Last Updated: 28.1.2026

 

Welcome to the Ono Academic College website (“The College,” “We,” “Us,” or “Our”). The College respects your privacy and is committed to protecting the personal information you share with us while using the College’s website, digital systems, platforms, and online services, including systems used for projects, ventures, dedicated learning programs, and digital services directed at the user community (collectively: “The Digital Assets”).

 

This Privacy Policy is intended to explain how the College collects, uses, and manages the personal information provided to it when you browse the Digital Assets, fill out digital forms, register for events or conferences, leave details on landing pages, apply for studies, register for studies, make online payments (including registration fees and tuition), use systems and portals, contact us through various communication channels such as email, telephone, or WhatsApp, or visit the campuses (collectively: “The Services”), all in accordance with the Protection of Privacy Law, 5741-1981 (“Protection of Privacy Law”) and the regulations thereunder. To the extent that the European General Data Protection Regulation (GDPR) applies to you – please see the detailed information in the chapter referring to the GDPR [Section 14]. This Privacy Policy applies to any person who makes use of the Services.

 

Please note: You are under no legal obligation to provide personal information, but without providing it, we may not be able to provide the requested Services, or part of them. Use of the Services constitutes consent to this policy; if you do not agree to it, please refrain from using the website or transferring personal information to us.

 

“Personal Information” – data relating to an identified or identifiable individual, as defined in the Protection of Privacy Law; for example: name, ID number, biometric identifier, location data, online identifier, or one or more factors specific to the physical, health, economic, social, or cultural identity of a person.

 

*The policy is formulated in the masculine third person for convenience but is intended for all genders. *For provisions under the scope of the GDPR, please see section 14.

 

1.Data Controller and Data Protection Officer

The College serves as the “Data Controller” of the database and regarding the personal information in accordance with applicable privacy laws, including the provisions of the GDPR. Address: 1 Ha-Akademit Ave., Kiryat Ono, Savyon Junction. Tel: 03-5311888.

 

Data Protection Officer (DPO): You may contact the College’s Data Protection Officer with any questions or requests regarding privacy and the exercise of rights by sending an email to: dpo@ono.ac.il

 

2.Information Collected by Us

Within the framework of using the Services, various types of personal information about you may be collected, divided into two main categories:

 

2.1. Personal Information Provided by You The College collects personal information provided at your initiative to the College or anyone on its behalf (e.g., through online forms, contact requests, registration for conferences and events, interest in studies, and submission of study applications), including, but not limited to:

 

Identification and contact details, such as full name, email address, telephone number, residential address, and additional contact information;

 

General demographic details, such as gender, residential address, and preferred language;

 

Details related to academic interest and academic education, including requested fields of study, study programs, years of study, certificates, etc.;

 

Registration details for studies, events, conferences, webinars, or extra-academic courses, including registration records, photos, and recordings of events/conferences, etc.;

 

Information provided within the framework of inquiries, surveys, correspondence, or communication with the College via various media such as phone calls, email, online forms, correspondence, WhatsApp, etc. (including recordings for control, training, and process improvement purposes);

 

Security camera (CCTV) footage and monitoring upon entry to the College, parking lots, and during visits to the campuses, in accordance with the security camera procedures;

 

Any other information you choose to share with us within your communication with the College.

 

2.2. Information Collected by Automated Means When using some of the College’s Services, information about you is collected automatically, such as usage and browsing data, pages viewed, entry and exit times, duration of stay in the service, device identifiers and technical data, IP address, information collected through Cookies and similar technologies, etc., for the purposes of operating the services, security, statistics, usage analysis, improving user experience, and personalizing content. This information is collected using technological and statistical tools, including analytics services and measurement and marketing tools. For more information, please see the Cookie Policy below.

 

3.Purposes of Using the Information

The personal information collected by the College is used, among other things, for the following purposes:

 

Provision of Academic Services and Ongoing Operation – In connection with the Services provided by the College or on its behalf, including managing admission and registration procedures, providing academic and administrative services, and providing information about study programs, courses, events, conferences, and other College activities.

 

Management of Programs, Clinics, Courses, and Events – Organizing and operating academic and extra-academic courses, therapeutic clinics, and research activities, conferences, events, programs, initiatives, and projects, including registration, participation management, contact with participants, activity, and control.

 

Management of Contact and Communication with College Audiences – Handling inquiries and providing responses to interested parties, guests, students, and alumni, including academic and administrative advice, ongoing contact management, and follow-up on inquiries via various communication media (such as phone, email, WhatsApp, etc.), and handling requests for the exercise of rights regarding information, as necessary.

 

Managing Login to the Personal Area via the Website – Logging into personal areas and dedicated systems for staff, applicants, and students, their operation, and technical support.

 

Improvement of Services, Teaching, and Research – Conducting surveys and/or analyzing statistical data, producing aggregate or anonymous data for the purpose of improving Services and managing the College or the user experience in the Services, planning, and internal control.

 

Direct Mailing, Updates, and Communication – Sending information and updates, marketing, and advertising of College services, subject to the provisions of the law and required consents. Sending content may be carried out via any means of communication, including email, text messages, social networks, and other means (including with the assistance of third parties). You are entitled at any time to request your removal from the mailing list by contacting: marketing@ono.ac.il or by clicking the unsubscribe link in the message itself.

 

Marketing – Including analysis of user profiles on the website for the purpose of marketing products, including but not limited to the Internet.

 

Compliance with Legal Provisions, Regulatory Requirements, and Legal Defense – Fulfilling legal obligations, reporting to competent authorities (including the Council for Higher Education), responding to court orders, requirements, and enforcement, as well as management and legal defense against lawsuits, demands, and claims.

 

Information Security and System Protection – Maintaining the security of information systems in the Services, identifying users, preventing fraud and misuse, enforcing internal procedures and regulations, and protecting the College’s intellectual property rights.

 

Lawful Documentation including Recordings – Recording, documenting, and using recordings of classes, webinars, conferences, and online activities in accordance with the academic and organizational purposes of the College.

 

Security, Safety, and Public Order – Maintaining public safety and security, securing College facilities, and maintaining public order within its boundaries, including through the use of security cameras and monitoring means in accordance with the provisions of the law.

 

Prevention or Taking Measures against Activities that are, or may be, in violation of our terms of use or applicable law, including protection against harm to the rights, property, or safety of the University, our users, or the public, as required or permitted by any law.

 

We may Anonymize personal information for said purposes, including for research, statistics, and analysis and processing services.

 

4.Artificial Intelligence (AI)

The College may make use of and be assisted by Artificial Intelligence tools for the purpose of streamlining processes, improving Services, and the ongoing operation of the systems, subject to the provisions of the law and in accordance with the purposes of using the information detailed in this policy. Additionally, certain information may also be used for the purpose of improving and training our AI systems, in accordance with the provisions of the law. The use of these technologies is intended to improve services, streamline processes, and provide you with a personalized customer experience, while maintaining information security and protecting your privacy.

 

5.Sharing Information with Third Parties and Transfer of Information Abroad

Within the framework of providing the Services, we may share personal information about you with third parties for the purposes detailed above and subject to the protection measures required by law, as follows:

 

Service Providers and Subcontractors – Transferring information to parties in Israel and abroad that provide the College with operational, technological, administrative, and/or professional services, such as computing and cloud service providers, information systems, mailing and communication systems, marketing and direct mailing, analytics tools, etc. These parties process the information for the College and according to its instructions only, subject to data processing agreements and information security requirements by law.

 

Authorities and Competent Bodies – Transferring information to state authorities, regulatory bodies, enforcement authorities, courts, or any other competent body, insofar as the College is obligated to do so by law, court order, or legal requirement. Specifically, according to the Protection of Privacy Regulations (Conditions for Holding and Storing Data and Procedures for Transferring Data between Public Bodies), 5746-1986, the College may be required to share personal information with the Council for Higher Education, the National Insurance Institute, and additional public bodies, according to authority established by law.

 

Enforcement, Protection, and Management of Legal Proceedings – Transferring information to the extent required for the purpose of exercising the College’s rights, enforcing regulations and agreements, handling claims, preventing fraud or misuse, maintaining information security, and protecting the rights, property, or safety of the College, users, or the public.

 

By Consent or Request of the Data Subject – Transferring information to additional third parties, subject to your explicit consent or request, and to the extent required to fulfill that request.

 

Organizational Changes – In the event of a structural change in the College, including a merger, transfer, organizational change, or transfer of activity to another entity, personal information may be transferred as part of the process, subject to the continued applicability of this Privacy Policy even after the change.

 

Personal information may be stored or processed using cloud servers or systems located outside of Israel. Such transfer of information will be carried out in accordance with the provisions of the law, while taking appropriate protection measures to ensure the privacy of data subjects and information security.

 

6.Information Security

The College attaches great importance to the protection of personal information and implements accepted organizational, administrative, and technological information security measures, in order to ensure the security, confidentiality, integrity, and availability of the information and in accordance with the provisions of the law.

 

Despite taking such security measures, it is impossible to guarantee absolute immunity of information systems. We recommend that you keep your username and password confidential and not transfer them to others.

 

7.Data Retention

The College keeps personal information only for the duration required for the purpose of fulfilling the purposes for which it was collected as detailed in this policy, or for a period required by law or permitted by law. Information retention periods are determined, among other things, according to the type of information, the nature of the engagement with the data subject, legal and regulatory requirements, and legitimate institutional needs. Statistical/aggregate information that is not identified may be kept, among other things, for research, analysis, and statistical purposes, without time limitation.

 

8.Rights of Data Subjects

8.1 In accordance with the Protection of Privacy Law, every person is entitled to review the personal information held about them in the College’s databases, and to request its correction or deletion if it is found upon review to be incorrect, incomplete, or not up to date. The College will examine the request and act in accordance with the provisions of the law. When exercising your rights, we may request identity verification in order to verify your eligibility. Requests to exercise such rights shall be submitted in writing to the Data Protection Officer via email: dpo@ono.ac.il

 

8.2 If the information in the College’s databases is used for the purpose of personal solicitation to you, based on your affiliation with a population group determined by one or more characteristics of persons whose names are included in the database (“Direct Mailing”), you are entitled under the Protection of Privacy Law to demand in writing that the information relating to you be deleted from the database used for such solicitations, by sending an email to: marketing@ono.ac.il. Information required for the purpose of managing its business, including documentation of commercial and other actions performed in the Services, will continue to be kept in the College’s databases by law, but will no longer be used for direct mailing solicitations as stated.

 

9.External Links

The website and Services may include links to websites, social networks, applications, or online services of third parties, for the convenience of users or within the framework of academic, public, or informational activity. The College is not responsible for the privacy policy, terms of use, content, or the manner of collection and processing of personal information carried out on these external websites or services, and use of them is at the user’s responsibility only. It is recommended to review the privacy policy and terms of use of any external website or service before providing personal information or using it.

 

10.Cookie Policy

Cookies are alphanumeric identifiers transferred to your device and stored in it through your web browser for documentation purposes. Certain cookies facilitate your navigation on the website, while other cookies enable a faster login process or allow tracking of your actions on the website and Services. For the purpose of this policy, the term “Cookies” also includes similar technologies, such as Pixel Tags, Web Beacons, or other digital identifiers.

 

During your visit to the Services, information may be collected through cookies, according to the settings you choose and in accordance with the provisions of the law. The College uses cookies for the purpose of operating the services, improving user experience, usage analysis, and content personalization. These files may collect your device’s identification data, its IP address, the type of device from which you browsed, the type of operating system and its version, or any other information regarding your use of the services, as part of the analytical information they provide us, such as pages you visited, the duration of stay on the website, where you arrived at the website from, sections and information you request to see upon entering the website, and more. Cookies assist, among other things, in collecting statistical data on the use of the website, to adapt the services to your personal preferences and information security needs, improve their efficiency and our marketing activities.

 

Additionally, messages sent by the College via digital means, including email, may include technological measurement means for the purpose of analyzing interaction with the content (such as opening messages or clicking links).

 

Types of Cookies used:

 

First-party and Third-party Cookies – Some cookies are placed by the College and some by external service providers providing analytical, advertising, or technological tools.

 

Necessary Cookies – These cookies are required for the proper functioning of part of the services and cannot be canceled. They enable access to the service, navigation between pages, and use of basic functions.

 

Functional Cookies – Cookies that enable saving user preferences, such as language or display settings, for the purpose of improving the experience of using the service.

 

Analytics and Performance Cookies – Cookies used to collect aggregate statistical information on the manner of use of the service (such as pages viewed, duration of stay), for the purpose of analyzing and improving the performance of the service and the digital services.

 

Advertising and Marketing Cookies – Third-party cookies (e.g., Meta, Google), used to display personalized content and information, to measure the effectiveness of advertising campaigns, and to reduce the display of repetitive content, subject to user consent. The cookies allow us to learn the response of users to our advertisements; improve our offers; know how you discovered our websites; provide behavioral advertising on the Internet, including displaying advertisements for services that may interest you based on your previous behavior; display targeted advertisements and content on social media platforms; send you content based on your profile and interests; and enable sharing our content on social media.

 

Managing and Limiting Cookies You can manage cookie preferences at any time through your browser settings or using the cookie consent management tool appearing at the bottom of the screen in the corner at all times. Existing cookies can be deleted or new cookies blocked; however, it should be noted that blocking certain cookies may harm the functionality of some of the services or the usage experience.

 

11.Updates and Changes to the Privacy Policy

Ono Academic College may update this Privacy Policy from time to time. Substantial updates to the policy will be published on the main College website, stating the update date, and will enter into effect from the date of their publication, unless stated otherwise. Continued use of the Services after the publication of the update constitutes consent to the updated version of the policy. It is recommended to review the Privacy Policy from time to time in order to stay updated on changes, if any.

 

12.Jurisdiction

The exclusive jurisdiction in any dispute regarding this Privacy Policy, its interpretation, or its application is granted to the competent courts in the Tel Aviv-Yafo District, Israel only.

 

13.Contact Us

For any inquiry and/or clarification regarding this policy, you may contact via email: dpo@ono.ac.il. We will endeavor to respond to any inquiry as soon as possible.

 

14.Special Provisions regarding the European General Data Protection Regulation (GDPR)

Insofar as the European GDPR applies to you, the following provisions will also apply to you:

 

14.1. Legal Basis for Processing Personal Information Processing of information is carried out on the basis of one or more of the legal bases established in the GDPR regulations, and according to the nature of the relevant engagement and activity, as follows:

 

Consent – When your explicit consent was given to process personal information for a specific purpose, such as receiving mailing, using non-essential cookies, or participating in a voluntary activity, etc.

 

Engagement or Performance of a Contract with You – When processing of information is required for the purpose of handling an inquiry, registration, candidacy, or for the purpose of engaging in our contract with you for providing academic or administrative services, or steps before engaging in such a contract.

 

Legal Obligation – When processing of information is required for the purpose of compliance with legal provisions applicable to the College, including compliance with a legal or regulatory obligation, including a legal proceeding, demand from a competent authority, reporting, or data retention.

 

Legitimate Interest – When processing of information is required for the purpose of ongoing management of the College’s activities, operation of systems, improvement of services, information security, prevention of misuse of services and violation of terms of use or applicable law, and management of contact with interested parties and target audiences, provided that these interests do not override the rights and freedoms of data subjects.

 

14.2. Transfer of Information outside of the European Union The College’s databases are stored in the State of Israel, and the information may be transferred to third parties as detailed in Section 5 above. Insofar as personal information of data subjects located within the boundaries of the European Union or the European Economic Area (EEA) is transferred, stored, or processed outside the boundaries of the European Union, the College takes appropriate measures to ensure an adequate level of protection for the information, in accordance with the provisions of the GDPR. Transfer of information outside the European Union may be carried out, among other things, within the framework of using cloud computing services, information systems, technological service providers, or professional parties operating outside the Union. In such cases, the College relies on one or more of the following protection mechanisms, as applicable:

 

An Adequacy Decision of the European Commission, including recognition of the State of Israel as a country providing an adequate level of protection for personal information;

 

Appropriate Contractual Obligations, including use of Standard Contractual Clauses approved by the European Commission, as required;

 

Technical and organizational Supplementary Measures, as necessary, to ensure a substantive level of protection for the information.

 

14.3. Rights of Data Subjects under the GDPR Insofar as the processing of information about you is subject to the provisions of the GDPR, you have the following rights, subject to and in accordance with the provisions and exceptions established by law:

 

Right of Access – The right to receive access to the personal information collected by us about you.

 

Right to Rectification, Erasure, or Restriction of Processing – The right to request correction or completion of personal information that is inaccurate or incomplete, the right to request erasure of personal information, or restriction of its processing.

 

Right to Data Portability – The right to receive the personal information provided by you in a structured, commonly used, and machine-readable format, as well as to request its transfer to another party, insofar as this is technically possible and upon fulfillment of the conditions established by law.

 

Right to Object to Processing – The right to object to the processing of personal information, in certain cases.

 

Right to Withdraw Consent – Insofar as the processing is based on consent, consent can be withdrawn at any time, without harming the legality of the processing carried out before the withdrawal.

 

Right to Lodge a Complaint with a Supervisory Authority – The right to lodge a complaint with the competent data protection authority in your country of residence in the European Union.

 

Insofar as you wish to receive additional information, exercise one of said rights, or receive specific clarification regarding the personal information concerning you and its processing, you may contact the College’s Data Protection Officer at the email address: dpo@ono.ac.il

 

When exercising your rights, we may request identity verification in order to verify your eligibility.