evisa.org.az ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website and services.
By using evisa.org.az, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.
1. Data Controller
The data controller responsible for your personal information is:
eVisa Services Center LLC
Azerbaijan, Sumqayit City, Mah 42, Apt 15, Man 18.
Registration Number: 2907874011
Contact for Privacy Inquiries:
Email: support@evisa.org.az
Phone: +994 50 597 43 00
2. Information We Collect
2.1 Personal Information
When you use our services, we may collect the following categories of personal information:
Identity Information:
- Full name (as it appears on passport)
- Date of birth
- Place of birth
- Gender
- Nationality
- Passport photograph
Passport & Travel Documents:
- Passport number
- Passport issuance and expiration dates
- Country of issuance
- Previous visa history (if applicable)
Contact Information:
- Email address
- Phone number
- Residential address
- Mailing address
Travel Information:
- Intended travel dates
- Purpose of visit
- Accommodation details
- Flight information (if provided)
Payment Information:
- Billing name and address
- Transaction records
- Payment confirmation details
Note: Credit/debit card details are processed directly by PAŞA Bank and are NOT stored on our servers.
2.2 Technical Information
We automatically collect certain technical data when you visit our website:
- IP address
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Screen resolution
- Referring website URL
- Pages visited and time spent on each page
- Date and time of access
- Click patterns and navigation behavior
2.3 Communication Records
We retain records of:
- Email correspondence with our support team
- Live chat transcripts
- Phone call records (if applicable)
- Feedback and survey responses
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Processing visa applications | Performance of contract |
| Payment processing | Performance of contract |
| Customer support | Performance of contract |
| Fraud prevention | Legitimate interest |
| Security measures | Legitimate interest |
| Website analytics | Legitimate interest (with consent for cookies) |
| Marketing communications | Consent |
| Legal compliance | Legal obligation |
4. How We Use Your Information
We use the collected information for the following purposes:
Service Delivery:
- Process and submit your Azerbaijan e-Visa application
- Communicate application status and updates
- Provide customer support and respond to inquiries
- Send confirmation emails and receipts
Payment Processing:
- Process payments securely through PAŞA Bank
- Generate invoices and transaction records
- Handle refund requests
Security & Fraud Prevention:
- Verify applicant identity
- Detect and prevent fraudulent applications
- Protect against unauthorized access
- Comply with sanctions screening requirements
Website Improvement:
- Analyze website usage patterns
- Improve user experience and website functionality
- Develop new features and services
- Conduct statistical analysis
Legal Compliance:
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Defend legal claims
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and analyze website usage.
5.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for website functionality, security, and session management | Session |
| Functional Cookies | Remember your preferences (language, region) | Up to 1 year |
| Analytics Cookies | Help us understand how visitors use our website | Up to 2 years |
| Performance Cookies | Monitor website performance and identify issues | Up to 1 year |
5.3 Third-Party Cookies
We may use cookies from the following third-party services:
- Google Analytics: Website traffic analysis
- PAŞA Bank: Secure payment processing
- Cloudflare: Security and performance optimization
5.4 Managing Cookies
You can control cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy → Cookies
Note: Disabling essential cookies may affect website functionality.
6. Data Sharing and Third Parties
6.1 When We Share Your Data
We may share your personal information with:
Government Authorities:
- The Republic of Azerbaijan government for e-Visa processing
- Immigration and border control authorities
- Law enforcement agencies (when legally required)
Service Providers:
- PAŞA Bank (payment processing)
- Cloud hosting providers (data storage)
- Email service providers (communications)
- Customer support platforms
Legal Requirements:
- Court orders and legal proceedings
- Regulatory authorities
- Fraud investigation agencies
6.2 We Do NOT Sell Your Data
evisa.org.az does not sell, rent, or trade your personal information to third parties for marketing purposes.
6.3 Third-Party Service Standards
All third-party service providers are contractually obligated to:
- Maintain appropriate security measures
- Process data only as instructed
- Comply with applicable data protection laws
- Delete data upon service termination
7. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including:
- Azerbaijan (for visa application processing)
- European Union (for certain service providers)
When transferring data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by relevant authorities
- Binding Corporate Rules where applicable
8. Data Retention
We retain your personal information for the following periods:
| Data Type | Retention Period |
|---|---|
| Visa application data | 5 years from application date |
| Payment records | 7 years (legal requirement) |
| Customer support communications | 3 years |
| Website analytics data | 26 months |
| Marketing consent records | Until consent is withdrawn |
After the retention period expires, data is securely deleted or anonymized.
9. Your Rights (GDPR & Data Protection)
If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data, subject to legal retention requirements.
Right to Restriction
Request limitation of how we process your data.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Withdraw consent at any time for processing based on consent.
Right to Lodge a Complaint
File a complaint with your local data protection authority.
To exercise your rights, contact us at: support@evisa.org.az
We will respond to your request within 30 days.
10. Data Security
We implement comprehensive security measures to protect your data:
Technical Measures:
- SSL/TLS encryption for all data transmission
- Encrypted databases using AES-256 encryption
- Secure payment gateway (PCI-DSS compliant)
- Regular security audits and penetration testing
- Firewall protection and intrusion detection systems
- DDoS protection
Organizational Measures:
- Access controls and role-based permissions
- Employee confidentiality agreements
- Regular security training for staff
- Incident response procedures
- Data protection impact assessments
Physical Measures:
- Secure data center facilities
- Physical access controls
- Environmental controls and monitoring
11. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms:
- We will notify affected individuals within 72 hours of becoming aware of the breach
- We will inform relevant supervisory authorities as required by law
- We will take immediate steps to contain and mitigate the breach
- We will provide information on steps you can take to protect yourself
12. Children's Privacy
evisa.org.az services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18 without parental consent.
If a visa application is submitted for a minor, the parent or legal guardian must provide consent and take responsibility for the minor's data.
If we become aware that we have collected data from a child under 18 without appropriate consent, we will take steps to delete that information.
13. Marketing Communications
Opt-In
We only send marketing communications if you have opted in to receive them.
Opt-Out
You can unsubscribe from marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email
- Contacting us at support@evisa.org.az
- Updating your preferences on our website
Note: Opting out of marketing does not affect transactional emails related to your visa application.
14. Links to Third-Party Websites
Our website may contain links to external websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to read the privacy policies of any website you visit.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
For significant changes, we may notify you via email or through a prominent notice on our website.
Your continued use of evisa.org.az after any changes constitutes acceptance of the updated Privacy Policy.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
eVisa Services Center LLC
Email: support@evisa.org.az
Phone: +994 50 597 43 00
Address: Azerbaijan, Sumqayit City, Mah 42, Apt 15, Man 18.
Response Time: We aim to respond to all inquiries within 48 hours.
17. Supervisory Authority
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority:
For UK Residents:
Information Commissioner's Office (ICO)
Website: ico.org.uk
For EU Residents:
Contact your national Data Protection Authority
For Azerbaijan Residents:
State Service for Antimonopoly and Consumer Market Control
By using evisa.org.az, you acknowledge that you have read and understood this Privacy Policy.
