Privacy Policy

1. Who we are (controller identity)

This website (cidah.ai) is operated by {{LEGAL_ENTITY_NAME}}, company number {{COMPANY_NUMBER}}, registered address {{REGISTERED_ADDRESS}} (“CIDAH”, “we”, “us”). CIDAH is the controller of personal information processed through this website.

Privacy contact: {{PRIVACY_CONTACT_EMAIL}}. Data protection officer / privacy officer: {{DPO_NAME_OR_NA}}.

2. What we collect

• Contact details you choose to send us: {{CONTACT_FORM_FIELDS}} (via the contact page or by email).
• Server logs, including IP address, request time, and user-agent, generated automatically when you visit the site.
• Cookie and storage identifiers, as described in our Cookie Policy — a first-party consent record and anonymous CIDAH Groove tour progress only.
• Questions you choose to submit to CIDAH Groove are processed to produce a response. CIDAH's Groove audit record excludes the question and answer content.
• Inbound email you send us, including its content and metadata.

3. Purposes and lawful bases

We process personal information to respond to your inquiries, operate and secure the website, and — only with your consent where required — to load optional analytics or third-party media. Where the EU General Data Protection Regulation (GDPR) applies, the lawful basis for each purpose is set out in the following table: {{GDPR_LAWFUL_BASIS_TABLE}}.

4. Recipients and processors

• Hosting: {{HOSTING_PROVIDER}}.
• Email: {{EMAIL_PROVIDER}}.
• Analytics: {{ANALYTICS_OR_NONE}}.
• CIDAH Groove routing, when used: the isolated CORE-WEB-THIN public service.
• YouTube / Google — only if you consent to third-party media embeds and click to play an embedded video.

5. International transfers

CIDAH operates from Israel, which benefits from a European Commission adequacy decision for transfers of personal data from the EU. Where personal information is transferred to recipients in the United States, we rely on {{DPF_OR_SCC}}.

6. Retention

We retain personal information only as long as needed for the purposes described above, and in accordance with the following retention schedule: {{RETENTION_TABLE}}.

7. Your rights

• Israel: rights of inspection and correction of personal information under the Privacy Protection Law, 5741-1981 (as amended).
• EU/EEA (where GDPR applies): rights of access, rectification, erasure, restriction, portability, and objection (Articles 15–22), and the right to lodge a complaint with a supervisory authority.
• California (if applicable): rights to know, delete, correct, and opt out of sale/sharing under the CCPA/CPRA.
• To exercise any right, contact {{PRIVACY_CONTACT_EMAIL}}. We aim to respond within 30 days.

8. Children

This website is not directed to minors under 16, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the current version. Material changes will be signposted on this page, and where the change affects consent-based processing, consent will be re-requested.