PRIVACY NOTICE
1. INTRODUCTION
- Erdinast, Ben Nathan, Toledano & Co. (collectively, “we”, “us”, “our” or “EBN” and similar forms) respect the privacy of our users, employees and website visitors, and are committed to protecting the personal information you may share with us. We also protect our followers, vendors, service providers, partners and others who come in contact with us (these and any others with respect to whom we collect personal data, shall collectively be referred to as “Users” or “you” or “Data Subjects”).
- This Privacy Notice explains the types of information we may collect from you or that you may provide when you access or interact with our online platform (the “Platform“), or visit our website at https://www.ebnlaw.co.il/ (the “Website“), or our social media pages (collectively, the “Services”). The use of the Services is subject to these Privacy Notice and to our Terms, which forms an integral part thereof.
- Your use of our Platform or other Services constitutes your agreement to this Privacy Notice and our data practices, and any other policies made available by us to you. If you do not agree, please notify us in writing, and cease all use of the Platform or other Services.
- We are transparent about our practices regarding the information we may collect, use, maintain and process and describe our practices in this policy and notice. Please note that our Website may, from time to time, contain links to external sites. We are not responsible for the operation, privacy policies and practices or the content of such sites. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
- “Personal Data” means information that relates to an identified or identifiable individual, and “information” as defined under Israeli Privacy Protection Law, 5741-1981. This can be data which when gathered, consists of any details which are personally identifiable.
2. CATEGORIES OF INFORMATION WE MAY COLLECT & PROCESS
- You do not have any legal obligation to provide any information to us, however, we require certain information in order to provide you the Services, including in order to use our Platform. If you choose not to provide us with certain information, then we may not be able to provide you with some or all of the Services, including using our Platform.
- We collect data about you when you are using our Services, and visit our Website.
- The categories of information and data we may collect from, on behalf of, or in connection with our Users:
Data we collect about you when you interact with us and our Services:
a. Personal Data provided consciously and voluntarily by you through your use of the Services:
Contact Data
This may include name (first and last), email address, marital status, place of work, or other identifier by which you may be contacted online or offline.
You may choose to voluntarily provide other information to us that we do not request, in such instances, you are solely responsible for such information.
Content, including content within any messages you send to us (such as when contacting or asking a legal question.
b. Personal Data we automatically collect through our Service:
Location Data
If enabled by your device or browser, related to the geographic location of your laptop, mobile device or other digital device on which the Services are used (including imprecise location information such as location derived from an IP address or information that indicates a city or postal code level).
Service Use Data
Including information about how much time you spend on particular pages you visit on our Website, the features you use, your preferences or selections, the time of day you browse, and your referring and exiting pages.
Device Data
Including information about the type of device or browser you use, your device’s operating software, your internet service provider, your device’s regional and language settings, and device identifiers such as IP address and Ad ID.
c. Tracking technologies we use to automatically collect information through our Service:
Log Files, which are files that record events that occur in connection with your use of the Service.
Cookies, which are small data files stored on your device that act as a unique tag to identify your browser. We use two types of cookies: session cookies and persistent cookies. Session cookies make it easier for you to navigate websites and expire when you close your browser. Persistent cookies help with personalizing your experience, remembering your preferences, and supporting security features. Additionally, persistent cookies allow us to bring you advertising. Persistent cookies may remain on your device for extended periods of time, and generally may be controlled through your browser settings.
Pixels (also known as web beacons), which is code embedded in a website, email, or advertisement that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contains JavaScript code). When you access a website, email, or advertisement that contains a pixel, the pixel may permit us or a separate entity to drop or read cookies on your browser. Pixels are used in combination with cookies to track activity by a particular browser on a particular device. We may incorporate pixels from separate entities that allow us to track our conversions, bring you advertising, and provide you with additional functionality.
Device Fingerprinting, which is the process of analyzing and combining sets of data elements from your device’s browser, such as JavaScript objects and installed fonts, to create a “fingerprint” of your device and uniquely identify your browser and device.
Data we collect and process from other sources:
Questionnaires and newsletters that we send to members of our registered mailing lists.
Social Media profile information, and other features provided by third parties that serve or assist in serving our campaigns or advertisements.
Joint Marketing, Referrals, and Rewards Partners that we engage for joint marketing activities and also referrals.
Publicly-available sources, including information in the public domain.
We treat the information collected from other sources subject to any laws or contractual obligations applicable to us. In the event we are permitted to process the information for our own purposes, we will process the information in accordance with the practices described in this Privacy Notice.
3. THE PURPOSES FOR PERSONAL DATA WE COLLECT & PROCESS:
- To provide you our Services and to allow you to use our Website. We use the Personal Data we collect to operate and manage our Service;
- Contacting you for the purpose of providing you with related information;
- To inform you of changes and legal updates that may be of interest and relevant to you;
- Security and Fraud Detection. We use the information we collect to prevent and detect potentially fraudulent or unauthorized transactions, breach of policies or terms, and threats of harm; for security purposes and to identify and authenticate your access to the parts of the facilities;
- Marketing and Advertising. Contacting you to give you commercial and marketing information about events, promotions, legal news or additional Services offered by us, including in other locations; soliciting feedback in connection with your use of the Services; tracking use of our facilities and Services to enable us to optimize them;
- To meet our contractual, ethical, and legal obligations. Regarding our Services and our obligations to our partners. For example: to carry out and enforce our rights arising from any contracts entered into between you and us, including for billing and collection; replying to your queries, troubleshooting problems, detecting and protecting against error, fraud or other criminal activity; compliance and audit purposes, such as meeting our reporting obligations in our various jurisdictions, and for crime prevention and prosecution in so far as it relates to our staff, Users, facilities etc.;
- Comply with applicable laws. Comply with applicable laws, lawful requests, and legal processes, such as to respond to subpoenas or requests from government authorities and legal processes, such as to respond to subpoenas or requests from government authorities if necessary. To enforce our terms, policies and legal agreements, to comply with court orders and warrants and assist law enforcement agencies as required by law, to collect debts, to prevent fraud, infringements, identity thefts and any other service misuse, and to take any action in any legal dispute and proceeding; audit our internal processes for compliance with legal and contractual requirements and internal policies; and
- Understanding Usage and Improving our Services and Website. We use the information we collect to understand how our Users use the Services, and to improve them. We may also improve usability of the Services, by analyzing your interactions with them (such as analyzing how you use tools made available to you or on which links you click).
4. SHARING DATA WITH THIRD PARTIES
We transfer Personal Data to the following:
Service Providers
We share information with service providers that process information on our behalf. Service providers assist us with services such as data analytics, website hosting, and technical support. We contractually prohibit our service providers from retaining, using, or disclosing information about you for any purpose other than performing the services for us, although we may permit them to use information that does not identify you (including information that has been aggregated or de-identified) for any purpose except as prohibited by applicable law or contractual obligation.
Security and Compelled Disclosure
We share information to comply with the law, regulations, payment network rules, or other legal processes, and where required in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We also share information with regulators, law enforcement, financial services providers, and other authorized third parties as required by law. We will also share information to protect the rights, property, life, health, security and safety of us, the Service, or anyone else.
Referrals and Joint Marketing
We share information with our partners in connection with facilitating referral partnerships or engaging in joint marketing activities.
Marketing and Advertising
We share information collected through the Service with vendors or other parties for marketing and advertising related purposes. These parties may act as our service providers, or in certain contexts, independently decide how to process your information. For more information, see the “Analytics and Advertising” section below.
At your Request or consent
We share information at your request or direction, such as if you direct us to connect your account to a third- party integration. We may otherwise share information after providing notice to you and obtaining your consent.
5. ANALYTICS AND ADVERTISING
- We may use analytics services in the future, such as Google Analytics, to help us understand how users access and use the Services and Website.
- In addition, we work with agencies, advertisers, ad networks, and other technology services to place advertisements on our behalf on other websites and services. For example, we may place ads through Google and Facebook that you may view on their platforms as well as on other websites and services. As part of this process, we may incorporate tracking technologies into our own Services (including our Website and emails) as well as into our ads displayed on other websites and services.
- As indicated above, vendors and other parties may act as our service providers, or in certain contexts, independently decide how to process your information. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.
- While you may disable some tracking technologies by blocking cookies in your browser, you may still see advertising as part of a broader marketing campaign. For further information on the types of tracking technologies we use on the Service and your rights and choices regarding analytics and Interest-based Advertising, please see the “Information Collected through the Service” and “Your Rights and Choices” sections.
6. PRIVACY CHOICES
- Opt out of marketing communications. You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email. You may continue to receive service-related and other non-marketing emails.
- Online tracking opt-out. Blocking cookies in your browser as further detailed in www.allaboutocookies.com or Blocking advertising ID use in your mobile settings; Using privacy plug-ins or browsers or change the settings of Google Analytics. You can also opt out features that let you opt out of use of your information for interest-based advertising such as Facebook or Google.
- Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals.
7. DATA SUBJECT RIGHTS
- Data subjects have rights, and we respect them. Data subjects have rights under applicable data protection laws, such as Israeli Privacy Protection Law, 5741-1981 and the regulations promogulated thereunder, or other local laws, including, in different circumstances, rights to data portability, rights to access data, rectify data, object to processing, erase data and the right to lodge a complaint.
- To exercise any of these rights, please submit a request by sending an email pursuant to the contact details set forth below, and specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests to know or delete.
- Data subject rights cannot be exercised in a manner inconsistent with our our proprietary rights, legal defense, or third-party rights. Generally, data subjects have a right to withdraw their consent. Additionally, if a data subject wishes to modify, delete or retrieve their Personal Data, they may do so, where applicable, by contacting us as specified below.
- Please note that Personal Data may be either deleted or retained in an aggregated manner without being linked to any identifiers or Personal Data, depending on technical commercial capability. Such information will continue to be used by us. In certain circumstances, such as other contractual or legal obligations, we will need to confirm your choice before we can fully process your request.
8.LAWFUL BASIS FOR PROCESSING
- Controller-Processor. We act as a controller (or a “database owner”, for Israeli law purposes) with respect to Personal Data collected as you interact with us, and in certain instances may act as a processor on behalf of a service provider, which is the controller.
- Our lawful bases for processing of the Personal Data include the following: (a) you have given consent to the processing for one or more specific purposes, either to us or to our service providers; (b) processing is necessary for the performance of a contract with you; (c) processing is necessary for compliance with a legal obligation; or (d) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests.
9. INTERNATIONAL DATA TRANSFERS
- We currently store your Personal Data in one of our servers located in the Israel.
- We may transfer your Personal Data to the United States and other countries which may not have the same data protection laws as the country in which you initially provided the information, but we will protect your Personal Data in accordance with this Privacy Notice, or as otherwise disclosed to you.
- We comply with applicable legal requirements when transferring Personal Data to countries other than the country where you are located. If you are located in the EEA, we will transfer your Personal Data in accordance with adequacy decisions (see list of countries for which the European Commission has issued an adequacy decision here), standard contractual clauses, and other data transfer mechanisms.
10. DATA RETENTION
- We retain Personal Data for the following reasons and for as long as required under applicable laws, to provide the Services; to comply with our legal and other obligations; to resolve disputes and to enforce agreements; to meet any audit, compliance and business best-practices.
- Data that is no longer retained may be anonymized or deleted. Data may be deleted or anonymized after a while, except where such data must be retained by us, in our judgment, as above. Likewise, some unidentified metadata and statistical information concerning the your use of our platforms are not subject to the deletion procedures and may be retained by us. Some data may also be retained on our third-party service providers’ servers until deleted in accordance with their privacy notice and their retention policy.
11. SECURITY AND STORAGE OF INFORMATION
- We use administrative technical and physical security measures to protect your Personal Data. These measures include computer safeguards and secured files and facilities. We take reasonable steps to securely destroy or permanently de-identify Personal Data when we no longer need it. We will keep your Personal Data only as long as we must deliver our services, unless we are required by law or regulation or for litigation and regulatory investigations to keep it.
- We implement, enforce and maintain security measures, technologies and policies to prevent unauthorized or accidental access to or destruction, loss, modification, use or disclosure of Personal Data. We likewise take steps to monitor compliance on an ongoing basis. Where we deem it necessary in light of the nature of the data in question and the risks to data subjects, we may encrypt data.
- Note, however, that no data security measures are perfect or impenetrable, and we cannot guarantee that unauthorized access, leaks, viruses and other data security breaches will never occur.
12. MINORS
- We do not knowingly collect or solicit information or data from children under the age of 18, or knowingly allow children under the age of 18 to use our Services. If you are under 18, do not attempt or send any information about yourself to us. If we learn that we have collected or have been sent Personal Data from a child under the age of 18, we will delete that Personal Data as soon as reasonably practicable without any liability to us. If you believe that we might have collected or been sent information from a minor under the age of 18, please contact us as soon as possible.
13. CHANGES TO THIS PRIVACY NOTICE
- We may amend or update this Privacy Notice from time to time. The most current version of this Privacy Notice will be available on our official Website. Changes to this Privacy Notice are effective as of the stated “Last Revised Date” and your continued use of our Website, Platform and Services will constitute your active acceptance of the changes.
14. CONTACT US
- If you have any questions or comments concerning this Privacy Notice, you are welcome to contact us at office@ebnlaw.co.il and we will do our best to reply within a reasonable timeframe.
Last updated: July 2023