Table of Contents

  1. Introduction
  2. Responsibilities
  3. Who are we?
  4. Companies and websites within scope
  5. The personal data we collect or process will be used for the following purposes:
  6. Our legal basis for processing for the personal data:
  7. Data Processing Table
  8. Data transfer to third countries
  9. Your rights as a data subject
  10. Complaints
  11. Privacy statement
  12. Contact us

1. Introduction

We appreciate the trust you place in us when sharing your personal data. The security of that data is very important to us. In this document, we will explain how we collect, use and protect your personal data when European Regulation 2016/679 (hereinafter: GDPR) is applicable.

We will also explain what rights you have with regards to your personal data and how you can exercise those rights in line with the GDPR.

2. Responsibilities

The EC Innovations takes steps to ensure that this notice is made available to data subjects prior to EC Innovations collecting/processing their personal data.

All Employees/Staff of EC Innovations who interact with data subjects are responsible for ensuring that this notice is drawn to the data subject’s attention and – if it is applicable - their consent to the processing of their data is secured.

3. Who are we?

EC Innovations is a technology-driven language services provider with a mission to deliver high quality localization solutions through a customer-centric, partnership approach:

EC Innovations has grown into 3 regional Head Quarters (Beijing, Budapest, Chicago) and a total of 11 strategic global offices.

Our website and cloud service providers (e-mail server, CAT-tool server, ERP server) are hosted both within the EU and in other countries (United States, People's Republic of China) and are accessed not only by our EU-based staff. Our website, as identified in section 4. under, are targeted at non-EU/EU customers and are accessed by staff located outside/inside the EU. In all these instances, we have appropriate contractual and security measures in place to ensure that personal data is protected.

We use a wide range of Cloud Service Providers (CSPs) as part of our processing environment. Unless we specifically state otherwise, we are, in respect of all these CSPs, the data controller.

We deliver high quality localization solutions around the world; we therefore use suppliers that are based outside the EU and operate in other countries. We have appropriate legal and security relationships with those partners.

4. Companies and website within scope

The following companies are within scope for this privacy policy:

All company use the same website: https://www.ecinnovations.com

Unless specifically stated, we consider the Website and its Terms of Use shall be governed by the laws of the People's Republic of China.

This Policy also covers any additional data collected by our tools and applications.

It includes personal data that is collected through our website, by telephone and through any related social media applications (LinkedIn).

5. The personal data we collect or process will be used for the following purposes:

Our cookie policy, which can be viewed from the home page of our web site, describes in detail how we use cookies.

In Section 9 below, we identify your rights in respect of the personal data that we collect or process and describe how you can exercise those rights.

For more detailed information please see the table below in Section 7.

6. Our legal basis for processing for the personal data:

A number of data elements are collected for multiple purposes. Some data may be shared with third parties.

When we process on the lawful basis of legitimate interest, we apply the following test to determine whether it is appropriate:

The purpose test: is there a legitimate interest behind the processing?

Necessity test: is the processing necessary for that purpose?

Balancing test: is the legitimate interest overridden, or not, by the individual’s interests, rights or freedoms?

For more detailed information please see the table below in Section 7.

7. Data Processing Table

Purposes of collection Data collected Purpose for collection Lawful basis Data shared with Retention period
Performance of Labor Agreement Name
Identification and contact details
Address
Account number
Fulfil labor agreement Contractual fulfilment Internally and professional advisers 8 years from the termination of the agreement
For accounting and taxation purposes Statutory obligation Internally (transmitted to the People's Republic of China) and professional advisers
Monitor the behavior of workers as necessary Legitimate Interest Internally and professional advisers
Performance of an External Contract for Suppliers (Master Contract) Name
Identification details
Address
All billing data given in the ‘Payment Instructions’
Fulfil Master Contract Contractual fulfilment Internally and professional advisers 8 years from the date of the performance of the contract
For accounting and taxation purposes Statutory obligation
Blind CV Copy of degree All data given in the ‘Freelancer Datasheet’ and in ‘Fields of Expertise’ To process Purchase Orders for services with Clients and for the correspondence of ISO certifications Contractual fulfilment Internally and any third party with whom we contract in order to fulfil a localization service agreement Maximum 6 years from the date of the performance of the contract.
Date of Birth To send greeting cards Legitimate Interest Internally Relevant statutes of limitation
Performance of a Service Level Agreement Name
Identification and Contact details
Address
Data in translated document
To process localization services Contractual fulfilment Internally 8 years from the date of the performance of the contract
For accounting and taxation purposes Statutory obligation Internally and professional advisers
Security Security information set out in cookie policy To protect our website and infrastructure and to report and deal with any illegal acts. Legitimate Interest Internally, forensic and other third parties with whom we contract for his purpose Relevant statutes of limitation.
Communication Name
Contact details,
  Legitimate Interest Internally and professional advisers Relevant statutes of limitation.

8. Data transfer to third countries

When GDPR is applicable and we need to transfer data to a non-EU country we ensure that it happens lawfully. A transfer or a set of transfers of personal data to a third country or an international organization shall take place only on one of the following conditions:

9. Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

In order to process your request, we will ask you to provide two valid forms of identification for verification purposes.

10. Complaints

In the event that you wish to make a complaint about how your personal data is being processed by EC Innovations (or third parties as described in 7 above), or how your complaint has been handled, you are entitled to escalate your complaint to a supervisory authority within the European Union. For Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), who is also our lead supervisory authority. Its contact information can be found at http://naih.hu/general-information.html.

Without prejudice to any available administrative or non-judicial remedy, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under GDPR have been infringed as a result of the processing of his or her personal data in non-compliance with GDPR.

Any person who has suffered material or non-material damage as a result of an infringement of GDPR shall have the right to receive compensation from the controller or processor for the damage suffered.

11. Privacy statement

Read more about how and why we use your data here.

12. Contact us

Any comments, questions or suggestions about this privacy policy or our handling of your personal data or would like to exercise your data subject rights, please email us at: privacy@ecinnovations.com

Alternatively, you can contact us at our EMEA REGIONAL HEADQUARTERS using the following postal address or telephone numbers:

EC Innovations, Europe (registered as ECI Localization Ltd) Budapest
Váci út 18.
1132
HUNGARY

Tel:+36 1 784 0414

EC Innovations is the owner of this document and is responsible for ensuring that this record is reviewed in line with the reviewed requirements of the GDPR.