Privacy policy of Casa Tbilisi
Purpose
When visiting the website https://casatbilisi.com, Users must review this Privacy Policy. The Policy may be updated or amended, and Users are encouraged to review it periodically.
By voluntarily providing personal information, the User grants Casa Tbilisi permission to store and process such data.
This Privacy Policy establishes the rules, conditions, purposes, and storage principles of Users’ personal data, in accordance with the Law of Georgia on “Personal Data Protection” and the General Data Protection Regulation (GDPR).
This document is an integral and binding part of the website’s terms and conditions.
Consent
By using the website, the User is considered to have accepted this Privacy Policy. The User therefore grants Casa Tbilisi the right to process, store, and use their personal data.
Such information will be used to provide services in accordance with applicable laws.
Types of data processed
When making the purchase from the website, the User is required to provide the following information:
- First and last name
- Email address
- Mobile number
- Residential address
Providing this data is mandatory for completing the registration process. Without this information, purchasing from the Website is not possible.
Basis for data processing
Casa Tbilisi processes User data on the following legal bases:
- When necessary to fulfill obligations under a contract with the User or to enter into such a contract;
- Based on the User’s consent;
- To fulfill obligations arising from contractual relationships;
- When necessary to provide services to the User.
Purpose of processing user's personal data
Casa Tbilisi processes personal data for the following purposes:
- Improving service quality
- Fulfilling legal obligations
- Handling User claims
- Monitoring User activity on the website
- Providing updates and notifications
- Ensuring effective communication
- Establishing feedback mechanisms
- Testing and implementing innovations
- Introducing new products and updates
- Identifying target User groups
- Conducting marketing activities
- Providing purchase-related information
- Receiving financial obligation information from third parties
- Preventing misuse of the system
- Preventing criminal activities
- Providing information to authorities
- Protecting legitimate interests
- Any other lawful purpose under Georgian law
Retention period of confidential data
Casa Tbilisi ensures the confidentiality and security of the User’s personal data.
Personal data is stored and processed for the duration necessary to fulfill the purposes defined by applicable law, this Privacy Policy, and Casa Tbilisi’s operational requirements.
As an e-commerce platform, Casa Tbilisi allows Users to repeatedly access their accounts and place orders after registration. For this reason, ongoing data processing is required to maintain functionality and service delivery.
Due to the nature and purpose of such processing, it is not possible to define a specific retention period in advance. Therefore, Casa Tbilisi retains User data until:
- The User requests the termination of data processing and contract closure; or
- Circumstances arise that require data retention or deletion under applicable law.
User rights
The User has the right to request the following information:
- What data is being processed
- Purpose and legal basis of processing
- Source of data collection
- Recipients of disclosed data
- Data retention period or criteria
- Information about automated processing and profiling
- Access to data and copies
Casa Tbilisi must respond within 10 working days (extendable by an additional 10 days in exceptional cases).
The User also has the right to:
- Request correction, updating, or completion of inaccurate data
- Request deletion, destruction, or cessation of data processing
- Request blocking of data under certain conditions
- Receive data in a structured, machine-readable format or request transfer
- Not be subject to automated decision-making unless legally justified
Users may withdraw consent at any time by contacting Casa Tbilisi via email. In such cases, data processing will cease and data will be deleted within 10 working days unless another legal basis applies.
Users may also contact the Personal Data Protection Service or the court if their rights are violated.
User's obligation
The User is obliged to provide Casa Tbilisi with complete and accurate information about themselves in order to receive services. This obligation also applies to any updates or changes in the information provided.
Definitions of terms
The following terms are used in this document:
- Casa Tbilisi (referred to as “we,” “us,” “our,” or “Website”) – a company registered under Georgian law, identification code 426551475, located at Sindi Street 4, Kvemo Teleti, Georgia. Business name: Peach Store Tbilisi LLC. Email: info@casatbilisi.com
- Personal data – any information relating to an identified or identifiable natural person, including name, identification number, geolocation, communication data, or physical, mental, cultural, or social characteristics
- Data processing – any operation performed on data, including collection, storage, organization, use, modification, disclosure, deletion, or destruction
- Data subject (User) – a natural person whose data is being processed
- Consent of the User – freely given, informed, and explicit agreement to process personal data
- Data controller – the entity determining the purpose and means of processing
- Data processor – a person or entity processing data on behalf of the controller
- Third-party – any entity other than the User, controller, processor, or authorized person
Additional provisions
User notifications are conducted electronically due to the nature of Casa Tbilisi’s services.
In specific cases (e.g., disputes over data accuracy or legal requirements), Casa Tbilisi may retain and process data beyond standard conditions as permitted by law.