Our Commitment to Digital Advertising Standards
At Cup Source, we recognize that digital advertising and data processing must operate within strict ethical and legal boundaries. In line with the European Interactive Digital Advertising Alliance (EDAA) principles, we have implemented robust privacy safeguards, transparent consent mechanisms, and vendor accountability measures across all digital touchpoints.
Our digital marketing infrastructure is designed to respect user autonomy, minimize data collection, and ensure full compliance with the GDPR, ePrivacy Directive, and the IAB Europe Transparency & Consent Framework (TCF).
Core Compliance Principles
Explicit Consent
We only process data for digital advertising after obtaining clear, informed, and freely given user consent.
Full Transparency
Users can easily view which vendors access their data, the purposes of processing, and how to withdraw consent.
GDPR Alignment
All data processing activities are mapped, documented, and regularly audited for regulatory compliance.
Vendor Accountability
Third-party advertising partners must adhere to EDAA standards and undergo periodic compliance reviews.
Implementation & Technical Standards
Our digital properties integrate the IAB Europe TCF v2.2 to manage consent signals accurately across the advertising ecosystem. Below is how we structure our data practices:
| Component | Implementation | Standard Reference |
|---|---|---|
| Consent Management | TCF v2.2 CMP integration with granular vendor/purpose toggles | IAB Europe TCF 2.2 |
| Cookie Classification | Strict separation of strictly necessary, functional, and advertising cookies | ePrivacy Directive |
| Data Minimization | Only essential identifiers collected; no cross-site tracking without explicit consent | GDPR Art. 5(1)(c) |
| User Rights Execution | Automated DSAR routing, consent withdrawal, and data portability within 30 days | GDPR Arts. 15–22 |
Advertising Technology Partners
All third-party vendors used for analytics, retargeting, and measurement are vetted through our privacy review process. We maintain an up-to-date vendor list aligned with the EDAA Transparency Center. Partners must provide lawful basis documentation, data retention policies, and DPA agreements before integration.
Ongoing Oversight & Updates
Digital advertising regulations evolve continuously. Cup Source conducts quarterly compliance audits, monitors regulatory updates from the EDAA, European Data Protection Board (EDPB), and national supervisory authorities, and adjusts our technical stack accordingly.