Privacy Policy

Last updated: November 16, 2025

1. Introduction

Hubtal OÜ ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller:
Hubtal OÜ
Tallinn, Estonia
Email: hello@hubtal.com

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Name and contact information (email address, phone number)
  • Professional information (company name, job title)
  • Information you provide when contacting us or applying for positions
  • Communication preferences and correspondence with us

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address and device information
  • Browser type and version
  • Operating system
  • Referring URLs and pages visited
  • Date and time of visits
  • Cookies and similar tracking technologies (see our Cookie Policy below)

3. How We Use Your Information

We use your personal data for the following purposes:

  • Service Delivery: To provide and maintain our services
  • Communication: To respond to your inquiries and communicate with you
  • Recruitment: To process job applications and evaluate candidates
  • Business Operations: To manage partnerships and business relationships
  • Website Improvement: To analyze and improve our website functionality and user experience
  • Legal Compliance: To comply with legal obligations and protect our rights
  • Marketing: To send you relevant information about our services (with your consent where required)

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary for a contract we have with you or to take steps at your request before entering into a contract
  • Legitimate Interests: Processing is necessary for our legitimate interests (e.g., business operations, fraud prevention) and does not override your rights
  • Legal Obligation: Processing is necessary to comply with the law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Service Providers: Third-party vendors who provide services on our behalf (e.g., hosting, analytics, email services)
  • Business Partners: With your consent or as necessary for partnership activities
  • Legal Requirements: When required by law, court order, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

All third parties are required to maintain the confidentiality and security of your personal data and process it only for specified purposes.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary depending on:

  • The nature of the data and purposes for processing
  • Legal, regulatory, or contractual requirements
  • Our legitimate business interests

When personal data is no longer needed, we securely delete or anonymize it.

8. Your Rights

Under GDPR and other data protection laws, you have the following rights:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Request restriction of processing your personal data
  • Right to Data Portability: Request transfer of your data to another organization or directly to you
  • Right to Object: Object to processing of your personal data based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at hello@hubtal.com. We will respond to your request within one month.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. Cookies are small text files stored on your device.

Types of Cookies We Use:

  • Essential Cookies: Necessary for website functionality
  • Analytics Cookies: Help us understand how visitors use our website
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Track your activity for marketing purposes (with your consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Incident response procedures

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hubtal OÜ

Tallinn, Estonia

Email: hello@hubtal.com

15. Supervisory Authority

If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

For Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).