Privacy Policy

Effective date: 5.2026

I. Introduction

Thank you for using our services and web pages. Sapiens takes the protection of your personal data seriously and wishes to make you familiar with our privacy policy and the security measures we carry out to protect your personal data in relation to your use of and online behaviour on our services and web pages.

This privacy policy describes how Sapiens processes the personal data about you as a contact person employed at a customer, vendor or partner that Sapiens has contracted with or prospectively will enter into a contract with, or a visitor and user of our websites or our business sites on social media. The privacy policy also describes your rights in relation to Sapiens’ collection, processing and retention of your personal data.

II. General information

Who is the data controller?

Unless otherwise stated in a service-specific privacy notice, the data controllers responsible for processing your information collected in the context of using this website are Sapiens Group Companies. The Sapiens entity responsible for the processing of your personal data thus depends on which entity you are working with. This policy applies to such entity. To learn more about our entities, please see the map in the “Contact us” section.

Where a registration form is presented on this website or data is collected in a context of specific activity, the data controller may vary depending on the actual offering or the purpose of the data collection, but it is in any case displayed on the individual registration form’s privacy statement.

What type of information we collect

• Contact details such as name, address, e-mail and telephone number.
• Organizational data such as job title, organization name.
• Image included in pictures or video recordings.
• Contractually necessary information about representatives available in public business registries or in documented proxies, such as national identification number and position held in the company as well as other information contained in documents or correspondence you provide to us in the context of a business relationship or transaction.
• User information, such as IP number, browser information, information about the device you are using, and information on how you interact with our services, such as the features you use.
• Marketing-related information, such as your job title, participation in conferences or events organized by us, your subscriptions, product interests, and stated preferences.
• Information you may have made publicly available via settings at e.g. Facebook, Instagram and LinkedIn.
• Recordings of calls and other communications, and related transcripts.
• Other information we receive from you through your contact with us.

Categories of sources from which we collect information

We collect information from the following categories of sources:

• Directly from you, such as when you contact us, register for an event, or submit information through our website;
• Automatically when you use our website or services, such as through cookies and similar technologies;
• From publicly available sources, including public business registries and social media platforms where you have made information publicly available; and
• From third parties with whom we have a business relationship, such as our customers, vendors, and partners.

For what purposes we use data

• Concluding a contract and providing our services in accordance with applicable contractual terms addressing compliance and legal obligations, setting up user accounts, complete transactions and send information, such as invoices.
  Legal grounds: contract performance, legitimate interests (to enable us to perform our obligations and provide our services to you), consent, legal obligation
• Undertaking operation, security and maintenance of our websites as well as IT systems which are made available to or used as part of the management of your user accounts as a customer, vendor or prospect.
  Legal grounds: legitimate interests (to enable us to perform our obligations and provide our services), legal obligation
• Developing and improving our services.
  Legal grounds: legitimate interests, consent
• Managing our relationship with customers and contacts.
  Legal grounds: contract performance, legitimate interests, consent
• Hosting our events that primarily include recording your registration to Sapiens events for administration purposes, capturing photographs and videos throughout an event, introducing you as a presenter to an audience by suitable means and channels.
  Legal grounds: contract performance, legitimate interests, consent, legal obligation
• Sending newsletters for the recipients who have chosen to sign up to receive such communications.
  Legal grounds: legitimate interests, consent
• Marketing of Sapiens products or our image branding which may involve sharing material we gathered during hosted events.
  Legal grounds: legitimate interests, consent
• Providing you with a better website experience and collecting information on website statistics.
  Legal grounds: legitimate interests, consent
• Conducting routine security monitoring in relevant offices.
  Legal grounds: legitimate interests
• Establishing or protecting our legal rights, property, or safety, or to defend against legal claims
  Legal grounds: legitimate interests

What is the legal basis of processing

We will only use your personal data only where we are permitted to do so by law. Under EU and UK data protection regulations, the use of personal data must be justified by a legal basis. The principal legal grounds that we use to process personal data are:

• Contract performance: where your information is necessary to enter into or perform our contract with you.
• Legal obligation: where we need to use your information to comply with our legal obligations.
• Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights.
• Consent: where you have consented to our use of your information (you will have been presented with a consent form or facility in relation to any such use and may withdraw your consent through an unsubscribe or similar facility).

How long will Sapiens store personal data

Sapiens will only store your personal data for as long as it is required:

• to make goods and services requested available to you, including use of sapiens.com;
• for Sapiens to comply with its statutory obligations resulting inter alia from applicable export laws;
• until you object against such use by Sapiens, if Sapiens’ use of your personal data is based on Sapiens’ legitimate business interest as further stated in this Privacy Statement;
• until you revoke your consent described in this Privacy Statement, if Sapiens is processing your personal data based on your consent

Sapiens will also retain your personal data for additional periods if it is required by mandatory law to retain your personal data longer or where your personal data is required for Sapiens to assert or defend against legal claims. Sapiens will retain your personal data until the end of the relevant retention period or until the claims in question have been settled. Sapiens will delete your personal data after the purpose has ceased to exist or after the expiry of the respective retention period.

How we share data

We do not share your personal information with companies, organizations, or individuals outside of Sapiens except in the following cases:

• companies within the Sapiens group,
• third-party service providers we employ to perform services on our behalf in order to carry out the purposes identified above, in particular providing consulting services, payment processing; customer relationship management databases tools to prevent spam and other security gaps, operations, security and maintenance services on our IT systems, plugins and services used on the website and in the newsletters, online advertising and other additional related services.
• corporate purchaser(s) or prospect(s) to the extent permitted by law in particular as part of any merger, acquisition, sale of assets.
• agencies or other governmental officials (e.g., tax authorities).

In certain situations, your personal data may be transferred to a country outside of the EU/EEA. Sapiens ensures that such transfer(s) will be carried out in accordance with the applicable data protection legislation. When transfers are made to countries outside the EU/EEA which have been approved by the European Commission’s decision as providing essentially equivalent protections (Adequacy Decision), no additional measures are required. When transfers are made to countries outside the EU/EEA which have not received such approvals by the European Commission, we will use appropriate safeguards, such as using standard contractual clauses adopted by the Commission in accordance with Article 46(c) of the GDPR, or other, to ensure compliance with the EU level of proper protection of your personal data.

III. Cookies and other technologies

In the long term, we can evaluate movements on the website and thus improve it. Through the use of cookies, it is possible to offer users of this website more user-friendly services that would not be possible without the use of cookies.

If you do not agree to the use of cookies, an opt-out cookie will be stored in your browser. This cookie does not contain any information whatsoever and is used solely to identify your objection. If you delete your cookies, the opt-out cookie will also be deleted. The opt-out procedure must then be repeated.

You can also deactivate the storage of cookies in your browser. You will find instructions on how to do this in the help section of your browser.

Your browser settings may allow you to transmit a “do not track” signal, “opt-out preference” signal, or other mechanism for exercising your choice regarding the collection of your information when you visit various websites. Our website recognizes the Global Privacy Control (GPC) signal, which enables you to opt-out of certain uses or disclosures of your information. If you notify us of your preference through GPC, we will honour your request only for the browser or device that sends the GPC signal. When you log into your account, the opt-out will extent to your account as well. If you do not have an account or are not logged into your account, your request to opt out through the GPC will not apply to any account information. To learn more about “do not track” signals, you can visit http://www.allaboutdnt.com/. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/.

Sapiens’ website also uses interfaces with social media sites such as Facebook, LinkedIn and others. If you choose to “like” or visit the Sapiens website through these services, you should review the privacy policy of that service.

IV. Marketing choices

You decide whether you want us to use your personal data for marketing purposes. If you no longer wish to receive any marketing communications from us, remain on a mailing list to which you previously subscribed, you can do so by clicking on the “Unsubscribe” in any marketing email communications you receive. This withdrawal will apply only to future communications and will not affect the lawfulness of any processing that occurred before your withdrawal.

V. Artificial Intelligence

We may use Artificial Intelligence (“AI”) technologies to support our processing of personal data for the purposes described in this Privacy Notice. Any such AI tools undergo a thorough preliminary assessment to ensure they comply with all applicable standards, including data protection and information security requirements. Importantly, we do not use AI to make decisions that affect individuals through solely automated means.

VI. Privacy controls

Your data protection rights

Depending on where you reside, you may have the following data protection rights:

• right to obtain confirmation/ right to be informed: In order to exercise its right of confirmation of the processing concerned, the data subject may at any time turn to our Data Protection Officer or to any other employee of the controller.
• right of access by the data subject: We provide free information at any time about the data stored about a person. We also provide information on the following issues:
  • the processing purposes
  • the categories of personal data
  • the recipients or categories of recipients to whom the personal data have been disclosed, in particular recipients in third countries or international organisations
  • where possible, the planned duration for which the data will be stored, or the criteria for determining that duration
  • with regard to the right to correct or delete personal data concerning that person or to restrict the processing or the right of opposition to such processing
  • with regard to the right of appeal to the competent supervisory authority
  • all available information about the origin of the data
  • the existence of automated decision-making, including profiling (Articles 22 (1) and (4) of the GDPR) including the logic involved and the scope and impact on the person concerned
• right to correction: You have the right to have inaccurate personal data concerning you corrected. Furthermore, you may request the completion of incomplete data.
• right to erasure (right to be forgotten): You have a right to request deletion of your data processed by us if one of the following reasons applies and processing is not necessary:
  • The purpose of the data collection has ceased to exist.
  • You revoke your consent in accordance with Article 6 (1)(a) of the GDPR or Article 9 (2)(a) of the GDPR, and there is no other legal basis for processing.
  • You file an objection pursuant to Art. 21 para. 1 GDPR and there are no primordial legitimate grounds for processing, or the data subject lodges an objection against processing pursuant to Art. 21 para. 2 GDPR.
  • The data have been processed without legal basis.
  • The deletion of data is necessary for the fulfilment of a legal obligation.
  • The personal data were collected in relation to the information society services offered in accordance with Art. 8 para. 1 GDPR.
• right to restrict processing: You have the right to restrict the processing of your data under the following conditions:
  • You deny the accuracy of the data and allow us sufficient time to verify this.
  • Processing is unlawful, but they refuse to delete personal data and instead demand that the use of the data be restricted.
  • We no longer need the data for the original purposes, but they do need the data for asserting, exercising or defending legal claims.
  • You have lodged an objection against the processing in accordance with Art. 21 para. 1 GDPR and it is still unclear whether our legitimate reasons outweigh their grounds.
• right to data portability: You have the right to receive all data stored by us in a common format from us. You also have the right to transmit this data to another person in charge without hindrance by us, provided that the legal basis of the processing is correct (art. 6 par. 1 or art. 9 par. 2 GDPR) and the processing is carried out by means of automated procedures and is not necessary for the fulfilment of a task that is in the public interest or in the exercise of official authority. In addition, you can also arrange for personal data to be transferred directly from us to another person in charge, insofar as this is feasible and insofar as this does not affect the rights and freedoms of others.
• right to object: You have the right to object at any time to the processing of your data on the basis of your personal situation, which is carried out on the basis of Art. 6 para. 1 letter e or f GDPR. In this case, we will no longer process your personal data unless we have legitimate grounds for processing that outweigh your interests or the processing serves to enforce legal claims. You have the right to object at any time to the processing of your personal data for advertising purposes and, if applicable, to profiling in connection with such advertising. Depending on their personal situation, they may object to the use of data that could be used by Sapiens for scientific research purposes or for other purposes in accordance with Article 89 (1) GDPR, provided that such fulfilment of one is in the public interest.
• rights in relation to automated decisions in individual cases including profiling: You may object to the use of your data for the purpose of making automated case-by-case decisions (including profiling), provided that this decision would have legal effect or would otherwise affect them. Insofar as this is necessary for the performance of a contract between them and us, or if this is required by law or expressly approved by us, this right shall not apply. If the decision to fulfil the contract or with its consent is made, Sapiens shall take appropriate measures to protect its rights and freedoms. This includes at least the right of Sapiens to intervene on the part of a person and to present their position and to challenge the decision.
• Right to revoke consent under data protection law: You may revoke your consent to the processing of your personal data at any time.

How to exercise your rights

Please direct any requests to exercise your rights to dataprotection@sapiens.com. We may need to collect information from you to verify your identity, before completing your rights request.

How to contact us

Any person concerned may contact the Data Protection Officer of Sapiens for all questions relating to data protection:

E-mail: dataprotection@sapiens.com

VII. Additional Disclosures for California Residents

This section applies to you if you are a California resident. For purposes of this section, references to “Personal Information” shall have the meaning set forth under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA).

When Sapiens Acts as a Service Provider

Sapiens is mainly acting as “service provider” (as defined in the CCPA) and as such, the below does not apply. When acting as a service provider, we confirm that processing (as defined in the CCPA) of Personal Information defined in the CCPA in connection with its performance under any contract executed with a customer, acting as a “business” (as defined in the CCCPA), only will occur on behalf of the business and for the benefit of the business from which it has received the personal information, in accordance with the business’s written instructions, and only for the purpose set out in the contract.

When Sapiens Acts as a Business

When we are acting as “business” under CCPA, mainly when you are using our website, are interacting with our pages on social media or act as corporate representative of our vendors and other partners, or as an employee or job applicant the below applies:

Categories of Personal Information Collected

In the preceding 12 months, we have collected and (where indicated below) disclosed for a business purpose the following categories of Personal Information:

Categories of Personal Information Collected	Categories of Recipients
Identifiers: name, email address, IP address	Service providers (e.g., marketing providers, IT service providers), affiliates within the Sapiens group
Personal information categories listed in the California Customer Records statute: name, address, telephone number, education, employment history	Service providers, affiliates within the Sapiens group
Internet or other electronic network activity information: browsing history, information regarding interaction with our website	Service providers (e.g., analytics providers, advertising partners), affiliates within the Sapiens group
Geolocation data: IP address	Service providers, affiliates within the Sapiens group
Professional or employment-related information: job title, employer, Resume/CV content, qualifications, skills, recruitment assessment notes, interview-related information, background check information	Service providers, affiliates within the Sapiens group
Personal information related to accounts in our applicant tracking system: account log-in, with any required password, or credentials allowing access to an account	Service providers, affiliates within the Sapiens group
Inferences drawn from the above: preferences, characteristics	Service providers, affiliates within the Sapiens group

We collect following Sensitive Personal Information as defined under the CCPA:

Categories of Sensitive Personal Information Collected	Categories of Recipients
Personal information provided at the hire stage for employment purposes: social security, driver’s license, state identification card, or passport number, information concerning health	Service providers, affiliates within the Sapiens group

The categories of sources from which we collect Personal Information and the specific business or commercial purposes for collecting Personal Information are described in Section II of this Privacy Statement above. For information on how and for what purposes Sapiens processes personal data of job applicants and employees, please refer to our dedicated privacy notices.

We disclosed Personal Information over the preceding 12 months for the following business or commercial purposes: to provide and improve our services, to communicate with you, to market our products and services, to maintain and secure our IT systems, to comply with legal obligations, and to manage our business relationships.

Sharing of Personal Information

We do not “sell” (as defined in the CCPA) Personal Information.

We “share” (as defined in the CCPA) Personal Information with third party advertisers for purposes of cross-context behavioural advertising on non-Sapiens’ websites.

In the preceding 12 months, we have shared the following categories of Personal Information:

Categories of Personal Information Shared	Categories of Recipients
Identifiers: IP address, device identifiers	Third-party advertising partners
Internet or other electronic network activity information	Third-party advertising partners

We do not have actual knowledge that we sell or share Personal Information of California residents under 16 years of age.

Your California Privacy Rights

As a California resident, the CCPA grants you the following rights:

• Right of access: Please see section IV for an explanation of this right.
• Right to erasure: Please see section IV for an explanation of this right.
• Right to correct: Please see section IV for an explanation of this right.
• Right to opt-out of sharing: You have the right to direct us not to share your Personal Information for cross-context behavioral advertising purposes.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

For information on how to exercise your rights, please refer to the “How to exercise your rights” section of section IV of this Privacy Statement. If you are an authorized agent wishing to exercise rights on behalf of a California resident, please contact us using the information in the “How to exercise your rights” section above and provide us with a copy of the consumer’s written authorization designating you as their agent. If you would like to opt-out of sharing, please use the following form: Do Not Sell or Share My Personal Information. For information on how we process opt-out preference signals, see the section above, Cookies and Other Technologies.

We may need to collect information from you to verify your identity, before completing your rights request.

VIII. Changes to this policy

To continually keep this policy up to date, Sapiens reserves the right to update, modify, change, and alter its privacy policy which is binding on all users of this website and will be posted here. If the changes are significant, we may also notify you by other means, such as posting a notice on this website or sending an e-mail.