Privacy Policy and Processing of Personal Data

SA Tallinna Kultuurikatel (Tallinn Creative Hub) respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable legislation.

1. Controller

The controller of your personal data is:

SA Tallinna Kultuurikatel
Registry code: 90009424
Address: Kursi 3, 10415 Tallinn, Estonia
Email: info@kultuurikatel.ee

2. What personal data do we process and why?

Enquiries sent through the website

If you contact us through the contact form on our website or by email, we process your name, email address, phone number and any other information you provide in your enquiry.

We use this data to respond to your enquiry and, where necessary, to arrange further communication.

The legal basis depends on the content of the enquiry. If the enquiry relates to entering into or performing a contract, the legal basis is the performance of a contract or taking steps prior to entering into a contract. In other cases, processing may be based on our legitimate interest in responding to enquiries sent to us.

We generally keep enquiry-related data until the enquiry has been resolved, unless longer retention is necessary to perform a contract, to defend legal claims or to comply with a legal obligation.

Venue rental and cooperation

If you contact us about renting the venues of SA Tallinna Kultuurikatel, organising an event or other cooperation, we may process your name, contact details, details of the organisation you represent and the information needed to conclude and perform a contract.

To prepare an offer, we may carry out a credit information check on the company. The legal basis for this is our legitimate interest in assessing the solvency of a contractual partner.

The legal basis for processing is generally the conclusion and performance of a contract or taking steps prior to entering into a contract.

When retaining contracts and related documents, we follow the retention obligations arising from legislation and the document retention periods of SA Tallinna Kultuurikatel. We keep invoices and accounting documents for 7 years in accordance with the Estonian Accounting Act.

Newsletter

If you subscribe to the newsletter of SA Tallinna Kultuurikatel, we process your email address and, where applicable, your name in order to send it.

The newsletter is sent on the basis of your consent. You can withdraw your consent at any time by using the unsubscribe option in the newsletter.

We keep the data needed to send the newsletter until you withdraw your consent.

3. Use of the website and cookies

Our website uses cookies and other similar technologies that are necessary for the website to function or that help us understand how the website is used.

Web analytics may involve processing, for example, your IP address, technical data about your device and browser, and information about how you use the website.

We use analytics and marketing cookies that are not necessary for the website to function (Google Analytics, Hotjar, Meta Pixel) only if you have given your consent.

More detailed information about the cookies we use, their purposes and retention periods is provided in the cookie settings or cookie notice.

4. Who may we share personal data with?

We use service providers who may need to process personal data in order to provide their services. These may include, for example:

  • IT, web hosting and cloud service providers;
  • email and workplace software providers;
  • the newsletter service provider;
  • web analytics service providers;
  • advertising and marketing platforms (e.g. Meta);
  • accounting and other service providers supporting the activities of SA Tallinna Kultuurikatel.

Where a service provider processes personal data on our behalf, we apply data protection terms that meet the requirements of the GDPR.

Where personal data is transferred outside the European Economic Area, we rely on a transfer mechanism provided for in the GDPR and apply appropriate safeguards.

We may also disclose data to public authorities where required by law.

5. Your rights

Under the conditions set out in the GDPR, you have the right to:

  • obtain information about the processing of your personal data and access your data;
  • request the rectification of inaccurate personal data;
  • request the erasure of your personal data;
  • request the restriction of processing of your personal data;
  • object to the processing of your personal data;
  • receive the data you have provided in a machine-readable format and transmit it to another controller, where the conditions for the right to data portability are met;
  • withdraw your consent at any time where processing is based on consent.

These rights are not absolute, and whether they apply depends on the specific purpose and legal basis of the processing.

To exercise your rights, please contact us at info@kultuurikatel.ee.

If you believe that data protection requirements have been breached in the processing of your personal data, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee).

We do not make automated decisions or carry out profiling concerning our customers that would have legal effects on them.

6. Changes to this privacy policy

We update this privacy policy when our personal data processing practices or the applicable legal requirements change. The current privacy policy is published on the websites of SA Tallinna Kultuurikatel.

Last updated: 30.09.2026