ISRAEL IBEROAMERICA CHAMBER OF COMMERCE INC. (CILIB)
Last updated: 9 October 2026.
1. Data controller
The entity responsible for the processing of personal data (data controller) is:
- Legal name: ISRAEL IBEROAMERICA CHAMBER OF COMMERCE INC.
- Institutional name: Israel Ibero-America Chamber of Commerce (CILIB), formerly named Cámara Multilateral de Comercio y Cooperación Israel Iberoamérica.
- Legal form: Florida Not For Profit Corporation, incorporated under the laws of the State of Florida, United States.
- State registration number: N26000007975.
- Declared principal address: 333 SE 2nd Avenue, Miami, Florida 33131, United States.
- Email: infocenter@ccilib.org.
- Telephone and WhatsApp: +1 786-755-8051.
- Website: https://ccilib.org.
Hereinafter, the entity shall be referred to as “CILIB” or “the Chamber”.
CILIB carries out activities of business cooperation, institutional relations, membership, training, programmes, events and services of an international nature.
The Chamber shall process personal data in accordance with this Privacy Policy and with the legislation applicable to each processing operation. The application of a specific regulation shall depend on the activities carried out, the persons concerned, the location of the data subjects and the other criteria established by the relevant legislation.
Where it is legally mandatory to appoint a representative in a particular jurisdiction, CILIB shall adopt the necessary measures and provide that representative’s contact details.
2. Scope of application
This policy applies to personal data collected or processed by CILIB through its website, forms, email, telephone, WhatsApp, membership processes, events, activities, programmes, courses and other services of the Chamber.
Personal data means any information relating to an identified or identifiable natural person.
This policy has international scope and covers CILIB’s activities in the various countries in which it carries out business, institutional or cooperation relations.
Where an activity is subject to additional requirements of a particular jurisdiction, the corresponding specific provisions shall apply.
3. Personal data we process
Depending on your relationship with CILIB and the services used, we may process the following categories of data:
3.1. Enquiries and contact
First name and surname, email address, telephone number, organisation, position, country and the content of messages sent through forms, email, telephone, WhatsApp or other enabled channels.
3.2. Newsletters and communications
Email address and, where provided, name, country, organisation and communication preferences for sending news, invitations and information about the Chamber’s activities.
3.3. Memberships, contracts and services
Identification and professional data, information on the company or organisation, country, responsible office or adviser, membership data, contracts, orders, invoicing and payments, as well as the information necessary to administer the corresponding relationship.
3.4. Members’ directory and institutional publications
Name, position, organisation, activity, country, photograph, logo and contact details that may be lawfully published in directories, web pages, catalogues or other institutional materials.
The publication of personal data shall be carried out on a valid legal basis and, where applicable, with the prior consent of the person concerned.
3.5. Events, courses and programmes
Registration, attendance and participation data, organisation of origin and other information necessary to manage events, meetings, training activities, business programmes and cooperation projects.
3.6. Educational programmes and activities involving minors
Identification, contact, academic and registration data that are necessary to manage educational, incubation, guidance or university admission programmes. Where applicable, these data shall be provided by the mother, father, legal guardian or responsible educational institution.
3.7. Technical and browsing data
Technical information generated by the use of the website, such as IP address, access logs, browser type, device, date and time of connection and data collected through cookies or similar technologies, in accordance with the website settings and the Cookie Policy.
CILIB shall endeavour to limit the collection of data to those that are relevant and necessary for the corresponding purposes.
4. Purposes of the processing
Personal data may be used to:
- Respond to enquiries and requests for information.
- Manage affiliations, memberships and relationships with companies, professionals and institutions.
- Formalise and perform contracts, orders, courses, programmes and services.
- Administer invoicing, collections, payments and accounting obligations.
- Organise, coordinate and carry out events, meetings, business activities, training programmes and international initiatives.
- Manage relationships with offices, representatives, advisers, collaborators and associated entities.
- Administer referral codes, attribution of memberships and follow-up of institutional relationships.
- Send newsletters, invitations, news and communications about CILIB’s activities, where there is a valid legal basis.
- Publish authorised information in directories, web pages and institutional materials.
- Handle requests to exercise rights, complaints, audits and legal requirements.
- Protect the security of systems and prevent fraud, abuse and unauthorised access.
- Comply with legal obligations and protect the rights and legitimate interests of the Chamber and of third parties.
The data shall not be used for purposes incompatible with those for which they were collected, unless there is a valid legal basis that permits it.
5. Legal bases and authorisation for the processing
The applicable legal basis shall depend on the purpose of the processing, the relationship with the person concerned and the relevant legislation.
Where the General Data Protection Regulation of the European Union (GDPR) applies, the processing may be based, as the case may be, on:
- Consent: where the person has authorised the processing for a specific purpose.
- Pre-contractual measures and performance of a contract: where the processing is necessary to respond to a prior request or to provide a contracted service.
- Legal obligation: where it is necessary to comply with tax, accounting, administrative or other legally enforceable obligations.
- Legitimate interest: where there is a specific legitimate interest, the processing is necessary and the rights and freedoms of the person concerned do not override it.
In other jurisdictions, the legal bases, authorisations and exceptions provided for by the relevant legislation shall apply.
5.1. Processing of data for the conduct of the Chamber’s activities
By voluntarily providing their personal data to ISRAEL IBEROAMERICA CHAMBER OF COMMERCE INC. (CILIB), the user acknowledges that such data may be processed to manage their relationship with the Chamber and to plan, organise, coordinate, administer, carry out and follow up the activities, initiatives, programmes, events, services, projects and other institutional, business, educational or cooperation actions that CILIB carries out, organises, promotes or considers necessary within the scope of its purposes and functions.
This processing may comprise the operations reasonably necessary to:
- Manage participation in activities, events, courses and programmes.
- Administer memberships, applications, contracts and institutional relationships.
- Coordinate communication with participants, members, collaborators and suppliers.
- Organise activities among offices, representatives, advisers and collaborating entities.
- Manage registrations, documentation, payments, invoicing and follow-up of services.
- Evaluate and improve the organisation and performance of the Chamber’s activities.
- Carry out other actions related to its institutional and business purposes, provided that there is a valid legal basis and the rights of the persons concerned are respected.
CILIB may determine the organisational and operational arrangements necessary to carry out its activities, within the scope of its functions and in accordance with the applicable legislation.
The provision of data does not constitute an unlimited authorisation to use them for any purpose. The processing must be relevant to the purposes of which the person has been informed, respect the principles of data protection and rely on the appropriate legal basis.
Where an operation requires specific consent, such consent shall be requested separately. The mere provision of data shall not be considered consent to receive commercial communications, to the publication of personal data or to processing that legally requires an independent authorisation.
5.2. Withdrawal of consent
Where the processing is based on consent, the person may withdraw it at any time. Withdrawal shall not affect the lawfulness of processing carried out previously, nor shall it prevent processing that may be based on another valid legal basis.
6. Communications and newsletters
CILIB may send communications relating to its activities, events, programmes, services and business opportunities where it has a valid legal basis and complies with the applicable requirements in the relevant country.
Persons may unsubscribe from promotional communications through the link provided in the message, where available, or by writing to infocenter@ccilib.org with the subject line “Unsubscribe from communications”.
Unsubscribing from promotional communications shall not prevent the sending of messages that are strictly necessary to manage a membership, a contracted service, a request or a legal obligation.
7. Directories and institutional publications
The publication of personal data in members’ directories, web pages, photographs, videos, catalogues and institutional materials shall take place where there is a valid legal basis and the corresponding information and authorisation requirements have been met.
Where the publication is based on consent, the person may withdraw it for the future. CILIB shall adopt reasonable measures to update or remove the information from the channels under its control, without prejudice to the applicable technical or legal limitations.
8. Recipients and providers
CILIB may disclose personal data, where necessary and where there is a valid legal basis, to the following categories of recipients:
- Providers of web hosting, maintenance, security and technological support.
- Providers of email, forms, communications and contact management.
- Payment and invoicing providers, including Stripe where it is used for the corresponding transaction.
- Offices, representatives, advisers and collaborators of the Chamber who need access to the data to manage a membership, activity or service.
- Educational institutions, organisers and collaborating entities where necessary to carry out a programme or activity.
- Public administrations, judicial authorities and competent bodies where there is a legal obligation or a valid request.
Providers shall access only the data necessary for the functions they perform. Where applicable, the processing, confidentiality and security agreements required by the applicable legislation shall be formalised.
CILIB shall not sell personal data to third parties as an ordinary practice. Any additional disclosure or use must have a valid legal basis and be accompanied by the information required.
The list of specific providers and their functions may be detailed in supplementary information where necessary.
9. International transfers
Owing to the international nature of its activities, CILIB may process personal data in the United States and in other countries where its providers, collaborators or offices are located, provided that there is a valid legal basis.
Where the GDPR applies to a transfer of personal data from the European Economic Area to a third country, CILIB shall use the appropriate mechanism under the applicable regulations, which may include:
- An adequacy decision in force and applicable to the transfer.
- Standard contractual clauses or other safeguards recognised by the regulations.
- Another legally admissible mechanism or derogation, where its requirements are met.
The availability of a specific mechanism shall depend on the country of destination, the receiving entity, the type of data and the circumstances of the transfer.
Transfers to the United States shall not be automatically considered to be covered by an adequacy mechanism. Before relying on an adequacy decision or a certification framework, CILIB shall verify that the receiving entity and the specific transfer meet the corresponding requirements.
Where other legislation imposes additional restrictions on international transfers, the relevant conditions shall apply.
10. Data retention
CILIB shall retain personal data for as long as necessary to fulfil the purposes for which they were collected and, thereafter, for the periods applicable for contractual, accounting, tax or legal reasons or for the defence against claims.
As general criteria:
- Enquiries: for the time necessary to respond to them and carry out the corresponding follow-up.
- Memberships and services: for the duration of the relationship and the subsequent periods necessary to comply with obligations or address claims.
- Invoicing and accounting documentation: for the periods required by the applicable regulations.
- Newsletters and promotional communications: until unsubscription or withdrawal of consent, without prejudice to retaining the minimum data necessary to honour that request.
- Directories and publications: for as long as the purpose and the legal basis that legitimise the publication remain in place.
- Educational programmes: for the time necessary to manage participation and comply with the applicable obligations.
- Technical and security logs: for periods proportionate to their purpose and to security needs.
The data shall be deleted or anonymised when they are no longer necessary, unless a legal obligation or a legitimate reason permits or requires their retention for a longer period.
11. Rights of individuals
Individuals may exercise the rights granted to them by the legislation applicable to their situation and to the processing of their data.
Where the GDPR applies, these rights may include:
- Accessing their personal data.
- Requesting the rectification of inaccurate data.
- Requesting the erasure of the data where appropriate.
- Requesting the restriction of processing in the cases provided for by law.
- Objecting to certain processing.
- Requesting the portability of the data where the requirements are met.
- Withdrawing consent where it is the legal basis for the processing.
- Not being subject to certain automated decisions in the cases provided for by law.
- Lodging a complaint with the competent supervisory authority.
In other jurisdictions, additional or different rights may exist in accordance with local legislation.
To exercise their rights, the data subject may write to infocenter@ccilib.org, stating “Data protection” in the subject line and describing their request.
CILIB may request reasonable information to verify the identity of the requester where necessary to protect their data. Requests shall be handled within the time limits and in accordance with the procedures provided for by the applicable legislation.
Where the GDPR applies, the person may lodge a complaint with the competent supervisory authority of their place of habitual residence, place of work or place of the alleged infringement. In Spain, the Agencia Española de Protección de Datos (Spanish Data Protection Agency) may be consulted at https://www.aepd.es.
12. Protection of minors’ data
Some CILIB programmes may be aimed at students or include the participation of minors.
The Chamber shall limit the collection of data to those necessary to manage each programme and shall establish appropriate procedures for information, authorisation, access and retention.
Where legally necessary, it shall request the consent or authorisation of the mother, father, legal guardian or responsible institution, in accordance with the applicable legislation. The involvement of an educational establishment does not automatically replace the authorisations legally required.
For services subject to United States legislation, CILIB shall assess the application of the Children’s Online Privacy Protection Act (COPPA) and its implementing rules, including the obligations regarding notice and parental consent where applicable.
Where the processing is subject to the GDPR or to local rules on minors, the requirements corresponding to the activity and to the relevant country shall apply.
If CILIB detects that it has collected data from a minor without the legally necessary authorisations, it shall adopt reasonable measures to remedy the situation, which may include restricting the processing or deleting the data.
13. Information security
CILIB shall adopt reasonable technical and organisational measures, proportionate to the nature of the data, the purposes of the processing and the risks identified, to protect the information against unauthorised access, loss, alteration, disclosure or destruction.
These measures may include access controls, authentication, encryption where appropriate, backups, permission management and procedures for handling security incidents.
The effective application of these measures must correspond to the practices and systems actually implemented by CILIB and its providers.
No system for transmitting or storing information can guarantee absolute security. In the event of an incident, CILIB shall adopt the response measures and make the notifications required under the applicable legislation.
14. Cookies and similar technologies
The website may use cookies and similar technologies to enable its operation, retain preferences, obtain statistics or provide additional functionalities.
The use of non-essential cookies shall be subject to the information, consent and configuration requirements corresponding to the jurisdiction and to the characteristics of the website.
Detailed information on the cookies used, their purposes, their providers and the options available shall be included in the corresponding Cookie Policy.
15. Third-party links and services
The website may include links to pages or services managed by third parties. CILIB does not necessarily control the privacy practices of those services.
When a person accesses an external site, they should consult its privacy policy and terms of use. The inclusion of a link does not imply that CILIB guarantees the third party’s data processing practices.
16. Amendments to the policy
CILIB may update this policy where necessary owing to changes in its activities, systems, providers or legal requirements.
The current version shall be the one published at https://ccilib.org/en/privacy-policy/, together with its date of update.
Where a change requires a specific communication or new consent, CILIB shall adopt the corresponding measures in accordance with the applicable legislation.
17. Contact
For enquiries relating to this policy or to the processing of personal data, you may contact:
ISRAEL IBEROAMERICA CHAMBER OF COMMERCE INC. (CILIB)
- Email: infocenter@ccilib.org
- Telephone and WhatsApp: +1 786-755-8051
- Website: https://ccilib.org
- Postal address: 333 SE 2nd Avenue, Miami, Florida 33131, United States.