Privacy Policy

01Who processes your data

ESMAR Holding is a trade name. The website is run, and enquiries from it are processed, by the companies ESARTIA Architects and Marstone Group LLC, ID 405819315, 7 Otar Taktakishvili St., Vake, Tbilisi.

Contacts: info@esmar.ge, +995 511 33 44 73, Tbilisi, Georgia.

We have not appointed a data protection officer, as the law does not require one for a company of our size. For any question about your data, write to info@esmar.ge.

02What data we receive

• From the enquiry form: your name; phone number or email; what you need; the project country and your message, if you filled them in; your consent tick.
• Technical data: when you open any website, your browser sends the host your IP address, browser type and request time. Our hosting provider Vercel processes this data to run and protect the site. We do not use it to identify you.

We do not ask for or collect special categories of data, such as health or beliefs. Please do not include them in your message.

03Why we process data and on what basis

Only to answer your enquiry, discuss your project and prepare an offer. We do not use this data for newsletters or advertising.

The legal basis is your request and steps taken at your request before a contract (Article 5(1)(b) and (j) of the Law of Georgia on Personal Data Protection). For visitors from the European Union, Article 6(1)(b) GDPR. Data is transferred to providers in the USA on the basis of your consent (Article 37(2)(d) of the Law).

04Do you have to provide data

We need your name and a contact to reply, so the form cannot be sent without them. All other fields are optional.

05Who receives your data

Only providers that technically run the website and receive enquiries, and only to the extent needed for that:

• Vercel Inc. (USA): hosting of the website and of our CRM; CRM computing runs in a data centre in Frankfurt, Germany.
• Neon Inc. (USA): the database of our CRM.
• Google LLC (USA), Google Workspace: the mailbox that receives enquiry notifications.

We do not sell data or pass it to anyone else for their own purposes.

06Transfers outside Georgia

The USA is not on the list of countries with adequate data protection safeguards approved by the State Audit Office of Georgia (Order of the Auditor General No. 007 of 14 April 2026). The level of protection there may be lower than in Georgia; for example, US authorities may in certain cases obtain access to data.

We transfer enquiry data only with your consent, which you give by ticking the box in the form. Connections with our providers are encrypted, and data processing terms apply to them.

07How long we keep data

If no contract is concluded, 12 months from the last contact, after which we delete it. If a contract is concluded, for as long as the contract lasts and as long as Georgian accounting and tax laws require.

08Your rights

Free of charge, you can:

• find out what data we hold about you and get a copy;
• have inaccurate data corrected;
• ask us to stop processing, delete or block your data;
• receive your data in a convenient format;
• withdraw your consent.

We do not make decisions based solely on automated processing. Write to info@esmar.ge and we will reply within 10 working days. In complex cases this may be extended by another 10 working days, and we will let you know.

09How to withdraw consent

At any time, as easily as you gave it: write to info@esmar.ge. We will then stop processing and delete your data unless the law requires us to keep it. Processing before withdrawal remains lawful.

10Where to complain

If you believe your rights have been violated, you can contact the State Audit Office of Georgia (sao.ge), which has performed the functions of the personal data protection supervisory authority since 2 March 2026, or a court. Residents of the European Union may also contact the supervisory authority of their country.

11Cookies and browser storage

The website does not use cookies, visitor counters, analytics or advertising pixels. Your browser’s storage (localStorage) keeps only your choice of light or dark theme. This is not personal data and is not sent anywhere. Fonts are loaded from our own website, not from third-party servers.

12Security

The website works only over a secure connection (HTTPS). Only the staff who handle enquiries can access them. The form is protected against bots and abuse.

13Changes to this policy

If this policy changes, the new version will appear on this page with a new date.