Privacy Policy and Transparency – User Privacy Responsibility

At Elad Association – City of David (hereinafter: Foundation), we place the highest importance on protecting your privacy and secure your personal information. This document clarifies how we collect, use, store, share, and protect your personal information – in accordance with the Israeli Privacy Protection Law, 1981 (including Amendment 13), its regulations, and the GDPR of the European Union, where applicable.

The organization’s privacy policy complies with the requirements of the Protection of Privacy Law, 1981, and includes the provisions required by Amendment No. 13 to the Law, which enters into effect in August 2025.

  1. Types of Information Collected and Purposes of Use

  • Information you provide – name, email, phone number, address, and any other details you provide when registering, filling out forms, or contacting us.
  • Technological and automatic information collection – IP address, browser type, operating system, device language, geographic location (if enabled), traffic data, cookies, and statistical usage data.
  • Sensitive information – if sensitive data or “special sensitivity data” as defined under Israel Privacy law, Amendment 13 (such as biometric, health, genetic data, sexual orientation, political opinions, religious beliefs, etc.) is collected, we will request explicit consent, apply enhanced protections, and register the database in accordance with legal requirements.
  • Including unique services such as special offers and activities available on the website.

We commit not to transfer credit card details to any third party.

Purposes of use include:

  • Providing services, operating and maintaining the website, and technical support.
  • Processing payments and engaging with essential service providers.
    Enhancing the service, analysing usability, and customizing the user experience.
  • Marketing, advertising, and sending offers – subject to explicit consent.
  • Compliance with legal and regulatory obligations and reporting to authorities.
  1. Principles of Data Processing

In accordance with the Israel Privacy Protection Law (including Amendment 13), the following processing principles apply:

  • Fairness, transparency, proportionality – data is collected and processed only for predefined purposes with full transparency.
  • Purpose limitation – information will only be used for purposes disclosed in advance.
  • Data minimization – only the data required will be collected.
  • Accuracy and updates – steps will be taken to ensure accuracy and to update information upon request.
  • Storage limitation – information will only be retained as long as required for legal, business, or operational purposes.
  1. Sharing of Information

Personal information will only be shared in the following cases:

  • To perform services (e.g., payment providers, hosting servers).
  • When required by law or court order.
  • In the event of a merger, acquisition, or transfer of business – subject to continued privacy security.
  • Information will never be sold nor delivered to third parties.
  1. Your Rights as Users

Under Israel Privacy law (Amendment 13) and the GDPR, you are entitled to the following rights:

  • Right of access – to obtain information on the types of data stored about you.
  • Right of data update or correction – to request correction or updating of inaccurate or incomplete data.
  • Right of erasure (“right to be forgotten”) – to request deletion of data, except where legal obligations require retention.
  • Right to restriction of processing – to request limiting the use of personal data.
  • Right to object – to object to the use of data for direct marketing purposes.
  • Data portability – to receive your data in a readable format and transfer it to another entity.
  1. Data Management and Registration

Where personal information is collected and stored in databases requiring registration under law, we commit to registering the database with the Israeli informational Database Registrar, specifying its purposes, and appointing a Data Security Officer and/or Data Protection Officer as required.

  1. Cookies and Tracking Technologies

The website uses cookies and analytics tools for:

  • Service operation and improvement.
  • Usability analysis and tracking browsing patterns.
  • You may manage your cookie preferences via your browser settings or the website interface and delete cookies at any time. Some features may not
    work properly without cookies.

Please note: during the purchase process on the website, anonymous and operational details will be retained solely to optimize the transaction. For example, the system may preserve your selected service during the purchase flow, even if you indicated that you do not consent to the use of cookies while browsing the site.

  1. Information Security

In accordance with the law and data security regulations:

  • We implement security controls (such as: encrypt: policies, training, internal controls) to protect data.
  • Special security controls are applied to sensitive or special sensitivity data.
  • Despite our efforts, absolute protection against unauthorized access cannot be guaranteed.
  • User data provided during registration will be managed and used according to this Privacy Policy.
  1. Transfer of Information Outside Israel

If personal data is transferred outside Israel, this will be done in accordance with the law – ensuring adequate protection or subject to appropriate legal agreements (such as Standard Contractual Clauses under the GDPR).

  1. Changes to the Policy

This policy may be updated from time to time to comply with legal and regulatory requirements or for operational needs. Any material change will be communicated to users through publication on the website.

  1. Contact Us

For questions, requests, or to exercise your rights, please contact us by email at: [email protected].

This document was updated on: November 6, 2025, document version: 2.1.

Annex A: Mapping of Israel Privacy lay Requirements to This Policy

Legal Section / Core Requirement Law Requirement (incl. Amendment 13) Addressed in this Policy
Definition of personal data Any information relating to an identified or identifiable individual. Section 1 – details of personal information collected (name, phone, email, IP, etc.)
Definition of sensitive / special sensitivity data Sensitive: health status, opinions, beliefs. Special sensitivity (Amendment 13): biometric, genetic, sexual orientation, political opinions, religion. Section 1 – explicit reference to sensitive and special sensitivity data.
Purpose of collection Obligation to disclose purpose of processing. Section 1 – clear list of purposes (service, customization, compliance).
Informed consent Collection of data (especially sensitive) requires explicit consent. Sections 1–2 – sensitive/special data only with explicit consent.
Proportionality and minimization Use only of necessary data, no excessive collection. Section 2 – principles of data processing (minimization, proportionality).
Database registration Mandatory if criteria are met (user volume, sensitive/special data, commercial use). Section 5 – commitment to register as required.
Data retention Obligation to limit retention to necessary period. Sections 2 & 3 – retention limited to regulatory/business need.
Third-party sharing Sharing allowed only for service provision or by law. Section 3 – sharing limited to service provision, compliance, mergers.
Data subject rights Right of access, rectification, erasure, objection, portability. Section 4 – full list of rights under law and GDPR.
Appointment of DPO Amendment 13 requires appointment for certain entities/processing. Sections 5 & 10 – commitment to appoint if required.
Data security Obligation to apply technological and organizational safeguards, tiered by sensitivity. Section 7 – encryption, monitoring, access control, training.
Cross-border transfers Allowed only with adequate protection or legal mechanisms. Section 8 – adequate security controls / SCC.
Cookies and tracking Obligation of transparency and in some cases, consent. Section 6 – disclosure of cookies, ability to manage preferences.
Policy updates Obligation to inform users of material changes. Section 9 – commitment to publish material changes.
Enforcement and sanctions Amendment 13 expands Registrar’s powers, fines, compliance obligations. Sections 9–10 – compliance commitments and contact mechanism.
This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.