Affinity
GDPR evidence
A compliance training platform built for regulated industries.
No public evidenceAffinity and GDPR
CertReports found no public GDPR evidence for Affinity as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 21 Sep 2023
- Expires or valid through
- 19 Sep 2026
- Scope
- a. Affinity is an ad tech company that creates user engagement products (branding and performance) for digital media. Our customers primarily include brands (advertisers) and publishers globally. b. Our products are integrated with the brand/publisher’s website and apps. And processes the following type of data: i. ‘Online Identifiers’ for the end users of our customer’s platforms: 1. Device identifiers such as iOS devices’ Identifier for Advertising (IDFA) and iOS Identifier for vendors, Google Advertising ID (GAID), or Android ID for Android devices. This is optional, and publishers who do not want to share this can share an anonymised unique ID. 2. Location information: a. Country-level location information inferred from IP address. Country, state and city detected from IP address. 3. Other information such as Device type (desktop, tablet or mobile), Operating System, and Language settings on browser. ii. Other data from website visitors and our customers: 1. B2B product subscription /account creation data of our customers (Name, Official email, and phone). 2. B2B Contact Data from ‘Contact us’ forms on our websites. iii. HR data is not in the scope c. Personal data we process through our products is used for the following purposes: i. Displaying advertisements on the device. ii. Bidding to serve advertisements and to determine which ads are most effective. iii. Redirecting users (website visitors for our customers) to the original Advertiser / brand website for the ad campaigns. iv. Detecting and preventing fraud and fraudulent traffic or protecting our systems' security. v. Suggesting Advertisers / relevant brands to users based on a search input. vi. Analysing and providing our demand partners or advertisers with reports on the effectiveness of advertisements and campaigns. vii. Providing detailed reports to our publishers about their traffic performance. viii. Pushing the notifications based on consent to our publishers, such as browsers or devices. ix. Pushing the notifications based on consent when we act as publishers. x. Internal business reporting. d. Third parties with whom data may be shared: i. Aggregated data (No personal data) sharing with Publishers and Supply Partners, demand partners, marketing partners, and content providers. ii. Service Providers IT and related services such as cloud-based datacenters, analytics service providers; service providers for fraud detection, CRM, and email marketing service.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Affinity Global Inc: Active: UK Extension Certification, EU-US Certification | Live pagesha256 99678afd32 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Affinity GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the No-code and automation category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No No-code and automation vendor has GDPR evidence in the index yet.