We appreciate the trust you place in us when sharing your personal data. The security of that data is very important to us. In this document, we will explain how we collect, use and protect your personal data when European Regulation 2016/679 (hereinafter: GDPR) is applicable.
We will also explain what rights you have with regards to your personal data and how you can exercise those rights in line with the GDPR.
EC Innovations takes steps to ensure that this notice is made available to data subjects prior to EC Innovations collecting/processing their personal data.
All Employees/Staff of EC Innovations who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and – if it is applicable - their consent to the processing of their data is secured.
EC Innovations is a technology-driven language services provider with a mission to deliver high quality localization solutions through a customer-centric, partnership approach:
EC Innovations has grown into 3 regional Head Quarters (Beijing, Budapest, Wilmington) and a total of 11 strategic global offices.
Our website and cloud service providers (e-mail server, CAT-tool server, ERP server) are hosted both within the EU and in other countries (United States, People's Republic of China) and are accessed not only by our EU-based staff. Our website, as identified in section 4. under, are targeted at non-EU/EU customers and are accessed by staff located outside/inside the EU. In all these instances, we have appropriate contractual and security measures in place to ensure that personal data is protected.
We use a wide range of Cloud Service Providers (CSPs) as part of our processing environment. Unless we specifically state otherwise, we are, in respect of all these CSPs, the data controller.
We deliver high quality localization solutions around the world; we therefore use suppliers that are based outside the EU and operate in other countries. We have appropriate legal and security relationships with those partners.
The following companies are within scope for this privacy policy:
All company use the same website: https://www.ecinnovations.com
Unless specifically stated, we consider the Website and its Terms of Use shall be governed by the laws of the People's Republic of China.
This Policy also covers any additional data collected by our tools and applications.
It includes personal data that is collected through our website, by telephone and through any related social media applications (LinkedIn).
Our cookie policy, which can be viewed from the home page of our web site, describes in detail how we use cookies.
In Section 9 below, we identify your rights in respect of the personal data that we collect or process and describe how you can exercise those rights.
For more detailed information please see the table below in Section 7.
A number of data elements are collected for multiple purposes. Some data may be shared with third parties.
When we process on the lawful basis of legitimate interest, we apply the following test to determine whether it is appropriate:
The purpose test: | is there a legitimate interest behind the processing? |
Necessity test: | is the processing necessary for that purpose? |
Balancing test: | is the legitimate interest overridden, or not, by the individual’s interests, rights or freedoms? |
For more detailed information please see the table below in Section 7.
Purposes of collection | Data collected | Purpose for collection | Lawful basis | Data shared with | Retention period |
---|---|---|---|---|---|
Performance of Labor Agreement | Name Identification and contact details Address Account number |
Fulfil labor agreement | Contractual fulfilment | Internally and professional advisers | 8 years from the termination of the agreement |
For accounting and taxation purposes | Statutory obligation | Internally (transmitted to the People's Republic of China) and professional advisers | |||
Monitor the behavior of workers as necessary | Legitimate Interest | Internally and professional advisers | |||
Performance of an External Contract for Suppliers (Master Contract) | Name Identification details Address All billing data given in the ‘Payment Instructions’ |
Fulfil Master Contract | Contractual fulfilment | Internally and professional advisers | 8 years from the date of the performance of the contract |
For accounting and taxation purposes | Statutory obligation | ||||
Blind CV Copy of degree All data given in the ‘Freelancer Datasheet’ and in ‘Fields of Expertise’ | To process Purchase Orders for services with Clients and for the correspondence of ISO certifications | Contractual fulfilment | Internally and any third party with whom we contract in order to fulfil a localization service agreement | Maximum 6 years from the date of the performance of the contract. | |
Date of Birth | To send greeting cards | Legitimate Interest | Internally | Relevant statutes of limitation | |
Performance of a Service Level Agreement | Name Identification and Contact details Address Data in translated document |
To process localization services | Contractual fulfilment | Internally | 8 years from the date of the performance of the contract |
For accounting and taxation purposes | Statutory obligation | Internally and professional advisers | |||
Security | Security information set out in cookie policy | To protect our website and infrastructure and to report and deal with any illegal acts. | Legitimate Interest | Internally, forensic and other third parties with whom we contract for his purpose | Relevant statutes of limitation. |
Communication | Name Contact details, |
Legitimate Interest | Internally and professional advisers | Relevant statutes of limitation. |
When GDPR is applicable and we need to transfer data to a non-EU country we ensure that it happens lawfully. A transfer or a set of transfers of personal data to a third country or an international organization shall take place only on one of the following conditions:
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
In order to process your request, we will ask you to provide two valid forms of identification for verification purposes.
In the event that you wish to make a complaint about how your personal data is being processed by EC Innovations (or third parties as described in 7 above), or how your complaint has been handled, you are entitled to escalate your complaint to a supervisory authority within the European Union. For Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), who is also our lead supervisory authority. Its contact information can be found at http://naih.hu/general-information.html.
Without prejudice to any available administrative or non-judicial remedy, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under GDPR have been infringed as a result of the processing of his or her personal data in non-compliance with GDPR.
Any person who has suffered material or non-material damage as a result of an infringement of GDPR shall have the right to receive compensation from the controller or processor for the damage suffered.
Read more about how and why we use your data here.
Any comments, questions or suggestions about this privacy policy or our handling of your personal data or would like to exercise your data subject rights, please email us at: privacy@ecinnovations.com
Alternatively, you can contact us at our EMEA REGIONAL HEADQUARTERS using the following postal address or telephone numbers:
EC Innovations is the owner of this document and is responsible for ensuring that this record is reviewed in line with the reviewed requirements of the GDPR.