https___anuairseobeidhmeagvotail.eu_ga_privacy-policy_1.xml
1.1 2.1 2.2 3.1 3.2 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 22.1 23.1 23.2 24.1 25.1 26.1 26.2 26.3 26.4 26.5 26.6 27.1 27.2 28.1 29.1 29.2 30.1 30.2 31.1 31.2 32.1 32.2 33.1 33.2 34.1 35.1 35.2 35.3 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 48.2 49.1 50.1 50.2 51.1 51.2 51.3 52.1 52.2 53.1 54.1 54.2 55.1 55.2 55.3 56.1 57.1 57.2 58.1 59.1 59.2 59.3 59.4 60.1 61.1 62.1 63.1 64.1 65.1 65.2 66.1 66.2 67.1 68.1 68.2 69.1 69.2 70.1 71.1 71.2 72.1 72.2 73.1 74.1 74.2 74.3 74.4 74.5 75.1 76.1 76.2 76.3 77.1 78.1 79.1 80.1 80.2 81.1 82.1 83.1 83.2 84.1 85.1 86.1 87.1 88.1 89.1 90.1 90.2 90.3 91.1 92.1 92.2 93.1 94.1 95.1 95.2 96.1 97.1 97.2 98.1 99.1 100.1 100.2 100.3 100.4 101.1 102.1 102.2 103.1 104.1 105.1 105.2 105.3 106.1 107.1 108.1 108.2 108.3 109.1 109.2 110.1 110.2 111.1 112.1 112.2 112.3 113.1 114.1 114.2 115.1 116.1 116.2 117.1 118.1 118.2 119.1 120.1 120.2 120.3 120.4 121.1 122.1 123.1 123.2 123.3 123.4 124.1 125.1 126.1 127.1 128.1 129.1 130.1 130.2 130.3 130.4 131.1 132.1 132.2 132.3 133.1 133.2 133.3 133.4 134.1 135.1 136.1 136.2 137.1 138.1 139.1 140.1 141.1 142.1 143.1 144.1 145.1 146.1 147.1 147.2 148.1 149.1 150.1 151.1 152.1 153.1 154.1 155.1 156.1 157.1 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 166.1 167.1 168.1 168.2 169.1 170.1 171.1 172.1 173.1 174.1 175.1 176.1 177.1 178.1 179.1 180.1 181.1 182.1 183.1 183.2 184.1 185.1 186.1 187.1 188.1 189.1 190.1 191.1 192.1 192.2 193.1 194.1 195.1 195.2
Data Protection Declaration Thank you for your interest in our museum and our offering. We want you to provide you with maximum security when you visit our websites, also with regard to your personal data. The protection of your personal data is a matter of great importance to us. We consider it a matter of course and an obligation to comply with the statutory regulations on data protection (EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act). In the following, you can find out when we collect data, which data we collect and how we use it. We have implemented suitable technical and organizational measures that ensure that we, as well as our partners and external service providers, fully comply with data protection regulation. Name and address of responsible entity The responsible entity under the terms of the GDPR and applicable national data protection acts as well as other data protection statutes is: Freilichtmuseum Hessenpark GmbH Laubweg 5 61267 Neu-Anspach Germany Email: service@hessenpark.de www.hessenpark.de Name and address of of data protection officer The data protection officer of the responsible entity is: Florian Marquardt Laubweg 5 61267 Neu-Anspach Germany Email: datenschutz@hessenpark.de III. General information on data protection Scope of processing personal data Personal data refers to information about your person, including your name, address, phone number and email address, but also your location, IP address or bank details. As a rule, we only process personal data to the extent necessary to provide a fully functional website and our content and services. Personal data of our users is frequently processed only after acquiring users’ consent. Exceptions apply in cases in which it is not feasible to acquire prior consent for factual reasons and the processing of data is permissible under applicable statutory provisions. This includes, for instance, callback requests, the sending of information material and/or offers, or the answering of individual questions by email. Where required, we will notify you accordingly. Beyond that, we only store and process data provided by you voluntarily or automatically. If you book one of our offers, we generally only collect data required to perform our services. Personal data is exclusively processed in the context of performing the requested service and to preserve our legitimate business interests. Legal basis for processing personal data Art. 6 (1a) GDPR provides us with the legal basis for data processing activities, for which the data subject (user) has given consent to the processing of his or her personal data for one or more specific purposes. In cases where processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, Art. 6 (1b) GDPR serves as the legal basis. In cases where processing is necessary for compliance with a legal obligation to which the controller (responsible entity) is subject, Art. 6 (1c) GDPR serves as the legal basis. In cases where processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1d) GDPR serves as the legal basis. In cases where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1f) GDPR serves as the legal basis. Data deletion and storage periods The personal data of data subjects is deleted or blocked when the purpose of data storage is fulfilled. Storing of data beyond this point may become necessary if longer storage periods are stipulated by European or national authorities in EU regulations, laws or other provisions that apply to the responsible entity. Data is also deleted or blocked when a storage period stipulated in the listed statutes expires, provided that data is no longer required for the conclusion or execution of a contract. Provision of website and creation of log files Description and scope of data processing Each time you visit our website, our system automatically collects data and information from the computer system of your end device. The following data is collected: (1) browser type and version used (2) user’s operating system (3) user’s IP address (4) date and time of visit (5) referrer URL (website where a person clicked to link that sent them to our website) Log files contain IP addresses and other data that can be allocated to a specific user. Data is stored in our system’s log files. We do not store this data together with other personal data of the user. Legal basis for data processing The legal basis for the temporary storage of data and log files is Art. 6 (1f) GDPR. Purpose of data storage The temporary storing of the IP address on the system is necessary to enable a delivery of the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session. Data is stored in log files to safeguard the website’s operability. Furthermore, the data allows us to optimize our website and guarantee the security of our IT systems. In this context, data is not processed for marketing purposes. These purposes constitute our legitimate interests in accordance with Art. 6 (1f) GDPR. Storage periods Personal data is deleted when the purpose of data storage ceases to apply. With regard to data collected to provide the website to the user, this is the case at the end of the respective session. In the case of data stored in log files, this is the case after seven days at the latest. Longer storage periods may apply. In such cases, however, the IP addresses of users are deleted or anonymized to make it impossible to identify the accessing client. Right to object, right to erasure The collection of data for delivering the website and its storage in log files is essential to operating the website. Consequently, the user has no option to object to the collection and storage of such data. Description and scope of data processing Our website uses cookies. Cookies are small text files sent to your computer and stored in your browser and/or your computer system. When a user visits a website, a cookie may be stored in the user’s operating system. This cookie contains a characteristic character string, which allows us to recognize the browser the next time the user visits our website. On our website, we use cookies that enable us to analyze users’ web surfing activities. In this context, the following data is transmitted: (1) Entered search terms (2) Frequency of site visits (3) Use of website features We apply technical measures to anonymize user data collected in the process that make it impossible to allocate data to a specific user. Such data is not stored together with other personal data of users. When users visit our website, they are informed about the use of cookies for analysis purposes and referred to this privacy policy through a web banner. Furthermore, we provide information on how to disable the storage of cookies in the browser settings. Legal basis for data processing The legal basis for the processing of personal data using technically required cookies is Art. 6 (1f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes, provided that the user has given consent, is Art. 6 (1a) GDPR. Purpose of data processing Analysis cookies are used to improve the quality of our website and its content. They enable us to analyze how the website is used and, consequently, to continuously optimize our offering. These purposes constitute our legitimate interests in accordance with Art. 6 (1f) GDPR. Storage periods, right to object, right to erasure Cookies are stored on your computer and transmitted to our website. This means that you as the user have full control over the use of cookies. You can change your browser settings to disable or restrict the transfer and use of cookies. Previously stored cookies can be deleted at any time, also in an automated fashion. Please note that blocking or removing cookies may adversely affect your ability to use the website. Description and scope of data processing Users receive our newsletter because they have registered for it on our website. Our website offers the possibility to subscribe to our free newsletter. If you decide to do so, the data from the input form will be transmitted to us: (1) Email address (2) Date and time of registration (3) First and last name, if applicable (not mandatory) During the registration process, we ask for your consent to process the data and refer to this privacy policy. Data processed for sending our newsletter is at no point disclosed to third parties but is exclusively used for the purpose of sending the newsletter. Legal basis for data processing Users receive our newsletter because they have registered for it on our website. The legal basis for the processing of personal data following the user’s registration, provided that the user has given consent, is Art. 6 (1a) GDPR. Purpose of data processing The user’s email address is collected for the purpose of sending the newsletter. Users receive our newsletter because they have registered for it on our website. We collect other personal data during the registration process exclusively for documentation purposes in order to prevent any misuse of services or the provided email address. Users are not required to provide their first and last name; their names are exclusively used for a personalized form of address. Storage periods Data is stored on the servers of our service provider CleverReach® as the external processor; a processing agreement has been signed to secure all data. When the purpose of data storage ceases to apply, personal data is deleted. Consequently, email addresses are stored for as long as the user remains a newsletter subscriber. Right to object, right to erasure You can cancel your newsletter subscription at any time. An unsubscribe link can be found in every issue of our newsletter. Users receive our newsletter because they have registered for it on our website. If you unsubscribe from our newsletter, you can also revoke your consent to the storage of data collected during the registration process. VII. Email contact Description and scope of data processing Our website allows you to contact us by sending an email to the provided email address. If you decide to do so, we will store the personal data transmitted with your email. Data from your contact email is at no point disclosed to third parties and exclusively used to process your query. Legal basis for data processing The legal basis for the processing of data from contact emails is Art. 6 (1f) GDPR. In case the email contact is aimed at concluding a contract, Art. 6 (1b) GDPR applies as additional legal basis. Purpose of data processing In the case of email contact, this purpose constitutes our legitimate interests in processing data in accordance with Art. 6 (1f) GDPR. Other personal data collected during the sending process is collected to prevent any misuse of the contact form and to guarantee the security of our IT systems. Storage periods Personal data is deleted when the purpose of data storage ceases to apply. In the case of personal data sent by email, this is the case when the exchange with the user is completed. The completion of an exchange is the point at which circumstances clearly indicate that final clarification or a solution has been reached for the issue in question. Other personal data collected during the sending process is deleted after a period of seven days at the latest. Right to object, right to erasure You can revoke your consent to the processing of personal data at any time. If you contact us by email, you have the right to object to the storage of personal data at any time. Please note, however, that we will not be able to continue the exchange with you if you decide to do so. If you want to revoke your consent, please send an email to service@hessenpark.de. In this case, all personal data collected in the course of the email contact will be deleted. VIII. Applicant data Description and scope of data processing You can apply to Freilichtmuseum Hessenpark via the email address personal@hessenpark.de provided on our website. Your personal data will be collected and stored as part of the application process, irrespective of whether you send your information by email or postal mail, and whether you send us an unsolicited application or reply to a specific job offer. Your data will only be made available and processed by the relevant department and staff at Freilichtmuseum Hessenpark GmbH. Legal basis for data processing Art. 6 (1b) GDPR applies as the legal basis for processing applicant data transmitted by email and aimed at concluding a contract. Purpose of data processing In the case of an application, data processing serves the purpose of performing the tasks involved in the application process and of concluding an employment contract. We use the pool of applicants who have send us unsolicited applications to search for suitable candidates. Storage periods Data is deleted after the completion of the application process and the expiration of the required storage period (generally six months). Data from unsolicited applications is deleted after a period of six months at the latest. Right to object, right to erasure Applicants have the right to revoke their consent to the processing of personal data at any time. If you contact us by email, you have the right to object to the storage of personal data at any time by sending an email to personal@hessenpark.de. Please note, however, that we will not be able to continue the application process if you decide to do so. In this case, all personal data collected in the course of the email contact will be deleted. Matomo (formerly PIWIK) web analysis Scope of data processing We use Matomo (formerly PIWIK) web analysis software (www.matomo.org) for our website. This service is provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”). The software places a cookie on the user’s end device (see above for information on cookies). If you access individual pages of our website, the following data is stored: (1) two bytes of the IP address of the user’s system (2) accessed website (3) referrer URL (website where a person clicked to link that sent them to our website) (4) subpages visited from the accessed website (5) duration of the website visit (6) frequency of website visits The Matomo software exclusively runs on the servers of our website. No personal data of users is collected. The software is set to not store full IP addresses but anonymize two bytes of an IP address (e.g. 192.168.xxx.xxx). This makes it impossible to allocate the abbreviated IP address to the accessing end device. Matterport Our website uses the services of Matterport Inc., 352 E Java Dr, Sunnyvale, CA 94089, USA, for our virtual tours. Visiting one of our pages equipped with a Matterport space will establish a connection to Matterport’s servers. This means your IP address, browser version and displaying device, source and destination URL and the respective 3D tour’s ID are all shared with Matterport’s servers in the USA. Matterport services are used in the interest of presenting our online offering in an attractive manner. This constitutes a legitimate interest under Art. 6 Sec. 1(f) GDPR. Further information on how users’ data is handled can be found in Matterport’s privacy statement at: https://matterport.com/de/privacy-policy Rights of data subjects (users) If we process your personal data, you are considered a data subject under the terms of the GDPR. As a data subject, you have the following rights in dealing with the responsible entity: Right of access The data subject shall have the right to obtain from the controller (responsible entity) confirmation as to whether or not personal data concerning him or her is being processed. Where that is the case, you have the right of access to the following information: (1) the purposes of the processing; (2) the categories of personal data concerned; (3) the recipients or categories of recipient to whom the personal data has been or will be disclosed; (4) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (6) the right to lodge a complaint with a supervisory authority; (7) where the personal data is not collected from the data subject, any available information as to their source; (8) the right of access to information whether personal data is transferred to a third country or an international organization. Where personal data is transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer. Right to rectification The data subject shall have the right to obtain from the controller without undue delay the rectification or completion of inaccurate or incomplete personal data concerning him or her. Right to restriction of processing The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: (1) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; (2) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead; (3) the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defense of legal claims; (4) the data subject has objected to processing pursuant to Article 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. A data subject who has obtained restriction of processing pursuant to the conditions stated above shall be informed by the controller before the restriction of processing is lifted. Right to erasure a) Obligation to erase The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: (1) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (2) the data subject withdraws consent on which the processing is based pursuant to Article 6 (1a) or Article 9 (2a) GDPR and where there is no other legal ground for the processing; (3) the data subject objects to the processing pursuant to Article 21 (1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) GDPR; (4) the personal data have been unlawfully processed; (5) the personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; (6) personal data has been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR. b) Information to third parties Where the controller has made the personal data public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, the personal data. c) Exceptions The right to erasure shall not apply to the extent that processing is necessary: (1) for exercising the right of freedom of expression and information; (2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (3) for reasons of public interest in the area of public health pursuant to Article 9 (2h) and (2i) as well as Article 9 (3) GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or (5) for the establishment, exercise or defense of legal claims. Notification obligation The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17 (1) and Article 18 GDPR to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it. Right to data portability The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where: (1) the processing is based on consent pursuant to Article 6 (1a) or Article 9 (2a) or on a contract pursuant to Article 6 (1b) GDPR; and (2) the processing is carried out by automated means. In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Right to object The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6 (1e) or (1f) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications. Right to withdraw informed consent The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 7.2 7.3 8.1 10.1 12.1 14.1 16.1 18.1 20.1 22.1 24.1 26.1 27.1 27.2 28.1 29.1 30.1 31.1 31.2 31.3 32.1 32.2 33.1 34.1 35.1 36.1 37.1 38.1 39.1 39.2 40.1 41.1 42.1 44.1 46.1 48.1 50.1 51.1 52.1 54.1 56.1 58.1 58.2 60.1 62.1 64.1 65.1 65.2 65.3 65.4 65.5 66.1 66.2 67.1 68.1 70.1 71.1 73.1 74.1 75.1 75.2 76.1 76.2 78.1 80.1 81.1 81.2 82.1 83.1 83.2 84.1 85.1 86.1 87.1 87.2 88.1 89.1 90.1 92.1 94.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 105.2 105.3 105.4 106.1 106.2 107.1 108.1 109.1 109.2 111.1 113.1 115.1 117.1 119.1 121.1 123.1 124.1 124.2 124.3 125.1 126.1 127.1 128.1 128.2 129.1 130.1 131.1 132.1 133.1 134.1 135.1 136.1 137.1
Beartas príobháideachais Réamhrá Ón 11 Nollaig 2018 i leith, tá próiseáil sonraí pearsanta an duine ag institiúidí an Aontais á rialú le Rialachán (AE) 2018/1725 ó Pharlaimint na hEorpa agus ón gComhairle an 23 Deireadh Fómhair 2018[1]. Faoin rialachán sin, leantar na prionsabail agus na rialacha céanna atá leagtha síos sa Rialachán Ginearálta maidir le Cosaint Sonraí[2]. Tá an fhaisnéis anseo thíos bunaithe ar Airteagail 15 agus 16 de Rialachán (AE) 2018/1725. Cén fáth go ndéanaimid do shonraí a phróiseáil? Is ardán comhoibritheach ar líne é lechéile.eu a bhfuil sé mar aidhm aige saoránaigh agus eagraíochtaí a spreagadh chun páirt a ghlacadh sa daonlathas. Tá an t-ardán faoi úinéireacht an Aontais Eorpaigh, arna ionadú ag Parlaimint na hEorpa, agus forbraíodh é chun cumhacht a thabhairt do shaoránaigh agus d’eagraíochtaí ról gníomhach a imirt chun todhchaí níos fearr a chruthú in AE. Cuireann sé ar chumas na saoránach agus na n-eagraíochtaí idirghníomhú le pobal lechéile.eu agus gníomhaíochtaí agus taithí a chomhroinnt trí inneachar ilmheán amhail gearrthóga fuaime, físeáin, íomhánna agus téacs. Chomh maith leis sin, is féidir le húsáideoirí scéalta agus teistiméireachtaí pearsanta a chomhroinnt, gníomhaíochtaí agus imeachtaí a thaifeadadh, imeachtaí a mholadh agus a eagrú don chuid eile den phobal, agus ábhar fógraíochta a chur ar fáil chun tacú le cumarsáid na Parlaiminte. Is gá do shonraí pearsanta a bhailiú agus a phróiseáil tuilleadh chun an t-ardán lechéile.eu agus na feidhmiúlachtaí comhfhreagracha seo a leanas a bhainistiú: an nós imeachta clárúcháin agus rochtain ar an ardán lechéile.eu a éascú; faisnéis ábhartha a sholáthar do rannpháirtithe maidir le himeachtaí agus rannpháirtíocht i ngníomhaíochtaí arna n-eagrú ag an bParlaimint agus ag an bpobal a éascú; teachtaireachtaí amhail ríomhphoist, nuachtlitreacha agus cuirí (lena n-áirítear bainistiú na liostaí teagmhála ríomhphoist), a bhféadfadh próifíliú a bheith i gceist leo chun faisnéis a bhaineann le do leasanna a chur chugat; tá an cinneadh faisnéis a sheoladh chugat nasctha go huathoibríoch leis na roghanna atá socraithe ag an úsáideoir; tá sé sin bailí do gach úsáideoir cláraithe; ranníocaíochtaí ó úsáideoirí cláraithe a thíolacadh, a chomhroinnt agus a mhaolú; rochtain a fháil ar fhóraim; rannpháirtíocht i gcomórtais arna n-eagrú ag an bParlaimint; chun críoch staidrimh agus anailíseach; dea-fheidhmiú agus cothabháil an ardáin lechéile.eu; gníomhaíochtaí na Parlaiminte a chur chun cinn. Is féidir suirbhéanna anaithnide a dhéanamh d’fhonn measúnú a dhéanamh ar fheidhmíocht agus ar ghníomhaíochtaí na Parlaiminte. Sna suirbhéanna sin, ní bhailítear ach sonraí comhiomlánaithe agus anaithnidithe. Cad é an bunús dlí atá le próiseáil do chuid sonraí pearsanta? I gcomhréir le hAirteagal 5(1)(d) de Rialachán (AE) 2018/1725, sonraítear nach mór go mbeadh toiliú tugtha ag an ábhar sonraí a shonraí pearsanta nó a sonraí pearsanta a phróiseáil chun críoch sonrach amháin nó níos mó. I gcás comórtais ar líne, beidh feidhm ag Airteagal 5(1)(c) de Rialachán (AE) 2018/1725, ina luaitear go bhfuil gá le sonraí pearsanta a phróiseáil chun conradh a chomhlíonadh ar páirtí ann an t-ábhar sonraí, nó chun bearta a dhéanamh arna iarraidh sin ag an ábhar sonraí sula ndéanfaidh sé nó sí conradh. Ina theannta sin, tá próiseáil sonraí bunaithe ar an gCinneadh ó Bhiúró Pharlaimint na hEorpa an 17 Meitheamh 2019[3] mar a thuairiscítear i miontuairiscí ghnáthchruinniú an Bhiúró an 17 Meitheamh 2019, inar leag Feisirí de Pharlaimint na hEorpa béim ar an tábhacht a bhaineann le líonra bunaithe na gcomhpháirtithe príobháideacha agus poiblí a choimeád, i ndiaidh na dtoghchán freisin, agus chuir siad in iúl nach mór don chumarsáid leis na saoránaigh faoi Pharlaimint na hEorpa a bheith ina bheart leanúnach, seachas ina hócáid speisialta a tharlaíonn uair amháin gach cúig bliana roimh na toghcháin. Déileáiltear le do chuid faisnéise pearsanta i gcomhréir leis na coinníollacha a thuairiscítear in Airteagal 5(1)(a) de Rialachán (AE) 2018/1725. Is ar mhaithe le leas an phobail a dhéantar cúraimí a bhaineann le feachtas institiúideach faisnéise agus cumarsáide na Parlaiminte agus tá siad bunaithe ar chreat um fhorghníomhú straitéiseach Ardrúnaíocht na Parlaiminte. Ní dhéanfaidh Parlaimint na hEorpa do shonraí pearsanta a phróiseáil ach de réir mar is gá chun na cúraimí thuasluaite a chomhlíonadh agus, i gcás inarb infheidhme, má tá toiliú gan débhrí tugtha agat leis an bpróiseáil agus sa chás sin amháin. Ní phróiseálfar do shonraí pearsanta ach a mhéid is gá chun go gcomhlíonfar na cuspóirí a bhí leagtha amach tráth ar seoladh na sonraí sin agus a raibh siad ag teastáil lena n-aghaidh. Cé atá freagrach as próiseáil do shonraí? (Rialaitheoir) Feidhmíonn an Pharlaimint mar rialaitheoir sonraí agus déantar do shonraí a phróiseáil faoi fhreagracht chomhpháirteach na Stiúrthóireachta um na hOifigí Idirchaidrimh agus na Stiúrthóireachta um Fheachtais de chuid Ard-Stiúrthóireacht na Cumarsáide i bParlaimint na hEorpa, a ndéanann an Stiúrthóir um na hOifigí Idirchaidrimh agus an Stiúrthóir um Fheachtais ionadaíocht orthu. Chun tuilleadh eolas a fháil, is féidir leat teagmháil a dhéanamh leis na rialtóirí ag dataprotection@together.eu. Cad iad na sonraí pearsanta a ndéanaimid próiseáil orthu? Bíonn an fhaisnéis a bhailítear ag brath ar an gcineál úsáideora atá i gceist. Úsáideoirí neamhchláraithe Maidir leis an gcuairteoir bunúsach, ní féidir ach a seoladh IP a phróiseáil ar chúiseanna slándála. Coinnítear an fhaisnéis sin ar feadh 10 lá. Úsáideoirí cláraithe agus a bhfuil páirt á glacadh acu De dhíth Tá an fhaisnéis seo a leanas ag teastáil chun cuntas a chruthú ar an ardán: Ainm agus sloinne; Réigiún agus tír chónaithe; Sonraí teagmhála (m.sh. seoladh ríomhphoist); Rogha teanga. Coinníonn an Pharlaimint súil freisin ar rátaí oscailte ríomhphost agus rátaí eile (i.e. ráta cliceála tríd agus preabráta) chun críoch staidrimh agus tuairiscithe. Roghnach Sonraí teagmhála (m.sh. uimhir ghutháin, seoladh, etc.); Pictiúr próifíle; Naisc do na meáin shóisialta, e.g. Facebook, cuntas Twitter; Roghanna cumarsáide amach anseo, lena n-áirítear roghanna liostála agus ábhair spéise atá roghnaithe agat chun tuilleadh faisnéise a fháil fúthu; Líon na n-úsáideoirí a earcaíonn úsáideoirí eile tríd an ardán chun críoch staidrimh agus tuairiscithe; D'íomhá (grianghraif agus físeáin) a bailíodh le linn imeachtaí. In imthosca áirithe, beidh saoránaigh in ann faisnéis a chomhroinnt go deonach leis an bpobal trí theistiméireachtaí agus ábhar closamhairc a chur isteach agus trí imeachtaí. Sna cásanna sin, baileofar toiliú breise. Ní bheidh an toiliú sin bailí ach i gcás aon teistiméireacht ar leith nó aon ábhar closamhairc ar leith a chomhroinnfear ar an suíomh gréasáin. Féadfaidh ionadaí ó eagraíocht chláraithe faisnéis a sholáthar faoin eagraíocht freisin i dtéarmaí faisnéis phoiblí agus feachtas a d’fhéadfaí a eagrú. Déanfaidh an fhoireann an t-ábhar atá molta ag na húsáideoirí a bhailíochtú ar dtús d’fhonn a sheiceáil go bhfuil téarmaí agus coinníollacha agus cód iompair an tsuímh gréasáin á n-urramú. Nuair a eagraítear comórtais ar líne ar na meáin shóisialta nó ar bhealaí eile tríd an ardán seo, d’fhéadfadh céimeanna breise a bheith i gceist a éilíonn sonraí pearsanta breise a phróiseáil (faisnéis faoi phasanna agus/nó cuntas bainc). Cuirfear téarmaí agus coinníollacha sonracha in iúl don ábhar sonraí go soiléir. Eagraíocht chláraithe Sa bhreis ar na sonraí a bhailítear mar úsáideoir cláraithe, is féidir a iarraidh ar ionadaí eagraíochta cláraithe an fhaisnéis bhreise seo a leanas a chur ar fáil: Post agus réimse na hoibre laistigh den eagraíocht do na húsáideoirí a chláraíonn mar ionadaithe eagraíochta. Riarthóirí Seoladh ríomhphoist feidhmiúil. Cé aige a bhfuil rochtain ar do chuid sonraí pearsanta agus cé dó a nochtar iad? Access to your personal data is provided to the authorised Parliament staff members and contractors responsible for carrying out this processing operation according to the ‘need-to-know’ principle. These employees abide by statutory, and when required, additional confidentiality agreements. Tá rochtain ag baill foirne sainordaithe de chuid sheirbhísí na Parlaiminte, a bhfuil baint acu leis an tionscadal lechéile.eu, ar shonraí pearsanta a bhailítear trí ardán tiomnaithe comhéadain riaracháin chun an tionscadal a oibriú agus chun bearta leantacha a dhéanamh a d’fhéadfadh a bheith riachtanach chun críocha tuilleadh próiseála (e.g. arna iarraidh sin ag an ábhar sonraí). Tá sé tábhachtach a thabhairt faoi deara, áfach, nach bhfuil na sonraí inrochtana ach amháin ar bhonn ‘riachtanais eolais’, go sonrach: Tá rochtain ag foireann TF na Parlaiminte ar shonraí atá fíor-riachtanach chun tacaíocht theicniúil agus lóistíochta iomchuí a sholáthar (e.g. deasc chabhrach, bainistiú ceart rochtana, cothabháil an ardáin); Beidh rochtain ag riarthóirí ar na sonraí pearsanta uile a sholáthraítear le linn an chlárúcháin. Ní dhéanann Parlaimint na hEorpa aon sonraí a tharchur chuig tríú páirtithe lasmuigh de na faighteoirí sin. Ní chomhroinneann sí sonraí pearsanta le tríú páirtithe le haghaidh margaíocht dhíreach. Ní féidir do shonraí a aistriú chuig na húdaráis inniúla (Cúirt Iniúchóirí na hEorpa, Cúirt Bhreithiúnais an Aontais Eorpaigh, an Maoirseoir Eorpach ar Chosaint Sonraí nó an Oifig Eorpach Frith-Chalaoise) ach amháin má iarrtar sin le dlí, nó i gcás iniúchta nó nósanna imeachta breithiúnacha. D’fhéadfadh sé go mbeadh naisc le suíomhanna gréasáin eile ar an árdan seo. Ós rud é nach bhfuil aon smacht ag Parlaimint na hEorpa ar na suíomhanna sin, tugaimid cuireadh duit athbhreithniú a dhéanamh ar bheartais phríobháideachais féin na suíomhanna gréasáin sin. Cá fhad a stóráiltear do shonraí pearsanta? Beidh an tréimhse choinneála ag brath ar shonraí agus ar phróifíl an ábhair sonraí. Úsáideoirí neamhchláraithe Baileofar seoladh IP na gcuairteoirí nach bhfuil cuntas acu agus nach ndéanann ach brabhsáil ar an suíomh gréasáin chun críoch slándála. Tar éis 10 lá, scriosfar na logaí ina bhfuil na sonraí seo. Úsáideoirí, rannpháirtithe agus eagraíochtaí cláraithe Ós rud é go bhfuil sé ríthábhachtach go gcoinneoidh an Pharlaimint cumarsáid leanúnach le saoránaigh san fhadtéarma, níl aon dáta deiridh socraithe le haghaidh na sonraí a bhailítear do na próifílí sin. Tá na bearta seo a leanas curtha i bhfeidhm chun smacht ar do chuid sonraí a neartú: Go tráthrialta, tar éis gach toghcháin Eorpaigh, cuirfimid i gcuimhne do bhaill uile an phobail (i.e. na hábhair sonraí uile) gur féidir leo a dtoiliú a tharraingt siar agus a iarraidh go mbainfí a gcuid sonraí tráth ar bith; I ngach cumarsáid ríomhphoist, gheobhaidh tú séanadh ina mínítear conas is féidir leat do shonraí a bhaint as an gcóras agus/nó díliostáil lenár gcumarsáid ríomhphoist; I gcomhthéacs an chláraithe, mura ndéantar cuntas a bhailíochtú i gceart laistigh de 15 lá, scriosfar na sonraí ar fad a bhailítear don chuntas seo. Riarthóirí Coimeádtar an fhaisnéis chomh fada agus is gá don úsáideoir rochtain a bheith aige ar an gcomhéadan riaracháin. Imeachtaí Maidir leis na grianghraif agus na físeáin a tógadh le toiliú an ábhair sonraí le linn imeachta, coinneofar iad ar feadh bliain amháin. Comórtais I gcomhthéacs comórtas sonrach, má bhailítear aon sonraí breise, cuirfear an t-ábhar sonraí ar an eolas faoin dáta coinneála. An gcomhroinnfear do shonraí pearsanta le tír nach bhfuil san Aontas Eorpach nó le heagraíocht? Ní chomhroinnfidh an Pharlaimint do shonraí pearsanta le tír nach bhfuil in AE ná le heagraíocht. Tá Parlaimint na hEorpa tiomanta do shlándáil d’fhaisnéise pearsanta a chosaint. Bainimid úsáid as réimse éagsúil teicneolaíochtaí slándála agus nósanna imeachta a chabhraíonn le dʼfhaisnéis phearsanta a chosaint ó rochtain, úsáid nó nochtadh neamhúdaraithe. Tá an t-ardán lechéile.eu á óstáil i néalseirbhís le tacaíocht ó Seirbhísí Gréasáin Amazon (AWS). Tá conradh ag an bParlaimint le AWS faoi nós imeachta srianta idirinstitiúideach, lena n-áirítear clásail éagsúla maidir le cosaint sonraí chun comhlíonadh Rialachán (AE) 2018/1725 a áirithiú. Faoi na forálacha conarthacha sin, is in AE amháin a fheidhmeofar na néalseirbhísí. Níl gá le seirbhísí a thairgeann an conraitheoir, a bhféadfadh aistriú sonraí a bheith ag teastáil uathu lasmuigh den Limistéar Eorpach Eacnamaíoch, agus ní úsáidtear iad chun críoch lechéile.eu. Ina theannta sin, agus in ainneoin go bhfuil na freastalaithe a úsáidtear le haghaidh stórála lonnaithe in AE, ráthaítear criptiú na sonraí atá stóráilte ar na néalfhreastalaithe trí chur chun feidhme féin na Parlaiminte maidir le comhroinnt sonraí. Cad iad na cearta atá agat nuair a dhéanaimid do shonraí pearsanta a phróiseáil agus conas is féidir leat na cearta sin a fheidhmiú? Tá cearta sonracha agat mar ‘ábhar sonraí’ faoi Chaibidil III (Airteagail 14 go 25) de Rialachán (AE) 2018/1725. Maidir leis an oibríocht phróiseála sin, is féidir leat na cearta seo a leanas a fheidhmiú: an ceart chun rochtain a fháil ar do shonraí pearsanta; an ceart chun do shonraí pearsanta a cheartú má tá siad míchruinn nó neamhiomlán; an ceart chun do shonraí pearsanta a scriosadh; i gcás inarb infheidhme, an ceart go gcuirfí srian ar phróiseáil do shonraí pearsanta; an ceart chun iniomparthachta sonraí; an ceart chun agóid a dhéanamh i gcoinne phróiseáil do shonraí pearsanta a dhéantar go dleathach de bhun Airteagal 5(1)(a); má tá do thoiliú tugtha agat don oibríocht próiseála reatha, an ceart chun í a tharraingt siar tráth ar bith trí fhógra a thabhairt don Rialaitheoir Sonraí, gan difear a dhéanamh do dhlíthiúlacht na próiseála atá bunaithe ar an toiliú sin a fháil roimh an tarraingt siar. Ábhair sonraí ar mian leo a gcearta a fheidhmiú faoi Rialachán (AE) 2018/1725, is féidir leo ríomhphost a sheoladh chuig dataprotection@together.eu nó iarraidh a sheoladh trína spás pearsanta ar an suíomh gréasáin. Seolfar an t-iarratas chuig dataprotection@together.eu, agus déileálfar leis trí chóras ticéadaithe a bheidh comhtháthaithe sa réiteach bogearraí. Pléifidh foireann lárnach leis na hiarratais sin agus coinneoidh siad súil ar na gníomhaíochtaí gaolmhara go léir. Cé leis ar cheart teagmháil a dhéanamh má bhíonn ceist nó gearán agat? Is é an chéad phointe teagmhála atá agat ná dataprotection@together.eu. Féadfaidh tú dul i dteagmháil, tráth ar bith, le hOifigeach Cosanta Sonraí na Parlaiminte (Data-Protection@europarl.europa.eu) má bhíonn aon ábhar imní/aon ghearán agat faoi phróiseáil do shonraí pearsanta. Áirithíonn Oifigeach Cosanta Sonraí na Parlaiminte cur i bhfeidhm inmheánach Rialachán (AE) 2018/1725. Seo a leanas seoladh an Oifigigh Cosanta Sonraí: An tOifigeach Cosanta Sonraí Parlaimint na hEorpa 2, rue Alcide De Gasperi L-1615 Lucsamburg Tá sé de cheart agat gearán a dhéanamh leis an Maoirseoir Eorpach ar Chosaint Sonraí (edps@edps.europa.eu) tráth ar bith maidir le próiseáil do shonraí pearsanta. Feidhmíonn an Maoirseoir Eorpach ar Chosaint Sonraí mar údarás maoirseachta neamhspleách agus cinntíonn sé go ndéanann institiúidí agus comhlachtaí uile an Aontais an ceart chun príobháideachta atá ag daoine a urramú agus a sonraí pearsanta á bpróiseáil acu. [1] Rialachán (AE) 2018/1725 ó Pharlaimint na hEorpa agus ón gComhairle an 23 Deireadh Fómhair 2018 maidir le daoine nádúrtha a chosaint i ndáil le sonraí pearsanta a phróiseáil ag institiúidí, comhlachtaí, oifigí agus gníomhaireachtaí an Aontais agus maidir le saorghluaiseacht sonraí den sórt sin. [2] Rialachán (AE) 2016/679 ó Pharlaimint na hEorpa agus ón gComhairle an 27 Aibreán 2016 maidir le daoine nádúrtha a chosaint i ndáil le sonraí pearsanta a phróiseáil agus maidir le saorghluaiseacht sonraí den sórt sin. [3] Cinneadh ó Bhiúró Pharlaimint na hEorpa an 17 Meitheamh 2019 maidir leis na rialacha cur chun feidhme a bhaineann le Rialachán (AE) Uimh. 2018/1725 ó Pharlaimint na hEorpa agus ón gComhairle maidir le daoine nádúrtha a chosaint i ndáil le sonraí pearsanta a phróiseáil ag Institiúidí, Comhlachtaí, Oifigí agus Gníomhaireachtaí an Aontais agus maidir le saorghluaiseacht sonraí den sórt sin.