Privacy Policy

Privacy Policy

Last Updated: December 01, 2025

1. INTRODUCTION
   • Tzuba Tourism Agricultural Cooperative Society Ltd. (the “Hotel”, “we”, “us” or “our”) presents this privacy policy, as may be amended from time to time (the “Privacy Policy” or “Policy”), in order to provide our guests, users, and visitors (“you” or “your”) with clear information regarding our privacy and data protection practices. This Policy governs the collection, use, disclosure, and other processing of Personal Data (as defined below) through our website accessible at https://tzubahotel.co.il, including our online booking engine linked thereto (the “Booking Engine” and, collectively, the “Website”), our mobile application designed to manage your stay (the “App”), and any related services provided by us (collectively, the “Services”).
   • For the purpose of this Privacy Policy, “Personal Data” means any information or data relating to an identified or identifiable natural person, including but not limited to your name, email address, telephone number, identification number, or any other information that may directly or indirectly identify you, as well as any “Personal Information” or “Especially Sensitive Information” as defined under the Israeli Protection of Privacy Law, 5741‑1981.
   • This Privacy Policy applies to all Personal Data collected or processed by us, whether (i) through your use of the Website, Booking Engine or App; (ii) during your stay at the Hotel; (iii) when contacting us by any means; or (iv) when receiving any of our Services.
   • Please note that certain Services may be subject to additional terms and conditions, including specific privacy provisions, which will be presented to you at the time of registration or use.
   • This Privacy Policy forms an integral part of our Terms of Use available at https://tzubahotel.co.il/תנאים-ותקנון.
   • By accessing or using the Website, the App, or any of our Services, or by contacting us in any manner, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy, including the collection, processing, retention, and disclosure of your Personal Data as described herein. If you do not agree with the terms of this Policy, you must immediately cease using the Website, the App, and/or the Services.
   • The division of this Privacy Policy into sections and headings is for convenience only and shall not affect its interpretation.

2. PROCESSING OF PERSONAL DATA
   • You are not under any legal obligation to provide us with any Personal Data. The provision of Personal Data is entirely voluntary and subject to your informed consent. Notwithstanding the foregoing, please be advised that failure to provide certain required information may result in our inability to offer some or all of the Services to you. For instance, without payment information, we will be unable to process your room reservation, and without contact details, we may be unable to respond to your inquiries.
   • Certain fields on the Website and/or App are designated as mandatory and are identified by an asterisk (“*”). In order to receive the requested Service, you are required to provide all information requested in these mandatory fields. Failure to provide such mandatory information may result in our inability to provide the requested Service, in whole or in part. Fields that are not marked with an asterisk are optional, and you may choose not to provide such information; however, omission of optional information may affect our ability to customize or optimize the Services to better suit your preferences or requirements.
   • You hereby represent and warrant that all information you provide to us is true, accurate, complete, clear, and up to date. In the event that you provide us with Personal Data relating to third parties (including, without limitation, when making a reservation on behalf of others), you further represent and warrant that you have obtained all necessary consents and authorizations from such third parties to disclose their Personal Data for the purposes set forth in this Privacy Policy, and that you have duly informed them of the terms and contents of this Policy, or, alternatively, that you are their legal guardian and authorized to act on their behalf.
   • The Website and the App are not intended for use by minors under the age of eighteen (18). If you are under eighteen (18) years old, you are prohibited from accessing or using the Website or the App. We do not knowingly collect or process Personal Data relating to minors, except when such information is required as part of a reservation or for the provision of Services, and only with the consent of a parent or legal guardian. If you are a minor and do not possess such consent, you must immediately cease all use of the Website, the App, and/or the Services.

3. CATEGORIES OF PERSONAL DATA WE COLLECT

We collect and process various categories of Personal Data about you, depending on the nature of your interaction with us and the Services you use, as detailed below:

• Reservation Information. When you make a room reservation via the Website, through our customer service center, or upon your arrival at the Hotel, we collect the following categories of Personal Data:

• Full name, telephone number, email address, identification card or passport number (including a copy of such identification document), residential address, country of origin, gender, and age;
• Reservation information, including arrival and departure dates, number of rooms reserved, number of guests, room category or type, any specific requests or preferences (e.g., bed type, meals, accessibility), and details of accompanying family members, including children’s ages (if relevant);
• Payment information, including the last four digits of your credit card and a token received from the payment providers (note: full credit card details are processed and stored exclusively by PCI‑compliant third‑party payment providers);
• Group affiliation information, if your reservation is made as part of a group booking (e.g., through your employer or another organization);
• Any additional information you choose to provide in connection with your reservation or special requests.

Your reservation details will also be available through your personal account on the Booking Engine. You may log in using your reservation number and email address, or alternatively, via your Facebook or Google account. Please note that if you choose to access your account through a third-party platform, certain information may be shared with, and processed by, such third party in accordance with its privacy policy. We disclaim any responsibility or liability for the processing of Personal Data by these third parties.

You may also create an account on the Booking Engine by providing your full name, email address, and selecting a unique password. You are solely responsible for maintaining the confidentiality and security of your login credentials. Any access to, or activity conducted through, your account shall be conclusively deemed to have been authorized by you, and you hereby release and hold the Hotel and/or any party acting on its behalf harmless from any liability arising from any unauthorized use of your account or credentials.

• Information Collected During Your Stay. During your stay at the Hotel, we may collect additional Personal Data, including:

• Details of services and products purchased;
• Preferences such as language, dietary restrictions, and religious or cultural requirements;
• Health-related information (e.g., allergies or sensitivities) that you voluntarily provide to improve your experience;
• Recordings of calls with our reception desk and room service center (for training, quality assurance, and service improvement purposes);
• Information regarding your use of in‑room entertainment systems or third‑party platforms (e.g., Netflix, YouTube) if you log into your personal accounts via the in‑room television. Please ensure that you log out of your accounts after use.
  • Application Data. If you use our App to complete online check‑in prior to arrival, we will collect the following information:
• Full name, email address, telephone number, residential address, mode of arrival (public transportation or private vehicle), estimated time of arrival, and information regarding the nature of your stay (e.g., family vacation, romantic getaway);
• Payment information if you choose to prepay for your stay (processed and stored solely by PCI‑compliant payment providers).
  • Events and Conferences. If you contact us to organize a private event or conference at the Hotel, we will collect the following information: Full name, telephone number, email address, event date, and event type.
  • Restaurant Reservations. When booking a table at our restaurant, we may collect the following information: Full name, telephone number, email address, date and time of reservation, and any dietary preferences or restrictions (if any). Please note that reservations made through the Ontopo platform are subject to Ontopo’s own Terms of Use and Privacy Policy.
  • Automatically Collected Data. When you access or use the Website or App, we may automatically collect certain technical and usage information, including, but not limited to, your Internet Protocol (IP) address, browser type, operating system, pages visited, duration of visits to each page, and other related data. This information is collected through cookies and similar tracking technologies, as further detailed in our separate Cookie Policy.
  • Data Received from Third Parties. We may obtain Personal Data about you from third‑parties, such as travel agents, booking platforms, or corporate partners. We may combine such data with other Personal Data collected directly from you. Any such Personal Data received from third parties will be incorporated into our customer database and processed in accordance with the terms of this Privacy Policy.
  • Contact and Correspondence. When you use the “Contact Us” form available on our Website, you will be required to provide certain information, including your full name, telephone number, and email address. Additionally, you will also be required to enter your inquiry or message in the designated text box. Please be advised that any information submitted in this text box will be transmitted to us as is. Therefore, we kindly ask that you provide only the information necessary for handling your request. Should you choose to include Personal Data relating to yourself (or to any third party) in this text box, you hereby acknowledge and agree (or confirm that you have obtained the relevant individual’s consent) to our collection, processing, and use of such Personal Data in accordance with this Privacy Policy. The foregoing shall apply, mutatis mutandis, to any other method of communication you may use to contact us, including but not limited to email correspondence or communications via our official social media channels.
  • Call Recordings. Telephone calls received by the Hotel’s call center may be recorded for purposes of quality assurance, employee training, and service enhancement. Please note that any information disclosed during such calls will be recorded and stored by us. Accordingly, we kindly request that you share only information necessary for handling your inquiry. If you choose to disclose Personal Data about yourself (or about others) during the call, you hereby acknowledge and agree (or confirm that you have obtained the consent of the relevant individual) to our collection, processing, and use of such Personal Data in accordance with this Privacy Policy.
  • CCTV Cameras and Electronic Key Cards. We use CCTV cameras in public areas of the Hotel (e.g., lobby, corridors) to ensure the safety and security of guests, staff, and property. Additionally, we collect and process data obtained from electronic key cards issued to guests, including room entry times and access to designated restricted areas accessible exclusively through the use of such key cards.
  • Tzuba Club Membership. We operate a guest loyalty program (the “Tzuba Club”). In order to enroll in the Tzuba Club, you must provide your full name, telephone number, email address, and month of birth. By completing the membership registration process, you expressly consent to receive marketing communications from us, subject to the provisions of Section ‎5 below.
  • Photos and Social Media. By tagging or mentioning our official social media accounts (e.g., on Instagram or Facebook), you hereby grant us a non-exclusive, royalty-free, worldwide, perpetual, and irrevocable license to repost, share, display, reproduce, or otherwise use the tagged or mentioned content on our official channels and platforms.
  • Supplier Information. When engaging with suppliers or service providers, we may collect Personal Data relating to their representatives (where the supplier or service provider is a legal entity) or directly from the supplier or service provider (where the supplier or service provider is an individual). Such Personal Data may include, without limitation, the individual’s full name, contact information, place of employment, professional qualifications and background, and identification number. The provision of this information is voluntary; however, failure to provide the requested information may result in the Company being unable to establish or continue the business relationship with the supplier or service provider.

4. PURPOSES OF PROCESSING PERSONAL DATA

We process Personal Data collected from or about you solely in accordance with this Privacy Policy and applicable data protection laws. The processing of your Personal Data is carried out for the following purposes:

• Operation and Maintenance of our Website and App. To enable your access to and use of the Website and App, to operate, monitor, and maintain their functionality, to ensure their proper performance, to identify and resolve technical issues, and to continuously improve and develop them.
• Provision of Services. We use your Personal Data to provide the Services offered by the Hotel, including facilitating room reservations, managing bookings, and supplying information about our Services. Additionally, we process Personal Data to personalize and tailor our Services to your preferences and to request feedback about your experience at the Hotel.
• Business Operations and Development. To operate and manage our business activities, enhance the quality of our Services (including through our call center and reception desk), develop new products and offerings, identify usage trends and visitor patterns on the Website and App, evaluate the effectiveness of our advertising campaigns, assess the performance of third parties acting on our behalf (such as travel agencies and booking engines), and forecast hotel occupancy rates.
• Customer Relations and Operational Communications. To facilitate communications with you regarding your reservations, inquiries, or requests; to provide timely updates, notifications, and information regarding our Services, Terms of Use, or this Privacy Policy; and to send you operational messages such as booking confirmations, service updates, or other administrative communications.
• Marketing and Direct Communications. The contact information you provide upon registration for the Tzuba Club (as detailed in Section ‎‎11 above) may be used, subject to your explicit consent, to send you marketing communications and promotional materials, in accordance with the provisions of the Israeli Communications Law (Telecommunications and Broadcasting), 5742‑1982, and to send you direct mailings in accordance with the Protection of Privacy Law, 5741‑1981.

You may unsubscribe from marketing and/or direct mailing lists at any time by clicking the unsubscribe link included in each message or by contacting us using the details provided in Section ‎‎12 below.

Please note that even after unsubscribing, we may continue to send you messages that we are legally required or permitted to send without your consent.

• Safety and Security. To ensure the safety and security of you, other guests, visitors, suppliers, and Hotel employees during your stay at our premises.
• Information Security and Fraud Prevention. To maintain the security and integrity of our systems and data, detect, prevent, and investigate fraud, misuse, or any other unlawful or unauthorized activity.
• Disclosure to Third Parties. We may share Personal Data with third parties as described in Section ‎5 below, when necessary for the operation of our business or the provision of our Services.
• Creation of Aggregated, Anonymous, or Statistical Data to analyze trends, generate statistical insights, and develop, improve, and tailor our Services and those of third parties with whom we engage.
• Compliance with Legal and Regulatory Obligations. To comply with applicable legal, regulatory, and governmental requirements, including responding to lawful requests, court orders, or regulatory investigations.
• Establishment, Exercise, and Defense of Legal Rights. We may process personal data as necessary to protect, establish, exercise, or defend our legal rights, interests, operations, property, and security, as well as those of our guests, employees, and third parties. This includes, without limitation, asserting or defending against legal claims, seeking legal remedies, and mitigating or preventing potential damages or liabilities.

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

We may disclose or otherwise transfer your Personal Data to third parties, whether located in Israel or in other jurisdictions (including jurisdictions that may not provide the same level of data protection under Israeli law):

• Service Providers. We may share Personal Data with third‑party service providers who assist us in operating and managing our business and Services, including the Website, the App, and the Booking Engine. Such providers may include information technology (IT) and cloud storage providers, as well as professional advisors such as legal counsel, auditors, and insurers. These third parties are granted access to Personal Data solely for the purpose of performing services on our behalf.
• External Booking Platforms. You may book rooms at the Hotel through third‑party booking platforms (e.g., Booking.com, Hotels.com) or reserve tables at the Hotel restaurant via Ontopo. Please note that your use of these platforms is subject to their respective Terms of Use and Privacy Policies. In certain circumstances, including in the event of a dispute, we may share relevant Personal Data with the platform through which your reservation was made.
• Authorized Representatives and Travel Agents. We may disclose Personal Data to third parties acting on your behalf, such as your travel agent, employer, assistant, spouse, or any other duly authorized representative, solely to the extent necessary to facilitate the processing of your reservation or to provide you with our Services.
• Affiliated Entities. We may disclose Personal Data to our affiliated entities, as such entities may be from time to time, including Kibbutz Tzuba, Tzuba Winery Ltd., and Tzuba Chocolate Farm Ltd.. Such disclosure may also occur in connection with other services offered by us that are not governed by this Policy (including, for example, Kiftzuba).
• Corporate Transactions. In the event of a merger, acquisition, reorganization, sale, transfer, or assignment of our business, assets, or shares (in whole or in part), or in the context of bankruptcy or liquidation proceedings, Personal Data may be transferred to the acquiring or successor entity as part of such a transaction, including in the context of negotiations leading up to such transactions.
• Legal and Regulatory Compliance. We may disclose Personal Data to competent authorities, regulators, or courts when required by law, regulation, judicial order, or governmental request, or when such disclosure is necessary to comply with our legal obligations.
• Legal Proceedings and Enforcement of Rights. We may disclose Personal Data to the extent necessary to investigate, establish, exercise, or defend against legal claims, or in connection with actual or potential legal proceedings involving you, the Hotel, or any third party, including for the purpose of enforcing our Terms of Use or any other contractual or legal rights.
• Data Analytics and Marketing Partners. We may disclose Personal Data to third-party analytics, marketing, and advertising service providers who assist us in enhancing, optimizing, and personalizing our Services, marketing campaigns, and overall user experience.
• With Your Consent. We may disclose your Personal Data to third parties in any manner that is consistent with, and subject to, your explicit consent.

Note: The disclosure or transfer of Personal Data to third parties is limited to the purposes set forth in this Policy and only to the extent we, in our sole discretion, deem necessary. Notwithstanding the foregoing, nothing in this Section shall be construed to restrict or limit our right to disclose, transfer, or otherwise use aggregated or anonymized data that does not personally identify you.

6. HOW DO WE KEEP YOUR PERSONAL DATA SECURE?
   • We implement industry‑standard information security measures to protect the Personal Data in our possession, in accordance with applicable laws and regulations. These measures include, among others, technical, organizational, and physical safeguards designed to maintain confidentiality, privacy, and prevent unauthorized access to or use of Personal Data. We periodically review and update these mechanisms to ensure their continued effectiveness.
   • While we make reasonable efforts to protect your Personal Data, the transmission of information over the Internet and its storage on cloud-based servers can never be completely secure. You therefore acknowledge and agree that we cannot guarantee the absolute protection of Personal Data collected about you, nor can we ensure that unauthorized access, disclosure, alteration, or loss will never occur.
   • Payment transactions are processed securely through third‑party payment providers that comply with the Payment Card Industry Data Security Standard (PCI DSS), which are solely responsible for securing your payment details in accordance with their respective terms of use and privacy policies. The Hotel has no control over the information security practices of such payment providers and shall not be liable for any direct or indirect damage or loss of any kind arising from or related to the payment processing.

7. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
   • Retention Period. As a general rule, we retain your Personal Data for as long as necessary to fulfill the purposes described in this Privacy Policy or for a longer period if permitted and/or required by applicable law.
   • Backup Data. Information stored in backup systems may be retained for longer periods of time.
   • Non‑Identifiable Data. Anonymized or aggregated data that does not identify you personally may be retained indefinitely, unless prohibited by law.

8. WHAT RIGHTS DO YOU HAVE REGARDING YOUR PERSONAL DATA?

You have the right to request access to the Personal Data we retain in our databases and to request that we update, correct, or delete any information that is inaccurate, incomplete, unclear, or out-of-date, subject to applicable law.
To exercise your rights, you may contact us using the contact details provided in Section ‎‎12 below.

9. LINKS TO THIRD‑PARTY WEBSITES AND PLATFORMS

The Website and the App may contain links to external websites or platforms operated by third parties. Once you click on such a link and are redirected to a third‑party website or platform, we have no control over or responsibility for the information transferred to or collected by that third party, nor over the way such information is used.
We strongly recommend that you carefully review the terms of use and privacy policy of any third‑party website or platform you visit.

10. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy from time to time, at our sole discretion and without obligation to provide prior or subsequent notice.
Any updates will take effect upon publication of the revised Privacy Policy on the Website and/or the App, with the date of the latest revision indicated at the top of this document. We encourage you to review this Policy periodically. Your continued use of the Website, the App, or the Services after any modification or update to these terms shall be deemed to constitute your acceptance of such revised terms.

11. GOVERNING LAW AND JURISDICTION

This Privacy Policy and any dispute arising out of or in connection with it shall be governed by and construed in accordance with the laws of the State of Israel.
The competent courts of the Jerusalem District shall have exclusive jurisdiction over any such dispute.

12. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data, please contact us by email: avil@tzuba.co.il.

13. DATA CONTROLLER DETAILS

Data Controller: Tzuba Tourism Agricultural Cooperative Society Ltd. 570043984

Phone: +972‑2‑5347000

Fax: +972‑2‑5347665

Email: hotel@tzuba.co.il

Postal Address: Kibbutz Tzuba, D.N. Judean Hills 90870000, Israel