This privacy notice explains how Kielikoulu Nuevo Mundo Oy processes the personal data of customers, contact persons at client companies, users of our services, and other data subjects.

Personal data is processed for purposes related to providing our services, managing customer relationships, communicating with customers, invoicing, developing our services, and complying with statutory obligations.

This page replaces our previous register and privacy statements with a clearer and more up-to-date structure. We process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation.

1. Data controller

Kielikoulu Nuevo Mundo Oy
Arabiankatu 12
00560 Helsinki
Finland
Email: info@knm.fi
Telephone: +358 40 506 2398

2. Contact person for data protection matters

For questions concerning the processing of personal data, please contact Kielikoulu Nuevo Mundo Oy.

Contact person: Alejandro Jover
Email: alejandro.jover@knm.fi
Telephone: +358 40 506 2398

3. Name of the register

Kielikoulu Nuevo Mundo Oy customer register.

4. Purposes of processing personal data

We process personal data only for specified, explicit, and legitimate purposes. Personal data may be processed for purposes including:

  • managing and maintaining customer relationships;
  • providing language training, translation, and interpreting services;
  • responding to requests for quotations, enquiries, and orders;
  • planning, providing, monitoring, and developing our services;
  • invoicing, payment monitoring, and accounting;
  • customer communication and providing information about our services;
  • sales and marketing in accordance with applicable legislation;
  • complying with statutory obligations.

5. Legal bases for processing personal data

Depending on the circumstances, the processing of personal data may be based on the performance of a contract, the legitimate interests of the data controller, compliance with a legal obligation, or the consent of the data subject.

Our legitimate interests may include managing customer relationships, developing our services, communicating with customers, and ensuring the proper administration of our business operations.

6. What personal data do we process?

The personal data we process depends on the service used and the role in which the person interacts with us. The customer register may contain information such as:

  • name and contact information, including address, telephone number, and email address;
  • customer number or another identifier associated with the customer relationship;
  • information concerning the customer, contact person, or client company;
  • employer, job title, and business location within the client organisation;
  • service-related information, such as the language, language pair, course, or assignment;
  • information relating to language proficiency, objectives, or training needs;
  • orders, agreements, quotations, and customer relationship history;
  • billing information and other information necessary for processing payments;
  • information relating to customer communications and enquiries.

In connection with interpreting and translation assignments, we may also process information necessary to carry out the assignment, such as the language pair, date and time, subject, delivery method, interpreting location, or materials needed for preparation.

7. Sources of personal data

We primarily obtain personal data from the customer, the person placing the order, a contact person at the client company, or the individual who contacts us.

Information may be collected through requests for quotations, registrations, emails, telephone calls, online forms, agreements, or during the provision of our services.

In certain situations, information may also be provided by a client organisation, public authority, or another party relevant to the assignment.

8. Disclosure and transfer of personal data

Personal data may be disclosed only to the extent necessary to provide the service, fulfil a contract, comply with a statutory obligation, or on another lawful basis.

In interpreting assignments, information necessary for carrying out the assignment may be provided to the interpreter. Such information may include the subject of the interpreting situation, date and time, language pair, contact details, and any information required for preparation.

Personal data may also be processed by technical service providers, system suppliers, and other processors acting on our behalf. In such cases, we ensure that the data is processed in accordance with applicable data protection legislation and agreed information security practices.

9. Transfers outside the EU or EEA

As a general rule, personal data is processed within the European Union or the European Economic Area.

If personal data is transferred outside the EU or EEA, the transfer will be carried out only on a lawful basis permitted under applicable data protection legislation and using appropriate safeguards.

10. Protection of personal data

Personal data is processed carefully and confidentially. We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, destruction, loss, or disclosure.

Access to personal data is restricted to persons who are authorised to process it as part of their duties. Access rights are managed, and personal data is processed only to the extent required for providing the service or for another legitimate processing purpose.

11. Retention period

We retain personal data only for as long as necessary for the purposes for which it was collected, the customer relationship, contractual obligations, invoicing, accounting, legal claims, or compliance with statutory obligations.

We regularly assess whether retaining personal data remains necessary. When the information is no longer required, it is deleted or appropriately anonymised.

12. Rights of the data subject

In accordance with applicable data protection legislation, data subjects have the right to receive information about the processing of their personal data and to exercise their data protection rights. These rights may include:

  • the right to access their personal data;
  • the right to request the correction of inaccurate personal data;
  • the right to request the deletion of personal data in certain circumstances;
  • the right to request restriction of processing;
  • the right to object to processing in certain circumstances;
  • the right to data portability when the relevant legal requirements are met;
  • the right to withdraw consent when processing is based on consent.

Data subjects also have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.

13. Exercising your rights

You can exercise your data protection rights by contacting the person responsible for data protection matters.

Your request should specify which right you wish to exercise and which personal data the request concerns.

When necessary, we may request additional information to verify your identity and process the request. We respond to requests within the time limits required by applicable data protection legislation.

14. Right to lodge a complaint with a supervisory authority

If a data subject considers that their personal data has been processed in violation of data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

15. Information security and confidentiality

Information security and confidentiality are essential parts of our operations. Our services may involve confidential information, including customer, training, interpreting, translation, and billing information.

Information processed in connection with interpreting and translation assignments may be particularly sensitive. For this reason, persons involved in providing these services process information confidentially and only to the extent necessary to complete the assignment.

Our interpreters and other persons involved in providing our services are subject to professional secrecy and confidentiality obligations. When necessary, we use confidentiality agreements and other organisational measures to protect personal data.

16. Changes to this privacy notice

We may update this privacy notice if our services, personal data processing practices, or applicable legislation change. The current version will be published on our website.

The updated version replaces all previous versions of our register and privacy statements.