Platform Acceptable Use Policy

Digital East GmbH, Axel-Springer-Platz 3, 20355 Hamburg, Germany
Version: v2609 | Effective: 1 September 2026

1. Scope

This policy governs the account and the use of the Digital East demand-side platform, marketed as DESSY: who may use it, how it may be used, and what data may be used in it. It applies to every advertiser, agency and buyer with platform access, and to anyone acting through their account.

It forms part of the Master Services Agreement between you and Digital East GmbH. Two companion documents cover neighbouring ground: the Creative Guidelines govern the advertisements themselves — what may be advertised and how an advertisement must behave — and the Anti-Malvertising Policy governs malicious and deceptive conduct and how we detect it. Section 6 below sets out enforcement for all three.

2. Accounts and credentials

Credentials are issued to named users. Do not share them, and do not create accounts for third parties without telling us.
Keep credentials confidential and tell us without undue delay if you suspect they have been compromised.
Actions taken through your account are attributed to you unless you can show you are not responsible for them.
Give accurate information at sign-up, supply what we reasonably require for our customer due diligence checks, and tell us when any of it changes, including a change in the entity controlling your account.

3. Platform integrity

Do not reverse engineer, decompile or disassemble the platform.
Do not penetration-test, scan or probe the platform without our prior written consent.
Do not scrape the platform or extract data from it by automated means beyond the reporting functions provided.
Do not place a load on the platform that interferes with its operation or with other customers.
Do not use the platform to build a competing service, and do not benchmark it for publication without our consent.
Do not implement anything that changes the physical or logical structure of our systems.

4. Consent and targeting

The mechanism differs by region, and it matters which one applies to your campaign.

4.1 Users in the European Economic Area and the United Kingdom

Consent is collected by the consent management platform on the publisher’s website or app and transmitted to us in the bid request. Digital East is registered in the IAB Europe Transparency and Consent Framework as Global Vendor ID 665. Where the transmitted signal does not record consent for Digital East as a vendor and for each purpose we rely on, we do not bid and the bid request is discarded.

For EEA and UK inventory:

Digital East is not registered for TCF Purpose 3 or Purpose 4 and does not create or use profiles for personalised advertising.
Audience, interest and demographic targeting is not available. Do not upload audience or CRM lists for use against EEA or UK inventory, and do not configure campaigns that would apply such signals to users there.
Precise location is used only where the user has opted in to Special Feature 1.
An opt-out mechanism you offer does not substitute for consent and does not make the processing lawful.

We will tell you if this changes. Until then, campaigns breaching this section may be rejected or disabled.

4.2 Users outside the EEA and the United Kingdom

Audience, interest and demographic signals supplied by our supply partners may be used to select advertising, as instructed by you and subject to local law. Where the law applicable to your campaign requires that users be given the ability to opt out of interest-based advertising, you are responsible for providing it and for honouring it.

4.3 Minors

Do not target advertising at anyone under 16 using audience, interest or demographic signals.
Do not supply us with data relating to anyone under 16.

Advertising directed at or designed to appeal to children is prohibited under the Creative Guidelines.

5. Data you supply to us

Supply data only where you have a valid legal basis for it and have given the data subjects the information Arts. 13 and 14 GDPR require.
Do not supply special category data under Art. 9 GDPR, or criminal conviction data.
Do not use targeting that infers health, sexual orientation, religion, ethnicity, political opinion or trade union membership.
Do not supply data obtained from a source you are not entitled to use.

Data you supply is processed by us as your processor, under the data processing agreement annexed to the Master Services Agreement.

6. Monitoring and enforcement

Digital East has the right, but no obligation, to review and monitor use of the platform, including campaign content, keywords, creatives, targeting configuration and integrated functionality.

Where you breach this policy, the Creative Guidelines or the Anti-Malvertising Policy, we may stop the campaign, remove the creative, disable an audience list, suspend platform access, or terminate the Master Services Agreement for good cause. We notify you with reasons and give you a reasonable opportunity to respond, except where immediate action is needed to protect users, our systems or our supply partners.

We do not impose discretionary penalties. Financial consequences are governed by the Master Services Agreement.

7. Changes

We may amend this policy. An amendment that is purely technical, or that responds to a new security or malvertising threat or a change in law, takes effect on publication. Any other amendment takes effect 30 days after we notify you in text form, and you may terminate with effect from that date if you do not accept it.

8. Contact

Questions about this policy: info@digitaleast.mobi. Data protection: privacy@digitaleast.mobi. Suspected malvertising: privacy@digitaleast.mobi.