary for contract performance and as required by financial and tax regulations. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Payment Processing

Purpose: To process payments. Data: Contact information, payment information. Legal Basis: Legitimate interest and legal obligation. Retention: As required by financial and tax regulations. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Platform Integration, Marketing API and OAuth (SeenThis Studio and other integrations)

Purpose and use: We need to process your personal data to be able to provide the service Platform Integration, including identity-based services like Marketing API and OAuth. Data: Name, email, ID, device information such as IP address, language settings, browser settings, time zone, operating system, Client ID or similar information about your device, and cookie settings. Legal basis: Legitimate interest. Retention: As long as necessary for contract performance. Third Country Transfer / Third Party Transfer: It is your choice to use the OAuth login option. By doing so, certain data will be shared with Meta Platforms Ireland Ltd. for authentication and integration purposes. If you choose to use Meta Marketing API and OAuth, we will share your user ID and authentication data with Meta Platforms Ireland Ltd via the Meta Marketing API and OAuth for authentication and service activation purposes. These third parties process data according to their own privacy policies.

Use of OAuth login is entirely optional. If you choose to log in using Meta OAuth, your personal data (e.g., user ID and authentication data) will be shared with Meta Platforms Ireland Ltd. for the purpose of authentication and enabling the platform integration. Meta processes this data as an independent data controller, in accordance with its own privacy policy.

If you use the Meta Marketing API, technical and event data may also be shared with Meta to support campaign functionality and analytics. Meta Platforms Ireland Ltd. may transfer this data to Meta Platforms, Inc. in the United States, where it is protected under the EU-U.S. Data Privacy Framework or other appropriate safeguards (e.g., Standard Contractual Clauses).

Meta Platform Data & Security

Purpose: To enable secure authentication and interaction with Meta's Marketing API and OAuth, and to collect technical and event data necessary for campaign management, analytics, and service delivery. Data: We use Meta Marketing API and OAuth to collect:

  • Automatically: IP, browser, OS, device ID, usage logs, cookies;

  • Meta-specific: event data for analytics, and campaign measurement. Legal Basis: Legitimate interest. Retention: Personal data is retained only as long as necessary to provide the integration and fulfill related contractual or legal obligations. Session-based authentication data is not stored beyond the duration of the session unless otherwise required for operational or security purposes. Third Country Transfer / Third Party Transfer: We may share authentication or access data with Meta Platforms via the Meta Marketing API and OAuth if you explicitly choose to use this integration.

When you use the Meta OAuth login to access our platform, your data is processed by Meta Platforms Ireland Ltd., which is located in the European Union, and acts as an independent controller. Meta Ireland may, in turn, transfer personal data to Meta Platforms, Inc. in the United States for technical or operational reasons.

This data may also be processed by Meta under its own Terms and Privacy Policy.

Meta implements appropriate safeguards for these transfers, including the use of the EU Standard Contractual Clauses and/or reliance on the EU-U.S. Data Privacy Framework, as applicable.

Recruitment

Application Process

Purpose: To manage and administer our recruitment process, including evaluating your application, assessing your suitability for the position(s) you have applied for, conducting interviews and assessments, verifying your references and qualifications, communicating with you throughout the recruitment process, and making hiring decisions. Data: Contact details, CV/resume, application materials, qualifications and employment history, references, interview notes and assessments, correspondence related to your application and other personal data you share with us. Legal Basis: Legitimate Interest. Retention: For as long as necessary to fulfil the purpose. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Subscription

Purpose: To retain your contact details and CV/resume in our talent pool so that we may contact you about future job opportunities that match your profile and qualifications, subject to your separate consent. Data: Contact details, CV/resume, qualifications and employment history and references. Legal Basis: Consent. Retention: Until you revoke your consent. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

Talent search

Purpose: To identify and evaluate potential candidates for employment through our recruitment service, whether you provide your information directly, connect via third-party platforms (Facebook, LinkedIn), communicate through our website chat, are sourced from public sources and professional networks, or are recommended by our employees. Data: Contact details, qualifications and employment history, correspondence related to your application and other personal data you share with us or has been made publicly available. Legal Basis: Legitimate Interest. Retention: For as long as necessary to fulfil the purpose. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: No transfer.

When required by law

Purpose: In certain cases, we process your personal data when we have a legal obligation to do so, for example due to accounting requirements or data protection regulation. Data: We may then need to process information about you such as name, contact details, or other necessary information. Legal basis: Legal obligation. Retention: Data covered by accounting legislation will be retained for 7 years. Otherwise, we retain the data for as long as necessary to fulfill the purpose or as long as required by law. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: We may transfer your data to local authorities as required by local regulations.

When we handle legal requests and disputes

Purpose: In certain cases, we process your personal data in order to process a legal request or dispute. Data: We may then need to process information about you such as name, contact details, or other necessary information relating to the legal case. Legal basis: Legitimate interest. Retention: We retain the data for as long as necessary to fulfill the purpose or as long as required by law. Third Country Transfer: If you are located outside of the EU/EES, your data may be processed outside of the EU/EES. Third Party Transfer: We may transfer your data to local authorities.

Who has access to personal data?

SeenThis may receive and process your personal data for the purposes described above. Depending on the categories and purposes of receiving and processing personal data, internal departments within SeenThis may process your personal data on a need to know basis. For example, our sales department may have access to personal data relating to Customers.

In our provision of services we use partners and suppliers. We only share data to the extent needed and always protected by data transfer agreements or data processing agreements, or other valid mechanisms as applicable, containing reasonable and necessary measures to ensure an adequate level of data protection in accordance with applicable law.

Third parties may, as processors or sub-processors, receive or process personal data based on our instructions, such as hosting partners (used for maximum quality, security and performance of our services), providers to support our business operations (e.g. customer relationship management, IT support, analytics support and recruitment management), or consultants.

In addition, we may transfer, in compliance with applicable data protection law, personal data to law enforcement agencies, governmental authorities, judicial authorities, auditors or legal counsel. In case of a corporate merger or acquisition, personal data may be accessed to the third parties involved in the merger or acquisition.

Further, we may share personal data with third party analytics and ad service providers (please find more information in our Cookie Policy).

Export of data from the EU/EEA to other countries

The personal data that we receive may be transferred to and processed by recipients that are located inside or outside the EU/EEA. We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we will base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority, together with binding and enforceable commitments of the recipient, or approved certification mechanisms together with binding and enforceable commitments of the recipient.

Your rights as a data subject

The following rights apply when SeenThis acts as a data controller for your personal data. If SeenThis is processing your data on behalf of one of our Customers (as a processor), please refer to the 'SeenThis as a data processor' section above.

Your rights:

  • Right to have your personal data deleted ("right to be forgotten"), under certain conditions;

  • Right to be informed;

  • Right to data access ("data extract");

  • Right to rectification;

  • Right to restrict processing, under certain conditions;

  • Right to data portability;

  • Right to object against our processing, under certain conditions;

  • Right to object to an automated decision that significantly affects you;

  • Right to withdraw your consent (where relevant); and/or

  • Right to lodge a complaint.

If you make a request, we have one month to respond to you. If you would like to get in touch to exercise your rights, or have further questions on how we process personal data, the easiest way is to email us at contact@seenthis.se.

If you would like to lodge a complaint with the Swedish Authority for Privacy Protection, you can find their details at https://www.imy.se/en/about-us/contact-us/. You may also lodge a complaint to a local supervisory authority in other applicable jurisdictions.

US/California

If you reside in California, you have the right to:

  • Know what categories and specific pieces of personal data we collect.

  • Request deletion of your personal data.

  • Opt-out of the sale or sharing of your data (we do not sell personal data).

  • Non-discrimination for exercising privacy rights.

To exercise these rights, email us at contact@seenthis.se and specify you are a California resident.

How we use cookies and other tracking technologies

Please find information in our Cookie Notice: https://seenthis.co/cookie-policy/

IAB

SeenThis participates in the IAB Europe Transparency & Consent Framework (iab.com) and complies with its specifications and policies.

SeenThis contact information

SeenThis AB is registered with the Swedish Companies Registrations Office, with company registration number 556920-5452, and with registered office at Hammarby Allé 14, SE 120 32 Stockholm, Sweden. SeenThis has a Data Protection Officer. You can reach us at contact@seenthis.se. Please specify in the subject line in case you specifically wish to contact the Data Protection Officer.

Visit seenthis.co for more information about us.

Changes to our privacy notice

We keep this notice under regular review, and place any updates on this web page. This notice was last updated on April 2, 2026.