1. General
This privacy policy ("the Policy") applies to the website cbe.co.il ("the Website"), operated by CBE ("the Company", "we", "us"). The Policy details what personal data we collect from visitors and customers on the Website, what we use it for, and how we protect it.
The Policy was written in accordance with the Protection of Privacy Law, 5741-1981, including its amendments (including Amendment 13), and the Protection of Privacy Regulations (Data Security), 5777-2017, and — where relevant to visitors and customers located in the European Union or whose data is subject to its applicability — in accordance with the European Union's General Data Protection Regulation (GDPR).
Use of the Website and providing information through it constitutes consent to the terms of this Policy. If you do not agree to the terms, we ask that you not provide personal information through the Website.
2. What data we collect
The Website itself does not require registration or the provision of information in order to browse and view its content. We collect personal data only when you choose to provide it voluntarily — for example, when you leave your details in the contact form, request a quote or consultation, or contact us by email/phone/WhatsApp.
Data that may be collected in this way includes: full name, company/organization name, title, email address, phone number, and the content of your inquiry or the message you sent us.
In addition, like any website, the Website may automatically collect technical usage data (such as IP address, browser type and device, pages viewed, and duration of visit) through usage analytics tools (such as Google Analytics) and cookies — see Section 7 below.
3. What the data is used for
The data you voluntarily provide through the contact form or a direct inquiry is used only for the following purposes:
- Contacting you in response to your inquiry, providing a quote, scheduling a consultation meeting, and delivering the requested services.
- Providing the services actually ordered (certification guidance, standards consulting, and information security, plus accompanying services).
- Improving the service and proper operation of the Website.
- Sending updates, marketing material, or professional content — only if you gave explicit and separate consent for this (for example, by checking the relevant consent box in the form).
We will not use your data for a purpose that goes beyond the above without obtaining your consent.
4. Transfer of information to third parties
We do not transfer, sell, or share your personal information with any third party, except in one of the following cases only:
- When you explicitly requested it — for example, when you asked us to refer you or pass your details to an external party (such as a certification body, regulator, or ancillary service provider) to advance a process you requested.
- Technical service providers acting on our behalf and in our name only (such as the Website hosting provider, a lead management/CRM system, mailing services), who are bound by confidentiality and data protection obligations, and solely for the purpose of providing the service to us — not for their own independent use.
- When required by law, judicial order, or a lawful demand from an authorized authority.
- In the event of a structural change to the company (such as a merger, acquisition, or reorganization), subject to the acquiring party's commitment to honor this privacy policy.
5. Data security
We take reasonable and accepted organizational and technological measures to protect the personal data entrusted to us from misuse, loss, unauthorized access, disclosure, or alteration — in accordance with the obligations set out in the Protection of Privacy Regulations (Data Security), 5777-2017.
However, we cannot guarantee absolute protection against unauthorized intrusion into servers, and therefore we cannot absolutely guarantee immunity against intrusions and unauthorized use of information.
6. Retention period
We retain personal data only for as long as necessary to fulfill the purposes set out in this Policy, and in any case no longer than required by any law (including document retention requirements for tax and accounting purposes, where relevant). At the end of the relevant period, the data will be deleted or anonymized.
7. Cookies and usage analytics tools
The Website may use cookies and similar tools (such as Google Analytics and/or Google Tag Manager) to understand how the Website is used and to improve it. These cookies may collect anonymous or partially identified information about your use of the Website.
You may block or delete cookies through your browser settings, although such blocking may affect the proper functioning of certain parts of the Website.
8. Your rights
Under Israeli privacy law: In accordance with the law, you are entitled to inspect the information held about you in our databases, and if you find that the information is incorrect, incomplete, unclear, or outdated — you are entitled to request its correction or deletion.
If the GDPR applies to you (for example, if you are a resident of the European Union), you also have the following rights: the right to access and receive a copy of the information; the right to correct inaccurate information; the right to erasure ("the right to be forgotten"); the right to restrict processing of the information; the right to data portability; the right to object to processing (including processing for direct marketing); and the right to lodge a complaint with the relevant supervisory authority in your country of residence.
To exercise any of the above rights, you may contact us using the contact details in Section 10 below.
9. Unsolicited messages ("spam") and opting out of the mailing list
If you consented to receive marketing updates and no longer wish to receive them, you may request removal from the mailing list at any time, by contacting the details in Section 10, or via the opt-out link (if available) in any marketing message sent.
10. Contact
For any question, request, or inquiry regarding this privacy policy or the processing of your personal data, you may contact us in one of the following ways:
- Via the contact form on the Website, leaving your inquiry in free text.
- By email to the address shown at the bottom of the page.
11. Changes to this Policy
We may update this Policy from time to time, including following legislative changes or an actual change in the company's practices. The binding version of the Policy is the most up-to-date version published on the Website, and the last update date will be noted at the top of the document.