Privacy Policy
Edition of 19.09.2026 · Law of Georgia “On Personal Data Protection” No. 3144/2023
Scope. This policy applies to the website insurance.100doc.ge. Health data is not collected during checkout: the policy is issued on passport details, and no medical examination or health questionnaire is required.
1. Who processes the data
1.1. Website operator and data controller: IE “Alexey Polyanskiy”, ID 306427916, Politsiis St., Isani-Samgori, Tbilisi, Georgia. Contact for data requests: a1@100doc.ge.
1.2. When processing data for its own purposes (providing the service, support) the Operator acts as a data controller. When processing on the Insurer’s instructions in order to issue a policy, the Operator acts as a processor and the controller is JSC Insurance Company Unison (ID 404393152).
2. What data is processed
- Identification: first name, surname, passport or personal document number, date of birth, citizenship, sex — for every insured person and for the policyholder.
- Contact: e-mail, phone.
- Order data: the chosen programme, clinic, policy start date, payment schedule, amount, policy number.
- Payment: the amount and the payment identifier. Card data is processed by the payment provider; the Operator does not store bank card data.
- Acceptance records: the date and time the consent box was ticked, the edition of the accepted documents, the IP address and details of the device and browser.
- Document image: when a passport is scanned — a photograph of the document page; it is deleted once the data has been checked.
- Technical: cookies and similar technologies (see clause 8).
3. Purposes of processing
3.1. Issuing the insurance policy — passing the data to the Insurer.
3.2. Providing the service, user support, performance of the contract (the offer).
3.3. Evidence that the contract was concluded: keeping the acceptance records in case of a dispute with the user or with their bank.
3.4. Compliance with obligations imposed by the legislation of Georgia.
3.5. Marketing — only with separate consent.
4. Legal grounds
4.1. Processing for the conclusion and performance of the contract — on the grounds provided by the Law “On Personal Data Protection”.
4.2. Processing for direct marketing — only with separate consent; consent may be withdrawn at any time free of charge.
6. Rights of the data subject
Under the Law “On Personal Data Protection” you have the right to:
- obtain confirmation that processing takes place and access your data (Art. 14);
- request correction, updating, blocking or deletion of your data (Art. 22);
- withdraw consent at any time — free of charge and without giving reasons;
- object to processing for direct marketing;
- appeal the Operator’s actions to the Personal Data Protection Service of Georgia and/or to court.
Requests should be sent to a1@100doc.ge. We reply within the time limits set by law.
7. Storage and security
7.1. Order data and acceptance records are kept for 5 years from the date of the order — to resolve disputes, including with banks, and to comply with the law. After that period the data is deleted.
7.2. A document photograph uploaded for recognition is deleted once the data has been checked and is not stored with the order.
7.3. The Operator applies technical and organisational safeguards (encryption, access control, HTTPS) in line with the principles of lawfulness, minimisation and security.
7.4. In the event of a data incident the Operator notifies the Personal Data Protection Service within 72 hours and, where there is a significant risk to rights, also the data subject.
9. Changes and contact
9.1. The Operator may update this Policy; the current edition is published on the website with its date.
9.2. This document is published in Russian, English and Georgian; in case of any discrepancy between the language versions, the Russian version prevails.
9.3. For questions about personal data processing: a1@100doc.ge.
This Policy applies only to the website insurance.100doc.ge. The website 100doc.ge/tourist has its own privacy policy.