Present document explains the principles, purpose and rules of processing and using user's personal data by Legal Entity Under Public Law Georgian Bar Association (LEPL GBA ) (identification number: 202255692, address: Georgia, Tbilisi, Tinatin Virsaladze Dead End I, N1).
By electronically marking/acknowledging the consent to the Terms and Conditions on the GBA website, the user confirms that at the same time he/she agrees to the Personal Data Protection Policy, the information provided by the user is accurate and reliable, the information was provided at the user's own request and for this he/she has all the rights and permissions provided by the law.
By electronically marking/acknowledging the consent to the Terms and Conditions of the website, the user declares his/her consent that he/she authorizes GBA and declares his/her consent that GBA at its own discretion and within the framework of the applicable legislation, at any time and in any amount, from any source, request and receive information about him/her, including personal data, for the purposes of identification, verification, comparison, analysis, storage and fulfillment of legal and/or contractual obligation(s).
Definitions
Website - a set of websites with the domain http://gba.ge/ http://portal.gba.ge/ https://exam.gba.ge/ ;
Association / Bar Association / GBA / Data Processor – Legal Entity Under Public Law Georgian Bar Association (LEPL GBA ) (identification number: 202255692, address: Georgia, Tbilisi, Tinatin Virsaladze Dead End I, N1, ????), which determines the purposes and means of personal data processing , directly or through an authorized person performs data processing;
The User – refers to any person who enters the website and uses it to receive information or services;
Data Subject - any natural person about whom data is processed;
Personal Data - any information related to an identified or identifiable natural person. A person is identifiable when it is possible to identify him/her directly or indirectly, namely by an identification number or by physical, physiological, psychological, economic, cultural or social characteristics of a person.
1. Personal Data Protection Policy
The association processes and protects personal data in compliance with both international data protection standards and on Law of Georgia On Personal Data Protection .
2. Scope of Data Protection Policy
2.1 This policy fully applies to the processing of personal data by GBA by automatic, semi-automatic or non-automatic means and is used in the process of personal data protection.
2.2 This policy applies to all persons whose data is processed by the association, as well as to data recipients and authorized persons who process personal data on behalf of or for the association.
3. Basics and Principles of Personal Data Processing
3.1 GBA processes personal data only in the following cases:
3.1.1. data subject consent;
3.1.2. data processing is provided by law;
3.1.3. data is publicly available;
3.1.4. data was made publicly available by the data subject himself/herself;
3.1.5. data processing is necessary based on the application of the data subject in order to provide services to him/her;
3.2 Data processing is carried out in accordance with specific principles:
3.2.1 Fairness and legality - personal data must be processed fairly and legally, without violating the dignity of the person;
3.2.2 Existence of a clearly defined legal purpose - it is necessary to have a specific purpose for which the data is processed. The use of data for other purposes is not allowed.
3.2.3 Proportionality and Adequacy - data must be processed in the minimum volume necessary to achieve the specific purpose of data processing; Data itself should also be relevant to this purpose.
3.2.4 Personal data storage period - Personal data must be kept for the period specified by law or for the period necessary to achieve the purpose.
4. Personal Data Category and Processing
4.1 GBA mainly collects and processes several categories of personal data. In particular: name, surname, personal number, registration number, telephone number, e-mail, address, bank account data, bank card data, IP address used to access the GBA website.
4.2 Processing of personal data means collecting, recording, photographing, audio recording, video recording, organizing, storing, changing, and restoring personal data of a person using automatic, semi-automatic or non-automatic means.
4.3 The consent of the data subject shall be expressed orally, in writing, by telecommunication or other appropriate means, in a manner that allows the consent of the data subject to be ascertained and a corresponding record made.
4.4 The association may process data based on the needs of the service or only in special cases with the help of another data processor. Data processing must comply with the established standards of GBA and the requirements established by the legislation of Georgia.
5. Video Surveillance and Audio Recording
In order to ensure safety and property protection, as well as service quality control, in compliance with the requirements established by the Law of Georgia On Personal Data Protection of Georgia , the external perimeter, entrances and corridors of the building are monitored in the association through video surveillance and audio recording systems.
6. Transfer of Personal Data to Third Parties
6.1 GBA may transfer the personal data of the data subject to third parties for the following purposes: for providing the perfect service to the data subject, in the cases defined by the legislation of Georgia, in order to fulfill the duties assigned to GBA according to the legislation of Georgia, as well as based on the agreements signed by the association with third parties, governmental units.
6.2 Third parties are natural and/or legal entities, partners of GBA , governmental units, with whom the need to communicate and share information arises from obligations arising from the Georgian legislation and/or contractual relationship.
7. Obtaining Personal Data from Third Parties
7.1. GBA may obtain the personal data of the data subject from third parties for the following purposes: for providing the perfect service to the data subject, in the cases determined by the legislation of Georgia, for the purpose of fulfilling the duties imposed on the association by the legislation of Georgia, as well as the obligations assumed by the association based on the agreements signed with third parties, governmental units, partner organizations.
7.2. The third party is natural and/or legal entities, partners of GBA , governmental units.
8. Data Processing through an Authorized Person
Based on the terms of this Policy, GBA may act as a data processor and on its behalf, or have data processed for it by an authorized person, only if the association has signed a corresponding written agreement with the authorized person.
9. Data Security
9.1 The association has adopted such reasonable organizational and technical measures that ensure the protection of data from accidental or illegal destruction, alteration, disclosure, extraction, any other form of illegal use and accidental or illegal loss.
9.2 Confidentiality of personal data is strictly protected in the association. Only those employees who need to process the data to perform their duties have access to them.
10. Rights and Obligations of the Data Subject
10.1 The data subject has the right to request GBA information about data processing. In such a case, the association shall provide the following information no later than 10 (ten) calendar days after receiving the notification of the request:
10.1.1 which category of data is processed about the user;
10.1.2 for what purpose the data is processed;
10.1.3 on what legal basis is the data processed;
10.1.4 in what way personal data was collected;
10.1.5 Whether the data has been given to the third party, to whom it was given - the data giver basis and purpose.
10.2 The data subject is entitled at any time to apply to GBA and in case the data is incomplete, inaccurate, not updated or if their collection and processing was carried out against the law, to request the correction, blocking, updating, addition, deletion or destruction of his/her personal data. In such a case, the association responds accordingly within 15 (fifteen) calendar days after receiving the notification.
10.3 The data subject is entitled at any time, without any explanation, to withdraw (request the termination of data processing and/or the destruction of processed data) the consent given by him/her to GBA regarding the processing of his/her personal data. In case the association processed personal data only on the basis of the consent expressed by the data subject, the association will ensure the implementation of appropriate actions within 5 (five) calendar days after receiving such notification.
11.Contact Information
For any issues related to personal data protection by Legal Entity Under Public Law Georgian Bar Association (LEPL GBA ), you can contact us at the following e-mail address: info@gba.ge, or/and at the GBA hotline number: (+995 32) 2 98 78 78.
