PRIVACY. TRANSPARENCY. CONTROL.
RAUZ Privacy Policy & Personal Data Protection
This Privacy Policy explains how Rauz Caucasus LLC handles personal data when you visit rauzs.com, contact RAUZ, request services, submit an enquiry or interact with our environmental and engineering monitoring platform.
Privacy Policy
Clear information about how RAUZ handles personal data.
This Privacy Policy applies to the public RAUZ website at rauzs.com and to personal data handled by Rauz Caucasus LLC when people contact RAUZ, request information or quotations, communicate with us, apply for opportunities, or otherwise interact with our public digital services.
Public website & enquiries
Applies to visitors, prospective clients, suppliers, partners, applicants and other people who communicate with RAUZ through public channels.
Project-specific terms may apply
A contracted project, portal, API, software workflow or client dataset may be subject to additional confidentiality, information-security or data-processing terms.
Personal data, not engineering measurements by default
Monitoring measurements about ground, structures, weather or environmental conditions are not personal data unless they are linked to an identified or identifiable person.
Controller
Who is responsible for the personal data covered by this notice?
For normal website use, enquiries, quotation requests, recruitment contacts and RAUZ business communications, Rauz Caucasus LLC acts as the controller to the extent it determines why and how personal data is processed.
Rauz Caucasus LLC
Registered office:
N20, Apt N70, Vazha Pshavela Avenue,
Tbilisi 0160, Georgia
Website: rauzs.com
Email: [email protected]
Data We Process
The information depends on how you interact with RAUZ.
RAUZ does not need the same information from a website visitor, a prospective client, a supplier contact and a project user. The categories below describe information that may be relevant to those interactions.
Contact & business information
- Name, employer, role and professional contact details.
- Messages, enquiry details and quotation requirements.
- Information sent by email or through an enabled website form.
- CV and work-history information if you contact RAUZ about opportunities.
- Billing, contracting or supplier information when a business relationship develops.
Technical & usage information
- IP address and approximate network information.
- Browser, device and operating-system information.
- Requested pages, referring page and timestamps.
- Security, diagnostic and server-log information.
- Cookie or similar-technology identifiers where those technologies are actually used.
Project-related personal information
- Project contact names and professional roles.
- Correspondence and meeting records.
- Names contained in reports, drawings or monitoring records.
- User, author or audit information attached to project files.
- Other personal data a client is authorised to provide for the agreed work.
Purposes & Legal Bases
We process personal data for defined business, security and legal purposes.
The legal basis depends on the activity and the law that applies. Under Georgian law, relevant bases can include consent, steps connected with a contract, legal obligations, review of a person’s request, and legitimate interests where the statutory conditions are met. Where the EU GDPR, UK GDPR or another regime applies, RAUZ uses the basis required for that specific processing rather than treating consent as the basis for everything.
| Purpose | Typical data | Typical basis, subject to applicable law |
|---|---|---|
| Enquiries & RFQs | Contact details, message content, project context | Steps requested before a contract; review of the person’s request; legitimate interests; or another available statutory basis. |
| Quotations, contracts & services | Professional contacts, commercial, billing and project information | Contract performance or pre-contract steps; legal obligation; legitimate interests where permitted. |
| Website operation & security | IP address, logs, device and request information | Legitimate interests in security, fraud prevention, troubleshooting and service operation; legal obligations where applicable. |
| Optional analytics / non-essential technologies | Online identifiers, usage or preference data | Consent where required; otherwise the basis permitted by the law that applies. |
| Records & legal claims | Correspondence, contracts, invoices, transaction and dispute records | Legal obligation; contract; legitimate interests in recordkeeping and establishing or defending legal claims. |
| Recruitment & collaboration | CV, work history, contact and application information | Pre-contract steps, consent where appropriate, legal obligation or legitimate interests where available. |
International Transfers
RAUZ is Tbilisi-based and works across borders, so some data may cross borders.
A website visitor, client, service provider or project team may be in a different country from Rauz Caucasus LLC. International transfer does not remove the need to identify a lawful basis, relevant safeguards and the role of each recipient.
Transfers under Georgian law
Where Georgian law applies, transfers to another state or international organisation are handled under the Law of Georgia on Personal Data Protection, including the applicable transfer grounds and safeguards.
GDPR where applicable
Where EU GDPR transfer rules apply, RAUZ will use a legally available mechanism appropriate to the circumstances, such as an applicable adequacy route, contractual safeguards or another permitted basis.
UK requirements where applicable
Where UK data-protection law applies, the relevant UK transfer requirements and safeguards are considered for the actual destination, recipient and processing activity.
Retention
We keep personal data for no longer than the purpose, contract or law reasonably requires.
An unanswered enquiry, an active engineering project, an invoice and a security log do not serve the same purpose. RAUZ therefore applies purpose-based retention criteria instead of claiming one universal period for every record.
- How long the enquiry, project or business relationship remains active.
- Whether data is needed to deliver or document an agreed service.
- Accounting, tax, corporate or other recordkeeping obligations.
- Applicable limitation periods and legal-claim requirements.
- Security, fraud-prevention, backup and system-integrity needs.
- Whether consent has been withdrawn where consent is the basis.
- Whether data can be anonymised instead of retained in identifiable form.
- Project-specific contractual retention or deletion requirements.
Security
Protection depends on both technical controls and disciplined handling.
RAUZ applies organisational and technical measures appropriate to the nature of the information, the processing activity and the risks involved. No internet transmission or storage system can be guaranteed to be completely secure.
Need-to-know access
Access should be limited to people and authorised service providers who need information for a defined business, security or project purpose.
Reasonable system protection
Website, account, device, backup, update and security practices should reflect the systems in use and the sensitivity of the information.
Collect less where less is enough
RAUZ should avoid collecting, copying or circulating personal data that is not necessary for the agreed website, business or project purpose.
Your Rights
You may have rights over your personal data under the law that applies to you.
Under the current Law of Georgia on Personal Data Protection, data subjects have rights that include information about processing, access and copies, rectification, termination of processing or erasure in relevant circumstances, blocking, transmission of certain data, protection in relation to solely automated decisions, and withdrawal of consent. Statutory exceptions may apply.
Information
Ask whether RAUZ processes your personal data and request information about the purpose, basis, source, retention and recipients where the law provides.
Access & copy
Request access to personal data concerning you and a copy, subject to the conditions and exceptions in applicable law.
Correction
Request correction, updating or completion of inaccurate or incomplete personal data.
Deletion / stop processing
Request termination of processing, erasure or destruction where the statutory conditions are met.
Blocking
Request temporary blocking in situations recognised by law, for example while accuracy or a deletion request is being examined.
Data transmission
For certain automated processing based on consent or contract, request data in a structured, commonly used, machine-readable format where technically feasible.
Withdraw consent
Where processing relies on consent, withdraw it using an available and accessible method. Other lawful bases may still permit specific processing.
Automated decisions
Exercise applicable rights concerning decisions based solely on automated processing where they produce legal or similarly significant effects.
Project Data
Monitoring intelligence can involve data that is not personal data — and project files that are.
RAUZ works with environmental, geotechnical, agricultural, survey and remote-sensing information. Measurements about ground movement, groundwater, weather, structures or crops are not automatically personal data. Personal-data obligations arise where information identifies or can identify a natural person.
Technical observations
Instrument readings, InSAR measurements, weather records and similar technical observations are generally handled as project information unless they are linked to identifiable people.
Personal data inside project records
Reports, drawings, emails, user logs and document metadata can include names, signatures, contact details, authorship or other personal information even when the main purpose of the file is technical.
Controller / processor depends on the engagement
For client-provided project data, responsibilities should be defined in the appointment, confidentiality terms and, where needed, a data-processing agreement.
Official Sources
Privacy rules should be checked against current official sources.
RAUZ operates from Georgia and serves international markets. The links below are official legal or regulatory sources relevant to this public Privacy Policy. They are included for transparency and verification, not as a substitute for project-specific legal advice.
Law of Georgia on Personal Data Protection
Current consolidated legal framework for personal-data processing, data-subject rights, direct marketing, security and international transfers in Georgia.
Open the official Matsne text ↗State Audit Office of Georgia
Under the current consolidated law, the State Audit Office performs the personal-data supervisory functions transferred to it from 2 March 2026.
Open the official State Audit Office website ↗General Data Protection Regulation
The official EUR-Lex text of Regulation (EU) 2016/679, relevant where the GDPR applies to a RAUZ processing activity.
Open EUR-Lex ↗ICO privacy-information guidance
Official guidance from the UK Information Commissioner’s Office on the information organisations should provide when processing personal data.
Open ICO guidance ↗FAQs
Common questions about privacy at RAUZ.
These answers explain the public website policy in practical terms. A contracted project may include more specific confidentiality, security and data-processing requirements.
Does RAUZ collect project files through the public quote page?
Does every monitoring dataset contain personal data?
Does RAUZ always act as the data controller?
Does RAUZ rely on consent for all processing?
Can I ask RAUZ to delete my personal data?
Does this policy mean EU GDPR or UK GDPR applies to every RAUZ interaction?
Privacy Contact
Ask a privacy question or exercise an applicable right.
Provide enough information to identify the relevant interaction or record, but do not send unnecessary identity documents or sensitive project files in the first email. RAUZ may need to verify identity before disclosing or changing personal data.
Privacy requests
Rauz Caucasus LLC
N20, Apt N70, Vazha Pshavela Avenue
Tbilisi 0160, Georgia