Consent Withdrawal Form
Last update date: 03.02.2026
For JSC “Greenway Georgia”, protecting your private life and personal data in accordance with best privacy practices and applicable legislation is a priority. It is important for us to inform you about what data we collect about you and what we use it for.
This statement describes the process of processing your data through our website - www.greenway.ge - and outlines your data protection rights and the mechanisms for exercising them. Please read this policy carefully to learn about our approaches and practices regarding the processing of your data.
The terms used in this policy have the meanings defined by the Law of Georgia “On Personal Data Protection” and other normative acts.
Who we are and how to contact us? Full company name and profile: JSC “Greenway Georgia”, I/C: 404867006 (hereinafter “we”, “Greenway”, and/or “the Company”) carries out periodic technical inspections of motor vehicles in operation and registered on the territory of Georgia. The company is accredited by the LEPL Unified National Accreditation Body - Accreditation Center.
When you use this website, Greenway acts as the Data Controller.
Address and contact details: No. 24 University Street, Vake District, Tbilisi, Georgia; Tel: +995 322 997 777; Email: info@gwg.ge.
In case of questions regarding this statement and/or Greenway’s personal data processing practices, please contact us:
Personal Data Protection Officer – “Privacy Professionals” LLC (I/C: 405682916). Email: info@privacypros.ge.
What Data Do We Process?
As a periodic technical inspection center, in accordance with the applicable legislation of Georgia, we require information to provide our services. We receive this information both directly from you and from sources provided for by legislation. The categories of data processed by us include the following:
Registration data, personal number, phone number, first name, last name, vehicle registration plate number, vehicle type, confirmation of vehicle ownership, IP address used to access the Greenway website (https://greenway.ge), IMEI code, data regarding your actions performed on the website, and information about your location (device type, the browser used to access the website; the domain name you requested; your Internet Service Provider (ISP) name determined according to your connection; the date and time of your visit to the website; the duration of your session; information about actions performed on the website, including various applications or fields filled by you, the filling process, and the time taken to fill them; the pages you opened while using the website; the number of visits to our website during any given month; the URL of the file you are viewing and related information; the referral page that directed you to our website; and the operating system used by your computer). We use various analytical services to track “traffic” on our website.
The collection of the data we process is necessary to ensure compliance with legislative or contractual obligations. When collecting data, we will inform you which information is mandatory to provide and the potential consequences of failing to provide such information.
We collect information directly from you when you provide it voluntarily - for example, by filling out the relevant information when booking periodic technical inspection services. Additionally, we process data from other sources, such as when verifying state registration plate number of your motor vehicle.
Data of minors: This website is not intended for minors under the age of 16, and we do not collect data related to them. If we learn that information has been provided by a minor under the age of 16, we will take all necessary measures to comply with data protection legislation, including, if necessary, deleting such data.
Purposes of Data Processing
At Greenway, your personal data may be processed for various purposes; however, the purpose is always specific, clearly defined, and lawful.
The “Company” processes your data only to the extent necessary to achieve a lawful purpose and only for the period required to fulfill the purpose of the data processing.
Your personal data may be processed for the following purposes (this list is not exhaustive):
o Impartial and efficient execution of periodic technical inspections;
o Fulfillment of legislative requirements and ensuring compliance;
o Adherence to local and international standards;
o Crime prevention;
o Execution of direct marketing;
o Identifying potential customers and providing services to them.
Legal Grounds for Data Processing
The “Company” processes your personal data only when an appropriate legal basis exists. During data processing, one or several grounds may exist simultaneously.
We process personal data based on the following grounds:
o The voluntary consent of the data subject (you) exists for the processing of data for one or more specific purposes, which may be expressed in written, verbal, telecommunication, electronic, or other appropriate forms;
o Data processing is necessary to fulfill an obligation undertaken by a transaction concluded with the data subject or to enter into a transaction at the request of the data subject;
o Data processing is provided for by law;
o Data processing is necessary for Greenway to fulfill the duties imposed on it by legislation;
o The data is publicly available in accordance with the law or has been made publicly available by the data subject;
o Data processing is necessary to protect the vital interests of the data subject or another person;
o Data processing is necessary to protect a significant public interest;
o Data processing is necessary to perform tasks belonging to the sphere of public interest as defined by the legislation of Georgia;
o Data processing is necessary to protect the significant legitimate interests of Greenway or a third party, except in cases where the interest of protecting the rights of the data subject (including minors) prevails;
o Data processing is necessary to protect a significant public interest in accordance with the law;
o Data processing is necessary to review the application of the data subject and to provide services to them.
Recipients of Your Data
We undertake to protect the confidentiality and security of any type of information received. However, the transfer/disclosure of personal data to third parties may become necessary in cases directly provided for by legislation or within the scope established by the agreement concluded with the customer. Consequently, the recipients of certain categories of personal data may include:
o Agencies/ institutions defined by legislation, such as LEPL Service Agency of the Ministry of Internal Affairs of Georgia; LEPL Unified National Accreditation Body – Accreditation Center; the Revenue Service; and LEPL Social Service Agency;
o Parties participating in a transaction or their representatives;
o Service providers – including but not limited to: external auditors of Greenway, courier and/or research organizations, IT service providers (e.g., cloud infrastructure services), and/or any other persons with similar functions;
o Greenway group companies, subject to your consent;
o Other persons (natural or legal) who process your personal data for Greenway or on behalf of the company, only if Greenway has concluded a corresponding written agreement with the authorized processor. Before concluding an agreement, Greenway always verifies the reliability of the party in advance and ensures that the agreement includes the authorized processor’s obligation to implement such organizational and technical measures that will protect your data. After concluding the agreement, Greenway monitors the process of the fulfillment of obligations by the authorized processor - namely, it checks the authorized processor’s workplace where your personal data is processed through its representatives and conducts on-site inspections to verify the data security measures implemented. Agreements concluded between Greenway and the authorized processor provide for sanctions for the violation of these obligations.
Data Retention Period
Data will be stored throughout the entire period of your service and for the duration necessary to achieve the purposes listed above, including after the provision of services to you, if required to fulfill obligations prescribed by legislation.
Confidentiality Guarantees
Greenway ensures the maximum protection of the provided information in accordance with the rules established by legislation. We care about the security and confidentiality of your information; however, we disclaim responsibility for any unauthorized access to information by third parties during the transmission of this data to the company (including during the remote provision of information).
You assume responsibility for the accuracy of the information provided. In the event of changes to your data, you may notify us accordingly, and we will respond as promptly as possible - but no later than 10 (ten) working days - to reflect these changes in the relevant databases. Greenway takes appropriate security measures to protect the data under its control from unauthorized access, unlawful use, disclosure, destruction, or accidental loss.
The company also ensures the implementation of appropriate security measures and procedures; it maintains a documented information security program and an information security policy, which define administrative, technical, operational, and physical security control measures that are proportionate to the nature of the collected information and our business operations.
We take your privacy and data protection rights seriously. Except for the cases defined in this policy, we will only disclose your data if required by law, regulatory and/or law enforcement agencies, to protect our own rights or the rights of others, or in other cases provided for by legislation.
Your Data Protection Rights
You have the opportunity to exercise all the powers granted to you by legislation, including:
o Right to receive information regarding data processing
You have the right to request confirmation from us and the authorized processor (data processor) as to whether data about you is being processed, whether the data processing is justified, and, upon request, to receive the following information free of charge:
- a) Regarding the data being processed about you, as well as the basis and purpose of this processing;
- b) Regarding the source of data collection/procurement;
- c) Regarding the data retention period (time), or if a specific period cannot be determined, the criteria for determining the period;
- d) Regarding the legal basis and purposes of data transfer, as well as appropriate data protection guarantees if the data is transferred to another state or international organization;
- e) Regarding the identity of the data recipient or categories of data recipients, including information on the basis and purpose of the data transfer if the data is transferred to a third party;
- f) Regarding decisions made as a result of automated processing, including profiling, and the logic used for making such decisions, as well as its impact on data processing and the expected/likely outcome of the processing.
o Right to access data and receive a copy
As a data subject, you have the right to review the personal data held about you by us and the authorized processor and to receive copies of this data free of charge, except for exceptions provided by legislation.
o Right to rectification, updating, and completion of data
You have the right to request that we and the authorized processor correct, update, and/or complete erroneous, inaccurate, and/or incomplete data about you.
o Right to terminate data processing, deletion, or destruction
You have the right to request that we and the authorized processor terminate the processing (including profiling), delete, or destroy data about you.
o Right to block data
As a data subject, you have the right to request that we and the authorized processor block data if one of the following circumstances exists:
- a) You contest the authenticity or accuracy of the data;
- b) The data processing is unlawful, yet you oppose its deletion and request the blocking of the data instead;
- c) The data is no longer necessary to achieve the purpose of processing, but you require it to file a complaint/lawsuit;
- d) You have requested the termination of processing, deletion, or destruction of data, and the review of this request is pending;
- e) There is a necessity to store the data for the purpose of using it as evidence.
o Right to data portability
In the case of automated data processing based on grounds provided by legislation, if technically feasible for us, you have the right to receive the data provided by you from us and the authorized processor in a structured, commonly used, and machine-readable format, or to request the transfer of this data to another data controller.
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or other significantly important consequences for you, except in cases provided for by legislation.
o Right to Withdraw Consent
You have the right to withdraw the consent you provided for personal data processing at any time, without any explanation or justification. In such a case, in accordance with your request, we will cease data processing and/or delete or destroy the processed data within the terms established by legislation, provided that no other legal basis for data processing exists.
You have the right to withdraw consent in the same form in which you granted it. Furthermore, you can also do this by sending a written notification to our legal address, contacting our phone number (+995 32 2 997 777), sending an electronic message to our email address: info@gwg.ge, or by submitting a request at any of our offices.
You have the right to request and receive information regarding the possible consequences of withdrawing your consent before doing so.
Please note that to exercise the aforementioned rights, we will carry out your identification to ensure that information containing personal data is provided to the data subject or a properly authorized person.
o Right to Appeal
In the event of a violation of the rights and rules established by the legislation of Georgia “On Personal Data Protection”, you have the right to approach the Personal Data Protection Service, the court, and/or a superior administrative body in accordance with the rules established by law.
Additionally, you have the authority to appeal our actions by contacting us at our official email address: info@gwg.ge.
o Right to Withdraw Consent for Direct Marketing
You also have the right to withdraw consent granted for direct marketing purposes at any time, free of charge, in the same form in which the direct marketing is being carried out toward you.
Also, if necessary, you have the right to withdraw consent by calling our phone number (+995 32 2 997 777), sending an email to info@gwg.ge, or by submitting a request at any of our offices.
The aforementioned rights are not absolute and may be restricted in cases provided for by legislation.
Changes to the Data Protection Policy
We reserve the right to update this policy at any time. In the event of essential changes to the processing of your personal data or the policy itself, you will have the opportunity to review the updated terms. This policy applies to all information we process about you through the website.
