Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Akavita is a US-based audience data and identity resolution platform that enriches website visitor profiles with third-party data signals, enabling more precise ad targeting and personalisation. It performs cross-device and cross-session identity matching. As an identity resolution and data enrichment tool with US-only infrastructure, it requires prior consent under both GDPR and the ePrivacy Directive, and transfers to the US require Standard Contractual Clauses.
Akavita is a data intelligence and audience enrichment platform that helps advertisers and publishers improve targeting precision by matching website visitors against third-party audience data. It uses deterministic and probabilistic identity matching techniques to resolve anonymous visitor profiles into enriched audience segments. Akavita integrates with programmatic advertising platforms and data management platforms to feed enriched audience data into ad targeting workflows.
Akavita collects IP addresses, browser fingerprinting signals, device identifiers, cookie IDs, and behavioural signals from visited pages. It matches this data against third-party audience data sources to enrich visitor profiles with demographic, interest, and intent attributes. The enriched profiles are used for ad targeting without necessarily identifying individuals by name.
Audience enrichment through identity resolution constitutes systematic profiling under GDPR. The ePrivacy Directive requires consent before any tracking cookies or scripts load. GDPR requires a lawful basis for the underlying enrichment and matching activities. Legitimate interest cannot be used for tracking-based audience enrichment under the current EU regulatory framework. Consent is the appropriate basis.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent is required before Akavita loads. The consent notice must specifically disclose audience data enrichment, third-party data matching, and the US data transfer. Generic personalisation or analytics consent is insufficient for identity resolution with external data sources.
All data is processed in the US. Standard Contractual Clauses apply. Sign a DPA with Akavita and document the US transfer in your RoPA.
Block Akavita until specific consent for audience enrichment is obtained. Conduct a mandatory DPIA. Sign a DPA with Akavita. Update your privacy policy to disclose third-party data enrichment and the US transfer. Document the processing in your RoPA.
Websites using Akavita must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is required for Akavita deployments. Identity resolution combined with third-party data enrichment constitutes systematic large-scale profiling under GDPR Article 35. The combination of cross-device tracking, audience enrichment from external data sources, and US data transfer all trigger DPIA obligations.
Sample consent text
We use Akavita to enrich visitor profiles and improve ad targeting. Akavita may match your device to audience data from third-party sources. Data is processed in the United States. Please accept to enable personalised advertising and audience matching.
Third-party domains contacted
akavita.comcdn.akavita.comapi.akavita.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| akv_uid | persistent | 1 year | Visitor identifier used for cross-device audience matching and data enrichment |
| akv_seg | persistent | 90 days | Audience segment membership cookie storing enriched profile attributes for ad targeting |
Akavita collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Akavita collects IP addresses, browser fingerprinting signals, device identifiers, cookie IDs, and behavioural signals from visited pages. It matches this data against third-party audience data sources to enrich visitor profiles with demographic, interest, and intent attributes for ad targeting purposes.
Yes. Akavita performs audience data enrichment through identity matching, which requires prior consent under the ePrivacy Directive before any scripts load. The consent must specifically disclose audience enrichment, third-party data matching, and the US transfer.
Consent (Art. 6(1)(a)) is the only appropriate legal basis. Legitimate interest cannot be used for tracking-based audience enrichment with external data sources under the EU regulatory framework.
Yes. All data is processed in the US. Standard Contractual Clauses apply. Sign a DPA with Akavita and document the US transfer in your Records of Processing Activities.
Yes. Identity resolution with third-party data enrichment constitutes systematic large-scale profiling under GDPR Article 35, requiring a mandatory DPIA.
Block Akavita until specific consent for audience enrichment is obtained. Conduct a DPIA. Sign a DPA with Akavita. Update your privacy policy to disclose third-party data enrichment and the US transfer. Document in your RoPA.
For EU-sovereign first-party data activation, customer data platforms (CDPs) like mParticle or Segment with EU hosting avoid third-party data enrichment entirely. For contextual targeting without identity resolution, EU-based contextual ad platforms provide GDPR-compliant alternatives.
Add a section on audience data enrichment. Explain that Akavita matches device signals to third-party audience data, describe the US transfer, state the consent legal basis, and explain how users can withdraw consent to stop audience enrichment.