Whichit - Privacy Notice

We at Whichit recognize and respect the importance of maintaining the privacy of our customers. This Privacy Notice describes the types of information we collect from you when you visit our website ("Site") and/or use our Whichit Platform/ICC Studio, the Whichit Interactive Unit/ICC Units, and/or our Services. This Privacy Notice also explains how we collect, process, transfer, store and disclose the information collected, as well as your ability to control certain uses of the collected information. If not otherwise defined herein, capitalized terms have the meaning given to them in the Terms of Service, available at https://whichit.co/terms ("Terms").

 

If you are an individual located in the European Union ("EU Individual"), including the UK, some additional terms and rights may apply to you, as detailed herein. Whichit Ltd., together with its affiliated entity, Whichit Technologies Ltd., are joint data controllers of your Personal Data. The registered office of Whichit Ltd. is HaArad St 9, Tel Aviv, Israel and its registration number is 516021672. The registered office of Whichit Technologies Ltd. is Tech Hub 1-15 Clere Street, London EC2A 4UY and its registration number is 12017136.

 

When we process information of end users of our customers ("End Users") in the context of providing Services to a Company that is our customer, the applicable Company serves as a controller with respect to Personal Data (as defined below) collected on its behalf in the course of its use of the Services and Whichit serves as a processor on its behalf. For more information, please contact the applicable Company.

 

"Personal Data" means any information that refers, is related to, or is associated with an identified or identifiable individual or as otherwise may be defined by applicable law. This Privacy Notice details which Personal Data is collected by us in connection with provision of the Services.

 

Privacy Notice Key Points

The key points listed below are presented in further detail throughout this Privacy Notice. You can click on the headers in this section in order to find out more information about any topic. These key points do not substitute the full Privacy Notice.

 

  1. Personal Data We Collect, Uses and Legal Basis. We collect certain Personal Data that you provide to us including contact information and registration information. We also collect certain Personal Data automatically when you use the Site, Whichit Platform, and/or Services. We use your Personal Data for various reasons, including to provide you with the Site, Whichit Platform and Services, to improve our Services, and to contact you with marketing offers. These processing activities are based on different legal bases including performance of a contract and our legitimate interests.

  2. Sharing the Personal Data We Collect. We share the Personal Data we collect with our service providers and subcontractors who assist us in the operation of the Site and Whichit Platform and who process the information on our behalf and under our instructions.

  3. International Transfer. Some of our service providers and subcontractors who have access to your Personal Data are located in countries other than your own. We will ensure that we have agreements in place with such parties that ensure the same level of privacy and data protection as set forth in this Privacy Notice.

  4. Security. We implement measures aimed at protecting your Personal Data, but they do not provide absolute information security. Such measures include physical, electronic, and procedural safeguards (such as secure servers, firewalls, antivirus and SSL encryption), access control, and other internal security policies.

  5. Your Rights. Subject to applicable law and in addition to other rights as set forth below, you may have a right to access, update, delete, and/or obtain a copy of the Personal Data we have collected about you. You also have the right to object at any time to processing your Personal Data for certain purposes, including marketing purposes.

  6. Data Retention. We retain Personal Data for as long as necessary for the purposes set forth in this Privacy Notice. We consider a number of different factors when determining the appropriate retention periods.

  7. Cookies and Similar Technologies. We use cookies and similar technologies to help personalize your experience by helping save your settings and customizations across visits and providing you targeted content. You can adjust your settings to determine which cookies are allowed, though this may affect the Services.

  8. Third-Party Applications and Services. All use of third-party applications or services is at your own risk and subject to such third party's privacy policies.

  9. Communications. We may send you e-mail or other messages about us or our Services. You will have the opportunity to opt-out of receiving certain messages that are not service-related.

  10. Children. We do not knowingly collect Personal Data from children under the age of sixteen (16).

  11. Changes to the Privacy Notice. We may change this Privacy Notice from time to time and shall notify you of such changes by indicating on the Site that the Privacy Notice has been amended by publishing an updated Privacy Notice on the Site.

  12. Comments and Questions. We have appointed a data protection officer ("DPO") who is responsible for overseeing our privacy practices. If you have any comments or questions about this Privacy Notice, or if you wish to exercise your legal rights with respect to your Personal Data, please contact us at dpo@whichit.co.

___

1.     Personal Data We Collect, Uses and Legal Basis. Depending on your usage of the Site and Whichit Platform, we collect different types of data and we and any of our affiliates, sub-contractors and service providers use the data we collect for different purposes, as specified below. It is your voluntary decision whether to provide us with certain Personal Data, but if you refuse to provide such Personal Data, we may not be able to register you to the Whichit Platform and/or provide you with the Services or part thereof.

 

1.1.      Information Collected Through the Site and Whichit Platform

 

1.1.1.    Contact information Data – When you request information from us, or contact us for any other reason, we will collect any data you provide, such as your email address and the content of your inquiry.

 

We use this data: (1) to respond to your inquiries and requests and to contact and communicate with you; and (2) to prevent fraud, protect the security of and address any problems with the Site, and to provide you with informational newsletters and promotional materials relating to our Whichit Platform and Services, including via email.

 

Legal Basis: (1) We process this Personal Data for the purpose of providing the Services to you, which is considered performance of a contract with you or the Company, as applicable, including responding to your inquiries and requests and providing customer support. (2) When we process your Personal Data for the purposes of preventing fraud, protecting the security of and/or addressing problems with the Whichit Platform and Services and/or for the purpose of providing you with informational newsletters, such processing is based on our legitimate interests.

 

1.1.2.    Account Registration – When you register as a "business user" on our Whichit Platform, you will be required to provide us with the following Personal Data: your full name, email address, username and the Company with which you are associated.

 

We use this data: (1) to provide you with the Whichit Platform and/or Services and to respond to your inquiries and requests and to contact and communicate with you; and (2) to prevent fraud, protect the security of and address any problems with the Whichit Platform and to provide you with informational newsletters and promotional materials relating to the Whichit Platform and our Services, including via email.

 

Legal Basis: (1) We process this Personal Data for the purpose of providing the Services to you and/or the Company, as applicable, which is considered performance of a contract with you or the Company, as applicable, including responding to your inquiries and requests and providing customer support. (2) When we process your Personal Data for the purposes of preventing fraud, protecting the security of and/or addressing problems with the Whichit Platform and Services, and/or for the purpose of providing you with informational newsletters and promotional materials relating to our Services, such processing is based on our legitimate interests.

 

1.1.3.    Automatically Collected Data - When you visit the Site and/or use the Whichit Platform, we automatically collect information about your computer or mobile device, including non-Personal Data such as your operating system, and Personal Data such as your IP address, as well as any information regarding your viewing history on our Site and/or on the Whichit Platform. For more information about the cookies and similar technologies we use and how to adjust your preferences, please see the section "Cookies and Similar Technologies" below.

 

1.1.4.    How we use this data: (1) to review usage and operations, including in an aggregated non-specific analytical manner, develop new products or services and improve current content, products, and Services; (2) to prevent fraud, protect the security of our Site and/or on the Whichit Platform and Services, and address any problems with the Site, Whichit Platform, and/or Services; (3) to provide you with customized content and advertising related to our products and Services, based on your usage history on the Site, on other third-party sites or apps you may visit and/or use.

 

1.1.5.    Legal Basis: We process this Personal Data for our legitimate interests to develop and improve our products and Services, review usage, perform analytics, prevent fraud, for our recordkeeping and protection of our legal rights and to market our own products and services. Additional information regarding direct marketing is provided below.

 

1.1.6.    Materials You Upload – Any materials including images and/or pictures and/or photos and/or documents you may upload to the Whichit Platform will be collected by us.

How we use this data: To provide you with the Services.

Legal Basis: We process this Personal Data for the purpose of performance of a contract with you and/or the Company, as applicable.

 

1.2.      End Users. If you are and End User who interacts with content of a Company to whom we provide Services, we may collect Personal Data about such interaction, such as data about your interaction or any data that you have input. We process such Personal Data solely as a processor on behalf of the Company and at such Company's request. We also may collect anonymous behavioral data from End Users in order to improve the quality of our Service and to carry out market research reports based on anonymous user behavior activities. For more information, please contact the applicable Company, who serves as a controller of this Personal Data.

 

1.3.      Additional Uses

 

1.3.1.    Statistical Information. By analyzing all the information we receive, including all information concerning users, we may compile statistical information across a variety of platforms and users ("Statistical Information"). Statistical Information helps us understand trends and customer needs so that new products and services can be considered and so that existing products and services can be tailored to customer desires. Statistical Information is anonymous and aggregated; we will not link Statistical Information to any Personal Data. We may share such Statistical Information with our partners, without restriction, on commercial terms that we can determine in our sole discretion.

 

1.3.2.    Analytics. We and/or our service providers or subcontractors, use analytics tools ("Tools"), including "Google Analytics" and “Mixpanel” to collect information about the use of the Site and/or Whichit Platform and/or Services. Such Tools collect information such as how often users visit the Site and/or Whichit Platform, what pages they visit when they do so, and what other sites and mobile applications they used prior to visiting the Site and/or Whichit Platform. The Tools may collect certain Personal Data and may link such Personal Data to specific information stored in our customer database. We use the information we get from the Tools to improve our Site and/or Whichit Platform and Services. Google's ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Service located at http://www.google.com/analytics/terms/us.html and the Google Privacy Policy located at http://www.google.com/policies/privacy/. Mixpanel’s ability to access data collected by Whichit is governed by Mixpanel’s terms of service located at https://mixpanel.com/legal/terms-of-use/.

 

1.3.3.    Direct Marketing. As described above, we may use Personal Data to let you know about our products and Services that we believe will be of interest to you. We may contact you by email or through other communication channels. In all cases, we will respect your preferences for how you would like us to manage marketing activity with respect to you. To protect privacy rights and to ensure you have control over how we manage marketing with you:

 

-       We will take steps to limit direct marketing to a reasonable and proportionate level and only send you communications which we believe may be of interest or relevance to you.

-       At any time, you can update or correct your personal profile within your account or change your preferences for the way in which you would like us to communicate with you, including how you receive details of latest offers and/or newsletters from us.

-       You can ask us to stop sending email marketing by following the "unsubscribe" link you will find on all the email marketing messages we send you. Alternatively, you can contact us at support@whichit.co.

-       You can change the way your browser manages cookies, which may be used to deliver online advertising, by following the settings on your browser as explained below.

 

We recommend you routinely review the privacy notices and preference settings that are available to you on any social media platforms as well as your preferences within your account with us.

2.     Sharing the Personal Data We Collect. We share your information, including Personal Data, as follows:

 

2.1.      Affiliates. We share information, including your Personal Data, with our affiliated companies, Whichit Technologies Ltd. or Whichit Ltd., as applicable, where this is necessary to provide you with our products and Services, and for the purpose of management of our business.

 

2.2.      Service Providers, and Subcontractors. We disclose information, including Personal Data we collect from and/or about you, to our trusted service providers and subcontractors, who have agreed to confidentiality restrictions and who use such information solely on our behalf in order to: (1) help us provide you with the Site, the Whichit Platform and/or Services; (2) aid in their understanding of how users are using our Site, the Whichit Platform and/or Services; (3) for the purpose of direct marketing (see above for more details).

 

Such service providers and subcontractors provide us with IT and system administration services, data backup, security, and storage services, data analysis and help us provide other marketing services.

 

2.3.      Business Transfers. Your Personal Data may be disclosed as part of, or during negotiations of, any merger, sale of company assets or acquisition (including in cases of liquidation) in such case, your Personal Data shall continue being subject to the provisions of this Privacy Notice.

 

2.4.      Law Enforcement Related Disclosure. We may share your Personal Data with third parties: (i) if we believe in good faith that disclosure is appropriate to protect our or a third party's rights, property or safety (including the enforcement of the Terms and this Privacy Notice); (ii) when required by law, regulation subpoena, court order or other law enforcement related issues, agencies and/or authorities; or (iii) as is necessary to comply with any legal and/or regulatory obligation.

 

2.5.      Legal Uses. We may use your Personal Data as required or permitted by any applicable law, for example, to comply with audit and other legal requirements.

 

3.     International Transfer

 

3.1.      We use subcontractors and service providers and have affiliates who are located in countries other than your own, (such as the EU and Israel) and send them information we receive (including Personal Data). We conduct such international transfers for the purposes described above. We will ensure that these third parties will be subject to written agreements ensuring the same level of privacy and data protection as set forth in this Privacy Notice, including appropriate remedies in the event of the violation of your data protection rights in such third country.

 

3.2.      Whenever we transfer your Personal Data to third parties based outside of the European Economic Area ("EEA"), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

 

3.2.1.    We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission.

3.2.2.    Where we use certain service providers, we may use specific contracts approved by the European Commission which give Personal Data the same protection it has in the EEA.

3.2.3.    Where we use service providers based in the US, we may transfer Personal Data to them if they have been certified by the EU-US Privacy Shield, which requires them to provide similar protection to Personal Data shared between the EU and the US or any other arrangement which has been approved by the European Commission or other body having jurisdiction to approve such arrangement.

 

3.3.      Please contact us at dpo@whichit.co if you would like further information on the specific mechanism used by us when transferring your Personal Data out of the EEA.

 

4.     Security. We have implemented and maintain appropriate technical and organization security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to Personal Data appropriate to the nature of such data. The measures we take include:

 

4.1.      Safeguards – The physical, electronic, and procedural safeguards we employ to protect your Personal Data include secure servers, firewalls, antivirus, and SSL encryption of data at rest and in transit.

 

4.2.      Access Control – We dedicate efforts for a proper management of system entries and limit access only to authorized personnel on a need to know basis of least privilege rules, review permissions quarterly, and revoke access immediately after employee termination.

 

4.3.      Internal Policies – We maintain and regularly review and update our privacy related and information security policies.

 

4.4.      Personnel – We require new employees to sign non-disclosure agreements according to applicable law and industry customary practice.

 

4.5.      Encryption – We encrypt the data in transit using secure SSL/TLS protocols. Data transmission to the getwhichit.com domain is restricted to certain domains. Data is encrypted in transit using SSL/TLS and at rest by MongoDB Cloud Atlas.

 

4.6.      Database Backup – Our databases are backed up on a periodic basis for certain data and are verified regularly. Backups are encrypted and stored within the production environment to preserve their confidentiality and integrity, are tested regularly to ensure availability, and are accessible only by authorized personnel.

 

4.7.      However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

 

4.8.      As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect user IDs and passwords, please take appropriate measures to protect this information.

 

5.     Your Rights - How to Access and Limit Our Use of Certain Personal Data. Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to the Personal Data that we hold about you, as detailed below. We will investigate and attempt to resolve complaints and disputes and make every reasonable effort to honour your wish to exercise your rights as quickly as possible and, in any event, within the timescales provided by applicable data protection laws. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any information and/or comply with any of your requests, as detailed below:

 

5.1.      Right of Access. You have a right to know what Personal Data we collect about you and, in some cases, to have such Personal Data communicated to you. Subject to applicable law, we may charge you with a fee. Please note that we may not be able to provide you with all the information you request, and, in such case, we will endeavor to explain to you why.

 

5.2.      Right to Data Portability. If the processing is based on your consent or performance of a contract with you and processing is being carried out by automated means, you may be entitled to (request that we) provide you or another party with a copy of the Personal Data you provided to us in a structured, commonly-used, and machine-readable format.

 

5.3.      Right to Correct Personal Data. Subject to the limitations in applicable law, you may request that we update, complete, correct or delete inaccurate, incomplete, or outdated Personal Data.

 

5.4.      Deletion of Personal Data ("Right to Be Forgotten"). You have a right to request that we delete your Personal Data if either: (i) it is no longer needed for the purpose for which it was collected, (ii) our processing was based on your consent and you have withdrawn your consent, (iii) you have successfully exercised your Right to Object (see below), (iv) processing was unlawful, or (iv) we are required to erase it for compliance with a legal obligation. We cannot restore information once it has been deleted. Please note that to ensure that we do not collect any further Personal Data, you should also terminate your account with us and clear our cookies from any device where you have accessed our Services. We may retain certain Personal Data (including following your request to delete) for audit and record-keeping purposes, or as otherwise permitted and/or required under applicable law.

 

5.5.      Right to Restrict Processing. You can ask us to limit the processing of your Personal Data if either: (i) you have contested its accuracy and wish us to limit processing until this is verified; (ii) the processing is unlawful, but you do not wish us to erase the Personal Data; (iii) it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise, or defend of a legal claim; (iv) you have exercised your Right to Object (below) and we are in the process of verifying our legitimate grounds for processing. We may continue to use your Personal Data after a restriction request under certain circumstances.

 

5.6.      Direct Marketing Opt Out. You can change your mind at any time about your election to receive marketing communications from us and/or having your Personal Data processed for direct marketing purposes. If you do, please notify us by contacting us at dpo@whichit.co. We will process your request as soon as reasonably possible, however it may take a few days for us to update our records before any opt out is effective.

 

5.7.      Right to Object. You can object to any processing of your Personal Data which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

 

5.8.      Right to Lodge a Complaint with Your Local Supervisory Authority. You may have the right to submit a complaint to the relevant supervisory data protection authority if you have any concerns about how we are processing your Personal Data, though we ask that as a courtesy you please attempt to resolve any issues with us first.

 

6.     Data Retention

 

6.1.      Subject to applicable law, we retain Personal Data as necessary for the purposes set forth above. We may delete information from our systems without notice to you once we deem it is no longer necessary for these purposes. Retention by any of our processors may vary in accordance with the processor's retention policy.

 

6.2.      In some circumstances, we may store your Personal Data for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, audit, accounting requirements and so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data, and whether those purposes can be achieved through other means, as well as applicable legal requirements.

 

6.3.      Please contact us at dpo@whichit.co if you would like details regarding the retention periods for different types of your Personal Data.

 

7.     Cookies and Similar Technologies.

 

7.1.      We use cookies and similar technologies for a number of reasons, including to help personalize your experience and to personalize the ads we serve you. Third parties through which we provide the Services and/or our business partners may be placing and reading cookies on your browser or using web beacons to collect information in the course of advertising being served on different websites. When visiting this Site, you shall be notified of the use of and placement of cookies and other similar technologies on your device as specified herein.

 

7.2.      What are Cookies? A cookie is a small piece of text that is sent to a user's browser or device. The browser provides this piece of text to the device of the originating user when this user returns.

 

7.2.1.    A "session cookie" is temporary and will remain on your device until you leave the Site.

7.2.2.    A "persistent" cookie may be used to help save your settings and customizations across visits. It will remain on your device until you delete it.

7.2.3.    First-party cookies are placed by us, while third-party cookies may be placed by a third party. We use both first- and third-party cookies.

7.2.4.    We may use the terms "cookies" to refer to all technologies that we may use to store data in your browser or device or that collect information or help us identify you in the manner described above, such as web beacons or "pixel tags".

 

7.3.      How We Use Cookies. We use cookies and similar technologies for a number of reasons, as specified below. The specific names and types of the cookies, web beacons, and other similar technologies we use may change from time to time. However, the cookies we use generally fall into one of the following categories:

 

Type of Cookie: Necessary
Why We Use These Cookies:
These cookies are necessary in order to allow the Site and Whichit Platform to work correctly. They enable you to access the Site and/or Whichit Platform, move around, and access different services, features, and tools. Examples include remembering previous actions (e.g. entered text) when navigating back to a page in the same session. These cookies cannot be disabled.

Type of Cookie: Functionality
Why We Use These Cookies:
These cookies remember your settings and preferences and the choices you make (such as language or regional preferences) in order to help us personalize your experience and offer you enhanced functionality and content.

Type of Cookie: Security
Why We Use These Cookies:
These cookies can help us identify and prevent security risks. They may be used to store your session information to prevent others from changing your password without your login information.

Type of Cookie: Performance
Why We Use These Cookies:
These cookies can help us collect information to help us understand how you use our Site and/or the Whichit Platform, for example whether you have viewed messages or specific pages and how long you spent on each page. This helps us improve the performance of our Site and/or the Whichit Platform.

Type of Cookie: Analytics
Why We Use These Cookies:
These cookies collect information regarding your activity on our Site and/or Whichit Platform to help us learn more about which features are popular with our users and how our Site and Services can be improved.

Type of Cookie: Advertising
Why We Use These Cookies:
These cookies are placed in order to deliver content, including ads relevant and meaningful to you and your interests. They may also be used to deliver targeted advertising or to limit the number of times you see an advertisement. This can help us track how efficient advertising campaigns are, both for our own Services and for other websites. Such cookies may track your browsing habits and activity when visiting our Site and those of third-parties.

 

7.4.      First Party Cookies. A first party cookie from the getwhichit.com domain is set on your browser when Whichit content is loaded. The section above explains how you can adjust your preferences and disable or remove cookies and similar technologies.

 

7.5.      Third-Party Cookies. A list of all third-party cookies used by Whichit can be found at: https://whichit.co/privacy/cookies

 

7.6.      How to Adjust Your Preferences. Most Web browsers are initially configured to accept cookies, but you can change this setting so your browser either refuses all cookies or informs you when a cookie is being sent. In addition, you are free to delete any existing cookies at any time. Please note that some features of the Services may not function properly when cookies are disabled or removed. For example, if you delete cookies that store your account information or preferences, you will be required to input these each time you visit. By changing your device settings, you can prevent your device's ad identifier being used for interest-based advertising, or you can reset your device's ad identifier. Typically, you can find the ad identifier settings under "privacy" or "ads" in your device's settings, although settings may vary from device to device. Adjusting your preferences as described in this section herein does not mean you will no longer receive advertisements; it only means the advertisements that you do see will be less relevant to your interests.

 

8.     Third-Party Applications and Services. All use of third-party applications or services is at your own risk and subject to such third party's terms and privacy policies.

 

9.     Communications. We reserve the right to send you service-related communications, including service announcements and administrative messages, without offering you the opportunity to opt out of receiving them. Should you not wish to receive such communications, you may cancel your account.

 

10.  Children. We do not knowingly collect Personal Data from children under the age of sixteen (16). In the event that you become aware that an individual under the age of sixteen (16) has registered for our Services, please advise us immediately.

 

11.  Changes to the Privacy Notice. We may update this Privacy Notice from time to time to keep it up to date with legal requirements and the way we operate our business, and we will place any updates on this webpage. Please come back to this page every now and then to make sure you are familiar with the latest version. If we make material changes to this Privacy Notice, we will seek to inform you by notice on our Site or per email.

 

12.  Comments and Questions. If you have any comments or questions about this Privacy Notice or if you wish to exercise any of your legal rights as set out herein, please contact us at dpo@whichit.co.

 

You can also contact us by post as follows:

Whichit Technologies Ltd. – Tech Hub 1-15 Clere Street, London EC2A 4UY or

Whichit Ltd. - HaArad St 9, Tel Aviv, Israel

 

 


Last updated: November 2019