Privacy Policy

The controller responsible for data processing on this website is:

Rebuild Realty Ventures operated by CryptoFlex LLC Ilia Chavchavadze Str. 78-87 6010 Batumi, Georgia Identification number: 445757547 Email: info@rebuildv.com Phone: +995 555 992 380 Website: https://rebuildv.com

hereinafter referred to as “Rebuildv”, “we” or “us”.

The protection of your personal data is important to us. We process personal data only in accordance with applicable data protection laws, in particular Georgian data protection law and, where applicable, the European General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person.

We process personal data only to the extent necessary to provide our website, manage your customer account, process inquiries, reserve and broker real estate, perform booked services, process payments, and comply with contractual or legal obligations.

The provision of certain personal data is required in order to create a customer account, process inquiries, reserve real estate, prepare contracts, perform booked services or process payments.

Without this data, we may be unable to provide the relevant functions or services in whole or in part. Where the provision of personal data is voluntary, we will indicate this separately.

Our website is hosted on servers operated by STRATO AG.

When you visit our website, information is automatically collected by the web server and stored in server log files. This includes in particular:

• – IP address
• – date and time of access
• – browser type and browser version
• – operating system
• – referrer URL
• – pages and files accessed
• – volume of data transferred

This processing is carried out to ensure secure and trouble-free operation of the website, for technical error analysis, and to prevent misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and error-free operation of our website.

Our website uses cookies and comparable technologies. Cookies are small text files stored on your device that contain certain information.

5.1. Technically Necessary Cookies

Technically necessary cookies are required to provide basic website functions, store your privacy settings, enable login functions, and ensure the security and stability of the website.

The legal basis is Art. 6(1)(f) GDPR. To the extent that access to information on your device or storage of information on your device is concerned, this is carried out, where applicable, on the basis of the legal rules for strictly necessary cookies.

5.2. Analytics Cookies and External Content

Analytics cookies, tracking technologies and external content, such as videos, map material or analytics tools, are used only where consent is required and you have given such consent.

The legal basis is Art. 6(1)(a) GDPR.

5.3. Managing Your Consent

We use our own consent management system to manage your privacy and cookie settings. You may withdraw or adjust your consent at any time with effect for the future.

Where you have given your consent, we use Google Analytics for the statistical analysis of the use of our website.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In connection with the use of Google Analytics, data may also be transferred to Google LLC in the United States.

Google Analytics enables us to evaluate visitor numbers, user behavior and interactions on our website. Processing is carried out exclusively on the basis of your consent.

The legal basis is Art. 6(1)(a) GDPR.

We use Google Tag Manager for the technical management and integration of analytics and tracking services.

According to our understanding, Google Tag Manager itself does not create user profiles and does not store independent tracking profiles. It serves the technical execution of integrated services. Where services requiring consent are integrated through Google Tag Manager, they are activated only after you have given your consent.

The legal basis is Art. 6(1)(f) GDPR for technical management and Art. 6(1)(a) GDPR where an integrated service requires consent.

If you register a customer account on our website, log in, use our website as a logged-in user, contact us through forms, reserve real estate or book paid additional services, in particular the “All-in package”, we process the data you provide as well as usage-related data within your customer account.

This includes in particular:

• – first and last name
• – email address and phone number
• – address and identification data
• – passport data or ID data, where required for official registrations, notary appointments or contract preparation
• – country of origin and preferred language
• – budget information and investment interests
• – reservation, purchase and payment data, including installment payment plans
• – contents of your inquiries
• – submitted powers of attorney, documents and supporting evidence
• – login times
• – account activities
• – reservation history
• – saved favorites
• – requested or viewed properties
• – interactions with website functions

Processing is carried out to provide your customer account, perform pre-contractual measures, process booked services, fulfill purchase, brokerage or service contracts, improve our customer support, and ensure the technical functionality and security of our system.

Where processing is necessary for contract performance or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.

Where we process usage-related data for technical security, abuse detection, error analysis, improvement of user guidance, customer support or internal organization, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and customer-friendly operation of our platform.

8.1. Sign-In with Google

You may also sign in to our website using your Google account. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you use Sign-In with Google, Google transmits to us the data from your Google account required for the login. This may include in particular:

• – name
• – email address
• – profile picture
• – unique Google account ID
• – language settings or other basic data provided by Google

We use this data exclusively to create your customer account, authenticate you, enable login and manage your account. Use of Google Sign-In is voluntary. Where offered, you may alternatively create a customer account using an email address and password.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for creating, managing and using your customer account. Where you voluntarily choose Google Sign-In, processing may additionally be based on your consent pursuant to Art. 6(1)(a) GDPR.

Google’s privacy policies apply to data processing by Google.

Inquiries, registrations, reservations, account activities and bookings via our website are stored and processed in our own management system.

If you browse our website or use functions while logged in, certain activities may be automatically assigned to your customer account. This includes in particular viewed properties, saved favorites, reservations, inquiries, booking status, technical events and interactions with platform functions.

This processing serves to handle your inquiry, manage your customer account, carry out reservations and bookings, provide customer support, detect misuse and errors, and improve our platform and internal processes.

For internal processing, selected information may be transmitted to authorized employees, technical service providers, developers or internal notification systems. Developers and technical service providers receive access to personal data only to the extent necessary for maintenance, error analysis, technical development, support, security or operation of the platform. Where possible, data is anonymized or pseudonymized for this purpose.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or contract performance. Otherwise, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in efficient handling of customer inquiries, secure operation, technical development and improvement of our services.

You may request deletion of your customer account at any time via the function provided in your customer account or by sending a message to info@rebuildv.com.

After receiving your deletion request, we delete or anonymize the personal data stored in your customer account, unless statutory retention obligations, contractual settlement interests, outstanding claims, evidentiary purposes or other legitimate reasons prevent immediate deletion.

Data that we must retain due to tax, commercial, corporate or other statutory obligations will be restricted from further use and deleted after expiry of the relevant retention period.

If you subscribe to our newsletter, we use the data you provide to send you information about real estate projects, investment opportunities, market analyses and company news.

You may withdraw your consent at any time with effect for the future via the unsubscribe link in the newsletter or by email to info@rebuildv.com.

The legal basis is Art. 6(1)(a) GDPR.

Where necessary to process your inquiry, reserve a real estate unit, prepare notarial and preliminary agreements, carry out official registrations or process a real estate purchase, we disclose personal data for specific purposes to involved contractual partners and authorities.

This includes in particular:

• – construction companies, project developers and third-party sellers
• – independent notaries, lawyers and translators
• – competent state authorities and registration offices, in particular Public Service Hall and NAPR
• – banks and payment service providers
• – other service providers involved in the relevant transaction

Disclosure takes place only to the extent required to process the respective inquiry, reservation, service or transaction.

The legal basis is Art. 6(1)(b) GDPR. Where a legal obligation exists, the legal basis is Art. 6(1)(c) GDPR.

If you became aware of Rebuildv through a broker, sales partner, affiliate, referrer or other intermediary, or if such person referred you to us, we may exchange certain personal data with that partner for allocation, support and commission settlement purposes.

This includes in particular:

• – name and contact details
• – lead origin or referral code
• – status of the inquiry, reservation or booking
• – selected project or requested property
• – closing status
• – commission-relevant information

Disclosure takes place only to the extent necessary for processing the referral, customer support, allocation of the customer contact or settlement of commissions.

Payment data, ID documents, passport data, powers of attorney or confidential contract documents are disclosed to brokers or sales partners only where required in the specific case, legally permissible or where you have expressly consented.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or contractual relationships. Otherwise, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in organizing our sales activities, allocating customer inquiries and settling agreed commissions.

For payment processing, we use Bank of Georgia (BOG) as a payment service provider.

If you make a payment using the payment methods offered by us, the data required for payment processing is transmitted to or processed by BOG.

This may include in particular:

• – name and contact details
• – invoice and payment amount
• – payment reference, customer number or booking number
• – payment status
• – technical transaction data
• – depending on the selected payment method, card or bank data, which is usually processed directly by BOG

As a rule, we do not receive full card or bank data from BOG, but only payment confirmations, payment status, transaction IDs and billing-relevant information.

Processing is carried out for payment execution, contract performance, invoicing and payment allocation.

The legal basis is Art. 6(1)(b) GDPR. Where data is processed for tax, accounting or legal reasons, the legal basis is Art. 6(1)(c) GDPR.

We use AI-based systems to improve our search, analysis, voice and advisory functions.

If you use free-text search fields, AI-based advisory functions or voice functions on our website, your inputs may be transmitted to external AI service providers for processing.

For text-based AI functions, we may use in particular the AI service Claude by Anthropic PBC. For voice functions, in particular processing spoken input via the microphone icon in the AI search, OpenAI may be used. In this context, your voice inputs, transcripts generated from them and technical usage data may be transmitted to OpenAI for processing.

Processing is carried out exclusively to process your search, voice or advisory request and to provide intelligent search, analysis, voice and advisory information.

Please do not enter sensitive or confidential data into AI input fields or voice functions, in particular bank details, passport numbers, ID documents, health data or other particularly sensitive information.

Where processing is necessary to handle your request or carry out pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. Otherwise, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing efficient search, analysis, voice and advisory functions.

Where AI service providers are used as processors, processing is carried out on the basis of corresponding contractual agreements. Where personal data is transferred to third countries, the information in Section 20 of this Privacy Policy applies.

Links to WhatsApp and Telegram may be provided on our website. When you click these links, you leave our website. The privacy policies of the respective provider additionally apply to the subsequent communication and processing.

If you communicate with us via WhatsApp, Telegram or a Telegram bot, we process the data you transmit to handle your request, provide customer support and carry out pre-contractual or contractual measures.

The legal basis is Art. 6(1)(b) GDPR where communication is necessary to process your inquiry or perform a contract. Otherwise, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in fast and user-friendly communication.

We use Mapbox to display interactive maps.

When corresponding maps are accessed, technical information, in particular your IP address, may be transmitted to Mapbox. Where the map is loaded only after your consent, processing is based on Art. 6(1)(a) GDPR.

Where map functions are technically necessary or provided as part of the property display, processing may be based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendly display of property locations.

Videos from the YouTube platform may be embedded on our website.

When these contents are accessed, usage information and your IP address may be transmitted to YouTube or Google. Where technically possible, YouTube videos are loaded only after your consent.

The legal basis is Art. 6(1)(a) GDPR.

Personal data may be transmitted, where necessary, to the following categories of recipients:

• – hosting and IT service providers
• – developers and technical service providers
• – payment service providers, in particular Bank of Georgia
• – construction companies, project developers, sellers and other transaction partners
• – notaries, lawyers, translators and authorities
• – brokers, sales partners, affiliates or referrers
• – analytics, map, video and AI service providers, where used and permissible
• – tax advisers, accountants and other professional advisers
• – internal employees and authorized support or management systems

Disclosure takes place only where there is a legal basis and where disclosure is necessary for the respective purpose.

Since CryptoFlex LLC is based in Georgia, personal data is also processed in Georgia. From the perspective of the GDPR, Georgia is a third country for which there is currently no adequacy decision by the European Commission.

In addition, we use service providers that may process data outside the EU or EEA, in particular providers based in or affiliated with companies in the United States.

Where personal data is transferred to third countries outside the EU or EEA, this takes place only where there is a data protection legal basis. This may be the case in particular where the transfer is necessary to carry out pre-contractual measures or a contract with you, where appropriate safeguards such as EU Standard Contractual Clauses exist, where certification under the EU-US Data Privacy Framework exists, or where you have expressly consented.

In the context of real estate purchases, registrations, notary appointments or official procedures in Georgia, the processing and transfer of personal data to Georgia may be necessary to carry out the pre-contractual measures or contracts requested by you.

Personal data is stored only for as long as necessary to fulfill the respective purposes.

Inquiries and prospect data are generally stored for up to 36 months after the last contact, unless longer storage is required due to a contract, ongoing inquiry, legal obligation or legitimate interest.

Account and usage data of logged-in users are generally stored for the duration of the customer account. After deletion of the customer account, this data is deleted or anonymized unless statutory retention obligations, open contractual relationships, evidentiary purposes, outstanding claims or legitimate interests prevent this.

Customer account and contract data, including invoices, preliminary agreements, payment data, receipts for service packages and transaction-related documents, are stored in accordance with the applicable tax, commercial, corporate or other statutory retention obligations.

After expiry of the relevant periods, the data is deleted or anonymized.

Within the scope of the applicable legal provisions, you have the right to:

• – access your stored personal data
• – rectification of inaccurate data
• – deletion of your data
• – restriction of processing
• – data portability
• – object to processing
• – withdraw consent with effect for the future
• – lodge a complaint with a competent data protection supervisory authority

You also have the right to request deletion of your customer account. Deletion may be requested via the function provided in the customer account or by email to info@rebuildv.com.

To exercise your rights, please contact us at:

info@rebuildv.com

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where processing serves the establishment, exercise or defense of legal claims.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.

We do not make solely automated decisions within the meaning of Art. 22 GDPR that produce legal effects concerning you or similarly significantly affect you.

However, automated assignment of website activities to your customer account may occur where you are logged in and use website functions. This assignment serves customer support, reservation management, error analysis, security and improvement of our platform.

We use appropriate technical and organizational security measures to protect your data against loss, misuse, unauthorized access or other unauthorized processing.

Our website uses TLS/SSL encryption throughout. Access to personal data is internally restricted and granted only to authorized persons or service providers where required for the respective purpose.

Where the GDPR applies, you have the right to lodge a complaint with a competent data protection supervisory authority.

Where Georgian data protection law applies, the competent Georgian data protection supervisory authority may also be contacted.

We reserve the right to amend this Privacy Policy in the event of legal, technical or organizational changes.

The current version published on this website applies.