Privacy Policy
Effective date: 2026-04-02
Version 1.0.0
This Privacy Policy explains how Firmacor Systems Ltd ("Firmacor", "we", "us") handles personal data in connection with our website at https://www.firmacor.com (the "Website").
What this policy covers. This policy covers personal data we process when you visit or contact us through the Website. It does not cover any separate services or agreements we may enter into with clients, which are governed by their own terms and, where relevant, a separate data-processing agreement.
A note on our footprint. The Website is a static informational site. It does not use cookies, local storage, analytics, advertising, tracking pixels, or web forms, and it loads no third-party content. The only personal data involved is described in Section 2.
Who this applies to. This policy applies to visitors worldwide. If you are located in the European Economic Area, the United Kingdom, or Israel, additional rights and information apply. See the region-specific notices in Section 12.
1. Who we are
The Website is operated by Firmacor Systems Ltd, a private limited company organized under the laws of the State of Israel.
- Israeli company registration number: 517299871
- Registered office: 5 Tuval Street, Tel Aviv-Yafo 6789717, Israel (c/o Naschitz Brandes Amir & Co.)
- Website: https://www.firmacor.com
- Telephone: +972 55 999 6565
- Privacy contact: legal@firmacor.com
For data-protection purposes, Firmacor is the controller of personal data processed through the Website (under the EU GDPR, UK GDPR, the Israeli Privacy Protection Law, and similar laws).
We have not appointed a Data Protection Officer (DPO), an EU Representative under Article 27 of the GDPR, a UK Representative under the UK GDPR, or a Privacy Protection Officer (PPO) under the Israeli Privacy Protection Law (Amendment 13). Our processing is occasional and not large-scale or systematic in a way that requires those appointments. You can reach us about any privacy matter at legal@firmacor.com.
2. What information we collect
We collect only two categories of personal data through the Website.
2.1 Technical connection data
When you visit the Website, our hosting and content-delivery provider automatically processes technical data needed to deliver pages to you and to protect the site, including your IP address, User-Agent string, and basic request metadata (such as the pages requested, timestamps, and response status). We do not maintain our own access logs of the Website; this data is processed transiently at the infrastructure layer to serve and secure the site. Because an IP address can be personal data, we disclose it here.
2.2 Email correspondence
The Website provides an email address for enquiries. If you choose to email us, we receive your email address, any name you provide, and the content of your message (including attachments). We use this to respond to you and to keep a reasonable business record.
2.3 What we do not collect
To be clear about the boundaries: the Website does not set cookies or use local storage, session storage, IndexedDB, or service workers; does not run analytics or any tracking technology; has no accounts, logins, or payment processing; and has no web forms. We do not build advertising or behavioural profiles of visitors, and we do not knowingly process special-category (sensitive) personal data.
3. Where we get information
- Directly from you, when you email us using the address on the Website.
- Automatically from your browser and device, as technical connection data, when your browser requests pages from our hosting and content-delivery provider.
We do not obtain personal data about you from data brokers or other third-party sources.
4. How we use your information
- To deliver and secure the Website: to serve pages to your browser, maintain availability, and protect the site against attacks, abuse, and technical faults. This uses technical connection data (Section 2.1).
- To respond to your enquiry: to read and reply to messages you send us, and to keep a record of that correspondence. This uses your email correspondence (Section 2.2).
We do not use your information for marketing, advertising, profiling, behavioural analysis, or any other purpose beyond what is described in this policy. We do not sell or rent it to anyone.
5. Legal bases for processing (EU/EEA and UK visitors)
If the GDPR or UK GDPR applies to the processing of your personal data, our legal bases are as follows.
| Purpose | Legal basis |
|---|---|
| Delivering and securing the Website, including technical connection data captured by our hosting and delivery infrastructure | Article 6(1)(f), legitimate interests: operating a public website requires basic infrastructure operation and protection; the data is minimal and we retain none of it ourselves |
| Responding to your email enquiry | Article 6(1)(b) and 6(1)(f): steps taken at your request, and our legitimate interest in responding to a message you chose to send us |
| Keeping support correspondence as an ordinary business record | Article 6(1)(f), legitimate interests |
| Complying with applicable law and lawful requests | Article 6(1)(c), legal obligation |
No processing described in this policy relies on consent, and we do not need or seek your consent for it. If we later introduce a feature that does rely on consent (for example, optional analytics), we will request it separately, and you will be able to withdraw it. Where we rely on legitimate interests, you can object by contacting legal@firmacor.com.
6. Cookies and similar technologies
We do not use cookies, local storage, session storage, IndexedDB, service workers, pixels, tags, software development kits, or any similar tracking technology on the Website. Because the Website places nothing on your device beyond what your browser needs to display a page, we do not display a cookie-consent banner and there is no cookie-consent mechanism to manage.
7. Analytics, tracking, and marketing
We do not use first-party or third-party analytics, marketing pixels, advertising trackers, session-replay tools, or behavioural-advertising integrations, and we do not track or measure individual visitor activity. We do not operate marketing mailing lists or send marketing emails from the Website. If you email us, we use your message only to reply to you, not to add you to any marketing list.
8. Service providers and subprocessors
We rely on the following providers, who process personal data on our behalf under data-processing terms that limit their use of the data to providing their services to us.
| Provider | Service | Location | Data processed |
|---|---|---|---|
| Amazon Web Services (AWS) | Website hosting and content delivery (Amazon S3 and Amazon CloudFront) | United States (region us-east-1) | Technical connection data, including IP address |
| Microsoft (Microsoft 365, Exchange Online) | Handling email you send to us | European Union | Your email address, name, and message content |
| GoDaddy | Domain registration and DNS for firmacor.com (through which our Microsoft 365 mailboxes are provisioned) | United States | Domain-name-system query data and domain registration records |
We update this list when we add, remove, or change providers, and we re-version this Privacy Policy when we do.
9. International data transfers
We are based in Israel, and the providers above process data in the United States and the European Union. As a result, your personal data may be transferred to and processed in countries outside your country of residence.
- Website connection data is processed by AWS in the United States.
- Email you send us is processed by Microsoft within the European Union.
- EU and UK to Israel: the European Commission recognizes Israel as providing adequate protection (Commission Decision 2011/61/EU), and the United Kingdom has similarly recognized Israel as adequate.
- Transfers to the United States (for example, to AWS) are made under the EU-US Data Privacy Framework and the UK Extension where the recipient is self-certified, or under the European Commission's Standard Contractual Clauses together with the UK Addendum where applicable, with supplementary measures where appropriate.
- Transfers from Israel are made in compliance with the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations 2001.
You can request information about the safeguards used for a specific transfer by contacting legal@firmacor.com.
10. How long we keep your information
- Email correspondence: we keep messages you send us for up to 24 months after our last exchange with you, unless we need to keep them longer to handle an ongoing matter or to establish, exercise, or defend a legal claim. You can request deletion via legal@firmacor.com, subject to legal hold and good-faith retention.
- Technical connection data: our hosting and content-delivery provider processes this data at the infrastructure layer to deliver and protect the Website. We do not maintain our own access logs of the Website, so we do not retain this data ourselves.
Where we no longer need personal data, we delete it.
11. How we protect your information
We use appropriate technical and organizational measures to protect personal data, proportionate to the Website's limited processing:
- Encryption in transit: the Website is served over HTTPS (TLS), so data between your browser and our provider is encrypted.
- Reputable infrastructure: we rely on established providers (AWS and Microsoft) whose security posture is appropriate to the data they handle. The Website itself holds no database of visitor accounts.
- Email security: correspondence you send us is handled within Microsoft 365 under Microsoft's security controls.
We do not hold security certifications such as SOC 2 or ISO 27001, and no method of transmission or processing is completely secure. If a personal-data breach occurs that creates a significant risk to you, we will notify you and the relevant authority as required by applicable law, including the Israeli Privacy Protection Authority under PPL Amendment 13.
If you discover a security vulnerability, please report it to legal@firmacor.com.
12. Your rights and choices
You have rights over your personal data. The specific rights depend on where you are located. For any request, contact legal@firmacor.com. We may need to verify your identity, and we aim to respond within 30 days (extendable for complex requests as permitted by law). We will not treat you unfavourably for exercising a right available to you.
12.1 EU and EEA visitors (GDPR)
You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection (including objection to processing based on legitimate interests). You also have the right to lodge a complaint with your local supervisory authority; you can find it via the European Data Protection Board members list at edpb.europa.eu.
12.2 UK visitors (UK GDPR)
You have the same core rights described above. You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
12.3 Israeli visitors (PPL, as amended by Amendment 13)
You have the right to access information held about you, to correct inaccurate information, to delete information in the circumstances provided by law, and to be informed about the processing. You can complain to the Israeli Privacy Protection Authority at gov.il/en/departments/the_privacy_protection_authority.
13. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.
14. Children
The Website is a corporate website intended for a professional audience. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact legal@firmacor.com and we will take appropriate steps to delete it.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we update the "Effective date" above and, for material changes, we will make the updated policy prominent on the Website. Your continued use of the Website after an update takes effect reflects the updated policy.
16. Contact us about privacy
For any question, concern, or request regarding this Privacy Policy or your personal data:
Firmacor Systems Ltd
Israeli company registration number 517299871
5 Tuval Street, Tel Aviv-Yafo 6789717, Israel (c/o Naschitz Brandes Amir & Co.)
+972 55 999 6565
https://www.firmacor.com
- Privacy, legal, security, or intellectual-property notices and requests: legal@firmacor.com
- General support: support@firmacor.com
We aim to respond within 30 days of receipt, in line with GDPR Article 12(3) timing (extendable to 90 days for complex requests) and analogous timelines under UK GDPR and the Israeli Privacy Protection Law.