Privacy Policy

1. Introduction and Definitions

Welcome to the Celebration in the Field – Touring Israel and the World website (hereinafter: "the Site").

The Site is operated and managed by Hagi Lichtig – Celebration in the Field (hereinafter: "the Business", "we" or "the Database Controller").

This privacy policy has been prepared in accordance with the Privacy Protection Law, 5741-1981, as amended by Amendment No. 13 (5784-2024), the Privacy Protection Regulations (Data Security), 5777-2017, and the guidelines of the Privacy Protection Authority.

1.1 Key Definitions

2. Identity of the Database Controller and Contact Information

3. Collection of Personal Information

3.1 Types of Information Collected

When using the Site, and particularly when booking tours or contacting us, we may collect the following personal information:

• Full name
• Phone number
• Email address
• Number of tour participants
• Requested dates
• Preferences and special notes (accessibility, dietary requirements, etc.)
• Payment details (processed securely through payment providers)

• IP address
• Browser type and operating system
• Browsing language (Hebrew/English)
• Cookie identifiers
• Browsing data and site usage statistics
• Referral source to the site

3.2 Is There a Legal Obligation to Provide the Information?

No. Providing the information is done of your own free will and consent. You are not legally obligated to provide the information. However, failure to provide certain details (such as name and phone number) may prevent us from processing your booking or providing you with the requested services.

4. Purposes of Using the Information (Purpose Limitation Principle)

The personal information collected will be used solely for the following purposes:

• Processing Bookings – Handling tour bookings, coordinating dates and confirming participation
• Providing Services – Planning and personalizing tours in Israel and abroad, 4x4 tours, team-building days and events
• Communication – Responding to inquiries, sending confirmations and updates related to bookings
• Service Improvement – Analyzing customer preferences to improve user experience
• Site Operation – Managing, securing and maintaining the Site
• Legal Compliance – Fulfilling legal, regulatory obligations or court orders

Important: In accordance with Section 8(b) of the Privacy Protection Law, as amended, we prohibit the processing of personal information from the database for purposes other than those legally established for it. We will not use your personal information for third-party marketing purposes or other purposes without your explicit consent.

5. Legal Basis for Processing Information

The processing of your personal information is based on one or more of the following grounds:

• Consent – Providing your details of your own free will constitutes consent to processing
• Contract Performance – Processing required to fulfill a booking and provide tour services
• Legal Obligation – Compliance with Israeli law requirements
• Legitimate Interest – Operating and improving the Site and services, while protecting your rights

6. Data Retention and Retention Period

6.1 Data Minimization Principle

We collect and retain only the information necessary to achieve the purposes outlined in this policy.

6.2 Retention Period

Personal information will be retained only for the required time:

At the end of the required retention period, the information will be deleted or anonymized in a way that prevents identification.

7. Data Security

7.1 Security Measures

The Business implements reasonable and accepted technological and organizational data security measures, in accordance with the Privacy Protection Regulations (Data Security), 5777-2017, to protect personal information from: unauthorized access, unlawful use, exposure, alteration or copying, loss, destruction or damage to data integrity.

7.2 Security Level Classification

Our database is classified at a basic security level in accordance with the Privacy Protection Regulations (Data Security), 5777-2017, and we fulfill all obligations applicable to this security level, including:

• Maintaining an updated database definition document
• Maintaining a data security procedure
• Managing access permissions and control
• Documenting security incidents
• Reviewing the security procedure once a year

7.3 Payment Security

Payment details are processed securely through authorized payment providers that comply with PCI-DSS standards. We do not store complete credit card details in our systems.

7.4 Access Restriction

Access to personal information in the database is restricted to the business owner and authorized parties only, on a "need to know" basis and for purposes consistent with the database purposes.

8. Transfer of Information to Third Parties

8.1 General Principle

The Business will not transfer personal information to third parties, except in one of the following cases:

• Explicit Consent – We have received your explicit consent for the transfer
• Operational Necessity – Required to provide services, for example:
  • Service providers abroad (hotels, local guides) – for booking purposes
  • Payment processing providers
  • Website hosting and infrastructure providers
• Legal Obligation – There is a legal obligation or court order requiring disclosure of the information
• Protection of Rights – To protect the Business's rights in case of legal dispute

8.2 Service Providers (Database Holders)

In cases where we use external service providers who process information on our behalf, we ensure they commit to maintaining the confidentiality of the information and processing it only for the defined purposes.

8.3 Transfer of Information Outside Israel

For the purpose of conducting tours abroad, essential information (name and contact details) may be transferred to service providers at various destinations. This transfer will be made in accordance with legal requirements and to the minimum extent necessary.

9. Your Rights as a Data Subject

In accordance with the Privacy Protection Law, you have the following rights:

• 9.1 Right of Access (Section 13 of the Law)
  You are entitled to view the personal information stored about you in our databases, either yourself or through your authorized representative in writing or your guardian. The information will be provided in Hebrew, Arabic or English, at your request.
• 9.2 Right to Correction (Section 14 of the Law)
  If you find that personal information stored about you is incorrect, incomplete, unclear or outdated, you may request its correction or deletion.
• 9.3 Right to Object to Direct Marketing
  You may at any time request to be removed from our mailing list and object to receiving updates and promotional materials.
• 9.4 Submitting a Request
  To exercise your rights, please contact us using the contact details specified in Section 2 above. We will respond to your request within a reasonable time and in accordance with the provisions of the law.

10. Use of Cookies

10.1 What Are Cookies?

Cookies are small text files stored on your device when browsing the Site. They allow us to remember preferences (such as language), improve user experience and collect statistical data.

10.2 Types of Cookies Used

10.3 Managing Cookies

You may block or restrict the use of Cookies through your browser settings. Note that complete blocking may affect some of the Site's functionality (for example, saving language preference).

11. Data Security Incidents

11.1 Handling Security Incidents

In the event of a serious data security incident, as defined in the Privacy Protection Regulations (Data Security), we will act in accordance with the obligations set forth in law, including:

• Taking immediate steps to minimize damage and reduce risks
• Documenting the incident and actions taken
• Reporting to the Privacy Protection Authority, in cases requiring it
• Notifying affected data subjects, as necessary and in accordance with the Authority's guidelines

12. Use of the Site by Minors

Our tour services are intended for the whole family. However, bookings on the Site will be made by adults (over 18) only. We do not knowingly collect personal information from minors under 18 without parental or guardian consent.

13. Updates to the Privacy Policy

The Business may update this privacy policy from time to time, in accordance with changes to the Site, services offered, law or regulatory guidelines.

The binding policy is the one published on the Site at the time of use.

We recommend reviewing this policy from time to time. Material changes will be prominently published on the Site.

14. Declaration of Compliance with Amendment 13 to the Privacy Protection Law

The Business operates in accordance with the provisions of Amendment No. 13 to the Privacy Protection Law, 5784-2024, and the guidelines of the Privacy Protection Authority, regarding the collection, retention, processing and security of personal information. In this context:

• Reasonable and updated data security procedures and measures are implemented, according to the scope and type of information collected and the required security level
• Access to personal information is restricted to authorized parties only and for purposes consistent with collection purposes
• We act to minimize the scope of information collected and retained (data minimization principle)
• Information is retained for a period not exceeding what is required
• Ongoing monitoring of information systems and security procedures is conducted
• Procedures exist for handling data security incidents
• The access and correction rights of data subjects are ensured in accordance with the law

15. Inquiries and Complaints

15.1 Contacting the Business

For any question, request, clarification or complaint regarding privacy and personal information, please contact us:

15.2 Contacting the Privacy Protection Authority

If you believe your rights under the Privacy Protection Law have been violated, you may contact the Privacy Protection Authority:

Website: www.gov.il/he/departments/the_privacy_protection_authority
Phone: *3450 or 02-6496555
Email: ppa@justice.gov.il