1) Scope

This Policy applies to the official TMA website and online services operated by or on behalf of TMA. It does not apply to third‑party websites linked from our site.

2) Data protection framework

TMA processes personal data in accordance with:

• Georgian Law on Personal Data Protection
• European Union General Data Protection Regulation (GDPR)

TMA has an appointed Data Protection Officer (DPO) and maintains internal policies that govern how personal data is processed, stored, and protected.

3) Personal data we collect

We may collect the following categories of personal data:

• Basic contact details (name, email, phone) when you contact us or complete forms
• Academic and administrative information when relevant to educational processes
• Technical information (IP address, browser type, pages visited) for website functionality and analytics
• Documents and submissions uploaded via forms or provided through external platforms (e.g., Google Docs)

4) How we collect data

We collect data:

• Directly from you (e.g., through forms or email communication)
• Automatically when you use our website (e.g., cookies, analytics tools)
• From third-party platforms linked from our website (subject to their policies)

5) Legal bases for processing

We process personal data based on one or more of the following legal grounds:

• Consent (Article 6(1)(a) GDPR)
• Contractual necessity (Article 6(1)(b) GDPR)
• Legal obligations (Article 6(1)(c) GDPR)
• Legitimate interests (Article 6(1)(f) GDPR)

6) How we use personal data

We may use your personal data to:

• Respond to inquiries
• Provide access to academic resources and services
• Manage student and staff records
• Communicate news, events, and updates
• Ensure website security and improve performance

7) Sharing and international transfers

We do not sell or rent your personal data. We may share data with:

• Authorized TMA staff and departments
• Service providers acting on our behalf (e.g., IT support, hosting providers)
• Regulatory authorities where required by law

8) Cookies and tracking

Our Website uses cookies and similar technologies to improve functionality and measure traffic. See our Cookie Policy for more details.

9) International data transfers

Where personal data is transferred outside Georgia or the European Economic Area (EEA), appropriate safeguards are applied in accordance with applicable laws.

10) Your rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the State Inspector’s Service of Georgia or your local supervisory authority

11) Data retention

Personal data is retained only as long as necessary for the purposes described above or as required by law.

12) Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

13) Contact (Data Protection Officer)

For any questions or requests regarding your personal data, please contact our Data Protection Officer:

Data Protection Officer: Anamaria Bagalishvili
Email: anamaria.bagalishvili@geosafety.ge
Tel: (+995) 592 11 94 93

14) Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.