The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy in the European Union (EU) and the European Economic Area (EEA). It also addresses the transfer of personal data outside the EU and EEA areas. The GDPR's primary aim is to give individuals control over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. The products offered by ClickCease and its affiliates enable our clients to maintain their GDPR compliance. To learn how ClickCease complies with the GDPR see the information below.
None of the ClickCease products require access to information that directly identifies end-users accessing your site. ClickCease products collect and use the end user's IP address, which is considered personal data under the GDPR.
ClickCease is a processor under the GDPR, and a service provider under the CCPA. In its capacity as such ClickCease processes personal data it collects only as necessary to provide its services to the applicable ClickCease customer who authorized the collection of such data. ClickCease does not determine the purpose of processing and does not receive any consideration or thing of value from its customers in exchange for the data.
Personal Data Usage
ClickCease uses the IP address, together with other data points (which are not considered personal data), to determine whether a session is fraudulent, and once such determination is made, to block the user from further access to the customer's website. If a customer opts to use the product in order to track fraudulent ad serves for the purpose of reconciling ad spend, the data collected will be used for such purpose as well.
Third party services
ClickCease shares the data collected through its product with a limited number of third-party services providers as necessary for the operation of the product, namely our hosting provider. We also enable customers who wish to use the product in order to track fraudulent ad serves for the purpose of reconciling ad spend, to opt into sharing the data with applicable advertising partners for the purpose of such reconciliation.
Datastore and transfer
Personal data collected by the product is stored in Azure, currently in its facility in the US, under AZURE's Standard Contractual Clauses. ClickCease is in the process of setting up a second
Azure hosting facility within the EU, and this page will be updated upon such facility being
live. Personal data may also be accessed by ClickCease’s employees as necessary to provide the services. In such cases, the data will be accessed from ClickCease’s offices either in the EEA, or in Israel. Israel is subject to an adequacy decision by the European Commission.
Data subjects rights and freedoms
ClickCease implements the minimization principle, both in the data points it collects, and in its retention policies. Moreover, ClickCease products enable customers to fully and independently administer data subject requests and inquiries. ClickCease employs best industry-standard technical and organizational measures to ensure the safety and integrity of the personal data in its processing activities.