This policy explains how your personal data is processed on the National Tourism Awards public voting platform.
1. Who controls your data
National Tourism Awards operates this voting platform and determines how and why the personal data described on this page is processed.
2. Data we collect
When you vote, we may process your full name, mobile number, email address, selected category and nominee, voting and OTP request timestamps, IP address, browser technical information, security events, and SMS delivery status. We do not store OTP codes in readable form or write secret credentials to SMS logs.
3. Why we use the data
We use the data to send and verify an SMS code, enforce one vote per category, record the vote, detect fraud and automated attacks, investigate technical problems, protect the integrity of results, and comply with legal obligations.
4. Legal grounds
Data is processed to provide the requested voting service, for legitimate interests in protecting the platform and the integrity of results, to comply with legal obligations, and, where required, based on your consent.
5. Service providers
We use GoSMS to provide SMS/OTP services. We use Cloudflare Turnstile to protect against bots and automated attacks; it may process IP addresses, User-Agent information, and other technical signals. Hosting and infrastructure providers may access data only as needed to provide their services. We do not sell personal data or use it for advertising profiles.
6. International processing
When Cloudflare or another technical provider is used, data may be processed outside Georgia. Where applicable, we use appropriate contractual and security safeguards to protect the data.
7. Retention
We retain data only as long as needed to conduct the vote, confirm results, address disputes and security incidents, and meet applicable legal requirements. OTP requests, SMS statuses, and technical or audit logs are periodically deleted or anonymized when they are no longer required.
8. Security
We use access controls, protected administrator sessions, CSRF and bot protection, rate limiting, OTP verification, security logging, and other technical and organizational safeguards. No method of transmission or storage on the Internet is completely secure.
9. Cookies and essential technologies
The site uses essential session and security technologies so voting, language selection, and protection can function. Cloudflare Turnstile is used only for bot protection. If non-essential or marketing cookies are introduced later, separate consent will be requested where required.
10. Your rights
Subject to applicable law, you may request information about processing, access to or a copy of your data, correction or updating, restriction, deletion or destruction, blocking, and portability. You may also object to processing or withdraw consent where processing relies on consent. Legal exceptions may apply, including where information must be retained to protect result integrity or meet a legal requirement.
11. Changes to this policy
We may update this policy when the service, providers, or legal requirements change. The revised version will be posted on this page with a new effective date.