Last update: August 1, 2022
1.2. Personal data or data itself – is any information that can identify the Data Subject directly, such as name, email address, or information, which is related to the Data Subject indirectly, such as language selection or correspondence.
1.3. Labirint processes data in accordance with the EU General Data Protection Regulation 2016/679 (hereinafter «GDPR») and applicable data protection laws.
2.1. The data controller (operator) is:
Rivina Foundation – a non-profit organization, registered under the laws of Georgia.
Registration number: 404637933
Legal and current adress: 6 Mtkvari str., apartment 1a, Krtsanskyi raion, city of Tbilisi, Georgia.
(hereinafter referred to as “Labirint”).
2.2. The Data Subject has the right to contact the Labirint by e-mail regarding any questions related to the processing of Personal Data and the exercise of his/her rights firstname.lastname@example.org.
3.1. Data of women seeking help
When a woman seek help through the Website, the Labirint collects the following data by using the online form on the Website:
In providing help, the Labirint, Volunteers or psychologists receive from the Woman, orally and in writing, information that is necessary or that the Woman deems necessary to help her.
Purpose of processing: for Women coordination and communication with a psychologist or Volunteer to provide the requested help.
Processing basis: Execution of the contract.
3.2. Volunteers data.
Through the form on the Labirint Website, the Labirint collects the following data of women wishing to become Volunteers:
Purpose of processing Personal data: for cooperation and coordination.
Processing basis: Execution of the contract.
3.3. Donor’s data:
During the donation process, the Labirint collects the name and email of the Donor, the donation amount and the acceptance of the Donation Agreement and the User Agreement.
The Labirint receives and stores transaction data such as: transaction date and time, its amount, card name, and the last four digits of the card.
Purpose of processing Personal data: to accept donation and send receipt
Processing basis: Execution of the contract and fulfillment of the requirements of the law.
3.4. Website Usage Data
The Labirint collects information about the User’s activity on the Website.
These data include information about the User’s activities on the Website, such as:
Purpose of processing:
Data processing based on legitimate interest means that the Labirint uses data for the following purposes:
Cookies (including similar technologies) – are the files created by the visited websites, which allow to collect information about the User’s device and its activities on the visited websites (hereinafter referred to as the “Cookies”).
The Labirint uses the following categories of Cookies:
The Labirint does not collect or transfer information for marketing purposes.
For the above-mentioned purposes, Labirint uses services Google Analytics and Yandex. Metrica and Amplitude (hereinafter referred to as “Analytics services”).
The Labirint can transfer information to the following categories of persons:
|Volunteers and psychologists||To provide required help for Women;|
|Analytics service providers||For the correct functioning of the Website, remembering preferences of Data Subjects;|
|Payment service providers||For payment (donation) processing;|
|Other services providers||Labirint may contact various service providers to achieve the objectives set out in this Policy.|
Once information ceases to serve these purposes, the Labirint removes it.
Upon request of the Data Subject, the Labirint will delete and / or anonymize Personal Data without undue delay, not later than 30 days. The Labirint has the right to keep a part of Personal Data in cases where we have a legal right or a requirement to keep such Personal Data, for example, if:
7.1. Right to Access Your Personal Data – The data subject has the right to request a copy of his/her Personal Data and / or the way of Personal Data storage.
7.2. Right to Correction – The data subject is entitled to request that his/her Personal Data be changed or corrected if it is inaccurate.
7.3. Right to delete – The data subject has the right to request the deletion of all or part of his/her Personal data, for example, if:
7.4. Right of objection – The data subject has the right to object to the processing of his/her Personal data based on a specific situation and / or to object to the processing of data for direct marketing.
7.5. Right to object to automated processing – The data subject may object to a decision based on automated processing. This means that the Data Subject has the right to request the verification of his/her Personal data manually if it considers that the automatic processing of Personal data may not take into account his/her unique situation.
7.6. Right to data portability – The data subject has the right to request a copy of his/her Personal data in a structured, widely used and machine-readable format (for example, xml, csv). In addition, the Data Subject has the right to request the transfer of the Personal Data specified by him/her directly to another operator/controller.
7.7. Right to file a complaint – The data subject has the right to file a complaint with the supervisory body, in particular to the Member State of the European Union where he/she usually resides, works or the place of the alleged violation.
7.8. To exercise any of the rights, the data subject has the right to contact Labirint by e-mail: email@example.com. Before executing a request, the Labirint must identify the data subject.
The violation of the processing of personal data, if not corrected in an appropriate and timely manner, can lead to physical, material or non-material risk for the rights and freedoms of data subjects. Therefore, as soon as the Labirint becomes aware of a breach in the processing of personal data, the Labirint undertakes to notify the Commissioner for Personal Data Protection immediately, but not later than 72 hours, unless such violation does not compromise the rights and freedoms of the data subjects. If such notification cannot be received within 72 hours, the reasons for the delay shall be stated in the notification.
The Labirint can process the children’s data given to it at its discretion by the Woman who is the parent of the child, only for assisting the Woman and her child.
The Labirint consciously does not collect children’s personal data and does not process such information without parental consent.
In such cases, the Labirint undertakes to include in agreements with data controllers and processors located outside the EU or EEA issued by the European Commission standard contract clauses (SCC) adopted by the European Commission as an instrument for data transmission from EU countries.