Privacy Policy

TERMS AND DEFINITIONS

We kindly ask you to carefully review the Policy, as it will help you understand the scope of its application and make an informed decision regarding the provision of your Personal data. In case of disagreement with these terms, the Client should refrain from using the services provided by the Operator.
It is recommended to periodically review this page for updated information on the Operator’s Policy.
"Platform" — the set of functional features of the software system "Getcourse" used by the Operator to provide access to the Site’s content.

"Platform" - The aggregate of functional capabilities of the "Getcourse" software system used by the Operator to provide access to the content of the Website.
"Operator" — Individual Entrepreneur Svetlana Igorievna Manakova, utilizing the Platform and her personal Site to provide Users with services specified in the Offer Agreement.
"Client"/"User" — an individual who has accepted the terms of the Offer Agreement to gain free or paid access to the Site and Platform of the Operator.
"Site" — an automated information system on the Internet accessible through the following domain addresses: ancestors-radio.com.
"Product" — digital content placed on the Platform, access to which is provided by the Site and Platform for the purpose of educating the Client/User.
"Personal data" — information about Users that can be used directly or indirectly to establish their identity (name, address, phone number, date of birth, email, etc.). Data that cannot be used to identify the User, such as anonymized, de-identified, technical data, and other information, do not fall under Personal data.
"Processing of personal data" — any process that involves the Personal data of the User.
"Privacy Policy (abbreviated as Policy)" — a document regulating the policy of collecting, processing, and storing Personal data by the Operator, available at the following Internet address: ancestors-radio.com/privacy_policy
"General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27.04.2016 (GDPR)" — the General Data Protection Regulation of the European Union (GDPR).

INTRODUCTION. ABOUT THE PERSONAL DATA PROCESSING POLICY

1.1. The Policy for processing personal data (hereinafter referred to as the "Policy") is issued and applied by Individual Entrepreneur Svetlana Manakova (hereinafter referred to as the "Operator") in accordance with the General Data Protection Regulation / GDPR, established by the Resolution of the European Union 2016/679, as well as in accordance with other similar laws and legal acts of other states.
1.2. This Policy establishes the procedure and conditions of the Operator regarding the collection, processing, and storage of personal data, sets forth provisions aimed at compliance with the legislation of the Georgia and other states regarding the collection, storage, and processing of personal data.
1.3. Clients give their consent to the processing of personal data in accordance with this Policy when registering a Personal account on the Operator’s Site, as well as by filling out forms on the Site and through payment for access to the content, online courses.


2. BASIC PROVISIONS

2.1. Purpose of Personal Data Processing:
The purpose of processing personal data is to provide services by the Operator upon the request of the data subject (Client — Site User).
2.2. Operator Processes Clients' Personal Data for the Following Purposes:
Provision of services by the Operator according to the contract concluded between the Operator and the Client.
Establishment of feedback with the Client, including the sending of notifications regarding the provision of services, processing requests, and applications from the Client.
2.3. Processing Principles Organized by the Operator Include:
Legality of the purposes and methods of processing personal data, fairness, and justice in the Operator’s activities.
Accuracy of personal data, its sufficiency for processing purposes, inadmissibility of processing personal data excessive in relation to the purposes stated during the collection of personal data.
Processing only those personal data that meet the purposes of their processing. Processed personal data should not be excessive in relation to the stated purposes of their processing.
Compliance of the content and volume of processed personal data with the stated purposes of processing.
Inadmissibility of combining databases containing personal data processed for incompatible purposes.
Ensuring the accuracy, sufficiency, and, where necessary, relevance of personal data in relation to the purposes of processing. The Operator takes necessary measures or ensures their adoption to delete or clarify incomplete or inaccurate data.
Storage of personal data in a form that allows identifying the data subject for no longer than required by the purposes of processing personal data.
Ensuring the recording, systematization, accumulation, storage, clarification (updating, changing), and retrieval of personal data of citizens using those databases that should be used in accordance with the legislative acts of theGeorgia and other countries.
2.4. Categories of Data Subjects Whose Personal Data Are Processed Include Clients-Users of the Site: Individuals in contractual relations with the Operator. Also, legal representatives of clients-users of the site may be subjects.

3. TECHNICAL INFORMATION AND CATEGORIES OF PERSONAL DATA PROCESSED BY THE OPERATOR
3.1. The Operator Processes the Following Personal Data:
Name, surname, patronymic of the data subject.
Phone number of the data subject.
Email address of the data subject.
Account and personal cabinet of the data subject for the purpose of communication and exchanging messages within the Site and Platform.
Image (photograph) of the data subject placed by them in their account on the Platform.
Other information provided by the data subject to the Operator of personal data through the Site, Platform, and their tools related to obtaining information about the data subject for the purposes of and in the process of providing services to them according to the Offer Agreement — ancestors-radio.com/terms.
3.2. The Operator of Personal Data Collects, Gains Access to and Uses Technical and Other Information Related to Users, but Not Constituting Personal Data, for Certain Purposes Stipulated by the Policy.
3.3. Such technical information includes: Information automatically transmitted to the Operator of personal data during the use of the Site, Platform, and/or Personal Account through software installed on the User’s device:
Information about the User’s activity on the Internet, including visited pages, date and time of URL transitions, etc.
Information about the device and browser through which the User accessed the Internet: IP address, type of device, and its unique identifier (if the User accesses the Site from a mobile device).
Information about the interaction with the displayed outside the resource advertising of the Operator of personal data, their quantity, frequency, and depth of view.
Automatically transmitted data depending on the settings of the User’s software in an anonymized form.
3.4. The Operator of Personal Data also uses cookies: Cookies files — these are small text files (data fragments) accessible to the Operator of personal data for processing data about the User’s activity on the Site, Platform, in the Personal Account, including information about which pages the User visited and the time spent on the page. These files are stored on your device (computer, tablet, smartphone) from which access is subsequently made when revisiting the site. The User can disable the use of cookies in the browser settings.

Cookie files are used for the purpose of simplifying and facilitating the use of the Site. The Operator does not use cookie files to store personal information or disclose information to third parties.
Cookie files are divided into permanent and temporary (session cookie files). Permanent cookie files are stored on your device for no more than 12 months. Temporary cookie files are deleted after you close the browser. Using browser settings, you can easily delete cookie files from any of your devices. Instructions and other reference information on cookie files are also contained in your browser. You can disable the use of cookie files or choose the option to notify you of each use of cookie files on your computer or mobile device. If you prohibit the use of cookie files, many functions of our site will be limited.
Each browser contains information about working with cookies, as well as the ability to disable the use of these files.

3.5. The Data Subject Acknowledges and Accepts the Possibility of Using Third-Party Software on the Site, Platform, and/or in the Personal Account of the Operator: As a result, such third parties may receive and transmit the data specified in paragraph 3.1. in an anonymized form.

4. METHODS AND CONDITIONS OF PROCESSING CLIENTS' PERSONAL DATA

4.1. Processing Methods:
Personal data mentioned above is processed using automation tools and without automation. When processing personal data without automation, the Operator follows the provisions of the Regulation on the Features of Personal Data Processing Carried Out Without the Use of Automation Means, approved by the Government of the Georgia as well as other laws and legal acts of other states. The processing of personal data of citizens and residents of the European Union is carried out in accordance with the General Data Protection Regulation (GDPR).
4.2. Security Measures:
The Operator applies legal, organizational, and technical measures to ensure the security of personal data in accordance with of the Federal Law of the Georgia," the General Data Protection Regulation of the European Union, as well as other laws and legal acts of other states.
4.3. Platform for Providing Services:
The Operator provides services by placing its website on the technical basis of the platform at getcourse.io/, which represents the software "ГЕТКУРС 2.0."designed for creating an online school and organizing the learning process on the Internet. The website getcourse.ru uses the HTTPS extension to the HTTP protocol to enhance security and protect information.
4.5. Non-Disclosure of Personal Data:
The Operator does not disclose personal data to third parties and does not distribute personal data without the consent of the data subject, except in cases provided by the current legislation of the Georgia, the legislation of other states, and as stipulated in this Policy.
4.6. Assessment of Harm:
The assessment of harm that may be caused to data subjects in case of violation of the Operator’s requirements is determined in accordance with law of the Georgia.
4.7. Relationship Between Harm and Measures Taken:
The ratio of the specified harm and the measures taken by the Operator to prevent, prevent, and/or eliminate its consequences is determined in accordance with the federal law of the Georgia, the General Data Protection Regulation (GDPR), established by the Resolution of the European Union 2016/679, as well as in accordance with other similar laws and legal acts of other states.

4.8. Conditions for Processing Personal Data:
Personal data is processed by the Operator after the data subject accepts the offer for the provision of services. Acceptance is considered registration on the Site, Platform for training by filling out the site form, creating an account, and a personal cabinet. A request for registration and providing access to the material through contact details specified on the site.
According to Article 5, Article 6 of the federal law of the Georgia and other regulatory acts, including the General Data Protection Regulation (GDPR), the data subject accepts the offer on their own initiative and is a party and a beneficiary under the concluded contract. Separate consent to the processing of personal data is not required in this case.
The conditions of this Policy are available to users in open access before accepting the offer for the provision of services.
4.9. Storage of Personal Data:
The storage of users' personal data is carried out in a form that allows identifying the data subject.
4.10. Interaction with Authorities:
Interaction with federal executive authorities on issues of processing and protecting the personal data of subjects, the personal data of which is processed by the Operator, is carried out within the framework of the legislation of the Russian Federation, as well as the legislation of other states.

4.11. Third Parties Involved in Personal Data Processing:

GetCourse Kazakhstan LLP
BIN: 220 340 029 013
Kazakhstan, Almaty city, Bostandyk district, Nursultan Nazarbayev Avenue, house 189/2, sq. 1, postal code 50 013

Hosting services and services for providing a dedicated server are provided by ООО "Селектел" selectel.ru/about/details.

5. ENSURING THE SECURITY OF PERSONAL DATA

5.1. Organizational and Technical Measures:
The Operator takes necessary organizational and technical measures to protect the Client’s personal information from unauthorized or accidental access, destruction, alteration, blocking, copying, distribution, as well as other unlawful actions by third parties. The Operator adheres to industry standards for protecting personal information provided to him at all stages of personal data processing.
5.2. Operator’s Autonomy in Determining Security Measures:
In accordance with the federal law of the Georgia and other legal acts of other states, including the General Data Protection Regulation (GDPR) of the European Union, the Operator independently determines the composition and list of measures necessary and sufficient to ensure compliance with the obligations stipulated by legislation in the field of personal data.
5.3. Data Protection Measures:
Appointment of a person responsible for the processing and protection of personal data.
Approval of this Policy.
Organization of access for Operator’s employees to information containing clients' personal data in accordance with their job responsibilities.
Clients protect their personal data by withdrawing consent to the processing of their personal data or by other means provided by the legislation.
The Operator, together with the Client, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the Client’s personal data.
In case of loss or disclosure of personal data, the Operator informs the Client about the loss or disclosure of personal data.

5.4. Person Responsible for Data Processing:
The person responsible for processing personal data is the Operator or its legal representative.
5.5. Responsibilities of the Person Responsible for Data Processing:
Internal control over compliance with the legislation of the Georgia and other states on personal data, including requirements for the protection of personal data.
Control over the receipt and processing of appeals and requests from data subjects or their representatives.
Taking measures to detect facts of unauthorized access to personal data.
Constant control over ensuring the level of security of personal data.
Internal control and/or audit of compliance with the processing of personal data with the federal law of Georgia and regulatory legal acts adopted in accordance with it.

5.6. Rights of Data Subjects:
Data subjects or their representatives have rights as provided by the federal law of Georgia and the General Data Protection Regulation (GDPR) established by the Resolution of the European Union 2016/679.
5.7. Protection of Rights:
The Operator ensures the rights of data subjects in the manner established by Chapters 3 and 4 of the federal law of Georgia, and the General Data Protection Regulation (GDPR) established by the Resolution of the European Union 2016/679.

5.8. Contact Information of the Operator:

Individual entrepreneur Svetlana Manakova
Identification number 305 642 533, Georgia
Registration data 23/08/2023
E-mail: direct@radiomanakova.com
Post address: Georgia, 0108, City Tbilisi, 3 Lesia Ukrainka St.
Email: direct@radiomanakova.com

5.9. Representative Authorization:
The representative’s authority to represent the interests of each data subject is confirmed by the appropriate power of attorney.
5.10. Information Provided to Data Subjects:
Information specified in Part 7 of Article 22 of the federal law of Georgia, provided to the data subject in an accessible form without personal data related to other data subjects, except in cases where there are legal grounds for disclosing such personal data, in electronic form. Upon the request of the data subject, they may be duplicated on paper.
5.11. Providing Information upon Request:
Information specified in legal acts of Georgia is provided to the data subject or its representative in person or upon receiving a request from the data subject or its representative. The request must contain the number of the main identity document of the data subject or its representative, information about the date of issue of the specified document and the issuing authority, information confirming the participation of the data subject in relations with the Operator (contract number, date of contract conclusion, conditional verbal designation, and/or other information), or information otherwise confirming the fact of personal data processing by the Operator, the signature of the data subject, or its representative. If technically possible, the request may be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of Georgia.
5.12. Limitation of Access Rights:
The right of the data subject to access their personal data may be limited in accordance with federal laws.
5.13. Provision of Access:
The Operator is obliged to provide the data subject or its representative with the opportunity to familiarize themselves with personal data related to this data subject at its location during working hours, free of charge.

6. RESPONSIBILITY OF THE PARTIES

6.1. Operator’s Responsibility:
In the event of the Operator’s failure to fulfill its obligations, the Operator is responsible for the losses incurred by the Client due to the unauthorized use of personal data, in accordance with the legislation of the Georgia and the legislation of other states.
6.2. Loss or Disclosure of Confidential Information:
In the case of loss or disclosure of confidential information, the Operator is not responsible if this confidential information became public domain before its loss or disclosure or was disclosed with the consent of the Client.

7. ADDITIONAL TERMS

7.1. Right to Amend:
The Operator has the right to make changes to this Personal Data Processing Policy without the consent of the Client.
7.2. Effective Date of Changes:
The new Policy comes into effect from the moment it is posted on the Website unless otherwise provided by the new version of the Policy.
7.3. Contact Information:
All suggestions or questions regarding this Policy should be addressed to direct@radiomanakova.com.
7.4. Current Policy Location:
The current Personal Data Processing Policy is available on the page at#nbsancestors-radio.com/privacy_policy