Version dated 11 September 2026
This page explains what data Tamada receives about you, why we need it, who we share it with, how long we keep it and what you can do about it. We process data under the Law of Georgia on Personal Data Protection, and we try to explain it in plain language.
The data controller is Nikolai Pavlov, a private individual. Address: 16 Bochormo Street, Tbilisi, Georgia. E-mail for any data-related questions: admin@tamada.com.ge.
This policy applies to the website tamada.com.ge and to communication with Tamada’s assistant in messengers. By sending a request, you confirm that you have read it.
1. What data we receive
We collect only what is needed to organise your trip. The site asks for no registration, no passport and no bank card.
Excursion request. Your name, the messenger and your contact in it (phone number or username), the excursion date, number of participants, comment, and the language and currency you selected on the site. If you came via a partner code (a QR code at a guesthouse, a guide’s link) — the source code.
“Plan a trip” request. The same, plus your dates or approximate period, where you are travelling from, number of people, interests, comfort level, budget range and wishes.
Corporate brief. Company name, number of participants, dates, budget range, your phone number or e-mail.
Review. Name, rating, tags, review text, up to five photos and the link between the review and an excursion or guide.
Conversations with the assistant. What you write to us in Telegram, WhatsApp or another messenger, and your identifier in it (number or username).
Automatically, when you visit the site. IP address, browser and device type, pages opened, time of visit, cookies (see section 5) and anonymised visit statistics.
Data we do not collect. Passport and payment details (the site does not take payments), health data. If you yourself mention in a request comment something that matters for the route (for example, difficulty walking or how you feel at altitude), we will pass it to the guide solely to prepare the excursion; by sending such a comment you consent to this. If you would rather not leave such details on the site, tell your guide in person.
2. Why, and on what legal basis
- To organise the excursion: receive the request, pass it to the guide, tell you the answer, show your “My Trip” page, remind you about the meeting. Basis — performance of the contract with you and steps taken at your request before entering into it.
- To answer a “Plan a trip” request or a corporate brief: prepare a proposal and contact you. Basis — steps taken at your request before entering into a contract.
- Support through the assistant: answer questions, help with changes or cancellation, resolve disputes. Basis — performance of the contract and our legitimate interest in good service.
- Service messages after the trip: a single request to leave a review. Basis — our legitimate interest; you can opt out with one reply.
- Offers of new trips, promotions, newsletters: only with your consent, which you can give to the assistant in a conversation. You can withdraw it at any time — just write “stop” or “unsubscribe”, and we will stop within 7 working days.
- Publishing a review: your name, text and photos are shown on the site. Basis — your consent, given when you publish the review; you can withdraw it by asking us to remove the review.
- Security and anti-spam: limiting the number of requests from one address, detecting fraud, keeping technical logs. Basis — legitimate interest.
- Visit statistics: understanding which pages are useful and improving the site. Basis — legitimate interest; you can disable it in your browser settings (section 5).
- Legal obligations: keeping records of transactions, responding to lawful requests from public authorities.
We do not make decisions with legal effects for you by fully automated means, and we do not profile you.
3. Who we share data with
The guide. This is the main thing to know: to run the excursion, the guide receives your name, messenger contact, date, number of participants and the comment to your request. The guide is an independent person; under their agreement with Tamada they use your data only for this excursion and for communication about it, and may not send you advertising or pass your data to others. If you message the guide directly, that conversation takes place outside our platform.
The Tamada team. The assistant and managers who process requests see data to the extent needed for their work and are bound by confidentiality.
Technology providers. They process data on our instructions and do not use it for their own purposes:
- Hetzner Online GmbH (Germany) — servers and file storage; the site’s data, including review photos, is stored in a data centre in Finland (European Union);
- Yandex.Metrica (Yandex LLC, Russia) — site visit statistics: Metrica receives technical data about the visit (IP address, cookies, device, pages opened) but not the contents of your requests;
- the messengers through which you communicate with us (Telegram, WhatsApp and others) — they process conversations under their own privacy rules.
Partner sources (guesthouses and hostels displaying our QR code) do not receive your data; they see only anonymised records that a booking came via their code.
Public authorities — only upon a request based on law.
We do not sell your data and do not pass it to advertising networks.
4. Where data is stored and international transfers
The site’s data is stored on servers in Finland (European Union). Visit statistics are processed by Yandex.Metrica on servers in Russia, and messenger conversations — wherever the respective service keeps its servers. When transferring data outside Georgia, we rely on the contractual safeguards of our providers and on your acceptance of this policy. If you do not want your visit data to reach Metrica, disable cookies for the site or use a tracker blocker — the site will keep working.
5. Cookies and local storage
Cookies are small records the site saves in your browser. We use:
- essential cookies: your selected currency (kept for up to a year) and the partner code you came with (30 days — so that the discount applies to your request);
- browser local storage: marks of the stories you have already viewed on the home page, so we do not show them again;
- analytics cookies: Yandex.Metrica cookies (up to a year) that let Metrica tell visits apart.
There are no advertising cookies or third-party ad-network cookies on the site.
You can manage cookies in your browser settings. If you disable essential cookies, the site will work but will stop remembering your currency and the partner discount.
6. How long we keep data
- Requests, bookings and related conversations with the assistant — 3 years after the excursion date or the last message (limitation period and dispute resolution).
- “Plan a trip” requests and corporate briefs — 3 years after the last contact.
- Reviews — while published or until you ask us to remove them; hidden reviews — 1 year.
- Technical server logs — up to 90 days.
- Metrica data — under Yandex’s rules.
When the period expires, data is deleted or anonymised. Data that the law requires us to keep longer is kept with restricted access for that purpose only.
7. Your rights
Under the Law of Georgia on Personal Data Protection you have the right to:
- find out whether we process your data and receive a copy of it;
- correct inaccurate or incomplete data;
- request deletion of your data or termination of its processing — except data we are required to keep by law;
- object to processing based on legitimate interest;
- withdraw consent (to newsletters, to publication of a review) — this does not affect the lawfulness of processing before withdrawal;
- receive the data you gave us in a machine-readable format;
- lodge a complaint with the Personal Data Protection Service of Georgia (pdps.ge).
To exercise your rights, write to admin@tamada.com.ge and mention your booking code or the contact you left in the request. To make sure the request comes from you, we may ask you to write from the same messenger you used in the request. We reply within 10 working days.
8. How we protect data
The site works over HTTPS only. Access to request data is limited to a small number of people by role, the servers are located in the European Union and closed to outside access, and backups are encrypted. The “My Trip” page opens via a personal link — do not share it with strangers; if the link has reached someone else, write to us and we will disable access to it.
No protection is absolute, but if a breach occurs that may affect you, we will inform you and the Personal Data Protection Service as the law requires.
9. Children
The site is intended for people aged 18 and over. We do not knowingly collect children’s data: a request only states the number of participants. If you believe a child has given us their data, write to us — we will delete it.
10. Changes to this policy
We may update this policy. The new version is published on the site with its update date. We will additionally notify you through the assistant about material changes that affect active bookings.
11. Contacts
- Data controller: Nikolai Pavlov.
- Address: 16 Bochormo Street, Tbilisi, Georgia.
- E-mail: admin@tamada.com.ge.
- Supervisory authority: Personal Data Protection Service of Georgia, pdps.ge.