Terms and conditions

Privacy Policy

Purpose

When visiting the website www.panex.ge, you are balanced to familiarize yourself with our Privacy Policy. Changes and additions may be made to this Privacy Policy; therefore, JSC Panex encourages you to review the Privacy Policy periodically.

A user who voluntarily provides personal information to JSC Panex automatically authorizes JSC Panex to use the user's personal data for storage and processing purposes.

This Privacy Policy defines the rules, purposes, and conditions for the use and storage of personal data processing for JSC Panex users. Based on the Law of Georgia on Personal Data Protection and the General Data Protection Regulation (GDPR), JSC Panex aims to protect the user's personal data.

This document (Privacy Policy) constitutes an integral part of the Terms and Conditions for using the JSC Panex website, which is a mutually binding document.

Definition of Terms

The terms used in this document have the following meanings:

JSC Panex (hereinafter "we", "our", "the Website") – Joint Stock Company "Panex", established in accordance with Georgian legislation, Identification Code: 405034911, Registered Address: 17th km, Red-Bridge Highway, Rustavi, Georgia.
Personal Data – Any information related to an identified or identifiable natural person. A natural person is identifiable when they can be identified directly or indirectly, including by name, surname, identification number, geolocation data, electronic communication identifiers, or physical, physiological, mental, psychological, genetic, economic, cultural, or social characteristics.
Data Processing – Any operation performed on data, including collection, acquisition, access, photography, video and/or audio monitoring, organization, grouping, interconnection, storage, alteration, restoration, retrieval, use, blocking, deletion, or destruction, as well as disclosure of data by transmission, publication, distribution, or otherwise making it available.
Data Subject (hereinafter "User") – Any natural person whose data is being processed.
Consent of the Data Subject (User) – A freely and clearly expressed will by the data subject, through an active action, in writing (including electronically) or orally, to process data about them for a specific purpose after receiving relevant information.
Data Controller – A natural person, legal entity, or public institution that, individually or together with others, determines the purposes and means of data processing and carries out the processing directly or through an authorized processor.
Authorized Processor – A natural person, legal entity, or public institution that processes data for or on behalf of the Data Controller. A natural person in an employment relationship with the Data Controller is not considered an authorized processor. For the purposes of this document, JSC Panex is also considered an authorized processor.
Third Party – A natural person, legal entity, or public institution other than the data subject, the Personal Data Protection Service, the controller, the authorized processor, a special representative, or a person authorized to process data under the direct mandate of the controller or authorized processor.
Direct Marketing – The direct and immediate provision of information to a data subject via telephone, mail, e-mail, or other electronic means to generate, maintain, realize, or support interest in a natural or legal person, goods, ideas, services, work, or initiatives, including image-related and social themes.

Consent

Use of the JSC Panex website is considered the user's consent to the Privacy Policy. Accordingly, the user grants JSC Panex the right to process, store, and use the personal information provided by the user.

This information will be used by JSC Panex for the purpose of providing services, considering the current legislation. Otherwise, JSC Panex will be unable to provide any services to the user or enter into a contractual relationship.

Grounds for Data Processing

The legal grounds for JSC Panex and the authorized person to process the user's personal data are as follows:

Processing is necessary to perform an obligation under a transaction concluded with the data subject or to enter into a transaction at the request of the data subject;
Based on the user's consent;
To fulfill duties imposed by a contractual relationship;
Processing is necessary to provide services to the user.

Purpose of Processing Personal Data

Improving the quality of JSC Panex services;
Proper fulfillment of legal obligations by JSC Panex;
Resolving claims submitted by the user;
Monitoring user activities on the website;
Notifying users of updated data on Panex.ge;
Effective communication with the user;
Establishing user feedback;
Testing innovations introduced by JSC Panex;
Implementing new products and updates on the website;
Identifying groups of users for targeted offers;
Carrying out marketing and other activities;
Providing information regarding purchases made by the user;
Receiving information from an authorized third party regarding the user's fulfillment of financial obligations;
Prevention of unlawful use of the JSC Panex system;
Prevention of crimes provided for by the Criminal Code of Georgia;
Providing information to competent state authorities;
Protection of legal interests;
Other legitimate purposes granted to JSC Panex by the Law of Georgia on Personal Data Protection.

User Rights and Authorities

The user has the right to request the following information from JSC Panex regarding data processing:

Which specific data regarding the user is being processed by JSC Panex;
The purpose of data processing;
The legal basis for data processing;
The method by which the data was collected/obtained;
To whom the user's data was disclosed, and the basis/purpose of such disclosure (if applicable);
Information regarding the data retention period or the criteria for determining it;
Information regarding decisions made through automated processing (including profiling), the logic used, and the expected impact/consequences of such processing;
The right to access the data and receive a copy.

The user has the right to receive the above information no later than 10 working days from the request. In exceptional cases and with proper justification, this period may be extended by no more than 10 additional working days, of which the user will be notified immediately.

Given the nature of JSC Panex's activities, information is provided to the user in electronic form.

Within 10 working days of submitting a request, JSC Panex is obliged to correct/update/complete any erroneous/inaccurate/incomplete data or inform the user of the grounds for refusal and explain the appeal procedure.

The user has the right to request JSC Panex to stop processing, delete, or destroy their data (including profiling). Within 10 working days, JSC Panex must comply or provide a refusal with a legal explanation.

The user has the right to request the blocking of data if:

The user disputes the authenticity or accuracy of the data;
The processing is unlawful, but the user opposes deletion and requests blocking instead;
The data is no longer needed for processing purposes, but the user requires it for a legal claim;
The user requests the termination, deletion, or destruction of data while the request is under review;
There is a need to preserve the data as evidence.

The user will be notified of the decision on blocking immediately, but no later than 3 working days.

Data Portability and Automated Decisions

The user has the right to receive their data in a structured, commonly used, and machine-readable format or request its transfer to another controller.

The user also has the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal or significant effects, unless it is based on explicit consent, necessary for a contract, or authorized by law.

Withdrawal of Consent

The user may withdraw their consent at any time via email to the support team. JSC Panex will cancel the user's account and stop processing/destroy the data within 10 working days, provided there are no other legal grounds for processing.

In case of a violation of rights, the user may contact the Personal Data Protection Service or the court.

User Obligations

The user is obliged to provide complete and correct information to JSC Panex. This obligation also applies to any subsequent changes to the provided information.

Call Center

For the purpose of quality improvement, problem resolution, feedback, and security, incoming and outgoing calls are recorded, stored, and processed.

Website Terms of Use

By using the website, the user consents to the storage and processing of personal data and Cookies.

Minors

JSC Panex cannot verify the accuracy of user information, including age. If it becomes known that a user is a minor and lacks legal representative consent, JSC Panex reserves the right to disregard the information provided. Please notify us if you become aware of such a case.

Data Sharing

Personal data is shared with the Tidio application for customer support purposes.
Data may be shared with state authorities as required by Georgian law for crime prevention or investigation.
With user consent, JSC Panex may use names and email/phone numbers for direct marketing and service improvements.

Consent/Withdrawal of Direct Marketing

Consent for direct marketing is given through an active action. The user can withdraw this consent at any time. JSC Panex will stop direct marketing within a reasonable timeframe, but no later than 7 working days after receiving the request.

Changes and Additions

Changes may be made to this document. Users will be notified via personal message or publication on the website. Continued use of the website after such changes signifies consent to the updated terms.

Data Protection Officer / Contacting JSC Panex For questions regarding the Privacy Policy or for additional information, contact us at: info@panex.ge