Data protection notice
1. Controller
Bellcrest Translations Ltd
Tekniikantie 12
FI-02150 Espoo, Finland
Business ID: 0721652-5
info@bellcrest.fi
www.bellcrest.fi
2. Contact person in register matters
Erik Miller, Managing Director
Tekniikantie 12
FI-02150 Espoo, Finland
Tel. +358 40 0766 991
erik@bellcrest.fi
3. Name of the personal data file
Bellcrest Translations Ltd’s client and marketing register.
4. Purpose of processing personal data
- Managing, maintaining and developing client relationships and other contacts, communications and marketing, including direct marketing, opinion surveys and market research.
- Improving the website by analysing the traffic on the site.
- The processing of stakeholder data is agreed separately by contract.
5. Data content of the register
The following data are entered in the register:
- Company name and contact details (business and invoicing address, telephone number and website address) and invoicing information
- Name, contact details (address, telephone number and e-mail address) and title or position in the organisation of the contact person
- Visitor information and behaviour on our website: pages visited, how and from where the visitor came to the site, and the visitor’s device data: browser and settings, language settings, IP address and geographical location.
6. Regular data sources
Data is obtained from companies or contacts on the register, websites and other public data sources, and by collecting data from visitors to our website.
7. Regular disclosures of data
As a rule, data will not be disclosed to third parties unless specifically agreed with the client.
The data in the register is stored and processed in Microsoft’s cloud service, the servers of which located in the EU.
8. Transfer of data outside the EU or the EEA
In providing its services, Bellcrest may, to the extent permitted by applicable law, disclose information to its partners who are required by law to process the information. If necessary, Bellcrest may disclose the contact details of a client’s contact person to a processor other than registered processor, if this is necessary for the provision of the services.
The data in the register will not be transferred outside the EU or the EEA unless specifically agreed with the client.
9. Principles of register security
Bellcrest keeps the personal data contained in the register confidential. Only employees whose job entitles them to process client and personal data are entitled to use the system containing the data. Each data processor has their own user ID and password. Data is collected in databases protected by firewalls, passwords and other technical methods. The databases and their backups are located in locked rooms and only pre-designated persons have access to the data.
10. Right of inspection and right to demand correction of data
Data subjects have the right to inspect the data in the register relating to them and
to request the rectification and erasure of the data. Requests should be made in person or in writing to the contact person mentioned in item 2.
11. Storage period of personal data
The data is kept for as long as necessary for the purpose for which it is processed.
Data related to a client relationship will be stored for as long as the customer relationship continues. The data will be deleted after five years following the end of the client relationship or immediately at the client’s request.
12. Other rights related to the processing of personal data
Under Section 30 of the Finnish Personal Data Act, data subjects have the right to prohibit the controller from processing data relating to them for the purposes of direct marketing, distance selling and other direct marketing, market research and opinion polling. Such a prohibition may be issued at any time to the contact person of the controller mentioned in item 2.
Under the EU General Data Protection Regulation (GDPR), data subjects have the right to erasure of their data (‘the right to be forgotten’).Likewise under the GDPR, data subjects have the right to object to or request restriction of the processing of their data and to lodge a complaint about the processing of personal data with a supervisory authority.