1. General Provisions

This Privacy Policy (the "Policy") outlines how personal data of users of the website www.umbravision.studio (the "Website") is processed and protected by Umbra Vision (operating as Individual Entrepreneur Eduard Gafiiatullin) (the "Controller" or "We"). The Controller is registered at: Georgia, Akhaltsikhe region, Abi, Tbis qvemot. Registration number: 145982470. Contact: teamumbravision@proton.me. This Policy is developed in accordance with the Law of Georgia on Personal Data Protection (№ 5669-RS of December 28, 2011, as amended) (the "PDPL") and, where applicable (e.g., for EU residents), the General Data Protection Regulation (EU) 2016/679 ("GDPR").
By using the Website, you consent to the terms of this Policy. If you do not agree, please refrain from using the Website.

2. Collection and Use of Personal Data

We collect the following personal data:

• Name;
• Email address;
• Phone number;
• IP address, browser data, and cookies (for analytics);
• Other information provided in forms for web development or web design, or programming services.

Purposes of processing:

• Processing service requests and orders;
• Concluding and performing contracts;
• Improving services and the Website;
• Sending informational materials (with your consent);
• Complying with legal obligations.

Legal basis: Your consent, contract performance, legitimate interests (e.g., Website improvement), or legal requirements. Data is not shared with third parties except as required by law (e.g., authorities) or for service delivery (e.g., hosting providers under confidentiality agreements). For international transfers (e.g., to non-adequate countries), we use appropriate safeguards like standard contractual clauses.

3. Rights of Data Subjects

You have the right to:

• Access your data and information about its processing;
• Rectify inaccurate data;
• Request erasure (right to be forgotten);
• Restrict processing;
• Data portability (receive and transfer data);
• Object to processing;
• Withdraw consent at any time (without affecting prior processing);
• Not be subject to automated decision-making (with exceptions);
• Lodge a complaint with the Personal Data Protection Service of Georgia (pdps.ge) or, if applicable, an EU supervisory authority.

Send requests to teamumbravision@proton.me; we respond within 30 days (or as required under PDPL for access).

4. Data Protection Measures

We ensure data security through:

• Encryption (e.g., HTTPS);
• Restricted access (only authorized personnel);
• Regular security audits;
• Storage on servers compliant with PDPL/GDPR standards.

Retention period: No longer than necessary (typically up to 5 years after service completion or consent withdrawal). In case of a breach, we notify you and the Personal Data Protection Service if risks are involved.

5. Cookies and Analytics

The Website uses cookies for traffic analysis (e.g., Google Analytics). You can disable cookies in your browser settings, but this may affect functionality. We obtain consent for non-essential cookies.

6. Changes to the Policy

We may update this Policy. The new version will be posted on the Website with the effective date. Continued use constitutes acceptance.

7. Responsibility

We are not liable for third-party actions obtaining data outside the Website.
In case of a breach, we will notify affected parties and authorities as required by law.

For questions, contact: teamumbravision@proton.me.