Privacy policy

Privacy Policy

The Estonian Centre for Architecture (EAK) respects your privacy and processes personal data only to the extent necessary to run our activities.

This policy applies to the Estonian Centre for Architecture’s Open House Tallinn and Open House Tartu activities: use of the website, registration for events, volunteer applications, the newsletter, and attendance at public events.

Effective from 18.08.2026. In case of any discrepancy, the Estonian version prevails.

1. Who is responsible for your data

The controller of your personal data is MTÜ Eesti Arhitektuurikeskus (Estonian Centre for Architecture, registry code 80273798).

Kursi 3, 10415 Tallinn, Estonia
Email: info@arhitektuurikeskus.ee
Phone: +372 6117436

2. What data we process

Website use

If you consent to statistics cookies, we collect general information about how the website is used: device and browser details, a truncated IP address, pages visited and actions taken on the site. We use Google Analytics 4 for this, and the data to understand and improve the website.

Legal basis: your consent.
Retention: up to 14 months. Anonymous aggregate statistics may be kept longer.

Newsletter

When you subscribe, we process your email address and information about opens and link clicks.

Legal basis: your consent.
Retention: until you unsubscribe.

You can unsubscribe at any time via the link in the footer of every message. After you unsubscribe we may keep your address on a suppression list to prevent it from being added again by mistake.

Registration for tours and events

When you register we collect your name, email address, the chosen event and time, language, booking reference and attendance information. We use these to hold your place, send you a confirmation, notify you of changes or cancellations, and manage capacity.

Legal basis: our legitimate interest in running the festival and managing your registration. We have assessed that this interest does not override your rights, as we process only what the booking requires and keep it for a short time. Without this data a registration cannot be made.
Retention: up to 60 days after the festival ends. After that we keep only aggregate statistics from which no individual can be identified.

Volunteers

When you apply to volunteer we collect your name, email address, phone number, languages, availability and preferences, previous experience, and the role and venue assigned to you. We use these to select volunteers, build the schedule and communicate with you during the festival.

Legal basis: our legitimate interest in recruiting volunteers and organising the festival. Applying is voluntary and happens on your own initiative.
Retention: up to 60 days after the festival ends.

If you give separate consent, we also keep your name and email address in order to contact you ahead of future festivals. Giving this consent is voluntary and does not affect your application. We keep this data until you withdraw consent. You can withdraw it via the unsubscribe link in any such message, or by writing to us.

Expense reimbursement

Where we reimburse festival-related expenses, we process, to the extent necessary, your name, bank account number, expense documents and the amount reimbursed.

Legal basis: the data needed to make the payment is processed at your own request. Retaining the expense documents is a legal obligation for us under the Estonian Accounting Act.
Retention: accounting records are kept for 7 years. This period cannot be shortened by an erasure request.

Photography and filming

Open House Tallinn and Open House Tartu are public events at which photography and filming take place. We use photographs and video to document and promote the events, in reporting, in our archive, on the website, on social media, in print and in the Estonian Centre for Architecture’s other communication channels.

Legal basis: the Estonian Centre for Architecture’s legitimate interest in documenting and promoting a public cultural event, and § 11 of the Estonian Personal Data Protection Act. Under that provision, the notification obligation does not apply to public events at which recording for the purpose of publication may reasonably be expected.

Where we wish to take a separate portrait of a person, or to use a photograph in a way that goes beyond ordinary coverage of the event, we assess whether separate consent should be requested.

If you do not want a photograph or video of you published, write to info@arhitektuurikeskus.ee and, where possible, include a description or link. We will review the request and remove the material from our channels unless there is an overriding reason not to and removal is reasonably possible.

Retention: photographs and video are kept long term in the Estonian Centre for Architecture’s archive to document the history of the festival.

Correspondence and partners

If you contact us or work with us, we may process your name, contact details, job title and the content of the correspondence.

Legal basis: performance of a contract (where we have entered into a partnership agreement), or our legitimate interest in answering enquiries and managing working relationships.
Retention: generally up to 3 years from the last contact. Accounting records are subject to a 7-year retention period.

Automated decisions

We do not make automated decisions about you and do not build profiles from your personal data.

3. Cookies

The website uses necessary cookies, which are required for the website, its forms and the registration system to function. No separate consent is needed for these and they cannot be switched off.

Statistics cookies are used only with your consent. You can change or withdraw consent at any time through the cookie settings, and delete cookies in your browser. The statistics cookies are:

  • _ga – Google Analytics, distinguishes users. Duration 2 years.
  • _ga_CXZWZX0E3K – Google Analytics, session information. Duration 2 years.

4. Service providers and data transfers

We use service providers who process personal data on our behalf and on our instructions:

  • Zone Media OÜ (Estonia) – hosting, email, and the registration system’s application and database.
  • Vercel Inc. (USA) – technical delivery of the website.
  • Google Ireland Limited (Ireland) – website statistics.
  • Intuit Mailchimp (USA) – newsletter delivery.

Registrations and volunteer data are held in Estonia.

We do not sell your personal data and do not give it to other companies for their own marketing purposes.

Where personal data is transferred outside the European Economic Area, we rely on the European Commission’s adequacy decision (the EU–US Data Privacy Framework) and, as an additional safeguard, on the European Commission’s Standard Contractual Clauses.

5. Your rights

You have the right to:

  • find out what personal data we process about you, and receive a copy of it;
  • have inaccurate data corrected;
  • request erasure where we have no legal basis for keeping the data;
  • restrict the processing of your data;
  • object to processing based on legitimate interest, including the handling of registrations and the publication of photographs and video;
  • receive your data in a machine-readable format in certain cases;
  • withdraw your consent at any time.

You can withdraw consent as follows: for the newsletter, via the unsubscribe link in the footer of any message; for cookies, through the cookie settings; in other cases, by writing to info@arhitektuurikeskus.ee. Withdrawal does not affect the lawfulness of processing carried out before it.

To exercise your rights, write to info@arhitektuurikeskus.ee. We generally reply within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, +372 627 4135) or to seek a remedy before the courts.

6. Data security

We apply appropriate technical and organisational security measures to protect personal data and limit access to those people who need it for their work. In the event of a personal data breach we act in accordance with the notification obligations set out in the GDPR.

We take particular care when processing the personal data and photographs of minors.

7. Changes

We may amend this privacy policy from time to time. The current version and its date are always published on this page.

8. Contact

Estonian Centre for Architecture
Kursi 3, 10415 Tallinn, Estonia
info@arhitektuurikeskus.ee
+372 6117436