{ "data": { "click_1": "Scenario 01", "click_2": "Scenario 02", "click_3": "Scenario 03", "click_4": "Scenario 04", "click_5": "Scenario 05", "click_6": "Scenario 06", "click_1_text": "

Scenario

A new project involves collecting customer feedback through an online survey. The team is enthusiastic but recognizes the need to protect the respondents' personal information. They emphasize the importance of obtaining clear consent, securely storing data, and limiting access to authorized personnel.

Commitment to Data Privacy

At DELEK US, we recognize the critical importance of data privacy and security in today's digital age. Our commitment extends to safeguarding the confidentiality, integrity, and availability of all data, including personal and sensitive information. We operate in compliance with stringent data protection laws, ensuring that our practices align with both federal and state regulations.

", "click_2_text": "

Scenario

During the onboarding process, HR gathers personal information from new employees for payroll and benefits purposes. It's crucial to ensure accuracy in this data and communicate transparently about its usage.

Handling Personal Information

When it comes to personal information, we strictly adhere to the principles of transparency, purpose limitation, data minimization, accuracy, and security. Our collection and processing of personal data are conducted for specific, lawful purposes, and we take measures to ensure the information we hold is accurate, up-to-date, and used only for the intended purposes.

", "click_3_text": "

Scenario

A routine security check reveals a potential software vulnerability. The company's robust security, including regular audits and encryption, quickly identifies and addresses the issue. The IT team promptly patches the vulnerability, reinforcing security measures to prevent any data breach and ensure ongoing data safety.

Security Measures

To fortify our data privacy efforts, we implement robust security measures. This includes employing industry-standard encryption techniques, access controls, and secure storage protocols. Regular security assessments and audits are conducted to identify and address potential vulnerabilities, ensuring that our systems and databases remain resilient against evolving threats.

", "click_4_text": "

Scenario

A new state law regarding data breach notifications is enacted, impacting the company's reporting obligations. The organization promptly updates its policies and procedures to align with the new legal requirements.

Compliance with Data Protection Laws

DELEK US fully complies with U.S. data protection laws, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). These regulations set forth rights for individuals regarding their personal information, and we are committed to respecting and upholding these rights. Our privacy practices are designed to give individuals control over their data and ensure that it is handled ethically and responsibly.

", "click_5_text": "

Scenario

An employee receives a phishing email that appears to be from a colleague, requesting sensitive information. Due to effective training, the employee recognizes the phishing attempt, reports it, and avoids a potential security breach.

Employee Training and Awareness

We understand that safeguarding data is a collective responsibility. Therefore, we invest in comprehensive training programs to ensure that our employees are well-informed about data privacy best practices. This not only fosters a culture of awareness but also enhances our overall resilience against potential security threats.

", "click_6_text": "

Scenario

An employee notices unauthorized access to a shared drive containing sensitive documents. The incident response team is immediately alerted, conducts an investigation, and implements measures to prevent further unauthorized access.

Reporting and Incident Response

In the event of a data breach or security incident, DELEK US has established procedures for prompt reporting, investigation, and resolution. We take a proactive approach to address any breaches, minimizing potential risks and ensuring compliance with legal reporting obligations.

" } }