Privacy policy

Last updated: TO BE COMPLETED: date of publication

1. Who is responsible

The controller for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is:

Tamir Hitman
TO BE COMPLETED: full postal address
Email: tamirbiolay@gmail.com

TO BE COMPLETED: state whether a data protection officer has been appointed; most sole practitioners are not required to appoint one, and a line saying so is sufficient

2. The short version

This is a small professional website. It runs no advertising, no tracking, no analytics and no social media plugins. Its fonts are served from its own server rather than from Google, so no data is sent to Google when you read a page. The only things processed are the technical records your browser creates when it requests a page, and anything you choose to write in an email.

3. Server log files

When you open a page, the hosting provider automatically records information that your browser transmits. This typically includes the page requested, the date and time, the amount of data transferred, the referring page, your browser type and version, your operating system, and your IP address.

Purpose: delivering the website, keeping it secure and stable, and detecting misuse.
Legal basis: Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the site.
Retention: TO BE COMPLETED: confirm the log retention period with the hosting provider, commonly 7 to 30 days
This data is not merged with other sources and is not used to identify you personally.

4. Hosting

This website is hosted by TO BE COMPLETED: hosting provider name, company form and full address

The hosting provider processes the data described above on our behalf under a data processing agreement in accordance with Article 28 GDPR.

TO BE COMPLETED: if the hosting provider stores data outside the EU or EEA, name the country and the transfer safeguard used, for example EU standard contractual clauses

5. Cookies and local storage

This website sets no advertising or analytics cookies. When you make a choice in the cookie banner, that choice is saved in your browser's local storage under the key th_consent_v1 so that you are not asked again on every page. It stays in your browser, is never transmitted to us, and expires after twelve months.

Legal basis: storing your consent decision is strictly necessary to provide the service you requested. Any optional category you switch on is processed on the basis of your consent under Article 6(1)(a) GDPR, which you can withdraw at any time through cookie settings. Withdrawal does not affect the lawfulness of processing carried out beforehand. Full detail is in the cookie policy.

6. Fonts

The typefaces used on this site (Instrument Serif and Inter, both under the SIL Open Font License) are stored on this website's own server and loaded from there. No connection is made to Google Fonts or to any other external font service, and your IP address is therefore not transmitted to a third party for this purpose.

7. Contacting us by email

If you write to the email address published on this site, your message, your email address and any details you include are processed in order to answer you.

Legal basis: Article 6(1)(b) GDPR where your message relates to a contract or to steps taken before entering into one, otherwise Article 6(1)(f) GDPR, the legitimate interest in responding to enquiries.
Retention: messages are kept as long as needed to deal with the matter, and longer only where a statutory retention period applies. You may ask for deletion at any time.

Please note that email is not an encrypted channel unless both sides use encryption. Do not send sensitive information by email without arranging a secure route first.

8. External links

Some pages link to external sites, for example LinkedIn. Following such a link takes you to a service with its own privacy practices, over which we have no control. Nothing is transmitted to those services until you click the link.

9. Transfers outside the EEA

The controller is based in Israel. Israel is recognised by the European Commission as providing an adequate level of data protection under Article 45 GDPR, so no additional transfer safeguards are required for data reaching the controller.

TO BE COMPLETED: if any processor is located outside the EEA in a country without an adequacy decision, name it and the safeguard relied on

10. Your rights

Under the GDPR you have the right to:

• request confirmation of whether your data is processed, and a copy of it (Article 15)
• have inaccurate data corrected (Article 16)
• have data erased (Article 17)
• have processing restricted (Article 18)
• receive your data in a portable format (Article 20)
• object to processing based on legitimate interests (Article 21)
• withdraw consent at any time, with effect for the future (Article 7(3))

To exercise any of these, write to the email address in section 1. You also have the right to lodge a complaint with a data protection supervisory authority, normally the one in the EU or EEA country where you live or work.

11. Is providing data required?

No. You are not obliged to provide any personal data to read this website. The technical data in section 3 is created automatically by the exchange between your browser and the server and cannot be avoided while still delivering a page.

12. Changes to this policy

This policy will be updated whenever the site changes in a way that affects it. The date at the top shows when it was last revised.