Privacy and Data Protection Policy
1. Data Controller
The controller of your personal data is Individual Entrepreneur Ekaterina Shchukina (ID: 326120996), operating under the trade name Katya Schukina, with its activities conducted in accordance with the laws of Georgia.
2. Information We Collect
We may collect the following categories of personal data:
Identity & Contact Data: Name, surname, email address, shipping address, phone number.
Transaction Data: Order details, purchase history, payment method (but not full card details).
Technical Data: IP address, browser type and version, time zone, operating system.
Communications Data: Your correspondence with us.
3. Purposes and Legal Basis for Processing
We process your data for the following purposes and on the following legal grounds:
Performance of a Contract: To process and deliver your order, manage payments, and provide customer support.
Legal Obligation: To comply with accounting and tax legislation of Georgia (retention of financial records for 10 years).
Consent: To send marketing communications about new artworks and promotions. You can withdraw your consent at any time by clicking "unsubscribe" in any email or contacting us.
4. Data Sharing
We share your data only with trusted third-party service providers strictly necessary to fulfill the contract:
Payment Processors (UniPAY, PayPal): To process your payment. We do not receive or store your full payment card information.
Shipping and Logistics Companies (DHL, Georgian Post, EMS): To deliver your order.
IT and Cloud Service Providers: For website hosting and operations.
We require all third parties to respect the security of your data and to process it only in accordance with our instructions and applicable law.
5. International Transfers
Your data may be transferred to and processed in countries outside Georgia (e.g., for payment processing or email services). We ensure such transfers are protected by appropriate safeguards.
6. Data Retention
We retain your personal data only for as long as necessary:
Order and Transaction Data: 10 years from the end of the fiscal year of the transaction, in accordance with the tax and accounting legislation of Georgia.
Contact Data for Marketing: Until you withdraw your consent.
General Contact and Customer Service Data: 1 year after the resolution of your inquiry, unless longer retention is required for legal purposes.
7. Your Rights
Under the Law of Georgia "On Personal Data Protection" and analogous regulations, you have the right to:
Request access to, correction, or deletion of your personal data.
Object to processing or request restriction of processing.
Withdraw your consent for marketing communications at any time.
Lodge a complaint with the relevant supervisory authority.
To exercise these rights, please contact us at schukinaart@gmail.com. We will respond within 30 days.
8. Cookies and Tracking Technologies
This website uses necessary cookies for basic functionality (e.g., shopping cart). We may also use analytical cookies (e.g., Google Analytics) to understand how visitors use our site. You can control cookie settings through your browser preferences.
9. Data Security
We implement appropriate technical and organizational measures (such as encryption and access controls) to protect your data against unauthorized access, alteration, or destruction.
10. Contact Us
For any questions regarding this Privacy Policy or your personal data:
Data Controller: Individual Entrepreneur Ekaterina Shchukina
Email: schukinaart@gmail.com
