Birthright Israel Website Privacy Policy
Effective Date: 1.8.2020
Birthright Israel International (CC) (“Taglit”) Taglit France Foundation, Taglit Germany, Taglit Switzerland Association BRIFC and their related entities and affiliates (collectively, “Birthright Israel,” “we”, “us”, and “our”) are committed to protecting your privacy when you (also referred to as “your”) use the Birthright Israel websites (the “Site(s)”), access external websites linked to from the Sites, and engage with us both via phone and through mail. When you access, browse, or use the Sites – including but not limited to when you register for one of our activities – or engage with us via phone or through the mail, information will be collected, transferred, processed, stored, and disclosed in accordance with this privacy policy (the “Policy”).
By accessing, browsing, or using the Sites, or by engaging with us via phone, through the mail, or any other media, you expressly consent to the collection, transfer, use, processing, and storage of your information (including personally identifiable information) as described in this Policy. IF YOU DO NOT AGREE WITH THIS POLICY OR THE INFORMATION COLLECTION, USE, AND DISCLOSURE PRACTICES DESCRIBED IN THIS POLICY, DO NOT ENGAGE WITH US VIA PHONE OR THROUGH THE MAIL, AND DO NOT USE THE SITES OR CLICK TO INDICATE THAT YOU AGREE TO THESE TERMS WHEN SUCH CONSENT IS REQUESTED; in which case, we will be unable to provide you with the services of Birthright Israel.
1. Information Collection Practices
1.1. Information Provided by You
1.1.1. Birthright Israel Website Use, Donation, and Applications – When completing forms on the Sites in order to contact us or to subscribe to our communications, when registering a profile on the Sites, when using the Sites to donate to Birthright Israel or in a variety of other circumstances, you may be asked to provide personally identifiable information, such as, but not limited to, your full name, date of birth, email address, telephone number, address, (collectively, the “Personal Information”). By providing any such Personal Information, you consent to our collection, transfer, processing, storage, disclosure, and general use of such Personal Information in accordance with this Policy.
1.1.1.1. Donation Through Social Sites – Rather than entering certain Personal Information and donation directly on the Sites in order to donate, we provide the option to donate by utilizing your credentials on a social media website such as Facebook (a “Social Site”). When you provide credentials for a Social Site via our Sites, we may use those credentials to obtain Personal Information about you from that Social Site and the Social Site may automatically track your activities within our Sites. You may still be asked to provide additional Personal Information to the extent the Social Site does not have all of the Personal Information we require. By registering your credentials through a Social Site in the manners noted, you consent to the transfer of your associated Personal Information to us and our collection, transfer, processing, storage, disclosure, and general use of such Personal Information in accordance with this Policy.
1.2. Automatically Collected Information – We will automatically collect some additional personally identifiable information about you when you use the Sites (the “Automatically Collected Personal Information”) and we incorporate tools into our Sites that allow such Automatically Collected Personal Information to simultaneously be collected and used by our “Ad Serving Providers” and by our “Analytics Providers,” as further defined herein. Automatically Collected Personal Information may include, but will not be limited to, your diagnostic log information, log-in location, IP address, operating system and language, referring/exit pages and URLs, browsing history, number of clicks, landing pages, cookie information, the pages you requested and viewed, the amount of time spent on particular pages, what questions you have answered in a Birthright Israel trip or other program application, and the date and time. This information is collected for the purposes described in this Policy, including to better understand our constituent base and to improve the quality of the Sites. By using the Sites, you consent to our collection, transfer, processing, storage, disclosure, and general use of the Automatically Collected Personal Information in accordance with this Policy.
1.2.1. Ad Serving Providers – We use third-party Ad Serving Providers to serve ads and/or collect data on our behalf across the Internet and on our Sites. Some of these Ad Serving Providers may collect information about your visits to our Sites and your interaction with our products and services to tailor marketing messages on our Sites or to trigger real time interaction, customize our Sites, or enhance your profile. Some of these Ad Serving Providers may be able to collect personal information that you share with our Sites automatically via a web form and prior to your pressing a submit button, and they may be able to use Automatically Collected Personal Information from your visits to our Sites to send marketing messages to you in a way that may personally identify you. This information is collected through the use of a cookie, a javascript tag, and/or pixel, as later defined within, which is industry standard technology used by most major websites. The Automatically Collected Personal Information collected by these Ad Serving Providers may include your device’s IP address, user agent, email addresses (where hashed or otherwise rendered pseudonymous), and other user and device-level pseudonymous information. Please keep in mind that your browser settings may not permit you to control the technologies utilized by these companies. If you would like more information about these practices, please click: http://optout.aboutads.info/#!/.
1.2.2. Analytics Providers – We use third-party Analytics Providers (such as Google) to collect information about usage of our Sites and about users of our Sites, including demographic and interest-level information. Analytics Providers use cookies and pixels, as defined herein, in order to collect demographic and interest-level information and usage information from Site users, including information about the pages viewed, time spent, browser, operating system, and IP address. Cookies and pixels allow the Analytics Providers to recognize when a user visits any of the Sites and when the user exits any of the Sites to explore another website or Social Site. The Analytics Providers use the information they collect from the Sites and other websites to share, with us and other website operators, conglomerated and anonymized information about users, including age range, gender, geographic regions, general interests, and details about devices used to visit websites and purchase items. We do not link information we receive from Analytics Providers with any of your Personal Information or Automatically Collected Personal Information. Please be sure to review any such privacy policies and terms of service to understand an Analytics Provider’s collection, use, and sharing practices. For more information regarding Google’s use of cookies, pixels, and collection and use of information, see the Google Privacy Policy (https://www.google.com/policies/privacy/). If you would like to opt out of Google Analytics tracking, please visit the following link: Google Analytics Opt-out Browser Add-on (https://support.google.com/analytics/answer/181881?hl=en).
1.2.3. Cookies – A cookie is a small text file that is stored on a user’s computer. Our Ad Serving Providers and Analytics Providers use cookies to record information about your activities when you use the Sites in order to “remember” you when you return to the Sites. Some cookies remain on your device until you delete them. Others expire when you leave the Sites. You may set your browser setting to attempt to reject cookies, but if you do so you will not be able to use the Sites. See the Section titled “Online Tracking and your Choices” below for more information on how the Sites may respond to your browser settings. We do not control the use of cookies by our Ad Serving Providers, our Analytics Providers, or by other third parties.
1.2.4. Pixels – Pixels are tiny graphics with unique identifiers that are used to track the online movements of web users. Unlike cookies, which are stored on a user’s computer hard drive, pixels are small graphics that are about the size of the period at the end of the sentence that are embedded invisibly on Sites pages. Our Ad Serving Providers and Analytics Providers may place pixels on pages of our Sites that track what other websites you visit (both before and after visiting the Sites). Our Ad Serving Providers and Analytics Providers use information obtained from pixels to help us improve our business and the Sites. We do not control the use of pixels by our Ad Serving Providers, our Analytics Providers, or by other third parties.
2. Information Use Practices
2.1. In General – In general, we may use any Personal Information, Credit Card Information, or Automatically Collected Personal Information, for the following reasons:
2.1.1. Operating, maintaining, and improving the Sites (including providing you a more personal experience);
2.1.2. Troubleshooting;
2.1.3. Conducting research;
2.1.4. Resolving disputes;
2.1.5. Detecting and protecting against errors, fraud, and criminal activity;
2.1.6. Assisting law enforcement;
2.1.7. Enforcing this Policy and any other terms or conditions related to the Sites;
2.1.8. Any other purpose as further enumerated in this Policy or that we describe to you at the time of collection.
2.1.9. Providing Customer Support with Regard to payors – In the event that we need to provide customer support in connection with payment of a donation, we will only store and use limited portions of the Credit Card Information as necessary to associate a transaction with you – namely, the name appearing on your credit card, your billing address, the date of the transaction, the amount, the last four digits of your credit card, and an associated transaction ID (the “Transaction Information”). All other Credit Card Information, to the extent collected, is only used for purposes of payment processing or as may be required by law, as further described herein.
2.2. Anonymizing Information – We may use aggregated Personal Information and Automatically Collected Personal Information in an anonymized way (“Anonymized Information”) for any lawful purpose, including analyzing trends, research, administration of the Sites, tracking movement around the Sites, and to improve our business and the Sites.
2.3. Retaining Your Information – In general, we will store your Personal Information, Automatically Collected Information, and Transaction Information, indefinitely, or as long as legally required or allowed under applicable law. Birthright Israel may associate or link your Personal Information, Automatically Collected Personal Information, and your Transaction Information, to other information or records we separately have in our possession.
2.4. Data Transfer – Our Sites and related systems are housed on servers in Israel and the United States. If you are located outside of these countries, information we collect from you (including through cookies) may be transferred to, processed in, and stored in these countries, which may not offer the same level of privacy protection as the country where you reside or are a citizen. For EU residents we follow the GDPR requirements in respect to data transfer
2.5. Information Sharing – In general, Birthright Israel does not sell or rent any of your Personal Information, Automatically Collected Personal Information, Credit Card Information, or Transaction Information with third parties for any purpose. However, Birthright Israel may share certain of the information provided by you and/or collected from you for the limited purposes noted herein, namely:
2.5.1. Sharing with Donation Processors – Whenever you make a Donation, your Credit Card Information will be shared with and used by a third-party payment site in order to process your donation (the “Donation Processor”). Because the Donation Processor is an independent third-party, they may ask you to agree to their online privacy policies and terms of service prior to allowing you to process your online Donation. Please be sure to review any such privacy policies and terms of service to understand the Donation Processor’s collection, use, and sharing practices.
2.5.2. Sharing with Ad Serving and Analytics Providers – As previously noted, by using the Sites, your Automatically Collected Personal Information is automatically collected by and shared with our Ad Serving and Analytics Providers.
2.5.3. Sharing of Anonymized Information – We may share your Anonymized Information with Ad Serving Providers, Analytics Providers, Payment Processors, Third-Party Providers, or other third-party entities, for any lawful purpose, including analyzing trends, research, administration of the Sites, tracking user movements around the Sites, and to improve our business, products, services, and the Sites.
2.5.4. In some cases the third party will act as a Joint Controller, along withBirthright Israel, and use the data for similar or related needs as Birthright Israel does. In order to receive information regarding the joint controller that hold your data, please contact as at: privacy@taglitbri.com
2.6. Legal Requirements – In some cases, we may disclose any of your Personal Information, Automatically Collected Personal Information, or Transaction Information: i) as required by law; ii) if we believe that disclosure is needed to protect our rights; iii) to government regulators; iv) to law enforcement authorities; v) in connection with any judicial proceeding, court order, subpoena, or legal process served on us or the Sites; vii) to address health needs; and viii) to respond to a physical threat to you or another person.
2.7. Insolvency and Business Transitions – If we ever file for bankruptcy or engage in a business transition such as a merger with another company, or if we purchase, sell, or reorganize all or a part of the Sites or our business or assets, we may disclose your Personal Information, Automatically Collected Personal Information, and Transaction Information to third parties, including to prospective or actual purchasers, in connection with one of these transactions. Any successor entity may become entitled to all information about you that we have stored.
2.8. Disclaimer – We cannot ensure that your information will never be disclosed in ways not otherwise described in this Policy. For example, third parties may unlawfully intercept or access transmissions or private communications. You affirm your understanding that no transmission of data over the Internet can be 100% secure.
3. Online Tracking and your Choices – As discussed above, because we, the Social Sites you may choose to log into our Sites through, our Ad Serving Providers, and our Analytics Providers, automatically collect Site usage information through the use of cookies, pixels, and other tracking technologies, your selection of the “Do Not Track” option provided by your browser may not have any effect on our collection of Automatically Collected Personal Information. One way to attempt to “opt-out” of the collection of any information through cookies and some (but not all) other tracking technology is to actively manage the settings on your browser to delete and disable cookies and other tracking/recording tools. However, getting a “Do Not Track” signal to work as you might want is difficult and may not be possible. Using browsers as an example, not all tracking technologies can be controlled by browsers; unique aspects of your browser might be recognizable even if you disable a tracking technology; not all settings will necessarily last or be effective; even if a setting is effective for one purpose data still may be collected for another; and even if one website observes a “Do Not Track” signal, that website usually will not be able to control other websites.
4. Information Security Measures – Keeping secure personal information that we collect is of great concern to us. Birthright Israel maintains: i) appropriate and reasonable physical, electronic, and managerial procedures; ii) commercially appropriate and reasonable storage mechanisms (including backup, archive, and redundant data storage, on-site and off-site); and iii) appropriate and reasonable precautions, in order to safeguard and secure Site user information as collected and stored, and to prevent the disclosure of, and loss or alteration of, any such information to unauthorized third parties. Birthright Israel also endeavors to reasonably ensure that any party with which it shares your information, as permitted by this Policy, also employs similar procedures, mechanisms, and precautions. However, no Internet or mobile transmission is ever fully secure or error free and therefore Birthright Israel cannot guarantee that your information will not be accessed, deleted, or altered by an unauthorized third party, neither while it is in Birthright Israel’s sole control nor in the event it has been shared as permitted under this Policy. Because most Internet and mobile transmissions are not encrypted, you should take special care in deciding what information you send via the Internet or other mobile transmission and that when you provide such information, it is at your own risk.
5. Children – The Sites are not for or directed towards children. The Sites are not intended for anyone under the age of 18, and we do not intend to and will not knowingly collect any Personal Information from children under the age of 18. Children under the age of 18 are prohibited from using the Sites. If we learn that we have collected Personal Information from a child under the age of 18, we will remove that information immediately and delete it from our servers (subject to applicable law and this Policy). If you believe content from a child under the age of 18 has been provided via the Sites, please notify us by contacting us at privacy@birthrightisrael.com.
6. European Union Residents – If you are a resident of the European Union, the collection, storage, and retention of your information may also be subject to the provisions of the European General Protection Regulation (the “GDPR”). We endeavor to act in accordance with all applicable provisions of the GDPR and to provide you with concise, transparent, understandable, and easily accessible information on the conditions for processing your Personal Information, Automatically Collected Personal Information, and Payment Information in clear and simple terms. You understand that the information we store, collect, and process about you is necessary to conduct our operations and facilitate your participation in our programs, including but not limited to information required to ensure eligibility and to prevent repeat participation in our programs, as well as for other legitimate purposes allowed under the GDPR. If you reside in the European Union, in addition to any other rights or responsibilities you may have in connection with your agreement to the terms of this Privacy Policy, your rights are as follows:
6.1. The right to information on the processing of your Personal Information, Automatically Collected Personal Information, and Payment Information.
6.2. The right to access and rectify your Personal Information, Automatically Collected Personal Information, and Payment Information. The right of access allows you to obtain from us confirmation that your Personal Information, Automatically Collected Personal Information, and Payment Information has or has not been processed as well as the conditions of such processing, and to receive an electronic copy (for any additional copy, we are entitled to demand payment of any reasonable fees based on the administrative costs incurred).
6.3. The right to obtain from us the rectification of your Personal Information, Automatically Collected Personal Information, and Payment Information.
6.4. Subject to the exceptions provided by applicable law, you have the right to ask us to delete your Personal Information, Automatically Collected Personal Information, and/or Payment Information when one of the following grounds applies:
6.4.1. Your Personal Information, Automatically Collected Personal Information, and/or Payment Information are no longer necessary for the purposes for which they were collected or otherwise processed;
6.4.2. You wish to withdraw your consent on which the processing of your Personal Information, Automatically Collected Personal Information, and/or Payment Information was based and there is no other basis justifying such processing;
6.4.3. You consider and can establish that your Personal Information, Automatically Collected Personal Information, and/or Payment Information has been unlawfully processed;
6.4.4. Your Personal Information, Automatically Collected Personal Information, and/or Payment Information must be deleted in accordance with a legal obligation.
6.5. The right to restrict the processing of your Personal Information, Automatically Collected Personal Information, and/or Payment Information. The applicable regulations provide that this right may be invoked in certain cases, in particular the following:
6.5.1. When you dispute the accuracy of your Personal Information, Automatically Collected Personal Information, and/or Payment Information;
6.5.2. When you consider and can establish that the processing of Personal Information, Automatically Collected Personal Information, and/or Payment Information is unlawful, but you oppose the deletion of Personal Information, Automatically Collected Personal Information, and/or Payment Information and demand instead that the processing be limited;
6.5.3. When we no longer need your Personal Information, Automatically Collected Personal Information, and/or Payment Information but they are still necessary for you to establish, exercise, or defend your legal rights;
6.5.4. When you object to the processing that would be based on the legitimate interest of Birthright Israel, during the verification whether the legitimate grounds pursued by the controller prevail over those of the person in question.
6.6. The right to data portability. Namely, this allows you to receive the Personal Information, Automatically Collected Personal Information, and/or Payment Information you have provided to us with in a structured, commonly used format, and to transmit this Personal Information, Automatically Collected Personal Information, and/or Payment Information to another data controller without us hindering it.
6.7. The right to withdraw consent. Namely, when we process your Personal Information, Automatically Collected Personal Information, and/or Payment Information on the basis of your consent, this latter may be withdrawn at any time using the means provided for this purpose (procedure indicated below of this Policy). On the other hand, and in accordance with applicable law, the withdrawal of your consent is only valid for the future and cannot therefore call into question the lawfulness of the processing carried out before this withdrawal.
6.8. If you are a resident of the European Union and you wish to make such a request under any of the rights noted in this Section 8, you may contact us by using the contact information in the “Privacy Questions” section at the bottom of this Policy. In any such communication, please note that you are making the request as a resident of the European Union.
6.9. For all residents of the European Union, in the event of a conflict between the rights noted in this Section 8 and any rights or responsibilities you may have in connection with other Sections of this Privacy Policy, the rights noted in this Section 8 shall control.
7. Managing Your Personal Information, Automatically Collected Personal Information, and Payment Information – You may request access to or correct an error or omission in your Personal Information, Automatically Collected Personal Information, and/or Payment Information. If you are a resident of the European Union you can also withdraw your consent in connection with your Personal Information, Automatically Collected Personal Information, and/or Payment Information in connection with your rights as noted in Section 8. You may communication any relevant information requests by contacting us at privacy@taglitbri.com. We will make good faith efforts to resolve requests under this Section except where the request is unreasonable, requires disproportionate technical effort or expense, jeopardizes the privacy of others, or would be impractical.
8. Modification of the Policy – We will occasionally update this Policy. When we post changes to this Policy, we will revise the “Effective Date” at the top of this Policy. We recommend that you check this Policy from time to time to inform yourself of any changes in this Policy.
9. Privacy Questions – If you have questions or concerns about our privacy practices, please email us at: privacy@taglitbri.com
