Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from https://cyabra.com/((the “Site”).

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, which websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

  • “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
 
  • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
 
  • “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
 

Third-Party Services

We may use third-party analytics companies, such as Google Analytics, to evaluate the use of our Site, App and Services. We or our service providers use these tools to help us understand use of, and to improve, our Site, App and the Services, performance, and user experiences. These entities may use cookies and other tracking technologies, such as web beacons or local storage objects (“LSOs”), to perform their services.

Google Analytics. This website uses Google Analytics, a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). The use includes the “Universal Analytics” operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices.

Google Analytics uses “cookies”, which are text files placed on your computer, to help analyze how users use the Site/App. The information generated by the cookie about your use of the website/App (including your IP address) is usually transmitted to and stored by Google on servers in the United States, a country that does not offer an equivalent level of protection of privacy to that applicable in the European Union. However, IP anonymization is activated on the Site/App, i.e. the Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking), thus Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand, so that a direct connection to the individual user is eliminated. Google will truncate/anonymize the last octet of the IP address within Member States of the European Union or in other states parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. Google obliged itself to process all personal data received from the EU in accordance with the EU-US Privacy Shield Framework (Art. 45 (3) GDPR).

Google Analytics uses “cookies”, which are text files placed on your computer, to help analyze how users use the Site/App. The information generated by the cookie about your use of the website/App (including your IP address) is usually transmitted to and stored by Google on servers in the United States, a country that does not offer an equivalent level of protection of privacy to that applicable in the European Union. However, IP anonymization is activated on the Site/App, i.e. the Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking), thus Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand, so that a direct connection to the individual user is eliminated. Google will truncate/anonymize the last octet of the IP address within Member States of the European Union or in other states parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. Google obliged itself to process all personal data received from the EU in accordance with the EU-US Privacy Shield Framework (Art. 45 (3) GDPR).

Sessions and campaigns are terminated after a certain period of time. By default, sessions are closed after 30 minutes without activity and campaigns after six months. The time limit for campaigns may not exceed two years. To learn more about Google’s privacy practices, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.

Sessions and campaigns are terminated after a certain period of time. By default, sessions are closed after 30 minutes without activity and campaigns after six months. The time limit for campaigns may not exceed two years. To learn more about Google’s privacy practices, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

SHARING YOUR PERSONAL INFORMATION

Information We Collect Directly from You

We may collect Personal Information directly from you. If you create an account with us, we collect your name, email address, username, password, and/or Twitter or other social media handle. We will also collect any other Personal Information that you provide to us through your use of our Site or our Services, such as your name, title and email address if you sign up for our marketing materials (newsletter) or updates or you fill out our contact form at our Site.

Information We Collect from Third Parties

We may collect publicly available Personal Information of our Users from third parties. For example, if you are a User and provide us with your Twitter handle, we may collect certain Personal Information about you from Twitter. Please note that Cyabra is not responsible for the privacy practices of third parties from which it receives information about you. Please see our Third-Party Sites section below for more information.

We also collect information about Subjects from third parties, including Twitter and Instagram. However, as noted above, our collection of such information about Subjects is not subject to this Privacy Policy.

Information We Collect Automatically

We automatically collect information about you through your use of our Site or App: IP address, browser type, domain name, the website that led you to our Site/App, the website to which you go after leaving our Site/App, the dates and times you access our Site/App, device ID, and activities within our Site/App (e.g., links you click, searches you run, etc.). Further, we may collect your Personal information with the help of cookies and other tracking mechanisms – in this respect please see our Cookies and Other Tracking Mechanisms section below for more information.

We use Your Personal Information for the following purposes:

  • Operating Our Site and App. To provide, maintain, secure and improve our Site/App. In such case the collection and processing of your Personal Information is based on Art. 6 para. 1 (f) GDPR (necessary for the purpose of the legitimate interests of the data controller). Our legitimate interest is to provide the Site/App at an appropriate technical level and to continuously maintain and improve them.
 
  • Providing Our Services. To provide and maintain our Services, and for other customer service and support purposes. In such case the collection and processing of your Personal Information is based on Art. 6 para. 1 (b) GDPR (necessary for the performance of a contract with you).
 
  • Improving Our Services. To improve our Services; to develop new features or services; to perform technical operations, such as updating software. In such case the collection and processing of your Personal Information is based on Art. 6 para. 1 (f) GDPR (necessary for the purpose of the legitimate interests of the data controller). Our legitimate interest is to continuously improve our Services.
 
  • Research and Analytics. To analyze how you interact with our Site or App; to monitor and analyze usage and activity trends; and for other research, analytical, and statistical purposes. In such case the collection and processing of your Personal Information is based on Art. 6 para. 1 (f) GDPR (necessary for the purpose of the legitimate interests of the data controller). Our legitimate interest is to continuously improve our Services.
 
  • Communications. To communicate with You, in particular to send You updates or respond to your inquiries in case you fill out our contact form at the Site. In such case the processing of your personal data is based on Art. 6 para. 1 (f) GDPR (necessary for the purpose of the legitimate interests of the data controller or a third party). Our legitimate interest is to (a) respond to inquiries of our Users and to communicate with them, (b) inform our Users in an efficient way about our Services.
 
  • Marketing. To provide you with news and newsletters, special offers, promotions, and other information we think may interest you, and for other informational, marketing, or promotional purposes, subject to your prior consent. In such case the processing of your personal data is based on Art. 6 para. 1 (a) (your consent). Please note that you have the right to object at any time against the processing of your Personal Information for direct marketing purposes – in this case your Personal Information will no longer be processed for such purpose. Our communications with you may include communications via email. Please see our section regarding Your Choices for more information about how to change your communications preferences.
 
  • Protecting Rights and Interests. To protect the safety, rights, property, or security of Cyabra, the Site, the App, Services, our systems, any third party, or the general public; to detect, prevent, or otherwise address fraud, security, or technical issues, to detect and avoid hacker attacks; to prevent or stop activity which Cyabra, in its sole discretion, may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity; to use as evidence in litigation; and to enforce this Privacy Policy or any Agreements. In such case the processing of your Personal Information is based on Art. 6 para. 1 (f) GDPR (necessary for the purpose of the legitimate interests of the data controller or a third party). The legitimate interest is to protect our Site/App against data security incidents, to protect the lawful rights and interests of Cyabra, third parties (such as affiliates) or the general public.
 
  • Legal Compliance. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request from law enforcement or a governmental authority. In such case the processing of your personal data is based on Art. 6 (1) lit. c) GDPR (necessary for compliance with a legal obligation).
 
  • Recruitment. If you visit the career page of our Site and submit an application via our Site, we process your Personal Information provided by you in the course of your application to manage the application procedure. In such case the processing of your Personal Information is based on Art. 6 (1) b) GDPR (processing is necessary in order to take steps at the request of the data subject prior to entering into a contract). If we conclude a contract with you, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no contract is concluded, the application data and documents will be automatically erased six months after notification of the refusal decision at the latest, provided that no other legitimate interests of the controller are opposed to the erasure. In each case we comply with the principles of data processing as set out in the GDPR, in particular with the principles of purpose limitation and data minimization.
 

BEHAVIOURAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Changes to this Privacy Policy

This Privacy Policy is current as of the Effective Date set forth above. We may change this Privacy Policy from time to time. We will post any changes, including any material changes, to this Privacy Policy on our Site. In the case of changes not reasonable to you, the change shall only enter into force if you did not object to it within 30 days of receiving notice thereof.

13 Gershon Shatz, Tel Aviv, 6701749