Privacy Policy

1.1. The Operator sets as its primary goal and condition of its activities the protection of the rights and freedoms of a person and a citizen when processing their personal data, including the protection of the right to private life, personal and family confidentiality.

1.2. This Policy of the Operator regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator can obtain about visitors of the website https://shtrih-design.com.

2.1. Automated processing of personal data — processing of personal data using computing devices.

2.2. Blocking of personal data — temporary cessation of processing of personal data (except in cases where processing is necessary for clarification of personal data).

2.3. Website — a set of graphic and information materials, as well as programs for computers and databases that ensure their accessibility via the Internet network address https://shtrih-design.com.

2.4. Information system of personal data — a set of personal data contained in databases and information technology and technical means that ensure their processing.

2.5. Anonymization of personal data — actions as a result of which it is impossible to determine, without the use of additional information, the belonging of personal data to a specific User or other subject of personal data.

2.7. Operator — a state authority, municipal authority, legal or physical person who independently or together with other persons organizes and/or carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.

2.8. Personal data — any information directly or indirectly relating to a specified or identifiable User of the website https://shtrih-design.com.

2.10. User — any visitor of the website https://shtrih-design.com.

2.11. Provision of personal data — actions directed at the disclosure of personal data to a specific person or a certain circle of persons.

2.13. Transborder transfer of personal data — transfer of personal data to the territory of a foreign state to a state authority of a foreign state, a foreign physical or foreign legal person.

2.14. Destruction of personal data — any actions as a result of which personal data is destroyed irretrievably with the impossibility of further restoring the content of personal data in the information system of personal data and/or personal data carriers are destroyed.

3.1. The Operator has the right:

• to obtain from the subject of personal data reliable information and/or documents containing personal data;
• in the case of revocation by the subject of personal data of consent to the processing of personal data, as well as in the case of a request to cease processing of personal data, the Operator may continue processing personal data without the consent of the subject of personal data if there are grounds specified in the Law on Personal Data;
• to independently determine the composition and list of measures necessary and sufficient to ensure the performance of obligations provided for by the Law on Personal Data and adopted in accordance with it normative legal acts, if otherwise not provided for by the Law on Personal Data or other laws of Georgia.

3.2. The Operator is obliged to:

• to provide the subject of personal data at their request with information relating to the processing of their personal data;
• to organize the processing of personal data in the order established by current legislation of Georgia;
• to respond to appeals and requests of subjects of personal data and their legal representatives in accordance with the requirements of the Law on Personal Data;
• to inform the authorized body for the protection of the rights of subjects of personal data at the request of this body of the necessary information within 10 days from the date of receipt of such a request;
• to publish or otherwise ensure unrestricted access to this Policy regarding the processing of personal data;
• to take legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions in relation to personal data;
• to cease the transfer (dissemination, provision, access) of personal data, cease processing and destroy personal data in the order and cases provided for by the Law on Personal Data;
• to perform other obligations provided for by the Law on Personal Data.

4.1. Subjects of personal data have the right to:

• to require from the Operator clarification of their personal data, their blocking or destruction in the case where personal data are incomplete, outdated, inaccurate, unlawfully obtained or are not necessary for the stated purpose of processing, as well as to take measures provided by law to protect their rights;
• to set a condition of prior consent for the processing of personal data for the purpose of promotion of goods, works and services on the market;
• to revoke consent to the processing of personal data, as well as to submit a request to cease processing of personal data;
• to appeal to the authorized body for the protection of the rights of subjects of personal data or to a court for unlawful actions or inaction of the Operator in the processing of their personal data;
• to exercise other rights provided for by the legislation of Georgia.

4.2. Subjects of personal data are obliged to:

• to provide the Operator with reliable data about themselves;
• to inform the Operator about the clarification (updating, changing) of their personal data.

4.3. Persons who have transferred to the Operator inaccurate information about themselves, or information about another subject of personal data without the consent of the latter, bear responsibility in accordance with the legislation of Georgia.

5.1. Processing of personal data is carried out on a lawful and fair basis.

5.2. Processing of personal data is limited to the achievement of specific, previously determined and lawful goals. Processing of personal data incompatible with the goals of collecting personal data is not allowed.

5.3. The merging of databases containing personal data, the processing of which is carried out for purposes incompatible with each other, is not allowed.

5.4. Only personal data that meets the goals of their processing is subject to processing.

5.5. The content and volume of processed personal data correspond to the stated goals of processing. The excess of processed personal data in relation to the stated goals of their processing is not allowed.

5.6. When processing personal data, the accuracy of personal data, their sufficiency, and where necessary, their relevance in relation to the goals of processing personal data are ensured. The Operator takes the necessary measures and/or ensures their adoption for the removal or clarification of incomplete or inaccurate data.

Goal of processing: informing the User by sending electronic letters

• last name, first name, patronymic
• electronic address
• phone numbers

Legal basis: Law of Georgia of 14 June 2023 No. 3144-XIმს-Xმპ «On Personal Data Protection»

Types of processing of personal data: Collection, recording, systematization, accumulation, storage, destruction and anonymization of personal data. Sending informational letters to the email address

7.1. Processing of personal data is carried out with the consent of the subject of personal data to the processing of their personal data.

7.2. Processing of personal data is necessary to achieve the goals provided for by an international treaty of Georgia or by law, for the performance of functions, powers and duties entrusted on the Operator by the legislation of Georgia.

7.3. Processing of personal data is necessary for the administration of justice, execution of a judicial act, act of another authority or official person, subject to execution in accordance with the legislation of Georgia on enforcement proceedings.

7.4. Processing of personal data is necessary for the performance of a contract, a party of which or a beneficiary or guarantor for whom is the subject of personal data, as well as for the conclusion of a contract at the initiative of the subject of personal data or a contract under which the subject of personal data will be a beneficiary or guarantor.

7.5. Processing of personal data is necessary for the realization of the rights and legitimate interests of the Operator or third parties, or for the achievement of socially significant goals, provided that the rights and freedoms of the subject of personal data are not violated.

7.6. Processing of personal data whose access is unrestricted for an unlimited circle of persons at the request of the subject of personal data (hereinafter — openly available personal data) is carried out.

7.7. Processing of personal data subject to publication or mandatory disclosure in accordance with a law of Georgia is carried out.

The security of personal data processed by the Operator is ensured by the implementation of legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of protection of personal data.

8.1. The Operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorized persons.

8.2. Personal data of the User will never, under any circumstances, be transferred to third parties, except in cases related to the execution of current legislation or in the case where the subject of personal data has given the Operator consent to transfer data to a third party for the performance of obligations under a civil law contract.

8.3. In the case of detection of inaccuracies in personal data, the User can update them independently by sending a notification to the email address of the Operator ashulgina.studio@gmail.com with the subject line «Updating of personal data».

8.4. The term of processing of personal data is determined by the achievement of the goals for which personal data was collected, unless a different term is provided for by a contract or current legislation.

The User can at any time revoke their consent to the processing of personal data by sending a notification to the Operator via email to the email address of the Operator ashulgina.studio@gmail.com with the subject line «Revocation of consent to the processing of personal data».

8.6. The prohibitions established by the subject of personal data on the transfer (except for providing access), as well as on the processing or conditions of processing (except for obtaining access) of personal data permitted for dissemination, do not apply in cases of processing personal data in state, public and other public interests defined by the legislation of Georgia.

8.7. The Operator ensures the confidentiality of personal data when processing personal data.

8.8. The Operator stores personal data in a form that allows determining the subject of personal data for no longer than is required by the goals of processing personal data, unless a storage term for personal data is established by a law of Georgia, a contract, a party of which, a beneficiary or guarantor for whom is the subject of personal data.

8.9. The achievement of the goals of processing personal data, the expiration of the term of consent of the subject of personal data, the revocation of consent by the subject of personal data or a request to cease processing of personal data, as well as the detection of unlawful processing of personal data, may be a reason for the cessation of processing of personal data.

9.1. The Operator carries out collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (dissemination, provision, access), anonymization, blocking, deletion and destruction of personal data.

9.2. The Operator carries out automated processing of personal data with the receipt and/or transfer of received information through telecommunications networks or without them.

10.1. Before starting activities related to the transborder transfer of personal data, the Operator is obliged to notify the authorized body for the protection of the rights of subjects of personal data of its intention to carry out the transborder transfer of personal data (such a notification is sent separately from the notification of the intention to carry out the processing of personal data).

10.2. Before submitting the above-mentioned notification, the Operator is obliged to obtain from the state authorities of a foreign state, foreign physical persons, foreign legal persons, to whom the transborder transfer of personal data is planned, the relevant information.

The Operator and other persons who have access to personal data are obliged not to disclose to third parties and not to disseminate personal data without the consent of the subject of personal data, unless otherwise provided for by a law of Georgia.

12.1. The User can obtain any clarifications on questions of interest relating to the processing of their personal data by contacting the Operator via email ashulgina.studio@gmail.com.

12.2. Any changes to the Policy regarding the processing of personal data of the Operator will be reflected in this document. The Policy is valid indefinitely until it is replaced by a new version.

12.3. The current version of the Policy is freely available on the Internet at the address https://shtrih-design.comprivacy-policy.