Privacy Policy

Controller and contact

Subera OÜ, established in Estonia, operates Tarkev and is the controller responsible for the personal data described in this policy.

For privacy questions or requests, email [email protected] or use the official Contact page.

Personal data we collect

Depending on how you use Tarkev, we may process information such as your name, email address, account identifier, username, profile photo, location, preferred language, account settings, course enrollments, learning progress, mentor interactions, booking information, payment and transaction status, waitlist entries, contact messages, and other information you choose to provide.

If you create a professional Identity, you may add information such as your professional headline, biography, employment history, organizations, skills, languages, education, credentials, projects, links, mentoring information, and other professional details.

We may also process limited technical information needed to operate, secure, and troubleshoot Tarkev, including IP address, browser and device information, request timestamps, authentication events, error logs, and security-related activity.

Please do not submit passwords, full card details, authentication codes, or unnecessary sensitive personal data through profile, course, mentoring, waitlist, or support forms.

Public profiles and professional Identity

Tarkev Identity is designed to let you create a professional profile that can be shared outside Tarkev. If you make your profile public, the information you choose to publish may be accessible to anyone with the profile link and may be visible to recruiters, clients, collaborators, students, mentors, employers, or other visitors.

Public information may also be indexed or cached by search engines or copied by third parties outside Tarkev. Changing your profile to private or deleting information from Tarkev does not necessarily remove copies previously stored by independent third parties.

You are responsible for deciding which professional information you want to make public. Where profile visibility controls are available, you can use them to manage whether your profile is publicly accessible.

Identity verification

If you choose to verify your identity, the verification process may involve a configured identity-verification provider. Depending on the verification method, that provider may request identity-document information, photographs, facial images, or other information necessary to confirm identity.

The verification provider may process verification data under its own privacy information and applicable data-protection obligations. Where required, additional information about the provider and the verification process will be shown when you begin verification.

Tarkev may receive information needed to record the result of verification, such as verification status, reference information, or limited verification results. Identity verification confirms the person behind the profile; it does not automatically verify every employer, skill, degree, project, credential, or other claim shown on that profile.

Mentoring and bookings

If you use Find a Mentor, we may process information needed to display mentor profiles, areas of expertise, mentoring topics, availability, timezone, session information, pricing, and other details provided for mentoring.

When you book or participate in a mentoring session, we may process information needed to manage the booking, identify the participants, record the selected session and time, manage payment status where applicable, and provide related account or support functionality.

Information that a mentor chooses to publish on a public mentor or professional profile may be visible to other Tarkev users and public visitors.

Where personal data comes from

We receive most personal data directly from you when you create or update an account, build your professional Identity, enroll in or access a course, interact with lessons, use mentoring features, make a booking or payment, join a waitlist, or contact us.

We may also receive account, authentication, payment, transaction, fraud-prevention, identity-verification, or booking-related information from service providers that support the relevant feature.

We do not receive or store your full payment-card number when card payments are handled by an external payment provider.

Why we use personal data and our legal bases

We process account, enrollment, course-access, learning-progress, mentoring, booking, and payment-status information when processing is necessary to provide requested Tarkev services, take steps at your request, or perform a contract with you.

We process records when necessary to comply with legal obligations, including applicable accounting, tax, consumer-protection, fraud-prevention, and regulatory requirements.

We may process limited technical, security, support, platform-integrity, and service-operation data based on legitimate interests in operating, protecting, troubleshooting, preventing abuse of, and improving Tarkev, where those interests are not overridden by your rights and freedoms.

Where processing requires consent, including certain optional marketing communications or non-essential cookies, we will request consent separately. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

If a feature requires processing that is subject to additional protections under applicable data-protection law, an appropriate legal condition and any required additional notice will apply.

Authentication and accounts

Account authentication may be provided through Shopemaa Accounts or another configured identity provider. The provider may process identifiers, authentication events, and account-security information according to its applicable terms and privacy information.

Authentication credentials or tokens may be handled using secure mechanisms such as HTTP-only cookies. The frontend may store limited non-sensitive settings, such as selected language or portal preferences, in browser storage.

We may process account-security information when necessary to prevent unauthorized access, investigate abuse, or protect Tarkev and its users.

Payments

Payments for courses, mentoring sessions, or other paid Tarkev services may be processed by Stripe or another payment provider supported by the platform. The payment provider processes the information necessary to authorize, complete, secure, and manage the transaction.

Tarkev does not store full payment-card numbers or card security codes. We may process transaction identifiers, amounts, currency, payment status, refunds, booking or enrollment references, and invoice-related information needed to provide the service and meet legal obligations.

The payment methods available to you may depend on the product, location, currency, and configured payment provider.

Learning, lesson access, and progress

Courses may contain video, written Markdown content, downloadable resources, exercises, projects, or combinations of these formats. We process account, enrollment, and authorization information to determine whether content is public, available as a preview, or restricted to enrolled learners.

Private video delivery may use signed HLS URLs or similar time-limited access controls. Restricted written content may also be returned only after authorization.

We may record information such as lesson completion, course progress, and last-accessed content so you can continue learning and so Tarkev can provide the learning experience.

Waitlists, messages, and communications

If you join a waitlist, contact Tarkev, request support, or otherwise send us a message, we process the contact details and information you submit in order to respond to your request or provide the requested communication.

If you explicitly choose to receive optional product, course, or marketing updates where consent is required, we may use your contact details for that purpose until you unsubscribe or withdraw consent.

Service-related communications that are necessary for your account, purchase, booking, security, or use of Tarkev may be sent independently of optional marketing preferences where permitted by law.

Service providers and other recipients

We may share personal data with providers that support functions such as authentication, identity verification, payments, hosting, cloud infrastructure, storage, content delivery, email delivery, monitoring, analytics when enabled, communications, customer support, and other professional or technical services.

Providers receive information only as reasonably necessary for the function they perform and are expected to process it in accordance with applicable contracts and data-protection obligations.

We may also disclose personal data where required by law, in response to valid legal process, to protect the rights or security of Tarkev or others, or in connection with a merger, acquisition, financing, reorganization, sale, or transfer of all or part of the relevant business.

International data transfers

Some service providers may process personal data outside Estonia or the European Economic Area. Where applicable law requires additional safeguards for such transfers, we will rely on a recognized transfer mechanism such as an adequacy decision, standard contractual clauses, or another lawful safeguard.

The service providers and processing locations used by Tarkev may change as the platform and its infrastructure develop. Material changes affecting this policy will be reflected here or in related provider information.

Cookies and browser storage

Tarkev may use strictly necessary cookies and browser storage for authentication, security, session continuity, language preferences, portal preferences, and other functionality required to operate the service.

Optional analytics, personalization, or marketing technologies will be used only when an appropriate legal basis exists and, where required, after consent has been obtained.

You can manage cookies through your browser and through any consent controls made available by Tarkev.

How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, accounting, security, and dispute-resolution requirements.

Account and professional-profile information may be retained while your account remains active. Enrollment, learning-progress, mentoring, and booking information may be retained while needed to provide the relevant service and for a reasonable period afterward for account history, support, disputes, and record keeping.

Payment, invoice, and transaction records may be retained for the period required by applicable accounting and tax laws. Waitlist or optional marketing information is kept until you unsubscribe, withdraw consent where applicable, or the relevant purpose ends.

Support messages, verification references, technical logs, and security records are retained according to their operational, legal, fraud-prevention, and security relevance.

Limited information may be retained for longer when necessary to establish, exercise, or defend legal claims, comply with law, prevent fraud or abuse, or document that a privacy request has been fulfilled.

Your data-protection rights

Subject to applicable law, you may have the right to receive information about processing, access your personal data, correct inaccurate or incomplete information, request deletion, restrict processing, and receive certain data you provided in a portable format.

You may object to certain processing based on legitimate interests and to processing for direct marketing. Where processing is based on consent, you may withdraw that consent.

These rights are not absolute in every situation. We may need to verify your identity before acting on a request, and applicable law may allow or require us to retain certain information.

You also have the right to lodge a complaint with a competent data-protection supervisory authority. In Estonia, the supervisory authority is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Children and younger users

Tarkev is primarily designed for university students, adult learners, professionals, mentors, and other users developing professional skills.

Where consent is the legal basis for an information-society service offered directly to a child in Estonia, a child under 13 requires consent from a legal representative. Other account, payment, contractual, or service requirements may require involvement of a parent or legal guardian in additional circumstances.

If you believe a child has provided personal data to Tarkev without any authorization required by applicable law, please contact us.

Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, and destruction. Depending on the relevant system, measures may include encrypted transport, access controls, secure authentication, private storage, monitoring, backups, and restricted administrative access.

No internet-based service can guarantee absolute security. You are responsible for protecting your email account and any credentials or authentication methods connected to your Tarkev account.

Changes to this policy

We may update this Privacy Policy when Tarkev features, service providers, legal requirements, or data-processing practices change. The latest revision date will be shown at the top of this page.

Where a change materially affects how personal data is processed, we will provide additional notice where appropriate or legally required.