Data Protection and Privacy Policy
Last Updated: March 2026
Privacy at a Glance
Who we are
Baccara Geva Agricultural Cooperative Ltd operates the corporate website WWW. baccara-geva.com and acts as the data controller for personal data processed through the corporate website.
What this notice covers
This notice explains how personal data is processed when you:
- browse our corporate website
- contact us through forms or email
- subscribe to newsletters or marketing communications
Online purchases and e-commerce activity for Australia are handled by BACCARA Pty Ltd and governed by their separate privacy policy.
What information we collect
We may collect:
- Contact details (name, email, phone)
- Messages or inquiries submitted through forms
- Device and browsing information (IP address, cookies, analytics data)
Why we use your data
We use personal data to:
- respond to inquiries and technical requests
- provide distributor or product information
- send newsletters or marketing messages where you have opted in
- operate, secure, and improve the website
- analyze website performance and usage
Legal basis for processing
Where required by GDPR / UK GDPR, processing is based on:
- consent (e.g., marketing or analytics cookies)
- legitimate interests (website operation and communication)
- legal obligations
- pre-contractual communications
Your privacy rights
Depending on your location, you may have the right to:
- access your data
- correct inaccurate information
- request deletion
- restrict or object to certain processing
- opt out of targeted advertising or data sharing (U.S. residents)
Cookies
We use cookies to operate the site, analyze traffic, and improve user experience.
Non-essential cookies are only used after consent where required.
Contact for privacy requests
Baccara Geva Agricultural Cooperative Ltd
Email: [email protected]
For full details, please read the Privacy Summary below or the Full Data Protection and Privacy Policy.
Privacy Summary
This summary provides an easy-to-understand explanation of how we handle personal data. It is intended to help users understand our practices before reading the full Data Protection and Privacy Policy.
If there is any conflict between this summary and the full Privacy Policy, the full Data Protection and Privacy Policy governs.
Who processes your data
The corporate website is operated by Baccara Geva Agricultural Cooperative Ltd, which acts as the data controller for personal data processed through the corporate website.
Certain services linked from the site may be operated by other companies.
For example: The Australian online store is operated by [BACCARA Australian Subsidiary]and follows its own privacy policy.
What information we collect
We collect information that you provide directly and information collected automatically when you use the website.
Examples include:
Information you provide
- name
- email address
- phone number
- messages sent through contact forms
Information collected automatically
- IP address
- browser and device information
- website usage data
- cookie identifiers
We do not intentionally collect sensitive personal information through the corporate website.
Why we collect personal data
We process personal data for business purposes such as:
- responding to inquiries and technical support requests
- providing distributor information
- sending newsletters (where permitted or consented)
- operating and securing the website
- analyzing website performance
- improving user experience
Cookies and website tracking
The website uses cookies and similar technologies to:
- ensure the website functions correctly
- remember language or site preferences
- analyze traffic and performance
- support marketing or advertising tools (where consent is required)
When you first visit the website, you can choose to:
- accept all cookies
- reject non-essential cookies
- manage your cookie preferences
You can change your cookie settings at any time.
Who we share data with
We do not sell personal data.
However, we may share information with trusted service providers that help operate the website, including:
- cloud hosting providers
- analytics providers
- cybersecurity providers
- CRM and communication tools
These providers are contractually required to protect personal data and may only use it for the services they provide to us.
International transfers
Because we operate internationally, personal data may be transferred outside your country.
Where required, these transfers are protected using safeguards such as:
- Standard Contractual Clauses
- adequacy decisions
- the EU-U.S. Data Privacy Framework (where applicable)
How long we keep data
We retain personal data only for as long as necessary.
Typical retention examples:
- contact inquiries: about 12–24 months
- distributor or technical inquiries: up to 5 years
- marketing subscriptions: until you unsubscribe
- security logs: typically 6–12 months
Some information may be retained longer to comply with legal obligations.
Your privacy rights
Depending on your jurisdiction, you may have rights including:
- access to personal data
- correction of inaccurate data
- deletion of personal data
- restriction or objection to processing
- data portability
- opt-out of targeted advertising (U.S. residents)
California residents may have additional rights under the California Privacy Rights Act (CPRA).
Children’s privacy
The corporate website is not intended for children under the age of 13.
We do not knowingly collect personal data from children without appropriate parental authorization.
Data security
We implement technical and organizational security measures such as:
- encrypted connections (SSL)
- access controls
- cybersecurity protections
- restricted access to personal data
While no system can guarantee absolute security, we maintain safeguards appropriate to the risks involved
Marketing communications
If you subscribe to marketing messages or newsletters, you may unsubscribe at any time using the unsubscribe link in our communications
Contact us
For privacy questions or data rights requests, contact:
Baccara Geva Agricultural Cooperative Ltd
Email: [email protected]
Address: Kibbutz Geva, 1891500, Israel
Preamble
Baccara Geva Agricultural Cooperative Ltd (hereinafter: “BACCARA” or “our”, “we” or “Us”), is committed to protect your Personal Data. This Data Protection and Privacy Policy explains how BACCARA collects, processes, uses, and stores Personal Data (as defined below) provided by you or otherwise collected about you through our global website located at: www.BACCARA-geva.com (hereinafter: “Policy” and “Website” respectively).
For clarity, this domain serves as the global corporate and technical information hub. The Website contains (a) “Corporate Website Area” pages used for corporate information, distributor inquiries, technical inquiries, and marketing communications; and (b) links to regionally-operated sites and stores that are governed by separate controllers and privacy notices (see Section 1.6).
Processing activities associated with direct-to-customer e-commerce transactions are not governed by this Policy and are instead governed by the applicable policy of the relevant selling entity, including [BACCARA Australian Subsidiary]for the AU/APAC store at www.BACCARAstore.com.au (see Section 1.6).
As used in this policy, “Personal Data” or “Personal Information” means information that refers to, is related to, or is associated with an identified or which may be used to identify an identifiable individual or as otherwise may be defined by applicable law, such as a name, address, telephone number, e-mail address, information about activities directly linked to a person, such as that person’s location or IP information.
Where applicable law distinguishes between “controller” and “processor,” BACCARA acts as the data controller for processing activities covered by this Policy.
This Policy may be revised or updated from time to time, and such changes shall come into effect from the moment BACCARA publishes the updated Policy and notifies you of such changes and/or updates, either by email, notification on our website or any other reasonable manner.
Material changes will be communicated by posting the updated Policy on this Website and updating the “Last Updated” date above. Where required by applicable law, we will provide additional notice and/or obtain consent before such changes take effect.
For any questions regarding the collection, processing or use of Personal Data relating to you and exercising your data subject rights (all as explained below) please contact, us at: [email protected]
Controller details:
Baccara Geva Agricultural Cooperative Ltd.
Registered Address: Kvutzat Geva, 1891500, Israel
Company / Registration No.: 570041970
Primary Privacy Contact (Email): [email protected]
UK/EU/EEA Representative (if required): BACCARA® ESPAÑA
Avda. de la Industria 38, Nave A15, Coslada, Madrid.
T. (+34) 913446310| [email protected]
- General Principles of Our Data Protection
- BACCARA is committed to ensuring that your Personal Data is protected according to the appropriate industry standards and practices in relation to the data we collect, and all in correspondence to BACCARA’s relevant legal obligations. Where GDPR or UK GDPR applies, BACCARA processes Personal Data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity/confidentiality, and accountability.
- This policy explains your rights regarding the Personal Data BACCARA collects, processes and uses through the BACCARA Website, as well as BACCARA’s use of safeguards to protect these rights.
- This Policy further applies also to BACCARA’s use of cookies and tracking tools, as specified in detail in the ‘Use of Cookies and Tracking Technologies’ Section of this Policy, as we use cookies and tracking tools on our Website to distinguish you from other users and to improve your use of our Website, and in some cases, certain features may not function if you remove the cookies from your browser. For the avoidance of doubt, cookie use and tracking tools associated with the online store operated by BACCARA’s Australian subsidiary are governed by the privacy policy applicable to that store activity (see Section 1.6).
Non-essential cookies and similar technologies (including analytics and advertising cookies) are deployed only where and to the extent required consents have been obtained through our cookie management tools, as applicable under law.
- We collect and process your Personal Data in good faith, in a proportionate manner according to the declared purpose, and with appropriate technical and organizational measures (“TOMs”) designed to protect Personal Data against unauthorized or unlawful processing, accidental loss, destruction, or damage, while considering the risks represented by our collection and processing and the nature of the Personal Data.
- If any collection and processing of Personal Data will be carried out, in the course of BACCARA’s business and provision of services, by external data processors on Our behalf, BACCARA will require, within the framework of its contracts with such external processors, for them to comply with relevant legal data protection rules and legislation applicable to the services they provide to BACCARA, prior to transferring your Personal Data and data. Where GDPR or UK GDPR applies, such arrangements will include the required processor terms under Article 28 GDPR / UK GDPR.
- Territorial Scope, Site Areas, and Corporate Separation:
- Controller and Website Areas. This Policy applies to the processing of Personal Data carried out by BACCARA as the data controller solely in connection with the corporate/general information areas of the Website, including marketing content, newsletter subscription, and contacting BACCARA via online forms or publicly available contact means (the “Corporate Website Area”).
- Separate Policies and Controllers (Israel and Australia). Certain parts of BACCARA’s digital presence are operated by separate legal entities and/or are intended for specific markets and are governed by separate privacy notices terms, or local legal notices. Where you interact with those parts, the relevant entity’s notice or terms will apply to that interaction.
- Australia and the Store Area: Online sales, e-commerce transactions, and local support for users in Australia are managed by [BACCARA Australian Subsidiary](the “Australian Subsidiary”). The Australian Subsidiary acts as an independent data controller for all direct-to-customer “Store Area” activities. If you manually access the store section or place an order for delivery in Australia, your data is governed by the BACCARA Australia Privacy Policy published on the AU/APAC store domain, compliant with the Privacy Act 1988 (Cth), available at their respective portal.
- Israel: Users located in Israel are subject to the Israeli Protection of Privacy Law, 5741-1981, and should refer to the Israel-specific privacy terms provided on the Hebrew-language version of the site or our local corporate filings.
- Regional Links and Practical Notice. The Corporate Website Area is intended to provide global corporate/technical information. If you are looking for market-specific terms (including e-commerce, employment, or consumer transactions), please use the relevant regional site and/or store, where and if provided.
- No Avoidance of Mandatory Rights. Nothing in this Policy is intended to limit any mandatory consumer or data protection rights that apply to you under applicable law.
- Your Rights to Limit our Collection and Processing
You have certain rights in relation to the Personal Data that we hold about you, as detailed below:
- Consent –
Where we collect Personal Data from your directly subject to your consent, we will only process your Personal Data if you have provided your informed consent to such processing, unless We have alternative lawful grounds for processing or overriding legal obligations to further process Personal Data relating to you.
We will only use the data for the purposes stated in the consent procedure and within the scope outlined below in line with our “purpose limitation” obligations under applicable law.
- Withdrawal of consent
Where we have collected Personal Data relating to You directly as per clause 2.1, You may revoke or withdraw your consent at any time by contacting and requesting so from us at: [email protected], and We will stop processing your Personal Data unless We either have overriding legal obligations or have alternative grounds for processing your personal data which permit us to continue processing your information, including for ongoing legitimate business interests, which we will notify you in our response to your request, where applicable.
Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrawal.
- Personal Data of children and minors.
We do not knowingly collect or process Personal Data relating to children where doing so would require parental or guardian authorization under applicable law unless such authorization has been obtained or another lawful basis applies.
The Corporate Website Area is not directed to children under 13 and is not intended to solicit information from children under 13.
If we become aware that Personal Data relating to a child or minor has been collected contrary to applicable law, we will delete it without undue delay or take other action required by law. Where applicable law requires parental or guardian authorization, we may take reasonable steps to verify such authorization.
If you are a parent or guardian and believe a child has provided us with Personal Data in violation of applicable law, please contact us using the details below.
- Right of Access and Data Portability.
- You are entitled to ask us to present you with confirmation as to whether Personal Data concerning you is being processed, and where that is the case, access to the Personal Data and related information, by forwarding a request at: [email protected].
- You are also entitled to obtain (in a commonly used and machine-readable form) and reuse your Personal Data as you have provided to us (following your consent or to allow us to perform services under a contract) and which We process, for your own purposes across different services and free of charge, subject to technical feasibility and lawfulness considerations.
Be advised that this right applies where and to the extent provided under GDPR/UK GDPR (generally where processing is based on consent or contract and carried out by automated means).
- Right of Rectification
Upon reviewing your Personal Data under the Right of Transparency, You may also request the erasure or correction of all or part of your Personal Data that is incorrect, inaccurate, outdated or false, insofar as it is held by BACCARA.
Upon your request, BACCARA will accommodate your request and delete (or alternatively equivalently irreversibly anonymize) or correct your Personal Data or remove from part or all of our records, as per your request, as soon as reasonably possible and when technically feasible, and unless there is an overriding legal interest or other authorized basis for the continuation of the processing of your Personal Data, which we shall notify you in response to your request.
- The Right of Deletion (“To be Forgotten”)
Regardless and without derogating from your right of rectification, you may further, at any time you may request the erasure of your Personal Data we process about You in our records and systems, and will accommodate your request and delete (or alternatively equivalently irreversibly anonymize) or correct your Personal Data or remove from part or all of our records, as per your request, as soon as reasonably possible and when technically feasible, and unless there is an overriding legal interest or other authorized basis for the continuation of the processing of your Personal Data, in which case we will inform you accordingly..
Please be aware that in the event of deletion of Personal Data upon your request, BACCARA may not be able to further provide you the services you applied for through the Website, in whole or in part.
- Right to Restriction of Processing. You may request restriction of processing in the circumstances set out under applicable law (for example, while we verify accuracy, or where processing is unlawful and you oppose erasure).
- Right to Object. You may object to processing based on legitimate interests or for direct marketing. Where you object to direct marketing, we will stop processing your Personal Data for such purposes.
- Automated decision-making.
BACCARA does not employ automatic decision-making mechanisms at this, and we do not make decisions producing legal or similarly significant effects solely by automated means within the scope of this Policy; BACCARA further commits that where such will be implemented, we will notify you in advance and provide information on the logic involved and the significance and envisaged consequences, give you the opportunity to object and obtain human intervention in such a decision made through automated means, if at all, while expressing your point of view, and obtaining an explanation of the decision made prior to the human intervention and after the human intervention.
- Important Notes on Data Subject Rights:
- In the implementation of these data protection rights, BACCARA is committed to providing a timely and transparent response to your requests and upholding your rights BACCARA
- Any data subject right you wish to uphold by Us may not be fulfilled if you do not provide Us with relevant and/or sufficient information required for us to identify you as the data subject of said Personal Data, and we shall inform you accordingly in such an event.
- If you believe BACCARA has violated any of your data subject rights, you are entitled to:
- For European Economic Area countries – file a complaint to the Data Protection Supervisory Authority in your jurisdiction of residence about the alleged data protection breach;
- For the United Kingdom – file a complaint with the Information Commissioner’s Office (ICO)
- For all other Jurisdictions applicable to the Website – Without prejudice to any mandatory rights or remedies available to you under applicable law, file a lawsuit as per the Governing Law and Dispute Settlement provisions set out herein.
- If you desire to exercise your data subject rights as set out herein, contact us, at: [email protected] and we shall assess your application, and may request reasonable identification, and will thereafter respond as per your rights under the applicable law governing your data protection rights.
- Response Times. We will respond without undue delay and in any event within one month of receipt, subject to lawful extensions for complex or multiple requests, and we will notify you of any extension within the first month.
- Personal Data We Collect:
- For the Corporate Website Area, the Personal Data collected and used by BACCARA is limited strictly to data necessary to respond to inquiries, provide requested information, administer newsletter subscriptions, maintain Website security and functionality, and perform analytics and advertising activities where you have provided consent, all as further described in this Policy.
For clarity, where processing is based on consent, you may decline consent and still access the Corporate Website Area, though some optional features (e.g., analytics/advertising personalization) may not operate.
- Providing Personal Data is voluntary. However, certain Website functions (such as responding to inquiries or sending newsletters) may not be available if the necessary information is not provided.
- Collection of Personal Data Occurs when You:
- Contact us via our designated support e-mail address or electronic form through our “Contact Us” page of our Website
- When you browse through the website, use cookies and tracking technologies as further elaborated below, in section __ titled “Cookies and Tracking Technologies Policy” (add link).
- When you subscribe to our newsletter to receive marketing materials and information and updates.
- For clarity: if you place an order, create a customer account for purchasing, or otherwise interact with the Store Area, the collection and processing of your Personal Data for those Store Area activities is governed by the AU Privacy Policy (see Section 1.6.3).
|
Processing Activity |
Type of Personal Data |
Purpose |
Lawful Basis (Art. 6 GDPR) |
|
Contacting us via ‘Contact Us’ form / Scheduling a Meeting |
Name, email, phone number, query content, region selection |
Responding to your inquiry; routing to relevant subsidiary/distributor |
Legitimate interests (responding to inbound requests; business communications) and/or pre-contractual steps where the inquiry relates to a potential contract |
|
Subscribing to newsletter |
Email address (and preferences where provided) |
Sending marketing messages |
Consent (opt-in where required) / soft opt-in where permitted by law and applicable conditions are met |
|
Using the Corporate Website Area (strictly necessary cookies) |
IP address (often truncated), device info, behavior |
Ensuring website functionality, security, fraud prevention |
Legitimate interests and/or legal obligations (security) as applicable; strictly necessary cookies are set without consent where permitted by applicable cookie laws |
|
Using analytics cookies |
IP address, device info, behavior |
Measuring website performance |
Consent (opt-in where required) |
|
Showing personalized ads |
Browsing behavior, identifiers |
Targeted advertising |
Consent (opt-in where required); US opt-out rights apply where required |
|
Legal/compliance requests (e.g., regulatory) |
Name, contact, correspondence, logs |
Compliance; legal claims/defense |
Legal obligation / legitimate interests |
Lawful Interest Explanation (Art. 6(1)(f)): Our legitimate interests include operating, maintaining, and securing the Corporate Website Area; preventing fraud and abuse; and measuring high-level performance where permitted by law.
- What is the Personal Data We collect and when do we collect it:
- When you contact us through the contact details and/or electronic forms;
- When you subscribe to our newsletter;
- When you browse through our websites and/or specific pages/portions, we will collect both statistical and non-identifying, and subject to your consent personal data through cookies, web beacons and other tracking technologies;
- Store Area Activities (Not Covered by This Policy): If you create a purchasing account, place an order, enter shipping/billing details, make a payment, or otherwise interact with the Website’s Store Area, the personal data collected and processed for those activities is governed by the AU Privacy Policy (see Section 1.6.3).
- Why BACCARA Uses your Personal Data:
BACCARA uses data and Personal Data for the following reasons:
- to process your contact request and/or distributor search requests when you contact us through e-mail and/or online forms to revert to you accordingly.
- Subject to your consent, for performance of analytics such as trend analysis, site administration, personalization statistical analysis of usage of the site, enhance and review integrity and stability of the website and to study trends to improve our website, according to the provisions of article _ below.
- Subject to your consent to subscribe to our mailing list, to send you marketing messages, direct marketing content and/or other offers, news and/or newsletters.
- Subject to your consent, to use data tracking technologies (i.e: browsing and history data) for the purpose of providing you with personalized advertisements;
- To transfer and/or permit the processing of the personal data to third-party service providers who act as our processors in order to provide you with the services directly available/relevant to the Website and/or for documenting/archiving personal data for our routine business activities.
- To ensure the integrity, security and fulfillment of the Terms of Use and this Policy and to protect the Website and its users, including but not limited to detecting, monitoring, and preventing fraud and/or monitoring account activity.
- To enforce this Policy and the Terms and Conditions of the Website and/or to act in accordance with law or any other legal obligations BACCARA is subject to.
- For clarity: processing activities relating to Store Area transactions (including orders, payments, fulfillment, customer purchase support, invoicing/tax, and related compliance) are carried out by the Australian Subsidiary as controller and are governed by the AU Privacy Policy (see Section 1.6.3).
- How We Protect Information:
- We implement generally accepted industry standards to maintain the safety of your Personal Data against loss, alteration, theft or access by unauthorized third parties when you enter, submit, or access your Personal Data and once we receive it (e.g. access controls, firewall and malware detection and blocking, etc.). However, no method of transmission over the Internet, or method of electronic storage is flawless or entirely secure.
- Please note, however, that there are inherent risks in transmission of information over the Internet or other methods of electronic storage and we cannot guarantee that unauthorized access or use will never occur.
- Therefore, while we strive to protect your Personal Data via the aforementioned technical and organizational means, we cannot guarantee its absolute security. What we can guarantee is that we will not sell, share, transfer or use the data We collect from you for purposes other than those purposes stated expressly herein above.
- Limitation of Liability:
We implement industry-standard technical and organizational measures (including SSL encryption and access controls) to secure your data. However, no system for transmitting or storing data electronically can be guaranteed to be completely secure. Nothing in this Policy limits any rights you may have under applicable data protection laws, including rights to compensation where provided by law.
WE DO NOT GUARANTEE ABSOLUTE SECURITY, BUT WE GUARANTEE COMPLIANCE WITH MANDATED DATA PROTECTION SAFEGUARDS.
- In the event of a Personal Data breach, we will respond in accordance with applicable law, including breach notification obligations where required.
- We maintain internal access controls and limit access to Personal Data to authorized personnel and service providers on a need-to-know basis.
- Third Party Sites:
- Our website may contain links to third party websites and/or social media platforms. We have no control over third-party sites or services, and all use of third-party sites or services is at your own risk. BACCARA cannot accept responsibility for the privacy policies of any such third party sites and such third-party websites are governed solely by such third parties’ privacy policies and you are advised to be careful and check any such third party’s privacy policies and compliance with laws, prior to supplying them with any of your personal data to them.
- BACCARA is not responsible for content available by means of such third party sites. BACCARA does not endorse any information or products offered by third parties and we urge our users to exercise caution in using third-party services.
- Cookies and Tracking Tools Usage by BACCARA
- What’s a cookie?
A cookie is a small file sent from a website or web-based interface, which is then stored by your web browser. When you return to the website or web-based interface, the information in the cookie can be used to recognize your last session. Cookies cannot install malicious software such as viruses on your device, and they do not store any of your personal data or account information.
Cookies may in some cases store identifiers that can be associated with an individual or device. When combined with other information they may constitute Personal Data under applicable law.
- Why do we use cookies?
We use cookies to save and maintain users’ settings and selected preferences during browsing sessions, to remember user preferences for future visits (e.g. geographical location, currency preferences accessibility and language selections and preferences), and for statistical analysis of the performance and trends on our website and for monitoring and identifying errors.
- Where do cookies come from?
Cookies originate from two types of sources: first party and third party. The classification whether a cookie is ‘first’ or ‘third’ party refers to the internet domain that is placing the cookie.
- First-party cookies are those set by a website that is being visited by the user at the time.
- Third-party cookies are cookies that are set by a domain other than that of the site being visited by the user. If a user visits a website and another entity sets a cookie through that site this would be a third party cookie.
- Option to Opt-out:
When you first visit the Website, you will be given the option to accept or decline the use of cookies. You can also control the use of cookies at the individual browser level, and instructions for managing cookie usage can be found for the following browsers, at:
If you wish to opt-out of personalized or behavioral advertising, you can use an industry resource in your region that provides cookie choices, such as the tools provided by:
- the Digital Advertising Alliance (DAA),
- the Digital Advertising Alliance of Canada (DAAC), and
- the European Interactive Digital Advertising Alliance (EDAA).
Be advised that if you elect to remove/block our cookies, you may still use the website or interface, but your ability to use some features or areas therein may be impaired, limited or unavailable.
Consent Model. Where required by applicable law, non-essential cookies (including analytics and marketing cookies) will be set only after you provide opt-in consent via our cookie banner or preference center. You may withdraw consent at any time via the cookie preference tools available on the Corporate Website Area.
- Do Not Track/Privacy Mode
Some browsers and extensions provide “Do Not Track” signals. The Corporate Website Area does not respond to Do Not Track signals as a universal standard. However, where required by applicable law we honor consent choices expressed via our cookie preference tools and, for California residents, applicable opt-out preference signals as described in the California Supplement.
Do not track options are available in a few browsers including:
Browser “Do Not Track” signals are not treated as a universal standard. However, where required by applicable law, we honor consent choices expressed through our cookie tools and recognized opt-out preference signals, including Global Privacy Control where applicable.
If you disable certain cookies or tracking technologies, some Website features or services may not function properly.
- The Following Categories of Cookies are Embedded and Deployed on the Site can be classified for the following four purposes:
- Essential cookies are fundamental for a website to function properly. They enable core functionalities such as security, session management, and accessibility. The website cannot function properly without these cookies.
- Analytics cookies collect aggregated or pseudonymous data on how users interact with a website. They track metrics such as page visits, time spent on pages, bounce rates, and loading speeds to help website owners improve functionality and user experience
- Marketing cookies Marketing cookies are web cookies designed to track user behavior for advertising purposes. They collect data on interactions, preferences, and habits to enable targeted digital marketing, such as personalized ads and retargeting
- Functional cookies enhance user experience by remembering preferences such as language settings or customized layouts. While essential cookies are strictly necessary, functional cookies improve usability but are not always required for basic website operation.
- Can I withdraw consent for the use of cookies or tracking tools?
If you wish to withdraw your consent, you can choose to opt-out of cookies at any time by managing and/or deleting your cookies using your internet browser settings.
- Additional information on cookies in general:
A number of websites provide detailed information on cookies, including AboutCookies.org and AllAboutCookies.org.
- The Third Party Cookies and Tracking Tools Deployed on our Website:
Some cookies and similar technologies may involve processing by third parties acting as our processors or independent controllers depending on the tool and configuration. Where required by law, these tools are enabled only after consent.
|
Cookie name |
Provider |
Category |
Function |
Retention period |
|
|
|
|
|
|
|
_ga |
Google Analytics |
Analytics |
Distinguishes users for analytics reporting |
2 years |
|
_ga_GT0ZXTZF0J |
Google Analytics 4 |
Analytics |
Persists user state for GA4 |
2 years |
|
pll_language |
Polylang |
Functional |
Stores the visitor’s selected website language to ensure consistent language display across pages and sessions. |
1 year |
|
_cf_bm |
Cloudflare |
Strictly Necessary / Security |
Cloudflare bot-management cookie used to detect and mitigate automated traffic, protect against malicious bots, and maintain site security and performance. |
30 minutes |
- Data retention and deletion
- BACCARA deletes (or equivalently irreversibly anonymizes) personal data where the purpose for which the data was being collected or processed ceases to apply, except where retention is required or permitted under applicable law (and in such cases only to the extent required) or we have overriding legal grounds to continue the processing as will be notified to you should you address up to exercise an applicable data subject right for deletion of Personal data.
For the Corporate Website Area, we retain Personal Data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law (e.g., for legal claims, compliance, or security).
- However, we shall continue to retain your personal data beyond such periods, solely to the extent and only as long as necessary to provide you with the BACCARA Service and for legitimate and essential business interests, such as maintaining the performance of the BACCARA Services, while retaining minimal details required to be able to retain our legal rights in case of disputes during the statute of limitations periods, and always when required for complying with our legal obligations, and resolving disputes, such as the following circumstances:
- If there is an unresolved issue relating to your account, such as an outstanding credit on your account or an unresolved claim or dispute we will retain the necessary personal data until the issue is resolved;
- Where we are required to retain the personal data for our legal, tax, audit, and accounting obligations and/or regulatory requirements, we will retain the necessary personal data for the period required by applicable law; and/or,
- Where necessary for our legitimate business interests relating to the website’s operation and security such as fraud prevention or to maintain the security of our users.
- Where necessary to cooperate with a criminal investigation by law enforcement agencies and/or any regulatory authority’s inquiry and/or audit, in each such case solely subject to extent request and as per the applicable law.
- Technical & Distributor Inquiries
Data provided via the “Contact Us” or “Distributor Search” forms is retained for five (5) years from the last interaction to facilitate ongoing technical support and business development.
- Contact inquiries and scheduling requests: generally 12–24 months from last interaction.
- Marketing & Newsletters: Data is retained until you withdraw consent. Upon unsubscription, we maintain a “suppression list” for twenty-four (24) months to ensure your opt-out preference is respected in future campaigns.
- Statutory Records: Information related to corporate interactions that may have legal or tax implications is retained for seven (7) years in accordance with Israeli and international accounting standards.
- Security logs (e.g., IP/session and access logs): typically 6–12 months, unless longer is needed for incident investigation or legal claims.
These periods may be adjusted where required or permitted by applicable law and based on risk, necessity, and limitation periods.
- Certain categories of Personal Data are retained only for as long as you use BACCARA Services, such as your e-mail address and other information sent as part of a request or when browsing and for the duration necessary to fulfil the relevant processing purpose.
- Where such a request has been withdrawn or sufficiently fulfilled and no longer relevant we shall delete such as part of our commitment to data minimization.
- Note: We will also actively delete your Personal Data upon your expressed request to fulfill your data subject right, provided you forward such a request , as mentioned above, unless there is an overriding legal obligation or lawful justification which we shall communicate to you in response to your request to the extent we cannot accommodate it fully or partially.
- Store Area. Retention for purchases, payments, and order fulfillment is governed by the AU Privacy Policy published by BACCARA Australia Pty Ltd on the Store Area website.
- Newsletter, Marketing Messages, Updates, Alerts and other Communications Sent by Us
- You may elect to subscribe to our Newsletter or join our mailing list to receive alerts, notifications and marketing information through the dedicated consent interface available on our Website in the appropriate parts relating thereto.
- If you confirm the receipt of the aforementioned newsletter, direct mailing or marketing messages from BACCARA, then your Contact Details and name will be to our marketing mailing list for sending messages to the user by various means, primarily via email or other electronic communications and/or through any other means of communication regarding sales promotion, advertising etc..
- Where you have provided consent to receive marketing communications, we may use your contact details to send marketing messages and updates regarding our products or services and to measure the effectiveness of our marketing communications.
- You can unsubscribe from our newsletter or mailing lists at any time by by clicking the “unsubscribe” link provided in each marketing message, advertisement or newsletter issue and/or by sending us a direct e-mail request sent to: [email protected].
- In addition, if the information in the Company’s databases is used for the purpose of personally contacting the user, based on the user’s affiliation with a population group determined according to one or more characteristics of people whose names are included in one of our Databases (hereinafter: “contact with a commercial offer”), then the user is entitled to demand to be removed and has a specific right to object to such profiling for marketing purposes.
- In this case, BACCARA will delete Personal data that we need to the extent it is used solely to contact the user with commercial offers as stated above. However, Personal Data collected and processed for other purposes hereunder – will continue to be retained by the Company by law but will no longer be used for the purpose of sending you marketing materials, direct mailing advertisements and/or newsletters.
- Transfer of Your Information to Third-Parties:
- We do not sell, trade, or otherwise transfer to outside parties your Personal Data, except as specifically stated in this Policy.
- For clarity, “selling” and “sharing” may have specific meanings under certain U.S. privacy laws (including California). Please see the U.S. supplements for those definitions and your opt-out rights.
- This does not include trusted third parties service providers and/or affiliates who assist us in operating our Website, providing the Corporate Website Area functionality or specific software sign-up windows and/or provide the framework which we use for our routine business and or servicing you directly.
- Such processing is conducted on our behalf and under our instructions, subject to legally binding written agreements. These agreements require such trusted third-parties to keep your Personal Data confidential, implement appropriate organization and technical data protection measures when processing your Personal Data, use your Personal Data solely to fulfill their obligations to us and only for the purposes we instruct (e.g. Data Processing Agreements, Standard Contractual Clauses, Business Corporate Rules, or other legally recognized international data transfer mechanisms) and refrain from using or disclosing your data for their own purposes.
- Personal Data may be transferred to recipients located outside the EEA and/or the United Kingdom. Where GDPR applies, we rely on adequacy decisions or appropriate safeguards under GDPR Chapter V (such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required). Where UK GDPR applies, we rely on adequacy regulations and/or appropriate safeguards recognized under UK law (such as the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to the EU Standard Contractual Clauses), as applicable.
In this regard, Personal Data may be transferred to BACCARA subsidiaries or service providers in the United States (e.g., BACCARA USA). We ensure such transfers are lawful by utilizing the EU-U.S. Data Privacy Framework (DPF) or, where the recipient is not DPF-certified, by executing the European Commission’s Standard Contractual Clauses (SCCs) and conducting a Transfer Impact Assessment to ensure an equivalent level of protection
- Beyond the above we may share your Personal Data solely for the following purposes:
- Legal obligations and law enforcement: Where required by applicable law, regulation, court order, or competent authority, including to establish or defend legal claims.
- Prevention of harm or fraud: To detect, investigate, and prevent fraud, security breaches, or any behavior that threatens safety or legal rights
- Protection of our legitimate interests: To enforce our rights under this Policy, our Terms of Use, or in relation to any legal claim or defense.
- Service infrastructure and operations (sub-processors) required for our routine business needs: including, but not limited to:
- Network and cybersecurity providers;
- Cloud service providers, CRM and SaaS tools used in our routine operations;
- IT maintenance, development, or hosting providers;
- Analytics and statistical service providers.
- Advertising/Measurement Partners (Corporate Website Area). Where enabled, we may share limited online identifiers and event data with advertising or measurement partners for analytics and advertising purposes, subject to the consent and opt-out mechanisms described in this Policy and the U.S. supplements.
- Note: We may share non-personally identifiable information (aggregated, anonymized, or de-identified data) for purposes such as usage trends, statistical research, or website optimization, provided it cannot reasonably be linked to an identifiable individual.
- List of Key Service Providers (Categories). Upon request, and where required by applicable law, we will provide additional information about our processors/sub-processors and categories of recipients.
- Updates and Changes to this Policy
- We may revise this Policy from time to time, and such changes shall come into effect from the moment BACCARA notifies you of such changes and/or updates, either by email, on the websites or in some other reasonable manner.
- The above notwithstanding, if we wish to collect additional types of personal data or process existing personal data for new or additional purposes, we notify you directly through the contact details we have on record and will procure your prior consent before any such new processing activities.
- When we make material changes to this Policy, we’ll provide you with prominent notice as appropriate under the circumstances, e.g., by displaying prominent notice on the BACCARA website or by sending you a message through the contact details on record to that effect, as reasonably applicable dependent on the change.
-
- Notices and Correspondences.
If you provide contact details through the Website, including through a “Contact Us” form, newsletter sign-up, or email correspondence, BACCARA may use those details to respond to your inquiry, provide requested information, send service-related or administrative communications, route your request to the appropriate affiliate, distributor, or regional contact, and otherwise communicate with you in connection with the purpose for which your details were provided.
Marketing communications will be sent only where permitted by applicable law and, where required, on the basis of your separate consent or another valid lawful basis. You may opt out of marketing communications at any time using the unsubscribe link in the relevant communication or by contacting us using the contact details provided in this Policy.
Notices sent by electronic means will be deemed received when sent, subject to applicable law.
- BACCARAEntire Agreement.
These Terms represent the entire agreement between the parties regarding the subject matter hereof and supersede any and all other previous agreements between the parties regarding the subject matter hereof. BACCARA may assign its rights or obligations pursuant to these Terms. Users shall not assign any rights under these Terms and any attempted assignment shall be void. If any provision of these Terms shall be deemed invalid or unenforceable by a court of competent jurisdiction, such provision shall be interpreted to give maximum effect to its terms as permitted under law, and such invalidity or unenforceability shall not affect the validity or enforceability of any other part or provision of these Terms which shall remain in full force and effect.
- Contact Details for Queries and Data Subject Requests:
For all queries relating to this Policy or to exercise your Data Subject Rights, please contact our Data Protection Office at:
- Email: [email protected]
- Address: Kibbutz Geva, 1891500, Israel.
- Attn: Privacy Officer / Legal Department
Additional Privacy Protection Terms for U.S. Residents (State Privacy Notice)
This section applies to U.S. residents to the extent that applicable U.S. state privacy laws apply to BACCARA’s processing activities in the Corporate Website Area. Certain rights, definitions, and requirements vary by state. Where required by applicable law, we provide rights and disclosures consistent with laws such as those in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive consumer privacy statutes.
Categories of Personal Data We Process (Corporate Website Area):
• Identifiers and contact information (e.g., name, email, phone)
• Internet/online activity information (e.g., IP address, cookie identifiers, device information, browsing events on the Corporate Website Area)
• Communications content you provide (e.g., inquiry text, chatbot messages)
• Inferences derived from online activity (e.g., marketing preferences), where permitted
Purposes: As described in Section 6 (e.g., responding to inquiries, marketing with consent where required, analytics, security, fraud prevention).
Sensitive Data: We do not intentionally collect “sensitive data” as defined under certain U.S. state privacy laws in the Corporate Website Area. If we begin processing sensitive data in a manner that requires opt-in consent, we will obtain such consent where required.
Targeted Advertising / “Sale” / “Sharing” Opt-Out:
Where applicable law provides a right to opt out of targeted advertising and/or the “sale” or “sharing” of personal data (as defined by applicable law), you may exercise that right by:
(a) using our cookie preference tools (where applicable),
(b) using any “Do Not Sell or Share” or “Targeted Advertising Opt-Out” mechanisms we provide in the Corporate Website Area, and
(c) where required by law, using recognized opt-out preference signals.
Appeals (where required): If we decline to take action on a request and applicable law provides an appeal right, you may appeal our decision by contacting: [email protected] with the subject line “Privacy Appeal.”
Non-Discrimination: We will not unlawfully discriminate against you for exercising privacy rights.
Additional Privacy Protection Terms for California Residents
Beginning January 1, 2020, the California Consumer Privacy Act (“CCPA”) as amended by Proposition 24 titled the “California Privacy Rights Act” (“CPRA”) gives California residents certain rights with respect to the processing of personal data (known as “personal information” under the CCPA and CPRA).
This supplement provides additional privacy disclosures and privacy protection provisions in light of the above for California residents accessing our website.
Scope Clarification (Corporate Website Area vs Store Area):
This California supplement applies only to Personal Information processed by BACCARA in the Corporate Website Area (as defined in Section 1.6). Personal Information processed in connection with purchases, payments, fulfillment, and other Store Area activities is governed by the AU Privacy Policy.
Notice at Collection on Personal Information Collected and Processed
Under the California Privacy Rights Act, we provide this Notice at Collection to inform California residents, at or before the point of collection, about the categories of Personal Information we collect, the purposes for which it will be used, the retention periods, and whether it is sold or shared
|
Category of Personal Information |
Purpose of Use |
Retention Period |
Sold or Shared? |
|
Identifiers (e.g., name, email) |
Customer support, Meeting Scheduling |
|As long as necessary for transactions + up to 24 months for Corporate Website inquiries (unless longer retention is required for legal claims/compliance |
Not sold. Disclosed to service providers for business purposes. |
|
Internet Activity (e.g., IP address, cookies) |
Website functionality, analytics, advertising |
Session + up to 24 months |
· Functionality Shared for security and stablity · Analytics and Advertising Can be shared for targeted advertising, pending consent
|
|
Open-Query free text |
Communications content you provide (e.g., inquiry text, ~~chatbot messages~~) |
As long as necessary for transactions + up to 24 months for Corporate Website inquiries (unless longer retention is required for legal claims/compliance7 years for tax/accounting |
Not sold, shared with CRM provider |
|
Location Data (e.g., via IP) |
Security, fraud prevention |
Up to 12 months |
Can Shared with analytics and/or security services provider |
If we collect Sensitive Personal Information (such as geolocation, biometric identifiers, or racial/ethnic data), we use it only for purposes permitted under applicable law and do not sell or share such information. California residents may limit the use of SPI where applicable by contacting us at: [email protected] and/or by using any SPI limitation mechanisms provided in the Corporate Website Area.
Sources of Personal Information: Directly from you (forms, communications), automatically from your device/browser (cookies and similar technologies), and from service providers assisting us in operating the Corporate Website Area.
Retention: See Section 10 for our retention approach and indicative periods for the Corporate Website Area.
Your California Privacy Rights (CPRA)
Subject to applicable exceptions, California residents have the following rights:
- Right to Know / Access (categories and specific pieces of PI)
Right to Delete\ - Right to Correct inaccurate PI
- Right to Opt Out of the Sale of PI (if applicable)
- Right to Opt Out of Sharing PI for Cross-Context Behavioral Advertising (if applicable)
- Right to Limit the Use and Disclosure of Sensitive Personal Information (where applicable)
- Right to Non-Discrimination for exercising rights
Requests to Exercise Your Rights under the CCPA
You are afforded and entitled to forward us requests to exercise your rights as a California resident. We will not discriminate against you for exercising any of your rights under the CCPA
You may make a verifiable consumer request related to your personal information twice per 12-month period.
Please note, we may not have enough information about you to verify your identity to exercise your rights under the CCPA and may ask you to provide personal identification information in order to verify your identity.
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
Right To Know – Under the CCPA, you have a right to request information about our collection, use, and disclosure of your personal information over the prior 12 months prior to the date of your request, and ask that we provide you with the following information:
- The Categories of and specific details of the personal information we have collected about you.
- The Categories of sources from which we collect personal information about you.
- The Purposes for collecting personal information as per 1 and 2 above.
- The Categories of third parties with which we shared your personal information.
- Categories of personal information disclosed about you for a business purposes.
- If applicable, categories of personal information sold about you and the categories of third parties to which the personal information was sold, by category or categories of personal information for each third party to which the personal information was sold.
To make a verifiable request for information about the personal information we have collected about you, please forward a request “I want to know what Personal Information is processed about me” through email at: [email protected] or send us a request through the “Contact Us” online form.
Right To Delete – You also have a right to request that we delete personal information, subject to certain exceptions.
To make a verifiable request for information about the personal information we have collected about you, please forward a request titled “I want to know what Personal Information is processed about me” through email at: [email protected] or send us a request through the “Contact Us” online form.
To make a verifiable request for information about the personal information we have collected about you, please forward a request titled “I want to permanently delete my data through email at: [email protected] or send us a request through the “Contact Us” online form.
Right To Correct – You have the right to request correction of inaccurate personal information, subject to verification and applicable exceptions. To submit a correction request, email: [email protected] with the subject line “California Correction Request.”
Household Requests – We do not collect household data and only process information about individual users making orders and/or operating an account on our website. We will respond to verified requests as required by law; where we cannot verify household-level requests, we may respond at the individual level.
Disclosures of Personal Information for a Business Purpose
In the preceding 12 months, BACCARA has disclosed certain data from the following categories of personal information to the categories of recipients listed in Section 5 Section 12 of this Policy titled “Transfer of Your Information to Third Parties”) for one or more business purposes:
- User Data
- Analytics
We do not sell personal information. We have taken substantial steps to identify and remediate any data sharing arrangements that could constitute a “sale” under the CCPA and CPRA.
We do not sell personal information for monetary consideration. However, certain disclosures of online identifiers and browsing activity to advertising partners may be considered “sharing” for cross-context behavioral advertising under California law if advertising cookies are enabled. You may opt out of such “sharing” by using our cookie preference tools and any “Do Not Sell or Share” mechanisms available in the Corporate Website Area.For more information on interest-based advertising, please see the ‘Cookies and Tracking Tools’ portion of our Data Protection and Privacy Policy.
We recognize Global Privacy Control (GPC) signals as a valid request to opt-out of the sale or sharing of personal information where such signals are supported by your browser or extension. Therefore, we will honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information. If your browser or extension sends a GPC signal, we will process it in accordance with the California Privacy Rights Act.
Metrics / Response Timing (where applicable): We will respond to verified consumer requests within the timeframes required by California law, subject to permitted extensions.
Amendments to the Consent Language on Electonic Forms (leave check boxes empty/opt-in):
[ ] I confirm that I have read and understood the Privacy Policy and agree that BACCARA may process my personal data to respond to my inquiry and handle my request in accordance with that Policy.
[ ] I would like to receive marketing communications and product updates from BACCARA by email and/or SMS/MMS messages and I understand that I can withdraw my consent at any time by using the unsubscribe link in the messages received or contacting BACCARA.
Cookies Banner Language:
We use cookies and similar technologies to operate this website and to understand how visitors use it. Some cookies are strictly necessary for the site to function, while others help us improve performance, analyze usage, or provide personalized marketing.
You can accept all cookies, reject non-essential cookies, or manage your preferences. Your choice will apply only to this website and you can change your preferences at any time through the Cookie Settings link available on our site.
For more information about the cookies we use and how we process personal data, please read our Privacy Policy and Cookie Section for further details.
Buttons on the Banner:
Accept All
Purpose:
Allows all cookie categories (analytics, functional, marketing).
Button 2
Reject Non-Essential
Purpose:
Accepts only strictly necessary cookies required for website operation.
Button 3
Manage Preferences
Purpose:
Opens the detailed cookie settings panel where users can enable or disable categories such as:
- Analytics cookies
- Functional cookies
- Advertising cookies
Special Notes due to CPRA:
- You must have the website designed to identify and honor Global Privacy Controls (GPC)
- You must have a footer with cookies control and one with Do-Not-Sell-My-Data which shuts off all non-essential cookies upon clicking.