Privacy Policy

1. Data Controller Information

The entity responsible for processing personal and operational data under this Privacy Policy — the data controller — is:

Admixer EU GmbH
Graf-Luckner-Höhe 37, 45239 Essen, Nordrhein-Westfalen, Germany
Managing Director: Oleksii Boltivets
Commercial register: Amtsgericht Essen, HRB 32340 · VAT identification number: DE313546322
Website: https://admixer.net
Support: ask@screenroll.live
Privacy requests: privacy@admixer.net
Data Protection Officer: dpo@admixer.net

Where ScreenRoll processes personal data on a Publisher's behalf — the people a Publisher invites to its account, for instance — it does so as a processor under the Publisher's instructions, as clause 10 of the Terms of Service & Public Offer Agreement sets out. A data processing agreement under Article 28 GDPR is available on request.

2. Scope of Data Collection

We process data collected directly from Publishers and automated telemetry collected from connected ScreenRoll media players:

A. Publisher Account & Registration Information

• First and Last Name of authorized company representative;
• Work Email Address (used for authentication and notifications);
• Company / Organization Name, Business Category, and Country of Operation;
• Encrypted Account Credentials (passwords hashed using BCrypt);
• Billing and Payment Details (for active subscription invoices).

B. Display Screen & Telemetry Data

• Screen Identifiers, Name, Resolution, Location Coordinates, and IP Addresses;
• Operating System Runtime data (Samsung Tizen, Windows, macOS, Android, Linux, or the television's browser at cms.screenroll.live/tv);
• Real-time Screen Status (Online/Offline heartbeats, error logs, player software version);
• Media Play Logs and Proof of Play audit records.

C. Programmatic VAST & Audience Metrics

• Aggregated Opportunity to See (OTS) audience estimation parameters per display venue;
• Real-Time Bidding (RTB) auction transaction logs and VAST ad request timestamps;
• Device telemetry necessary for programmatic impression reconciliation with Demand-Side Platforms (DSPs).

D. Website Analytics

This marketing website uses Google Analytics 4 (property G-6TH4GV96XH), provided by Google Ireland Limited, to understand which pages visitors read and which sources they arrive from. Google Analytics sets first-party cookies and processes a truncated IP address; we do not use it to identify individual visitors, and we do not combine it with your ScreenRoll account data. Google may transfer this data outside the EEA under its Standard Contractual Clauses.

You can prevent this collection by installing the Google Analytics opt-out browser add-on, or by using your browser's tracking-protection settings.

The ScreenRoll dashboard at cms.screenroll.live uses a separate Google Analytics 4 property (G-ER3ZWKQBS4) to measure how the application is used. Analytics are not loaded on player routes — the pages that run on your displays — so your screens are never counted as visitors and screen access links are never transmitted to Google.

3. Legal Basis for Processing

We process data under the following GDPR legal bases:

• Contractual Performance (Art. 6(1)(b) GDPR): To provision your CMS account, deploy schedules, and execute programmatic ad auctions.
• Legitimate Interests (Art. 6(1)(f) GDPR): To monitor network security, prevent fraudulent ad impressions, and measure aggregate website usage.
• Legal Obligations (Art. 6(1)(c) GDPR): For financial record-keeping, tax invoices, and accounting audits.

4. Third-Party Sharing & Programmatic Partners

ScreenRoll integrates with Admixer's global ad exchange and trusted DSP partners for programmatic ad monetization. In programmatic auctions, non-personal, aggregated screen venue parameters (such as screen location, size, and OTS multipliers) are transmitted to demand partners to fulfill real-time bids. Personal account data is never exposed to DSP buyers.

5. Data Retention & Security

We enforce enterprise TLS 1.3 encryption in transit and AES-256 encryption at rest. Proof of Play logs and transaction statements are retained for 7 years to satisfy audit requirements. Active Publisher account telemetry is maintained for the duration of the subscription.

6. Publisher & User Rights

Under GDPR and applicable privacy regulations, users have the right to access, rectify, export, or request deletion of their personal data. To exercise these rights, submit a written request to privacy@admixer.net.

7. Cookies, Local Storage & Analytics

The marketing site (screenroll.live) sets no analytics cookies without your consent. Google Analytics 4 runs in Consent Mode: until you press "Accept analytics" in the banner, it stores nothing on your device and receives only cookieless, aggregated pings. Your choice itself is kept in your browser's local storage (sr-consent) — that is strictly necessary and carries no personal data. You can change your mind by clearing site data in your browser.

The CMS (cms.screenroll.live) uses no analytics and no advertising trackers at all. It keeps only what a signed-in session strictly requires, in local storage: your session token, a device-trust token for two-step verification (48-hour lifetime), and a cached copy of your own profile. None of it is readable by third parties.

8. Account Security Data

To protect accounts that control physical screens in public places, we process, on the basis of our legitimate interest in security and fraud prevention (Art. 6(1)(f) GDPR):

• Sign-in verification: one-time codes sent to your email, stored only as cryptographic hashes and expired within minutes to hours; device-trust tokens (hashed, 48-hour lifetime); the time, IP address, browser and platform of sign-in attempts — shown back to you in the code email so you can recognise a sign-in that is not yours.
• Registration integrity: when an account is created through the public form we record the request's IP address, browser identification, language preference, referring page and reported timezone. This exists solely to distinguish genuine registrations from automated abuse, is visible only to platform administrators, and is never used for marketing or profiling.
• Activity log: administrative actions inside the CMS (who changed what, when, from which IP) — the audit trail your own organisation is entitled to.

9. Processors & Sub-processors

We share personal data only with processors needed to run the service, under GDPR Art. 28 terms:

• Microsoft Azure (European Union regions) — hosting, databases and media storage.
• Resend — transactional email delivery: sign-in codes, password resets, invitations, invoices.
• Google Analytics 4 — statistics for this marketing website only, only with your consent, with IP truncation. It is not used inside the dashboard.
• OpenStreetMap Foundation (map tiles and Nominatim geocoding) — when a publisher opens the map view or searches an address inside the dashboard, their browser requests map tiles and geocoding directly from OpenStreetMap's servers, which therefore see the browser's IP address and the searched text. Our own servers also use Nominatim to complete the addresses of locations; that request carries the address, not a person. See the OSMF privacy policy.
• Open-Meteo — weather widgets. Our servers request the forecast for the place a publisher chose, or for the coordinates of the location a screen stands in, and pass it to the screen with its schedule. The screen itself contacts nobody; no account, key, identifier or device address of yours is sent. See the Open-Meteo terms.
• News sites — news widgets. Our servers read the feed a publisher chose and pass the stories to the screen. The pictures in those stories stay on the news site's own servers: a screen showing a picture fetches it from there, so that site sees the screen's IP address, as any website does. A publisher can switch pictures off.

Payments. Invoices are paid by bank transfer, and we hold the invoicing details a Publisher gives us for that purpose. No card payments are taken at present and no card details pass through ScreenRoll. Should card payment be introduced, it would be handled by a payment provider in that provider's own interface, and this policy updated first.

Programmatic advertising partners receive what an auction needs — the screen's venue type, audience estimate, size and location — and never the personal data of a Publisher's users; section 4 describes this.

10. Retention

Sign-in codes: minutes to 24 hours; device-trust tokens: 48 hours; both hashed. Password-reset links: 1 hour, single use. Registration-integrity metadata and activity logs: for the life of the account, then deleted with it. Billing records and invoices: as long as tax law requires. Proof-of-play and payout statements: 7 years, for audit.

When an agreement ends, the Publisher may export its media and reporting data for 30 days, as clause 8.4 of the Terms provides; after that the account and its content may be deleted or anonymised, subject to the statutory periods above.

11. Policy Updates

Admixer reserves the right to update this Privacy Policy. Substantial changes will be communicated via email or dashboard notification 14 days prior to taking effect.