PRIVACY POLICY

This privacy policy (“Privacy Policy” or “Policy”) describes how Intercept Interactive Inc. (D.B.A Perion),  part of the Perion Network Ltd. Group (collectively referred to as “Perion”, “we”, “us”, or “our”), collect, use and disclose certain information, including your personal information and the choices you can make about that information. Perion creates memorable ad experiences by thoughtfully orchestrating solutions across video, advanced TV, rich media, and social, to drive unmatched brand lift and audience engagement on virtually every screen, and every device. This Privacy Policy governs the processing and transfer of information collected in connection with our website, available at: https://www.perion.com/ (“website”), our digital advertising platform (“Platform”) and such services made available therein (collectively, the “Services”).
We collect and process certain information when visitors like you browse our website (“Visitors”), or from our customers or their end-users when our customers use our Platform and Services. We refer to our customers and their end-users as our “Partners” in this policy, and ”Visitors” and “Partners” collectively as “you”).

This Policy applies to all information about you that we collect in connection with the Services throughout the world, and explains what data we may collect from you, how such data may be used or shared with others, how we safeguard it, and how you may exercise your rights related to your Personal Data (as defined below) under the applicable privacy laws such as the EU General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).
In the event you are a California resident, and the CCPA applies to you – please review our CCPA Privacy Notice.

01. POLICY CHANGES

We reserve the right to amend this Policy from time to time, at our sole discretion. The most recent version of the Policy will be posted on the website. We will provide notice to you if these changes are material, and, where required by applicable law, we will obtain your consent. Any amendments to the Policy will become effective within 30-days upon the display of the modified Policy. We recommend you review this Policy periodically to ensure that you understand our most updated privacy practices.

02. CONTACT INFORMATION AND DATA PROCESSOR INFORMATION

Perion is incorporated under the laws of the State of New York, and it is the processor of your Personal Data.
You may contact our privacy team and our DPO as follows:

• By Email: [email protected]
• By Mail: One World Trade Center, 71st Floor, Suite J New York, NY 10007.

Our EU GDPR Representative is:

Rickert Rechtsanwaltsgesellschaft mbH
– Perion Network Ltd –
Colmantstraße 15
53115 Bonn
Germany

[email protected]

Our UK-GDPR Representative is:

Rickert Services Ltd UK
– Perion Network Ltd –
PO Box 1487
Peterborough
PE1 9XX
United Kingdom

[email protected]

03. DATA WE COLLECT AND FOR WHAT PURPOSE

During your interaction with our Services, we may collect and aggregate non-personal, non-identifiable information, which may be made available or gathered via your access to and use of the Services (“Non-Personal Data”). We are not aware of the identity of the user from which the Non-Personal Data is collected. The Non-Personal Data being collected may include usage information and technical information transmitted by your device, such as: the type of browser or device you use, language preference, time and date stamp, and country location.  Non-Personal data is stored and used in aggregated form, only.

We may also collect from you, during your access or interaction with the Services, information that identifies an individual or may, with reasonable effort, be used to identify an individual (“Personal Data”).  Any Non-Personal Data connected or linked to any Personal Data shall be deemed as Personal Data as long as such connection or linkage exists.
We do not knowingly collect or process any Personal Data constituting or revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning a person’s health, or data concerning a person’s sex life or sexual orientation.

The types of Personal Data that we collect as well as the purpose for processing such data and lawful basis are specified in the table below.  We typically process data subject to our legitimate interest or your consent, as detailed below.  Where we process data subject to your consent, you may withdraw consent at any time by using the cookie preference settings or by using our Data Subject Request Form.

The transfer of personal data to third-party countries, as further detailed in the Data Transfer Section, is based on the same lawful basis as stipulated in the table above.
In addition, we may use certain Personal Data to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of the Services and to enforce the Terms, as well as to protect the security or integrity of our databases and the Services, and to take precautions against legal liability. Such processing is based on our legitimate interests.

04. HOW WE COLLECT DATA

• Automatically, when you visit our website or interact with our Platform, including through the use of cookies (as detailed below) and similar tracking technologies.
• When you voluntarily choose to provide us with information, such as when you contact us.
• When it is provided to us from third parties.

05. COOKIES AND SIMILAR TECHNOLOGIES

Cookies we use on our website:

We use “cookies” (or similar tracking technologies) when you access our website. The use of cookies is a standard industry-wide practice. A “cookie” is a small piece of information that a website assigns and stores on your computer while you are viewing a website. Cookies can be used for various purposes, including allowing you to navigate between pages efficiently, as well as for statistical purposes, analytic purposes, and marketing. You can find more information about our use of cookies here.

Cookies we use on our Platform:

Our Partners may independently collect, through the use of such tracking technologies, some or all types of Personal Data detailed above, including combining such information with other information they have independently collected relating to your browser’s activities across their network of websites, for enhanced targeting functionality and delivering personalized ads, as well as providing aggregated analytics related to the performance of the interacted campaign or advertisement.
Additionally, the end user may opt-out of certain advertisers’ cookies and browser-enabled, interest-based advertising – see detailed information below under the User Right and Opt Out Option Section.

Once the end user chooses to opt out or disable cookies, the end user will still receive content and advertising, however, it will not be targeted content or advertising and Personal Data will not be collected and transferred from the end user’s browser.

06. WHO WE SHARE PERSONAL DATA WITH

We share your Personal Data with third parties, including our Partners or service providers that help us provide our Services. You can find here, and in our CCPA Notice, information about the categories of such third-party recipients.

Our third-party partners, including Tapad, Inc., may set and/or access cookies or other data collection technology which collect information (not including your name, address,or telephone number) about your visits to this and other websites, mobile websites and/or mobile applications across your various devices, in order to match those devices together by creating a profile revealing likely associations of, or connections between, them. That profile is used to determine that you are likely to be the same user visiting the websites or applications on different devices, and to provide more tailored advertising, marketing, measurement, analytics, and research about goods and services of interest to you across those various devices. If you would like more information about this practice and to know your choices with respect to it, please refer to the relevant third parties’ privacy policies. Tapad’s privacy notice is available at https://www.tapad.com/global-privacy-notice.

07. YOUR RIGHTS

Depending on your relationship with us and applicable data protection laws, you may have certain rights with regard to your Personal Data.
For California residents, please see our CCPA Notice.
For detailed information on your rights and how to exercise your rights, please see the Data Subject Request Form (“DSR”) available here.
Certain rights can be exercised independently by you without the need to fill out the DSR Form:

• You can correct your Udrive Account information, including your Contact Information, payment information, and other Partner information at any time, through the account settings;
• You can opt-out from receiving our emails by clicking the “unsubscribe” link at the bottom of the email;
• You can withdraw your consent for processing Online Identifiers and Behavior Data, for analytics or marketing purposes, at any time by using the cookie settings on the website on which the ad is served.
• Opt-out from Interest-Based Advertising, please see the section below and the CCPA Notice.

08. OPT-OUT OF INTEREST-BASED ADVERTISING

Perion is committed to providing consumers notice and choice regarding IBA. Perion offers an “opt-out” for those that wish to opt-out of Perion IBA activities on the web.

This cookie will honor your IBA preferences for a period of five (5) years. We may increase this period, which means your opt-out choice will continue for a longer period. If you have multiple Internet browsers or users on the same computer, you will need to perform the opt-out operation for each browser and/or user. If you or your anti-virus or other software deletes the opt-out cookies from your computer, if you re-install your browser, or if you delete your cookies (which can happen if you clear or delete your browser history), then you will need to repeat the process.

Perion is a member of the Network Advertising Initiative (“NAI”) and the Digital Advertising Alliance (“DAA”). You may opt-out of web IBA conducted by Perion and other member companies of the NAI by visiting the NAI website: www.networkadvertising.org, or you may opt-out of IBA by Perion and other member companies of the DAA by visiting the DAA website: https://www.aboutads.info/choices/.

Perion adheres to the Digital Advertising Alliance of Canada (“DAAC”) principles. For Canadian consumers, you may also access the opt-out tool on the Digital Advertising Alliance of Canada (DAAC) website or the Ad Choices Canada website (en Français): https://youradchoices.ca/icon/index.html

If you are a California resident and wish to opt-out from having your data used for IBA, you may exercise your right here: https://optout.privacyrights.info/.

You may also be able to configure your IBA preferences and opt-out of the collection of information for advertising purposes from your Internet connected devices (e.g., Smart TVs or Set-Top boxes). Depending on the model of your Internet connected device, please refer to the applicable manual and/or settings menu of the applicable device. In addition, you may also refer to the NAI Connected TV choices opt-out page: https://thenai.org/opt-out/connected-tv-choices/, which explains how users can activate privacy features in many common TV and OTT environments.

Perion is also committed to providing customers the ability to opt-out of IBA in the mobile setting. For mobile opt-outs, we rely on the standard opt-out mechanism for ad traffic that we get from mobile applications. Users may choose not to be tracked for advertising purposes by accessing their mobile device’s privacy settings. When Perion receives an in-app ad request from an in-app advertising partner, it also receives a “DNT” (do not track) indication in the ad request. The value for the DNT parameter is captured from the user’s privacy settings. When Perion receives a DNT=1, we honor this as an opt-out request. Additional information and instructions on opting-out on mobile devices may be available on the NAI Mobile Device Opt-out page: https://thenai.org/opt-out/mobile-opt-out/.

Perion’s website and Services also are able to recognize the Global Privacy Control preference.

Ad choices settings and options will vary depending on your browser and device settings, and this is not an exhaustive list. Please note that your opt-out choices will only apply to the specific browser or device from which you opt-out. We encourage you to explore your device and browser settings to understand your choices better. Please report any problems related to the opt-out process to [email protected].

09. DATA RETENTION

In general, we retain the Personal Data we collect for as long as it remains necessary for the purposes set forth above, consistent with applicable regulations, or until you express your preference to opt out, where applicable.
The retention periods are determined according to the following criteria:

1. For as long as it remains necessary in order to achieve the purpose for which the Personal Data was initially processed. For example: if you contacted us, we will retain your contact information at least until we will address your inquiry.
2. To comply with our regulatory obligations. For example: transactional data will be retained for up to seven years (or more under certain circumstances) for compliance purposes.
3. To resolve a claim we might have or a dispute with you, including any legal proceeding between us, until such dispute is resolved, and following, if we find it necessary, in accordance with applicable statutory limitation periods.

Please note that except as required by applicable law, we will not be obligated to retain your data for any particular period, and we may delete it for any reason and at any time, without providing you with prior notice of our intention to do so.

10. SECURITY MEASURES

We have designed the Services with strong security features to protect the Personal Data we process. We have implemented physical, technical, and administrative security measures for the Services that include encryption using SSL, data minimization, and access controls.

11. INTERNATIONAL DATA TRANSFERS

Our data servers in which we host and store the information are located in the US. The Company’s headquarters are based in New York and Israel in which we may access the information stored on such servers or other systems such as the Company’s ERP, CRM, Salesforce, and other systems. In the event that we need to transfer your Personal Data out of your jurisdiction, we will take appropriate measures to ensure that your Personal Data receives an adequate level of protection as required under applicable law. Furthermore, when Personal Data that is collected within the European Economic Area (“EEA”) or the United Kingdom (“UK”) is transferred outside of either jurisdiction to a country that has not received an adequacy decision from the European Commission or UK Information Commissioner’s Office (“ICO”), we will take necessary steps in order to ensure that sufficient safeguards are provided during the transferring of such Personal Data, in accordance with the provision of the standard contractual clauses approved by the European Union and UK. Thus, we will obtain contractual commitments or assurances from the data importer to protect your Personal Information, using contractual protections that EEA and UK regulators have pre-approved to ensure your data is protected (known as standard contract clauses), or rely on adequacy decisions issued by the European Commission or ICO. Some of these assurances are well-recognized certification schemes.

12. CHILDREN’S PRIVACY

The Services are not intended for use by children (the phrase “child” shall mean an individual that is under the age defined by applicable law, which concerning the EEA is under the age of 16, and with respect to the US, under the age of 13), and we do not knowingly process children’s information. We will discard any information we receive from a user that is considered a “child” immediately upon discovering that such a user shared information with us. Please contact us at: [email protected] if you have reason to believe that a child has shared any information with us.