Data Protection

The use of our website is generally possible without providing personal data. Insofar as personal data (e.g., name, address, or email addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis. These data will not be passed on to third parties without your express consent. We point out that data transmission over the Internet (e.g., when communicating via email) may have security gaps. Complete protection of data against access by third parties is not possible.

When you visit our website or use our services, the device with which you access the page automatically transmits server log files (connection data) to the provider of this page. The following log data is collected: Timestamp (date and time of the server request), browser type, browser version, operating system used, referrer URL, and hostname of the accessing computer. These data cannot be assigned to specific persons. A combination of these data with other data sources is not undertaken. We reserve the right to check these data retrospectively if we become aware of concrete indications of illegal use.

If you send us inquiries via the contact form, your data from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser. Pixels are small graphics on websites that enable log file recording and log file analysis, which are often used for statistical evaluations. Tag is a generic term for code sections that are integrated into websites and can be used for various functions, such as simple counts ('counting pixels') or complex data transmissions (e.g., 'conversion tag'). A script (also JavaScript) is analogous to a programming language capable of executing more complex instructions. We use the term 'cookies' as a common generic term, under which tags, pixels, and scripts also fall as alternative technical implementations. Most of the cookies we use are so-called 'session cookies'. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be restricted. The processes used by us can be divided into different categories. You can decide for yourself – with the exception of technically necessary cookies – which cookies you allow.

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our internet pages with your IP address. If you click the 'Recommend Button' of LinkedIn and are logged into your LinkedIn account, it is possible for LinkedIn to assign your visit to our website to you and your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data or its use by LinkedIn. For more information, please refer to the LinkedIn privacy policy.

We process the data you provide in the application process. This includes your name, address, telephone and mobile numbers, email addresses, and the personal data resulting from your application documents.

When you connect your Google Ads, Google DV360, or other Google advertising accounts to the taico platform, we access certain data from your Google accounts via the Google Ads API and related Google APIs. This section explains how we handle this data. Data We Access: We access advertising account data including campaign metrics (impressions, clicks, conversions, spend), campaign structure and settings, audience and targeting data, performance reports, and billing summaries. We only access data that is necessary to provide you with the taico Services you have subscribed to. How We Use This Data: Your Google user data is used solely for the purpose of providing the taico Services to you, including: • Displaying campaign performance in MediaReport dashboards • Conducting media transparency analysis in MediaCore • Generating planning insights and forecasting in MediaProphet • Facilitating automated media buying through MediaAviator • Creating cross-channel reporting and analytics We do not use your Google user data for any purpose other than providing and improving the Services you have subscribed to. How We Store This Data: Your Google user data is stored on secure, encrypted servers hosted on Google Cloud Platform infrastructure within the European Union (EU). We implement industry-standard security measures including encryption at rest and in transit, role-based access controls, and regular security audits. Only authorized taico personnel with a legitimate business need may access this data. How We Share This Data: We do not sell, rent, or share your raw Google user data with any third parties. Aggregated or anonymized insights may be displayed within the taico platform to authorized users on your account. We may share data with sub-processors strictly necessary for providing the Services, all of whom are bound by equivalent data protection obligations.

taico's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. This means that we: • Only use Google user data for the purposes described in this Privacy Policy and as necessary to provide the taico Services • Do not transfer Google user data to third parties unless necessary to provide the Services, required by law, or with your explicit consent • Do not use Google user data for serving advertisements • Do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or for our internal operations (and only when the data has been aggregated and anonymized)

Data Retention: We retain your Google user data and other personal data for the duration of your active service agreement with taico. Upon termination of your service agreement, we will retain your data for a maximum of 90 days to facilitate any transition needs, after which it will be permanently deleted from our active systems. Backup copies may be retained for up to an additional 30 days before being purged. Data Deletion Requests: You have the right to request deletion of your personal data at any time. To request data deletion, you may: • Contact us at [email protected] with the subject line 'Data Deletion Request' • Specify whether you wish to delete all data or specific categories of data We will process your deletion request within 30 days and confirm completion to you in writing. Please note that certain data may need to be retained to comply with legal obligations (e.g., tax records, contractual documentation). Account Termination: When your account is terminated — whether by you or by taico — the following process applies: • Immediately: Access to the platform is revoked • Within 30 days: All personal and Google user data is removed from active systems • Within 120 days: All data is purged from backup systems You may request a data export before termination by contacting [email protected].