8.2. Sharing Personal Data
We disclose your Personal Data to third parties for a business purposes. When we disclose Personal Data for a business purpose, we enter into a contract that describes the purpose and requires both parties to keep that Personal Data confidential and not use it for any purpose except in the performance of the contract.
In the preceding twelve (12) months, we may have disclosed the above-mentioned categories of Personal Data with our affiliates and/or the services providers described in Section 6 above for business purposes.
8.3. Selling Personal Data
We do not “sell” Personal Data. We only share Personal Data as described in this Policy.
8.4. User Rights under the CCPA
The CCPA provides consumers with specific rights regarding their Personal Data. This section describes your CCPA rights and explains how to exercise those rights.
Access to Personal Data
You may request that we disclose to you the categories and specific pieces of Personal Data that we have collected about you, the categories of sources from which your Personal Data is collected, the business or commercial purpose for collecting your Personal Data, the categories of Personal Data that we disclosed for a business purpose, any categories of Personal Data about you that we sold, the categories of third-parties with whom we have shared your Personal Data, and the business or commercial purpose for selling your Personal Data, if applicable.
Deletion Requests
You have the right to submit a verifiable consumer request that we delete Personal Data collected from you and retained
Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers, subcontractors, and consultants to delete) your Personal Data, unless an exception applies.
Right to Opt-Out of the Sale of Personal Data
In the event that we sell your Personal Data, you have the right to submit a request to opt-out of the sale of your Personal Data. You may change your decision at any time and permit us to sell your Personal Data.
If you do not want us to sell your Personal Data to third parties, please contact us at: [email protected].
After you opt-out, we may continue to share some Personal Data with our partners (who will function as our service providers in such instance) to help us perform business-related functions such as, but not limited to, providing the Services, ensuring that the Services is working correctly and securely, providing aggregate statistics and analytics and preventing frauds.
Exercising Your Rights
You can exercise your rights by submitting a verifiable consumer request to our email address:[email protected]
Only you or a person authorized to act on your behalf may make a consumer request related to your Personal Data.
The request must:
- Provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Data or an authorized representative.
- Describe your request with sufficient details to allow us to properly understand, evaluate, and respond to it.
- We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We will only use Personal Data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
You may only request a copy of your data twice within a 12-month period.
If you have any general questions about the Personal Data that we collect about you how we use it, please contact us [email protected].
Response Timing and Format
Our goal is to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing within the first 45 days period. We will deliver our written response, by mail or electronically, at your option. Any disclosures we provide will cover only the 12-month period preceding the request. If reasonably possible, we will provide your Personal Data in a format that is readily useable and should allow you to transmit the information without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
In case of rejection, the response we provide will explain the reasons for which we cannot comply with your request.
Please note that these CCPA rights are not absolute and requests are subject to any applicable legal requirements, including legal and ethical reporting or document retention obligations.
Designating Agents
You can designate an authorized agent to make a request under the CCPA on your behalf if:
- The authorized agent is a natural person or a business entity registered with the Secretary of State of California; and
- You sign a written declaration that you authorize the authorized agent to act on your behalf.
If you use an authorized agent to submit a request to exercise your right to know or your right to request deletion, please mail a certified copy of your written declaration authorizing the authorized agent to act on your behalf using the contact information below.
If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.
8.5. Non-discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
9. Canada residents
9.1. The right to access
As a Canadian resident, pursuant to Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA“), you have the right to formally request access or corrections to information in our files that may contain your Personal Data.
You can exercise your rights under PIPEDA by submitting a consumer request to our email address:[email protected]. The request needs to (i) provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Data; and (ii) describe your request with sufficient details to allow us to properly understand, evaluate, and respond to it.
Our goal is to respond to your requests within 30 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing within the first 30 days period. We will deliver our written response, by mail or electronically, at your option.
Please note that you have the right to complain to the Office of the Privacy Commissioner of Canada should you be unsatisfied with the result of your request.
9.2. The right to withdraw consent
Please note that you can withdraw your consent to our use of your Personal Data at any time. If you do so, we may not be able to provide you with all of our Services. Specifically, if you withdraw your consent to the use, collection or sharing of your Personal Data for the purposes set out in this Policy, you may not have access to the Services. In certain cases, we may continue to use your Personal Data after you have withdrawn consent, if we have a legal basis to do so, or if your withdrawal of consent was limited to certain processing activities. You can withdraw your consent by submitting a request to our email address:[email protected].
9.3. The right to challenge our compliance with PIPEDA
Please note that you may contact us with any questions, complaints or suggestions with respect to our compliance with PIPEDA. You can submit such inquiries or complaints to the following email address [email protected]. We will investigate all the complaints concerning our compliance with PIPEDA. If a complaint is found to be justified, we will take appropriate measures to resolve the complaint, including by amending our policies and practices, if necessary. The respondent will be informed of the outcome of the investigation regarding the complaint.
9.4. Transfer of data
We may transfer your Personal Data to third parties, as set out in this policy. Such third parties may reside outside of Canada, and in such circumstances we have put in place contractual measures to ensure that the recipients of your Personal Data provide appropriate safeguards for your data (for example, by training its staff and implementing effective technological and organizational security measures) and are only using it for the purposes of performing their services, or otherwise for those purposes for which we have disclosed your information to them.
10. Israeli residents
10.1. Collection of Personal Data
Please note that you are under no legal obligation to provide us with Personal Data, and you are doing so with your own will and consent.
10.2. Transfer of data outside of Israel
We may transfer your Personal Data to third parties that may reside outside the State of Israel, where the level of protection of personal data is different. In such circumstances, we have put in place contractual measures to ensure that the recipients of your Personal Data provide appropriate safeguards for your data, in accordance with applicable laws.
10.3. Data subjects’ rights
You may request to:
- Access and review Personal Data concerning you that is in our control.
- Request rectification or deletion of your Personal Data that is in our control, where the data is out of date, incorrect, unclear or incomplete.
- Request erasure of your Personal Data used for Direct Marketing, as defined under local privacy legislation
Please note that these rights are not absolute, and may be subject to regulatory requirements.
11. How we protect your data?
We have implemented administrative, technical, and physical safeguards to help prevent unauthorized access, use, or disclosure of your Personal Data. While we seek to protect your information to ensure that it is kept confidential, we cannot guarantee the security of any information. You should be aware that there is always some risk involved in transmitting information over the internet and that there is also some risk that others could find a way to thwart our security systems. Such breaches can lead to things such as reputational harm, fraud or identity theft. Therefore, we encourage you to exercise discretion regarding the Personal Data you choose to disclose. If you feel that your privacy was treated not in accordance with our Policy, or if any person attempted to abuse the Services or acted in an inappropriate manner, please contact us directly via our “Contact Us” page or through the contact details available below.
12. Minors
We do not knowingly collect or solicit Personal Data from anyone under the age of majority (as determined under the applicable laws where the individual resides; “Minor”). By accessing, using or interacting with our Services, you certify to us that you are not under Minor. In the event that we learn that we have collected Personal Data from a Minor without verification of parental consent, we will delete that information upon discovery. If you believe that we might have any information from or about a Minor, then please contact us through the contact details available below.
13. Retention
We will retain your Personal Data for as long as necessary to provide our Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined to take into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time.
14. Updates to this Policy
We reserve the right to change this Policy at any time. The most current version will always be posted on our Services (as reflected in the “Last Updated” heading). You are advised to check for updates regularly. By continuing to access or use our Services after any revisions become effective, you agree to be bound by the updated Policy.
15. Data Protection Officer
The Company has a “Data Protection Officer” who is responsible for matters relating to privacy and data protection. This Data Protection Officer can be reached at the following address:[email protected].
16. Further Information
If you have any further questions regarding the data we collect, or how we use it, please contact us by email at: [email protected] or one of our different entities available upon the following link: https://help.doit.com/docs/vendor-information/general-vendor-information
