Privacy notice
Effective from 8 September 2026
This notice explains how SA Andrei Gritskov Foundation processes personal data of Startup School website users and learners.
1. Data controller
SA Andrei Gritskov Foundation, registry code 90009720
Legal address: Madara 1-4, Tallinn, Estonia
Email: andrei.gritskov@gmail.com · phones: +372 5451 5999 · +372 5212 999
2. Data we process
For a website enquiry, we process your name, email address, phone number, selected course, message and technical information needed to transmit the enquiry securely.
When you become a learner, we may process data needed to identify you, perform the training contract, organise studies, assess results, issue documents and account for payments. We request data only when it is necessary for a specific purpose.
3. Purposes and legal bases
Responding to enquiries and preparing or performing a training contract – steps before entering into a contract and performance of a contract.
Organising studies and meeting EHIS, accounting and other statutory requirements – legal obligation.
Protecting the website, information systems and legal claims – legitimate interest.
We send marketing messages only with separate consent, which may be withdrawn at any time.
4. Recipients and transfers
Only authorised staff, trainers and service providers may access data to the extent required for their duties.
We use web-hosting, email, cloud and communication service providers. The web-form workflow may use Google and Telegram services. Where a provider processes data outside the European Economic Area, safeguards required by applicable law are used. We do not sell personal data.
5. Retention
We retain enquiries for the time needed to respond and handle possible claims. Study records and data concerning issued documents are retained for the periods required by law and our records schedule.
Accounting source documents are generally retained for seven years from the end of the relevant financial year. Data is erased or anonymised when the purpose and legal basis for processing end.
6. Your rights
You may request access to, correction or erasure of your data, restriction of processing, or object to processing. Where applicable, you may request data portability and withdraw consent.
Contact us at andrei.gritskov@gmail.com. We may verify your identity before responding and generally reply within one month. You may lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).
7. Changes
We may update this notice if our services or applicable laws change. The current version is published on this page.
Andmekaitse Inspektsioon / Estonian Data Protection Inspectorate