Privacy Notice

‍

At Dream Security Ltd. and our affiliates (collectively, the "Company," or "we," "us," or "our") our customers trust us to protect their businesses and people from the sophisticated and ever-evolving cyberattacks of today and tomorrow. A critical part of earning and maintaining that trust is our commitment to ensuring that our products and systems are secure, and that we appropriately protect information relating to individuals. This Privacy Notice describes how we collect, use, and disclose information about visitors and users of our websites (each, a "Site," or collectively, "our Sites"), online features, and services that link to this Privacy Notice, and information we collect via offline means, such as during interactions with our corporate suppliers and customers, via trade shows or other offline interactions, where applicable.

For the purposes of this Privacy Notice, Dream Security is a controller (i.e., responsible party) for the personal data practices described in this Privacy Notice. This Privacy Notice does not apply to the extent that we process personal data in the role of a processor or service provider (as applicable) on behalf of our business customers. For information about the privacy practices of a Company business customer or a customer affiliate, please contact the respective business customer directly. We are not responsible for the privacy or data security practices of our business customers, which may differ from those set forth in this Privacy Notice.

You can access specific topics within this Privacy Notice by clicking on the relevant links below:

Information the Company Collects
Sources of Personal Data
How We Use Personal Data?
Legal Basis for Processing Personal Data
When We Disclose Personal Data to Third Parties?
Cookies and Other Tracking Technologies
Your Choices
Your Rights
Security & Retention
Children's Privacy
Third Party Links
Data Transfers
Changes to this Privacy Notice
Contact Information

Information the Company Collects

The types of information that indirectly or directly identify you ("personal data") we collect about you depend on how you interact with us. The following are the categories and specific types of personal data that we may collect:

Contact Information/Identifiers, including name, email address, postal address, phone number, login credentials, business contact information, or other similar identifiers and account information.
Government Identifiers, including national identification number, driver's license number, Social Security number, passport number, and/or other governmental identification number.
Commercial Information, in certain instances, such as invoices, business and commercial communications, order status and history.
Device Information and Other Unique Identifiers, including device identifier, internet protocol (IP) address, or similar unique identifiers.
Internet or Other Network Activity, including browsing or search history, and information regarding your interactions with our Sites, emails, or advertisements.
Geolocation Data, including information that permits us to determine your location, such as if you manually provide location information or enable your mobile device to send us location information.
Payment Information, including bank account information, credit or debit card number, or other financial information (when purchasing products and services).
Inferences, drawn from or created based on any of the personal data listed above.
Aggregated or Deidentified Data, derived from the personal data listed above.

Generally, the provision of personal data is voluntary (for possible exceptions, please see the "Legal Basis for Processing Personal Data" section below). However, we may not be able to fulfill the requested purpose of collection if you do not provide us with your personal data, such as to respond to your queries or for our normal business administration, such as projects, services, and billing. However, unless otherwise specified, not providing your personal data will not result in legal or other consequences to you.

Sources of Personal Data

We collect your personal data in the following ways:

Directly From You, when you use our Sites, create an account and profile with us, respond to a survey or an information request, sign up to receive emails, and/or postal mailings, or otherwise contact us directly.
Through Our Use of Cookies and Other Tracking Technologies, when you visit our Sites. We or third parties we work with automatically collect certain information using technologies such as cookies, web beacons, clear GIF, pixels, internet tags, web server logs, and other data collection tools. For more information, please see the "Cookies and Other Tracking Technologies" section below. Where legally required, we obtain your consent.
From Our Third-Party Partners and Governmental Authorities, including from third parties that we have partnered with to provide you our Site and products and services or with whom we collaborate, as well as law enforcement and other government agencies.
Social Media Platforms and Networks. If you interact with us on social media or use features such as plugins, widgets, or other tools made available by social media platforms (including LinkedIn) in connection with our websites or mobile applications ("Social Features"), both we and the social media platform may have access to information about you and your use of both the social media platform, and also our products and services. Additionally, if you use Social Features, information you post or make accessible may be publicly displayed by such third party. For more information about the privacy practices of those social media platforms, please review the privacy policies and settings of the social media platforms and networks that you use.
Other Sources, including data analytics providers, data providers, and publicly available sources.

How We Use Personal Data?

We use your personal data, for the following business purposes:

To identify you when you visit our Sites.
To provide and improve our products and services.
To provide you with our products and services that you have requested.
To evaluate and internally approve a transaction with you in accordance with our compliance policies.
To complete a transaction that you initiate, such as when you purchase Company product.
To facilitate our relationship with you.
To conduct analytics.
To respond to inquiries related to support or other requests.
To send marketing and informational materials including information relating to our products and services.
For internal administrative purposes, as well as to manage our relationships with partners and law enforcement in relation to cybersecurity.
To comply with legal obligations, to establish or exercise our rights, and to defend against a legal claim.
To provide and maintain the functionality of our Sites, including identifying and repairing errors or problems.

Legal Basis for Processing Personal Data

We rely on the following legal grounds for the collection, processing, and use of your personal data:

As necessary to provide a product or service, perform a transaction or otherwise lawfully conduct the business of the Company.
Consent (where you have provided consent as appropriate under applicable law).
As necessary for legitimate interests (such as to protect individuals or maintain the safety and security of our products and services).
Compliance with legal obligations, particularly in the area of social security and protection law, data protection law, tax law, and corporate compliance laws.

Depending on the circumstances, the provision of your personal data may be partly a statutory requirement and partly a contractual obligation.

When We Disclose Personal Data to Third Parties?

We may disclose personal data in the following situations:

Service Providers. We may disclose your personal data to service providers, including payment card processors. Among other things, service providers may help us to administer our services, conduct surveys, and provide technical support.
Affiliates and Partners. We may disclose your personal data with affiliates or strategic partners as needed to provide our services and generally as necessary in the administration of a global organization.
Corporate Transactions. We may disclose your personal data in connection with a proposed or actual corporate merger, acquisition, consolidation, sale of assets, bankruptcy, insolvency or other corporate change.
Financing Transactions. We may disclose your personal data in connection with a proposed or actual investment rounds, borrowing transactions or other financing transactions.
Other Parties. We may disclose your personal data to legal, governmental, or judicial authorities, as instructed or required by those authorities or applicable laws, or to other parties in relation to legal process, such as in response to a subpoena. We may also disclose such personal data if we believe disclosure is necessary to prevent physical, financial, or other harm, injury, or loss.
Law Enforcement. We may disclose your personal data to law enforcement agencies where we believe it is necessary to prevent or investigate illegal activity and/or to further the mission of the Company.
Additional Disclosures. From time to time, we may disclose your information to our attorneys, banks, auditors, securities brokers, insurers and other professional service providers and advisors in connection with the purposes described above.
Other Disclosures with your Consent. We may disclose your personal data with your consent to other unaffiliated third parties who are not described elsewhere in this Privacy Notice.

Cookies and Other Tracking Technologies

Every time you come to the Sites, our Site automatically collects information, including, in some instances, personal data, through cookies, web beacons, tags, pixels, and other similar tracking technologies (collectively "cookies"). Cookies are small text files that are placed on your computer or mobile device when you visit a website. Cookies help the website remember information about your visit, which can make it easier to visit the website again and make the website more useful to you. Some cookies are deleted once you close your browser (session cookies), while other cookies are retained even after you close your browser so that you can be recognized when you return to a website (persistent cookies). More information about cookies and how they work is available at www.allaboutcookies.org.

Where required by law, we base the use of cookies upon consent. Cookies on our Sites are generally divided into the following categories:

Essential Cookies

These are cookies that our Site needs in order to function and that enable you to move around and use the Site and features. Without these essential cookies, the Site will not perform as smoothly for you as we would like it to, and we may not be able to provide the Site or certain services or features you request. Examples of where these cookies are used include: to determine when you are signed in, to determine when your account has been inactive, and for troubleshooting and security purposes.

Analytics and Performance Cookies

Analytics and performance cookies provide us with information regarding how visitors navigate and interact with our Site. Such cookies allow us to understand, for example, more about how many visitors we have to our Site, how many times they visit us and how many times a user viewed specific pages within our Site. Among other analytics cookies, we use Google Analytics cookies for these purposes. For more information about Google Analytics, please refer to "How Google Uses Information From Sites or Apps that Use Our Services," which can be found at www.google.com/policies/privacy/partners/, or any other URL Google may provide from time to time.

Advertising Cookies

Advertising cookies may be placed by us or third parties to enable third party ad networks to recognize a unique cookie on your computer or mobile device. The information that is collected and shared by these types of cookies may also be linked to the device identifier of the device you are using to allow us to keep track of all the websites you have visited that are associated with the ad network. This information may be used for the purpose of targeting advertisements on our website and third party websites based on your interests.

We may use the information collected through cookies and related tracking technologies for the following purposes:

To make our Site easier to use and generally improve its performance.
To gather metrics about how you interact with our Site.
For security reasons.
To provide personalized content. For example, we may store user preferences, your default language, device and browser information, and your profile information, which includes the level of your usage of the Site, so we can identify you across devices and personalize the content you see.
To advertise to you via behavioral based/targeted advertising and allow others to do the same.

You can change the settings of your browser and/or mobile device so that cookies from the Sites cannot be placed on your computer or mobile device. You can usually change your browser settings to opt out of new cookies, disable existing cookies, or simply notify you when new ones are sent to your computer or device. To adjust the settings in your browser to reject cookies, please refer to the help instructions provided by your browser provider (usually found in the "Help," "Tools" or "Edit" menu) or settings on your mobile device. More detailed guidance can be found at www.allaboutcookies.org.

Some cookie providers may also offer opportunities to control your preferences. To learn how to opt-out of Google Analytics, an analytics cookie, please visit https://tools.google.com/dlpage/gaoptout.

Some of these cookies may be placed by third party service providers to help determine the effectiveness of our advertising campaigns or email communications. The use of cookies by third party service providers is within their control and not ours. We do not control their websites or their policies and practices regarding your personal data, and you should be aware that different rules might apply to the collection, use or disclosure of your personal data by third parties in connection with their advertisements or promotions and other sites you encounter on the Internet. This Privacy Notice does not cover any use of personal data that a third party service provider may directly collect from you, and we do not undertake to confirm, investigate, or police their practices.

Your Choices

You may be able to make the following choices regarding your personal data:

Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters and bulletins, surveys, and other news and informational materials to you. You can stop receiving emails by following the unsubscribe instructions in emails that you receive. If you decide not to receive emails, we may still send you product/service-related communications.
Mailings. If at any time you do not want to receive updates, newsletters, bulletins, or information from us, you can remove yourself from our mailing lists by emailing us (our contact information is below) with your name, address and zip code. Please note that our mailings are prepared in advance of their being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.

Please address requests and questions about your choices to the contact information detailed in the "Contact Information" section of this Privacy Notice.

Your Rights

Depending on where you are located (e.g., the European Union, Switzerland, United Kingdom), you may have certain rights regarding your personal data. The rights available to you depend on our reason for processing your personal data and the requirements of applicable law. Specifically, you may have the following rights:

Right to Access. You may have the right to obtain from us confirmation as to whether personal data concerning you is being processed.
Right to Data Portability. You may have the right to request that we transfer the personal data we have collected about you to another organization, or directly to you, in a structured, commonly used, and machine-readable format, under certain conditions.
Right to Correction. You may have the right to request that we correct any personal data about you that is inaccurate.
Right to Deletion. You may have the right to request that we delete your personal data, under certain conditions.
Right to Withdraw Consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Right to Restrict Processing. You may have the right to request that we restrict the processing of your personal data, under certain conditions. In such case, the respective data will be marked and may only be processed by us for certain purposes.
Right to Object to Processing. You may have the right to object to our processing of your personal data under certain conditions, and we can be required to no longer process your personal data. If you have a right to object and you exercise this right, your personal data will no longer be processed by us for such purposes. Such a right to object may, in particular, not exist if the processing of your personal data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that many of the above rights are subject to exceptions and limitations. Your rights and our responses will vary based on the circumstances of the request. If you choose to assert any of these rights under applicable law, we will respond within the time period prescribed by such law. You may also have the right to submit a complaint to your local supervisory authority if you are in the European Union, Switzerland, or the United Kingdom.

In any event, your request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal data or an authorized representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it. To exercise your rights, please contact us as stated in the "Contact Information" section of this Privacy Notice.

Security & Retention

We have implemented generally accepted standards of technical and organizational security to protect personal data from loss, misuse, alteration or destruction. All employees are required to keep personal data confidential and only authorized personnel have access to this information. Despite these protections, however, we cannot guarantee the safety of your personal data. In case there is unauthorized access to or use of your personal data, we may notify you of such access or use, including by electronic means if permitted by law.

We will keep your personal data for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal data for a period of time that enables us to:

Maintain business records for analysis and/or audit purposes.
Comply with record retention requirements.
Defend or bring any existing or potential legal claims.
Deal with any queries or complaints you may have.
Comply with any other relevant laws and regulations.

In other cases, we retain personal data for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

Children's Privacy

The Company generally does not knowingly collect personal data directly from children under the age of 13 (or other relevant age of majority). If you believe we have collected personal data from your child in error or have questions or concerns about our practices relating to children, please notify us using the details in the "Contact Information" section below.

Third Party Links

Our Sites may contain links to websites, content, or services owned or operated by third parties. Please note, that we have no control over the privacy practices of websites or services that we do not own. We encourage you to review the privacy policies of any third party website or application for details about what information is collected and how it is used and/or disclosed. The Company assumes no liability for how third parties may collect and/or use your personal data.

Data Transfers

The Company is headquartered in Israel, and we have operations, entities, partners and service providers throughout the world. As such, we and our partners and service providers may transfer your personal data to, or access it in, jurisdictions that may not provide equivalent levels of data protection as those of your home jurisdiction. We will take steps to provide an adequate level of protection to your personal data in the jurisdictions in which we process it. If you are located in the European Union, Switzerland, or the United Kingdom, we will transfer your personal data in accordance with applicable legal requirements, such as the derogations that permit transfers of personal data in limited circumstances (e.g., the transfer is necessary for important reasons of public interest or the transfer is necessary in order to protect the vital interests of a data subject or of other persons, where the data subject is physically or legally incapable of giving consent) and/or through the use of other measures, such as the EU Standard Contractual Clauses, the UK Standard Contractual Clauses, or the UK Addendum to the EU Standard Contractual Clauses.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our practices, technology, legal requirements, and other factors. When changes are made to this Privacy Notice, they will become effective immediately upon posting. We encourage you to review this Privacy Notice periodically for the latest information on our information processing practices. If this Privacy Notice changes in a material way, we will notify you of the updated Privacy Notice to the extent required by applicable law.

Contact Information

If you have questions regarding this Privacy Notice, please contact the Office of our Chief Legal Officer, at Dream Security Ltd., 152A Menachem Begin St., Tel Aviv, Israel; via email at privacy@dreamgroup.com.

We are also registered in Austria under Dream Advanced Technologies GmbH, with registration No. 642416f. Our address in Austria is Fichtegasse 9/4th floor, 1010 Vienna.

This Privacy Notice includes an "effective" and "last updated" date below. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.

Effective Date: January 20, 2025
Last Updated Date: January 20, 2025