Privacy Policy

Welcome!

The website www.dinolaw.co.il (hereinafter: “the Website“) serves as an online platform offering information and services and is owned by Dino Smart Documents Ltd.

The privacy and security of users are of utmost importance to us. Therefore, we have taken and continue to take every measure possible to protect the privacy of users as well as the security of the information they provide. As an integral part of this and as part of our Terms of Use, we have formulated this Privacy Policy to explain what information we collect, for what purposes, and how we use the information. We also outline the security measures we take and provide a list of browsing guidelines for users to implement.

It is clarified that the content on the Website, including but not limited to this Privacy Policy, applies equally to all genders, and the use of singular gender pronouns is for convenience only. Similarly, the division of this Privacy Policy into headings or sections is for ease of reading and shall not be used for interpretation of the Privacy Policy.

Types of Information Collected on the Website and How It is Collected

When a user browses the Website, we may collect and/or the user may provide three types of information:

1. Information Automatically Generated or Collected: A user who interacts with the Website’s services allows us to collect technical details about the user or the device/software used. This information is collected independently using our tools or through monitoring services provided by third parties, including through “cookies”. For more information on cookies, please refer to our Cookie Policy.
2. Information Provided by the User for Website Registration: A user wishing to prepare a small claims lawsuit using the Website’s services is required to register in the “Personal Area”. As part of the registration, the user will be asked to provide the following details: (1) Full name; (2) Identity card number; (3) Gender; (4) Full residential address; (5) Email address; (6) Phone number. After providing the details, the user will receive an email to the address provided during registration containing a personal password. Note that we will not have access to this password unless the user chooses to share it. A user wishing to log in will be asked to enter the email address used for registration and the password received.
3. Information Provided by the User During the Preparation of the Small Claims Writ and Payment for the Service: Naturally, during the preparation of the lawsuit, the user will provide details and documents that will ultimately constitute the final lawsuit document received. In addition, before receiving the lawsuit document and as a condition for receiving it, the user will make a payment via credit card through a secure payment system.

Purpose of Information Collection on the Website

The collection of the aforementioned information on the Website and its use is for: (1) Providing the services and information offered on the Website in the best way possible according to our discretion; (2) Promoting our commercial and marketing interests; (3) Improving and adapting the information and services on the Website (including user experience) based on user experience monitoring, characterization and adaptation; (4) Opening a communication channel with Website users; (5) Securing information to maximize the prevention of fraud or scams; (6) Collecting statistical data for our legitimate interests.

Information Sharing

The information collected on the Website may be shared with the following parties: (1) The State and its Branches: such as the police, the tax authority, the courts, pursuant to a court order, etc. This is done as needed or required in accordance with the law while striving to minimize information disclosure as much as possible under the circumstances; (2) Service Providers: We use complementary service providers to provide company services (e.g., transferring credit card details to a payment processing company; security and cyber companies; business or legal consultants; etc.). Accordingly, we share the information with the service providers to the extent and manner necessary to provide the service of the relevant service provider.

Data Retention Period

We will not retain the information received from or provided by the user beyond what is necessary to fulfill the purposes for which the information was collected or provided, except in cases where we have a legal reason or requirement to retain this data. In general, the information will be stored indefinitely unless the user requests otherwise. One reason is our desire to ensure, as much as possible, that the lawsuit document generated by the user is available to them at any time that the website and its systems are operational. Also, since the user has no limit on the number of lawsuits they may generate using the system, their convenience requires that the information they provide be saved, as well as the documents they generated through the system (unlike a situation where the user would be required to provide information about themselves each time anew).

User Rights Regarding Personal Data

The law creates a balance between the user’s rights to the data and information they provide and our rights and obligations regarding data processing and the protection of our rights and the rights of others. The law is not under our control and is subject to change at any time. However, to simplify things, we have chosen to summarize some of the common rights as of the date of publication of this Privacy Policy. It is clarified that this presentation is done above and beyond the requirement and it is solely the user’s responsibility to ascertain their rights, and no claim will be heard relating to the non-detailing or detailing of such rights. Some of the rights:

Right of Access: The user is entitled to receive a copy of the personal data we hold and to find out details about how we use it. Usually, the personal data will be provided to the user in digital format. Therefore, we may require the user to prove their identity before providing the requested information.

Right to Erasure: The user has the right to request that we erase their personal data, for example, when it is no longer needed for the original purpose for which it was collected, when it has become obsolete or when the user no longer agrees to the reasons on the basis of which the data is processed. Alongside this, such an erasure request will be weighed against additional factors. For example, we may not be able to comply with a user’s request due to legal obligations binding upon us.

Right to Restrict Processing: The user has the right to request that we temporarily stop processing their personal data. For example, in a situation where the user believes that we no longer have a further need to use their personal data.

A user wishing to exercise any of their rights in this regard should send a message – along with identification and contact details – to our email address: [email protected]

Confidentiality and Data Security

To protect the information provided by the user, we use electronic and physical measures in accordance with the provisions of the Privacy Protection (Data Security) Regulations, 5777-2017 (to the extent that these apply to us) and we also operate according to industry-standard data security procedures.

However, a universally hermetic and absolute security solution has yet to be found, but we are doing and will continue to do our utmost to protect our users’ information to the greatest extent possible.

We undertake to maintain the confidentiality of the sensitive information in our possession and to ensure that all those working on our behalf – including service providers – undertake to maintain the confidentiality of the information and refrain from using it, except for the purpose of fulfilling their duties and the purpose for which the information was provided.

In addition, we use electronic measures as required by applicable law. Among other things, we implement advanced technological security measures to prevent loss of personal information, damage to its integrity, unauthorized access to it or its unauthorized alteration. All of this is in accordance with the rules laid down in applicable law and the standards practiced in the internet industry. In this context, we act to implement further protections and encryptions, including:

(1) Managing access permissions to the company’s information systems and restricting them; (2) Password management; (3) Implementing tools for identifying and verifying the identity of the company’s customers (in particular, to prevent access by “bots” and fraud across the internet); (4) Installing firewalls; (5) Encrypting personal information transmitted over communication networks; (6) Logging access to the database and security events that raise concerns about damage to the integrity of the information or unauthorized use of it; (7) Periodic backup of the information; (8) Adopting internal procedures for maintaining and securing information; (9) Conducting routine audits to ensure that the above rules are enforced.

Security Measures We Take

We do everything in our power to provide Website users with the most advanced security measures to protect user privacy as well as the confidentiality and integrity of the information available to them. Our security and control measures include the following:

1. Communication Encryption: The transfer of information between our computers and users’ computers over the internet is done via encrypted communication (SSL at the 128-bit level), including via an SSL certificate.
2. Strong System Identification: Identification using a secret code sent to the user with the highest level of complexity.
3. Payment Security Standard: Payments are processed through an external payment processor that holds the PCI security standard. This standard combines various security procedures that help ensure the secure handling of credit card data (processing, storage and transfer). The PCI standard includes 12 different requirements aimed at overcoming weaknesses in the credit card world.
4. Enhanced Identification Mechanism During Payment – 3D SECURE: Verification of the user’s identity on the debit card during payment in the Website’s systems, via an additional layer of protection in the form of entering a one-time password that will be sent to the mobile phone or email address of the cardholder entered into the system.
5. Activity Log: We maintain a detailed record of users’ actions on the Website and its systems.
6. Physical Protection: Our servers are installed in a secure data center protected from unauthorized parties; the data center is located abroad and managed on an ongoing basis by a server management company also located abroad.

Guidelines for Secure Browsing

• We strongly recommend avoiding browsing the Website from a public computer or other shared computers;
• It is recommended to access the Website by typing its address and avoiding clicking on links from unknown sources;
• We will never send a user a casual email asking them to provide identification or authentication details. A user who has received such an email should avoid clicking on the link, and it is recommended that they delete the message from their inbox;
• A user can identify that they are browsing the secure area of the Website when the Website address appearing in the address bar is composed of the letters https (and not http – the ‘S’ at the end is the difference).

No Advertisements, Only Notifications

We do not actively send advertisements to users (this does not mean that advertisements cannot appear on the Website or during browsing). A user who chooses to register with Dino agrees to receive the following notifications (depending on the stage of registration and use they have reached) via email or SMS: (1) Notification of registration to the system and receipt of a password; (2) Notification that the small claims lawsuit is ready, to which the lawsuit document will be attached; (3) Notifications regarding the lawsuit preparation process (responding to malfunctions and/or offering solutions, reminders to complete a lawsuit, responding to user inquiries regarding lawsuit preparation, etc.); (4) Service experience survey; (5) Payment confirmation and invoice, which will be sent directly from the payment processor. In addition, if a user initiates contact with us, they agree that we will respond to them in a suitable message to the email address from which they contacted us or to any other means they indicated as a reply address.

If there is any change in the above notification policy, and as needed, we will seek the user’s consent in advance.

A user who wishes not to receive such notifications may send a request to the email address: [email protected]

Changes to the Privacy Policy

The company reserves the right to make changes to the Privacy Policy from time to time and at its sole discretion, subject of course to the requirements of the law. The Privacy Policy will be effective from the date of its publication onwards. If the company believes that there is a change in the Privacy Policy that may significantly affect user privacy, it will send a notification to users who have left an email address for contact at least 10 days before the date of the change to the Privacy Policy on the Website.

Contact Regarding the Privacy Policy

Questions, requests or complaints regarding this Privacy Policy may be sent to the email address: [email protected]