Privacy Policy – Rakia Leadership Academy

Last Updated: November 2025

1. General Information

The website https://rakia.org.il (the “Website”) is operated by Kesem HaTzara’a Association (R.A.), a registered nonprofit organization in Israel, registration number 580691715, which operates the Rakia Leadership Academy (“the Association” / “Rakia”).
The Association serves as the Data Controller as defined under the Israeli Privacy Protection Law, 1981 (the “Law”).

Address: 12 HaTe’ena St., Harish, Israel
Email for all privacy-related inquiries: info@rakia.org.il

This Privacy Policy explains how we collect, use, store, and protect personal data of users visiting or interacting with our Website, in accordance with Amendment 13 to the Israeli Privacy Protection Law, the Privacy Protection (Data Security) Regulations, 2017, and the EU General Data Protection Regulation (GDPR).

2. Types of Data We Collect

2.1 Information Provided Voluntarily

• Full name, phone number, email address, city of residence, gender, year of birth
  
  
• Parent or guardian details (for minors)
  
  
• Information submitted via contact forms, registration, “Open Day” forms, or donation forms (through JGive)
  
  
• Payment details are processed only by JGive and are not stored by the Association
  
  

2.2 Automatically Collected Data

• IP address, browser type, operating system, device information, referring pages, and browsing duration
  
  
• Anonymous statistical and analytical data through cookies and similar technologies
  
  

2.3 Non-Israeli Users

User data may be stored or processed outside Israel, in accordance with GDPR standards and safeguards.

3. Purpose of Processing

The Association processes personal data for the following purposes:

• Managing communication with candidates, parents, alumni, and donors
  
  
• Sending newsletters, updates, and educational materials (subject to consent)
  
  
• Operating and improving the Website
  
  
• Processing donations and complying with financial and legal reporting obligations
  
  
• Protecting systems and preventing misuse
  
  

4. Legal Basis for Processing

Processing is carried out lawfully based on:

• The user’s informed consent
  
  
• Compliance with legal obligations
  
  
• Legitimate interests of the Association in conducting its educational and social mission
  
  
• Protection of the vital interests of the data subject
  
  

5. Cookies and Third-Party Tools

5.1 Types of Cookies

5.2 Embedded Third-Party Services

5.3 How to Manage Cookies

Users can disable or delete cookies in browser settings:
Chrome | Edge | Firefox | Safari

6. Data Sharing and International Transfers

The Association does not sell personal information.
Data may be shared only with:

• Technical service providers (hosting, analytics, mailing services, JGive)
  
  
• Public authorities where required by law
  
  
• Cloud providers located outside Israel under Standard Contractual Clauses (SCCs) in compliance with GDPR.
  
  

7. Minors

• The Website is open to minors under 18.
  
  
• Information may only be submitted with the consent of a parent or legal guardian.
  
  
• Data related to minors is used solely for educational purposes and not for commercial activities.
  
  

8. Data Subject Rights

In accordance with Israeli law and the GDPR, users have the following rights:

1. Right of Access – to review information held about them
   
   
2. Right to Rectification – to correct inaccurate or incomplete data
   
   
3. Right to Erasure (“Right to be Forgotten”)
   
   
4. Right to Restrict Processing
   
   
5. Right to Object – to direct marketing or certain processing activities
   
   
6. Right to Data Portability – to receive a structured copy of their data
   
   
7. Right to Withdraw Consent – at any time
   
   

To exercise these rights, contact: info@rakia.org.il

9. Data Retention Periods

10. Data Security

The Association applies administrative, physical, and technical safeguards, including encryption, access control, backups, and monitoring, in compliance with the Privacy Protection (Data Security) Regulations, 2017.
While no system can guarantee absolute security, we take reasonable measures to protect your data.

11. Complaints

Data subjects may file a complaint with:
📍 Privacy Protection Authority, Ministry of Justice, 2 Kaplan St., Jerusalem, Israel
🌐 https://www.gov.il/privacyprotection
📧 PPA@justice.gov.il

EU residents may also contact their local Data Protection Authority under Article 77 of the GDPR.

12. Changes to this Policy

The Association may update this Privacy Policy periodically.
The “Last Updated” date above reflects the most recent changes.
Continued use of the Website constitutes acceptance of the updated Policy.