:Languages
04-6722351
Last updated: 19 October 2026
1.1 Astoria Hotels Ltd., company number 510494602, of 13 Bruria Street, Tiberias, operates the Astoria Galilee Hotel (the “Hotel”, “we” or “us”). We respect your privacy. This Privacy Policy explains what personal information we collect when you use www.astoria.co.il (the “Website”), why we use it, with whom we share it, how long we retain it, and what rights you have. The Hotel is the controller of the database in which the information is stored, in accordance with the Protection of Privacy Law, 5741–1981 (the “Privacy Law”).
1.2 Terms not defined in this Privacy Policy have the meanings given to them in the Website Terms and Conditions (the “Terms”).
1.3 Bookings through Simple Booking. Room bookings made through the Website are processed through the Simple Booking booking engine, which is operated by an external provider. This Privacy Policy applies to information collected on the Hotel’s Website. Information provided during the booking process is also processed through Simple Booking and the relevant payment providers, in accordance with their applicable privacy policies and the terms presented during booking.
1.4 References to either masculine or feminine language are for convenience only and apply to all genders.
You are not legally required to provide personal information. Providing it is voluntary and based on your choice and consent. If you choose not to provide certain details, we may be unable to contact you, enroll you in the loyalty club, or provide a particular service. Browsing the Website itself does not require you to provide personal information.
3.1 Contacting us. When you contact us through the “Contact Us” form, by telephone, email or WhatsApp, we collect your name, telephone number, email address, the content of your inquiry, and any other details you choose to provide, such as requested stay dates or the composition of your party.
3.2 Loyalty club. When you join the loyalty club, we collect your name, telephone number, email address, postal address, birthday or anniversary, hospitality preferences, and any comments you choose to add. We request your birthday or anniversary to provide a tailored benefit. Providing it is optional.
3.3 Medical or accessibility needs. If you choose to tell us about a medical or accessibility need, or a dietary preference, so that we can adapt your stay, we will use that information only for this purpose. We will share it only with staff who need it to provide the service.
3.4 Information collected automatically. When you browse the Website, technical information is collected, including your IP address, device type, browser and operating system, pages visited, visit duration, referral source (such as an advertisement or search engine), and actions you take on the Website, such as clicking the booking button. This information is collected through cookies and similar technologies, as described in section 8.
3.5 Payment Processing. Payment services may process payments by credit card, bank transfer or other available methods. The information necessary to complete a transaction is shared only with the financial intermediaries involved in processing it. Payment service providers may send scheduled communications, including invoices and payment notifications. If PayPal is available, the types of information collected depend on the payment method and transaction and are described in PayPal’s privacy policy.
We use information only as needed for the following purposes:
(a) Responding to inquiries, coordinating bookings and preparing for your stay at the Hotel;
(b) Operating the loyalty club and providing benefits to its members;
(c) Sending updates, offers and promotions, only if you have expressly consented. You may withdraw your consent at any time, as described in section 9;
(d) Operating and securing the Website and preventing misuse, including filtering automated inquiries (spam);
(e) Measuring and improving the Website and services, and understanding which advertising channels generate inquiries and bookings;
(f) Showing relevant advertisements on websites and social networks, including creating lookalike audiences, subject to the cookie settings you selected;
(g) Complying with legal obligations, including maintaining guest and accounting records, and handling claims and disputes.
We will not use information for another purpose without informing you and obtaining your consent where required by law. We do not sell personal information.
5.1 Within the Hotel. Only employees who need information for their duties, such as reservations, reception, marketing and management staff, may access it. All employees are bound by confidentiality obligations.
5.2 Service Providers. The Hotel engages external providers in connection with the operation of the Website, booking services and related services. Each provider receives only the information necessary to perform its services, subject to the applicable agreements and law. Provider categories and the types of information processed may include:
| Provider type | Purpose | Information that may be shared |
|---|---|---|
| Website development, hosting and maintenance | Operation of the Website and its forms | Information submitted through Website forms and technical information - Simply Smart LTD. |
| Booking engine (Simple Booking) and its support team | Processing and managing direct bookings | Booking details and contact information. Payment details are processed by the booking engine and are not stored on the Website. |
| Hotel management system (PMS) | Managing rooms, bookings and stays | Guest and booking details. |
| Customer relationship management (CRM) and mailing system | Administration of the loyalty club and distribution of communications to consenting members | Name, email address, telephone number, dates provided and preferences. |
| Guest communication channels, such as WhatsApp and a digital guest assistant, where used | Responding to inquiries and providing information before arrival and during the stay | Contact details and correspondence. |
| Google Analytics, Google Tag Manager, Google Ads and Google reCAPTCHA | Measurement, advertising and spam prevention | Technical information and usage data as described in section 3.4. |
| Facebook and Instagram | Measurement and advertising | Technical information and usage data as described in section 3.4. |
| Accounting and legal advisers | Recording transactions and handling disputes | Information needed for the specific matter. |
5.3 Transfers of Information Abroad. Some providers, including Google, Meta and the booking engine, store information on servers outside Israel, including in the United States and the European Union. Transfers of information outside Israel are made in accordance with applicable law and the arrangements applicable to each provider.
5.4 Authorities and legal proceedings. We may provide information to a competent authority or court if required by law. We may also provide information when needed to protect our rights, property or guests’ safety, or in the event of suspected fraud or misuse of the Website.
5.5 Corporate changes. If the Hotel’s business is merged, sold or transferred, information may be transferred to the successor, which will be bound by this Policy.
We retain information for as long as it is needed for the purpose for which it was collected, as long as required by law (for example, for tax purposes), or as long as needed to handle a claim or dispute. Loyalty-club member details are retained until the member asks to leave the club. After that, we will delete or anonymize the information unless the law requires us to retain it.
The Website is served through an encrypted HTTPS connection. Access to information is limited to personnel who need it for their roles, and we use commonly accepted security measures in accordance with the Privacy Protection Regulations (Data Security), 5777–2017. However, no system is completely secure. If a serious security incident is discovered, we will act as required by law, including notifying the Privacy Protection Authority where required.
8.1 Cookies are small files or similar identifiers stored on or accessed from your device. The Website uses the following categories of cookies and similar technologies.
| Type | What they do | Examples |
|---|---|---|
| Essential | Necessary for Website operation and security and for remembering preferences such as language and accessibility settings. These cookies cannot be disabled. | Website cookies and Google reCAPTCHA |
| Analytics and statistics | Used to understand how visitors use the Website and to improve it. | Google Analytics 4 |
| Marketing and advertising | Used to measure the effectiveness of advertising and to display relevant advertisements on other websites and networks. | Google Ads and Meta Pixel |
8.2 Non-essential cookies are enabled according to the visitor’s selection, to the extent supported by the Website’s consent mechanism. The selection may be changed through Cookie settings link or instructions. Cookies may also be blocked or deleted through browser settings; some Website features may then not function properly.
8.3 More information about how Google uses information from websites: policies.google.com/technologies/partner-sites. For Meta advertising settings: facebook.com/adpreferences.
We will send promotional messages by email, SMS or WhatsApp only if you have expressly consented. Consent is given by checking a box that is not pre-selected, in accordance with section 30A of the Communications Law (Telecommunications and Broadcasting), 5742–1982. You may unsubscribe at any time using the unsubscribe link in a message, replying “Remove”, or contacting us using the details in section 12. Under section 17F of the Privacy Law, you may request that your information be deleted from a database used for direct mailing.
10.1 Access. Under section 13 of the Privacy Law, you may review information about you held in our database.
10.2 Correction and deletion. If information is incorrect, incomplete, unclear or outdated, you may request its correction or deletion in accordance with section 14 of the Privacy Law.
10.3 Information transferred from the European Economic Area. If the regulations concerning information transferred to Israel from the European Economic Area apply to your information, you have the rights set out in those regulations, including the right to request deletion in the circumstances provided by law. Applicability depends, among other things, on the source of the information and how it was transferred.
10.4 Send a request using the contact details in section 12. We will respond within the time limits set by law. If we refuse a request, we will explain why, and you may apply to the Magistrate’s Court in accordance with the regulations. You may also file a complaint with the Privacy Protection Authority at the Ministry of Justice.
The Website is not intended for minors under 18, and we do not knowingly collect information directly from minors. If you learn that a minor has provided us with information without the consent of a parent or guardian, please notify us and we will delete the information.
For questions, requests to access, correct or delete information, or to unsubscribe from marketing:
Astoria Hotels Ltd. – Astoria Galilee Hotel
13 Bruria Street, Tiberias
Email: hotel@astoria.co.il
Telephone: 04-6722351
Or use the “Contact Us” form on the Website.
We may update this Policy from time to time, for example when we add a new tool or service to the Website. The date at the beginning of the document indicates the latest update. A material change will also be announced prominently on the Website.