The Principles of Privacy Protection at TAU. Photo by John Schnobrich on Unsplash
The University will collect personal data and process it, while abiding by the law and relevant rules, according to ethical principles of research, and other University regulations, with preference for collection of anonymous data, according to the circumstances, and to the extent possible.
Collection and processing of personal data will be conducted with fairness, in respect of the rights of the data subjects, with transparency, and for accomplishing legitimate and legal purposes related to the University’s activity, as well for its efficient and proper management, and to an extent no greater than is required to achieve these purposes.
University units and all University employees in the framework of their positions, are required to avoid violating a person's privacy without his or her consent. In case of doubt, the employee will refer to his or her superiors for instructions, and if required, the superiors will seek the opinion of the DPO as per this regulation, for the purpose of reviewing the issue and providing suitable instructions.
Purposes of collection and processing of personal data
The personal data collected and processed by the University and on its behalf will serve it for these purposes:
For the purpose of approaching and providing appropriate information for candidates and their registration as students in various study programs; management of all aspects of students' studies, and contact with alumni;
For the purpose of research in any field of knowledge and by any valid method of scientific research, including collection of personal data, its processing, whether in an identifiable manner or not, and retaining the data as per the research needs;
For the purpose of managing the University, including human resources management of all personnel, meeting contractual agreements with donors and other third parties, and with respect to activity of those who are not students or people working with the University or on its grounds;
For the purpose of abiding by the instructions of the Law, court orders and certified authorities.
For any other appropriate purpose, with the data subject’s consent.
Personal data collected for one purpose will not be used for another purpose unless by consent of the data subject, or on the basis of another purpose among those specified in this section, which permits such use.
Obligations of the University
The University will act with respect to privacy and data protection in accordance with the instructions of the law and regulations of research foundations, which apply to its activity, according to the circumstances.
The University will use personal data collected only for an appropriate purpose in accordance with this regulation.
The University will receive the consent of the data subject in advance, subject to the instructions of the law regarding the collection of personal data and its intended processing, will notify the subjects whether there is a legal obligation to provide the data, and whether the personal data will be transferred to another party. The notice will also include information regarding rights of a data subject related to the personal data about him or her.
The University will not transfer personal data collected to third parties unless the data subject consents, or if it is required or permitted by the instructions of any law, and subject to this regulation.
The University is bound to acting to protect the confidentiality of personal data and its security according to the kind of data, its sensitivity and magnitude, and as is customary in the field of information security.
