BLUEORANGE TRANSLATIONS PRIVACY POLICY

1. Introduction

This is a description of how your personal data is collected, used and deleted while you visit our website https://blueorange-translations.com/, engage our translation services and register your account on our website.

The controller of your personal data is legal entity BlueOrange Translations OÜ, Reg. No. 16470713, Masina tn 22, 10113 Tallinn, Estonia (“we”, “us”).

The website allows you to contact us for price quotes, order translations, upload the documents you would like to have translated, contact us via web-form, e-mail or chat and also to apply to the open positions in our team. Some of the communication and functionalities are built by using third-party service providers (e.g. chat, web-quiz, payments) which means that their privacy policies are also relevant regarding your data processing. Please read those separately where referred to on our website.

2. How do we collect personal information?

The personal information we process is provided to us directly by you to register your account, order our services or communicate to us. The data you insert during the account registration and/or for a price quote is required to provide the service.

In addition, we may also collect your personal data indirectly. When you visit our website, we and our service providers may collect certain data using tracking technologies like cookies, web beacons and similar technologies. The use of web cookies is described on our website cookie banner.

Indirectly collected data may fall under the terms of third-party privacy policies while they act as independent data controllers. Please read those separately.

3. What kind of personal data is processed and why?

Processing activity	Data categories	Purpose	Legal basis
Account registration	E-mail, First name, Last name, Company name, Phone number, Country	Account registration	Contract
Account management	Orders, Payments, Account registration data	Providing the service	Contract
Providing price quote	Name, E-mail, Phone number, Type of entity (Person or Company), Source and target language, Attached file(s), Your comment	Providing the service fee quote	Contract
Providing service demo	Name, E-mail	Providing the service	Contract
Communication	Chat box data (communication requested in chat)	Providing the service and support	Contract
Applying for job	Name, E-mail, Phone number, Attached CV/Portfolio, Free text box	Gathering and managing applications	Legitimate interest
Accounting	Data required by accounting law	Accounting law obligations	Legal obligation
Website and related product maintenance and quality (essential cookies)	IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only)	Providing the website and its functionalities	Contract
Managing your preferences on website and performing website analytics and marketing	As described in cookie banner	Cookies for preferences, analytics and marketing	Consent

4. Sharing your personal data

Any data you provide will not be publicly displayed or shared to others. Our employees and business partners have access to personal data to the extent necessary for the performance of their work duties.

We use third party processors to help provide our service.

Why and with whom do we share your personal data?

Categories of recipients	Reason for sharing
Service providers	We work with service providers that work on our behalf which may need access to certain personal data to provide their services to us. These companies include those we have hired to operate the technical infrastructure that we need to provide service and assist in protecting and securing our systems and services. Portal and CAT tool service provider — SmartCAT Cloud service provider — Microsoft Cloud (OneDrive) TMS (translation management system) service provider — Alisa TMS Team collaboration platform service provider — Microsoft Teams Server provider — Ionos Communication channels — WhatsApp, Tidio
Payment providers	For payments you interact directly to the payment service provider. These service providers process your data as data controllers and thus their privacy policies apply. Payment service provider — Braintree, Revolut
Advertising partners	We work with advertising partners to enable us to customize the advertising content you may receive. These partners help us deliver more relevant ads and promotional messages to you, which may include interest-based advertising, contextual advertising, and generic advertising (Facebook Ads, Google Ads). We and our advertising partners process certain personal data to help us understand your interests or preferences so that we can deliver advertisements that are more relevant to you.

International transfers

We use service providers that keep your data in the European Union but if we choose to change that and use service providers that also process the data outside the EU, we will ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that appropriate contractual, technical, and organisational measures are in place.

5. Ensuring the security of personal data

We have taken necessary technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against the unauthorised disclosure, abuse or other processing in violation of applicable law.

6. Retention and deletion of personal data

The storage period of personal data depends on whether we have legal obligations to store data (i.e. accounting regulations), contractual obligations, legitimate interest to provide best services or your explicit consent.

Data Type	Purpose	Retention Time
E-mail, First name, Last name, Company name, Phone number, Country, Orders, Payments, Account registration data	Account registration and management	Until account deletion
Name, E-mail, Phone number, Attached CV/Portfolio, Free text box	Job application management	1 year after sending the application
Orders and payments	Accounting law obligations	7 years + current fiscal year
Chat box data (communication requested in chat)	Communication	Until account deletion or request for data removal
Name, Phone number, Email address	Marketing	Until withdrawal of consent
IP address of the device, Device screen size, Device type (unique device identifiers), Browser information, Geographic location (country only)	Providing the website and functionalities	Session cookies during website visit Other cookies according to cookie settings
Online identifiers (including cookie identifiers and IP addresses)	Website visitor statistics, analytics and marketing	Until withdrawal of consent

7. Your rights and preferences

Under data protection law, you have rights including:

Right to be informed and to access. You may get information regarding your personal data processed by us.
Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party.
Right to erasure. You have the right to have personal data we process about you erased from our systems if the personal data are no longer necessary for the related purposes.
Right to object and restrict. You have the right to object to the processing of your personal data and restrict it in certain cases.
Right to rectification. You have the right to make corrections to your personal data.
Right to withdraw consent. When you have given us consent to process your personal data, you may withdraw said consent at any time.

To exercise any of the above-mentioned rights, please contact hello@blueorange-translations.com. We will respond to your requests within 30 days.

8. Other important information

Newsletter and direct marketing

With your explicit consent, we may send you our newsletters and marketing offers. You may opt out of these messages. Please note that email marketing messages, if used, include an opt-out mechanism within the message itself (e.g. an unsubscribe link in the emails we send to you). Clicking on the link in an email will opt you out of further messages. You may also opt out on your account settings in case this option is available. We may also use social media tools to market our products and services. As social media and web analytics providers act as separate data controllers, there might be consent or opt-out requirements also on their side.

Contacts

If you have questions or concerns about our use of your personal information, please feel free to contact us at hello@blueorange-translations.com. You may also lodge a complaint to the supervisory authority, the Estonian Data Protection Inspectorate, info@aki.ee.

This Privacy Policy was updated September 2022.