Privacy Policy

Introduction
Signal Tours Group Ltd., including all companies within the group (including “EasyGo” and “Carmel Tourism Services”) (hereinafter: the “Group”, “Signal” and/or the “Company”), thanks you for choosing to use its services. Your privacy is important to us.
The purpose of this Privacy Policy is to present, in a transparent and clear manner, how the Company, as the controller of information databases, collects, uses, processes, shares, stores, and protects personal data provided by you or on your behalf for the purpose of receiving the services offered by the Group.
This Policy describes the Group’s practices regarding information collected either through direct contact with the Group’s companies or through the use of the Group’s digital assets, including websites, applications, and other digital services.
________________________________________
Legal Framework
This Policy describes how the Company operates with respect to “Information” as defined in the Israeli Protection of Privacy Law, 1981, and the regulations enacted thereunder (collectively: the “Law”), and in accordance with the principles of the GDPR.
________________________________________
Consent
Use of the Company’s websites, services, or the provision of personal data to the Company constitutes your consent to this Privacy Policy.
Use of the website is subject to the Terms of Use published on the website.
Prior to using the website, you are requested to carefully read this Policy and the Terms of Use, which together constitute a binding legal agreement.
For convenience only, this Policy is written in the masculine form; it refers to all genders equally and is not intended to create any discrimination.
________________________________________
1. Information Collection
Voluntarily Provided Personal Information
Signal Tours does not proactively collect personally identifiable information about you (such as name, address, telephone number, or email address) (“Personal Information”) unless you voluntarily choose to provide it in order to receive services.
You are not legally obligated to provide personal details. Providing such information is subject to your free will and consent. However, providing incorrect or incomplete details may prevent completion of registration, limit the use of certain services, affect service quality, or impair our ability to contact you if necessary.
A. Personal Information Required for the Provision of Services (Directly or via Employers)
If you receive travel and tourism services from us (as an employee of a corporate client or as an individual), we collect personal information for one or more of the purposes listed below.
Collected information may include, inter alia:
• Full name, physical address, and email address
• Telephone numbers and employer name
• Passport number, gender, and date of birth
• Credit card details
• Travel details (departure and arrival locations, airlines, hotels, car rentals)
You may also choose to provide additional information, such as frequent traveler details, emergency contact details, or other sensitive information required to provide customized services, including accessibility needs or special meal requirements.
________________________________________
2. Automatically Collected Information (Cookies and Third-Party Services)
While browsing the website or using the Company’s digital assets, the Company may automatically collect information using technologies such as cookies, web beacons, and commonly used analytics tools.
Types of automatically collected information include:
• Browser and device data: IP address, browser type, operating system, device type (desktop/mobile), screen resolution, and language preferences
• Website usage data: Pages viewed, duration of visits, actions taken on the site, and navigation paths
• General technical data: Referring URL and system performance
• Aggregated data: Statistical data that does not identify individual users
You may prevent such data collection by adjusting the settings of your internet browser.
________________________________________
3. Information Regarding Minors
The Signal Group does not collect personal information from children under the age of 13 unless the booking is made by a parent. Minors under the age of 13 are not permitted to provide personal information without parental consent.
________________________________________
4. Purposes of Processing Personal Information
Personal information is collected and processed by Signal for the following purposes:
Services and Contract Performance
• Processing customer inquiries and requests
• Making bookings for services, processing payments, issuing invoices, and providing customer support
• Enabling proper access to and use of the website, online operations, and booking systems
• Providing services requested by customers
• Contacting users or customers when necessary
Management and Communication
• Documentation of activities, customer management, handling inquiries, and required communications
Improvement and Development
• Customizing user experience, measuring website performance, improving content, and developing new services
• Collecting and analyzing anonymous or aggregated data for service improvement and business management
Enforcement of Terms of Use
Information Security and Legal Compliance
• Protecting information systems and ensuring system integrity, including identifying, preventing, and handling cyber threats, fraud attempts, technical failures, and security incidents, in accordance with legal requirements
• Compliance with legal, regulatory, or operational obligations, including responding to competent authorities when required
Direct Marketing
The Company does not engage in direct marketing services and does not sell or rent personal information to third parties for marketing purposes. Subject to your consent, the Company may send updates and offers regarding its services. Such consent may be withdrawn at any time.
________________________________________
5. Limitation of Liability
Despite the Company’s efforts to reduce the risk of unauthorized access, data exposure, or damage, absolute security of information systems cannot be guaranteed. The Company does not warrant that information will be fully immune from unauthorized access.
Users are advised to take basic security measures on the devices used to access the website, such as strong passwords or biometric identification, antivirus software, and regular security updates.
________________________________________
6. Transfer of Information to Third Parties
The Company may transfer personal information to third parties for the purpose of providing services and fulfilling the processing purposes detailed in this Policy, all in accordance with applicable law.
Information may be transferred, inter alia, to:
• Tourism service providers: Airlines, hotels, visa and passport service providers, ticketing systems
• Technology service providers: IT services, hosting, marketing, website and system service providers, and communications providers
• Payment processing providers: External clearing and payment processors for secure transactions
• Employers: When services are purchased through an employer, reports including travel details and accounting information may be provided to the contracting party
• Law enforcement and authorities: Where required by court order, legal obligation, or when necessary to protect the Company or users (including prevention of damage, fraud, or security threats)
International Data Transfers
Personal information may be transferred to countries outside Israel (such as China, India, or Japan) when required for service provision or operation of the Group’s systems and digital assets, even if such countries do not provide a level of data protection equivalent to that of Israel or the European Union.
All transfers are carried out proportionately, for a specific and lawful purpose only, and in accordance with the principle of data minimization.
________________________________________
7. Data Subject Rights (Access and Correction)
In accordance with the Law, data subjects are entitled to exercise the following rights:
Right of Access and Correction
Any individual is entitled to review personal information about them held in the Company’s databases. If the information is found to be incorrect, incomplete, unclear, or outdated, the individual may request that it be corrected.
How to Exercise Your Rights
Requests must be submitted in writing to Signal Tours via email:
dpo@signaltours.com
The request must include full identification details and contact information.
Handling of Requests
The Company will respond within 30 days of receipt of the request, in accordance with legal requirements. If a correction request is denied, a reasoned response will be provided, and the data subject may file a claim with the competent court in accordance with applicable regulations.
________________________________________
8. Updates to the Policy and Contact Information
Signal Tours may update this Privacy Policy from time to time at its sole discretion, in response to changes in legal or business requirements. Material changes will be published on the website prior to their entry into force.
________________________________________
9. Questions and Inquiries
For any questions or comments regarding Signal Tours’ Privacy Policy, please contact us at:
Email: dpo@signaltours.com
Email subject line: “Privacy Policy”