Privacy & Cookies Policy

1. Introduction

We take your privacy seriously. This Privacy & Cookies Policy informs you how CSP and KIC collect, use, share, and protect your personal data in compliance with the Protection of Privacy Law, 5741‑1981 (PPL) and its regulations, including Amendment No. 13.

When you submit a form (e.g. application or event request), you consent to data collection, processing, and sharing among CSP and KIC, and to data transfers to monday.com as our form‑platform provider.

2. Data We Collect & How It's Used

• We rely on your informed consent for form data under PPL (voluntary submission is accepted legal basis).
• Tracking cookies may only be activated after opt‑in where not strictly necessary for site functionality, per guidance from the Israeli Privacy Protection Authority.

3. Sharing & International Transfers

• Internal sharing: Your submitted data is shared among CSP and KIC, strictly for managing your application or participation request.
• Third‑party processing: monday.com acts as our data processor; their privacy policy and sub‑processors comply with Israeli, EU, and global standards, with Standard Contractual Clauses (SCCs) or equivalent for international data transfers.
• If data is transferred outside Israel, it is only sent to countries offering adequate data protection, in compliance with Israel's Transfer of Data Abroad Regulations 2001.

4. Cookies & Tracking Technologies

Categories:

• Essential cookies (site operation, login, form sessions): do not require consent and are exempted.
• Non‑essential cookies (analytics, performance, marketing): enabled only if you opt in.

You may withdraw consent or refuse non‑essential cookies at any time via the site's cookie settings or your browser's privacy controls. Users are informed clearly about cookies and may opt‑out - this is pursuant to PPA recommendations.

A separate Cookie Notice is available and provides full list of cookies used, duration, and external providers.

5. Your Rights Under Israeli Law

• Access or correction: You may ask for your personal data stored by us under Sections 11-12 of the PPL to be corrected, updated, or deleted.
• Deletion: While PPL does not require automated erasure, under Israel's EEA Transfer Regulations you may request deletion when data is no longer needed, or was unlawfully collected.
• Objection to direct marketing: If receiving communications, you may unsubscribe at any time.
• No right to portability under PPL, but may apply under EEA Transfers regime.

To exercise your rights, contact our privacy officer below. We will respond as required by law, typically within 30 days.

6. Data Security & Retention

We implement technical and organizational measures based on our national classification of databases (basic/medium/high), including access controls, encryption, and breach response procedures compliant with Israeli Security Regulations 2017.

Your personal data is retained only as long as necessary - maximum 24 months unless needed to comply with legal obligations.

7. Legal Requirements & Enforcement

Violating PPL obligations may result in administrative fines (e.g. ≈ NIS 50 per individual for misuse, up to NIS 15,000 or more) and civil claims (statutory damages up to NIS 50,000, or class action).

Severe breaches may trigger criminal liability or registration cancellation.

8. Contact Information - Privacy Coordinator

If you have any questions, complaints, or wish to make a privacy request:

9. Changes to This Policy

This policy was last updated on 25.07.2026.

We may revise this document at any time - please check this page regularly. All changes will be effective upon posting.

Note for implementation: Link this policy visibly in the footer and main navigation under "Privacy" or "Privacy & Cookies". Ensure opt‑in consent is collected before setting non‑essential cookies (banner/settings panel).