Privacy Policy

Mizrahi Tefahot Bank is providing the following Privacy Notice pursuant to the California Privacy Rights Act, the Texas Data Privacy and Security Act and the Nebraska Data Privacy Act.
This notice applies only to Mizrahi Tefahot Bank clients residing in the States of California, Texas or Nebraska, in the United States.
This notice is intended to add to, rather than restrict, the provisions of the Bank’s general terms and conditions. In the event of a discrepancy between this Privacy Notice and the general terms and conditions, the provisions of this Privacy Notice prevail, only with respect to residents of the States of California, Texas and Nebraska.

Below are the categories of personal information we collect, and the source of that information. These are also the categories of information we have collected over the last 12 months.
We keep the personal information specified below for a period of up to 20 years after closure of the bank account to which such information pertains. Thereafter, we shall see to it that the information is not accessed, other than in extraordinary events such as legal claims.
Furthermore, we neither use nor share sensitive information for purposes that exceed those which are permitted by applicable law.

Categories of personal information under applicable laws	Details of the personal information that was collected	Sources of information
Identifiers	Name, e-mail address, telephone, I.D. number, U.S. Social Security number and passport number. Access details to consumers’ accounts, financial accounts, payment card or credit card number together with any security or access code, password or approvals which are required to enable access to the account.	1. Directly from you, as the owner of the account. 2. From persons who make deposits to your account. 3. From your device, when you enter our website or app. 4. Information available on search engines, social media and websites, economic and other databases which the Bank uses, among others, for the prevention of money laundering and financing of terror. 5. Information from open sources such as publicly available governmental registers.
Additional information about you	An alias you use. Your tax residency, residential address and citizenship. Specimen signature. Years of education and degrees. Your medical condition.
Protected classifications under state law or federal law	Family status, gender, age, physical disability, mental disability.
Commercial information	Records of personal property, products or services that you purchased or considered purchasing, purchase history – with respect to financial products. Information about life insurance policies.
Biometric information	Your voiceprint.
Visual information	Your photograph.
Internet or other electronic network activity information	Information regarding transactions you performed on the user interface of your account on the website or App, the length of your stay on such interfaces, information regarding internet pages you’ve watched and the sources from which you reached the Bank’s website.
Professional or employment-related information	Information regarding the occupation of the consumer and their family members.
Sensitive information	U.S. Social Security number and passport number. Access details to consumers’ accounts, financial accounts, payment card or credit card number together with any security or access code, password or approvals which are required to enable access to the account. Your voiceprint. Your medical condition.

Categories of personal information (per the table above)

Business purposes

Identifiers Additional information about you Protected classifications under state law or federal law Commercial information Biometric information Visual information Internet or other electronic network activity information Professional or employment-related information Sensitive information

1. Provision of services, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments and providing financing. 2. Debugging to identify and repair errors that impair existing intended functionality. 3. Helping to ensure security and integrity (of processes, information, and transactions). 4. Undertaking activities to verify or maintain the quality or safety of our services and improving our services.

We do not sell your personal information (including any sensitive data or biometric data), nor do we share it for the purpose of online targeted advertising. Furthermore, we do not knowingly sell the personal information of a person under 16 years of age, nor do we knowingly share it for the purpose of targeted online advertising.
Below are the categories of personal information that we disclose to others, with details on the purposes of such disclosure. These are also the categories of information we have disclosed over the last 12 months.

Categories of personal information (per the table above)

Categories of entities we give the information to, and why

Identifiers Additional information about you Protected classifications under state law or federal law Commercial information Biometric information Visual information Internet or other electronic network activity information Professional or occupational information Sensitive information

External professional consultants, such as risk consultants or financial consultants, for the purpose of managing your bank account and our risk management. Entities to whom we are obligated to disclose information pursuant to a judicial order (e.g., a discovery order) or by law (e.g., tax and money laundering laws that require us to file reports). Entities that need the information in order to execute or manage a transaction related to your account. For example, providing information to a transferee bank in a bank transfer you performed, or providing information to a guarantor regarding loans or credit you took. To other companies in the Bank’s group, for the purpose of managing your bank account and our risk management. To another company with which the Bank merges, which acquires the Bank’s activity, or which is involved in restructuring of the Bank, to enable the merger, acquisition or restructuring. To external advisors such as attorneys, accountants, regulators and State agencies, for the purpose of handling suspected violation of the law.

Below are your rights under the applicable state laws

The right to know

You have the right to know whether we are processing your personal information. If we do, you have the right to know the following information, which we will provide to you after we receive your request and verify your identity:

• The categories of personal information we collected about you.
•  The categories of sources from which the personal information was collected.
•  The purposes for which we collect the personal information.
•  The categories of third parties with whom we share personal information.
•  The specific pieces of personal information we collected about you.

 

The right to obtain a copy of your personal information

If your data is available in a digital format, you have the right to obtain a copy of the personal information that you previously provided to us, in a portable and readable format (to the extent this is technically feasible).

The right to delete

In some cases, state privacy laws provide for the deletion of your personal information. However, we do not delete the information because we are a banking institution that is required to keep your information in order to comply with our duties under law and to handle legal disputes.

The right to correct inaccurate personal information

Once we receive a request from you to correct your data, and verify your identity, we will examine the veracity of the corrected information provided by you, consider your request to correct, and inform you of our decision.
To establish the veracity of the personal information as per your request, we will consider all the circumstances pertaining to the personal information the correction of which is requested. We may also require you to provide documentation in support of your request to correct the personal information.

The right to opt-out of processing for solely automated profiling

You have the right to opt-out of solely automated processing of your personal information to evaluate, analyze, or predict your personal aspects related your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, where that processing is done in furtherance of a decision that produces a legal or similarly significant effect on you.

 

The right to non-discrimination as a result of exercising your rights

• You have the right to not be discriminated by us for exercising the rights granted to you under applicable law. If you exercise your rights, we cannot:
• Deny you services.
•  Charge different prices or fees for services, also through discounts, benefits, or fines.
•  Provide you a different level or quality of services.
•  Propose that you receive different prices or tariffs for services.

Please note that we may charge a different fee or provide a different level or quality of services, if the difference is reasonably related to the value we gain from your personal information.

Filing requests

Should you wish to exercise your rights under applicable laws as specified above, please contact us through the following channels:

• File a form of consumer requests which is available here
• Call us, toll free: 18335823417

To verify your identity, we will ask you to provide additional information, through a verification process in which you will be asked to provide us with two items of information known to you and to us.
Note you may appoint an authorized agent to file requests to exercise your rights on your behalf. To this end, you must provide your authorized agent with written approval to do so. The authorized agent will have to present us with proof, attesting that you authorized them to act on your behalf. Furthermore, we will require verification of your identity, as explained above.

Our response to your requests

We will respond to your requests within 45 days (or within 90 days, where the law permits and we determine it necessary considering the complexity and number of the requests you have filed). If we take longer than 45 days, we will inform you of the extension within the initial forty-five-day response period, together with the reason for the extension.

We may deny your request in the following cases:

•  If we believe in good faith, based on reasons which are documented in writing, that your request is fraudulent or is an abuse of your rights under applicable law.
• If we conclude that the request is irrelevant, based on all the circumstances at issue (e.g., if you requested to correct your personal information, and we find that it is likely to be accurate).
• If it is contrary to federal or state law.
•  Due to discrepancy in the required documentation.
•  If the fulfilment of your request turns out to be impossible or involves disproportionate effort.

We will provide you with a detailed explanation including sufficient facts, to enable you to meaningfully understand why we cannot fulfil your request.

You may appeal our decision to deny your request by emailing the DPO of the bank at privacy@umtb.co.il