Personal Data Processing Policy

1.1. The Operator’s principal goal and condition of their activities is to respect the rights and freedoms of individuals in the processing of their personal data, including the protection of the rights to privacy and confidentiality of personal and family life.

1.1.2. This policy of the Operator regarding the processing of personal data (hereafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website meatless.space.

2.1. Automated processing of personal data — data processing using information technologies.

2.2. Blocking of personal data — a temporary suspension of data processing.

2.3. Website — a collection of graphical and informational materials, as well as computer programs and databases that make them available on the internet at the network address meatless.space.

2.4. Personal data information system — a collection of personal data contained in databases and the information technologies and technical means that process them.

2.5. Anonymization of personal data — alteration of data such that determining its connection to the data subject is impossible, or requires disproportionate effort, cost, and time.

2.6. Processing of personal data — any operation or set of operations performed on data using automatic, semi-automatic, or non-automatic means, including but not limited to collection, recording, photography, audio and video recording, organization, storage, alteration, retrieval, consultation, use or disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of data.

2.7. Operator (data processing entity) — a public institution, physical or legal persons, who individually or jointly with others determine the purposes and means of processing personal data, and process data directly or through an authorized person.

2.8. Personal data — any information relating directly or indirectly to a specific or identifiable User of the website meatless.space.

2.9. User — any visitor to the website meatless.space.

3.1. The Operator has the right to:

• Obtain accurate information and/or documents containing personal data from the data subject.
• Continue processing personal data without the consent of the data subject if the data subject withdraws consent for processing or requests the cessation of processing, provided there are grounds specified in the Personal Data Law.
• Independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided by the Personal Data Law and the regulatory acts adopted in accordance with it, unless otherwise provided by the Personal Data Law or other Georgian laws.

3.2. The Operator is obliged to:

• Provide information regarding the processing of their personal data to the data subject upon request.
• Organize the processing of personal data in accordance with the legislation in force in Georgia.
• Respond to the inquiries and requests of personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law.
• Provide the necessary information to the authorized body for the protection of the rights of personal data subjects upon the request of this body.
• Publish or otherwise provide unrestricted access to this Policy regarding the processing of personal data.
• Implement legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as from other unlawful actions regarding personal data.
• Cease the transfer (distribution, provision, access) of personal data, stop processing and destroy personal data in the manner and cases provided by the Personal Data Law.
• Fulfill other obligations provided by the Personal Data Law.

4.1. Personal data subjects have the right to:

• Receive information related to the processing of their personal data, except in cases provided by Georgian laws. The information must be provided by the Operator in an accessible form and must not contain personal data related to other personal data subjects unless there are lawful grounds for disclosing such personal data. The list of information and the procedure for obtaining it are established by the Personal Data Law.
• Demand the Operator to clarify their personal data, block or destroy it if the personal data are incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated processing purpose, and to take legally provided measures to protect their rights.
• Stipulate preliminary consent for the processing of personal data in the promotion of goods, works, and services in the market.
• Withdraw consent to the processing of personal data and to request the cessation of processing of personal data.
• Appeal against unlawful actions or inactions of the Operator in processing their personal data to the authorized body for the protection of personal data subjects or through judicial proceedings.
• Exercise other rights provided by Georgian legislation.

4.2. Personal data subjects are obligated to:

• Provide the Operator with accurate data about themselves.
• Inform the Operator about the clarification (update, change) of their personal data.

4.3. Individuals who have provided the Operator with inaccurate information about themselves or information about another personal data subject without their consent are liable in accordance with Georgian legislation.

5.1. Personal data processing is carried out fairly and lawfully, without diminishing the dignity of the data subject.

5.2. Data are processed only for specific, clearly defined, and lawful purposes. No subsequent processing of data for purposes that are not compatible with the original purpose is carried out.

5.3. Data are processed only to the extent necessary to achieve the relevant lawful purposes.

5.4. Data are adequate and proportionate to the purposes for which they are processed.

5.5. Data are accurate and, where necessary, kept up to date. Data collected without a lawful basis and not corresponding to the purpose of processing must be blocked, deleted, or destroyed.

5.6. Data are retained only for the period necessary to achieve the purpose of data processing. Once the purpose for which the data were processed has been achieved, the data must be blocked, deleted, or destroyed, or stored in a form that does not permit the identification of the person, unless otherwise provided by law.

6.1. The purpose of processing the User’s personal data is to inform the User by sending emails; to conclude, execute, and terminate civil law contracts; to provide the User with access to services, information, and/or materials contained on the website; and to clarify order details.

6.2. The Operator also has the right to send notifications to the User about new products and services, special offers, and various events. The User can always opt out of receiving informational messages by sending an email to hello@chemimeida.com with the subject line "Opt-out of notifications about new products, services, and special offers."

6.3. Anonymized data of Users collected through internet statistics services are used to gather information about Users' actions on the site, to improve the quality of the site and its content.

7.1. Surname, first name, patronymic;
7.2. Email address;
7.3. Telephone numbers;
7.4. Messenger account data;
7.5. Year, month, date, and place of birth;
7.6. Address;
7.7. Photographs;
7.8. Information about education, profession, specialty, and qualifications;
7.9. Information about the organization, position;
7.10. Location data; IP address;
7.11. Type and version of the operating system; type and version of the browser; device type and screen resolution; OS and browser language;
7.12. The site also collects and processes anonymized data about visitors (including "cookies") using internet statistics services (Yandex Metrica, Google Analytics, and others).
7.13. The aforementioned data are collectively referred to as "Personal Data" in the text of this Policy.

8.1. The Operator processes the User’s personal data only if they are filled in and/or sent by the User themselves through special forms located on the website meatless.space. By filling out the forms and/or sending their personal data to the Operator, the User expresses their consent to this Policy.

8.2. The Operator processes anonymized data about the User if this is allowed in the User’s browser settings (saving "cookies" and using JavaScript technology is enabled).4

The security of personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures necessary to fully comply with the current legislation on personal data protection.

9.1. The Operator ensures the security of personal data and takes all possible measures to prevent access to personal data by unauthorized persons.

9.2. User personal data will never, under any circumstances, be transferred to third parties, except in cases involving compliance with current legislation.

9.3. If inaccuracies in personal data are discovered, the User can update them independently by sending a notification to the Operator’s email address at hello@chemimedia.com with the subject "Updating personal data."

9.4. The period for processing personal data is unlimited. The User can withdraw their consent to the processing of personal data at any time by sending a notification via email to the Operator’s email address at hello@chemimedia.com with the subject "Withdrawal of consent to the processing of personal data."

10.1. Before initiating the transborder transfer of personal data, the Operator must ensure that the foreign country to which the personal data is to be transferred provides reliable protection for the rights of personal data subjects.

10.2. Transborder transfer of personal data to countries that do not meet these requirements can only occur if there is written consent from the personal data subject for the transborder transfer of their personal data and/or if it is necessary for the execution of a contract in which the personal data subject is a party.

11.1. Users can obtain any clarifications on issues concerning the processing of their personal data by contacting the Operator via email at hello@chemimedia.com.

11.2. Any changes to the Operator’s personal data processing policy will be reflected in this document. The policy is effective indefinitely until it is replaced by a new version.

11.3. The current version of the Policy is publicly available on the Internet at https://meatless.space/policy.