Privacy Policy
Last updated: 1 January 2026
1. Who we are
Harrenmedia is a programmatic advertising company. We connect publishers who have advertising inventory with advertisers and demand partners who buy it.
| Legal entity | Naspek International S.A. |
| VAT / RUT | 21 664 773 0013 |
| Registered address | Dr. Luis Bonavita 1294, suite 123, 11300 Montevideo, Uruguay |
Harrenmedia is a trading name of Naspek International S.A., a company incorporated in Uruguay. This policy is issued under Uruguayan Law No. 18.331 on the Protection of Personal Data, and reflects the requirements of the EU General Data Protection Regulation (GDPR) where that regulation applies to our processing.
For any question about this policy or about your personal data, write to privacy@harrenmedia.com.
2. What this policy covers
This policy covers two distinct activities. They involve different data and different responsibilities, and we describe them separately.
- This website — what happens when you visit harrenmedia.com.
- Our advertising services — what happens when an advertisement is served through our platform on a publisher's website or app.
3. This website
We do not track visitors to this website. There is no analytics tool, no advertising pixel, no social media tracker and no third-party script running on these pages. We do not build a profile of you for visiting us.
3.1 What we store on your device
One item only: your language preference (English or Spanish), stored in your browser's local storage so the site opens in the language you chose. It contains no identifier, it is not sent to any server, and you can clear it from your browser at any time.
3.2 If you use the contact form
When you submit the contact form we receive the information you type: name, company, work email, the category you select, and your message.
- Why: to answer your enquiry and, where relevant, to evaluate a possible business relationship.
- Legal basis: your consent when you submit the form, and our legitimate interest in responding to business enquiries.
- Who else sees it: the form is delivered through Web3Forms, a service that receives the submission and forwards it to us by email.
3.3 Server logs and security
Our website is served through Cloudflare, which acts as a content delivery network and security layer. Cloudflare processes technical data — including your IP address — to deliver the site and to protect it against attacks. This processing is necessary for the site to work and for our legitimate interest in keeping it secure.
4. Our advertising services
This section describes what happens when an ad is served through our platform on a publisher's website or app. It does not describe this website.
4.1 What data is processed
- Device and connection data: IP address (often truncated or generalised), browser type and version, operating system, device type, screen size, language settings
- Advertising identifiers: cookie identifiers, mobile advertising IDs (IDFA on Apple devices, GAID on Android), or equivalent identifiers used for connected TV
- Approximate location: country, region or city, derived from the IP address. We do not process precise GPS location.
- Contextual data: the page or app where the ad opportunity occurs, the ad format and placement, and the time of the request
- Advertising events: whether an ad was shown, viewed or clicked
- Consent and preference signals: any consent string or opt-out signal transmitted with the request
We do not knowingly process special categories of personal data as defined by Article 9 of the GDPR. We do not ask for, and do not want, directly identifying data such as your name, postal address or telephone number in the advertising flow.
4.2 Why it is processed
- To decide whether to bid on an advertising opportunity and at what price
- To select and deliver an appropriate advertisement
- To limit how often the same person sees the same advertisement
- To measure whether advertisements were delivered and viewed correctly
- To detect and prevent invalid traffic, fraud and abuse
- To produce aggregated reporting for publishers and advertisers
4.3 Legal basis
- Consent, obtained by the publisher on whose property the advertisement is served, before any identifier is read or written for advertising purposes. Publishers who work with us are contractually required to obtain valid consent and to transmit the corresponding signal with each request.
- Legitimate interest, for security, fraud prevention, and aggregated measurement that does not involve profiling.
Advertising identifiers are used for personalised advertising only where a valid consent signal permits it. Where no such signal accompanies a request, the request is handled without personalisation based on advertising identifiers.
4.4 Our role
For the processing described in this section, Harrenmedia acts as an independent data controller. Publishers and demand partners act as separate controllers for their own processing.
5. Who we share data with
- Demand partners — SSPs, DSPs and advertisers who bid on advertising opportunities.
- Google, as a Google Certified Publishing Partner. When we onboard a publisher into Google Ad Manager under our network, Google processes data according to its own policies: policies.google.com/privacy
- Service providers who host our infrastructure or provide security, under contract and only on our instructions.
- Authorities, where required by a valid legal obligation.
We do not sell personal data in the ordinary sense of the term. Note that under the California Consumer Privacy Act (CCPA/CPRA), some transfers of data for advertising purposes may fall within the statutory definition of a "sale" or "share". California residents may exercise their rights as described in section 7.
6. International transfers
Naspek International S.A. is established in Uruguay. Our partners operate worldwide, which means personal data may be transferred outside the country where it was collected.
- Uruguay holds an adequacy decision from the European Commission (Decision 2012/484/EU). Transfers of personal data from the European Economic Area to Uruguay therefore do not require additional safeguards.
- For transfers to countries without an adequacy decision, we rely on Standard Contractual Clauses approved by the European Commission.
7. Your rights
Depending on where you live, you have some or all of the following rights over your personal data: access, rectification, erasure, restriction, objection, portability, the right to withdraw consent at any time, and — for California residents — the right to opt out of sale or sharing.
To exercise any of these, write to privacy@harrenmedia.com. We will respond within the period required by applicable law — one month under the GDPR, extendable by two further months for complex requests.
A practical note on advertising data. The data processed through our advertising platform is tied to a device or cookie identifier, not to your name. To act on a request we need that identifier — otherwise we have no way of locating your data. Explaining that in your request helps us respond.
To stop advertising personalisation across many companies at once, these industry tools are usually more effective than contacting each company individually:
- Europe: youronlinechoices.eu
- United States: optout.aboutads.info and optout.networkadvertising.org
- Mobile devices: the "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalisation" (Android) setting on your device
You also have the right to complain to a data protection authority. Our supervisory authority is the Unidad Reguladora y de Control de Datos Personales (URCDP) of Uruguay: gub.uy/urcdp. If you are in the European Economic Area, you may also complain to the supervisory authority of your own country.
8. Cookies
This website does not use cookies. It stores one non-identifying item in local storage — your language preference — as described in section 3.1.
Cookies and similar identifiers are used in the delivery of advertising on publishers' properties, as described in section 4. Consent for those is requested by the publisher on whose site or app the advertisement appears, through their own consent notice.
9. Children
Our services are not directed at children. We do not knowingly process data of anyone under 16, and we require publishers to identify inventory directed at children so that it is treated without advertising identifiers. If you believe we hold data about a child, write to us and we will delete it.
10. Changes to this policy
We may update this policy. The date at the top always reflects the current version. Substantial changes will be announced on this page before they take effect.
11. Contact
privacy@harrenmedia.com
Naspek International S.A. — Dr. Luis Bonavita 1294, suite 123, 11300 Montevideo, Uruguay