Self-Certification application form

How to submit your self-certification

Submission of your self-certification of compliance to EDAA should be done by following the steps below:

Make sure you fulfil all the applicable criteria (according to your role in the market place)
Use the self-certification form below to submit your self-certification of compliance, or use the PDF version which is available for download here.

Once submitted, EDAA will directly receive your self-certification; you will also receive a copy of the submission as well as confirmation of receipt. If you do not receive this email, please contact us at info[at]edaa[dot]eu.

Note: Participating companies acting as Third Parties have to submit their self-certification to an independent certification of compliance, and it is expected that companies will do so within one month from submitting their self-certification. This independent certification can only be performed by the EDAA-approved Independent Certification Providers, and the final step of the certification is granting of the Trust Seal signifying full compliance with the IAB EU Framework on OBA. More details on Certification Providers and the Trust Seal can be found here.

Company information:

*please make sure you complete all applicable questions, and if not applicable enter N.A

**Please let us know which valid EDAA Licence Agreement your company currently holds

EDAA Licence Agreement:

Identification data:

Company Name:

Company registered address:

Building / Number:

Street address:

City:

Postal code:

Country:

Company correspondence address is different from the registered address above:

Building / Number:

Street address:

City:

Postal code:

Country:

Company VAT Number:

VAT Number:

Contact person:

Contact Name:

Email:

Phone Number:

Role in the market:

Company is involved in OBA:

Please select the applicable boxes below:

Company acts as a Web Site Operator, Advertiser or Agency:

Company acts as a Web Site Operator and also sells advertising inventory on web sites under Common Control via a Sales House or similar subsidiaryCompany acts solely as a Web Site Operator

Best-practice recommendations for self-certification of compliance:

Under the terms of the IAB Europe OBA Framework and EASA Best Practice Recommendation on Online Behavioural Advertising, a number of provisions apply differently to signatories, according to their role in the online advertising value chain. A signatory can simultaneously play several roles; in such circumstances, self-certification must cover all applicable provisions

Best practice recommendation - Advertisers:

The company acts as an Advertiser:

When the company, on its own site(s), permits data to be collected by Third Parties in order to be used on a web site not under Common Control for OBA purposes, thus acting as a Web Site Operator, the company provides adequate disclosure of this arrangement, as per the IAB Europe OBA Framework and Technical Specifications

Best practice recommendation - Agencies

The company acts as an Agency:

When the company, on its own site(s), permits data to be collected by Third Parties in order to be used on a web site not under Common Control for OBA purposes, thus acting as a Web Site Operator, the companyprovides adequate disclosure of this arrangement, as per the IAB Europe OBA Framework and Technical Specifications

Best practice recommendation - Publishers

The company acts as a Web Site Operator:

When the company, on its own site(s), permits data to be collected by Third Parties in order to be used on a web site not under Common Control for OBA purposes and the Ad Marker is not provided by these Third Parties, the company provides AdequateDisclosure of this arrangement via link in the footer, having the following characteristics:

The link is placed in the footer of all pages, and is distinct from the "Terms and Conditions" link:

Please provide the wording that you use in your footer link:

Do you use the OBA Icon to provide the Adequate Disclosure?

Please provide the URL of the information page that opens when clicking on the footer link:

The information page contains (tick all that apply):

List of Third Parties who are active on the site and with which the user, wittingly or unwittingly, may be interacting:

Links to further information on OBA and online privacy, including the OBA User Choice Site:

Any other information that supports user understanding and the aims of the European Self-Regulatory Programme:

Company acts as a Third Party

Ad Network

Ad Server

OBA Provider

Ad Exchange

Demand Side Platform

Supply Side Platform

Other Third-Party role

Other Third-Party role, please describe:
Your message here …

Criteria for self-certification of compliance - Third Parties:

Under the terms of the IAB Europe OBA Framework and EASA Best Practice Recommendation on Online Behavioural Advertising, a number of provisions apply to signatory companies acting as Third Parties:

Data security:

Safeguards:

Companies should maintain appropriate physical, electronic, and administrative safeguards to protect the data collected and used for OBA purposes, including any backups.

Does the company implement appropriate physical safeguards?

Please describe:
Your message here …

Does the company implement appropriate electronic safeguards?

Please describe:
Your message here …

Does the company implement appropriate administrative safeguards?

Please describe:
Your message here …

Data Storage:

Companies should retain data that is collected and used for OBA only for as long as necessary to fulfil a legitimate business need, or as required by law.

Does the company have clear policies regarding retention of data collected for OBA purposes?

Please describe:
Your message here …

Sensitive Segmentation:

Children's segmentation:

The company DOES NOT create segments for OBA purposes that are specifically designed to target children (age 12 and under)

Other sensitive segments:

Does the company seek to create or use OBA segments relying on use of sensitive personal data, as defined under Article 8.1 of Directive 95/46/EC (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health, sex-life)?

If you have selected the checkbox above, does the company obtain web user's Explicit Consent, prior to engaging in OBA using that information?

Education:

To the extent that the company engages in OBA, please describe how you provide information to inform individuals and businesses about OBA, including easily accessible information about how data for OBA purposes is obtained, how it is used and how web user choice may be exercised:

Please describe:
Your message here …

Complaints handling:

Web users may make complaints about incidents of suspected non-compliance with the Principles of the IAB Europe OBA Framework. While web users will have available a number of ways to make complaints, Companies must ensure that, regardless of what means the user uses to submit the complaint (whether directly to the Company or through an industry or self-regulatory body), proper processes are in place to ensure a timely and satisfactory response and resolution of the issue, if necessary.

Does the company implement internal complaint handling mechanisms?

Please describe:
Your message here …

What is the time interval to respond to user complaints and address the substance of the complaint?

Describe mechanism for complaints to be filed directly with the company:
Your message here …

Describe the process in place for responding to enquiries made by national self-regulatory bodies onOBA-related issues and formal unresolved OBA complaints:
Your message here …

Third Party Privacy Notice:

Third Parties should give clear and comprehensible notice on their websites describing their OBA data collection and use practices.

The company provides Third Party Privacy Notice:

The Third Party Privacy Notice is written in a simple, layman's language:

The link to the Third Party Privacy Notice is easily accessible for the users:

Please describe how a user can reach this Third Party Privacy Notice on the Company's website:
Your message here …

The Third Party Privacy Notices distinct from the "Terms and Conditions" section of the website:

Please provide the URL of this notice:
Your message here …

The Third Party Privacy Notice includes the following information (check all that apply):

Third party's identity and contact details:

The types of data collected and used for the purpose of providing OBA, including an indication as to whether any data collected is "personal data" or "sensitive personal data" as defined by the relevant national implementation of Directive 95/46/EC :

The purpose or purposes for which OBA data is processed and the recipients or categories of recipients not under Common Control to whom such data might be disclosed:

A link to the OBA User Choice Site:

An easy-to-use mechanism for allowing Internet users to exercise choice with regard to the collection and use of data for OBA purposes and to the transfer of such data to Third Parties for OBA; this mechanism can be either a link to the opt-out pageof the OBA User Choice Site ora more advanced User Preference Management tool implemented by the Third Party on its own web page:

A statement to the effect that the Company adheres to the IAB Europe OBA Framework:

Other relevant information:

Please describe:
Your message here …

Third Party Enhanced Notice:

Third Parties should provide "enhanced notice" of the collection and use of data for OBA purposes via the Ad Marker in or around the advertisement, in accordance with the provisions of the Technical Specifications

The Company, acting as a Third Party, displays OBA ads, and provides "enhanced notice" of data collection and use for OBA purposes via the Ad Marker, in conformity with the Technical Specifications. The Company holds (or has started the application process for) an OBA Icon licence:

The Company, acting as a Third Party, is involved in OBA but without displaying OBA ads. The Company has appropriate arrangements with partners along the ads delivery chain to provide the Third Party Enhanced Notice:

User Choice:

Each Third Party should make available a mechanism for web users to exercise their choice with respect to the collection and use of data for OBA purposes and the transfer of such data to Third Parties for OBA.

The Company displays the Third Party Enhanced Notice, and provides a clear link from the Ad Marker or from the interstitial page to the OBA User Choice Site:

The company acts as an OBA Provider or is using its own means to uniquely identify a browser (i.e. cookies or any other technical solutions); integration of the Third Party with the user choice mechanism hosted on the OBA User Choice Site is in place and works reliably over time:

The company is not using technologies in order to circumvent the user's express choices (for example by deliberately "re-spawning" deleted cookies):

Explicit consent:

Withdrawal of Explicit Consent obtained with regard to question 1 or 2 from the above section:

Date:

Signed by (Full name and function):

How to submit your self-certification

Company information:

Identification data:

Company registered address:

Company VAT Number:

Contact person:

Role in the market:

Please select the applicable boxes below:

Best-practice recommendations for self-certification of compliance:

Best practice recommendation - Advertisers:

Best practice recommendation - Agencies

Best practice recommendation - Publishers

Criteria for self-certification of compliance - Third Parties:

Data security:

Safeguards:

Data Storage:

Sensitive Segmentation:

Children's segmentation:

Other sensitive segments:

Education:

Complaints handling:

Third Party Privacy Notice:

The Third Party Privacy Notice includes the following information (check all that apply):

Third Party Enhanced Notice:

User Choice:

Explicit consent:

Recent posts

Contact us

Latest Tweets

YourOnlineChoices.eu

Sign up for EDAA news