Privacy Policy
This policy explains what personal data we process when you use the STATION website and our coworking space in Tbilisi, why we process it, and the rights you have. We process data in accordance with the Law of Georgia on Personal Data Protection.
Who processes your data (controller)
"Kala 2008" LLC (ID 204551449), registered address: Vertskhlis St. №1, Krtsanisi district, Tbilisi, Georgia. Brand: STATION. Email: info@station.com.ge.
What we collect
- Booking details: name, phone, email, the spot, day(s) and hours you choose;
- Account details: email and password (stored only as a secure hash);
- Membership and payment records: plan, amount, status, reference — we never store card numbers; cards are handled by the payment provider;
- Visit records: check-in / check-out times noted at reception;
- Support chat messages;
- Technical data your browser sends (e.g. device type).
Purposes and legal bases
- Providing bookings, memberships and accounts — performance of a contract;
- Day-to-day operation, security and service improvement — our legitimate interest;
- Tax and accounting duties — legal obligation;
- Direct marketing — only with your separate consent (we currently send none); you can withdraw consent at any time.
Cookies
We use essential cookies only: session cookies that keep you signed in (staff and client sign-in). The browser's local storage keeps your language choice, a chat identifier and your acknowledgement of the cookie notice. We use no advertising or tracking (analytics) cookies.
Who we share data with
We do not sell your data. It may be shared only with: our hosting provider (technical operation), the payment provider (for online payments), staff notification channels (about new bookings), and state authorities — only where the law requires it.
Retention
We keep data for as long as needed to provide the services and for the statutory tax/accounting periods, then delete or anonymise it.
Your rights
- Receive information about, and a copy of, your data;
- Request correction, updating or erasure;
- Request restriction of processing or object to it (including direct marketing);
- Withdraw consent at any time.
Write to info@station.com.ge or ask at reception. You also have the right to lodge a complaint with the Personal Data Protection Service of Georgia (www.pdps.ge) or a court.
Security
We apply reasonable technical and organisational measures to protect data (hashed passwords, protected access, access limits).
Video surveillance (CCTV)
The premises are under video surveillance. Purpose: safety of people and protection of property. A warning sign is displayed prominently in the space.
- Cameras cover working and common areas; they never cover private areas (e.g. washrooms);
- Recordings are kept for a limited period (no longer than 30 days) and then erased — unless needed to investigate a specific incident;
- Only authorised staff can access recordings; they are disclosed only where the law requires it (e.g. to law-enforcement bodies);
- You may request information about recordings concerning you: info@station.com.ge.
Changes
If we update this policy, the current version is always on this page. We will additionally announce material changes.