Privacy Policy

Crystal Vision
Last updated: 08/07/2026
We are very delighted that you have shown interest in our enterprise. Data protection is of particularly high priority for the management of Crystal Vision. Use of the Crystal Vision website is possible without providing any personal data; however, if a data subject wants to use special services via our website — including downloading resources or using our AI chatbot assistant — processing of personal data may become necessary. Where such processing has no statutory basis, we generally obtain the consent of the data subject.
The processing of personal data, such as name, address, e-mail address, or telephone number of a data subject, is always carried out in line with the General Data Protection Regulation (GDPR) and any country-specific data protection regulations applicable to Crystal Vision. Through this policy we inform the public of the nature, scope, and purpose of the personal data we collect, use, and process, and of the rights to which data subjects are entitled.
As controller, Crystal Vision has implemented technical and organizational measures to protect personal data processed through this website. However, Internet-based transmissions can never be guaranteed fully secure, so any data subject is free to send us personal data by alternative means, e.g. by telephone.
1. Definitions
This policy uses the terminology of the GDPR. Key terms:
a) Personal data
Any information relating to an identified or identifiable natural person (“data subject”).
b) Data subject
Any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Any operation performed on personal data, whether or not by automated means — collection, recording, organisation, storage, use, disclosure, erasure, etc.
d) Restriction of processing
Marking stored personal data with the aim of limiting its future processing.
e) Profiling
Automated processing of personal data used to evaluate personal aspects of a natural person, such as preferences, behavior, location, or interests.
f) Pseudonymization
Processing personal data so it can no longer be attributed to a specific data subject without additional, separately-held information.
g) Controller
The party which alone or jointly with others determines the purposes and means of processing personal data.
h) Processor
A natural or legal person that processes personal data on behalf of the controller — for example, our downloads-form software, e-mail/CRM tools, or our chatbot's AI provider (see Sections 6–8).
i) Recipient
A natural or legal person to whom personal data is disclosed, whether a third party or not.
j) Third party
A natural or legal person, other than the data subject, controller, or processor, authorised to process personal data.
k) Consent
Any freely given, specific, informed, and unambiguous indication of the data subject's wishes, by statement or clear affirmative action, signifying agreement to processing.
2. Name and Address of the Controller
Crystal Vision
Kibbutz Samar
8881500 Hevel Eilot, Israel
Phone: +972-8-6356763
Email: info@crystalvision.co.il
Website: http://www.crystalvision.co.il/
3. Cookies
Our website uses cookies — text files stored on a visitor's device via their browser, often containing a unique cookie ID that lets our site recognize a returning browser.
Cookies let us provide more user-friendly services, remember preferences, and (where used) support features such as the downloads form or chatbot session continuity.
You may prevent cookies at any time via your browser settings, and delete cookies already set. Note that disabling cookies may limit some site functionality, including parts of the downloads process or chatbot.
4. Collection of General Data and Information
Our website automatically collects general data with every visit: browser type/version, operating system, referring site, sub-pages visited, date and time of access, IP address, the visitor's Internet service provider, and similar technical data, including in connection with use of the chatbot (see Section 7) and downloads form (see Section 6).
This data is not used to draw conclusions about a specific individual; it is used to deliver and secure the website, improve its content, and — if necessary — assist law enforcement in the event of a cyberattack. It is stored separately from personal data voluntarily provided by data subjects.
5. Contact via the Website
Our website enables quick electronic contact, including a general e-mail address. If a data subject contacts us by e-mail or contact form, the personal data transmitted is automatically stored for the purpose of processing the enquiry or contacting the data subject. This data is not passed to third parties, except as needed to respond to the enquiry (e.g., an e-mail service processor acting on our instructions).
6. Downloads Page (Lead Generation Form)
Certain resources on our website are available only after a visitor submits their name, e-mail address, telephone number, and company name (“downloads form”).
a) Data collected
Name, e-mail address, phone number, and company name.
b) Purpose
This data is used to: (i) deliver the requested download; and (ii) allow our sales team to follow up regarding our products or services.
c) Legal basis
Delivery of the file is based on the data subject's request (Art. 6(1)(b) GDPR — pre-contractual measure). Sales follow-up is based on the data subject's consent (Art. 6(1)(a) GDPR), given via the checkbox described above.
d) Retention
Downloads-form data is retained for 48 months from the date of submission or last contact, or until the data subject withdraws consent, whichever occurs first, after which it is deleted or anonymized.
e) Withdrawal
A data subject may withdraw consent to sales contact, or request erasure of their downloads-form data, at any time by contacting any employee of Crystal Vision (see Section 2).
7. AI Chatbot Assistant
Our website offers an AI-powered chatbot assistant to help visitors find information from the Crystal Vision knowledge base.
a) Information we collect
The chatbot collects only the text of the question a visitor submits. We do not require or request any personal identification information (such as name, e-mail, or phone number) to use the chatbot, and we do not store a history of the conversation on our own systems.
b) How we use the information
Questions are used only to search the Crystal Vision knowledge base and generate a relevant answer. We do not use visitor questions to train AI models, and we do not use them for any purpose other than answering the question asked.
c) Data retention
Crystal Vision does not retain user questions after the conversation ends. Processing happens in real time, and no conversation history is stored on our systems..
d) Cookies
The chatbot itself does not set or use cookies. (Note: other parts of the Crystal Vision website do use cookies, as described in Section 3.)
e) Sharing with third parties
We do not share chatbot questions with third parties for their own independent use, such as advertising, resale, or unrelated business purposes. To generate answers, questions are transmitted to OpenAI, L.L.C., which acts strictly as a data processor on our instructions and may not use the data for any other purpose — this is not “sharing” in the sense of giving a third party independent use of the data, but it is still a disclosure that GDPR requires us to describe.
f) Legal basis
Art. 6(1)(f) GDPR (legitimate interest in providing efficient, automated customer support), given the minimal and non-mandatory nature of the data involved.
g) International transfer
Because OpenAI is based in the United States, transmitting a question to generate an answer involves an international transfer of any personal data the question happens to contain, outside the European Economic Area and Israel's equivalent adequacy framework.
Where required, this transfer relies on Standard Contractual Clauses approved by the European Commission, or another safeguard recognised under Art. 46 GDPR. Data subjects may request further information by contacting any employee of Crystal Vision.
h) Advice to visitors
Please avoid including sensitive personal information (e.g., financial account numbers, health information, government ID numbers) in chatbot questions.
8. Third-Party Processors — Overview
In connection with the services described above, Crystal Vision may share personal data with the following categories of processors, each acting under a data processing agreement and only on our documented instructions:
•    E-mail and/or CRM software providers (downloads-form and sales follow-up data)
•    OpenAI, L.L.C., acting as a data processor to generate chatbot answers (see Section 7)
•    Website hosting and analytics providers (general server-log data; see Section 4).
9. Routine Erasure and Blocking of Personal Data
The controller processes and stores personal data only for the period necessary to achieve the purpose of storage, or as otherwise permitted by law. Specific retention periods for downloads-form and chatbot data are set out in Sections 6 and 7. Once a storage purpose no longer applies, or a legally prescribed retention period expires, the corresponding personal data is routinely blocked or erased.
10. Rights of the Data Subject
a) Right of confirmation
Each data subject may obtain confirmation from the controller as to whether personal data concerning them is being processed, by contacting any employee of the controller.
b) Right of access
Each data subject may obtain, free of charge, information about their stored personal data and a copy of it, including: the purposes of processing; categories of data concerned; recipients or categories of recipients (including any third country transfers and applicable safeguards); the envisaged storage period or criteria used to determine it; the existence of rights to rectification, erasure, restriction, or objection; the right to lodge a complaint with a supervisory authority; the source of the data if not collected directly from the subject; and the existence of any automated decision-making, including meaningful information about the logic involved.
c) Right to rectification
Each data subject may obtain, without undue delay, correction of inaccurate personal data or completion of incomplete data.
d) Right to erasure (“right to be forgotten”)
Each data subject may obtain erasure of personal data without undue delay where, among other grounds: the data is no longer necessary for the purposes collected; consent is withdrawn and no other legal basis applies; the data subject objects and there are no overriding legitimate grounds; the data was unlawfully processed; or erasure is required by law.
e) Right of restriction of processing
Each data subject may request restriction of processing where, among other grounds: accuracy is contested; processing is unlawful but the subject opposes erasure; the controller no longer needs the data but the subject needs it for legal claims; or objection is pending verification of legitimate grounds.
f) Right to data portability
Where processing is based on consent or contract and carried out by automated means, each data subject may receive their personal data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
g) Right to object
Each data subject may object, on grounds relating to their particular situation, to processing based on legitimate interest, including profiling. Crystal Vision will cease such processing unless it demonstrates compelling legitimate grounds that override the data subject's interests, or the processing is needed for legal claims. Data subjects may also object at any time to processing for direct marketing purposes — including sales follow-up from the downloads form — and Crystal Vision will cease such processing upon objection.
h) Automated individual decision-making, including profiling
Each data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, subject to the exceptions in Art. 22(2) GDPR. As noted in Section 13, Crystal Vision does not currently use such automated decision-making.
i) Right to withdraw consent
Each data subject may withdraw consent to processing of their personal data at any time, including consent given for chatbot use or sales follow-up from the downloads form, with effect for the future.
To exercise any of the above rights, a data subject may contact any employee of Crystal Vision using the details in Section 2.
11. Legal Basis for Processing
Art. 6(1)(a) GDPR applies where we rely on consent for a specific purpose (e.g., chatbot use where opt-in is required, or sales follow-up from the downloads form). Art. 6(1)(b) GDPR applies where processing is necessary for performance of, or pre-contractual steps toward, a contract (e.g., delivering a requested download). Art. 6(1)(c) GDPR applies where processing is necessary to comply with a legal obligation, such as tax law. Art. 6(1)(d) GDPR applies where processing is necessary to protect the vital interests of a data subject. Art. 6(1)(f) GDPR applies where processing is necessary for the legitimate interests of Crystal Vision or a third party (e.g., operating the chatbot for customer support), except where overridden by the data subject's interests or fundamental rights.
12. Legitimate Interests Pursued
Where processing is based on Art. 6(1)(f) GDPR, our legitimate interests include operating our business for the benefit of our employees and shareholders, and providing efficient, automated customer support through the chatbot described in Section 7.
13. Existence of Automated Decision-Making
Crystal Vision does not use automated decision-making or profiling that produces legal or similarly significant effects on data subjects. The chatbot described in Section 7 provides conversational assistance only and does not make binding decisions about any individual.
14. Period for Storage of Personal Data
Except where a more specific period is set out in Sections 6 or 7, the applicable statutory retention period determines how long personal data is stored. Data is routinely deleted once that period expires and the data is no longer necessary for performance or initiation of a contract.
15. Statutory or Contractual Requirement to Provide Data
Provision of personal data is sometimes required by law (e.g., tax regulations) or by contract (e.g., contractual partner details), and is sometimes necessary to enter into a contract. Where a data subject does not provide required data, the relevant contract may not be concluded, a download may not be delivered, or the chatbot may not be able to respond. Before providing personal data, a data subject may contact any employee of Crystal Vision to clarify whether provision is legally or contractually required and the consequences of not providing it.
16. Updates to This Policy
We may update this policy as our services change — for example, if we add new processors, change retention periods, or modify the chatbot's technical setup. The “Last updated” date at the top of this document reflects the most recent revision.

This Privacy Policy was originally generated using the Privacy Policy Generator of the External Data Protection Officers, developed in cooperation with the Media Law Lawyers of WBS-LAW, and has been amended by Crystal Vision to reflect additional data processing activities.

Crystal Vision
Kibbutz Samar
D.N. Hevel Eilot 8881500 Israel
Tel.: +972-8-6356763
Fax: +972-8-6356758
info@crystalvision.co.il
Crystal Vision agricultural cooperative society ltd. No. 570051649