Last Update: 18/11/2025

This document informs you about the rules and conditions under which LLC "Medical Center Cito" (ID: 204888461, hereinafter referred to as “Cito”) processes job applicants’ personal data.

---

1. Purposes of Data Processing

“Cito” processes job applicants’ data for the following purposes:

• Selection, recruitment, and employment of job applicants;
• Communication with applicants;
• Fulfilling obligations under Georgian law.

These rules and conditions apply to both applicants who directly submit applications to “Cito” and those whose data is provided to “Cito” through employment agencies (third parties).

---

2. Legal Grounds for Data Processing

“Cito” processes job applicants’ data based on applicants’ consent or the requirements of Georgian law.

---

3. Data Retention Periods

“Cito” processes applicants’ data for the period necessary to achieve the purpose of processing - either for the duration of the consent granted by the applicant or for the period required by law to fulfill legal obligations.

---

4. Data Security

“Cito” ensures data security using both technical and organizational methods (e.g., defining access rights, restricting permissions, pseudonymization).

---

5. Data Transfer/Sharing with Third Parties

The data processed by “Cito” regarding job applicants may be shared or transferred to third parties, including but not limited to:

• Georgian administrative bodies;
• Courts;
• Investigative authorities;
• And/or other third parties, as required for legal compliance or for the legal or contractual purposes of data processing by “Cito”.

---

6. Location of Data Processing

“Cito” processes job applicants’ data within the territory of Georgia and the European Union - the hosting of "Cito" website and registration platform is located in Germany.

Germany is a jurisdiction included in the list of countries ensuring adequate guarantees for personal data protection (as determined by Order No. 23 of the Head of the Personal Data Protection Service).

If data is transferred outside Georgia to a jurisdiction not included in the so-called "White List" under Georgian law, “Cito” ensures adequate data protection guarantees.

---

7. Data Deletion/Destruction

Once the purpose of data processing is achieved or the retention period expires, the data will be deleted, destroyed, or stored in a depersonalized form except in cases specified by Georgian law.

In some cases, even if the job applicant withdraws or cancels their consent, “Cito” may be legally required to continue processing the data.

---

8. Job Applicant Rights

Job applicants have the right to:

• Receive information about the personal data processed about them;

• Request correction, updating, completion, blocking or deletion of their personal data;

• Withdraw previously given consent;

• If they are thinking their data protection rights have been violated by "Cito" lodge a formal complaint. Complaints should be directed to "Cito’s" Data Protection Officer, Mari Jamagidze:

  • In writing: at the legal address – 40 Zakaria Paliashvili St., 0179 Tbilisi, Georgia
  • In writing: at any "Cito" branch
  • By e-mail: to the Data Protection Officer’s e-mail address – pdpo@cito.ge
  • By phone: at the officer’s contact number (+995) 551 173 939

Working hours: Monday - Friday, 09:00 - 18:00

Please include the following in your statement:

• Full name;
• Contact information (phone, e-mail);
• Reason for the statement;
• Clearly defined content of the request.
• Clearly formulated content of the request.