Privacy Policy
The University of Haifa is an organization dedicated to conducting research and academic teaching. To promote these goals, the university maintains a variety of databases containing personal information about students, employees, suppliers, and research subjects (hereinafter: “data subjects”).
This document defines the university’s policy regarding the protection of the privacy of data subjects and contains a commitment to uphold this policy. The document outlines the university’s stance on the privacy of data subjects and how the organization uses the information provided by them, recognizing the social importance of privacy protection as required by the laws of the State of Israel, particularly the Israeli Privacy Protection Law, 1981, and its regulations.
As part of protecting the privacy of data subjects (as defined in the Privacy Protection and Information Security Policy Procedure), the university commits to doing everything required by law to safeguard data subjects. This includes, but is not limited to:
- Appointing officials to carry out the purposes of the law.
- Collecting and processing personal information legally and fairly, only with the consent of the data subject or from lawful sources.
- Processing information solely for the purposes for which it was provided by the data subjects.
- Not transferring personal information to third parties without the consent of the data subject, except in cases where it is required by law. However, the university declares that it uses outsourcing services for routine operations, in which case the supplier acts as an operational arm of the university. The university implements various controls on the outsourcing supplier to ensure compliance with this declaration.
- Transparency – the university will inform data subjects about the purposes of the information collected and notify them of the rights granted to them by law.
- The university grants data subjects the right to object to the use of their information for direct marketing purposes.
- The university maintains the confidentiality of personal information and implements technological and organizational mechanisms to prevent its loss, harm to its integrity, unauthorized access, or unlawful alteration. Sensitive information will be protected by medium or high levels of security depending on the context (as defined by law), and access to it will require appropriate identification and/or authentication processes.
- The university implements organizational processes to encompass the responsibility of the organization, its managers, employees, and service providers it works with – to adhere to the policy and principles defined in the Privacy Protection and Information Security Policy Procedure document.
- In research involving personal information, preference will be given to storing the information anonymously or in encrypted form so that identification of the data subjects is not possible. The identification key will be kept separate from the data.
Anyone wishing to contact the privacy officer regarding the matters detailed in this document may do so in writing at the email address: PRIVACY-OFFICER@UNIV.HAIFA.AC.IL
This document constitutes a summary of the University of Haifa’s Privacy Protection Policy document and should not be considered a substitute for the full procedure (Privacy Protection and Information Security Policy Procedure No. 10-16).