Last updated · 28 May 2026

Privacy Policy

DE KARINA respects the privacy of visitors to our business landing page and is committed to protecting the personal information you provide to us. This policy explains what information we collect, for what purposes, how we safeguard it, the rights available to you under Israel's Protection of Privacy Law, 5741-1981 (including Amendment No. 13, which took effect on 14 August 2025), and how to contact us on any matter.

1. Who we are

This landing page, https://lp.de-karina.co.il, is operated on behalf of DE KARINA, a gourmet chocolate company based in Kibbutz Ein Zivan, Golan Heights, Israel. DE KARINA is the "database controller" as defined in the Protection of Privacy Law — that is, the entity that determines the purposes and means of processing the information submitted through the contact form on this site.

The landing page serves only as an interface — the collection of form data, its routing for handling, and all substantive processing are carried out by DE KARINA. Privacy-related requests should be directed to the contact details set out in Section 12.

2. The information we collect

We collect two categories of information:

A. Information you provide voluntarily through the contact form

• Full name — required in order for us to respond to your enquiry
• Email address — so we can reply to you in writing
• Phone number — so we can call you back
• Company size (number of employees) — to tailor the quotation
• Free-text in the "How can we help?" field — anything you choose to share with us

Providing your name, email and phone number is necessary so that we can get back to you. The remaining fields help us tailor the proposal but are not mandatory.

B. Technical information collected automatically during browsing

• The visitor's IP address
• Browser type and operating system (user-agent)
• Date and time of the visit
• The referring page (referrer), where available

This information is collected in the server logs of our hosting provider (Vercel) and is used to secure the site and troubleshoot issues. It is not used for marketing profiling or targeted advertising.

3. How we use the information

We use the information you provide solely for the following purposes:

• Responding to your enquiry — getting back to you within a reasonable time of your form submission, via the contact details you provided
• Tailoring a business proposal — building a chocolate-gift proposal suited to your organisation's needs
• Recording the enquiry in internal systems — for service continuity in the event of a repeat enquiry
• Securing the site — preventing misuse and defending against spam and routine attacks
• Meeting legal obligations — such as business records required under tax rules

We do not use your information for recurring marketing mailings, third-party offers, or sale to any third party. Should you choose in future to opt in to marketing, that will require separate, explicit consent.

4. Legal basis for processing

Processing rests on two legal bases:

• Informed consent — by completing the form fields and submitting your request, you give informed consent to the processing of your information for the purposes set out in this policy. Consent is given on your own initiative, after you have had the opportunity to read this policy.
• Legitimate interest — responding to a business enquiry from an organisation that approached us, provided that our interest does not override your fundamental rights.

You may withdraw your consent at any time by contacting us, without affecting the lawfulness of processing carried out before the withdrawal. See Section 9 for your rights.

5. Sharing with third parties

We do not sell or rent your information to anyone. The only sharing we carry out is technical and operational, with infrastructure providers required to run the service:

Infrastructure providers that technical information may pass through

• Vercel Inc. — the hosting provider for the landing page. Server logs (IP, user-agent) are stored there for security and operations
• Shopify Inc. — some product images are served from Shopify's CDN (`cdn.shopify.com`). Loading them exposes your IP address to Shopify
• DE KARINA CDN servers (`de-karina.co.il/cdn/shop`) — client logos are loaded from the de-karina.co.il CDN

Disclosure required by law

We may disclose information if required to do so by a judicial order, an official request from a competent authority, or any legal provision applicable to us.

Corporate restructuring

In the event of a merger, acquisition or transfer of business activity, the databases may pass to the receiving entity, provided that it assumes the obligations of this policy in full.

6. Cookies and browser local storage

This policy page does not set any cookies — neither essential, analytics nor marketing. The business landing page itself uses only the minimal storage described below; you can inspect this at any time in your browser tools.

We make minimal use of the browser's localStorage (a local storage area on the visitor's device, not transmitted to any server) solely to remember accessibility-widget preferences:

• The font size you selected
• The contrast mode you selected (normal / high contrast / invert)
• Other readability preferences

This information is stored only on your device, is not transmitted to us, and is not used for tracking. You can clear it at any time from your browser settings.

7. Data security

We apply reasonable safeguards and processes to protect the information:

• Encryption in transit — all communication between your browser and our servers uses HTTPS with a modern TLS certificate
• Controlled access — only authorised DE KARINA staff may access the form content
• Physical and operational security — subject to the standards maintained by our hosting provider Vercel (SOC 2, ISO 27001 certifications)
• Spam prevention — filtering mechanisms on form submission

That said, we cannot absolutely guarantee that information transmitted over the internet will not be exposed to a third party. Use of the landing page is subject to this inherent risk.

8. Data retention

The various retention periods:

• Contact-form content — retained for up to 24 months from our last contact with you, after which it is irreversibly deleted or anonymised
• Business records required by law (invoices, contracts, concluded engagements) — retained per Income Tax and VAT rules (typically 7 years)
• Technical server logs — retained by Vercel in full for up to 30 days, after which they are deleted or de-identified

If you request deletion (Section 9), we will delete the information earlier, except for information we are legally required to retain.

9. Your rights under Amendment 13

The law grants you a range of rights regarding your personal information, set out below. Every request will be answered within 30 days of receipt.

Right of access (Section 13 of the Law)

You may contact us and request the information we hold about you. We will send it to the email address you provided, or by another secure means at your request.

Right to correction and deletion (Section 14 of the Law)

If our information is inaccurate, incomplete, out of date, or was obtained unlawfully, you may request its correction or deletion. We will handle the request and notify you of the outcome.

Right to object to direct marketing (Section 17E of the Law)

Even if we send you an offer in the future as part of a business engagement, you may ask to stop receiving them — such a request will be honoured immediately, with no justification required.

Right to contact the Privacy Protection Authority

If you are not satisfied with how your request was handled, you may file a complaint with the Privacy Protection Authority at the Ministry of Justice.

10. Transfers of information outside Israel

Some of our infrastructure providers also operate outside Israel. In practice, technical information (including IP address) may be processed on servers located in the following regions:

• Vercel — edge servers deployed globally. The form content itself is not stored at Vercel
• Google Fonts — servers in the US and Europe
• Shopify CDN — global servers

We work with providers that meet accepted international data-protection standards, though the level of protection in certain countries may differ from that under Israeli law. By using the landing page you acknowledge and consent to this.

11. Changes to this policy

This privacy policy may be updated from time to time — in line with legislative developments, changes to the site's services, or improvements to risk management. The version in force at any time is the one appearing on this page.

The date of the latest update appears at the top of the page. In the event of material changes, we will post a prominent notice on the landing page.

12. Contact and privacy requests

For any question, request or comment relating to this policy or to the handling of your personal information:

• Email for privacy requests: privacy@de-karina.co.il
• Customer-service phone: +972-4-699-3622
• Address: DE KARINA, Kibbutz Ein Zivan, Golan Heights, Israel

DE KARINA has not appointed a Data Protection Officer (DPO), as the scope and nature of its data processing do not cross the threshold set in Amendment 13 to the Protection of Privacy Law that would require such an appointment.

13. Governing law and jurisdiction

This privacy policy, and any dispute arising in connection with it, are governed exclusively by the laws of the State of Israel. Exclusive jurisdiction lies with the competent courts of the Haifa District.

This policy was originally written in Hebrew. In the event of any discrepancy between this English translation and the Hebrew original, the Hebrew version shall prevail.