Privacy Policy
Introduction and Notice (Transparency Notice)
This Privacy Policy is intended to fulfill the duty of notification under the Protection of Privacy Law, 5741–1981, the Protection of Privacy Regulations, and Amendment No. 13 (2025).
This policy explains how the Dr. Yigal Balan Clinic (“the Clinic” / “the Company”) collects, stores, uses and secures personal and sensitive information provided by website users.
1. Types of Information Collected and Definition of Sensitive Information
1.1 Personally Identifiable Information
When completing forms on the website, you may provide information such as:
• Full name
• Phone number
• Email address
• Additional details that you choose to provide voluntarily
1.2 Sensitive Information (Sensitive Data — Amendment 13 Requirement)
When contacting us for information or medical treatment, you may provide information considered “sensitive information” under the law, including:
• Details about your health
• Medical history descriptions
• Genetic or biometric data (if collected as part of treatment)
This information is processed solely for the purpose of providing medical care and is stored in secure systems at the highest security level required by law.
1.3 Non-Identifying Information (Automatic)
When using the website, data such as the following is collected:
• IP address
• Browser data
• Website activity
• Cookies and similar technologies
This information does not personally identify you.
2. Purposes of Use and Legal Basis for Processing Information
Information is processed only in accordance with the following legal bases:
| Legal Basis (Amendment 13) | Purpose of Use |
| Explicit consent | Marketing communications, analysis of information not essential to treatment, and retention of contact details in order to contact you. |
| Legal / contractual obligation | Medical treatment, retention of medical records, retention of invoices, and compliance with the Patient’s Rights Law. |
| Legitimate interest | Information security, website improvement, fraud prevention, and production of statistical data. |
3. Transfer of Information to Third Parties and Outside Israel
3.1 Transfer to Service Providers
Your information will be transferred only to parties required to operate the service, such as:
• Computing and hosting services
• CRM systems
• Email services
• Billing and accounting
All providers are required to comply with the Information Security Regulations and Amendment 13.
3.2 Transfer of Data Abroad
Analytics tools and internet services (such as Google Analytics, CDN services, etc.) may result in data being processed in other countries, including the United States and the European Union.
Such transfers are subject to contractual security mechanisms and the requirements of Amendment 13.
3.3 Prohibition on Providing Information for Marketing Purposes
The Clinic will not sell or transfer personal information to third parties for marketing purposes without your explicit consent.
4. User Rights Under the Law
Under Amendment 13, you have the following rights:
• Right of access — to receive a copy of the information stored about you.
• Right to rectification — to request correction of inaccurate information.
• Right to erasure — to request deletion of data (except medical/accounting information that must be retained by law).
• Right to restrict processing — to request limitations on certain uses.
• Right to object to processing / withdraw consent — particularly regarding direct marketing.
To exercise these rights, contact:
balanigal@gmail.com
5. Officer Responsible for Compliance with the Protection of Privacy Law (Compliance Officer / Data Protection Officer)
Name of officer: Dr. Yigal Balan
Email: balanigal@gmail.com
The officer is authorized to handle inquiries concerning privacy, information security and the exercise of data subject rights.
6. Minors and Special Populations
The Clinic does not collect information from children under the age of 18 without the explicit approval of a parent/guardian.
If such information is identified, it will be deleted.
7. Option to File a Complaint with the Privacy Protection Authority
If you believe your privacy has been violated, you may file a complaint with the Privacy Protection Authority:
https://www.gov.il/he/departments/the_privacy_protection_authority
8. Information Retention and Policy Updates
8.1 Information Security
The Clinic employs stringent technological and organizational measures, including:
• Encryption
• Authorization controls
• Controlled access management
• Secure backups
• Active monitoring
8.2 Policy Updates
The Clinic may amend this policy from time to time.
Material changes will be published on the website.
Last updated: 2025