The data practices on the Permit website, available at www.permit.io (“Website”).
The data practices on the Permit SaaS (our “Service”) that Permit provides its customers (“Businesses”) and their end users (“Users"). The Service offers Businesses a management software for access-control and permissions management, including Backoffice tools and control interfaces.
PERSONAL DATA PROCESSED
We collect and process your information when you register to the Service
You must be registered in order to use the Service. In order to register, you must complete our online registration form, in which we will indicate the mandatory fields for completion. If you do not provide the required information in these fields, you will not be able to register. We may also receive this information from your employer (the Business of which you are the representative).
If you choose to register with an online account (such as your Gmail, BitBucket or GitHub account), we will collect your public profile information on the respective website, including your full name, email address and other profile information.
If you choose to register with an email address, login to the Service will be authenticated with a password, which you should periodically change. You must maintain the confidentiality of your account login details. We refer to this information collectively as “Profile Information”.
We collect and process your information when you attend conferences and webinars
We collect your information when you attend conferences and webinars that we attend or host. If the conference or webinar is not hosted by us, we will only collect your information if you indicate that you allow us to receive your contact information from the conference/webinar organizers (such as when you actively scan your conference card, if you choose to, when you visit our booth at the conference). We refer to this information as “Contact Information”.
We collect and process your information when you submit an inquiry to us
You may contact us through our various contact channels. When submitting an inquiry, you will be asked to provide your full name, phone number, email address, the name of the Business you represent and the content of your inquiry. We may ask you to provide additional information, as we deem necessary to handle your inquiry. We refer to this information as “Inquiry Information”.
The Service we provide involves processing information of the Business’s Users
In order to provide the Service to a Business, we process personal information of Users using the Service, such as full name, email address and account username.
We process your information when you apply to any open positions through email
When you apply for an open position posted on our Website, we collect and process the application you submitted, which typically includes your curriculum vitae (résumé) which may provide contact information, residential address, date of birth, photograph, details of professional qualifications and skills, employment history, and other information you provide in connection with your job application.
This information may also include names and contact details for references. Please note that it is your responsibility to obtain consent from your references before providing us their contact information.
We may also collect information about you as a candidate from other third-parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks where appropriate or required by law. We refer to this entire data as “Job Application Information”.
You do not have a legal obligation to provide us with your Profile Information, Contact Information, Inquiry Information or Job Application Information; however, if you choose to not share this information with us, we may not be able to create your account, provide you with the Service and the Website, contact you or respond to your inquiries and process your application and consider you for an open position.
We collect Analytics Information about your and your Users’ use of the Website and the Service
When you visit the Website or use the Service, we record and collect certain information about your interaction with them, including the IP address from which you access the Website or Service, time and date of access, type of browser used, language used, links clicked, and actions taken while using the Website or Service.
We refer to this type of information as “Analytics Information”.
HOW WE PROCESS PERSONAL DATA
To Facilitate your access to and provide you with the Website and the Service
We process your personal information in order to create your account on the Service, facilitate your access to the Website and the Service, provide you with the Service and the Website and manage billing and fee collection.
We also process your Users’ personal information in order to provide them with the Service.
To respond to and handle your inquiry
We process your Inquiry Information to contact you about your inquiry and handle your inquiry.
To send you marketing content and messages
We process your personal information to send you marketing content and other messages and updates related to the Website or Services, but only if we obtained your prior consent.
To consider you for an open position
We process your Job Application Information to consider you for an open position and to schedule a job interview, if relevant.
To maintain and improve the Website and Service
We process your Analytics Information to provide, maintain and improve your user experience when accessing our Website and Service. We also will use the Analytics Information for quality assurance and for development and enhancement of the Website and Service.
WHO PROCESSES YOUR DATA
We will not share your information with third parties, except in the events listed below or when you provide us your explicit and informed consent.
We will process information with our service providers and corporate group entities, helping us to operate our business
We will process personal information with the assistance of our service providers and corporate group entities (e.g., mother company and sister companies), who assist us with the internal operations of the Website and Service. These companies and entities are authorized to use the personal information in this context only as necessary to provide these services to us and not for their own promotional purposes.
We will process information with our partners who co-host conferences and webinars with us
We will process personal information with the assistance of our partners, who co-host conferences, webinars or any other event. We will only share your information with such partners where you have provided us with your explicit consent to do so.
We will share information with competent authorities, if you abuse your right to use the Service or the Website, or violate any applicable law
If you have abused your rights to use the Website or Service, or violated any applicable law, we will share your information with competent authorities and with other third parties (such as legal counsels and advisors), for the purpose of handling the violation or breach.
We will share your information if we are legally required to do so
We will share information if we are required to do so by a judicial, governmental or regulatory authority.
We will share your Information with third-parties in any event of change in our structure
If the operation of our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share information only as required to enable the structural change in the operation of the business.
What are cookies?
Cookies are text files, comprised of small amount of data, that are saved on your computer or other device (e.g. smartphone, tablet, etc.) when you use the internet and visit various websites.
The information that the cookies maintain is read by the website you visit, during the session of your visit to the website (these are called ‘session’ cookies), and when you return to visit it again (these are called ‘persistent’ cookies).
Necessary. Cookies that are strictly necessary for the functioning of the Website. The Website cannot operate properly without these cookies. You can set your browser to block or alert you about these cookies, but some parts of the Website may not function properly.
Marketing. Cookies used for tracking your use of the Website in order to allow us to tailor content and advertisement to you. These cookies are not used to directly identify you or to track your specific browsing activities.
Statistics. Analytics cookies that help us understand how you and other users interact with our Website by collecting data that does not directly identify you.
You can always delete or disable cookies
You can always delete the cookies saved on your device through the settings of your computer browser or device. You can also disable cookies for future use through the settings of your computer browser or device.
SECURITY AND DATA RETENTION
We will retain your personal information and Users’ personal information for as long as necessary to conduct our business activities and comply with legal obligations or disputes
We will retain your personal information and Users’ personal information for the duration needed to support our ordinary business activities. Thereafter, we may still retain the personal information where necessary to comply with our legal obligations, resolve disputes, establish and defend legal claims and enforce our agreements.
We implement measures to secure your Information
We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure personal information, it is not guaranteed, and you cannot expect that the Website or Service will be immune from information security risks.
INTERNATIONAL DATA TRANSFERS
We may internationally transfer information in accordance with applicable data protection laws
We may store and process the personal information in the United States and in other various locations throughout the globe, including through cloud services.
If we transfer your personal data for processing at locations outside your jurisdiction, we will abide by data transfer rules applicable to these situations.
INFORMATION FOR THOSE RESIDING IN THE EUROPEAN ECONOMIC AREA
Our contact information is:
Authorization Technologies Ltd.
6 Beit Hillel St., Tel Aviv-Jaffa, Israel 6701706
Legal basis under EU law for processing personal data
The legal basis for collecting and processing your Profile Information when you register to the service is our legitimate interest in providing the Website and Service to you.
The legal basis for collecting and processing personal information is our legitimate interest in providing our Website and Service to you.
The legal basis for collecting and processing your Inquiry Information when you submit an inquiry is our legitimate interests in responding to your inquiry.
The legal basis for collecting and processing personal information for marketing purposes is your explicit consent.
The legal basis under EU law for collecting and processing your Job Application Information is our legitimate interests in considering your job application and the necessity of taking steps ahead of hiring workforce for employment.
The legal basis under EU law for collecting and processing Analytics Information is our legitimate interest in managing the Website our Services and, business development and planning.
The legal basis under EU law for processing your Analytics Information for the purpose of handling instances of abusive use of the Website is our legitimate interests in defending and enforcing against violations and breaches that are harmful to our business.
The legal basis under EU law for sharing your information with our third-party partners for marketing purposes is your explicit consent.
The legal basis under EU law for processing your information where we are legally required to share it, is our legitimate interests in complying with mandatory legal requirements imposed on us.
The legal basis under EU law for processing your information in the event of a change in our corporate structure is our legitimate interests in our business continuity.
You have certain rights to access, update or delete information, obtain a copy of your information, and object or restrict certain data processing activities.
If you are in the EU/EEA you have the following rights under the GDPR:
Right to Access your personal data that we process and receive a copy of it.
Right to Rectify inaccurate personal data we have concerning you and to have incomplete personal data completed.
Right to Data Portability, that is, to receive the personal data that you provided to us, in a structured, commonly used and machine-readable format. You have the right to transmit this data to another service provider. Where technically feasible, you have the right that your personal data be transmitted directly from us to the service provider you designate.
Right to Object, based on your particular situation, to using your personal data on the basis of our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or for the establishment, exercise of defense of legal claims. You may also object at any time to the use of your personal data for direct marketing purposes.
Right to Restrict the processing your personal data (except for storing it) if you contest the accuracy of your personal data, for a period enabling us to verify its accuracy; if you believe that the processing is unlawful and you oppose the erasure of the personal data and request instead to restrict its use; if we no longer need the personal data for the purposes outlined in this Policy, but you require them to establish, exercise or defense relating to legal claims, or if you object to processing, pending the verification whether our legitimate grounds for processing override yours.
Right to be Forgotten. Under certain circumstances, such as when you object to us processing your data and we have no compelling legitimate grounds to override your objection, you have the right to ask us to erase your personal data. However, we may still process your personal data if it is necessary to comply with a legal obligation we are subject to under laws in EU Member States or for the establishment, exercise or defense of legal claims.
Right to Withdraw Consent. If our processing is based on your consent, you may withdraw your consent at any time.
If you wish to withdraw your consent or if you are the data subject and wish to exercise any of your EU rights, please contact us at: firstname.lastname@example.org.
We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you the information that you have asked for, we will explain the reason for this.
You have a right to submit a complaint to the relevant supervisory data protection authority
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.
CHANGES TO THIS PRIVACY NOTICE
Last Update: December 2021