Legitimate Interest Statement – Special Purposes 1 and 2
Effective date: 2025-10-01
Entity: Essential Marketing Methods Nordic AB (“Ad Layer”)
URL: https://adlayer.se/legitimate-interest
Overview
Under the EU General Data Protection Regulation (GDPR) and the IAB Europe Transparency and Consent Framework (TCF v2.2), Ad Layer relies on Legitimate Interest for specific processing operations that are strictly necessary to provide and secure its video and advertising services.
These activities correspond to Special Purpose 1 and Special Purpose 2 of the IAB TCF.
They do not require user consent, but we disclose them here in the interest of transparency.
Special Purpose 1 – Ensure Security, Prevent Fraud, and Debug
We process limited technical data to:
Detect invalid traffic or abuse.
Diagnose and fix performance or delivery errors.
Protect our systems and partners from unauthorized access.
Data categories:
IP address (transient, not stored long term).
HTTP headers and request metadata (user-agent, referrer, error codes).
Log identifiers for debugging.
Retention:
Logs are retained for a short operational period (typically ≤ 30 days) and then deleted or aggregated.
Legitimate interest:
Maintaining service integrity and preventing fraudulent or malicious use of our infrastructure.
Balancing test:
Processing is proportionate, involves minimal data, and is necessary to protect both users and partners. No profiling or cross-site tracking occurs.
Special Purpose 2 – Deliver Technically Possible Ads or Content
We process limited technical data to:
Serve requested video and advertising assets.
Ensure correct delivery and playback of content.
Manage caching, bandwidth optimisation, and load balancing.
Data categories:
Device type, browser, and playback context.
IP address (for routing and delivery).
URL of requested assets.
Retention:
Technical delivery data is processed in real time and not retained beyond operational logs.
Legitimate interest:
Fulfilling a user’s request to view video or advertising content in a secure and reliable way.
Balancing test:
Processing is strictly limited to what is required to make content delivery function and has no impact on user privacy beyond normal web operation.
Rights of Individuals
Although Special Purposes 1 and 2 are not subject to consent, individuals may still:
Request information about this processing.
Object to processing in exceptional cases where they believe their rights override our legitimate interest.
Requests can be made to support@adlayer.se.
Updates
This statement will be reviewed periodically and updated if our security or delivery operations materially change.
Last updated: October 2025
