Privacy Statement CRT (Israel)

Effective Date: 7/2025

Last Update: 4/2026

Introduction

This privacy statement applies whenever you submit your personal information to CROSS RIVER TECHNOLOGIES LTD. (“we” or “us”) as part of a job application. We respect your privacy and are committed to protecting the personal information that you share with us. When you apply for a job with us or any of our affiliates, we need your personal information to consider whether you are a good fit for relevant positions and to contact you if the application process continues. This privacy statement describes how we collect and use your personal information when you submit a job application.

Information we collect

In this privacy statement, “personal information” means any information that may be used to identify an individual, including, but not limited to, a first and last name, email address, a home, postal or other physical address, other contact information, title, birth date, gender, occupation, industry, personal interests, CV and other information you provide as part of a job application. In addition to the preliminary information that you send to us as part of the application, we may collect more information about you in personal interviews or through further communications to the extent applicable.

Information we receive from Third Parties

Instead of directly submitting your job application or personal information to us, we provide you with the ability to send such information using applications or platforms offered by third parties such as (without limitation) LinkedIn (when you decide to provide your CV by linking to your profile) or Spark Hire Recruit. Any information we receive from such third parties in the context of your job application is subject to this privacy statement and we will control such information. However, please note that by using such third-party applications or platforms you may be required to review and consent to the privacy statements of such third parties and their use of your information will be subject to such privacy statements that we assume no liability for.

Legal Basis for Processing

You are under no legal obligation to provide us with your personal information, and you are doing so voluntarily and based on your consent, which is provided in accordance with the terms outlined in this privacy statement. However, if you choose not to provide certain personal information, we may be unable to process your job application.

Information sharing and disclosure

Because we are part of a global company, your personal information may be shared with our parent company, other offices, or affiliates around the world; this includes jurisdictions that offer different levels of protection for personal data compared to those in your jurisdiction. All such entities are governed by this privacy statement or are bound by the appropriate confidentiality and legal data transfer arrangements.

We may also send your personal information to other entities under any of the following circumstances:

1. We need to send the information to companies who work on our behalf to provide services directly related to the job application process, such as external assessment institutions and human resource management (we will only provide those companies the information they need to assist us in the job application process, and they are prohibited from using that information for any other purpose).

2. In the event of sale or transfer of all or substantially all of our or any of our parent company’s shares or assets, in cases of mergers or in case of negotiations with respect to the foregoing.

3. If required to do so by law, and other requests and requirements from government authorities and audit, compliance checks and internal investigations or in urgent circumstances, to protect personal safety, the public or our website.

Other than as described above, any other transfer of your personal information to third parties will be subject to your explicit consent.

Data Retention

We retain the personal information so long as it is necessary to fulfil the purpose for which the information has been collected. This means that we delete your personal information when we deem that retention of such information is no longer necessary. If you applied for a job opening, we will retain your personal information for longer periods in order to send you future information on job openings and consider you for further positions. Personal information which has been anonymised may be retained thereafter, without limitation in time.

Data Subject Rights

You may at any time request the correction or deletion of your personal information. Please note however that deletion could mean that we cannot process your job applications. You also have the right to request a copy of your personal information from our records. You have the right to request a limitation of the use of your personal information (for example, if you deem the information to be incorrect) or the termination of use of your personal information.

Data Security

We safeguard the security of the personal information you send us with physical, electronic, and managerial procedures, taking into consideration the state-of-the-art technology, the costs of implementation and the nature, scope, context, and purposes of processing as well as the risk of processing your personal information. While we strive to protect your personal information, we cannot ensure the security of the information you transmit to us, and so we urge you to take every precaution to protect your personal information when you are on the Internet.

Changes to this privacy statement

We may amend this privacy statement from time to time, by posting a new version on this site. If we make any material changes in the way that we use your personal information, we will post a notice on this site to inform you of such changes. Where required by applicable law, we will also provide you with appropriate notice before such changes take effect.

Privacy Inquiries

We are the data controller responsible for the processing of your personal information, and any inquiry regarding this privacy statement or requests to exercise your data subjects’ rights as stated above shall be addressed to CRT-Legal@crossriverbank.com.