Effective Date: April 23, 2019

Rubicon Project is committed to protecting your privacy.  This Privacy Shield Notice sets out the privacy principles we follow with respect to transfers of personal information from the European Economic Area (“EEA”), UK and Switzerland to the United States, including personal information we receive from individuals who visit our web and mobile sites, who interact with our Digital Media Properties (as defined here), and who otherwise communicate or interact with us.

The Rubicon Project, Inc. and its US subsidiaries, Rubicon Project Hopper, Inc. and Rubicon Project Apex, Inc., (“we“, “us“, our“) commit to comply with the EU-US and Swiss-US Privacy Shield Frameworks as set forth by the US Department of Commerce regarding the collection, use and retention of personal information from the EU, UK and Switzerland.  They have certified to the US Department of Commerce that they adhere to the Privacy Shield Principles in respect of all personal information received from the EEA, UK and Switzerland in reliance on the Shield.

The Federal Trade Commission has jurisdiction over our compliance with the Privacy Shield.

For more information about the Privacy Shield generally and to view our certification online, please visit https://www.privacyshield.gov.

If there is any conflict between the terms of this Privacy Shield Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern.

Types of personal information we collect and use

The types of personal information we may receive in the United States, as well as the purposes for which we collect and use it, are set out in our Website Privacy Policy (which concerns the collection and processing of personal information through our websites) and our Advertising Technology Privacy Policy (which concerns the collection and processing of personal information when you use or otherwise interact with Digital Media Properties that use our ad technology).

Your choices

We give you an opportunity to opt out where personal information we control about you is to be disclosed to an independent third party, or is to be used for a purpose that is materially different from those set out in our privacy policies. If you otherwise wish to limit the use or disclosure of your personal information, please write to us at the contact details set out below.

For further information on how to opt out of targeted advertising using our technologies, see the section entitled “Your Opt-Out Choices” in our Advertising Technology Privacy Policy.

Transfers to third parties

Information about the types of third parties to which we disclose personal information and the purposes for which we do so is described in our Website Privacy Policy and Advertising Technology Privacy Policy respectively.

If we have received your personal information in the United States and subsequently transfer that information to a third party acting as an agent, and such third party agent processes your personal information in a manner inconsistent with the Privacy Shield Principles, we will remain responsible unless we can prove we are not responsible for the event giving rise to the damage.

Disclosures for national security or law enforcement

Please note that under certain circumstances, we may be required to disclose your personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Your rights

You may have the right to access personal information that we hold about you and request that we correct, amend, or delete it if it is inaccurate or processed in violation of the Privacy Shield.

If you would like to exercise these rights, please write to us at the contact details provided below or see our Data Subject Rights policy for instructions on how to do so: http://rubiconproject.com/terms-conditions/subject-access-request-policy/.  We may request specific information from you to confirm your identity and we will respond to your request in accordance with the Privacy Shield Principles and applicable data protection laws.

You may also opt-out of receiving marketing communications from Rubicon Project by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you.

To find out more about your data protection rights under European law, please see the section entitled “European Data Subject Rights” in our Website Privacy Policy and Advertising Technology Privacy Policy.

Questions or complaints

In compliance with the Privacy Shield Principles, we commit to resolve complaints about our collection or use of your personal information. EEA, UK and Swiss individuals with inquiries or complaints regarding our Privacy Shield practices should first contact us by email at privacy@rubiconproject.com or in writing to:

The Rubicon Project, Inc.
Attn: Privacy Team
12181 Bluff Creek Drive, 4th Floor
Playa Vista, CA 90094


We will investigate and attempt to resolve any Shield-related complaints or concerns within forty-five (45) days of receipt.

If you have an unresolved Privacy Shield complaint or concern that we have not addressed satisfactorily or in a timely manner, you may contact the International Centre for Dispute Resolution / American Arbitration Association (“ICDR/AAA“), our US based third party dispute resolution provider (free of charge). To find out more about ICDR/AAA or to file a complaint, please go to http://go.adr.org/privacyshield.html.

You may also have the option to select binding arbitration for the resolution of your complaint under certain circumstances.  To find out more about the Privacy Shield’s binding arbitration scheme please see https://www.privacyshield.gov/article?id=ANNEX-I-introduction.

Changes to this Notice

We reserve the right to amend this Notice from time to time consistent with the Privacy Shield’s, requirements.