1. General
    • This Privacy Policy applies to the relationship between the Institute for National Security Studies (INSS) (hereinafter: the "Institute" or the "Data Controller") and its data subjects (hereinafter: "Data Subjects").
    • The Institute for National Security Studies is an independent body that initiates and conducts research on issues relevant to Israel's national security, with the aim of contributing to and shaping Israel's long-term national security policy. In order to disseminate its research, expand its reach, and develop its resources, the Institute operates, among other channels, an official website, embedded contact forms, and email newsletters.
    • This Privacy Policy forms an integral part of, and shall be read in conjunction with, the Terms of Use governing the Institute's website, event registration forms, contact forms, newsletters, and social media pages (collectively: the "Site"). In the event of any conflict between the Terms of Use and this Privacy Policy, the provisions of this Privacy Policy shall prevail. Definitions set forth in the Terms of Use apply equally to this Privacy Policy.
    • This Privacy Policy applies to all Data Subjects in their dealings and communications with the Institute across all available channels.
    • The Institute reserves the right to amend, update, modify, or supplement this Privacy Policy from time to time. Any changes shall take effect immediately upon being posted on the Site, and continued use of the Site following the posting of such updates shall constitute consent to the modified terms.
    • In this Privacy Policy, words importing the singular include the plural and vice versa, and words importing any gender include all genders.
    • Any use of or activity on the Site—including submitting information in designated fields—constitutes the Data Subject's agreement to be bound in full by this Privacy Policy and the Terms of Use. If you do not agree to any provision of this Privacy Policy, the Terms of Use, or any guidelines published by the Institute, you must immediately cease using the Site and its services.
    • The Data Subject represents that any use of the Site and its services is undertaken after having read, understood, and accepted the Institute's Privacy Policy and Terms of Use, and in compliance with all applicable laws.
    • The Data Subject represents that they possess the legal capacity and authority to enter into this agreement with the Institute and to consent to the Site's Terms of Use and Privacy Policy.
    • The Data Subject represents that they are at least 18 years of age, or, if a minor, that their use of the Site has been authorized by a parent or legal guardian.
    • The Data Subject acknowledges that they are under no statutory or legal obligation to provide personal information to the Institute, and that any information provided is submitted voluntarily and of their own free will for the purposes set forth herein and in the Terms of Use.
    • It is hereby clarified that all collection, use, storage, sharing, and other processing of personal data by the Institute is conducted in accordance with applicable laws and regulations, including the Protection of Privacy Law - 1981 (the "Privacy Law"), the Protection of Privacy Regulations (Data Security) - 2017 (the "Data Security Regulations"), the Communications (Telecommunications and Broadcasting) Law -1982, and any other relevant regulatory requirements in Israel.
  1. Methods of Collecting Information
    • The Institute may collect personal data regarding Data Subjects, directly or through third-party service providers, through the following channels:
    • Information directly provided by the Data Subject: When using the Site, Data Subjects may be requested to provide details such as full name, email address, telephone number, reason for inquiry, and any additional details required to process their request.
    • The Site enables Data Subjects to upload files and submit text in open inquiry fields to explain the nature of their request. Data Subjects are advised to refrain from including unnecessary personal or sensitive information in these open fields or file attachments.
    • Information automatically collected from Site activity: Browsing habits and usage patterns, including access timestamps, features used, searches, clicks, pages viewed, referring URLs, advertisements viewed or clicked, browser details, IP addresses, cookies, unique device identifiers, and related session data.
    • Information collected through ongoing engagement: Data received through manual and online registration forms, historical records compiled from Institute events and activities over time, and information otherwise provided to the Institute. Such data may include: full name; contact telephone numbers; email address; event registration logs; academic degrees; residential address; occupation/field of practice; date of birth; job title; registration dates; mailing consent records; referral sources; and organizational affiliation status.
    • Communications and correspondence: The Institute may record and retain the contents of telephone calls, written correspondence, messages, and emails exchanged with Data Subjects, alongside their associated contact details.
  1. Purposes of Collecting Information
    • Information collected by the Institute will be processed in accordance with applicable law and this Privacy Policy for the following purposes:
    • Distributing newsletters, research updates, publications, and institutional announcements to recipients who have consented to receive such communications.
    • Managing registration and updates for conferences, webinars, and events hosted by the Institute.
    • Addressing and resolving inquiries submitted via the website contact form or by email.
    • Personalizing user content and communicating with Data Subjects via email or other channels (e.g., tailoring research updates, articles, or relevant notifications to reflected interests and preferences).
    • Providing user support, handling feedback and complaints, contacting Data Subjects as needed, and conducting academic research, data analysis, and statistical evaluation. Any such processing is conducted to enhance services or provide aggregate insights to service partners and platform providers.
    • Defending against claims, managing legal disputes, conducting investigations regarding suspected fraud or violations of the Terms of Use, and ensuring overall regulatory compliance.
    • Performing any action required to comply with statutory and regulatory obligations applicable to the Institute.
  1. Sharing of Information
    • The Institute may disclose or transfer personally identifiable information to third parties under the following circumstances:
    • Where the transfer is necessary to accomplish the purposes set out in this Policy, to improve the Institute's services, or to manage direct mailings.
    • Where disclosure is necessary to prevent physical, financial, or other harm to Data Subjects or third parties, at the Institute's sole discretion.
    • Where required by applicable law, a court order, subpoena, or a lawful directive from a competent judicial or regulatory authority.
    • Where the Institute reasonably believes that a Data Subject has breached, is about to breach, or is engaging in acts contrary to the Terms of Use, this Privacy Policy, or applicable law, in which case data may be disclosed to investigate, prevent, or enforce legal remedies against such violations.
    • Where disclosure is required in connection with civil, administrative, criminal, or arbitration/mediation proceedings to which the Institute is a party.
    • To affiliated entities operating under the auspices of the Institute, provided that such entities adhere to privacy practices no less restrictive than this Policy.
    • In connection with an institutional reorganization, restructuring, or transfer of operational activities, provided that the receiving entity undertakes to process personal data in accordance with this Policy or higher privacy standards.
    • Sharing anonymized, pseudonymous, or aggregated statistical data with third-party service providers for ongoing Site maintenance and analytical support, provided that the Data Subject's individual identity is not disclosed.
    • In all other circumstances, personal data shall only be transferred to third parties after being irreversibly anonymized such that the Data Subject cannot be identified through reasonable efforts.
  1. Cookies and Tracking Technologies
    • To provide a faster and more tailored user experience—such as recognizing returning visitors, obviating the need to re-enter credentials or form details, and maintaining session preferences—the Institute utilizes cookies, web beacons, and tracking pixels. A cookie is a unique internal identifier stored by the browser on the Data Subject's device. Cookies are not executable programs and cannot extract unauthorized files or execute code on your device.
    • Tracking technologies utilized on the Site are categorized as follows:
    • Strictly Necessary & Security Cookies: Essential for platform functionality, system integrity, and bot/malware protection.
    • Functional Cookies: Retain basic user preferences, such as language selection and prior consent choices.
    • Analytics & Performance Cookies: Assist the Institute in monitoring traffic metrics, page usage, and platform optimization.
    • Marketing & Advertising Measurement Cookies: Used to evaluate campaign reach and measure promotional content engagement.
    • For these purposes, the Institute integrates tools operated by external providers, including: Cloudflare (security and bot management); Google reCAPTCHA (human verification); Google Analytics (traffic statistics); Meta Pixel & Google Ads / DoubleClick (campaign analytics); embedded media players (YouTube, SoundCloud); calendar integrations (AddEvent); Google Maps; and accessibility plug-ins (AudioEye). Through these integrations, providers may collect technical device data such as operating system version, screen resolution, IP address, session duration, and general geographic location.
    • Certain third-party providers (including Google and Meta) operate globally and may store and process tracking data on servers located outside Israel, in accordance with their respective privacy policies.
    • Strictly necessary and security cookies are deployed automatically. Non-essential analytics and marketing cookies are deployed subject to your consent, which may be modified or revoked at any time.
    • Cookies can be managed or disabled directly through browser or device settings. Most web browsers allow users to clear existing cookies, block cookie acceptance, or configure storage prompts. On mobile operating systems, advertising identifiers can be restricted via system privacy controls. Please note that disabling essential cookies may degrade Site performance and restrict access to specific features.
  1. Access, Rectification, and Erasure of Information
    • In accordance with the Protection of Privacy Law, every individual is entitled to request access to and inspection of personal data held about them in the Institute's database. Furthermore, a Data Subject may request that inaccurate, incomplete, or outdated information be rectified, corrected, or erased.
    • Such requests must be submitted in writing to the email address specified in Section 10 below.
    • Requests for data inspection, rectification, or erasure will be handled in accordance with applicable Israeli law, including the Protection of Privacy Regulations (Conditions for Inspection of Data and Procedures for Appeal from a Refusal of a Request for Inspection), 5741-1981, and the Protection of Privacy Regulations (Provisions Regarding Information Transferred to Israel from the European Economic Area) - 2023.
    • Notwithstanding the foregoing, the Institute may retain personal data where independently compiled or where required for its ongoing operational, administrative, or archival requirements, subject to applicable law.
    • If the Institute refuses a Data Subject's request to inspect, correct, or erase information, written notice detailing the reasons for refusal shall be provided as prescribed by law.
    • Where the Institute fails to respond to an inspection or rectification request within the statutory timeframe, such failure to respond shall be deemed a formal refusal of the request pursuant to Sections 5 and 7 of the Protection of Privacy Regulations (Conditions for Inspection of Data and Procedures for Appeal from a Refusal of a Request for Inspection) - 1981.
  1. Third-Party Links
    • The Site may contain links to third-party websites or services that are not owned, operated, or controlled by the Institute and are not governed by this Privacy Policy. The Institute accepts no liability for the content, privacy practices, or data handling policies of any such third parties. Data Subjects are advised to review the independent privacy policies of any external websites they visit.
  1. Assignment
    • The Institute may assign its rights or delegate its obligations hereunder to any third party—including the transfer of database records—provided that the recipient party agrees in writing to assume and abide by the terms of this Privacy Policy.
  1. Governing Law and Dispute Jurisdiction
    • This Privacy Policy and any disputes arising out of or in connection with it shall be governed exclusively by the laws of the State of Israel. The competent courts located within the Tel Aviv-Jaffa District shall have sole and exclusive jurisdiction over any legal proceedings arising between the parties.
  1. Contact Details
    • Data Protection Officer (DPO): Tzila Lavy
    • Email: tzila@osegevlaw.co.il