Privacy Policy

Introduction

• We will protect the confidentiality of your data;
• We will not use your data unlawfully;
• Upon your request, we will provide you with full and detailed information regarding the processing of your personal data.

With this document we wish to share with you the principles by which, and the grounds and purposes for which, we obtain and process your personal data, as well as the legal and technical means by which we protect it. Through this document you can obtain information about your rights and the means of protecting them.

By registering, you express your consent that your personal data be processed in accordance with this policy.

Purpose of the policy

Through this document we will share with you information about all the principles that guide us when processing your personal data. We will also explain how the law protects you and provide detailed information about what types of personal data the aforementioned company collects when establishing a business relationship, and how this data is used, including for direct marketing purposes.

When your personal data is processed

• you have given consent to the processing of data for one or more specific purposes;
• processing the data is necessary to fulfill an obligation undertaken by an agreement concluded between us, or to conclude an agreement at your request;
• data processing is provided for by law;
• data processing is necessary to fulfill duties imposed on us by legislation/regulations;
• under the law, your data is publicly available, or you have made your data publicly available;
• data processing is necessary to protect a significant public interest;
• data processing is necessary to review your application (to provide a service);
• data processing is based on other grounds provided for by law.

How we collect your data

The sources from which we obtain your data are:

• your registration/authorization on the electronic platform;
• your contacting us in order to receive a service or product (including by telephone communication, electronic request, etc.);
• your use of our services/products;
• your use of our remote channels;
• we also obtain information about you from public sources and third parties, where an appropriate legal basis exists.

What kind of information we process about you?

Depending on the nature of our relationship with you when providing a service, the information we process may include the following categories of data, in a volume proportionate to the purpose of their processing:

• Identification data
  • First name, last name, date of birth, personal ID number.
• Contact information
  • Address (legal and actual), email, phone number, and others.
• Banking information
  • Bank account number and card details/data necessary for providing the relevant service.
• Data about the technological device
  • IP address, cookies, IMEI code, application logs, behavioral data, location information, and others.
• Recordings
  • Audio recordings (where voluntary consent has been given).
• Data obtained during communication
  • Data obtained via email, telephone, chat, social media, or other communication channels.
• Public data
  • Information obtained from public sources.
• Transaction history
  • Products purchased by the user, amount paid, payment method, order date, and status.
• Delivery (courier) data
  • Recipient's first name, last name, exact address (entrance, floor, apartment number), contact phone.

Also, other optional/voluntary information that you provide to us within the scope of various services.

Personal data of minors

Our website and services are not intended for persons under the age of 16. We do not knowingly collect or process the data of persons under 16 without the consent of a legal representative (parent/guardian). If you discover that a minor has provided us with data, please contact us to have it deleted.

Cookies

While you are on our website, we strive to continuously improve the quality of service and your experience and to protect your security. Accordingly, when you use our website and other remote platforms, we collect so-called cookies about you. Cookies are used when using the website and other remote platforms for the purpose of personalizing, improving, and securing your experience. Specifically, to simplify navigation, offer information in the desired format, improve search parameters, securely authorize the user, for marketing, to optimize website design, and to better adapt it for the user.

Through cookies we determine the operating system version, the device model and other unique device identifiers, the length of time spent on web pages, information about opened pages, online navigation history, browser information, information about actions taken on our website, the geolocation from which you accessed it, and the language in which you reviewed information. We try to understand how you use our website.

For what purpose we process your data?

We process your data only for lawful purposes and in a corresponding volume. The company may process data for various purposes, including:

• to provide a service (including processing an order, delivering it, etc.);
• to offer and improve services, which includes, among others, analyzing orders, saved (liked) and cart-added products, analyzing statistical data, user behavior, etc.;
• to make data accessible, in the cases and manner established by legislation, to a regulator or other supervisory body and audit companies;
• to develop/improve products and services;
• to ensure data security;
• to fulfill our legal obligations;
• to prevent improper use of our systems and crime;
• to send/deliver relevant correspondence/notifications;
• to fully and duly fulfill obligations undertaken by contract and/or to monitor your fulfillment of undertaken obligations;
• for marketing purposes, which means periodically offering our various products/services in accordance with your clear and expressed consent, and developing/planning marketing activities;
• to receive feedback from you and respond to complaints.

Grounds for processing personal data

The grounds on which we process your data are:

• your voluntary consent to the processing of data;
• the necessity to protect data in order to conclude a contract with you or to perform an existing contract;
• the need to process data in order to provide you with a service / review your application;
• obligations provided for by legislation.

When we share your data with third parties?

To fulfill an obligation undertaken by legislation or contract, where an appropriate legal basis exists, your data may be shared with:

• your representative/legal representative;
• parties to the transaction;
• bodies defined by legislation;
• service providers — including but not limited to: auditors, courier and/or research organizations, IT service providers (e.g. cloud infrastructure services), persons who provide us with marketing services, and/or any other persons performing a similar function;
• another third party with your consent.

We may share your data in another country if grounds provided for by the Law of Georgia "On Personal Data Protection" for data processing exist and the relevant country ensures appropriate guarantees for the protection of data and the rights of the data subject.

In order to properly protect your data, before transferring your personal data to a third party we verify whether they have adopted appropriate organizational and technical measures to protect the data.

You have the right to

• receive information about the data processed about you, specifically what data is processed, what the purpose and legal basis of its processing is, and information about the source of data collection and data transfer;
• review the data held about you by the company and obtain copies of documents/records containing your personal data;
• request the correction, updating, and/or completion of incorrect, inaccurate, and/or incomplete data;
• request the termination, deletion, or destruction of data processing if:
  • you withdraw consent that constitutes the sole basis for processing the data;
  • processing the data is no longer necessary for the purpose for which it was processed;
  • the data is being processed unlawfully.
• request the blocking of data if:
  • the authenticity or accuracy of the data is in dispute;
  • the processing of data is unlawful, but you do not wish to delete it and request only its blocking;
  • the data is no longer needed to achieve the purpose of its processing, but you need it for the purpose of legal proceedings;
  • a request for the termination, deletion, or destruction of data processing is under review;
  • there is a need to retain the data for the purpose of using it as evidence.
• withdraw your consent at any time and request the deletion of data processed on its basis. We will stop processing the data and delete already-processed data, unless another basis for processing the data provided for by legislation exists;
• if the basis for processing the data is your consent and it is technically feasible, request the portability of the personal data you provided to the company, i.e. to receive it in a structured, usable, and electronic form or to have it transferred to another data processor;
• in the event of a violation of your rights, apply to the company's personal data protection officer, the State Audit Office, and/or the court.

Protection of data security

We store the data processed about you in compliance with the requirements of the legislation. We ensure physical, technical, and organizational safeguards to protect your data. We protect the security of our electronic devices, files, and premises. We also have physical, electronic, and procedural control mechanisms to protect your data from unauthorized access, use, transfer, loss, or destruction.

Our employees comply with data confidentiality and security policies and procedures in accordance with legislation and internal organizational documents.

Although we take all necessary measures for the purpose of information security, in conditions of rapid technological development we do not accept responsibility for the actions of persons who carry out unauthorized access, misuse, or breach the services. We do not provide any express, implied, or other warranty, other than that we will take all measures to prevent such intrusion.

Data retention period

We store your data:

• throughout the entire period of service and for 4 (four) years after the completion of the service;
• or for the period necessary to achieve the specific purpose of processing, as established within the scope of providing the service and/or in the contract.

Changes

Over time, it may become necessary to change this policy. In the event of changes, we will publish these changes on our websites. The modified personal data protection policy enters into force after being published on the page. You should periodically visit our website and, in the event of a change, review the amended policy. Providing us with information or using our websites after changes have been made to the policy means that you agree to the changes.

Contact us

You can contact us on the hotline numbers 0 322 423 500, 0 322 80 02 02 and by email at [email protected].

Personal data protection officer

Croco Shop LLC's personal data protection officer is Soso Mebonia, email: [email protected].