Keelestuudio OÜ (hereinafter “Keelestuudio”) adheres to the requirements and principles set out in this Privacy Policy. Keelestuudio considers the privacy of individuals and personal data protection important. Therefore, we have developed this Privacy Policy that provides for the purposes, terms and conditions of personal data processing and rights relating to the personal data of data subjects.
- Terms and Definitions
1.1. Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
1.2. Processing of personal data means any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
1.3. Controller means the natural or legal person, public or local government authority being the original collector of personal data. The controller determines the purposes and means of the processing of personal data;
1.4. Processor means a natural or legal person, public or local government authority that processes personal data on behalf of and on instructions from the controller;
1.5. Third party means a natural or legal person, public or local government authority, agency or body;
1.6. Personal data breach means a breach leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
1.7. Data subject means a person whose personal data are processed.
- Principles
2.1. When processing personal data, Keelestuudio follows the following principles:
2.1.1. the principle of lawfulness, fairness and transparency – personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject;
2.1.2. the principle of purpose limitation – personal data shall be collected for specified, explicit and legitimate purposes and shall not be further processed in a manner that is incompatible with those purposes;
2.1.3. the principle of data minimisation – personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
2.1.4. the principle of accuracy – personal data shall be accurate and, where necessary, kept up to date. Keelestuudio takes reasonable measures to ensure that personal data that are inaccurate are erased or rectified without delay;
2.1.5. the principle of storage limitation – personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
2.1.6. the principle of integrity and confidentiality – personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. For that, Keelestuudio uses appropriate technical or organisational measures.
- Security of Processing Personal Data
3.1. Following the principle of reasonableness, Keelestuudio applies different organisational, physical and information technology security measures to protect personal data.
3.2. Keelestuudio may, in certain cases, use processors for the processing and provision of services. Keelestuudio ensures that processors process personal data on instructions from Keelestuudio and in accordance with applicable law as well as take relevant security measures.
3.3. Keelestuudio immediately notifies data subjects of any personal data breaches.
- Categories of Personal Data
4.1. Keelestuudio processes personal data obtained directly from data subjects and personal data obtained in the course of the provision of translation services and language courses. Keelestuudio does not collect, store, analyse or use personal data arising from the services such as translation services and language courses for purposes other than these services.
4.2. Keelestuudio processes the following personal data:
4.2.1. first name and last name;
4.2.2. e-mail address;
4.2.3. contact telephone;
4.2.4. address;
4.2.5. website user statistics;
4.2.6. data arising from translation services and language courses to a strictly limited extent.
4.3. Keelestuudio is a controller of personal data and adheres to the principles of ensuring the confidentiality of personal data.
4.4. Only persons authorised by Keelestuudio have access to personal data to alter and process the data.
- Purposes of Processing Personal Data
5.1. Keelestuudio processes personal data to perform an agreement and ensure the performance thereof.
5.2. The purpose of processing personal data specified in clause 4.2 of this Privacy Policy is to:
5.2.1. provide high-quality translation services and language courses;
5.2.2. enter into an agreement;
5.2.3. submit invoices for any translation services and language courses provided;
5.2.4. carry out project management;
5.2.5. improve the user-friendliness of the website.
- Third Parties, Authorised Persons and Cross-Border Transmission of Personal Data
6.1. Keelestuudio may transmit personal data to third parties and authorised persons to perform the translation services and language courses agreed.
6.2. Due to the nature of translation services, there may be situations requiring the cross-border transmission of personal data to partners.
6.3. Keelestuudio confirms that it applies appropriate security measures to cross-border transmission of personal data.
6.4. Keelestuudio confirms that it only transmits personal data to such third parties and processors that apply adequate security measures to ensure the security of protection of personal data.
- Rights of Data Subjects
7.1. Data subjects have the right to have their personal data erased.
7.2. Data subjects have the right to make inquiries concerning their personal data that they have submitted to Keelestuudio.
7.3. Data subjects have the right to restrict the processing of their personal data.
7.4. Data subjects have the right to lodge a complaint about the processing of personal data with the Data Protection Inspectorate.
- Storage of Personal Data
8.1. Keelestuudio keeps personal data in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed, unless Keelestuudio has to comply with a requirement arising from law providing for longer storing personal data.
8.2. Keelestuudio will destroy and/or erase securely any personal data with no purpose for storage after one year has passed from the provision of the service, unless otherwise agreed between the recipient of the service and Keelestuudio.
- Use of Cookies
9.1. The www.keelestuudio.ee website managed by Keelestuudio may use cookies to make the user experience more convenient and the use of the website smoother.
9.2. A cookie is a small text file automatically saved by the web browser in the device used by the person. We use cookies to collect anonymous and generalised statistics regarding the number of visitors of the website and information about the manner of using the website in order to make the website more user-friendly and convenient.
9.3. Cookies saved in the device can be blocked by not agreeing to the use of cookies. To this end, the respective settings of the web browser must be changed. Web pages might not work properly and some of the services might be unavailable if cookies are not allowed.
- Personal Data Breaches and Amendments to Privacy Policy
10.1. In case of a personal data breach, Keelestuudio will take all necessary measures to mitigate the consequences and to mitigate similar risks in the future. This includes registering all incidents and notifying the Data Protection Inspectorate and data subjects as required and in accordance with the procedures.
10.2. Keelestuudio considers the privacy of individuals important and, therefore, we update this Privacy Policy on a regular basis. The latest version of the Privacy Policy is always available on the website.
- Contact Details
11.1. If you have any questions or proposals concerning the processing of personal data, you can contact the controller, using the following contacts details: Keelestuudio OÜ, Lõõtsa 6, Tallinn, 11415; info@keelestuudio.ee