• Badge: ⚠️ Caution
• Red Flags:
  • RF1 — Own advertising / cross-service profiling
  • RF2 — High-risk third-country exposure without meaningful mitigation CORRECTED RELATIONSHIP: Connexity was acquired by Taboola on 1 September 2021 for total consideration of $800 million (Taboola press release; SEC Form 424B3, Sep 2021). Connexity operates as Taboola's e-commerce media unit (product listing ads, shopping recommendations). It is not an independent service — it is part of the Taboola group. Connexity continues to operate as a distinct brand with its own publisher and merchant relationships. BADGE RATIONALE: Cross-publisher shopping audience targeting (RF1); part of the Taboola advertising ecosystem (US company; US transfer — RF2). DPA available via Taboola/Connexity terms.
• Risk Indicators:
  • [nicht dokumentiert]

Framework Note (v2.2): FRAMEWORK NOTE (v2.2): RF2 (high-risk third-country exposure) is recorded here as a significant risk factor and lowers the domain E score. Under the revised framework, RF2 alone does not trigger Caution — the Caution badge for this service is driven by RF1 / RF3 / RF4 (as noted above). The US transfer risk (where applicable) is covered by DPF participation and/or SCCs, which GDPR treats as a compliant transfer mechanism.

Quellen:

• Taboola acquisition completion press release (investors.taboola.com, 1 Sep 2021)
• Taboola SEC Form 424B3 (Sep 2021, sec.gov)
• Taboola Privacy Policy (taboola.com/privacy-policy)
• Connexity Privacy Policy (connexity.com/privacy-policy).

• Receive personalised marketing offers
• Customise online ads (non-TCF)

• TPP Notified?: Not yet notified
• Decision Contested?: [nicht dokumentiert]