GoMixApp Privacy Policy

GoMixApp Privacy Policy

GoMixApp Privacy Policy

The Network and Beyond LTD (“Company”), an Israeli company, respects the privacy of users of the GoMixApp platform (“GoMixApp”). This GoMixApp Privacy Policy (“Policy”) outlines how we collect, use, and protect your data and is an integral part of the GoMixApp Terms of Use (“Terms”). By accepting the Terms, you agree to this Policy and are required to comply with it.

This Policy applies to the Company, Space Owners, Space Participants, and End Users of GoMixApp as detailed below.

1. Definitions

The definitions provided in the Terms of Use apply to this Policy. Additional key terms include:

• “Space Owners” refers to individuals or entities that create and manage specific Spaces within GoMixApp. Space Owners are responsible for the content presented in their Spaces and for ensuring compliance with this Policy and applicable laws by their Space Participants and Space End Users.
• “Space Participants” refers to individuals participating in a specific Space within GoMixApp.
• “Sensitive Data” refers to data such as health information, political opinions, religious beliefs, etc.
• “Third-Party Tracking” refers to services like Google Analytics that monitor and analyze traffic on the platform.
• “Data Portability” refers to the right of users to request their data in a structured, commonly used, and machine-readable format, allowing them to transfer their data to another service.

2. General Responsibilities

• Space Owners: As a Space Owner, you must comply with this Policy and ensure that your Space Participants and Space End Users also comply with it. You are required to monitor compliance by your Space Participants and Space End Users and are fully responsible for any consequences arising from actions taken by you, your Space Participants, or Space End Users that violate this Policy or any applicable law. In such cases, you must compensate the Company for any resulting loss or damage. Additionally, you must ensure that any information collected from Space End Users is done in compliance with this Policy and applicable laws, including obtaining necessary consents.
• End Users: As an End User, you must comply with the relevant parts of this Policy. You are responsible for any consequences arising from actions you take in violation of this Policy or any applicable law and must compensate the Company for any resulting loss or damage.

3. Data Collection

GoMixApp is a platform that enables Space Owners and Space Participants to present content to Space End Users and collect data from them through various means, including building and deploying forms.

• Content Creation: Space Participants can upload images, text, and other types of media to the GoMixApp platform to create content for their users. This content can be used to engage with Space End Users, provide information, or collect data through forms or other interactive elements.
• Personal Data: By accepting this Policy, you consent to the collection of necessary information for operating and enhancing GoMixApp, including your name, age, address, payment method, email address, and passwords (“Registration Data”).
• Other Data: We may also collect additional information during your use of GoMixApp, such as your profession, interests, viewed advertisements, pages visited, and IP address (“Other Data”) to improve your experience and personalize the services offered.
• Forms and Data Collection: Space Owners and Space Participants may create forms within GoMixApp to collect information from Space End Users (“Space End Users Data”). This data collection can include a wide range of information depending on the forms and content created by the Space Owners and Participants. Space Owners must ensure that any data collected through these forms complies with this Policy and applicable laws, including obtaining clear consent from Space End Users where necessary.

4. Data Accessibility

By accepting this Policy, you consent to the collection and access to the following types of data:

• Company Access: The Company may access all types of data, including Registration Data, Other Data, and Space End Users Data (collectively, “Database”).
• Space Owner Access: Space Owners and their Space Participants may access Space Participants and Space End Users Data as necessary to operate and manage the Space.

5. The Database

• Data Storage: All information collected by the Company is stored in a virtual cloud located in Europe (Netherlands and Germany), using the services of “Digital Ocean.” GoMixApp uses a single database with virtual separation and high-level security mechanisms to ensure that data integrity and security are maintained between different Spaces. Each party is responsible for ensuring compliance with this Policy, implementing appropriate security measures, and ensuring the lawful use of data in accordance with this Policy, the Protection of Privacy Law, 5741-1981 (“PPL”), and other applicable laws such as the GDPR for European users.
• Cross-Border Data Transfers: If personal data is transferred outside of Israel or the EU, the Company will ensure that adequate safeguards are in place in accordance with Israeli law and the GDPR, such as Standard Contractual Clauses or an adequacy decision, and will obtain your consent where necessary.
• Registered Database: The Company maintains a registered database with the Israeli Privacy Protection Authority, with registration ID 700070808.

6. Use of Information

The Company and Space Owners will use the collected data solely in accordance with this Policy and applicable laws, including the PPL. Permissible uses of the data include:

• Suggesting other services of the Company, GoMixApp, or the Space Owner.
• Improving, enriching, or canceling the services and content offered by GoMixApp.

Disclosure: Neither the Company nor Space Owners may disclose your data to third parties without your clear consent, except as required by law or in the event of a legal dispute. If personal data is transferred outside of Israel or the EU, the Company will ensure that adequate safeguards are in place in accordance with applicable laws.

7. User Rights

• Right to Access: You have the right to request access to the information held about you, correct any inaccuracies, request deletion of your data, or request data portability. The Company will respond to such requests within 30 days. Requests should be addressed to the contact details provided below.
• Right to Object: You have the right to object to data processing, particularly for direct marketing purposes. You can manage your consent preferences through your account settings.

8. Data Security

The Company implements advanced security systems and procedures, including encryption and access controls, to protect your data. The Company, an Israeli company, is certified under ISO 27001, an internationally recognized standard for information security management, which underscores our commitment to maintaining the highest standards of data protection. While these systems significantly reduce the risk of unauthorized access, no system can guarantee absolute security.

Breach Notification: In the event of a data breach, the Company will promptly notify affected users and the relevant authorities in accordance with applicable laws. Notification to affected users will occur as soon as possible, typically within 72 hours of becoming aware of the breach, in line with GDPR requirements.

9. Data Retention

• Retention Period: Personal data collected by the Company will be retained only as long as necessary to fulfill the purposes for which it was collected or as required by law. After this period, the data will be securely deleted. Sensitive Data will be retained for a shorter period and will be deleted as soon as it is no longer necessary for the purposes for which it was collected.

10. Cookies and Tracking Technologies

• Cookies: GoMixApp uses “cookies” to facilitate operations, collect usage statistics, verify details, adjust preferences, and enhance security. Users can manage their cookie preferences through their browser settings.
• Third-Party Tracking: The Company uses third-party tracking technologies, such as Google Analytics, to monitor and analyze all traffic on the platform, including interactions by Space Editors and Space End Users. This data helps us understand how the platform is used, improve the user experience, and optimize our services. Information collected by Google Analytics may include your IP address, browser type, device information, and usage patterns. You may opt out of such tracking through your browser settings or by using opt-out tools provided by Google Analytics.

11. Advertisements by Third Parties

The Company allows other companies to advertise on GoMixApp. Advertisements you see may come from the computers of these third-party companies, which may use cookies to collect information about the sites you visit while interacting with their ads. You may manage these cookies through your browser settings.

12. Notifications and Updates

• Updates: All notifications for Space Participants, Space Owners, and Space End Users are managed solely through the GoMixApp status page at https://gomixapp.statuspage.io/. Users have the option to subscribe to updates on this page to receive notifications about services, policies, and other important information.
• Policy Updates: The Company reserves the right to update this Policy at any time. Updates will be communicated through the GoMixApp status page. You will receive updates only if you have subscribed to the status page.
• Annual Review: The Company commits to reviewing and updating this Privacy Policy at least annually or whenever significant changes occur in data processing practices, ensuring that the policy remains up-to-date and compliant with applicable laws.

13. Providing Information to a Third Party

The Company will not transfer your personal information to any third party except under the following circumstances:

• In the event of a legal dispute between you and the Company.
• If you engage in illegal activities while using GoMixApp.
• If required by a judicial order.
• If the Company is sold or transferred to new ownership.

14. Scope of Responsibilities of this Privacy Policy

The Company is fully responsible for complying with this Policy and requires all Space Owners and End Users to do the same. However, the Company

is not responsible for enforcing compliance by Space Owners, Space Participants, or End Users. Any claims or demands regarding privacy policy violations by Space Owners or their participants must be addressed directly to the Space Owners. The Company will not compensate for any violations by Space Owners, Space Participants, or End Users.

15. Data Sharing with Google (Enhanced Conversions)

When you submit a form, place an order, or complete another conversion action on our website, we may share a limited set of identifiers with Google Ireland Limited and Google LLC (hereinafter: “Google”).

This sharing allows Google to match the conversion you performed with the ad click that brought you to our site. This feature is called Enhanced Conversions for Leads (and, where enabled, “User-provided data collection” in Google Analytics).

• What we share: Upon receiving your consent, our servers securely hash (using the SHA-256 algorithm) personal identifiers before transmitting them to Google. These identifiers include your email address and, if provided, your phone number. We do not share original, unhashed values. Additionally, we may transmit a click identifier (such as gclid, gbraid, or wbraid) previously placed on your device by Google, along with the conversion timestamp and conversion value.
• Why we share: To measure the effectiveness of our Google Ads campaigns by matching server-side conversion events to the original ad click. This enables Google’s bidding models to optimize our campaigns. Without this matching, the data we receive regarding our advertising performance is less accurate.
• Legal Basis: This data transfer is based on your consent (in accordance with Article 6(1)(a) of the GDPR), collected via the cookie banner on our website (consent signals ad_user_data and ad_personalization). If you do not consent or if you withdraw your consent, we will not transmit these identifiers, and the Enhanced Conversions feature will not operate for you.
• Recipients: Data is transferred to Google Ireland Limited (acting as the data controller for users in the European Economic Area – EEA) and to Google LLC in the US (based on EU Standard Contractual Clauses and the EU-US Data Privacy Framework). Google’s commitments are outlined in the Google Ads Data Processing Terms and the Google Customer Match policy.
• Data Retention: Google retains the hashed conversion identifiers for as long as required to measure the relevant campaign, after which they are deleted or fully anonymized. Our event data in Google Analytics 4 (GA4) is retained for 14 months (the standard maximum retention period) and is subsequently deleted automatically.

16. Sharing Data with Google to Create Custom Target Audiences (Google Customer Match)

In addition to the conversion measurement detailed in Section 15, we may use the customer and lead lists held in our databases to create target audiences for marketing and advertising purposes (Customer Match). This allows us to show you relevant ads, or to find new audiences with similar characteristics (Similar Audiences), on Google’s advertising platforms (Google Ireland Limited and Google LLC). This use differs in purpose from use for measurement.

What we share: As with conversion measurement, customer lists containing personal identifiers such as email addresses and phone numbers undergo a strict, one-way encryption process (SHA-256 hashing) on our servers before upload. We upload only the encrypted lists to Google in bulk (Bulk Upload), and we do not share your original values.

Why we share: The purpose is marketing and advertising — to enable targeting and the display of focused ads to users who have expressed interest in our services, or to exclude such users from certain campaigns.

Legal basis: Activating this feature and exporting the data are performed in accordance with the consents we obtain from you (including under Article 6(1)(a) of the GDPR, where applicable), collected at registration, on submitting your details, or via the site’s consent banner.

Recipients and data retention: The encrypted lists are transferred to Google Ireland Limited and Google LLC. Google uses the encrypted data solely to match the audiences to existing Google users, in accordance with Google’s strict Customer Match policy. The data is retained by Google for a period limited to the needs of the relevant campaign (no more than 540 days from the last interaction), after which it is deleted.

17. Your Rights

We respect your privacy and provide you with the following rights:

Access, Correction, or Deletion of Data: You may request access to, correction of, or deletion of your personal data held by us. Please contact us via email at info@gomixapp.co.il, and we will process your request within the timeframes required by law.

Withdrawal of Consent and Opt-Out: You may withdraw your consent at any time via the “Manage Preferences” option in the website’s cookie banner, by deleting the website’s cookies through your browser settings, or by contacting us directly to request removal from our distribution lists and Customer Match audiences. Users who withdraw their consent to marketing will be excluded from the lists transferred to Google.

Opt-out of Personalized Ads: You can prevent Google from using your data to display personalized ads directly through the ad settings in your personal Google Account (My Ad Center).