Privacy Policy – HerzUp

Privacy Policy

General 01

We ask you to read our policy carefully before any use of the application. The Herzliya Municipal Tourism Development Company Ltd. (the "Company" or "we") operates the tourism application (HerzUp) https://app.visitherzliya.co.il and/or https://www.visitherzliya.co.il.

We at the Herzliya Municipal Tourism Development Company respect the privacy of the application's users and are committed to protecting it. We therefore attach great importance to this privacy policy document, the purpose of which is to detail the manner in which the Company collects information on and/or about users of the site, as well as how and for what purposes the Company collects such information.

The privacy and information security of the visitors and users of our application are of the utmost importance to us. The Company is committed to safeguarding the personal information you share with us and acts in accordance with all applicable law on the matter, including, but not limited to, the Protection of Privacy Law, 5741-1981 (the " Protection of Privacy Law"), and all regulations enacted and/or to be enacted thereunder, including the Protection of Privacy Regulations (Conditions for Holding and Safeguarding Information and Procedures for Transferring Information Between Public Bodies), 5746-1986, and the Protection of Privacy Regulations (Information Security), 5777-2017. This privacy policy explains how the Company processes information (as defined in the Protection of Privacy Law) about an identified or reasonably identifiable person (" Personal Information") that is collected or stored through its systems, the type of personal information collected, what your rights as a data subject are, and how you may exercise these rights.

The policy is phrased in the masculine for convenience only but is intended for women and men alike.

For registration and effective, proper use of the application, the user will be required to provide personal details about themselves (such as: first name, surname, contact details, email, password).

Be aware that you are not legally obligated to provide your details and personal information, and you declare that providing the details to the Company for registration purposes is done of your own free will and with your full consent.

Privacy Statement 02

The privacy policy defines the Company's approach to all information, including personal information and sensitive information, and the manner in which it handles it.

Before using the application — including providing personal information through it — please make sure you have read the terms of the privacy policy carefully and that you understand them. Your use of the application will be deemed your explicit and informed consent to all terms, conditions, and notices included in the privacy policy. If you do not agree to the terms of the privacy policy, in whole or in part, do not provide any information to the Company through the application.

For the purpose of this policy, the Company defines the term " User" as one who has provided the Company with personal information through registration in the application — whether for the purpose of registering in the application or contacting the Company — thereby entering into a relationship with the Company; and the term " Visitor" as one who visits the application without registration and/or providing details. The term " Processing" or " Use" means any action performed on personal information, including collection, organization, storage, modification, use, deletion, etc.

Information Flow Diagram — HerzUp Application 03

Collection → Processing → Storage → Sharing

Collection

  • Registration / login in the web application (WEB) (first name + surname, email address, phone, password).
  • "Contact Us" form (first name + surname, email / phone, inquiry content).
  • User preferences (language setting, interest categories, opting in to mailings/notifications).

Processing

  • Authentication / account management, content display, saving preferences.
  • Aggregate statistics / measurement (with anonymization — masking of identifying data / pseudonymization).
  • Sending mailings / notifications only where consent exists.

Storage

  • Operational data: dedicated data server (Hetzner, DE).
  • Metadata / metrics: on EU servers and in secured logs.
  • Backups: encrypted, in a separate location (EU), per the retention policy.

Sharing

  • To infrastructure / analytics providers: only the minimum required, under agreements (DPA/SCCs) if needed.
  • No transfer outside the EEA without a valid transfer basis (Art. 46) and the Controller's approval.

Use of Information 04

The details you provided upon registering for the application, as well as any other information collected during use of the application as stated above and below (the " Information"), will be stored in the systems of the Herzliya Municipal Tourism Development Company Ltd. The Information will be used for the purposes detailed below:

  • To enable you to use the application and to provide you with the services available in the application.
  • To identify you during your repeat logins to the application and to save you from entering your details each time.
  • To improve and enrich the services and content offered in the application, including creating new services and content suited to users' requirements and expectations, and to modify or discontinue existing services and content.
  • To enrich the information about you with additional data for the purpose of improving the Company's services and products and for its additional business needs — for example, through requests to answer a voluntary survey, participation in which depends on your consent.
  • To enable us to tailor the application's services to your preferences, including profiling use of the application, monitoring actions in the application, and presenting you with periodic summaries regarding your consumption habits of products in the application (including relative and aggregate comparison to the consumption habits of other users).
  • To contact you where the Company believes there is a need to do so, or where you have asked us to contact you.
  • For the proper operation and development of the application.
  • To identify breaches of the terms of use and misuse of the application (as detailed in the Terms of Use document).
  • To comply with the provisions of the law applicable to us and to maintain procedures.
  • For information security purposes.
  • For our marketing activity.
  • For sending marketing information, including personalized mailings and/or the sending of advertising material, including information about products or benefits, whether by email, mailing message (including SMS), or in any other way. You may request removal from the marketing distribution list by contacting us through the "Service" channel in the application or in the manner appearing in the body of the mailing.

We will also send you Push notifications that will appear in the application (subject to managing your preferences regarding them in your device settings).

Please note that even after a removal request, we may continue to send messages that the law requires or permits us to send even without your consent.

  • For our analysis, measurement, statistics, research, and control purposes.
  • We may transfer statistical information to third parties for their purposes.
  • For any other purpose detailed in this privacy policy and/or in the binding documents.

You may request not to be included in the activity by contacting the customer service center at the following phone number: 09-9565591.

The Personal Information We Collect 05

Visitors

The Company collects, records, and analyzes statistical information only about visitors to its application, without collecting personal information; the Company uses "Cookies".

Users

During a user's registration to the application and/or the contact form, and sometimes after registration, the user provides information about themselves — name, email address, and phone. To the extent you have indicated on the site that you wish to receive direct mailing by email or SMS messages, your email address / mobile phone number is used for this purpose, in accordance with and subject to the provisions of the Terms of Use.

Any such information provided by you will be stored in the Company's databases. It is clarified that you are under no legal obligation to provide such information, and the information is provided by you of your own free will. However, it is clarified that refraining from providing the information may prevent the site from providing you with these services, including updates about upcoming events and contact. Likewise, your refusal to allow use of the information may impair your experience of using the site.

Information Security 06

For the purpose of managing the application and providing the services, the Company uses website hosting service providers such as: EventMagix, Hetzner Germany. In order to provide the services and manage its business, the Company may process information through third parties. The Company transfers the minimum data required for these purposes and only to providers that it has approved and vetted.

The Company implements and maintains appropriate technical, security, and organizational information-security measures on the site and will make reasonable effort to ensure that the site is free and clean of viruses, worms, or Trojan horses, in order to protect the personal information from unlawful or unauthorized use and processing and against loss, destruction, damage, theft, or disclosure. These measures cannot provide absolute information security. Therefore, although we make efforts to secure your personal details, you are nonetheless aware that, notwithstanding the foregoing, this does not grant absolute security with respect to the information you provide on the site (whether actually stored in the Company's information systems or stored and hosted with a cloud provider(s)). In the event that, despite the Company's efforts, an event of the aforesaid kind occurs, the Company will act in accordance with the provisions of the relevant law. Accordingly, it is your responsibility to take basic protective measures on your computer or the end device from which you use the site (including installing antivirus software, locking the computer, changing passwords, etc.), in order to protect your personal information.

Please note that in the case of registration for conferences/competitions/shows/events which is done by clicking a link on the site and which has led you to another site, the Company is not responsible for maintaining the information-security rules, for precautionary measures, and for granting rights to the data subject, with respect to the personal information in the possession and control of other organizers, and is not responsible for the uses made by the other organizers of the information collected about you.

The application is not intended for minors, and we do not collect such information knowingly or intentionally.

Cookies and Additional Information-Collection Technologies 07

The Company uses accepted technological tools for the purpose of collecting personal information and anonymous information, such as cookies, "Google Analytics", internet tags, and Facebook © pixel technology, for the purpose of analyzing statistical data about use of the site and for improving the user's browsing experience. The tools are used for the ongoing and proper operation of the site, to improve the quality of the site's service, to collect statistical data about use of the site, to verify details, to analyze visitor behavior on the site, to tailor the site to your personal preferences, and for information-security purposes. In this framework, identifying personal information may be collected about you, including its transfer to third parties for the functional purposes of the site and/or for advertising purposes.

A cookie is a piece of information sent by a website to a visitor's hard disk. Some cookies expire when you close the browser, and others are stored on the hard drive of your device. Cookies cannot be used to run programs or to send viruses to your computer/device.

If you do not wish to receive cookies, you can avoid and/or disable the use of cookies by changing the settings in the browser and/or delete cookie files on your computer. For comprehensive information about cookies and changing browser settings, click: www.allaboutcookies.org.

However, remember that to the extent you choose not to approve or to disable the cookies and/or delete cookie files from your computer, you may not be able to access some of the services of the site and/or the Company, and we cannot guarantee that your user experience will be as satisfactory and complete as it could have been had you approved the cookies.

Links to Other Sites 08

Please be aware that when visiting our application, you may access links to other sites that are beyond our sphere of influence. The Company is not responsible for the content or the privacy policy of these sites.

Purpose and Use of the Information 09

The Company uses the information collected solely for the purposes defined at the time of its collection — that is, for the purpose of making contact in the case of completing a contact form, or for the purpose of sending direct mailings about activities, events, and the like, in the case where the user has registered to receive such mailings.

The Right to Review, Correct, or Delete Information 10

Under the Protection of Privacy Law, 5741-1981 (the "Law"), you are entitled to review the information (as defined in the Law) about you held by the Herzliya Municipal Tourism Development Company. In addition, if you find that the information about you is incorrect, incomplete, unclear, or not up to date, you are entitled to apply to the Herzliya Municipal Tourism Development Company with a request to correct the information or delete it.

Such applications under this section should be sent by contacting the customer service center at the following phone number: 09-9565591, or by contacting us by email at marina@herzliya-marina.co.il.

How Long Do We Keep the Personal Information? 11

We will keep the personal information that we control or that we process in order to fulfill the purposes for which the personal information was collected, in accordance with the law.

Acceptance of the Terms of Use 12

We assume that all visitors to the application have read carefully and understood this document prior to browsing and/or entering and/or using the application and/or providing details. We reserve the right to change the privacy policy as required, with reasonable advance notice.

Changes to the Privacy Policy 13

The provisions of this privacy policy may change from time to time, among other things in order to reflect technological, business, legal, or regulatory changes. It is clarified that to the extent material changes are made to provisions concerning the use of personal information provided or collected about users within the framework of the online services, notice of this will be published within the appropriate platform in the online services or in this privacy policy. Use of the online services after such changes have been made will indicate the users' consent to these changes, and it is therefore recommended to review this privacy policy from time to time.

In any case of a question or request, or if you believe that your privacy has been infringed in any way, you may contact the Company's Privacy Protection Officer with questions concerning the provisions of this section and the additional privacy policy documents, via the email address: Privacy.herzliya@herzliya-marina.co.il.