Privacy Policy

1. Database owner and contact details

1.1. The controller of the database is esy, business ID 029020914, of 62 Ya'ar Alonim St., Tel Mond.

1.2. esy has not appointed a privacy protection officer. The duty to appoint one under amendment 13 to the Protection of Privacy Law attaches to public bodies, to data brokers whose main occupation is supplying personal data to others, and to the processing of personal data about a large number of people. esy is a placement agency: it holds data on a scale well below that threshold, and it transfers a candidate's details to one named client for one named role, with that candidate's agreement, rather than trading in data. esy keeps this position under review and will publish an appointment here if its activity changes.

1.3. Privacy matters, including any request under section 11 below, are handled by Einat Shachar Yatziv: [email protected] · 050-2204177.

2. Notice on providing information

2.1. There is no legal obligation to provide information. Information is provided voluntarily and with consent.

2.2. The information is stored in the esy database and used for the purposes set out in section 4 below.

2.3. The information may be disclosed to third parties as set out in section 6 below.

3. Categories of information collected

Candidates: name, contact details, CV, education, work experience, skills, salary expectations, references, and any further information the candidate chooses to provide.

Client representatives: name, role, business contact details.

Site visitors: IP address, browser and device type, pages viewed, referral source, and usage data collected through cookies.

Information we do not ask for: do not provide esy with information about health, political or religious affiliation, ethnic origin, sexual orientation, or criminal record. Such information, if provided on the candidate's initiative, will be deleted and will not be used in the assessment process.

4. Purposes of processing

• assessing the match between candidates and roles;
• approaching candidates with employment opportunities;
• transferring an application to a client, with consent;
• providing platform services to clients;
• improving the service, statistical analysis, and quality control;
• marketing communications, with consent;
• compliance with legal obligations.

5. Cookies

The Site sets one strictly necessary cookie, named locale, which remembers whether you are reading in Hebrew or English. It carries no identifier and is not used to profile you.

The Site sets no analytics, advertising, or tracking cookies. To count visits, the Site uses Cloudflare Web Analytics, which records the page viewed, the referring page, and the browser and device type. It sets no cookies and does not identify you or follow you across other sites. Because the only cookie is strictly necessary, no consent banner is required. You can block cookies in your browser settings; the Site will then forget your language choice between visits.

6. Disclosure to third parties

6.1. Information is disclosed to prospective clients only with the candidate's consent to the specific approach, or in accordance with general consent given in advance.

6.2. esy uses service providers that hold information on its behalf: Google Cloud Platform (servers in Israel, region me-west1), including file storage in Google Cloud Storage; Brevo, Mailgun and Postmark for sending and receiving email, and the Meta WhatsApp Cloud API for messages; language model providers, namely Anthropic and Google (Gemini); Cloudflare Turnstile for bot protection; and Cloudflare Web Analytics for counting visits to the Site. The recruitment system itself is operated by esy on the hosting described above and is not a third-party product. A contractual arrangement governing information security obligations and permitted use is put in place with each holder, as required by law.

6.3. Information will be disclosed to a competent authority where required by law or by court order.

7. Transfer of information outside Israel

Some service providers operate outside Israel, including in the United States. Such transfers are made in accordance with the Protection of Privacy Regulations (Transfer of Information to Databases Abroad), 5761-2001, and subject to an appropriate contractual arrangement.

8. Use of artificial intelligence

8.1. CVs are processed automatically to extract structured data and to rank suitability.

8.2. The CV itself is sent to the model provider in full for the extraction step. This is unavoidable: reading the document is what identifies the name, the phone number and the email address in the first place. The providers are named in section 6.2.

8.3. Once a CV has been read, direct personal identifiers (name, phone, email, ID number, address) are removed by an automated mechanism before the text is used for any further automated step — suitability scoring, similarity search, and written summaries all run on the stripped text. The removal is automated and thorough, but it is not guaranteed to catch an identifier written in an unusual form.

8.4. esy engages model providers on terms that prohibit use of the information to train their models.

8.5. Ranking output is stored as a field alongside the candidate record and does not constitute a final decision.

8.6. The CV analysis tools offered on this Site send the CV you provide to the providers named in section 6.2 for the purpose of producing the analysis you asked for. They do not add you to the candidate database.

9. Information security

9.1. esy applies security measures in accordance with the Protection of Privacy (Information Security) Regulations, 5777-2017, including encryption in transit and at rest, permission-based access control, logical separation between client data, access logging, periodic security scans, and vulnerability management.

9.2. A serious security incident will be reported to the Privacy Protection Authority and to the relevant data subjects in accordance with the reporting obligations under the law.

9.3. Nothing in the above guarantees absolute immunity from unauthorized intrusion.

10. Retention periods

• CV of a candidate who was not placed: 24 months from the date of last contact, unless removal was requested earlier;
• information on a placed candidate: seven years, for reporting and accounting purposes;
• browsing data: 12 months;
• information required to be retained by law: for the period prescribed by law.

At the end of the period, the information is deleted or anonymized.

11. Data subject rights

11.1. Right of access (section 13 of the Protection of Privacy Law): any person is entitled to review, personally or through a representative, the information held about them in the esy database. An access request is answered within 30 days of receipt.

11.2. Right to correction or deletion (section 14 of the Law): a person who finds that information about them is incorrect, incomplete, unclear, or out of date may ask esy to correct or delete it. If esy grants the request, it notifies everyone who received the information from it of the correction.

11.3. Refusal of a request: if esy refuses an access or correction request, it provides written reasons, and the applicant may appeal to the Magistrates Court in the manner and within the time prescribed by the regulations.

11.4. Removal from marketing: you may request removal from the mailing list at any time.

11.5. Withdrawal of consent: you may withdraw consent to the retention of your CV in the database. Withdrawal does not affect the lawfulness of processing carried out before it.

11.6. Requests regarding these rights: [email protected].

11.7. A data subject may lodge a complaint with the Privacy Protection Authority.

12. Minors

The service is not intended for anyone under the age of 16. The provision of information by a minor requires the consent of a guardian.

13. Changes to this policy

esy may update this policy. A material update will be published on the Site and, where necessary, sent by notice to data subjects.

14. Language

This English text is a translation provided for convenience. In the event of any discrepancy, the Hebrew version prevails.

Contact us

For any question regarding this privacy policy, contact us: [email protected] · 050-2204177. See also our terms of use.