Privacy Policy
1. For the purposes of the Domain Regulation personal information is any information related to identified or identifiable natural person submitted to the Registry and/or Registrar in connection with the Domain Name registration.
2. For the purposes of the law of Georgia on “Personal Data Protection” the Registry is data controller and the Registrar is data processor who processes data based on the Registrar Contract and Domain Regulation.
3. The Registry and Registrar process personal data in the following way:
3.1 For the purposes of reviewing registration application submitted by the Registrant, providing registration services, based on the consent of the Registrant expressed in the registration application and in the agreement concluded between the Registrar and Registrant the Registry and Registrar collect and process the following personal data:
(i) full name, contact e-mail, contact phone number, residential address (country, state (if any), postal code, city, street, apartment) of the Registrant, Technical Contact Person and Administrative Contact Person, Billing Contact Person (if any);
(ii) personal number, age, sex, date of birth, number of personal identification document, country issuing personal identification document, or in case of no personal number, country of citizenship of the Registrant, Administrative Contact Person, Billing Contact Person (if any);
(iii) financial information related to the payment of the Domain Name registration fee and registration renewal fee, including account number;
(iv) information about the Domain Name registered under the name of the Registrant, date of recent entry of amendments into the registration data, date of expiration of registration of the Domain Name, and status of the Domain Name, date of termination of registration and cancelation of registration of the Domain name (if any);
(v) information about the Name Servers of the Domain Name registered under the name of the Registrant;
(vi) information collected in an automatic way in a form of log files which among others include the following information: data about the use of the Domain Name by the Registrant, change of registration data, use of the Registrant’s profile.
4. The Registry and Registrar are authorized to collect personal information of the Registrant for the purposes of providing Registration Service to the Registrant and necessary for, including but not limited to the following actions:
(i) registering domain name registration and provisioning of Registration Services;
(ii) publishing on the webpage data related to the Registrant and Domain Name registered under his/her name via WHOIS Service;
(iii) fulfilling operations or taking decisions related to the competence of the Registry/Registrar;
(iv) following laws or standards, instructions or customary practice, mandatory rules which apply to the Registry/Registrar, also protecting violated or disputed rights via court or other alternative dispute resolution mechanism;
(v) checking the authorization of the Registrant, Technical Contact Person and Administrative Contact person;
(vi) functioning of the Domain Name Registry.
5. The Registry/Registrar is authorized to disclose personal information of the Registrant in the following circumstances:
(i) publishing information about the Domain Name on the webpage in accordance with Section 7.4.1.1 of the Domain Regulation;
(ii) transferring information to authorized body having respective jurisdiction, including WIPO Arbitration and Mediation Center, court, alternative dispute resolution body.
6. The Registry and Registrar are authorized to process and keep personal information of the Registrant during the term of the registration agreement concluded between the Registrar and Registrant and for the period of 3 (three) years after the expiration/termination of the term of the agreement. After the expiry of such term the Registrar/Registry shall delete personal information of the Registrant.
7. After the termination /expiry of the term of the agreement concluded for providing Registration Services the Registrant is entitled to request from the Registrar/Registry deletion of his/her personal information and the Registry/Registrar shall delete personal information of such Registrant.
8. The Registrant, Administrative Contact Person and Technical Contact Person have right to request at any time from the Registry and Registrar who received application for registering domain name or changing Registrar to disclose information about his/her personal data processed by the Registrar/Registry.
