1. Controller
This website, levora.rest, is operated by Levora Casino & Spa ("Levora", "we", "us"), the controller of the personal data described here. Privacy contact: info@levora.rest.
Postal address: 21 Silver Moon Street, 6010 Batumi, Georgia
2. Scope
This policy covers data processed through this website and through requests you send us by e-mail or phone. Data processed at the hotel itself — such as registration at check-in or the ID check at the entrance to the hotel casino — is covered by separate notices available at the reception.
3. Data we process
- Technical data recorded by our hosting server: IP address, date and time, requested page, browser type and referring page.
- Consent data: a small cookie that remembers your cookie choices. Analytics or advertising cookies are used only with your consent (section 6).
- Request data: your name, e-mail or phone number, dates, number of guests and anything else you choose to tell us, such as dietary or accessibility needs.
We do not take payments on this website and never ask for card details by e-mail.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Running the website securely and preventing abuse | Technical data | Legitimate interests |
| Remembering your cookie choices | Consent cookie | Legal obligation and legitimate interests |
| Answering requests and preparing a booking you ask for | Request data | Steps taken at your request before a contract |
| Special requests (dietary or accessibility needs) | Information you choose to share | Your explicit consent, which you can withdraw at any time |
| Measuring visits and advertising, if enabled | Cookie identifiers, technical data | Your consent, which you can withdraw at any time |
We apply Georgia's Law on Personal Data Protection and, for visitors from the European Union or the United Kingdom, the GDPR or UK GDPR where they apply.
5. Recipients
- Our hosting provider (website and server logs).
- Our e-mail provider (correspondence).
- Google, only if you consent to analytics or advertising cookies.
- Authorities, where disclosure is required by law.
We do not sell personal data and do not share it with gaming or betting companies.
6. Cookies
A necessary cookie stores your cookie choices. Analytics and advertising cookies load only after you accept them; you can change your choice at any time via "Cookie settings" at the bottom of each page. See our Cookie Policy.
7. Transfers abroad
Some providers, such as Google, may process data outside Georgia. Such transfers rely on recognised safeguards, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
8. Retention
- Server logs: up to 30 days, longer only to investigate a security incident.
- Cookie choice: up to 6 months.
- Requests without a booking: up to 12 months after our last reply.
- Requests that lead to a booking: as long as needed for the stay and legal or accounting obligations.
9. Security
The website uses HTTPS, server access is restricted and automated protection blocks repeated intrusion attempts. Only team members who need request data can see it.
10. Your rights
You may ask for access to your data, correction, deletion, restriction, objection and a portable copy, and you may withdraw consent at any time. Write to info@levora.rest; we reply within one month.
You may also complain to a data protection authority — in Georgia, the State Audit Office, which has supervised personal data protection since it took over the functions of the Personal Data Protection Service on 2 March 2026 (sao.ge), or the authority in the country where you live or work.
11. Children
This website is intended for adults planning a stay. We do not knowingly collect data from children under 16. The hotel casino admits adults aged 18 and over only (25 and over for Georgian citizens).
12. Automated decisions
We make no decisions about you based solely on automated processing.
13. Updates
We update this policy when our website, services or the law change; the date above shows the current version.