Legal
How Missena collects, uses and shares personal data when advertising is requested, selected or delivered through our technology on our publisher partners' properties.
Effective date: 14/07/2026 · Version 2.1
This Privacy Policy explains how MISSENA, a société par actions simplifiée (SAS) with a share capital of €149,189, registered with the Créteil Trade and Companies Registry (RCS Créteil) under number 824 333 421, whose registered office is located at 14 avenue du Général de Gaulle, 94160 Saint-Mandé, France ("Missena", "we", "us", "our") collects, uses and discloses personal data when an advertisement is requested, selected or delivered through our advertising technology (our "Services") on the websites and applications of our publisher partners ("Publisher Properties").
This policy covers the data we process as part of our advertising Services — i.e. when you browse a Publisher Property that uses Missena to monetise its inventory. It also describes, in Section 13, how we handle data of visitors to missena.com and of our business contacts.
This policy does not govern how our publisher and advertiser partners process data through their own properties; those activities are governed by their respective privacy policies.
For the processing of end-user personal data carried out through the Services, Missena acts as a joint controller together with the publisher operating the Publisher Property, within the meaning of Article 26 GDPR.
In practice:
A summary of the essence of the arrangement between joint controllers is available on request at the contact details in Section 15.
We do not process data that directly identifies you (such as your name, postal address or email). We process technical identifiers and signals that, alone or combined, allow your browser or device to be recognised. Under the GDPR — and consistent with the position confirmed by the French Conseil d'État in 2026 regarding pseudonymous advertising identifiers — these identifiers are treated as personal data.
We may process:
We do not process special categories of data within the meaning of Article 9 GDPR.
We process the data described above for the following purposes. Because we rely on the publisher's CMP and the IAB Europe Transparency & Consent Framework (see Section 6), consent is the primary legal basis; we rely on legitimate interest only for the limited operational purposes indicated.
| Purpose | TCF reference | Legal basis |
|---|---|---|
| Store and/or access information on your device | Purpose 1 | Consent |
| Select, deliver and report on basic (non-personalised) ads | Purposes 2 & 7 | Consent |
| Build a profile and select personalised ads | Purposes 3 & 4 | Consent |
| Measure ad performance and audience | Purposes 7 & 9 | Consent |
| Develop and improve our Services | Purpose 10 | Consent |
| Technically deliver ads | Special Purpose 2 | Legitimate interest |
| Ensure security, prevent fraud and debug | Special Purpose 1 | Legitimate interest |
Missena participates in the IAB Europe Transparency & Consent Framework (TCF) and complies with its Policies and Specifications. Our IAB Europe vendor ID is 687.
Within the EEA and the UK, we rely entirely on the consent (and, where applicable, the legitimate-interest signals) collected by the publisher through its CMP and transmitted to us as a TCF consent string. We do not place or read information on your device, nor process your data for consent-based purposes, in the absence of a valid signal authorising us to do so. You can change your choices at any time using the CMP on the relevant Publisher Property.
To run the real-time auction and deliver advertising, we may share the data described in Section 3 with the following categories of recipients:
A current list of the specific partners and sub-processors we work with is available on request at the contact details in Section 15.
We process data on infrastructure located in the region of the corresponding traffic:
Personal data of users in the EEA is therefore processed on EEA-based infrastructure. However, when a bid request is broadcast to demand partners, recipients may be located outside the EEA. Where such a transfer occurs, it is governed by an appropriate safeguard under Chapter V GDPR, in particular the European Commission's Standard Contractual Clauses. A copy of the relevant safeguards is available on request.
We retain the personal data processed through the Services for a maximum of 360 days, after which it is deleted or anonymised, unless a longer period is required to comply with a legal obligation or to establish, exercise or defend legal claims.
We implement appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, alteration and disclosure, and we require our sub-processors to provide an equivalent level of protection.
Subject to the conditions set out in the GDPR, you have the right to access your data, to rectification, to erasure, to restriction of processing, to object to processing, to data portability, and to withdraw your consent at any time (without affecting processing already carried out).
How to identify your data. Because we only hold pseudonymous technical identifiers and cannot otherwise identify you, we will generally need you to provide the relevant identifier (for example a screenshot of your advertising ID, or information about your device or browser) so that we can locate the data relating to you. This also protects you against disclosing data to the wrong person.
To exercise your rights, or for any question about this policy, contact our Data Protection Officer (Section 15). You also have the right to lodge a complaint with your supervisory authority — in France, the Commission Nationale de l'Informatique et des Libertés (CNIL).
To opt out of interest-based advertising more broadly, you can also use youronlinechoices.eu (EDAA).
Our Services are not directed at children, and we do not knowingly process the data of persons under the age of 16.
When you visit missena.com, fill in a contact form, or interact with us as a (prospective) publisher, advertiser or partner, we process the data you provide (such as name, business email, company and role) to respond to your request, manage the relationship, and send you business communications.
The rights described in Section 11 apply equally to this data, and here we can act on your request directly using your contact details.
We may update this policy to reflect changes in our practices or in applicable law. The effective date above indicates the latest version, and we encourage you to review it periodically.
For any question about this policy or to exercise your rights, you can contact our outsourced Data Protection Officer, Dipeeo:
You may also write to us at: MISSENA — 14 avenue du Général de Gaulle, 94160 Saint-Mandé, France.