This is a convenience translation. The Hebrew version is the binding version. Read the Hebrew version (עברית)

Privacy policy

Note: This document is a basic draft text and does not constitute legal advice.

We respect your privacy and are committed to protecting the personal information that you give us or that is collected in the course of your use of the website. This policy explains what information is collected, for which purposes it is used, with whom it may be shared, and the rights you have under the law. Use of the website constitutes agreement to the terms of this policy.

This policy is written in the masculine form for convenience only, and is addressed to all genders alike. Any reference in the singular also refers to the plural, and vice versa.

1. Who we are

This website serves to present a mineral water brand of Greek origin, Kostilatas, and to enable contact with interested parties and customers.

• Name of the importer or operator responsible for the website: BARA IMPORTERS LTD, company no. 515537801
• Address: 7 Yitzhak Rabin St., Kadima-Zoran, postal code 4282300
• Name of the original manufacturer: Kostilatas Springs SA, Epirus, Greece
• Website address: https://kostilatas.co.il

For the purposes of the privacy protection laws, the party that manages the information and is responsible for it (the database controller) is BARA IMPORTERS LTD.

2. Types of information collected

We collect two main types of information.

2.1 Information you provide on your own initiative

When you fill in a contact form, contact us by e-mail or sign up to receive updates, we may collect the following details:

• Full name
• Telephone number
• E-mail address
• The content of the message or inquiry you submitted
• Additional details that you choose to provide on your own initiative

2.2 Information collected automatically

While you browse the website, basic technical information may be collected automatically at the level of the hosting infrastructure (server logs of the hosting provider Netlify). Under the law applicable in Israel, these details may be considered personal information:

• Internet Protocol address (IP address)
• Browser type and device type
• Times of access and the pages requested

In addition, if you have given explicit consent to this in the preferences banner, the website operates usage measurement using Google Analytics 4, which collects statistical usage data (pages viewed, visit duration, device and browser type, source of arrival and interactions on the website). Without consent, the measurement service is not loaded at all. The website does not operate any advertising or cross-site tracking tools.

We act according to the principle of data minimization and collect only the information necessary for the purposes detailed in this policy. The website is not intended for the collection of sensitive information, and we avoid collecting such information unnecessarily.

3. Purposes of using the information

We use the information for defined purposes only. Each purpose has a separate legal basis, and the information will not be used for a purpose that was not disclosed in advance:

• Responding to an inquiry and getting back in touch with those who contact us through the contact form or by e-mail. Basis: your consent and the need to maintain the contact you initiated.
• Managing inquiries and leads and following up on interested parties. Basis: the legitimate interest in managing the business relationship.
• Improving the website and the user experience by means of aggregate usage data collected by the Google Analytics 4 measurement service, which is operated only with your explicit consent. Basis: your consent, which may be withdrawn at any time.
• Mailing and direct marketing, to the extent that explicit and separate consent is given for it. Basis: your consent, which may be withdrawn at any time.
• Compliance with legal obligations and keeping records required by law. Basis: a legal obligation.

4. Cookies and tracking technologies

Without any action on your part, only essential preferences are kept in your browser's local storage (localStorage): the accessibility preferences you chose and the preferences-choice flag. This data is kept on your device only and is not used to identify you. If you chose "Accept measurement" in the preferences banner, the Google Analytics 4 measurement service is also operated, which sets first-party measurement cookies (with names beginning with _ga); the measurement data is kept by Google for a period of up to 14 months. The website does not use advertising cookies or cross-site tracking cookies.

You may delete this data at any time through your browser settings (clearing site data). For detailed information, see the website's cookie policy.

5. Disclosure of information to third parties

We do not sell your personal information. However, for the purpose of operating the website and providing the service, the information may be accessible to the following providers, subject to their commitment to confidentiality and to compliance with the requirements of the law:

• Netlify, Inc. - the hosting provider of the website and the receiver of the forms submitted on it. Details provided in the contact form are processed and stored on Netlify's infrastructure, whose servers are located outside Israel.
• Google LLC - the provider of the Google Analytics 4 measurement service, which is operated with your consent only. The statistical usage data is processed on Google's infrastructure, whose servers may be located outside Israel.
• Technical service providers and sub-processors acting on our behalf, to the extent required for operating the website.

As of the date this policy was updated, apart from the consent-based measurement service described above, the website has no third-party advertising, mailing or CRM services. If such services are operated in the future, this policy will be updated accordingly.

Information may also be disclosed when required by law, a court order or an instruction of a competent authority, or in order to defend our legal rights.

6. Transfer of information outside Israel

The website is hosted on Netlify's infrastructure, whose servers operate outside the borders of Israel, and therefore information provided on the website may be stored and processed in other countries. We act to ensure that any such transfer is carried out in accordance with Israeli law, including the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, and while taking appropriate measures to protect the information.

7. Information security and retention

We take reasonable technical and organizational security measures to protect the information against unauthorized access, use or disclosure, in accordance with the Protection of Privacy Regulations (Data Security), 5777-2017. At the same time, we cannot guarantee absolute immunity, and it cannot be guaranteed that the information will be completely protected against intrusion.

We keep the information for the time necessary to fulfil the purposes for which it was collected, or for the period required by law, and thereafter we will delete it or prevent access to it. Subject to the law, a distinction will be made between different categories of information with regard to the retention period.

In the event of a serious security incident, we will act in accordance with the reporting obligations that apply to us toward the Privacy Protection Authority, and in appropriate cases also toward the data subjects concerned.

8. Your rights regarding the information

Under the Protection of Privacy Law, 5741-1981, and in accordance with Amendment 13 to the law, you have the following rights:

• Right of access: to receive information on whether information about you is kept and to inspect it.
• Right of correction: to request the correction of information that is incorrect, incomplete, unclear or not up to date.
• Right of deletion: to request the deletion of the information, subject to the exceptions set out in the law.
• Withdrawal of consent: to cancel your consent to the use of the information, including for mailing and marketing, at any time and as easily as it was given.

To exercise these rights, please contact us at the details listed in the section "Contact regarding privacy". We will try to respond to your inquiry within a reasonable period of time and in accordance with the deadlines set by law.

9. Information about minors

The website is not intended for minors and does not address them, and we do not knowingly collect information from minors. The provision of information by a minor under the age of 18 requires the consent of a guardian. A parent or guardian who identifies that a minor provided information on the website is invited to contact us with a request to delete it, and we will act to delete the information promptly.

10. Visitors from outside Israel and residents of the European Union

To the extent that the website is accessible to residents of the European Union, the provisions of the EU General Data Protection Regulation (GDPR) may also apply to them. In addition to the rights detailed above, residents of the Union are entitled to the right to object to processing, to restrict processing, to receive the information they provided in a structured and portable format (data portability), and to clarify the legal basis for the processing of their information. The processing of information will be carried out on the basis of consent, performance of a contract, a legal obligation or a legitimate interest, as the case may be. For inquiries on this matter, the contact channels detailed in this policy may be used.

11. Changes to the policy

We may update this policy from time to time, in accordance with changes in the operation of the website or in the requirements of the law. The updated version will be published on this page, and the date of the latest update will be stated below. Continued use of the website after an update constitutes agreement to the updated version.

12. Contact regarding privacy

For any question, request or inquiry regarding this policy or the exercise of your rights, you may contact us:

• Party responsible for privacy inquiries: BARA IMPORTERS LTD
• E-mail: info@kostilatas.co.il
• Telephone: 03-5117074
• Postal address: 7 Yitzhak Rabin St., Kadima-Zoran, postal code 4282300

If, after contacting us, you believe that your rights have not been upheld, you have the right to file a complaint with the Privacy Protection Authority at the Ministry of Justice.

13. Governing law and jurisdiction

This policy and anything arising from it shall be governed solely by the laws of the State of Israel. The exclusive jurisdiction in any matter relating to this policy is vested in the competent courts in the Central District.

Date of last update: 12 July 2026