Last updated: 04.06.2026 Sparkup Tartu Science Park (“us”, “we”, or “our”) operates the www.esabic.e website (the “Service”). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Estonian and European Union data protection law. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have.
Data Controller

The data controller responsible for your personal data is Sparkup Tartu Science Park, Riia 181a, Tartu, Estonia. If you have any questions about how we handle your data, please contact us at info@teaduspark.ee.
What Personal Data We Collect and Why

We collect personal data only for specific, explicit, and legitimate purposes. Depending on how you use our Service, this may include:
Contact and inquiry forms – name and email address, used to respond to your inquiry. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
Event and programme registrations – name, email address, organisation, and role, used to manage registrations and communicate about the event or programme. Legal basis: performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)), or consent where applicable.
Newsletter – email address and optionally name, used to send news and updates about Tartu Science Park. Legal basis: consent (GDPR Art. 6(1)(a)). You may unsubscribe at any time via the link in every email.
Website usage data – IP address, browser type and version, pages visited, and time of visit, used to understand how the site is used and to improve it. Legal basis: consent for non-essential cookies; legitimate interest for strictly necessary cookies.
Log Data

We collect information that your browser sends whenever you visit our Service (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.
Cookies

Cookies are small text files stored on your device. We use the following categories of cookies:
Strictly necessary – required for the website to function. These cannot be declined.
Analytics – help us understand how the site is used (e.g. Google Analytics). These require your consent.
When you first visit the site, you will be asked for your consent to non-essential cookies. You can change your preferences at any time via the cookie settings in the footer, or by adjusting your browser settings. We use Google Analytics to analyse website traffic. Google may transfer data to servers outside the European Economic Area; such transfers are governed by standard contractual clauses approved by the European Commission. For more information, see Google’s Privacy Policy.
How Long We Keep Your Data

We retain personal data only as long as necessary for the purpose it was collected, or as required by law:
Contact inquiries: up to 2 years after the last correspondence.
Event and programme registrations: up to 3 years after the event.
Newsletter subscriptions: until you unsubscribe.
Website analytics data: typically 14–26 months, as configured in our analytics tool.
Service Providers

We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, or assist us in analysing how our Service is used. These parties act as data processors and have access to your personal data only to perform tasks on our behalf. They are contractually obligated not to disclose or use it for any other purpose. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Your Rights

Under GDPR, you have the following rights regarding your personal data:
Right of access – request a copy of the data we hold about you.
Right to rectification – ask us to correct inaccurate data.
Right to erasure – ask us to delete your data, subject to legal retention obligations.
Right to restriction – ask us to limit how we use your data in certain circumstances.
Right to data portability – request your data in a structured, machine-readable format.
Right to object – object to processing based on legitimate interests.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [wpautoterms company_email]. We will respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee / info@aki.ee.
Security

The security of your personal data is important to us. We apply appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.
Children’s Privacy

Our Service does not address anyone under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we discover that a child under 18 has provided us with personal data, we will delete such information from our servers immediately.
Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the date at the top. For significant changes, we will make reasonable efforts to notify you directly. You are advised to review this Privacy Policy periodically.
Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at Info@teaduspark.ee.