Personal Data Protection

1. Our Commitment to Data Protection

This Personal Data Protection Policy outlines the commitment of Brain Information Technologies ("Company," "we," "us"), operating as Pinatapin.com, to protecting the personal data of our users ("you"). As a company registered in Georgia, we are bound by the Personal Data Protection Act of Georgia and align our practices with internationally recognized data protection principles, including those set forth in the General Data Protection Regulation (GDPR).

This policy describes the principles we follow when processing your personal data and should be read in conjunction with our detailed Privacy Policy.

2. Data Controller

Brain Information Technologies, located at Georgia, Tbilisi, Vake district, Zakaria Paliashvili street, N 41, is the data controller responsible for the processing of your personal data.

3. Core Principles of Data Processing

We are committed to processing your personal data in accordance with the following core principles:

  • Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner.
  • Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes and do not further process it in a manner that is incompatible with those purposes.
  • Data Minimization: We ensure that personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
  • Accuracy: We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date.
  • Storage Limitation: We keep personal data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
  • Integrity and Confidentiality: We process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

4. Purpose and Legal Basis for Processing

We process your personal data primarily to provide you with our products and services. The main purposes include, but are not limited to:

  • Creating and managing your user account.
  • Processing your orders and delivering digital products.
  • Providing customer support and communicating with you.
  • Complying with our legal and regulatory obligations.
  • Conducting marketing and promotional activities, where you have provided consent.
  • Improving our services and ensuring the security of our platform.

A detailed description of our data processing activities and their legal bases is available in our Privacy Policy.

5. Data Security

We have implemented comprehensive technical, administrative, and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures are regularly reviewed and updated to meet the highest industry standards.

6. Data Subject Rights

We respect and uphold your rights over your personal data. In accordance with applicable data protection laws, you may have the right to:

  • Access the personal data we hold about you.
  • Request the correction of inaccurate or incomplete data.
  • Request the erasure of your personal data ("right to be forgotten").
  • Object to the processing of your personal data for certain purposes.
  • Request the restriction of processing of your personal data.
  • Withdraw your consent at any time, where processing is based on consent.
  • Lodge a complaint with a relevant data protection authority.

To exercise these rights, please refer to the instructions in our Privacy Policy or contact us directly.

7. International Compliance

While our operations are based in Georgia, we serve a global customer base. We are committed to ensuring that all personal data is protected, regardless of where our users are located. For users in Türkiye, we adhere to the principles of the Personal Data Protection Law (KVKK), as detailed in our specific KVKK Clarification Text.

8. Contact Information

For any questions, concerns, or requests regarding our data protection practices or this policy, please contact our Data Protection team:

  • Email: support@pinatapin.com
  • Address: Georgia, Tbilisi, Vake district, Zakaria Paliashvili street, N 41, entrance 1, basement floor
  • Phone: +995 598 00 17 38