Polityka prywatności

Version of 21 October 2026.

This policy explains what personal data the GeCoast website (gecoast.com) receives, why, where it is kept and how you can control it. We process data in line with the Law of Georgia on Personal Data Protection (2023).

Who processes the data

The operator of the website and of the personal data is Tsurkava Property, a real estate agency in Batumi, Georgia.

For questions about personal data, write to privacy@gecoast.com. Phone and Telegram are on the Contact page.

What data we receive

When you send a request on the website:

• your name;
• a contact to reply to: phone, email or Telegram username;
• what kind of buyer you are: private investor, company or fund, hotel operator, broker;
• your message, if you wrote one;
• the property page the request was sent from, and the page language;
• the time you gave consent and the time of sending.

The message reaches us in the request notification and is not stored in the website's database.

Technical data of a request: a hash of the IP address (the address itself is not stored; the hash uses a salt that changes every day) and browser details (user agent). We use them to protect the form from spam.

When you report an inaccuracy in the data (the “Report an inaccuracy” button on an object page): the object and the page's language, which field is wrong, what is wrong and where the right data is, as you wrote it; a contact only if you left one. To protect the form from spam we keep a hash of the IP address that changes every day; the address itself is not stored.

When you follow a complex in Telegram (the “Follow” button, our Telegram bot): your Telegram chat's number (the number Telegram gives the chat with the bot), the list of properties you follow, the language of the messages and the date you subscribed. We do not keep your name, username or phone, and we do not store your messages to the bot. We need this to send you the changes of the properties you chose: prices, instalments, status and handover date, new construction photos and floor plans.

Hosting logs: like any website, the server keeps technical request logs: IP address, time, page address, browser details.

When you write or call us yourself (phone, Telegram, WhatsApp, email), we receive what you tell us.

We do not ask for identity documents, payment details or special categories of personal data.

Cookies and analytics

The website sets no cookies for visitors. A cookie is used only for staff signing in to the admin area.

There are no analytics or advertising trackers on the website now. If we add visit statistics, we will choose a cookie-free service and update this policy.

The "Open in maps" button leads to Google Maps. These services have their own data rules.

Why we process data and on what basis

• To answer your request and prepare a deal (choosing a property, viewings, negotiations). The basis is your consent, given with the checkbox in the form, and steps taken at your request before a contract.
• To protect the website and the form from spam and attacks. The basis is our legitimate interest in the website's security.
• To meet legal requirements, where they apply to us.

We do not sell data or pass it on for advertising.

How long we keep data

• Requests in the website database: 365 days from receipt, then deleted automatically.
• The correspondence about requests: up to 3 years after our last contact with you, then deleted.
• A contact in an inaccuracy report: 365 days, then it is deleted automatically; the report itself stays without it, so that we can see the history of corrections.
• Telegram subscriptions: for as long as you follow a property. The /stop command in the bot deletes all your subscriptions at once, the “Unfollow this complex” button deletes one; if you block the bot or the property is taken off the site, the subscriptions are deleted automatically.
• Hosting logs: no longer than 30 days.
• If you withdraw consent or ask us to delete your data, we delete it sooner, unless the law requires us to keep it longer.

Who receives the data

The data is seen by the Tsurkava Property staff who handle requests. We also use services that process data on our behalf:

• Railway: website hosting, the database where requests are stored, and hosting logs;
• Telegram: notifications to staff about new requests (name, contact, buyer type, message, property page);
• Telegram: our bot's messages to the subscribers of “Follow” (the chat number and the text of the update);
• Cloudflare: the website's domain and DNS, the R2 file storage of the website (property photos and documents, no visitor data), and the Cloudflare Turnstile check that a person sends the form.

These companies are outside Georgia, and the data may be processed in the United States and the European Union. The transfer is based on your consent and on the safeguards these providers give in their contracts and security standards.

We may disclose data to public authorities only when the law requires it.

Your rights

You can:

• find out whether we process your data and get a copy of it;
• ask us to correct inaccurate data;
• ask us to delete your data or stop processing it;
• withdraw your consent at any time; this does not affect processing before the withdrawal;
• object to the processing.

Write to privacy@gecoast.com with the name and contact from your request so we can find your data. We reply within 10 working days; if we need more time, we will tell you.

If you believe your rights have been violated, you can complain to the Personal Data Protection Service of Georgia (personaldata.ge).

Security

The website works over HTTPS only. Only staff can access requests; the admin area is protected by a password and a second factor. IP addresses in requests are stored only as a hash.

Children

The website is meant for adults. We do not knowingly collect data from people under 18.

Changes to this policy

We may update this policy. A new version is published on this page with its date at the top.