SPARK HUB PRIVACY POLICY

This privacy policy describes how we process the personal data of the lessees of the business premises and visitors of the SPARK HUB start-up and technology centre (hereinafter ‘the centre’), as well as the personal data of the visitors of the website www.sparkhub.ee (hereinafter ‘the website’).

The data controller is Spark Hub OÜ, registry code 12906734, registered address Tartu County, Tartu, Narva mnt 3, 51009 (hereinafter referred to as ‘Spark’).

What personal data we collect

On the website, we collect your e-mail address, first name, and surname if you wish to receive more information about the services we offer, including business premises. If you wish to rent premises via the website, we collect your first name, surname, e-mail address, phone number, and the desired date and time. In both cases, we process the personal data and any additional information you provide in your messages on the basis of consent. You may withdraw this consent at any time by contacting us at info@contriber.com

When leasing the business premises, we enter into a lease agreement and collect the first name, surname, e-mail address, and phone number of the lessee’s representatives and employees, as well as the number of persons working on the leased premises. In addition, we collect the registration numbers of the vehicles using the parking spaces. The legal basis for such data processing is the performance of the agreement.

At the centre and the surrounding area, we collect personal data by recording facial images by means of video cameras. This data is processed on the basis of our legitimate interest with the purpose of preventing violations of law and ensuring security at the centre.

Why we collect personal data

Spark uses personal data for the following purposes:

offering business premises for lease as a service;
communicating with visitors to the website;
managing the website;
sending e-mail notifications;
developing services;
ensuring security inside and in the area surrounding the center.

Access to and transfer of personal data

Spark’s employees have access to the collected personal data, if it is necessary for the performance of their duties.

Spark may transfer the personal data to third parties, if it is necessary for the provision of the centre’s services and for the website to function. Such third parties are Spark's data processors, who are listed here. They process the personal data only in accordance with our instructions and are required to protect any personal data.

In some cases, we may also be legally obligated to transfer the personal data to law enforcement agencies or state authorities. In addition, we may transfer the personal data to protect our interests in the preparation, filing, and protection of legal claims.

Security of the personal data

Personal data is stored on servers located in the European Union.

Spark has implemented appropriate technical and organisational measures to ensure the security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

In the event of a personal data breach that may pose a high risk to privacy, Spark will notify the persons concerned and the relevant authorities.

Rights

You have the right to request access to and rectification of your personal data, as well as the right to object to the processing of your personal data.

You may also request the erasure of your personal data, after which Spark will notify you of the terms and the time limit for the erasure of the data. Spark will not erase personal data, if there is a legal basis for its retention.

You have the right to receive the personal data you have submitted to Spark in a machine-readable format and to request transfer thereof to another processor.

You have the right to withdraw the consent you have given for the processing of your personal data at any time.

To exercise your rights, please submit a digitally signed application to Spark at info@contriber.com

Retention of personal data

Personal data is retained until consent is withdrawn. Personal data collected for the performance of the agreement is retained until the expiry of the agreement. Security camera recordings are retained for up to 30 days.

We may retain the personal data longer, if it is necessary for compliance with a legal obligation or the protection of our interests in the preparation and protection of legal claims.

The personal data collected may be stored in an anonymous form for statistical and analytical purposes.

Use of security cameras

We use security cameras inside and in the area surrounding the centre, for the prevention and detection of lawbreaking and to ensure security. The cameras record the people in the centre.

In order to ensure the effectiveness of the security cameras, we also share the personal data obtained through the use of the cameras with security companies. Such companies may only use the personal data in accordance with our instructions.

If a person who has been captured on a security camera recording wants access to it, they must submit an application to Spark, specifying the time of the recording and the reason for requesting access. If other people are also visible on such images or videos, the recordings will be provided in a format in which the other people are not identifiable.

Security camera recordings are deleted automatically after one calendar month. In the case of security incidents, the recordings are not deleted, but are retained until the resolution of the security incident.

Other terms

If you have any questions, requests, or complaints regarding the processing of the personal data, please contact us first by e-mail at info@contriber.com If you believe that your rights have been violated in the processing of the personal data, you have the right to file a complaint with the Data Protection Inspectorate by e-mail at info@aki.ee.

Spark reserves the right to make changes to this privacy policy at any time, in which case it will be made known on the website.