This How-To article will detail the steps needed to configure and manage the Vendors who run their technology on your site.
These vendors need a signal to tell them if the user consent preferences have provided them the legal basis to run their technology. There are two types of vendors you can manage - those registered with the IAB TCF and those not registered. You should refer to your site audit results for which vendors you need to enable. In addition, Choice also supports a feature to configure the Google additional vendor list a feature that you may need if you work with Google AdManager.
Vendors
Vendors are configured and managed on the Vendor tab of the Privacy Portal.
IAB Vendors (TCF registered vendors)
For reference, the full IAB Global Vendor List (GVL) is available. This list is the basis of the list of vendors in the IAB Vendors tab in the Vendors section of the Privacy Portal.
IAB Vendors have signed up to the IAB TCF and have agreed to the terms vendors must adhere to participate in the framework. In addition to agreeing to the terms, they have also provided the following:
- The Purposes they process data for
- The legal basis for that processing
- A link to their privacy policy
These vendors have agreed to operate based on the user’s selections and their legal requirements as set out in their declared vendor information. See IAB Vendor Configuration and Management for full instructions.
Non-IAB Vendors
These vendors are not part of the TCF and are not required to adhere to the policies and guidelines of the framework. As a site owner, you will need to decide which of these types of vendors to work with. Additionally, to provide users with transparency as required by the GDPR, you will need to manually input a description of each non-IAB TCF vendor and link to their privacy policy. See Non-IAB Vendor Configuration and Management for full instructions.
NOTE: You, as the site owner, will be responsible for controlling the firing of non-IAB vendor technology on your site, so you should only include vendors where you have deployed their first-party tags on your site. See our Tag Blocking Guide for more.
Google Vendors
These are vendors that work with Google and are not listed under the TCF vendor list. If you work with Google AdManager you may want to review this list and enable the vendors that you are working with through the Google AdManager. By default, all vendors are selected.
Blocking Vendors
To remove vendors and block them from firing their technology on your site, simply click the check box next to the vendor(s) you wish to block and then click the Block Selected Vendors button at the top right.
NOTE: Vendor blocking only applies to sites with Consent Scope set as “Your Site Only” or “A Group of Your Sites Only.” You can edit this setting by editing your site configuration in the Site section.
Once a vendor is blocked, they will be:
-
- Displayed in the vendor list with a “Blocked” status
- Removed from the partners' page within Quantcast Choice
- Sent a “no consent” signal in the TCF string
- Sent an “object” signal if using Legitimate Interest as the legal bases for their processing
If in the future you want to unblock a vendor, simply click the checkboxes next to the vendors you want to unblock, then click the drop-down arrow next to the Block Selected Vendors button at the top right and select Unblock Selected Vendors.
NOTE: Blocking vendors can result in lost revenue or other business impacts. We recommend that you do a full audit of your revenue partners (and their partners) to ensure you do not turn off any important vendors.
Vendor Details
For vendors registered with the IAB TCF, you can view their registration details by clicking on the carat icon to the left of each vendor. Clicking the carat icon will expand to display the vendor’s information about their purposes, legal basis for each purpose, and privacy policies. Each Vendor is responsible to keep this information accurate and up to date under the TCF Policy. You should consult with your legal team before proceeding to make sure you are comfortable working with a vendor using the TCF before proceeding.
Per IAB TCF policy, vendors on the Global Vendor List are required to declare their purposes as one of the following:
- They work ONLY with Consent
- They work ONLY with Legitimate Interest
- They are flexible between Consent OR Legitimate Interest
- and if they are flexible they declare one of those as a default
The GVL lists consent purposes, legitimate interest purposes, and then flexible purposes.
- A flexible purpose that is ALSO a consent purpose means that the vendor relies on consent by default, but will switch to legitimate interest if there is a publisher override.
- A flexible purpose that is ALSO a legitimate interest purpose means that the vendor relies on legitimate interest by default, but will switch to consent if there is a publisher override.
In the vendor details panel, you will see the purposes and legal basis as submitted to the GVL displayed.
