Privacy Policy

1. Introduction and who is responsible for your data

Welcome to the website of Zimbalista Gallery at zimbalista.com (the “Site”).

The Site is operated by Zimbalista’s Music Factory, Registered Association (Amuta) No. 580637940, of 36 Shivat Tsiyon St., Tel Aviv–Yafo (the “Gallery”, “we” or “us”). The Gallery is the owner and controller of the database as defined in the Protection of Privacy Law, 5741–1981.

This policy explains what personal information we collect about you, why we collect it, what we do with it, who it is shared with, how long we keep it, and how you can exercise your rights in relation to it. It is addressed to all genders; references to the singular include the plural and vice versa.

The policy applies to your use of the Site, to enquiries you send us by phone, email or social media, and to visits to our physical spaces — Zimbalista Gallery and the Dov Gallery, named after Dov Zimbalista.

Privacy contact details:
Email: privacy@zimbalista.com
Phone: +972-52-584-0569
Postal address: 36 Shivat Tsiyon St., Tel Aviv–Yafo

2. Providing information — voluntary, not required by law

You are under no legal obligation to provide us with any personal information. Any information you give us is provided of your own free will and with your consent.

However, without certain details we will not be able to provide the service you requested.
For example, without an email address we cannot reply to your enquiry, and without contact details we cannot register you for an event. Fields that are mandatory are marked as such in the Site’s forms.

You may withdraw your consent at any time, as set out in Section 10 below.

3. What information we collect

3.1 Information you provide on your own initiative

| Context | Types of information |
| Contact form / general enquiry | Full name, email, phone, content of the enquiry |
| Mailing list / newsletter sign-up | Name, email |
| Registration for an event, exhibition opening or tour | Name, email, phone, number of attendees |
| Enquiry regarding the purchase of, or interest in, an artwork | Name, contact details, details of the work, (shipping and billing details, where applicable) |
| Artist submissions / collaboration proposals | Name, contact details, portfolio or CV, if attached |
| Correspondence by email, phone or social media | Any information you choose to include in the correspondence |

Please avoid sending us sensitive information (such as medical, political or financial data) that is not required for the service you are requesting.

3.2 Information collected automatically

When you browse the Site, technical data is collected: IP address, browser and operating system type and identifier, device type, interface language, the pages you viewed, time spent, the source that referred you to the Site, and access times. Some of this data may constitute personal information under applicable law, and this policy therefore applies to it. Details on cookies appear in Section 6.

3.3 Information from third parties

If you contact us through external platforms (Facebook, Instagram, Google), we will receive the information those platforms make available to us, in accordance with their privacy policies and your privacy settings with them.

3.4 Filming and security in the gallery spaces

– Security cameras are installed in the gallery spaces for the security of the premises. Their presence is indicated by signage on site, and recordings are retained for 90 days and are then automatically deleted.
– Stills or video may be taken at events and exhibition openings, for documentation and promotion of the Gallery. Signage on site provides notice of this, and you may contact us to ask not to be included in such documentation, or to request removal of a published image.

4. Purposes of use

We use personal information solely for the purposes for which it was provided, including:

1. Responding to enquiries, requests and clarifications.
2. Maintaining relationships with interested visitors, collectors, artists and curators.
3. Registering and managing events, exhibition openings, tours and talks.
4. Handling interest in the purchase of artworks, including coordination, pricing and shipping.
5. Sending updates about exhibitions and events — subject to your consent, as set out in Section 7.
6. Operating and securing the Site, preventing misuse and identifying faults.
7. Producing aggregate statistical data and improving the user experience and the content of the Site.
8. Complying with the legal obligations that apply to us (including tax, bookkeeping and reporting obligations) and protecting our legal rights.

Purpose limitation: We will not use the information for any purpose that goes beyond those listed above, unless we have obtained your prior consent or the use is permitted or required by law.

5. Sharing information with third parties

We do not sell, rent or trade your personal information.

In order to operate the Site and the Gallery’s activity, we use service providers who act on our behalf and in accordance with our instructions. Personal information may be shared with them solely for the purposes set out in Section 4, to the extent required for the performance of their role, and subject to their undertakings of confidentiality and data security. The categories of providers who may be given access to information are:

| Type of provider | Purpose of sharing |
| Web hosting, infrastructure and technical maintenance | Operating the Site, storing data, backup and security |
| Email marketing and mailing list platforms | Sending newsletters, updates and operational messages |
| Analytics, measurement and statistics tools | Understanding usage patterns and improving the Site |
| Advertising, remarketing and campaign measurement tools | Promoting the Gallery’s activity and measuring effectiveness, where campaigns are running |
| Payment processing systems | Processing and collecting payments |
| Event registration and ticketing systems | Managing registrations for events, openings and tours |
| Shipping, packing and transport | Delivery and transport of artworks |
| Professional advisers | Legal, accounting and audit services |

As at the date this policy was last updated, our service providers include: Weiz Technologies (hosting and site maintenance), Mailchimp (email marketing), Google (analytics and advertising), Meta (advertising and measurement) and UPAY (payment processing).

The identity of the providers within each category may change from time to time, in line with operational needs and security considerations, without any change to the purposes for which the information is used or to its scope. An up-to-date list of providers will be supplied on request to the address set out in Section 1.

In addition, we will disclose personal information in the following cases:

– where required by law, by a court order or by the demand of a competent authority;
– in order to prevent fraud, harm or a breach of law, or to protect our rights, our property or the safety of others;
– in the context of a merger, restructuring or transfer of the Gallery’s activity, provided that the receiving party assumes the provisions of this policy;
– with your explicit consent.

6. Cookies and similar tracking technologies

The Site uses cookies, which are small text files stored on your device, and similar tracking technologies (pixels, measurement tags and browser local storage).

The types of cookies that may operate on the Site:

– Strictly necessary cookies — required for the proper operation and security of the Site. These cannot be disabled.
– Preference cookies — save choices you have made, including interface language (Hebrew/English).
– Performance and analytics cookies — help us understand how the Site is used and improve it, through tools such as Google Analytics.
– Marketing and advertising cookies — used to tailor advertising and measure campaign effectiveness, through tools such as the Meta Pixel and Google Ads. These cookies operate only during periods in which the Gallery is running advertising activity, and at other times they may not operate at all.

The extent to which non-essential cookies are used may change from time to time, depending on the Gallery’s activity and the tools it uses.

Managing your preferences:

– You may block or delete cookies at any time through your browser settings. Blocking cookies may impair the functioning of parts of the Site.
– You may contact us at the address set out in Section 1 to object to collection through analytics or advertising tools.
– If a dedicated cookie consent management mechanism is implemented on the Site, non-essential cookies will operate only after your consent has been given through it, and you will be able to change your choice at any time.

7. Direct marketing and promotional communications

We will send you marketing updates about exhibitions, events and the Gallery’s activity only after you have given prior, explicit consent, in accordance with Section 30A of the Communications (Telecommunications and Broadcasts) Law, 5742–1982.

– Every message will be marked as an advertisement, will state the name of the Gallery and its contact details, and will include a simple means of opting out.
– You may remove yourself from the mailing list at any time, by clicking the unsubscribe link in the message, or by writing to the email address in Section 1. Removal is free of charge and unconditional.
– Silence, or the absence of a request from you, does not constitute consent to receive marketing communications.
– Even after removal, we may continue to send you, where necessary, operational messages relating to a service you requested (for example, confirmation of registration for an event).

8. Transfer of information outside Israel

Some of our service providers (including cloud and email services) operate or store information outside Israel, including in countries where the level of privacy protection may differ from that applied in Israel.

Such transfers are carried out in accordance with the Protection of Privacy Regulations (Transfer of Information to Databases Abroad), 5761–2001, and with accepted safeguards, including contractual undertakings requiring the provider to protect the information at a level no lower than that required under Israeli law.

9. Retention periods

We retain personal information only for as long as it is required for the purpose for which it was collected:

| Type of information | Indicative retention period |
| Enquiries via the contact form | 24 months from the closing of the enquiry |
| Mailing list subscribers | Until you unsubscribe |
| Event registrations | 12 months after the event |
| Transaction documents, invoices and sales records | 7 years, under tax and bookkeeping obligations |
| CVs and artist submissions | 12 months, unless you have asked us to delete them earlier |
| Technical usage data and logs | 12 months |
| Payment method details | Not retained by us at all; held solely by the payment processor |

At the end of the period, the information is deleted or irreversibly anonymised.

10. Your rights

Subject to applicable law, you have the following rights:

– Right of access — to know whether information about you is held, and to review it (Section 13 of the Protection of Privacy Law).
– Right of rectification — to require correction of information that is incorrect, incomplete, unclear or out of date (Section 14 of the Law).
– Right of erasure — to request deletion of information, subject to the exceptions set out in law (for example, information we are required to retain for tax purposes or in order to defend against claims).
– Withdrawal of consent — to withdraw consent you have given, at any time, without affecting the lawfulness of processing carried out beforehand.
– Objection to direct marketing — to require that information about you be deleted from any database used for direct marketing.

How to exercise these rights: Contact us by email or post using the details in Section 1. We will respond to your request within 30 days of receiving it. In order to protect your privacy, we may request additional details to verify your identity.

Right to complain: If you believe your rights have been infringed, you may lodge a complaint with the Privacy Protection Authority at the Ministry of Justice.

11. Data security

We implement reasonable technical and organisational security measures in accordance with the Protection of Privacy Regulations (Data Security), 5777–2017, including: encryption of traffic (SSL/TLS), restriction of access permissions to employees and providers who require access for their role, periodic backups, ongoing security updates and system access controls.

That said, no online system is entirely immune, and we cannot undertake absolute protection against unauthorised access. In the event of a serious security incident, we will act in accordance with the reporting and notification duties set out in law.

12. Children’s privacy

The Site and the services are not intended for children under the age of 16, and we do not knowingly collect personal information about them. The provision of information relating to a minor under the age of 16 requires the consent of a guardian. If you become aware that a minor has provided us with information without such consent, please contact us and the information will be deleted.

13. Residents of the European Union and the United Kingdom

If you are located in the European Union or the United Kingdom, information about you is processed on one or more of the following legal bases: your consent; performance of a contract or steps taken prior to entering into one; a legal obligation; or the Gallery’s legitimate interest in conducting and securing its activity. In addition to the rights set out in Section 10, you have the rights to restriction of processing, data portability and objection to processing, as well as the right to lodge a complaint with the supervisory authority in your country. For enquiries on this matter: the email address set out in Section 1.

14. Links and third-party content

The Site may include links to third-party websites and services (including social networks, video players, ticket purchasing and maps). This policy does not apply to them, and we have no control over how they collect and process information. We recommend reviewing the privacy policy of each such service.

15. Changes to this policy

We may update this policy from time to time, including following legislative changes or changes to our services. The updated version will be published on this page and the date of last update will appear at the top of it. In the event of a material change, we will publish a prominent notice on the Site and will notify mailing list subscribers by email. Continued use of the Site after publication of the update constitutes acceptance of the updated version.

16. Contact us

For any question, request to exercise a right, or complaint regarding privacy:
Email: privacy@zimbalista.com
Phone: +972-52-584-0569
Postal address: 36 Shivat Tsiyon St., Tel Aviv–Yafo
Or through the contact menu displayed statically at the side of the Site.

Last updated: 16/08/2026

This English version is a translation provided for convenience. In the event of any discrepancy between it and the Hebrew version, the Hebrew version shall prevail.