Privacy Policy

Please note that the actual processing operation per each purpose of use and lawful basis, as we detail in the table above, may differ. Such processing operation usually includes a set of operations made by automated means, such as collection, storage, use, disclosure by transmission, erasure, or destruction, and is based on the same lawful basis as stipulated in the table above. In addition, we may process certain Personal Data, based on our legitimate interests, to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of our website, to enforce our terms of use and other policies, and to take precautions against legal liability,

 

5. HOW PERSONAL DATA IS COLLECTED

Depending on the nature of your interaction with the website and with us, we may collect Personal Data:

By using automated means – we may use cookies or similar technologies to gather some information automatically when you interact with our website. For additional information regarding our use of cookies and the choices you can make, please see Section 6 of this Privacy Policy “Our Use of Cookies and Tracking Technologies”

When provided by you voluntarily – we will collect Personal Data if and when you provide us with such information, for example when you submit a “contact us” form.

 

6. OUR USE COOKIES AND TRACKING TECHNOLOGIES

We use “cookies” (or similar tracking technologies such as tags and pixels) on our website. The use of cookies is a standard industry-wide practice. Cookies and similar technologies are a small piece of information, text or code that a website assigns and stores on your browser while you access a website. Cookies can be used for various purposes, including for operation and security purposes, to improve website functionality and remember preferences, for statistical purposes, as well as for advertising purposes.

​

The information generally collected and stored by cookies includes Online Identifiers and Usage (as defined in Section 4 of this Privacy Policy “The Data Sets Collected, Purpose of Use and Lawful Basis”). 

​

The cookies and tracking technologies can be either placed by us (known as “first party cookies”), or by third parties which their services we use such as our marketing partners, social media, analytic providers, etc. (known as “third party cookies”). The duration of cookies and tracking technologies – meaning the period until such are deleted – can be either when you close your browser (known as “session cookies”) or longer periods according to their purpose and settings (known as “persistent cookies”).

​

Third-party advertising providers which their cookies we may use, may independently collect additional data sets, including to combine Online Identifiers and Usage Data with other information they have independently collected relating to your online interactions across their network of websites, for the purpose of enhanced targeting campaigns and personalized ads, as well as providing aggregated analytics related to the performance of advertising campaign you interacted with. These third parties collect and use this information under their own privacy policies and are responsible for their practices.

​

The cookies preference management tool available on our website lists and details the cookies we use on our website. You may change your cookies preference at any time, including, as applicable, withdraw consent or opt-out for the processing of Personal Data through cookies for certain purposes, by using the cookies preference management tool available in our website.  Note that, certain cookies used for strict operation and security purposes are considered as “strictly necessary” and cannot be disabled.

​

In addition, most browsers will allow you to block acceptance of cookies or erase cookies by adjusting the privacy and security settings of your web browser. Please refer to the support page of your browser to learn more.

Please note that once you choose to opt out or disable cookies, some features of our website may not operate properly.

 

7. DISCLOSURE OF PERSONAL DATA

We may disclose your Personal Data to third parties, including our affiliated companies, partners or service providers that help us manage our website, business operations and marketing campaigns. The categories of such third-party recipients or otherwise events in which we may share Personal Data are as follows:

Our Service Providers - we share Personal Data with our service providers to perform the requested functions and services on our behalf, for example, cloud providers, analytic tools, security tools, communication management providers, professional advisors, etc. These providers are prohibited from using the Personal Data we share with them for any purposes other than providing us with the requested services and we only share with them the types of Personal Data that is needed for the provisions of the applicable services they provide us.

Marketing Partners – we may share Personal Data with marketing partners we engage with or use their tools and services to market and promote our website, including for targeted advertising campaigns, for example, social media operators. The Personal Data shared may include Online Identifiers and Usage Data, (as defined in Section 4 of this Privacy Policy “The Data Sets Collected, Purpose of Use and Lawful Basis”). These marketing partners may combine your Personal Data with other data they collect independently from your visits and interactions on other websites where their tools are used or that they otherwise operate.

Our Affiliated Companies and Sharing in the Event of Corporate Transactions - we share Personal Data, internally within our company group to fulfil certain purposes for which Personal Data is collected and retained, and may further share Personal Data in the event of a corporate transaction (for example, sale of our assets or substantial part of our business, merger, consolidation, etc.). The types of Personal Data that will be shared can be any data processed by us, as needed. Our affiliated companies or acquiring company will assume the rights and obligations as described herein.

Sharing with Law Enforcement or Governmental Authorities & to Enforce our Rights or for Security and Fraud Prevention - we may disclose certain Personal Data to law enforcement, governmental agencies, or authorized third parties, to comply with applicable laws or in response to a verified request or order. We may further Personal Data to defend our rights, enforce our agreements or policies, to investigate or prevent potential violations thereof or any alleged illegal activity or any other activity that may expose us, you, or other users to legal liability, however Personal Data will be shared solely to the extent required.

For the avoidance of doubt, we may transfer and disclose or otherwise use Non-Personal Data or information which is linked to anonymous random identifiers or information that is aggregated in a non-identifiable way, at its own discretion.

 

8. YOUR RIGHTS RELATED TO YOUR PERSONAL DATA

Depending on your relationship with us, your jurisdiction and the applicable data protection laws that apply to your Personal Data, you have the right to control and request certain limitations or rights to be executed.

The principal rights that may apply to your Personal Data (subject to your jurisdiction and additional conditions) may include: 

Right to Be Informed – you have the right to be provided with information regarding our privacy practices, including the Personal Data we collect and how we use it – as we detailed under this Privacy Policy. If you have any additional questions, you contact us as set forth under this Privacy Policy.

Right to Access/Inspect Your Personal Data – you have the right to ask us to confirm whether or not we collect and use your Personal Data and which Personal Data we specifically hold about you, and to ask for a copy of your Personal Data or otherwise access it.

Right to Correction/Rectification – you have the right to ask us to correct inaccuracies or update your Personal Data we hold or request deletion for inaccurate Personal Data, considering and subject to the nature and purposes of the processing.  

Right to Deletion/“To Be Forgotten” – you have the right to request the deletion of certain Personal Data we process, if specific conditions are satisfied, for example, if you think  we no longer need it for the purpose we collected it; where we have used it unlawfully; where the collection was based on your consent; or where we are subject to a legal obligation to delete  it. Deletion request will be subject to our rights and obligations under applicable law (for example, our legitimate interests to maintain record keeping, providing a service you requested, taking actions reasonably anticipated within the context of our ongoing business relationship with you, debugging and detecting security incidents, protecting against deceptive, fraudulent, or illegal activity; exercising rights under law, etc.). You are not required to create an account with us to submit a deletion request.

Right to Withdraw Consent - you have the right to withdraw consent you provided to our processing of Personal Data for a certain purpose, at any time.

Right to Opt-Out/Opt-Out of “Sale” – you have the right to opt-out from receiving our marketing communications, if applicable, by unsubscribing through the message received. You further have the right to opt out of the “sale” of Personal Data (i.e., to opt out of targeted advertising by us) as further explained under our CCPA Notice and Section 13.B of this Privacy Policy “Additional Notice to US Residents”. We do not profile you in a manner that has a significant effect on you or other individuals, therefore we do not provide an opt-out option from such use of Personal Data.

Right to Object– you have the right to object to any use of your Personal Data which is based on our legitimate interest if your fundamental rights and freedoms to data protection outweigh our interest.

Right to Restrict Processing– you have the right to ask us to restrict or limit the purpose for which we process your Personal Data, where certain conditions are satisfied.  

Portability Right – the right to request to be provided with a copy of your Personal Data in a portable format and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Data. 

Right to Appeal or Lodge a Complaint – If we decline to take action on your request to exercise your rights, we will inform you within the timeframe under applicable law, and we will explain the justification for declining your request as well as how you may appeal, if applicable. Where applicable, we will inform you of action taken or not taken in response to your appeal, including the reasons for the decision. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your state.

Where the GDPR applies, you have the right to lodge a complaint with the applicable Data Protection Authority in the EU or the Information Commissioner in the UK. 
 

You may submit a request to exercise most of your privacy rights under applicable privacy laws by contacting us at chemipal@chemipal.co.il. We will respond and fulfill your request within the timeframe required under applicable laws.

 

When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

​

Certain rights can be easily executed independently by you without the need to contact us, and for example, you can use the cookies preference management tool on our website to change your preferences and opt-out of cookies including opt-out of “sale” of Personal Data and you can opt-out from receiving our marketing messages by clicking “unsubscribe” link or follow other opt-out instructions.

​

For California residents – additional information regarding your rights is provided under our  CCPA Notice.

For US residents - additional information regarding certain rights is provided under Section 13B of this Privacy Policy “Additional Notice to US Residents”.

 

9. PERSONAL DATA RETENTION

We retain the Personal Data for as long as it is needed for the purposes for which it was collected, in accordance with applicable laws, or, where applicable, until a user expresses a preference to opt-out or delete its Personal Data. There are other circumstances in which we will retain your Personal Data for longer periods, as follows: we are required to retain the Personal Data in accordance with legal, regulatory, tax, or accounting requirements;  where we determine we need to retain records of your dealings with us in the event of any complaints or in the event we reasonably believe there is a prospect of litigation relating to your Personal Data.

Without derogating from the above, except where we are required to retain Personal Data under applicable law, we may at our sole discretion, delete or amend and data, without notice, once we deem it is no longer needed.

 

10. SECURITY

We have implemented physical, technical, and organizational security measures that comply with applicable laws and industry standards intended to protect Personal Data from unauthorized access, alteration, disclosure or destruction.

Note however that security incidents cannot always be prevented, and we will not be held responsible for unauthorized or unintended access beyond our control, and we make no warranty, express, implied, or otherwise, that we will always be able to prevent such unauthorized access or use.

Please contact us at if you become aware of any attempt to gain unauthorized access to your Personal Data.

 

11. CROSS-BORDER DATA TRANSFER

We may transfer, store or process your Personal Data in countries outside the country from which you accessed our website. We will take appropriate measures in accordance with applicable laws to ensure that your Personal Data receives an adequate level of data protection upon its transfer.

 

12. CHILDREN

Our website and services are not intended for use by children, and we do not knowingly collect or maintain information about children. Please contact us at chemipal@chemipal.co.il, if you have reason to believe that a child has shared any information with us.

 

13. JURISDICTION-SPECIFIC NOTICES

Information provided below supplements the information contained in this Privacy Policy and applies to residents of such states. These disclosures are intended to provide additional information with regard to our handling of your Personal Data and certain consumer rights.

A.ADDITIONAL NOTICE TO CALIFORNIA RESIDENTS

This section applies to California residents, pursuant to the CCPA.

Please see our CCPA Notice which details the categories of “personal information” we collect in accordance with the classification under the CCPA, purpose of collection, source, categories of recipients with whom the “personal information” is shared for a business purpose, whether the “personal information” is “sold” or “shared”, data retention criteria, your rights as a California resident and how to exercise them.

B.ADDITIONAL NOTICE TO US RESIDENTS

Residents of certain U.S. states (depending on the applicable state law, acting as an individual or in the household context only and not in a commercial or employment context, as a job applicant or as a beneficiary of someone acting in an employment context or as representative of a business), may have additional rights under applicable privacy laws and be entitled to additional disclosures.

“Personal Data” under applicable US privacy laws, generally means information that is linked or reasonably linkable to an identified or identifiable individual (and usually does not include publicly available information that is lawfully made available from government records, or that a consumer has otherwise made available to the public; de-identified or aggregated consumer information; or information excluded from the states laws scope) “Sensitive Data” mainly includes data revealing racial or ethnic origin, religious beliefs, mental or physical health condition or diagnosis, sex life, sexual orientation, citizenship, or immigration status; the processing of genetic or biometric data for the purpose of uniquely identifying an individual; Personal Data collected from a known child; and precise geolocation data.

​

Categories of Personal Data & Categories of Third Parties with Whom Personal Data is Shared:

Section 4 of the Privacy Policy “The Data Sets Collected, Purpose of Use and Lawful Basis” describes our collection and processing of Personal Data, the categories of Personal Data collected, and the purposes for which Personal Data is collected, stored or used. We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without obtaining your consent, unless we are otherwise entitled, required or permitted under applicable laws.

​

Section 7 of the Privacy Policy “Disclosure of Personal Data” describes the categories of third parties we share Personal Data with for a business purpose.

​

“Sale” of Personal Data:

Under US privacy laws, in principle, the term “sale” is referring to disclosing or making available Personal Data to a third-party in exchange for monetary or other valuable consideration, including for targeted advertising purposes. We do not “sell” information as this term is commonly understood, meaning - we do not, and will not, disclose your Personal Data in direct exchange for money or some other form of payment. However, subject to the definition of the term “sale” under applicable US privacy laws, our practice of using cookies or other third-party advertising services and sharing Personal Data for such purpose is considered as a “sale”.

​

Such practice includes the sharing of the following Personal Data categories:

​

Identifiers – online identifiers such as IP and Cookie ID;

Internet and electronic network activity information – such as your engagement with our website and ads.

Geolocation data – derived from IP (country level).

​

Consumer Rights Related to Their Personal Data:

Residents of certain U.S. states have the following rights under applicable privacy laws, subject to certain limitations:

​

Access Right– the right to confirm whether we are processing their Personal Data and to obtain a copy of their Personal Data in a portable and, to the extent technically feasible, readily usable format.

​

Deletion Right – the right to request us to delete their Personal Data provided to or obtained by us.

​

Correction Right – the right to request us to correct inaccuracies in their Personal Data, taking into account the nature and purposes of the processing of the Personal Data.

​

Opt-Out Right – the right to opt out of certain types of processing, including: to opt out of the “sale” of their Personal Data (as explained above); to opt out of targeted advertising by us; and to opt out of processing of Personal Data for purposes of making decisions that produce legal or similarly significant effects.

​

Section 8 under this Privacy Policy “Your Rights Related to Your Personal Data” provides additional information regarding your rights.

​

Exercising Consumer Privacy Rights:

You may submit a request to exercise most of your privacy rights under U.S. state privacy laws by contacting us at chemipal@chemipal.co.il. We will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

​

Authorized agents may initiate a request on behalf of another individual, provided that such will be required to provide proof of their authorization, and we may also require that the individual directly verify his/her identity and the authority of the authorized agent.

​

We will respond to your request within the timeframe required under applicable law, and we reserve the right to extend the response time subject to applicable law requirements. If we refuse to take action on a request, we will notify you and include the justification for declining to take action, as well as instructions on how you may appeal. Within the timeframe under applicable law of our receipt of your appeal, we will inform you of any action taken or not taken in response to the appeal, including the reasons for the decisions. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your jurisdiction (including – Colorado AG at https://coag.gov/file-complaint/; Connecticut Attorney General at: https://www.dir.ct.gov/ag/complaint/ or (860) 808-5318; Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform).