Privacy policy

Purpose

When visiting the website www.amarasouvenir.com, you are required to review our privacy policy. This privacy policy may be amended and supplemented from time to time, so Amara encourages you to review it periodically.

A user who voluntarily provides personal information to Amara automatically grants Amara the right to use that personal data for the purposes of storage and processing.

This privacy policy defines the rules, purposes, and conditions for the use and storage of Amara users' personal data. Based on the Law of Georgia "On Personal Data Protection" and the General Data Protection Regulation (GDPR), Amara's goal is to protect users' personal data.

This document (the Privacy Policy) forms an integral part of Amara's website terms and conditions of use, and constitutes a mutually binding document.

Definitions

The following terms used in this document have the meanings set out below:

Amara (hereinafter "we," "our," "the website") — LLC "Amara 2025," established under the laws of Georgia, identification code 405767102, registered at: Tbilisi, 9 Bakhtrioni St., Apt. 18;

Personal data — any information relating to an identified or identifiable natural person. A natural person is identifiable when it is possible to identify them, directly or indirectly, including by name, surname, identification number, geolocation data, electronic communication identification data, or physical, physiological, mental, psychological, genetic, economic, cultural, or social characteristics;

Data processing — any operation performed on data, including its collection, acquisition, access, photographing, video and/or audio monitoring, organization, grouping, cross-referencing, storage, alteration, restoration, retrieval, use, blocking, deletion or destruction, as well as disclosure of data through transfer, publication, distribution, or otherwise making it accessible;

Data subject (hereinafter, the user) — any natural person about whom data is being processed;

Consent of the data subject (user) — the free and clearly expressed will of the data subject, given after receiving the relevant information, to have their data processed for a specific purpose, expressed through active action, in writing (including electronically) or verbally;

Data controller — a natural person, legal entity, or public institution which, individually or jointly with others, determines the purposes and means of data processing, and carries out the processing directly or through an authorized processor;

Data processor — a natural person, legal entity, or public institution that processes data for or on behalf of the data controller. A natural person who is in an employment relationship with the data controller is not considered a data processor;

Third party — a natural person, legal entity, or public institution other than the data subject, the Personal Data Protection Service, the data controller, the data processor, a special representative, and a person authorized to process data under the direct instruction of the data controller or data processor;

Direct marketing — the direct and immediate provision of information to a data subject by telephone, mail, email, or other electronic means, for the purpose of forming, maintaining, promoting, and/or supporting interest in a natural and/or legal person, goods, ideas, services, work, and/or an undertaking, as well as image-related and social topics.

Consent

Use of Amara's website is deemed to constitute the user's consent to this privacy policy. Accordingly, the user grants Amara the right to process, store, and use the personal information provided by the user.

This information will be used by Amara for service-provision purposes, in accordance with applicable legislation. Otherwise, Amara would be unable to provide any type of service to the user or enter into a contractual relationship.

Legal Basis for Data Processing

The legal basis for the processing of users' personal data by Amara and any authorized processor is as follows:

  • Data processing is necessary to fulfill an obligation undertaken under an agreement concluded with the data subject, and/or to conclude an agreement at the data subject's request;
  • Based on the user's consent;
  • To fulfill obligations imposed under a contractual relationship;
  • Data processing is necessary in order to provide services to the user.

Purposes of Processing the User's Personal Data

  • Improving the quality of Amara's services;
  • Proper fulfillment of Amara's legal obligations;
  • Resolving claims submitted by users;
  • Monitoring user activity on the website;
  • Notifying users of updates related to Amara;
  • Effective communication with users;
  • Collecting user feedback;
  • Testing innovations introduced by Amara;
  • Introducing new products and updates on the website;
  • Identifying user groups to whom updates should be offered;
  • Carrying out marketing and other activities;
  • Providing users with information about their purchases;
  • Receiving information from an authorized third party regarding a user's fulfillment of a monetary obligation;
  • Preventing unlawful use of Amara's systems;
  • Preventing crimes under the Criminal Code of Georgia;
  • Providing information to competent state authorities;
  • Protecting legitimate interests;
  • Any other legitimate purpose granted to Amara under the Law of Georgia on Personal Data Protection.

User Rights

The user has the right to request the following information from Amara regarding data processing:

  • What data concerning the user is being processed by Amara;
  • The purpose of the data processing;
  • The legal basis for the data processing;
  • The means by which the data was collected/obtained;
  • To whom data about the user has been disclosed, and the basis and purpose of such disclosure (if applicable);
  • The data retention period or the criteria for determining it;
  • Information about decisions made through automated processing, including profiling, and the logic used to reach such decisions, as well as the significance and expected/probable consequences of such processing for the user;
  • The right to access and receive a copy of the data.

The user has the right to receive the above information no later than 10 business days from the date of the request. In special cases, and with appropriate justification, this period may be extended by no more than 10 additional business days, of which the user will be notified immediately.

Given the specific nature of Amara's operations, Amara notifies users electronically.

Within 10 business days of receiving a user's request, Amara is obligated to correct/update/complete any incorrect/inaccurate/incomplete data about the user, or to inform the user of the grounds for refusing the request and explain the applicable appeal procedure.

The user has the right to request that Amara stop, delete, or destroy the processing (including profiling) of data concerning them. Within 10 business days of receiving such a request, Amara is obligated to stop/delete or destroy the existing data concerning the user, or to inform the user of the grounds for refusing the request and explain the applicable appeal procedure.

In the following cases, the user has the right to request that Amara block data concerning them: the user disputes the authenticity or accuracy of the data; the data processing is unlawful, but the user objects to its deletion and instead requests that the data be blocked; the data is no longer necessary to achieve the purpose of processing, but the user needs it to submit a claim/lawsuit; the user has requested that data processing be stopped, deleted, or destroyed, and this request is under review; or there is a need to retain the data for use as evidence. The user has the right to be informed of the decision regarding the blocking of data, or the grounds for refusing to block the data, immediately upon the decision being made, but no later than 3 (three) business days from the request. Apart from storage, Amara may otherwise process the data in the following cases: with the user's consent; to substantiate a legal claim or defense; to protect the interests of Amara or a third party; or in accordance with law, to protect the public interest.

If the user has given consent to the processing of their data for one or more specific purposes, and/or if data processing is necessary to fulfill an obligation undertaken under an agreement concluded with the user or to conclude an agreement at the user's request, and/or if the user has given written consent to the processing of a special category of data for one or more specific purposes (if applicable), the user has the right to receive the data they provided to Amara in a structured, commonly used, machine-readable format, or to request that this data be transferred to another data controller.

The user has the right not to be subject to a decision made by Amara based solely on automated processing, including profiling, that produces legal or other significant effects for the user, except where the decision based on profiling: is based on the user's explicit consent; is necessary for the conclusion or performance of a contract between the user and Amara; or is provided for by law or by a subordinate normative act issued within the scope of authority delegated by law.

The user has the right, at any time, to withdraw consent previously given to Amara and to request that data processing be stopped and/or that processed data be deleted/destroyed, by contacting Amara's support team via email. In such a case, Amara will, within 10 (ten) business days, stop processing the data and/or destroy the processed data, provided there is no other legal basis for processing. Before withdrawing consent, the user has the right to request and receive information from Amara about the possible consequences of withdrawing consent.

If the user's rights under the Law of Georgia "On Personal Data Protection" are violated, the user is entitled to apply to the Personal Data Protection Service or to a court.

User's Obligation

The user is obligated to provide Amara with complete and accurate information about themselves in order to receive services. This obligation also applies to any changes to the information provided by the user.

Terms of Use of Amara's Website

By using Amara's website, the user consents to the storage and processing of their personal data and cookies by Amara.

The user is obligated to provide Amara with complete and accurate information, and to update the information provided in the event of any changes.

Minors

Amara is unable to verify the truthfulness and accuracy of the information provided by a user, including the user's age. If it becomes known that the person providing the information is not of legal age, Amara reserves the right to disregard the information provided by the minor. If you become aware that a person registered on Amara is a minor and does not have the consent of a legal representative to use the website, please notify us.

Who We Share User Data With

Personal data is shared with a partner courier service company, which ensures delivery of purchased products to the address specified by the user. The following information about the user is transferred to the partner courier company: order details, first and last name, address, and contact number. Information provided to the partner courier company will be used solely for the purpose of delivering purchased products.

Sharing of the user's personal data may also become necessary in cases provided for by the current legislation of Georgia, for the purpose of establishing, investigating, or preventing a crime.

In the interest of the user, for the purposes of direct marketing, delivery of promotional materials, offering services of interest to the user, products, and improving the quality of services, Amara may — with the user's consent — use the user's personal information, specifically their name and email address/phone number.

Amara is authorized to share personal information with any third party in cases provided for by the current legislation of Georgia.

Consent to / Withdrawal from Direct Marketing

The user gives consent for direct marketing purposes through active action.

The user may, at any time, withdraw consent previously given to Amara for direct marketing. Amara will, in turn, stop direct marketing to the user within a reasonable time after receiving the withdrawal request, but no later than 7 (seven) business days.

A user's withdrawal of consent for direct marketing is done by contacting hello@amarasouvenir.com.

Amara is obligated to record and retain the time and fact of the user's granting and withdrawal of consent for the duration of the direct marketing activity and for 1 (one) year after the direct marketing activity ends.

A user's request to stop direct marketing does not obligate Amara to stop providing information about updates and changes.

Log Files and Cookies

Amara follows a standard log file procedure. Like other websites, Amara uses cookies. Log files and cookies are used to help the website store information about user behavior and improve the quality of service. Through them, the following information is generated and collected:

  • IP address;
  • Device type;
  • Browser;
  • Time, date, and duration of the website visit;
  • The platform from which the user was redirected to Amara's website;
  • Information about actions taken on Amara's website — which products the user viewed.

This information does not identify a specific user and constitutes analytical data.

The purposes of processing such information are:

  • To analyze trends;
  • To enable Amara to manage the website;
  • To compile statistics;
  • To track user actions on the website in order to improve user experience;
  • To develop and implement effective marketing activities;
  • To provide advice and recommendations.

When a user begins using the website, they are given the option to accept cookies.

Cookie settings can be changed through the browser's settings.

Collection of Data

Amara receives information from the following sources:

  • When the user fills out the website's registration form;
  • When communication takes place by phone or email;
  • When the user uses Amara's website.

What Type of Data Is Processed

When placing an order, the user provides the following information:

  • Mobile phone number;
  • Email;
  • Address;
  • First and last name.

After selecting products, the user is redirected, for payment purposes, to the bank's payment page, where they enter their card details and confirm the transaction. Amara does not have access to the user's bank card details. Amara receives information from the user regarding the completion of payment.

Retention Period of Confidential Data

Amara takes responsibility for the confidentiality and security of the user's personal data.

Amara stores/processes confidential information about the user for the period necessary to achieve the purpose set out by legislation, this policy, and the specific nature of Amara's operations.

Third Parties

Amara disclaims any and all responsibility with respect to other websites that may be linked to from Amara's website via external links. The privacy policy of another website may differ from this policy. Accordingly, Amara encourages you to review the terms of use and privacy policy of any externally linked website.

Amendments and Additions

This document may be amended and supplemented. In the event of amendments or additions, the user will receive personal notice, or the changes will be published on the website.

Amendments and additions take effect after Amara sends the user personal notice or publishes them on the website. Following the entry into force of any amendments or additions, continued use of the website by the user will be considered as consent to the amended terms.

Contacting Amara

For questions related to the privacy policy and to obtain additional information, please contact us at: hello@amarasouvenir.com