Pumas Rugby Athletic Club – Israel
Version 1.0 – Effective Date: May 5, 2025
1. Introduction
This Policy governs the processing of personal data in accordance with the Privacy Protection Law, 5741-1981 (PPL), its Information Security Regulations 5777-2017, and the EU General Data Protection Regulation (GDPR).
2. Data Controller
The data controller is Pumas Rugby Athletic Club, domiciled in Israel. You can contact us via email at pumasrugbyac@gmail.com.
If the database is registered with the Privacy Protection Authority (PPA), the registration number will be indicated.
3. Data Collected
We may collect:
- Contact data: name, address, phone, email.
- Technical data: IP address, browser type, operating system.
- Transaction data: purchase history, payments, memberships.
- Images and recordings: taken during official activities.
- Data of minors: only with parental authorization.
4. Purpose of Processing
The data is used for:
- Providing the Club's services.
- Sending communications and newsletters (with prior consent).
- Administrative and accounting management.
- Compliance with legal obligations.
- Fraud prevention and security.
5. Legal Basis
PPL: Articles 8 and 11 regarding data collection and use.
GDPR: Article 6 (consent, contract, legal obligation, legitimate interest).
6. Cookies and Third-Party Tools
We use technical and analytical cookies. The User can configure them from their browser. The use of Google Analytics and Facebook Pixel complies with the privacy policies of those providers.
7. Data Retention
Data will be retained for the time necessary to fulfill the purpose for which it was collected, and for the periods required by law (e.g., 7 years for accounting data under Israeli tax law).
8. User Rights
The User may exercise the following rights:
- Access and copy of their data.
- Rectification of incorrect data.
- Erasure (“right to be forgotten”).
- Restriction of or opposition to processing.
- Portability (in applicable GDPR cases).
Requests should be sent to 📧 info@pumasrugbyac.com, attaching an identity document.
9. International Transfers
If data is transferred outside of Israel, it will be done in accordance with the Privacy Protection (Transfer of Data Abroad) Regulations 5761-2001 and Chapter V of the GDPR.
10. Information Security
We apply physical, administrative, and technological measures in accordance with the Information Security Regulations (basic, medium, or high level depending on the database classification).
11. Minors
We do not intentionally collect data from minors without the consent of a parent or guardian. Parents can request the deletion of their children's data.
12. Changes to the Policy
The Club may modify this Policy at any time. Updated versions will be available on the Site.