Privacy Policy

1. Introduction

Ben Yehuda 98 TLV Ltd. (Company No. 515533065), operators of Scarlet Hotel ("the Hotel", "we", "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13) and the Privacy Protection Regulations (Data Security), 5777-2017.

2. Information We Collect

We may collect the following types of information:

2.1 Information You Provide Directly:

• Personal Details: Full name, ID/passport number, date of birth
• Contact Information: Email address, phone number, address
• Payment Details: Credit card information (encrypted and secured)
• Booking Details: Stay dates, room preferences, special requests
• Communication Preferences: Marketing communication preferences

2.2 Information Collected Automatically:

• Technical Information: IP address, browser type, operating system
• Cookies: Website usage information (see Section 8)
• Browsing Data: Pages viewed, time spent on site

3. Purpose of Data Use

We use the collected information for the following purposes:

• Processing reservations and providing accommodation services
• Communicating with guests regarding bookings and services
• Improving our service and website user experience
• Sending marketing communications (subject to explicit consent)
• Compliance with legal and regulatory requirements
• Fraud prevention and data security
• Statistical analysis and service improvement

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing reservations and providing accommodation
• Consent: Sending marketing materials, using non-essential cookies
• Legitimate Interest: Service improvement, fraud prevention
• Legal Obligation: Record keeping for tax and regulatory purposes

5. Third-Party Data Sharing

In providing our services, we may share your personal data with the following third parties:

All above providers are bound by confidentiality and data security agreements, and use the data only for the purpose for which it was provided.

Other Parties:

• Legal Authorities: When required by law or court order
• Professional Advisors: Lawyers, accountants - subject to professional confidentiality

6. International Data Transfer

In accordance with the Privacy Protection Regulations (Transfer of Data to Databases Outside of the State Boundaries), 5761-2001, we ensure that all international data transfers are conducted by one of the following means:

• To countries with privacy protection levels similar to Israel
• Subject to contractual agreements ensuring adequate data protection
• With your explicit consent

Our website and systems may be hosted on cloud servers of companies such as Vercel, AWS, or Google Cloud, located in Europe and the USA. These companies comply with international security standards (SOC 2, ISO 27001).

7. Data Retention Period

We retain your personal data for the period required for the purposes for which it was collected, or as required by law:

At the end of the retention period, the data will be deleted or anonymized in a way that cannot be restored.

8. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your computer.

Types of Cookies:

• Essential Cookies: Necessary for website operation - cannot be disabled
• Analytics Cookies: For website usage analysis (Google Analytics) - can be refused
• Marketing Cookies: For personalized advertising - can be refused

9. Your Rights

Under the Israeli Privacy Protection Law (including Amendment 13), you have the following rights:

• Right of Access: To view your personal data held by us
• Right to Rectification: To correct inaccurate or incomplete data
• Right to Erasure: To request deletion of data (subject to legal obligations)
• Right to Object: To object to processing for direct marketing purposes
• Right to Portability: To receive a copy of your data in a common format
• Right to Unsubscribe: To remove yourself from mailing lists at any time

10. Data Security

We implement advanced security measures to protect your personal data:

• Encryption: All data transfer is conducted via HTTPS/TLS 1.2 protocol or higher
• Data Encryption: Payment details are encrypted to PCI-DSS standards
• Access Control: Data access is limited to authorized personnel only
• Backups: Regular encrypted backups
• Security Audits: Periodic security scans

11. Data Deletion Mechanism

Upon receiving a data deletion request, we proceed as follows:

• The request is reviewed and verified within 7 business days
• Data is deleted from website systems
• Data is automatically deleted from CRM system (Noovy) via API sync
• Removal from mailing lists is immediate
• You will receive written confirmation of deletion completion

* Data required by law (invoices, guest registration) will be retained for the required period even after deletion request.

12. Contact Us

For any privacy-related questions or requests, please contact us:

13. Filing a Complaint

If you believe your rights under the Privacy Protection Law have been violated, you may file a complaint with:

14. Policy Updates

We may update this policy from time to time. In case of material changes, we will notify you via a notice on the website or by email. We recommend reviewing this policy periodically. The last update date appears at the top of this document.