1. GENERAL PROVISIONS1.1. This Personal Data Processing Policy (hereinafter referred to as the Policy) regulates the procedure for processing and protecting personal data collected by
Mib Orbita (hereinafter referred to as the Operator) in accordance with the legislation of Georgia and international standards.
1.2. The Operator aims to ensure the protection of human rights and freedoms in the processing of personal data, particularly in safeguarding the right to privacy.
1.3. The Policy applies to all information that the Operator may receive from visitors to the website
https://orbitatours.com.
2. KEY TERMS2.1. Personal data – any information relating to an identified or identifiable individual.
2.2. Processing of personal data – any action performed with personal data, including collection, storage, transfer, and deletion.
2.3. Automated processing of personal data – processing using computing technology.
2.4. User – any visitor to the website
https://orbitatours.com.
3. RIGHTS AND OBLIGATIONS OF THE OPERATOR3.1. The Operator has the right to: — receive accurate information from the personal data subject; — process personal data when there are legal grounds; — determine the measures necessary for the protection of personal data.
3.2. The Operator is obligated to: — provide data subjects with information on their data processing; — comply with the personal data legislation of Georgia; — ensure the protection of personal data from unauthorized access.
4. RIGHTS AND OBLIGATIONS OF PERSONAL DATA SUBJECTS4.1. The personal data subject has the right to: — obtain information regarding the processing of their data; — request correction, blocking, or deletion of their personal data; — withdraw consent for data processing; — file complaints against the Operator’s actions with regulatory authorities or courts.
4.2. The personal data subject is required to: — provide accurate data; — notify the Operator of updates or changes to their personal data.
5. PRINCIPLES OF PERSONAL DATA PROCESSING5.1. Processing is conducted on legal grounds.
5.2. Only data relevant to declared processing purposes are processed.
5.3. The accuracy, adequacy, and confidentiality of personal data are ensured.
5.4. Data storage duration is determined by processing objectives, after which the data is either deleted or anonymized.
6. PURPOSES OF PERSONAL DATA PROCESSING6.1. The Operator processes personal data for: — informing users; — providing services; — complying with legal requirements.
7. CONDITIONS FOR PERSONAL DATA PROCESSING7.1. Processing is carried out with the consent of the data subject or based on legal grounds.
7.2. Data may be transferred to third parties only with consent or under legal requirements.
8. ENSURING THE SECURITY OF PERSONAL DATA8.1. The Operator implements measures to protect data from unauthorized access.
8.2. Only authorized personnel have access to personal data.
8.3. In case of a data breach, the Operator notifies the relevant authorities.
9. CROSS-BORDER DATA TRANSFER9.1. Transfer of personal data outside Georgia is conducted with appropriate security measures in place.
10. FINAL PROVISIONS10.1. The Operator reserves the right to make changes to this Policy.
10.2. The current version of the Policy is available on the website
https://orbitatours.com/privacy.