Privacy & Cookie Policy

1. Who We Are

This Privacy Policy explains how LLC Verona, identification number 401979187, legal address: 51 Davit Aghmashenebeli Alley, Tbilisi, Georgia, hereinafter referred to as “LLC Verona”, processes the personal data of users who visit the website verona.ge.

This Policy has been prepared in accordance with the Law of Georgia on Personal Data Protection, No. 3144-XIVმს-Xმპ.

By using the Website, you acknowledge that you have read this Policy. Analytics cookies are activated only with your prior consent, which is provided through the cookie banner.

2. What Data We Collect

We may collect the following personal data:

First name, last name, email address, phone number and message content — when you submit a contact form or contact us for a consultation;
Email address — when you subscribe to our newsletter;
IP address, browser type, device information, date and time of visit, pages viewed and referral source — automatically when you visit the Website;
Behavioral data, including time spent on pages, clicks, products viewed, searches and conversion actions, such as submitting a form or clicking the WhatsApp button — through analytics cookies and only with your consent.

We do not collect special-category or sensitive personal data and do not have access to your bank card details. Online purchases are not processed through the Website.

We do not use profiling or automated decision-making systems.

3. Why We Process Your Data

We process personal data for the following purposes and on the following legal grounds:

Responding to your inquiries — legitimate interest;
Sending newsletters — your consent;
Operating and securing the Website — legitimate interest;
Producing statistics, analyzing traffic sources and measuring conversions — your consent to analytics cookies;
Protecting the Website from spam and abuse — legitimate interest;
Complying with legal obligations — legal obligation.

4. Cookies

The Website uses three categories of cookies:

Strictly Necessary Cookies

These cookies are required for the Website to function properly, including language selection, contact and newsletter form submissions, security and storage of your cookie preferences.

Examples include next-intl and Cloudflare Turnstile.

Consent is not required for strictly necessary cookies.

Analytics Cookies

These cookies help us understand how visitors interact with our collections and Website so that we can improve the user experience.

Examples include Google Analytics 4 cookies, such as _ga and _ga_*.

Your consent is required before analytics cookies are activated.

Marketing Cookies

These cookies are used to present Verona’s new collections and projects through social media and to measure the effectiveness of advertising campaigns.

Examples include cookies used by Meta, including Facebook and Instagram, and Google.

Your consent is required before marketing cookies are activated.

When you first visit the Website, a cookie banner will be displayed, allowing you to accept or reject optional cookies. Analytics and marketing cookies are disabled by default and will not be activated until you provide consent.

You may withdraw your consent at any time through the “Cookie Settings” link in the Website footer or by deleting cookies through your browser settings.

5. Third Parties and Sub-processors

We do not sell your personal data.

We share personal data only with the following service providers, which process data on our behalf and in accordance with our instructions:

Hetzner Online GmbH — server infrastructure and hosting services. Data: all data hosted on the server. Location: Germany;
Resend, Inc. — newsletter delivery. Data: email address. Location: United States;
Cloudflare, Inc. — Turnstile — spam and abuse protection. Data: technical data. Location: United States and globally;
Google LLC — Google Tag Manager — centralized management of analytics and marketing tags. Data: tag configuration and related technical information. Location: United States;
Google LLC — Google Analytics 4 — analysis of Website activity, traffic sources and conversions. Data: anonymized IP address, client ID and events. Location: United States;
Meta Platforms, Inc. — Facebook and Instagram — advertising and measurement of campaign effectiveness on social media. Data: pseudonymous identifiers and events. Location: United States.

We may also disclose personal data when required by law, including in response to a lawful request from a court or an authorized state body.

6. International Data Transfers

The processing of personal data by Google and Meta may take place outside Georgia, primarily in the United States.

These service providers are required to use applicable international frameworks and contractual safeguards, including, where applicable, the EU–US Data Privacy Framework and contractual mechanisms intended to provide appropriate protection for transferred personal data.

7. Data Retention

We retain personal data for the following periods:

Newsletter subscribers’ email addresses — until the subscription is cancelled;
Contact form data — for no longer than two years after the relevant matter has been closed;
Google Analytics 4 data — for 14 months;
Analytics cookies — for a maximum of 13 months or until you withdraw your consent;
Marketing cookies — for a maximum of 13 months or until you withdraw your consent.

After the applicable retention period expires, personal data will be deleted or anonymized unless a longer retention period is required by law.

8. Your Rights

You have the right to:

Receive information about the personal data we process about you;
Request the correction, updating or deletion of your personal data;
Request restriction of or object to the processing of your personal data, including processing for direct marketing purposes;
Withdraw your consent at any time, including by unsubscribing from the newsletter or changing your cookie settings;
Request the transfer of your personal data in a structured and machine-readable format;
File a complaint with the Personal Data Protection Service of Georgia through personaldata.ge.

Google-specific opt-out options:

Google Analytics opt-out: tools.google.com/dlpage/gaoptout
Google advertising settings: adssettings.google.com

You may submit a request regarding your personal data by emailing us at veronageorgia1@gmail.com.

We will respond to your request no later than within 10 business days.

9. Security

We use appropriate technical and organizational measures to protect your personal data, including HTTPS-encrypted communication, access controls and regular security reviews.

However, no method of transmitting information over the internet can be guaranteed to be completely secure.

10. Children

The Website is not intended for persons under the age of 16, and we do not knowingly collect personal data from children under the age of 16.

If you believe that a child has provided personal data to us, please contact us, and we will take appropriate steps to delete that data.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

The updated version will be published on this page together with the date on which the Policy was last updated.

12. Contact Information

LLC Verona

Identification number: 401979187

Address: 51 Davit Aghmashenebeli Alley, Tbilisi, Georgia

Email: veronageorgia1@gmail.com

Phone: +995 596 244 224