Privacy Notice for Bright Light Translation Ltd
Privacy Notice
Your personal data
Bright Light Translation Ltd acts as a data controller and as such has contractual reasons for obtaining, processing and storing personal data you provide to us as a private individual or a representative of your company.
Collection of your data
Bright Light Translation Ltd only collects your data directly from you. It does not use third parties to obtain your personal data.
Categories of data subjects
Bright Light Translation Ltd holds data on clients, suppliers, data processors and potential clients for legitimate interests.
Categories of personal data
Personal data collected may include your name, postal address, email address, telephone number, company number, VAT number, payment and delivery conditions, financial and bank account details.
Principles of processing
Article 5 of the GDPR requires that personal data is:
Lawful basis for processing your data
Bright Light Translation Ltd collects your personal data in order to perform the services you request or to take steps prior to fulfilling that request, only to the extent that is necessary.
This provides a legitimate and lawful basis, pursuant to Article 6(1)(b) of the Regulation (EU) 2016/679 – commonly known as the General Data Protection Regulation (GDPR) – for the processing of your personal data.
Personal data contained within documents for translation
Due to the nature of its work, Bright Light Translation Ltd also holds personal data which may be present in the documents you provide in order to perform the services you request.
As the primary data controller, it is your obligation to ensure that you have consent from the data subject whose personal data is contained in any communications or documents that you send.
Bright Light Translation Ltd does not extract personal data in such communications or documents for processing outside the context of the services you request.
Use of your data
All the personal data contained in any communications or documents that you send in order to perform the services you request is processed by Bright Light Translation Ltd itself or by an authorised subcontractor who has signed a data protection agreement.
Retention of personal data
Bright Light Translation Ltd will retain your personal data until it ceases trading or you exercise your right to erasure as mentioned below.
Your rights
Bright Light Translation Ltd takes precautionary steps to guarantee the security, integrity and confidentiality of your personal data in compliance with the GDPR, in relation to the processing of personal data.
The GDPR grants you several rights with regard to your personal data that is processed by Bright Light Translation Ltd under the lawful basis mentioned above:
If you wish to raise a complaint on how Bright Light Translation Ltd has handled your personal data, please email dataprotection@brightlighttranslation.com. Bright Light Translation Ltd will respond to you in writing within one month.
If you are not satisfied with the response or believe your personal data is not being processed in accordance with the law, you can raise a complaint to the Information Commissioner’s Office https://ico.org.uk/
This Privacy Notice enters into force on 25 May 2018 and will be reviewed as and when necessary.
Your personal data
Bright Light Translation Ltd acts as a data controller and as such has contractual reasons for obtaining, processing and storing personal data you provide to us as a private individual or a representative of your company.
Collection of your data
Bright Light Translation Ltd only collects your data directly from you. It does not use third parties to obtain your personal data.
Categories of data subjects
Bright Light Translation Ltd holds data on clients, suppliers, data processors and potential clients for legitimate interests.
Categories of personal data
Personal data collected may include your name, postal address, email address, telephone number, company number, VAT number, payment and delivery conditions, financial and bank account details.
Principles of processing
Article 5 of the GDPR requires that personal data is:
- processed lawfully, fairly and in a transparent manner in relation to individuals;
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- accurate and, where necessary, kept up to date;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; and
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Lawful basis for processing your data
Bright Light Translation Ltd collects your personal data in order to perform the services you request or to take steps prior to fulfilling that request, only to the extent that is necessary.
This provides a legitimate and lawful basis, pursuant to Article 6(1)(b) of the Regulation (EU) 2016/679 – commonly known as the General Data Protection Regulation (GDPR) – for the processing of your personal data.
Personal data contained within documents for translation
Due to the nature of its work, Bright Light Translation Ltd also holds personal data which may be present in the documents you provide in order to perform the services you request.
As the primary data controller, it is your obligation to ensure that you have consent from the data subject whose personal data is contained in any communications or documents that you send.
Bright Light Translation Ltd does not extract personal data in such communications or documents for processing outside the context of the services you request.
Use of your data
All the personal data contained in any communications or documents that you send in order to perform the services you request is processed by Bright Light Translation Ltd itself or by an authorised subcontractor who has signed a data protection agreement.
Retention of personal data
Bright Light Translation Ltd will retain your personal data until it ceases trading or you exercise your right to erasure as mentioned below.
Your rights
Bright Light Translation Ltd takes precautionary steps to guarantee the security, integrity and confidentiality of your personal data in compliance with the GDPR, in relation to the processing of personal data.
The GDPR grants you several rights with regard to your personal data that is processed by Bright Light Translation Ltd under the lawful basis mentioned above:
- Right to be informed: you may ask Bright Light Translation Ltd for the purpose of processing their personal data, the retention period and who it will be shared with;
- Right of access: you may ask which personal data Bright Light Translation Ltd processes about you;
- Right to rectification: you may ask Bright Light Translation Ltd to have inaccurate personal data about you rectified or completed;
- Right to erasure (right to be forgotten): you may ask Bright Light Translation Ltd to erase all personal data that it holds about you (lawful restrictions apply);
- Right to restrict processing: you may ask Bright Light Translation Ltd to limit the way in which it processes your personal data, such as if you contest the accuracy of the data or lawfulness of the processing;
- Right to data portability: you may ask Bright Light Translation Ltd to transmit your personal data to another data controller
If you wish to raise a complaint on how Bright Light Translation Ltd has handled your personal data, please email dataprotection@brightlighttranslation.com. Bright Light Translation Ltd will respond to you in writing within one month.
If you are not satisfied with the response or believe your personal data is not being processed in accordance with the law, you can raise a complaint to the Information Commissioner’s Office https://ico.org.uk/
This Privacy Notice enters into force on 25 May 2018 and will be reviewed as and when necessary.