Privacy Notice – Ness Cloud Portal

• "Personal Data" — means any information relating to an identified individual or to an individual who can be identified, directly or indirectly, by reasonable means.
• "Non-Personal Data" — means information that does not, by itself, identify an individual and cannot reasonably be used to identify or contact an individual. Non-Personal Data includes technical information, anonymous information, aggregated statistical information and usage analytics, such as: device type; browser type; operating system; language settings; date and time of access; duration and frequency of use; browsing history within the Portal; pages viewed; referring websites; interactions with the Portal; and similar technical or statistical information. Subject to applicable law, we may use Non-Personal Data without restriction, including for operating and improving the Portal, performing statistical analyses, monitoring trends, enhancing user experience, and improving our marketing activities.
• Section headings are included for convenience only and shall not affect the interpretation of this Privacy Notice.
• References to the singular include the plural and vice versa, and references to one gender include all genders, unless the context requires otherwise.

• This Privacy Notice applies solely to information collected through your use of the Portal Services, regardless of the device used to access the Portal, including desktop computers, laptops, mobile phones, tablets or any other electronic device.
• You are under no legal obligation to provide Personal Data to the Company. However, certain Personal Data is necessary for us to provide specific Portal Services. If you choose not to provide such information, we may be unable to respond to your inquiry, provide the requested services, or provide them only partially. For example, if you request pricing information or a quotation for an AI solution on behalf of your organization, we will require certain details such as your name, position and the name of your organization in order to process your request.
• By providing Personal Data, you represent and warrant that all information submitted by you, whether relating to yourself or to any individual acting on behalf of your organization, is accurate, complete and up to date. You undertake to notify us promptly of any changes to such information. You further acknowledge that your Personal Data will be maintained in the Company's databases and may be processed and disclosed to third parties as described in this Privacy Notice.
• You undertake not to provide us with Personal Data relating to any other individual unless you are authorized to do so under applicable law and have obtained all required consents from the relevant data subject.

Depending on your interaction with the Portal, we may collect the following categories of Personal Data:

• Contacting Ness. You may contact us using the contact methods available through the Portal, including by email, telephone, registered mail, or any other communication channel made available by us. When contacting us, you may be asked to provide certain Personal Data, including: your full name; your employer or organization; your job title; your telephone number; your email address; and any other contact details required to respond to your inquiry. We may also collect any additional Personal Data you voluntarily choose to provide during your communications with us, including correspondence, telephone conversations, or other interactions with our representatives. For the avoidance of doubt, where you contact us through the "Contact Us" form that redirects you to another Ness website, the collection and processing of Personal Data through that website shall be governed by the privacy notice applicable to that website, rather than this Privacy Notice.
• Requests Regarding the Portal Services. The Portal enables you to request information regarding the Portal Services, including pricing information, quotations, licensing information, and other information relating to AI solutions available through the Portal. For these purposes, you may be requested to provide Personal Data, including, as applicable: your full name; your organization's name; your position; your business telephone number; your business email address; and information relating to the Portal Services in which you are interested. The information you submit enables our representatives to contact you outside the Portal, including by email or telephone, in order to respond to your request, provide additional information, discuss commercial terms, prepare quotations, and continue the sales process where applicable. During these communications, we may collect additional Personal Data that you voluntarily choose to provide.
• Technical and Usage Information. When you access or use the Portal, we may automatically collect certain technical and statistical information regarding your interaction with the Portal. Such information may include, among other things: browser type; operating system; IP address; approximate geographic location; pages viewed; session duration; navigation patterns; referral sources; device information; and similar technical usage information. This information helps us understand how users interact with the Portal, improve user experience, maintain the Portal, enhance security, troubleshoot technical issues, and generate statistical reports regarding Portal usage. For additional information regarding our use of cookies and similar technologies, please refer to the "Cookies and Tracking Technologies" section of this Privacy Notice.

We process Personal Data solely for legitimate business purposes and in accordance with applicable law. Depending on the circumstances, we may use your Personal Data for one or more of the following purposes:

• To operate, administer, maintain and improve the Portal and the Portal Services, including troubleshooting technical issues, ensuring the proper functioning of the Portal, and improving the overall user experience.
• To personalize the content presented through the Portal and improve our services based on users' interests and preferences. Subject to applicable law, we may also use cookies and similar technologies to display advertisements relating to Ness products and services on third-party websites and social media platforms. For the avoidance of doubt, any information used for advertising personalization will generally not identify you directly, but will instead be used to present content that may be relevant to your interests.
• To communicate with you via email, telephone, SMS, or other communication channels regarding: customer support; operational or administrative matters; updates concerning the Portal; changes to the Portal Services; responses to inquiries; service notifications; and where permitted by applicable law, marketing and promotional communications relating to Ness products and services. To improve our customer service and maintain appropriate business records, we may also document and retain correspondence and communications with you.
• To process requests submitted through the Portal, including: contacting you regarding your inquiry; understanding your organization's requirements; providing information regarding relevant Portal Services; preparing pricing proposals and quotations; facilitating commercial discussions; and providing the requested Portal Services where applicable.
• To establish, exercise or defend our legal rights and legitimate interests, to protect our property, systems and business operations, and to protect the rights, property and safety of our users, customers, employees and other third parties.
• To comply with applicable laws, regulations, judicial orders, governmental requests, internal compliance requirements, and other legal obligations applicable to the Company. We may also process Personal Data in connection with the establishment, exercise or defense of legal claims or regulatory proceedings.
• To maintain the security and integrity of the Portal and our information systems. This includes, among other things: detecting malicious activity; identifying cybersecurity threats; monitoring unauthorized access attempts; performing security analyses; preventing fraud; protecting our infrastructure; and continuously improving our information security measures.

We may disclose your Personal Data to third parties where necessary to achieve the purposes described in this Privacy Notice or where otherwise permitted or required by applicable law. Without limiting the foregoing, we may disclose Personal Data in the following circumstances:

• We may share Personal Data with third-party service providers and business partners that assist us in operating the Portal, providing the Portal Services, managing our business operations, or supporting our internal administrative, technical, or analytical activities. Such service providers may process Personal Data solely on our behalf and only to the extent necessary to provide the services requested by us.
• Subject to applicable law, we may share certain Personal Data with marketing, advertising and analytics providers for the purpose of promoting the Company's products and services. For example, we may allow third parties to place cookies, pixels or similar tracking technologies on the Portal in order to measure advertising effectiveness, perform analytics, or display advertisements that may be relevant to your interests. Additional information regarding these technologies is provided in the "Cookies and Tracking Technologies" section of this Privacy Notice.
• We may disclose Personal Data where we reasonably believe that such disclosure is necessary or appropriate: to comply with applicable law, regulation, court order, subpoena, search warrant, or other legal process; to respond to requests from competent governmental or regulatory authorities; to establish, exercise or defend legal claims; to enforce our Terms of Use or other agreements; to investigate suspected fraud, unlawful activity or security incidents; to protect the rights, property, business interests or safety of the Company, our customers, users, employees or third parties; or to prevent or mitigate illegal, fraudulent or otherwise harmful activities.
• We may disclose or transfer Personal Data in connection with a corporate transaction, including: a merger; acquisition; investment; financing transaction; corporate reorganization; sale of assets; transfer of business operations; or insolvency or similar proceedings. In such cases, Personal Data may form part of the transferred assets, subject to applicable law.

We take reasonable steps to ensure that third parties receiving Personal Data from us implement appropriate technical and organizational measures to protect such Personal Data and process it only for the purposes for which it was disclosed. Except as described in this Privacy Notice or as otherwise required by applicable law, we do not sell your Personal Data or disclose it to unrelated third parties.

• We will retain your Personal Data only for as long as reasonably necessary to fulfill the purposes for which it was collected and processed, and in accordance with applicable law. We periodically review the Personal Data maintained in our systems and, where we determine that there is no longer a legal, business, or customer service need to retain such information, we will securely delete it or, where appropriate, anonymize it.
• Notwithstanding the foregoing, we may retain your Personal Data for longer periods where: (a) such retention is required by applicable law or by a competent regulatory authority; (b) we are subject to a contractual obligation to retain the Personal Data; or (c) the Personal Data is required for the establishment, exercise, or defense of legal claims, or for the management or resolution of disputes.

• We respect your privacy and your rights regarding your Personal Data. Subject to applicable law, including the Protection of Privacy Law, 5741-1981, you may be entitled to review the Personal Data relating to you that is maintained in our databases and, where appropriate, request that such Personal Data be corrected or deleted if it is inaccurate, incomplete, unclear, outdated, or otherwise processed in violation of applicable law.
• To exercise your rights, please contact us at info@ness-tech.co.il or through any of the contact methods available on the Portal and specified in this Privacy Notice. To protect the privacy and security of our users, we may request additional information to verify your identity before responding to your request or taking any action regarding your Personal Data.

• The Portal may use cookies, pixels and similar tracking technologies (collectively, "Cookies") to support its operation and functionality. These technologies may be used for various purposes, including: operating and maintaining the Portal; authenticating users; remembering user preferences; improving user experience; collecting statistical and analytical information; enhancing the security of the Portal; detecting fraud and misuse; and improving the performance and functionality of the Portal. Certain Cookies may collect or process Personal Data. Most modern web browsers allow you to control or disable Cookies through your browser settings. Instructions regarding the management of Cookies are generally available through your browser's help pages.
• Managing Cookie Preferences. If the Portal uses non-essential Cookies, you may choose to disable or delete them through your browser settings. Please note that disabling certain Cookies may affect the functionality of the Portal and may prevent certain features or services from operating properly. Some Cookies are strictly necessary for the operation and security of the Portal and therefore cannot be disabled without affecting its core functionality.

The Portal may contain links to third-party websites, applications, services or social media platforms that are owned or operated by parties other than Ness. This Privacy Notice applies solely to the Portal and does not apply to any third-party websites, products or services. If you choose to access a third-party website or service through the Portal, your use of that website or service will be governed exclusively by the applicable third party's privacy notice, terms of use and policies. We encourage you to review the privacy practices of any third party before providing them with Personal Data or otherwise interacting with their services.

• We implement reasonable technical, administrative, and organizational measures designed to protect the Personal Data in our possession against accidental or unlawful destruction, loss, alteration, unauthorized access, disclosure, or misuse. While we continuously strive to safeguard the Personal Data processed through the Portal, no method of transmission over the Internet or electronic storage is completely secure. Accordingly, although we take reasonable measures to protect your Personal Data, we cannot guarantee absolute security or prevent every unauthorized access, system intrusion, cyber incident, technical malfunction, human error, or other event beyond our reasonable control. To the fullest extent permitted by applicable law, the Company shall not be liable for any indirect, incidental, consequential, or other damages arising from unauthorized access to, loss of, disclosure of, alteration of, or misuse of Personal Data resulting from circumstances beyond the Company's reasonable control. You also acknowledge that protecting your Personal Data is a shared responsibility. We encourage you to take appropriate measures to protect your devices and accounts, including: using strong and unique passwords; keeping your login credentials confidential; regularly updating your operating system and software; using reputable anti-virus and endpoint protection software; and promptly reporting any suspected unauthorized access or security incident.
• The Company may store, process, or permit access to Personal Data both within the State of Israel and in other jurisdictions where the Company, its affiliates, service providers, or cloud infrastructure providers operate. Accordingly, your Personal Data may be transferred to, stored in, or processed outside the State of Israel. Where such cross-border transfers occur, the Company will take appropriate measures, as required under applicable law, to ensure that Personal Data continues to receive an adequate level of protection.
• If you believe you have identified a security vulnerability or wish to report an information security incident relating to the Portal, please contact us using the contact details set out in this Privacy Notice. We will review your report and respond as appropriate.

We reserve the right to amend or update this Privacy Notice from time to time, at our sole discretion. The most current version published on the Portal shall constitute the binding version. Where we determine that an amendment materially affects the manner in which we collect, process, or use Personal Data, we will provide notice through the Portal or by any other method required under applicable law. We encourage you to review this Privacy Notice periodically to remain informed of our current privacy practices. The "Last Updated" date appearing at the beginning of this Privacy Notice indicates the date on which the current version became effective.

If you have any questions regarding this Privacy Notice, our privacy practices, or the processing of your Personal Data, you may contact us using the following details: Email: info@ness-tech.co.il. Mail: Ness A.T. Ltd., 7 Hapenina Street, Ra'anana, Israel. The Company will make reasonable efforts to respond to your inquiry within a reasonable period of time and in accordance with applicable law.