If they’re using a dynamic auction mechanism then you can fairly safely assume they’re violating European privacy laws.