Privacy Policy – Privacy Protection Regulations

1. Holon Institute of Technology (R.A.) 580344109 (hereinafter: the Institute) enables students, applicants for studies, employees, and the general public to carry out various activities, including registration for studies, learning, teaching, and research, through the Institute’s website.
2. This policy establishes rules for information security and privacy protection at the Institute, and its provisions apply to every user of the Institute’s website.
3. The Institute is committed to protecting the privacy of students, employees, service providers, and visitors to the website and to managing the information held by it in accordance with the provisions of any applicable law, including the Privacy Protection Law, 5741-1981 (hereinafter: the Privacy Protection Law), its regulations, and the guidelines of the Privacy Protection Authority, as may be from time to time.
4. This website is a service provided to the user by the Institute. All content, information, and software provided on or from the website may be used by the Institute solely subject to the terms of use displayed on the website. The Institute reserves the right to amend the terms of use, and the use of the website is subject to the terms of use as they shall appear on the website from time to time.

1. Information Security – all means used by the Institute to protect the privacy of users, the confidentiality of information, and the integrity of the databases.
2. Databases – the databases of the Institute as defined in the Privacy Protection Law.
3. Information – as defined in the Privacy Protection Law, including data concerning a person’s personality, personal status, privacy, health condition, economic status, professional qualifications, opinions, and beliefs.
4. Data Subject (including applicant for studies, student, employee, etc.) – the person to whom the information or sensitive information as defined above relates.

1. The Institute receives, stores, and processes information, including, inter alia, personal details (such as name, ID number or passport number, and contact details), medical information (including physical and health information as well as assessments of impairments and disabilities and para-medical information), socio-economic information (including employment and salary data, including employment at a workplace outside the Institute), and academic information (including secondary education, post-secondary studies at other institutions, and training) – all in accordance with the purpose of collecting the information, the circumstances, and the law.
2. The information mentioned above is used by the Institute for the purpose of carrying out its objectives, activities, and functions, including –
   1. management of the admission process of applicants for studies, including academic studies, preparatory programs, the “MetsuyonNoar” program, and certificate studies;
   2.  management of teaching and studies, including the Moodle environment;
   3. management of the student assistance system by the Dean of Students and the Center for Student Advancement (including accessibility assistance, assistance to reserve duty soldiers, scholarship applications, and similar matters);
   4. management of registration and admission to the student dormitories;
   5. maintaining contact with applicants, students, and alumni;
   6. management of human resources, including payroll, social rights, health, employee welfare, safety, and hygiene;
   7. management of recruitment processes and promotion procedures of faculty members;
   8. management of procurement and finance systems;
   9. implementation of safety laws, regulations, and procedures, and maintaining security and public order;
   10. conducting research.
3. For the purpose of carrying out the objectives of the Institute as detailed above, the Institute may use any computerized system and communication means, including websites, e-mail, social networks, text messages (SMS and WhatsApp), direct mail, and more.

1. The Institute shall not transfer information to any third party, except in accordance with the provisions of this policy. The Institute may transfer information to third parties (whether in Israel or abroad) in any of the following cases:
   1. the transfer of information is made pursuant to applicable law or by judicial order, or according to a binding demand of a competent authority, subject to the provisions of the law;
   2. receipt of notice regarding legal proceedings against the Institute related to the use of internet services;
   3. the transfer of information is made in accordance with the provisions of the law regarding the transfer of information between public entities;
   4. the data subject requested or consented to the transfer of the information;
   5. the transfer of information is consistent with the purpose for which the information was provided;
   6. the transfer of information is required for the routine operation of the Institute, such as contacting credit card companies;
   7. there is a suspicion of the commission of an offense.
   8. In all the cases mentioned, any person using the website waives any claim and/or demand in this regard against the Institute.

1. Every employee of the Institute who, in the course of his employment at the Institute, gains access to information, shall sign a confidentiality undertaking that clarifies his obligation to maintain the confidentiality of the information and to use it solely within the scope of his position.
2. Every service provider of the Institute who, in the course of providing services for the Institute or on its behalf, gains access to information, shall sign a confidentiality undertaking that clarifies his obligation to maintain the confidentiality of the information and to use it solely within the scope of his position.  If the service provider is a corporation, the provider shall define the persons authorized to access the information.

1. The data subject is entitled to request to review information concerning him, to receive a copy of such information, the legal basis used for collecting and processing the information, the purposes of its collection and processing, the planned duration of retaining the information, who holds the information, and what his rights are in relation to the information. This right shall not apply to information that the Institute is prohibited from transferring, in accordance with the provisions of any law.
2. The data subject is entitled to request the correction of such information, insofar as the information held by the Institute is inaccurate, subject to other provisions that may apply to the information.
3. The data subject is also entitled to request that information concerning him, which is used for direct mailing, be deleted from the database or not be transferred to third parties. The request shall be handled in accordance with and subject to the conditions and limitations prescribed by law.
4. The data subject is entitled to request to review information concerning him, including to request a copy of such information, to request to know the legal basis used for collecting and processing the information, the planned duration of retaining the information, who holds the information, and what his rights are in relation to the information.
5. The data subject is entitled to request the correction of inaccurate information.
6. The data subject is entitled to request the deletion of information concerning him in accordance with the provisions of the law.
7. The data subject is entitled to request to restrict the use of the information and to object to the use of the information.
8. The data subject is entitled to request the portability of the information – such a request shall be reviewed in accordance with the technological possibilities available to the Institute.
9. Requests of data subjects shall be reviewed by the Privacy Protection Officer.

1. The Institute uses cookies and other technologies such as pixels, and more (collectively: the cookies), through which the Institute collects non-identifying information related to users of the website www.hit.ac.il (hereinafter: the users and the website, respectively). If identifying information is provided by you on the website, such information may be linked to the non-identifying information collected on the website.
2. What are cookies? Cookies are small text files that enable the collection of information through users’ computers or web browsers.
3. What information is collected? The information collected is information resulting from your visit to the website, including, for example, the pages you visited and the information you viewed, actions you performed on the website, the duration of your stay on the website, the number of entries to the website, the number of clicks, and data regarding user characteristics such as approximate geographic location, age range, the type of device from which you accessed the website, IP address (the internet address of users’ computers), operating system type and version, web browser type and version, language preference, domain names, and more.
4. What use will be made of the information? The Institute shall use the information collected through cookies for one or more of the following purposes: to manage and operate the website; to facilitate the use of the website; to display to users content and advertisements on or outside the website (such as on the Institute’s pages on social networks); to analyze, research, and conduct audits related to the website; to monitor activity patterns on the website; to compile statistics, including counting the number of users on the website; to analyze, research, and conduct audits related to the website; and to send requests for service ratings after a purchase (such as rating a conference or training). In addition, and without derogating from the provisions of this policy, the Institute uses tools that record users’ browsing on the website for the purpose of analyzing and improving users’ experience on the website.
   The Institute uses cookies from advertising systems such as Google and Meta, which monitor users’ activity on the website. The use of the information collected through such cookies is subject to the terms of use and privacy policies of the aforesaid companies. Information about the data collected through the cookies, the use of the information by those companies, how to disable cookies, and more can be found in the terms of use and privacy policies of those companies. Without derogating from the provisions of this policy, the Institute shall be entitled to transfer non-identifying information to advertising systems of third parties, including Google and Meta, as detailed in this policy.
   The Institute uses analytical, monitoring, and tracking services for collecting statistical data and advertising tools of Hotjar, Meta, Google Analytics, and others. Such services are subject to the terms of use and privacy policies of the respective providers. Information regarding the data collected through these services, the uses of the information, how to disable cookies, and more can be found in the privacy policies of those corporations.
5. I do not wish cookies to be collected from my computer. What should I do? If you do not wish cookies to be collected from your computer, you are invited to change the settings in the web browser you use. Please note – disabling cookies may result in some of the services on the website being unavailable or their quality being impaired. In addition, cookies that are essential and necessary for the operation and management of the website cannot be disabled.

1. The Institute has an information security policy and an Information Security Officer in accordance with the requirements of the law.
2. The Institute uses various security and monitoring measures (including security cameras) in order to preserve the integrity and availability of its databases and the privacy of the data subjects, subject to the provisions of the law.
3. The Institute shall bear no direct and/or indirect liability resulting from harm to the security and monitoring measures or from acts and/or omissions beyond its control, and the user shall not raise any claim and/or demand against the Institute in this regard.

The Privacy Protection Officer is the person at the Institute responsible for implementing privacy processes, and he should be contacted for any matter related to privacy protection, including removal from a database, removal from a direct mailing list, exercising the right of access and correction of information, data subject rights, and any issue concerning privacy protection.

It is possible to contact the Privacy Protection Officer by e-mail gals@hit.ac.il

1. The Institute may, at its sole discretion, amend this policy in whole or in part (including the cookie policy) from time to time.
2. The updated policy that will be published on the Institute’s website shall bind the users, and continued use of the Institute’s website after the policy update shall constitute the users’ consent to the updated policy, including its changes.
3. The Institute shall notify all users of such change by personal notice or otherwise.

The Institute may from time to time send users messages containing marketing and promotional content related to the Institute’s services, subject to the prior written consent of the user to such contact.

Messages may be sent by various means, including mail, e-mail, mobile phone, text messages, and others.

The user shall be entitled to revoke such consent at any time and request that information concerning him used for direct mailing be deleted from the database or not transferred to third parties.

If the user revoked his consent, no direct mail shall be sent to him, but the user’s information required for the purposes of the Institute may continue to be retained in the Institute’s database in accordance with the law.

This website may contain links to other websites, internet resources, or internet applications that are not owned by the Institute and are not covered by the Institute’s privacy policy.

Such websites/internet resources/internet applications may collect information about you by various means.

The Institute shall not be liable for any loss, expense, damage, direct or indirect, caused as a result of the use of such external websites/internet resources/internet applications, and such use shall be the sole responsibility of the user.

Users are advised to read the privacy policy and terms of use of such external websites/internet resources/internet applications.

The terms and provisions detailed in this policy, including any amendment or modification thereof, are subject to the laws of the State of Israel. The exclusive jurisdiction over any dispute or claim related to this policy shall lie with the competent courts in the Tel Aviv–Jaffa District.