Privacy Policy

1. Terms and Definitions

1.1. For the purposes of this Policy, the following terms shall have the meanings set forth below:

· Personal (confidential) data– any information that directly or indirectly relates to an identified or identifiable private individual (data subject).

· Personal data operator (Operator)– a person who, in accordance with this Policy, independently processes personal data, determines the purposes of such processing, the composition of personal data to be processed, and the actions (operations) performed with respect to personal data.

· Processing of personal data– any action (operation) or set of actions (operations) performed with respect to personal data, whether by automated means or without such means, including collection, receipt, access, photographing, video monitoring and/or audio monitoring, organization, grouping, correlation, storage, modification, restoration, retrieval, use, blocking, deletion, or destruction, as well as disclosure of data by transfer, publication, dissemination, or other means of making it available. The Service is not intended for persons under the age of 18. The Operator does not knowingly collect or process data of minors.

· Provision of personal data– actions aimed at transferring personal data to a specific person or a defined circle of persons.

· Blocking of personal data– temporary suspension of personal data processing (except for storage).

· Destruction of personal data– actions resulting in the impossibility of restoring the content of personal data in the information system and/or destruction of the material carriers of personal data.

· Mobile application – software designed for electronic computing devices (Android, iOS, Harmony OS, and others) used to receive the Service or automate its provision.

v „-------------------------"- an application that enables the Partner to automatically access information about existing orders.

v „--------------------------"– an application that automates the process of forming orders for the provision of services.

· Website – web pages owned by the Operator, through which data collection is carried out.

v https://www.taxi-geo.ge/

· Cookie files – fragments of data that store information about the actions performed by the Customer on the Website.

2. General Provisions

2.1. The Operator shall process personal data in accordance with the Law of Georgia "On Personal Data Protection” and the requirements of applicable legislation.

2.2. Data processing shall be carried out with respect to the following categories of persons:

· Customers (Partners and Clients);

Current, former, or potential employees (candidates);
Visitors of the Website;
Persons who contact the Operator through feedback channels.

2.3. Processing shall be based on the consent of the data subject, which may be expressed in writing or by conclusive actions (such as installation of the application, registration, use of the Website, and other similar actions).

3. Processing of Partner’s Personal Data

3.1. The purpose of processing is the conclusion of a contract and the granting of the right to use the mobile application.

3.2. The following data shall be processed: first name, last name, date of birth, gender, identity card and driver’s license details, vehicle information, telephone number, photographic image, and geolocation.

3.3. Geolocation: The Operator shall collect data regarding the Partner’s location only during the use of the application, as this is necessary for the provision of services to the Customer.

4. Processing of Customer’s Personal Data

4.1. The purpose of processing is the performance of the contract provided for by the public offer.

4.2. The following data shall be processed: first name, last name, telephone number, e‑mail address, geolocation, and payment information.

4.3. Payment information: Entry of bank card details shall be carried out on the secure page of the acquiring bank. The Operator does not store full card details, and the process complies with PCI DSS standards.

5. Employment and Civil Relations

5.1. The personal data of employees and candidates shall be processed for the purposes of employment, personnel record‑keeping, and fulfillment of the terms of labor contracts.

5.2. The personal data of persons engaged in civil law relations shall be processed for the purposes of concluding and regulating the respective civil contracts.

6. Website Visitors and Cookies

6.1. Upon entering the Website, electronic data (such as IP address and browser type) shall be automatically collected.

6.2. Cookies are used to ensure the proper functioning of the Website. The Customer has the right to restrict their use through browser settings; however, such restriction may affect the quality of the Service.

7. Video and Audio Monitoring

7.1. For the purposes of safety and quality control of services, the Operator shall carry out video monitoring of the perimeter of offices and recording of telephone conversations in accordance with the procedures established by law.

8. Data Protection Measures

8.1. The Operator shall implement legal, organizational, and technical measures (including antivirus protection, access control, encryption, and data backup) to safeguard data against unauthorized access.

9. Rights of the Data Subject

In accordance with the legislation of Georgia, you have the right to:

· Access to information:request details regarding the data we process about you;

· Rectification and updating:request the correction of inaccurate or incomplete data;

· Termination/erasure of processing:request the cessation or deletion of data processing (withdrawal of consent);

· Blocking: request the temporary suspension of data processing;

· Data portability: request the transfer of your data to another operator in a structured format;

· Appeal: apply to the Personal Data Protection Service or to the court.

10. Transfer of Data to Third Parties

10.1. The Operator shall transfer data to third parties only in cases provided by law:

· For the purpose of service delivery (e.g., the client’s number to a partner driver);

· To state authorities on the basis of a lawful request;

· To technical contractors (such as hosting providers, IT support), who are obliged to maintain confidentiality.

11. Retention Periods and Destruction

11.1. Data shall be retained for the period necessary to achieve the purpose of processing or for the period established by law (e.g., under tax or labor legislation).

11.2. Grounds for destruction include:achievement of the purpose, expiration of the retention period, withdrawal of consent, or the existence of unlawful processing

11.3. Rules of destruction: data shall be destroyed in such a manner as to exclude the possibility of recovery (electronic deletion or physical destruction).

12. Concluding Provisions

12.1. The Operator is entitled to unilaterally amend this Policy. Amendments shall enter into force upon publication.

12.2. Continued use of the Service shall constitute the User’s consent to the updated terms of the Policy.