Privacy notices

Privacy notice for Sananautti Translations’ customer register

General information

According to the General Data Protection Regulation (EU) 2016/679, companies are required to provide a privacy notice.

The privacy notice explains what personal data a company collects in its personal data register and for what purpose it processes that data.

This privacy notice concerns Sananautti Translations’ customer register, the personal data collected in it, and the purposes for which Sananautti Translations processes said data.

1. Data controller

Sananautti Translations
Kutomotie 16
00380 Helsinki
Finnish business ID: 3410184-6
tietosuoja@sananautti.fi
www.sananautti.fi/en

2. Contact person for matters relating to the register

Jenni Perälä
Sananautti Translations
Kutomotie 16
00380 Helsinki
tietosuoja@sananautti.fi

3. Name of the register

Sananautti Translations’ customer register

4. Data content

Sananautti Translations may collect the following kinds of personal data from clients and potential clients and store them in its customer register.

If the (potential) customer is a company or an organisation:

• name
• contact details
• Finnish business ID
• invoicing address
• other information for invoicing purposes
• the name, position and contact information of the person representing the company/organisation

If the (potential) customer is a private individual:

• first name and family name
• personal identity code*
• contact information (address, telephone number, email)

Data collected on all customers or potential customers:

• the usernames and passwords of any online services the customer may have made available to Sananautti Translations
• data related to the maintenance of the customer relationship, such as communications (for example, copies of emails and feedback)
• the customer’s consent to, or refusal of, direct marketing

*) Sananautti Translations asks all private individuals for their personal identity code when placing an order because Sananautti Translation invoices for its services afterwards. Companies have the right to process the customer’s personal identity code for collecting the receivable.

5. The purposes of the processing of personal data

The personal data stored in Sananautti Translations’ customer register are processed for the following purposes:

• maintaining and developing customer relationships, including communication and marketing directed at customers and potential customers
• providing and delivering services to customers
• invoicing
• handling possible complaints and other claims, as well as debt collection

Sananautti Translations processes personal data, for example, when receiving a request for a quote via email, on the phone, or through its website and responding to it.

Sananautti Translations also processes personal data when producing and delivering services. For instance, Sananautti Translations and the customer may agree, either verbally or in writing, about the services to be provided. Sananautti Translations may, for example, receive and process the customer’s materials, deliver the finished translation or other service to the customer, and request, receive, and process feedback.

In addition, Sananautti Translations processes personal data for invoicing customers, handling possible complaints, and collecting any outstanding debts.

6. Legal bases for the processing of personal data

Sananautti Translations processes personal data on the following legal bases set out in the General Data Protection Regulation:

• The data subject has given consent to the processing of their personal data for one or more specific purposes (Article 6(1)(a)).
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b)).
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Article 6(1)(f)).

In this context, the expression ‘data subject’ refers to a customer or potential customer whose personal data have been stored in Sananautti Translations’ customer register.

7. Regular sources of data

Sananautti Translations stores in its customer register only data provided directly by the data subjects themselves and data publicly available online or from other public sources.

8. The recipients (or categories of recipients) of the personal data and regular disclosures

Sananautti Translations does not disclose data to external parties unless it has made a separate agreement on it with the data subject.

9. Transfer of data outside the EU or EEA

Sananautti Translations does not transfer data stored in its customer register outside the EU or EEA.

10. Register security measures

Sananautti Translations stores and processes the data stored in the customer register confidentially. The controller is the only person with access to the customer register.

Sananautti Translations keeps its customer register on a computer and backs it up on an external hard drive. The computer has an up-to-date firewall and antivirus software. Both the computer and hard drive are located in locked premises.

11. Rights of the data subject

Under the General Data Protection Regulation, the data subject has the following rights, among others:

• to obtain confirmation as to whether or not their personal data are being processed
• to receive a copy of their personal data stored in the customer register
• to request rectification of inaccurate or incomplete data
• to request erasure of data (“right to be forgotten”)
• to request restriction of the processing of their personal data
• to request transfer of their data to another system (“data portability”)
• to object to the processing of personal data and to automated individual decision-making
• to withdraw consent to the processing of personal data
• to lodge a complaint with a supervisory authority regarding personal data processing

These rights can be exercised fully unless otherwise restricted by applicable legislation. For example, the Finnish Accounting Act (1336/1997) lays down provisions on the retention period of accounting materials. This limits the data subject’s right to be forgotten.

All requests concerning the rights of the data subject must be submitted in writing to the contact person listed in Section 2.

12. Data storage period

Sananautti Translations stores data in its customer register for as long as it is necessary for the purposes of processing. For example, customer data is retained as long as the customer relationship continues.

Sananautti Translations deletes customer data five years after the customer relationship and any related obligations have ended. Upon explicit request, Sananautti Translations will delete customer data immediately after the customer relationship ends, except for data that are required by law to be retained. Sananautti Translations must comply with statutory retention periods for accounting materials, for example. This restricts the data subject’s right to be forgotten.

13. Changes to this privacy notice

Any changes to this privacy notice will be immediately updated on this webpage.

This privacy notice was last updated on 25 June 2025.

Privacy notice for Sananautti Translations’ website

1. Data controller

Sananautti Translations
Kutomotie 16
00380 Helsinki
Finnish business ID: 3410184-6
tietosuoja@sananautti.fi
www.sananautti.fi/en

2. Contact person for matters relating to the register and website administrator

Jenni Perälä
Sananautti Translations
Kutomotie 16
00380 Helsinki
tietosuoja@sananautti.fi

3. Name of the register

Sananautti Translations’ website visitor register

4. Register data

4.1 Visitor statistics

Sananautti Translations’ website at www.sananautti.fi (hereinafter referred to as ‘the website’) automatically collects the following data on its visitors:

• IP address
• country
• operating system
• web browser

By visiting the website, the visitor consents to the collection of the data mentioned above.

4.2 Blog comments

Visitors may comment on Sananautti Translations’ blog which exists in the Finnish version of the website. The website collects the following data from commenters:

• name or nickname (mandatory)
• email address (mandatory)
• website (optional)

The name appears alongside the comment on the blog. If a website address is provided, the name acts as a hyperlink to that website.

The commenter’s email address is not visible on the website but can be accessed by the website administrator via the website’s control panel.

Commenters can save their name, email, and website address in their web browser to avoid having to re-enter the same information later. If the commenter decides to do this, the website will store a cookie on the user’s device.

Comments are not published automatically. They are subject to approval by the website administrator. Approved comments appear below the related blog post.

By posting a comment, the visitor consents to their data being stored and published on the website as described above.

Commenters can request the removal of their comment by email at tietosuoja@sananautti.fi.

4.3 Contact form

The website includes a contact form through which visitors can contact Sananautti Translations. The form collects the following data:

• name
• email address
• message
• confirmation that the submitter is not a bot (a Google reCAPTCHA field, with its own privacy notice and terms, links to which are also available in the bottom right corner of the field itself)

Data entered in the contact form is automatically sent to Sananautti Translations’ email address. The data are not stored anywhere else or published on the website. The data are only stored as as an email message in Sananautti Translations’ inbox.

By using the contact form, visitors consent to their data being stored as described above.

5. The purposes of the processing of personal data

Sananautti Translations processes data stored in the register for the following purposes:

• website analytics
• website development
• prevention of email spam and comment spam

6. Legal bases for the processing of personal data

Sananautti Translations processes personal data on the following legal bases set out in the General Data Protection Regulation:

• The data subject has given consent to the processing of their personal data for one or more specific purposes (Article 6(1)(a)).
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Article 6(1)(f)).

In this context, the expression ‘data subject’ refers to a customer or potential customer whose personal data have been stored in Sananautti Translations’ website visitor register.

7. Regular sources of data

Sananautti Translations collects data about website visitors when they visit the website, post blog comments, or use the contact form.

8. The recipients (or categories of recipients) of the personal data and regular disclosures

Sananautti Translations does not disclose data to external parties.

9. Transfer of data outside the EU or EEA

Sananautti Translations does not transfer data outside the EU or EEA.

10. Register security measures

Sananautti Translations stores and processes data confidentially. The controller is the only person with access to the register.

Sananautti Translations stores visitor statistics, blog comments, and emails on the server of its domain and hosting provider. The server is located in Finland. Sananautti Translations may make local copies of this data, which are stored on a computer and backed up on an external hard drive. The computer has an up-to-date firewall and antivirus software. Both the computer and hard drive are located in locked premises.

11. Rights of the data subject

Under the General Data Protection Regulation, the data subject has the following rights, among others:

• to obtain confirmation as to whether or not their personal data are being processed
• to receive a copy of their personal data stored in the customer register
• to request rectification of inaccurate or incomplete data
• to request erasure of data (“right to be forgotten”)
• to request restriction of the processing of their personal data
• to request transfer of their data to another system (“data portability”)
• to object to the processing of personal data and to automated individual decision-making
• to withdraw consent to the processing of personal data
• to lodge a complaint with a supervisory authority regarding personal data processing

All requests concerning the rights of the data subject must be submitted in writing to the contact person listed in Section 2.

12. Data storage period

Sananautti Translations stores data in its customer register for as long as it is necessary for the purposes of processing. For example, visitor statistics and blog comments will be kept for as long as the website exists.

13. Changes to this privacy notice

Any changes to this privacy notice will be immediately updated on this webpage.

This privacy notice was last updated on 25 June 2025.