Effective Date: August 14, 2025
We at tbw.co.il (“we”, “us”, “our”) value your privacy and commit to handling your personal data with care under Israel’s Protection of Privacy Law, Amendment 13 (effective August 14, 2025) JD Supra+5Pearl Cohen+5iapp.org+5. This policy outlines how we collect, use, disclose, secure, and protect your personal information.
Personal Information: Any information identifying or relating to an individual, expanded under Amendment 13 (aligned closer to GDPR) Pearl Cohenהמכון הישראלי למדיניות טכנולוגיה.
Data Controller / Data Processor: We act as the controller of your data collected through our services.
Data Protection Officer (DPO): Appointed when required per the law.
We collect and process your data strictly for specified, explicit, and legitimate purposes. We do not process beyond those purposes (principle of purpose limitation) dlapiperdataprotection.com+1Gornitzky+1.
At collection, you’ll be clearly informed:
Whether it’s mandatory or voluntary
The specific purpose of collection
Who controls the data, including contact information
Any transfers of your data and their reasons
Your rights to access and correct your data Barnea
Our organization is the data controller of all data collected on this site. Contact details for inquiries and exercising your rights will be provided clearly upon collection.
You have the full right to:
Access your personal data
Correct inaccuracies
Understand how your data is used
Withdraw consent, if applicable
These rights are guaranteed and may be exercised without needing to prove actual harm dlapiperdataprotection.com+2iapp.org+2DataGuidance+3iapp.org+3JD Supra+3.
Amendment 13 significantly reduces registration requirements for certain databases while maintaining transparency and compliance שיבולת+14המכון הישראלי למדיניות טכנולוגיה+14JD Supra+14.
The Privacy Protection Authority (PPA) now holds heightened enforcement powers—including administrative fines, criminal sanctions, and imposing statutory damages without proof of actual damage nblaw.com+4dlapiperdataprotection.com+4Gornitzky+4. Expect heightened scrutiny and accountability.
We will appoint a Data Protection Officer (DPO) if required under the following conditions:
We are a public body, or handle public body data
We conduct systematic monitoring or control of data over 10,000 individuals (e.g., data brokers, behavioral tracking)
We process highly sensitive personal data (health, finances, location, etc.) Gornitzky
Even when not legally required, it’s our professional recommendation to appoint a DPO to reduce fine exposure (up to 10%) and enhance compliance culture שיבולת+5Pearl Cohen+5JD Supra+5.
For organizations where personal data processing is core, Amendment 13 calls for board-level oversight—ensuring compliance, risk management, and policy enforcement are tightly integrated at the highest level Pearl Cohen+5iapp.org+5JD Supra+5.
We retain the right to seek a binding preliminary opinion from the PPA regarding compliance of our processing activities. The PPA typically issues responses within 60 days Pearl Cohen.
Any transfer of data abroad will comply with PPA guidelines and applicable regulations, similar in spirit to GDPR’s standards.
We implement robust technical and organizational measures appropriate to the sensitivity of data and applicable risk—ensuring confidentiality, integrity, and availability of your information.
We may update this Privacy Policy as required by law or organizational changes; we’ll notify you of any material changes promptly.
For all privacy inquiries, DPO matters (if appointed), or exercising your rights—please contact us at:
[email protected]