1. Overview

​

We appreciate your interest in our website and company. Our website includes links to external sites for informational purposes only and we carefully review these links. However, we cannot be held responsible for the content or security of these external links. We take the privacy of your personal information seriously and comply with legal requirements when processing your data. Please refer to our website for more information on our data handling and protection policies.

​

   1.1. CyberLion Advisory Business Consultant, located at Suite 39, Sde Uziyau, Israel, is responsible for processing your personal data.

​

   1.2. You can find our legal notice on our website at www.CyberLion.org.

​

   1.3. For any inquiries, you can reach us at info@cyberlion.org.

​

For questions regarding data protection, please contact us through the email or postal address listed above.

​

2. How Your Data is Use.

​

   2.1. We process the following personal data in the course of our business dealings:

​

   2.1.1. If you simply visit our website, we will only process your personal data as outlined in section 5. This data may include information necessary to fulfill our contractual obligations (such as policy information), advertising and sales data, documentation data (such as consultation records), registration information, data from your electronic communications with other companies, data processing results generated by the CyberLion Advisory organization, and data necessary to comply with our legal and regulatory requirements.

​

   2.1.2. We also process data obtained from other CyberLion Advisory affiliates, credit agencies, and publicly available sources (such as the Companies Register, Land Register, and media). We may also receive data from public authorities (such as courts) or government officials.

​

   2.1.3. In certain circumstances, we may also process special categories of your personal data (such as contact information) as described in section 3.4.

​

   2.1.4. Depending on the context in which we process your data, we will provide you with additional information as necessary. We only process the data that is necessary for the specific processing purpose (for more information, see section 3.).

​

   2.2. Data of Minors (Under 18 Years Old): We do not enter into contracts with minors and it is illegal for us to do so. By accepting an online contract or utilizing online services, you confirm that you are over 18 years old or have obtained the consent of your legal guardian.

​

3. Purposes and Legal Bases for Processing Your Personal Data

​

   3.1. Contractual Performance Based on Art. 6 (1 b) GDPR

​

   3.2. As independent business advisers, we process personal data in the course of our business relationships with you or your employer as our customer (client) and/or supplier. This includes electronically created, saved, and archived documents (such as correspondence) related to contract offers and acceptances, contract preparation, administration and fulfillment of contractual obligations, as well as photographs and other documents uploaded by you. Additional information on our data processing can be found in your contract documents.

​

   3.3. Processing for Legal Obligation Compliance Based on Art. 6 (1 c) GDPR

​

   3.4. Legal Regulations Requiring Data Processing:

​

     3.4.1. Provision of information to judicial authorities and courts in criminal proceedings or to financial authorities in financial offenses cases, as per the Code of Criminal Procedures and Financial Criminal Code.

​

     3.4.2. Prevention of fraud or money laundering.

​

     3.4.3. Regulations on reporting potential grievances.

​

   3.5. Processing to protect legitimate interests as per GDPR Article 6 (1 f)

​

   3.6. In order to protect the legitimate interests of the Controller, data may be processed based on balancing your interests and our interests beyond the specific execution of a contract. This includes the following types of data processing activities and the interests we pursue with them:

​

     3.6.1. IT services for the protection of network and information security

​

     3.6.2. Marketing (including direct marketing) to offer our services

​

     3.6.3. Monitoring of CyberLion Advisory services for ongoing optimization

​

     3.6.4. Business management activities for the development of services and products

​

     3.6.5. Exercising and defending legal rights in judicial and extra-judicial proceedings

​

     3.6.6. Prevention of fraud or money laundering

​

     3.6.7. Processing for statistical purposes

​

     3.6.8. Processing for market research

​

     3.6.9. Compliance with and implementation of regulations for reporting possible grievances.

​

     3.6.10. Internal communications within CyberLion Advisory for the purposes mentioned above.

​

​

In addition to that, when personal data is transferred to third parties, we ensure that appropriate technical and organizational measures are in place to protect the data, in accordance with the GDPR. This includes, for example, signing data processing agreements with the third party, ensuring that the third party implements appropriate security measures and regularly monitoring the third party's data protection measures to ensure that they are being followed.

​

If personal data is transferred to countries outside the delivery country such as in the European Economic Area (EEA), US and other countries, we ensure that appropriate safeguards are in place to protect the data, such as standard data protection clauses approved by the European Commission.

​

In summary, we take the protection of your personal data very seriously and have measures in place to ensure that your data is processed in accordance with the GDPR and other relevant data protection laws.

​

   3.7. Data processing for the purposes of profiling and automated decision-making

In some cases, we may process your personal data to create a profile of you or to make automated decisions about you. This can help us to provide you with customized services and offers. Profiling and automated decision-making may also be used to analyze and evaluate your behavior and preferences, and to improve our services and products.

​

In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, unless you have given your explicit consent or the processing is necessary for the conclusion or performance of a contract between you and CyberLion Advisory. If you choose to exercise this right, we will ensure that a person reviews the decision and makes a final determination.

​

It is important to note that the above-mentioned data processing activities are carried out in accordance with the relevant legal provisions, including the GDPR and national data protection laws. Our data processing activities are carried out with utmost care to ensure the protection and confidentiality of your personal data. If you have any questions or concerns about our data processing activities, please do not hesitate to contact us.

 

   3.8. It is important to note that in some cases, not providing personal data may result in certain consequences. For example, if you do not provide your name and address, it may not be possible for us to provide you with our services. In other cases, if you do not provide the required personal data, it may prevent us from fulfilling our legal obligations. However, it is always your choice to decide whether or not to provide us with your personal data. If you choose not to provide us with the necessary data, we will inform you of the consequences of not providing the data. We will always respect your privacy and will not use your personal data in any way that is not in accordance with the laws and regulations governing data protection.

​

3.9. Additionally, we do not engage in profiling activities as defined by the GDPR Art. 22(1) and Art. 4. Decisions regarding our services and products are made based on human evaluation and assessment of the information provided. If in the future we were to implement automated decision-making or profiling activities, we would inform you in accordance with the GDPR regulations and provide you with an opportunity to object to such processing.

​

4. Transmission and retention of personal data

​

   4.1. The security of your personal data is important to us. For that reason, your data are only shared where there is a contractual or legal requirement to do so, or where this is necessary for the protection of our legitimate interests (e.g. within the company), or with your consent. Your personal data may be shared with:

​

     4.1.1. Other CyberLion Advisory companies within the CyberLion Advisory Group and third parties, their employees and agents, to the extent that this is necessary for the fulfilment of contractual, legal or regulatory obligations, and for the protection of legitimate interests, or their back-office services or service lines, for the fulfilment of our associated responsibilities or otherwise for the provision of our services

​

     4.1.2. In some cases it may be necessary to transfer your personal data outside the EU or EEA for the fulfilment of contractual or legal obligations or for the protection of the legitimate interests of CyberLion Advisory. In such cases, appropriate measures will be taken to ensure that the data is protected in accordance with the relevant legal provisions. This may include the use of standard contractual clauses approved by the European Commission, or the conclusion of an agreement with the recipient of the data that provides adequate protection for personal data in accordance with the relevant legal provisions.

​

     4.1.3. Service providers that assist us in carrying out our business activities, such as providers of marketing services, financial institutions, and payment processors. Please note that in all cases, the data transfer is carried out in accordance with the provisions of the GDPR, in particular with regard to data protection and data security.

​

     4.1.4. This paragraph describes the circumstances under which your personal data may be transferred to third countries outside the European Union (EU). In cases where data have to be transferred to a third country without adequate data protection regulations, such transfer will be made on the basis of EU standard contract clauses or other guarantees of adequate data protection, as defined in the General Data Protection Regulation (GDPR) Chapter V. CyberLion Advisory companies located in third countries are contractually obliged within the CyberLion Advisory Group to uphold the standards of data protection and security as defined in the GDPR.

​

In some cases, CyberLion Advisory companies may be joint controllers with other companies, including in third countries (e.g. for cross-border solutions). In these situations, contracts for joint controllers are signed that specify the detailed requirements in accordance with Art. 26 of the GDPR. If you are a data subject and your data is being processed as a joint controller by CyberLion Advisory companies, you have the right to exercise your rights as a data subject and make claims under the GDPR. These rights can be exercised against each relevant controller, unless a specific point of contact has been communicated to you.

​

4.1.5. Data transfers to countries outside the of the delivery country may take place in exceptional cases and only if this is necessary for the fulfilment of contractual obligations, or if you have given your explicit consent. In such cases, we ensure that appropriate measures are in place to protect your data, such as standard contractual clauses approved by the European Commission or binding corporate rules.

​

4.1.6. Your personal data will be kept for as long as it is necessary for the fulfilment of the purposes described in this Privacy Policy. After this, we will either delete or anonymize your personal data, unless we are required by law to retain certain information, such as invoices, for a longer period of time. The length of time we retain your personal data will depend on various factors, such as the type of data, the reason for processing, and our legal obligations.

​

4.1.7. The technical and organizational security measures we have in place ensure that we comply with the highest standards of data protection and security, as required by the GDPR. This includes the use of modern security software and encryption methods, physical access controls, authorization concepts, pseudonymization and other measures to protect against external and internal attacks. Our centralized IT services, provided by the computing center, support these protective measures and ensure that they are in place across all CyberLion Advisory companies. This helps to ensure that your personal data is always secure and protected, and that we are able to provide our services to you in a secure and reliable manner.

​

5. Online media

​

   5.1. Cookies

Cookies are used on our website in accordance to the relevant guidelines and directives and with respect to maintaining your privacy

​

   5.2. Social networks

We work in cooperation with various social networks. If you use these social networks, your browser will automatically be linked to the relevant network. This transmits your IP address and other information such as cookies, if you have already visited the platform concerned.

​

As far as possible we avoid this kind of data transfer until you do interact with one of these platforms. By clicking the relevant symbol (e.g. the Facebook logo) you indicate that you are ready to communicate with the selected platform, and accept that information about you, such as your IP address, is transmitted to that social network. Our website offers the option to interact with various different social networks via plug-ins.

​

5.3. We have no influence over the extent and content of the data transmitted to the operator of the social network when you click on its plug-in. If you would like to find out more about the type, extent and purpose of the data collected by the operators of these social networks, we recommend that you read the data protection policies of each social network.

​

   5.4. Contact form

     5.4.1. Your personal data submitted through our contact form will be processed in accordance with applicable data protection laws, including the GDPR. The data processing is necessary for us to respond to your enquiry and to communicate with you. The legal basis for this data processing is our legitimate interest in providing you with customer support and answering your questions. We will only retain your personal data for as long as necessary to fulfil the purpose for which it was collected, and in accordance with our internal data retention policies. After that, your personal data will be deleted or anonymized, unless we are required to retain it for a longer period in accordance with applicable laws and regulations. If you have any concerns or questions about how your personal data is being processed, please do not hesitate to contact us. We will do our best to assist you and address any concerns you may have.

​

6. Your rights

​

   6.1. In accordance with data protection laws, you also have the right to file a complaint with the relevant regulatory authority if you feel that your personal data has not been processed in accordance with the regulations. The Controller for the processing of your personal data, as defined in item 1.1, is available to answer any questions or concerns you may have about the processing of your personal data. To ensure the security of your data, it is important that we verify your identity every time you contact us with regards to your personal data.

​

   6.2. If you wish to exercise your rights under the GDPR, please contact the Controller for the processing of your personal data, as defined in item 1.1. In order to ensure the protection of your personal data, it is essential that we check your identity before granting access to, or making any changes to, your personal data.

​

   6.3. The Controller must respond to your request within one month of receipt, however this period may be extended by two further months where necessary, taking into account the complexity and number of requests. The Controller will inform you within one month of receipt of the request and the reasons for the delay.

​

   6.4. If you believe that the processing of your personal data infringes the GDPR, you have the right to file a complaint with the regulatory authority.

​

   7. If you have any questions about this privacy policy or about our handling of your personal data, please feel free to contact us using the contact information provided in item 1.1. We will be happy to assist you.

​

   8. This privacy policy last updated on the publication time of this website. Any revision for this policy will be published directly to the site and no declaration will made when such changes will occoure. It is the users responsibility to review the privacy policy if any questions arise. In case of questions related to the policy, please contact us in info@cyberlion.org . It is effective as of the date it was last updated.