Privacy policy

1. General

Windman Ltd. (the “Company” or “we”) is committed to protecting the privacy of users of the conference website. This policy explains what information we collect, for what purposes, and what your rights are under the Israeli Privacy Protection Law, 5741-1981, and the Privacy Protection (Data Security) Regulations, 5777-2017.

2. Information we collect

• Identifying information: full name, email, phone number, organization/company, job title.
• National ID number: collected only from users who request it for entry / membership in the Association of Engineers. Stored encrypted (AES-256-GCM).
• Dietary information / sensitivities: collected for catering orders only. It is not cross-referenced with public identity and is deleted after the conference.
• Payment information: credit card details are not stored on our servers. Payment is processed by an authorized PCI-DSS provider.
• Technical information: IP address, browser type and activity on the site — for security and analytics purposes.

3. Purposes of processing

• Producing entry badges and issuing order confirmations.
• Operational communication about the conference (changes, reminders, instructions).
• Issuing an invoice/receipt to the participant or to the company that paid.
• Securing the venue and managing risk.
• Marketing emails — only if the user has explicitly agreed; you can unsubscribe at any time using the link in every email.

4. Sharing information with third parties

We will not sell or transfer your information to third parties, except in the following cases: service providers (payment processing — Cardcom, storage — Cloudflare R2, email — Postmark/Brevo, error monitoring — Sentry), who are bound by confidentiality agreements; an order from a lawful authority; protecting the Company’s rights in the event of a breach.

5. Cookies

The site uses only essential cookies, to manage the login session and protect against CSRF. We do not use third-party marketing cookies (Facebook Pixel, Google Ads, etc.) without explicit consent.

6. Data retention period

• Order and invoice details: 7 years, as required by tax law.
• National ID numbers: up to 60 days after the conference.
• Dietary and sensitivity data: up to 14 days after the conference.
• Technical information: up to 12 months.

7. User rights

Under the Privacy Protection Law, you have the right to review the information held about you, to request its correction or its deletion (to the extent this does not conflict with a legal obligation), and to object to its use for direct marketing. You can contact us at:

ciso@windman.co.il

8. Information security

The information is stored on cloud servers with encryption at rest and in transit (TLS 1.2+). Access to the system is granted only to authorized employees under strong authentication. We have carried out a risk assessment in accordance with the Data Security Regulations and have a channel for reporting security incidents. To report: privacy@windman.co.il.

9. Changes to this policy

We may update this policy from time to time. The current version will be published on this page. Continued use after a change constitutes consent.