Logo

Rules and Conditions for Processing Training Course/Conference Registrant Personal Data

Last updated: 1 month ago

Last Update: 18/11/2025

This document informs you about the rules and conditions under which LLC "Medical Center Cito" (ID: 204888461, hereinafter referred to as “Cito”) processes the personal data of individuals registered for an educational course/conference.

1. Purposes of Data Processing

"Cito" processes the personal data of course/conference registrants for the following purposes:

  • Candidate selection and communication;
  • Course/conference registration;
  • Execution and administration of the training agreement;
  • Communication and management of organizational matters during the course/conference;
  • Fulfillment of obligations defined by Georgian legislation.

These rules and conditions apply both to candidates who undergo initial registration via "Cito"’s official website and to individuals whose data is transferred to "Cito" through other online platforms (e.g., Education Management Information System).

2. Legal Grounds for Data Processing

"Cito" processes the personal data of a course/conference registrant on the basis of the information provided by the data subject, the subject’s consent, the agreement, and Georgian legislation.

3. Data Retention Periods

"Cito" processes personal data for the period necessary to achieve the purposes of processing - for the duration of the consent or/and the period required to fulfill legal obligations.

4. Location of Data Processing

"Cito" processes the personal data of individuals registered for training/conference within the territory of Georgia and the European Union - the hosting of "Cito" website and registration platform is located in Germany.

Germany is a jurisdiction included in the list of countries ensuring adequate guarantees for personal data protection (as determined by Order No. 23 of the Head of the Personal Data Protection Service).

If data is transferred outside Georgia to a jurisdiction not included in the so-called "White List" under Georgian law, “Cito” ensures adequate data protection guarantees.

5. Data Security

“Cito” ensures data security using both technical and organizational methods (e.g., through access control, restriction of permissions, protection of transmission channels, network segmentation, and other preventive mechanisms).

6. Sharing / Disclosure of Data to Third Parties

The data processed by “Cito” regarding course/conference registrant may be shared or transferred to third parties, including but not limited to:

  • Georgian administrative bodies;
  • Courts;
  • Investigative authorities;
  • And/or other third parties, as required for legal compliance or for the legal or contractual purposes of data processing by “Cito”.

7. Data Deletion / Destruction

Once the purposes of processing personal data of a course/conference registrant are fulfilled and/or the processing period expires, the data will be deleted, destroyed, or retained in depersonalized form (except in cases provided by Georgian legislation).

Please note that in certain cases, regardless of the course/conference registrant’s withdrawal of consent, "Cito" may be legally obligated to continue processing personal data.

8. Photo/Video Recording Information

The registered participant should be aware that photo/video recording may take place during the training course/conference:

  • Such materials may be used on "Cito"’s official website, social media platforms and/or other official communication channels;
  • The recorded materials will be used solely for purposes related to the Company’s activities;
  • The Company is not obliged to notify the participant in advance about the publication of such materials;
  • This consent remains valid for an indefinite period, unless the participant submits a written request for its withdrawal;
  • The Company is obliged to ensure data confidentiality and not to use the materials for unlawful purposes or in a manner that may harm the participant’s reputation.

If the registered participant does not wish to be photographed or recorded, or does not consent to the use of photo/video materials, they must submit a written request to "Cito"’s Personal Data Protection Officer prior to the commencement of the training course/conference.

9. Rights of Individuals Registered for Training/Conference

Course/conference registrants have the right to:

  • Receive information about the personal data processed about them;

  • Request correction, updating, completion, blocking or deletion of their personal data;

  • Withdraw previously given consent (noting that "Cito" may still be legally required to process data despite consent withdrawal);

  • If they are thinking their data protection rights have been violated by "Cito" lodge a formal complaint. Complaints should be directed to "Cito’s" Data Protection Officer, Mari Jamagidze:

    • In writing: at the legal address – 40 Zakaria Paliashvili St., 0179 Tbilisi, Georgia
    • In writing: at any "Cito" branch
    • By e-mail: to the Data Protection Officer’s e-mail address – pdpo@cito.ge
    • By phone: at the officer’s contact number (+995) 551 173 939

Working hours: Monday - Friday, 09:00 - 18:00

Please include the following in your statement:

  • Full name;
  • Contact information (phone, e-mail);
  • Reason for the statement;
  • Clearly defined content of the request.