Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Gemius is the leading Polish and Central European audience measurement and ad effectiveness platform. Operated by Gemius S.A. from Warsaw, it combines a JavaScript tag installed on publisher and advertiser websites with a recruited household panel to produce official audience numbers (Mediapanel in Poland, Audience in Romania and other CEE markets). Because Gemius sets third party cookies and joins panel and tag data, it is treated as a high risk advertising and audience tracker under the GDPR and ePrivacy Directive.
Gemius is the dominant audience and advertising measurement company in Poland and Central Europe, operated by Gemius S.A. from Warsaw. Major national publishers, broadcasters and advertisers participate in joint industry currencies (Mediapanel, PBI/Gemius, Atinternet/Gemius collaborations). The product combines a JavaScript tag deployed on participating sites with a recruited household panel to produce census + panel hybrid audience reports.
The Gemius tag captures page views, time on page, the IP address, the user agent, the referrer and a persistent visitor identifier stored in third party cookies (Gtest, Gdyn variants). When a visitor is in the Gemius household panel, additional sociodemographic attributes are linked to the activity. The tag also exchanges signals with the IAB TCF (Gemius is a registered vendor) to forward consent state to downstream partners.
The Gemius cookies fall under Article 5(3) ePrivacy and require prior consent. The persistent visitor identifier and the panel join are personal data processing under Article 4(1) GDPR and require a clear legal basis. Polish UODO and other CEE regulators have repeatedly stated that legitimate interest cannot justify cross site advertising profiling.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The Gemius tag must be tag blocked until explicit, granular opt in consent is granted. The CMP must forward the IAB TCF v2.2 string with the Gemius vendor ID. Visitors must be able to refuse with the same effort as accepting. The consent message should mention Gemius, the audience measurement purpose and the panel join.
Production data is processed in Poland and other EU member states. Gemius does not systematically transfer personal data to non EEA countries. Sub processors are publicly listed and can be reviewed by customers. The lower transfer risk is a meaningful advantage compared to US based tracking peers.
Sign the Gemius DPA, configure the CMP IAB TCF v2.2 string with the Gemius vendor ID, document the joint controllership relationship with the audience measurement body when required (Mediapanel, PBI), list Gemius in the privacy and cookie policies, and review the configuration after each TCF or Gemius tag update.
Websites using Gemius must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended for European deployments because Gemius combines client side tracking with a household panel, builds persistent visitor profiles, takes part in the IAB TCF chain and processes data at very large scale on behalf of national audience measurement bodies.
Sample consent text
We use Gemius (Gemius S.A., Poland) to measure audience and the effectiveness of advertising. Gemius sets cookies that link your activity to a panel based audience model. We only load Gemius after you click Accept. You can withdraw your consent at any time from the cookie settings.
Third-party domains contacted
gemius.plhit.gemius.plgapt.hit.gemius.plgemius.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| Gtest | persistent | 24 months | Persistent visitor identifier used by Gemius to link page views to a unique browser within the audience measurement census. |
| Gdyn | persistent | 13 months | Behavioural identifier used to enrich the visitor profile with site interaction signals for hybrid audience reports. |
| GtestExt | persistent | 24 months | Cross domain identifier shared between Gemius operated tracking endpoints to link activity across multiple publishers. |
Gemius collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Gemius sets the third party cookies Gtest, Gdyn, GtestExt and a session cookie on its operator domains (gemius.pl, hit.gemius.pl). They persist for 13 to 24 months by default and are used to identify a unique browser, link visits to the household panel and forward signals through the IAB TCF.
Yes. The cookies fall under Article 5(3) ePrivacy and the audience profiling under Article 6(1)(a) GDPR. Gemius participates in the IAB TCF v2.2 chain, which means consent must be collected through your CMP and forwarded to Gemius via the TCF string.
Consent (Art. 6(1)(a) GDPR + Art. 5(3) ePrivacy). Legitimate interest is not admissible because the persistent identifier and the panel join build cross site profiles, even when the underlying purpose is industry audience measurement.
No. Gemius S.A. processes data in the EU, primarily in Poland. There is no systematic transfer to non EEA countries. Sub processors are listed publicly. This makes Gemius a lower transfer risk option than US based audience peers.
Yes for any meaningful EU deployment. The combination of large scale cross site profiling, persistent identifiers, IAB TCF participation and joint controllership with national audience measurement bodies (Mediapanel, PBI) triggers the DPIA criteria of WP248 and the EDPB threshold guidance.
Sign the Gemius DPA, configure the CMP IAB TCF v2.2 string with the Gemius vendor ID, document the joint controllership when participating in Mediapanel or PBI/Gemius, list Gemius in the privacy and cookie policies and review the configuration after each TCF or Gemius tag update.
Other audience measurement options in Europe include AT Internet/Piano Analytics (France), Etracker (Germany), Mediametrie/NetRatings (France), Adition Audience Measurement and Comscore. For privacy first deployments without panel based profiling, Matomo, Plausible and Fathom remain the simpler choice.
List Gemius with the operator (Gemius S.A., Poland), the purpose (audience and ad effectiveness measurement, panel join), the cookies (Gtest, Gdyn, GtestExt) with retention up to 24 months, the legal basis (consent), the IAB TCF vendor ID and the EU only processing location.