Privacy policy

This privacy policy explains how we process personal data when you visit this website or contact us. We process personal data in accordance with the Law of Georgia “On Personal Data Protection” (in force since 1 March 2024).

1. Controller

Georgian Tours
Tbilisi, Georgia
Email: info@georgian-tours.ge
Phone: +995 551 07 87 82

2. Scope

This website and our services are operated from Georgia and are intended exclusively for persons outside the European Union and the European Economic Area. We do not offer goods or services to persons in the EU/EEA and do not monitor their behaviour.

3. Visiting the website (hosting)

This website is hosted on our behalf by epicsoft LLC (Georgia) on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in a data centre in Helsinki, Finland. When you open the website, the server technically processes the data your browser sends – in particular your IP address, date and time of the request, the requested page and browser information. This is necessary to deliver the website securely and to protect it against attacks. The server keeps no access logs. Only if a request causes an error does the error log record the time, the request and the IP address; these entries are deleted automatically after 30 days. We do not set any cookies.

4. Visitor statistics

We count page views with Umami, an open-source statistics tool that epicsoft LLC runs on our behalf on the same server of Hetzner Online GmbH in Helsinki, Finland, from which this website is delivered. When a page loads, a small script sends the following to stats.epicsoft.one: the address and title of the page, the referring page, the language of the browser and the screen size. The server records the time of the request and derives from it the browser, operating system and device type and – using a database stored on the server itself – country, region and city. Your IP address is not stored. From it, the user agent and a key that changes every calendar month, the server forms an identifier with which it groups repeated page views from the same browser within that month; once the month changes, no link to earlier page views can be made, and no link to other websites is made at all. The script sets no cookies and stores nothing on your device.

We use the statistics to see which pages and tours are read, how visitors find us and with which devices they use the website, in order to improve it. The processing is based on our legitimate interest in a website that meets the needs of its visitors (Article 5(1)(i) of the Law).

If “Do Not Track” is switched on in your browser, the page sends nothing. You can also block requests to stats.epicsoft.one with a content blocker; the website then works unchanged.

5. Contact form, email, phone and WhatsApp

When you send us an enquiry via the contact form, we process the data you enter: name, email address and – if provided – phone number, tour of interest, travel dates and your message, together with the language of the page and the time of sending. We use this data exclusively to answer your enquiry and to prepare an offer.

The form is transmitted to the form service of epicsoft LLC, which runs on the same server, and sent from there by email to our mailbox. To limit misuse, the service keeps the IP address of the request in memory for about an hour; it does not store the content of the form. To protect the form against spam, your browser solves a small computing task (ALTCHA) before sending – without cookies and without third parties. Emails to our addresses are received by the mail server of epicsoft LLC, which runs on servers of Hetzner Online GmbH in Finland and of netcup GmbH (Emmy-Noether-Str. 10, 76131 Karlsruhe) in Germany, and delivered to our mailbox.

The processing is based on your consent and on steps taken at your request prior to a possible contract. If you contact us by email, phone or WhatsApp, we process the data you provide in the same way. WhatsApp is a service of WhatsApp Ireland Ltd. / Meta Platforms, Inc.; its own privacy policy applies.

6. Retention

Enquiry data is deleted as soon as it is no longer required, at the latest 12 months after our last contact – unless a contract has been concluded and statutory retention obligations (e.g. under tax law) apply. Visitor statistics are deleted automatically 12 months after they were recorded.

7. Recipients and transfers abroad

We only share personal data with the service providers mentioned above, who process it on our behalf (epicsoft LLC, Georgia, with servers of Hetzner Online GmbH in Finland and netcup GmbH in Germany), or where we are legally obliged to do so. Finland and Germany are among the states in which adequate safeguards for data protection are ensured (Article 37(1) of the Law). We never sell your data.

8. Your rights

You have the right to receive information about the processing of your data, to access your data and receive copies, to have it corrected, updated or completed, to have it deleted or destroyed, to have its processing blocked, and to data portability. You can withdraw your consent at any time with effect for the future. To exercise your rights, simply contact us at info@georgian-tours.ge.

You also have the right to lodge a complaint with the State Audit Office of Georgia, which has been the supervisory authority for data protection since 2 March 2026 (pdp.sao.ge).

9. Security

This website is transmitted exclusively via encrypted connections (HTTPS/TLS). We take appropriate technical and organisational measures to protect your data.

10. Minors

Our services are not directed at persons under the age of 16. If you are younger, please ask a parent or guardian to contact us.

11. Changes

We may update this privacy policy if our website or the legal situation changes. The current version is always available on this page.