Privacy Policy

1. Purpose

   This policy defines and communicates the information security criteria, means, methods, and measures to protect MarsHub’s information assets and those of our clients from the breach of confidentiality, integrity, and availability with respect to MarsHub’s information security management system (hereinafter referred to as ISMS) as required by ISO/IEC 27001:2017 International Standard (hereinafter referred to as ISO 27001).

   As a forward-thinking organization, MarsHub recognizes the need to ensure the confidentiality, integrity, and availability of its information assets, which ensure that the organization’s operations remain uninterrupted for the benefit of its customers as well as suppliers.

   To provide the expected level of continuous operations, MarsHub has decided to maintain a certification to ISO 27001, so that independent third parties—authorized certification bodies—can always validate the effective adoption of information security best practices.

2. What personal data do we collect about you?

   We collect the following personal data in connection with your relationship with us: your name and surname, job title, name of your organization, user name, email address, phone number, billing address, VAT number, information from your LinkedIn profile, information about your participation in conferences, information about our historic interaction with you or your organization, the IP address of the device and type of Internet browser you use to access MarsHub, information about the use of MarsHub products/services by you or your organization, and information about opportunities for further sale of our products to you or your organization. This personal data falls under the following: China’s Personal Information Protection Law (PIPL), with the Cybersecurity Law and the Data Security Law, the PIPL is designed to provide a comprehensive approach to cybersecurity and data privacy.

3. How do we obtain your personal data?

   Your personal data can be:

   1. Obtained directly from you, such as your name, surname, and contact details.
   2. Created in the course of our relationship with you or your organization, such as information about our interaction with you.
   3. Collected from public sources such as your LinkedIn profile.

4. How do we use your personal data?

   Your personal data will be processed for the following purposes:

   1. To enable you or your organization to use MarsHub products/services for translation.
   2. To maintain our business relationship with you or your organization.
   3. Our internal reporting.
   4. To ensure network and information security.
   5. To analyze and understand how MarsHub products/services are being used.
   6. To provide you or your organization with business proposals.
   7. For future marketing, including sending you marketing materials about us and our services and products by email (unless you have indicated that you do not want to receive these marketing materials).

5. On what legal basis do we use your personal data?

   We use your personal data on the following basis:

   1. Processing your personal data is necessary so that we can perform the services set out in the contract we have established with you or your organization.
   2. Processing of your personal data to comply with our legal obligations, e.g., obligation to archive accounting documents.
   3. Processing of your personal data for other purposes listed in Section “How do we use your personal data?” is based on our legitimate interest as processing of personal data for these purposes: (i) to help us to maintain a productive business relationship with you or your organization; (ii) to improve our ability to understand your business needs; (iii) to improve and enhance our services; and (iv) to ensure network and information security.

6. How long will we keep your personal data?

   If you are a user, i.e. an employee, contractor, or other person acting on behalf of your organization having a user account. We will keep your personal data for as long as you use our services. We will also keep your personal data where required by law or where we need to do so in connection with potential or actual legal action, or an investigation involving MarsHub.

   We will also delete your user data within 3 months from the moment your user account no longer contains any jobs, projects, translation memories, term bases, or other content.

   If you are acting on behalf of your organization, but you do not have a user account, your personal data will be held until you opt-out or until two years have passed since your last active communication with us.

7. With whom do we share your personal data?

   Your personal data will be accessible to our employees, as well as to authorized employees of our suppliers, which provide us with a variety of essential services. Below you can find some of our most important suppliers:

8. Transfers of your personal data outside of your home country

   Your personal data may be transferred to countries outside China’s Economic Area. The countries to which we transfer personal data may not have data protection laws that provide an adequate level of protection to your personal data.

   We therefore take steps (which may include entering into data transfer agreements based on the model clauses approved by the European Commission) to ensure that the persons to whom we transfer data in those countries commit to ensure an adequate level of protection for your personal data. You can find more information about data transfer agreements here.

9. Protecting your personal data

   We may share your personal data with our suppliers under a written agreement, which commits the suppliers to appropriate safeguards in relation to the handling of your personal data (including in relation to maintaining confidentiality of your personal data and implementing appropriate technical and organizational security measures).

   We will take appropriate legal, organizational, and technical measures to protect your personal data consistent with applicable privacy and data security laws.

   We do not sell your personal data.

10. Your Rights

    You are entitled to:

    1. Opt out of your personal data being processed for direct marketing purposes

       If you have given your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. The data subject shall have the right to withdraw his or her consent at any time.

    2. Request access to processing information

       You have the legal right to request information at any time about whether we are processing your personal data. If this is the case, you have the right to be informed about the extent to which your personal data is being processed as well as to be provided with a copy of your personal data.

    3. Request the correction and/or deletion of your personal data

       You have the right to obtain the rectification of inaccurate personal data concerning you and/or to have incomplete personal data completed. In certain circumstances, you have the right to erasure of the personal data concerning you without undue delay. The right to erasure does not apply if processing is necessary to comply with legal obligations.

    4. Object to the processing of your personal data

       You have the right to object at any time to the processing of your personal data for any advertising purposes.

    5. Request the restriction of the processing of your personal data

       You have the right to request the restriction of the processing of your personal data where you have contested its accuracy or if the processing is deemed unlawful.

    6. Request receipt or transmission to another organization, in a machine-readable form, of the personal data that you have provided to us

       You have the right to transmit your personal data to another company in a safe and secure way without hindrance to usability.

    7. Complain to your local data protection authority or to a court of law, if your data protection rights are violated. You may be entitled to claim compensation for damages or distress incurred or suffered in consequence of unlawful processing of your personal data.

       You are not required by law to provide your personal data to us; however, if you don’t, then we may not be able to provide you or your organization with our service. If you object to the processing of your personal data, we will respect that choice in accordance with our legal obligations. Depending on the scope of your request, this could mean that we will not be able to provide you or your organization with our service.

       If you have any questions about this policy or our data protection practices, please email us at contact@marshub.com.