GDPR Compliance

Wedia offer a GDPR compliance on the Portal and Back-end interfaces, and Media Delivery Media players.

Portal

When activated, the users are presented with a cookie banner, where they can choose to opt out of being tracked to external vendors such as Google Analytics, Datadog…

Opting out of internal tracking is not possible : we need to be able to track which content has been viewed, or downloaded by a specific user, in order to comply with regulations.

If they are not opting out, we will track all the assets viewed, downloaded, played by the user using different trackers.

This choice is recorded on the local storage of the browser, and does not expire. To revert their choice, the user must clear the local storage data from their browser.

When the user deletes their account, the analytics records will stay but with an unique identifier that effectively anonymize them (the previous user id that was assigned to them).

Terms of use :

Additionally, a term of use popup can be presented to the user, with a text which can be versioned.

Both cookie consent and term of use acceptation are optional.

  • Cookies : we are using cookies to track the session for the user, and create a unique identifier when the user has not opted out tracking.

  • We use four internal cookies with a unique identifier that expires once the user session is terminated : JSESSIONID, x-wedia-api-token, x-wedia-api-so and x-wedia-api-tk. These cookies serves as technical cookies, essential for the correct functioning of the website and to provide the service offered and requested by the user. If the user has not opted out the tracking, they will also serve as tracking cookies, on that website only, and for the session duration, or longer, if the user has opted in for the “remember me” option.

  • We use technical cookies for ApplicationGatewayAffinityCORS, ApplicationGatewayAffinity, ApplicationGatewayAffinity, ApplicationGatewayAffinityCORS for the clients hosted on Microsoft Azure. Please read here the purposes of these cookies : https://learn.microsoft.com/en-us/azure/application-gateway/configuration-http-settings

  • our customers may decide to add a Google Analytics, Datadog or other tracking cookies on the system, but this is not the default settings. In that case, the DAM portal will also collect the user navigation and behaviour on those tools. Opting out of tracking in the Cookie banner will opt out of all tracking.

Back-office

The back-office offer no opt-out option : the users are tracked for all their actions. These actions include editing, deleting assets and contents, and we need to track these actions for legal purposes.

The only option to enter the back-office is the acceptance of consent to processing.

Media Delivery Players

When using Wedia players to publish assets on third party sites, we are optionally tracking the user behaviour using cookies.

The website where the player is integrated can request to opt out of tracking by embedding the player using the “dnt=true” parameter. In that case, no tracking will be performed, and only technical information will be stored on the player cookie.

This parameter can also be set on a per share basis, with the following option :

 

We record the following information from the anonymous user :

  • session_id

  • user_id

  • account_id

  • session_datetime

  • session_date

  • session_time

  • session_firstuserhit

  • session_geoloc

  • session_navigatorappcodename

  • session_navigatorappname

  • session_navigatorappversion

  • session_navigatorcookieenabled

  • session_navigatorlanguage

  • session_navigatoronline

  • session_navigatorplatform

  • session_navigatorproduct

  • session_navigatoruseragent

  • navigatoruseragent_devicebrand

  • navigatoruseragent_devicefamily

  • navigatoruseragent_deviceisspider

  • navigatoruseragent_devicemodel

  • navigatoruseragent_osfamily

  • navigatoruseragent_osmajor

  • navigatoruseragent_osminor

  • navigatoruseragent_ospatch

  • navigatoruseragent_ospatchminor

  • navigatoruseragent_agentfamily

  • navigatoruseragent_agentmajor

  • navigatoruseragent_agentminor

  • navigatoruseragent_agentpatch

  • session_screencolordepth

  • session_screenheight

  • session_screenwidth

  • session_capabilitytouch

  • session_capabilitygeolocation

  • session_capabilitycanvas

  • session_capabilitystorage

  • session_capabilityvideo

  • session_capabilityjava

  • session_navigatoriemode

  • campaign_id

  • session_screensize

  • session_device

  • session_firstuserhitlabel

  • session_capabilitytouchlabel

 

AI Server Locations for Image Analysis and Processing

Microsoft Servers

Location: Microsoft servers used for image processing are located in the "West Europe" region, specifically in the Netherlands. This location ensures a privacy compliant data management for European clients.

Google Cloud Platform (GCP) Servers

Data Handling: When using Google Cloud Platform's AI servers, images are processed in memory only and are never permanently stored, enhancing data security and privacy. Google Vision datacenters are located in Netherlands (europe-west4).

Wedia DPO

You may contact our DPO at the following email address : dpo@wedia-group.com