The data controller is sTARTUp Hub OÜ, registry code 12865113, registered address Tartu County, Tartu, Raekoja plats 16, 51004 (hereinafter referred to as ‘Hub’).
What personal data we collect
On the website, we collect your e-mail address, first name, and surname if you wish to receive more information about the services we offer, including business premises. If you wish to rent premises via the website, we collect your first name, surname, e-mail address, phone number, and the desired date and time. In both cases, we process the personal data and any additional information you provide in your messages on the basis of consent. You may withdraw this consent at any time by contacting us at
When leasing the business premises, we enter into a lease agreement and collect the first name, surname, e-mail address, and phone number of the lessee’s representatives and employees, as well as the number of persons working on the leased premises. In addition, we collect the registration numbers of the vehicles using the parking spaces. The legal basis for such data processing is the performance of the agreement.
At the center and the surrounding area, we collect personal data by recording facial images by means of video cameras. This data is processed on the basis of our legitimate interest with the purpose of preventing violations of law and ensuring security at the center.
Why we collect personal data
Hub uses personal data for the following purposes:
offering business premises for lease as a service;
communicating with visitors to the website;
managing the website;
sending e-mail notifications;
ensuring security inside and in the area surrounding the center.
Access to and transfer of personal data
Hub’s employees have access to the collected personal data, if it is necessary for the performance of their duties.
Hub may transfer the personal data to third parties, if it is necessary for the provision of the center’s services and for the website to function. Such third parties are Hub's data processors, who are listed here. They process the personal data only in accordance with our instructions and are required to protect any personal data.
In some cases, we may also be legally obligated to transfer the personal data to law enforcement agencies or state authorities. In addition, we may transfer the personal data to protect our interests in the preparation, filing, and protection of legal claims.
Security of the personal data
Personal data is stored on servers located in the European Union.
Hub has implemented appropriate technical and organisational measures to ensure the security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
In the event of a personal data breach that may pose a high risk to privacy, Hub will notify the persons concerned and the relevant authorities.
You have the right to request access to and rectification of your personal data, as well as the right to object to the processing of your personal data.
You may also request the erasure of your personal data, after which Hub will notify you of the terms and the time limit for the erasure of the data. Hub will not erase personal data, if there is a legal basis for its retention.
You have the right to receive the personal data you have submitted to Hub in a machine-readable format and to request transfer thereof to another processor.
You have the right to withdraw the consent you have given for the processing of your personal data at any time.
To exercise your rights, please submit a digitally signed application to Hub at
Retention of personal data
Personal data is retained until consent is withdrawn. Personal data collected for the performance of the agreement is retained until the expiry of the agreement. Security camera recordings are retained for up to 30 days.
We may retain the personal data longer, if it is necessary for compliance with a legal obligation or the protection of our interests in the preparation and protection of legal claims.
The personal data collected may be stored in an anonymous form for statistical and analytical purposes.
Use of security cameras
We use security cameras inside and in the area surrounding the center, for the prevention and detection of lawbreaking and to ensure security. The cameras record the people in the center.
In order to ensure the effectiveness of the security cameras, we also share the personal data obtained through the use of the cameras with security companies. Such companies may only use the personal data in accordance with our instructions.
If a person who has been captured on a security camera recording wants access to it, they must submit an application to Hub, specifying the time of the recording and the reason for requesting access. If other people are also visible on such images or videos, the recordings will be provided in a format in which the other people are not identifiable.
Security camera recordings are deleted automatically after one calendar month. In the case of security incidents, the recordings are not deleted, but are retained until the resolution of the security incident.
If you have any questions, requests, or complaints regarding the processing of the personal data, please contact us first by e-mail at If you believe that your rights have been violated in the processing of the personal data, you have the right to file a complaint with the Data Protection Inspectorate by e-mail at email@example.com.