PERSONAL DATA RETENTION

We retain different types of personal data for different periods, depending on the purposes for processing such personal data, our legitimate business purposes as well as pursuant to legal requirements under applicable laws.

We will keep aggregated non-identifiable information without limitation, and to the extent reasonable we will delete or de-identify potentially identifiable information, when we no longer need to process the information in an identifiable form.

CROSS-BORDER DATA TRANSFERS

We are a global company. We may store and process personal data in various sites throughout the globe, including in the United States, the European Union, Israel, and other locations as reasonably necessary for the proper performance and delivery of our Service, or as may be required by law.

When transferring personal data outside of the European Economic Area (“EEA”), we comply with the applicable legal requirements of providing adequate safeguards, including the use of standard contractual clauses adopted by the European Commission.

If you are resident of the EEA (or any other jurisdiction that applies privacy in the same manner as GDPR), the transfer of personal data related to you is based on GDPR Article 49(1)(b), as it is necessary for the performance of a contract or the implementation of pre-contractual measures.

COMMUNICATIONS

We and our authorized service providers or partners will use your phone number or your email address to send Communications in order to contact you about various issues, including to promote services which we believe you will be interested in.

If you communicate with us, phone calls may be recorded for staff training or sales quality purposes.

If you do not wish to receive such Communications, you may notify Atriis at any time by sending an e-mail to: dpo@atriis.com, or by following the “unsubscribe”, “stop”, “opt-out” or “change e-mail preferences” instructions contained in the Communications you receive.

PERSONAL DATA SECURITY

We maintain the confidentiality of personal data related to you and we take reasonable steps to ensure that the personal data is accurate, complete, current and reliable for its intended use. We take reasonable measures to protect personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction.

We have put in place appropriate physical, electronic and organizational procedures to safeguard and secure personal data related to you from loss, misuse, unauthorized access or disclosure, alternation or destruction.

These measures provide sound industry standard security. However, although we make efforts to protect your privacy, we cannot guarantee that the Service will be immune from cyber-attacks, malicious activities, malfunctions, honest mistakes or other types of abuse and misuse.

SPECIFIC PROVISION FOR EEA RESIDENTS

Under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), we are considered a data controller for data processing activities related to the Site. If you are a resident of a territory in the European Economic Area (“EEA”), the United Kingdom or Switzerland, we base our processing of personal data as a data controller on the following lawful grounds:

• • All processing of personal data related to you which are not based on the lawful grounds indicated below, are based on your consent. You have the right to withdraw your consent at any time.

• • We will rely on our legitimate interests, which we believe are not overridden by your fundamental rights and freedoms, for protecting our Service from abuse, fraud, or security risks, or in developing, improving, or promoting our Service, including when we train our models. This may include the processing of account information, content, and technical information.

• • We will process personal data related to you to comply with a legal obligation and to protect yours and others’ vital interests.

• • We process personal data related to you as a preliminary necessary step prior to initiate an engagement with the Subscriber or as necessary for the performance of the respective agreement with such Subscriber.

At any time, you can contact us at dpo@atriis.com and request to exercise your rights in accordance with the provisions provided by law:

• • You are entitled to access the personal data that we keep about you together with information about how and on what basis the personal data is being processed and to rectify when such information is inaccurate. If you find that the personal data related to you is not accurate, complete or updated, then please provide us the necessary information to correct it.

• • You can contact us if you want to withdraw your consent to the processing of personal data related to you. Exercising this right will not affect the lawfulness of processing based on consent before its withdrawal.

• • You are entitled to request to delete or restrict access to personal data related to you in limited circumstances as described under the GDPR, subject to certain exceptions. If we need to delete personal data related to you following your request, it can take time until we completely delete residual copies of personal data related to you from our active servers and from our backup systems.

• • If you exercise one (or more) of the above-mentioned rights, in accordance with the provisions under the law, you are entitled to request to be informed that third parties that hold personal data related to you, in accordance with this privacy policy, will act accordingly.

• • You are entitled to request the transfer of personal data related to you in accordance with your right to data portability.

• • You are entitled to object to the processing of personal data related to you, for example in relation to direct marketing.

• • You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affecting you.

• • You have the right to obtain a copy of or access to safeguards under which personal data related to you is transferred outside of the EEA.

• • You have a right to lodge a complaint with a data protection supervisory authority.

We will look into your query and make good-faith efforts to resolve any existing or potential dispute with you. Note that when you send us a request to exercise your rights, we will need to reasonably authenticate your identity and location. We will ask you to provide us credentials to make sure that you are who you claim to be and will further ask you questions to understand the nature and scope of your request.

If you have any concerns about the way we process personal data related to you, you are welcome to contact our privacy team at dpo@atriis.com or write to us: 14 Halamish St., 3079896 Casarea, Israel.

CHANGES TO THIS PRIVACY POLICY 

From time to time, we will need to update this Policy. If the updates have minor if any consequences, they will take effect 7 days after we post a notice on the Site or Service, or after we send you the notice through email. Substantial changes will be effective 30 days after we initially posted Our notice.

Continuing to use the Service after the new policy takes effect means that you agree to the new policy. Note that if we need to adapt the policy to legal requirements, the new policy will become effective immediately or as required.

CONTACT US

If you have any comments or questions regarding our Policy, or if you have any concerns regarding personal data related to you held with us, or if you wish to make a complaint about how personal data related to you is being processed by Atriis, you can contact us at dpo@atriis.com.

If you are an EEA resident and have any concerns about the way we process personal data related to you, you are welcome to contact our representative in the EU at: dpo@atriis.com. We will look into your inquiry and make good-faith efforts to respond promptly.