Privacy Policy

Legal addresses
EU Responsible Person / Brand design office: Sheni Labs, 32 Boulevard de Rochechouart, 75018 Paris, France
Georgian Food Business Operator: SHENI, 20 Lado Asatiani Street, Tbilisi, Georgia 0105
Email: info@accreditation.ge

Sheni Labs / Public Health Institute of Georgia (PHIG)
Contact: info@accreditation.ge
Website: shenilabs.ge
Registered in Georgia.

• Contact form submissions: Name, email address, message — to respond to your enquiry. Legal basis: performance of a contract / legitimate interest (Art. 6(1)(b)(f) GDPR).
• Language preference cookie (sl_lang): Records your chosen language (EN/KA/FR). Stored for 1 year. Legal basis: legitimate interest — strictly necessary for the core service function (Art. 6(1)(f) GDPR).
• Batch verification: You enter a LOT number. We do not log the LOT number or link it to any personal identifier. Verification is fully anonymous.
• Ask the Evidence assistant: Your question text is sent to OpenAI (our AI provider) to generate an answer. We do not store questions linked to individuals. See Section 4 for details.

We do not use Google Analytics, Facebook Pixel, advertising cookies, or any third-party tracking. We do not sell your data. We do not create user profiles. No account is required to use any feature of shenilabs.ge.

OpenAI LLC (USA) — processes question text submitted to the “Ask the Evidence” assistant. Data transfer safeguard: EU Standard Contractual Clauses (SCCs) / OpenAI Data Processing Agreement.

Google LLC (USA) — Google Fonts are loaded from Google servers when you visit the site. Your IP address is transmitted to Google for font delivery. We are working to self-host these fonts to eliminate this transfer.

• Contact form submissions: 12 months from receipt, then deleted.
• sl_lang cookie: 1 year, or until you clear your browser cookies.
• Batch verification queries: not retained (anonymous, not logged).
• AI assistant queries: per OpenAI’s DPA (30 days for safety review, then deleted).

You have the right to: access your personal data · rectify inaccurate data · erase your data (“right to be forgotten”) · restrict processing · data portability · object to processing based on legitimate interest · withdraw consent at any time (where consent is the legal basis).

To exercise any right: email info@accreditation.ge with the subject “Data Subject Request”. We will respond within 30 days.

Georgia: Personal Data Protection Service (Inspector) — pdp.ge
EU/France: Commission nationale de l’informatique et des libertés (CNIL) — cnil.fr

We will notify users of material changes by updating the “Last updated” date above and, where appropriate, adding a notice on the website homepage.