About this Privacy Notice
This Privacy Notice is meant to give you information about what personal data we collect about you, how we use it, why we use it, and how you control the data processing.
1. The Basics: Who We Are, Our Role, and Definitions
2. Personal Data We Collect, How We Use it, and Why
3. Our Marketing Activities
4. Sharing the Personal Data We Collect
5. International Transfers
7. Your Rights – How to Control Our Use of Your Personal Data
8. Data Retention
9. Cookies and Similar Technologies
10. Third-Party Services
12. Changes to the Privacy Notice
1.1. Who We Are
- Harmoniz Ltd. (“Harmoniz“) a global agtech company engaged in the development of greenhouse seeds. Our offices are located at Kibbutz Kfar Menahem, P.O.B. 198, 7987500 Israel, and our registration number is 513190314.
- If you have questions about our company or your privacy, or want to exercise your rights, you can contact us at email@example.com.
1.2. Our Role: Controller
- Certain data protection laws, including the laws in the EU, differentiate between a party that determines why and how personal data is processed (called a “controller”) and a party that processes personal data solely on the controller’s behalf and according to the controller’s instructions (called a “processor”). Harmoniz is the controller in respect of the processing described in this Privacy Notice.
1.3. Definitions and Recommendations
- When we refer to “services“, we mean the content and features available on our website, including the information about the company and its products.
- When we refer to “personal data“, we mean information that is defined as personal data under law. This includes information that identifies you directly or indirectly, including unique identifiers like IP addresses or cookie IDs.
- When we refer to “you“, we mean visitors to our website.
- This Privacy Notice is meant to be read together with our Terms of Service, which you can find at https://www.harmonizseed.com/privacy-policy/. In general, we recommend that you routinely review this privacy notice.
1.4. A Note on Legal Bases
- Certain jurisdictions only allow the processing of personal data where a legal basis has been established. Under the EU’s General Data Protection Regulation (“GDPR”), the possible legal bases include (but are not limited to): your consent, the processing is necessary to perform a contract with you, the processing is necessary to fulfill our legal obligations, or a company has a legitimate business interest to process your personal data. We only collect and process data where we have established a legal basis. Below you can find more details about specific legal bases.
2.1. Contact Form Information
When you send us a message through the contact form on our site, we collect any data you provide, such as your name, company, email, and the content of your message.
How We Use this Data: To respond to your message and to provide you with informational materials about our products and services, and provide you with newsletters if you have requested to receive them.
Legal Basis: We process this personal data based on the performance of a contract with you when we answer your inquiries or provide you with newsletters you have requested.
2.2. Activity and System Data (Cookies)
When you visit our site, we automatically collect data about your computer or mobile device, including personal data such as your IP address, device ID, browsing history (e.g. the other sites you’ve visited before ours), and your activity on our site (e.g. what pages you visited, for how long, and what links you clicked on). For more information about the cookies we use and how to adjust your preferences, see the Cookies and Similar Technologies section below.
How We Use this Data: We mainly use this data to generate aggregated analytics data about the use of our site so we can maintain and improve the site and develop new products or services. We also use statistical data to prevent fraud and protect the security of our site. One of the tools we use to collect and analyze this data is “Google Analytics”. For more information about how Google collects information and how you can control such use, see: www.google.com/policies/privacy/partners/.
Legal Basis: We process this personal data based our legitimate interests to develop and improve our products and services, and to prevent fraud.
- When you send us a message through the contact form on our site, we collect any data you provide, such as your name, company, email, and the content of your message.
- You can stop the delivery of all marketing emails by following the “unsubscribe” link in any messages we send you. Alternatively, you can contact us at firstname.lastname@example.org to request to unsubscribe.
5.1. If you are located in the EU, when we share your personal data with third parties based outside of the European Economic Area (“EEA“), we will ensure that they sign on agreements that require them to comply with applicable law, keep your data secure at similar levels to the level described in this Privacy Notice, and make sure that your data protection rights are protected. We will also implement the following safeguards:
- When we transfer your personal data to Israel or the UK, we rely on the decision by the European Commission that says that those countries are considered to provide an adequate level of data protection.
- Where we transfer your personal data to other countries, we (i) take additional security measures to protect the data and (ii) use specific contracts approved by the European Commission, known as the Standard Contractual Clauses, to give your personal data the same protection it has in the EEA.
- Please contact us at email@example.com if you would like further information on the specific mechanism used by us when transferring your Personal Data out of the EEA.
- Technical Measures. The electronic safeguards we employ to protect your personal data include secure servers, firewalls, and antivirus protections.
- Access Control. We limit access to your personal data only to authorized personnel who have a need to know. We review these permissions regularly and revoke an employee’s access immediately after his/her termination.
- Internal Policies. We maintain and regularly review and update our privacy related and information security policies.
- Personnel. We require employees to sign non-disclosure agreements according to applicable law and industry customary practice.
- Database Backup. Our databases are backed up and verified regularly. Backups are encrypted and stored within the production environment to preserve their confidentiality and integrity.
- Right of Access. You may have a right to know what personal data we collect about you. We may charge you with a fee to provide you with this information, if permitted by law. If we are unable to provide you with all the information you request, we will do our best to explain why. See Article 15 of the GDPR for more details, if your personal data is subject to GDPR.
- Right to Correct Personal Data. You may the right to request that we update, complete, correct or delete inaccurate, incomplete, or outdated Personal Data. See Article 16 of the GDPR for more details, if your personal data is subject to GDPR.
- Deletion of Personal Data (“Right to Be Forgotten”). If you are located in the EU, you may have the right to request that we delete your personal data. Note that we cannot restore information once it has been deleted. Even after you ask us to delete your personal data, we may be allowed to keep certain data for specific purposes under applicable law. See Article 17 of the GDPR for more details, if your personal data is subject to GDPR.
- Right to Restrict Processing. If you are located in the EU, you may have the right to ask us to stop processing your personal data. See Article 18 of the GDPR for more details, if your personal data is subject to GDPR.
- Right to Data Portability. If you are located in the EU, you may have the right to request that we provide you with a copy of the personal data you provided to us in a structured, commonly-used, and machine-readable format. See Article 20 of the GDPR for more details, if your personal data is subject to GDPR.
- Right to Object. If you are located in the EU, you may have the right object to certain processing activities. See Article 21 of the GDPR for more details, if your personal data is subject to GDPR.
- Withdrawal of Consent. If we are processing your data based on your consent, you are always free to withdraw your consent, however, this won’t affect processing we have done from before you withdrew your consent.
- Right to Lodge a Complaint with Your Local Data Protection Authority. If you are located in the EU, you have the right to submit a complaint to the relevant data protection authority if you have any concerns about how we are processing your personal data, though we ask that as a courtesy you please attempt to resolve any issues with us first.
- We retain your personal data as long as necessary to fulfill each of the purposes we described above. Once we’re done with your data, we delete it.
- When deciding how long to store personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized access, the purposes for which the personal data was collected, as well as applicable legal requirements. Please note that we may delete information from our systems without notifying you first. Retention by any of our service providers or subcontractors may vary in accordance with each business’s retention policy.
- In some circumstances, we may store your personal data even after we’re finished using it if required to do so by law (e.g. to fulfill tax or audit requirements), or to keep accurate records of our interactions in case there is a prospect of litigation relating to your personal data. In such cases, we will maintain the same security measures as described above.
- Please contact us at firstname.lastname@example.org if you would like details about the retention periods for each type of personal data we process.