https___anuairseobeidhmeagvotail.eu_ga_privacy-policy_1.xml
1.1 2.1 2.2 3.1 4.1 5.1 6.1 6.2 6.3 7.1 7.2 8.1 9.1 9.2 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 19.2 20.1 20.2 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 34.2 34.3 35.1 35.2 36.1 36.2 36.3 36.4 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 49.2 50.1 51.1 51.2 52.1 52.2 53.1 54.1 55.1 56.1 57.1 57.2 58.1 59.1 59.2 60.1 60.2 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 75.2 76.1 76.2 77.1 77.2 77.3 78.1 79.1 80.1 81.1 82.1 84.1 85.1 86.1 86.2 87.1 89.1 90.1
Privacy Policy Tsarevets 56 Ltd. – a company registereg in the Republic of Bulgaria with its head office and address of management: Veliko Tarnovo, 21 Chitalishtna Str., UIC: 202967426, tel .: +359 62 601 885; +359 62 601 886 and email: office@spa-hoteltsarevets.com In connection with its activity – hotel business – the Company processes data, some of which is personal data, according to the Personal Data Protection Act and Regulation (EU) 2016/679, and therefore has the capacity of a personal data controller . This policy is intended to inform the users of www.spa-hoteltsarevets.com about how their personal data is processed, their rights, the methods of personal data protection used by the controller, to whom the Company is entitled to provide the personal data collected, as well as the methods for exercising the rights of data subjects. Introduction: GDPR is the General Data Protection Regulation (Regulation 2016/679 of the European Parliament and the Council). The Regulation significantly enhances the rights of European citizens and accordingly places more obligations on organizations collecting and processing personal data. It entered into force on May 25, 2018 and apply to all Member States of the European Union. Personal data is collected for specific, explicitly stated and legitimate purposes and is not further processed in a manner incompatible with those purposes. The processing shall be lawful, bona fide and transparent in relation to the data subject. Objectives and scope of Policy: With this Privacy Policy, Tsarevets 56 Ltd. recognizes the confidentiality and privacy of personal data. The Company applies the required technical and organizational measures to protect the personal data of individuals in accordance with the law and good practices. With this Privacy Policy, the Company aims to inform individuals for the purposes of personal data processing, recipients or categories of recipients to whom the data may be disclosed, the mandatory or voluntary nature of the data disclosure and the consequences of refusing to provide it; information about the right of access and correction of the data collected. Glossary of terms: 'Personal data' means any information relating to an identified or identifiable person (data subject); identifiable person is an individual who can be identified, directly or indirectly, in particular by an identifier such as name, identification number, location, online identifier, or by one or more traits specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual; 'Genetic data' means personal data relating to the inherited or acquired genetic characteristics of an individual, which give unique information about the characteristics or health of that individual and which are obtained, in particular, from the analysis of a biological sample by the person concerned; 'Biometric data' means personal data obtained as a result of specific technical processing, which are related to the physical, physiological or behavioral characteristics of an individual and which permit or confirm the unique identification of that individual, such as facial images or fingerprints; 'Data subject's consent' means any freely expressed, specific, informed and unambiguous indication of the data subject's will, by means of a statement or clearly affirmative action, expressing his/her consent to processing of personal data related to him/her; 'Processing' means any operation or combination of operations carried out with personal data or a set of personal data by automatic or other means such as the collection, recording, organizing, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, distribution or otherwise as data become available, sorting or combining, limiting, deleting or destroying; 'Controller' means a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the personal data processing; where the purposes and means of such processing are determined by the Union law or a Member State law, the controller or the specific criteria for its determination may be laid down in the Union law or in a Member State law; 'Processor' means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; "Representative" means a natural or legal person established within the Union who is appointed by the controller or processor in writing in accordance with Art. 27, and represents the controller or the processor in connection with their respective obligations under Regulation (EU) 2016/679; 'Recipient' means a natural or legal person, public authority, agency or other entity to whom personal data is disclosed, whether third party or not. At the same time, public authorities, which may receive personal data in the context of a specific investigation in accordance with Union or Member State law, are not considered as 'recipients'; the processing of such data by the designated public authorities complies with the applicable data protection rules for the purposes of processing; 'Supervisory authority' means an independent public authority established by a Member State and responsible for monitoring the implementation of Regulation (EU) 2016/679; 'Personal data breach' means a breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data that is transmitted, stored or processed in any other way; 'Profiling' means any form of automated processing of personal data resulting in the use of personal data to evaluate certain personal attributes relating to an individual, and in particular to analyze or forecast aspects relating to the performance of professional duties of that individual, his or her economic status, health, personal preferences, interests, reliability, behavior, location or movement. Basic principles regarding the processing of personal data that we observe: - lawful, bona fide and transparent processing of personal data - processing of personal data for specific purposes - minimizing data - up-to-date accuracy and maintenance - storage limit - integrity and confidentiality - accountability Purpose of processing: Tsarevets 56 Ltd. processes personal data for implementation of its activities - hotel business. Personal data is collected for specific, legitimate purposes and must be processed lawfully and in good faith. Data is not further processed in a manner incompatible with these purposes. Further processing of personal data for archiving in the public interest, for scientific and historical research, or for statistical purposes, is not considered incompatible with the original purposes. The Company does not collect personal information for marketing and advertising purposes. Tsarevets 56 Ltd. collects data solely and only with the express, free, clear and informed consent of the user, which he or she has noted when reading this privacy policy. Beyond the above objectives and in connection with the principles set out in Art. 5 of Regulation (EU) 2016/679, Tsarevets 56 Ltd. does not collect or process other personal data of its employees, partners and clients. The Company does not process personal data for the purpose of automated decision-making, incl. profiling. The Company collects data from the data subject. The Company only processes personal data when: - has obtained clear, free, informed and unambiguous consent from data subjects who are notified in advance through this policy about the purpose of their personal data usage; - there is a contractual obligation for the purpose of executing a contract, one party being the individual (when the Company processes data of its employees) and for the exercise, establishment and protection of rights and legitimate interests; - processing is necessary for the fulfillment of a task of public interest (according to EU or national law); What data is collected and processed: Attention: Tsarevets 56 Ltd. does not collect or process sensitive personal information of its clients and users on its website www.spa-hoteltsarevets.com. Attention: Tsarevets 56 EOOD does not store bank card data of its customers and users on the website www.spa-hoteltsarevets.com. The collected and processed data is: - User name and surname - to identify the subject upon request; - Email - for quick and easy communication; - Telephone - for contact if necessary; - Other data admissible under the Regulation if needed to fulfill a Company’s obligation or related to a specific service. The sender of personal data has the right not to share all the personal data required. In cases where this personal data is required for the performance of a specific service, a specific specialized function or an effective response to a specific request (excluding direct marketing) - Tsarevets 56 Ltd. could not fulfill the request due to lack of data, for which the user is explicitly notified through this privacy policy. Recipients of personal data to which the Company has the right to disclose data: The Company provides personal data to competent state authorities and institutions when required by the national legislation and in accordance with the rules set out therein (for example: the National Revenue Agency, the National Social Security Institute, the Employment Agency, judicial and investigative authorities, health authorities, etc.). It also provides personal data of individuals to accounting firms, banks, HR agencies and mobile operators for statutory purposes or those specified in a contract concluded with the individuals. The personal data of www.spa-hoteltsarevets.com users is not disclosed to third parties beyond the legal requirements. The Company does not provide personal data to countries outside the European Union. Rights of individuals - data subjects: Measures taken to protect personal data in accordance with Regulation (EU) 2016/679 are designed to ensure protection of data subjects' rights, namely: - Right of access; - Right to correct inaccurate or incomplete data; - Right of erasure (right to be forgotten), if applicable the conditions of Art. 17 of Regulation (EU) 2016/679; - Right to restrict processing; - Right of data portability, if applicable the conditions for portability under Art. 20 of Regulation (EU) 2016/679; - Right of objection, if applicable the conditions of Art. 21 of Regulation (EU) 2016/679; - Right to complain to the Data Protection Commission or the District Court; - Right not to be subject to a decision based solely on automated processing involving profiling. Data storage period: As a data controller, Tsarevets 56 Ltd. processes data for a period as provided in applicable law and in accordance with the principle of storage limitation. The remaining data is stored in different terms, depending on the data type defining the legal obligation for its processing, including storage. Storage criteria are: - when submitting booking data – the data is kept for 5 years after the corresponding booking is made. - data on the register of the accommodated tourists within the meaning of Article 116 of the Tourism Act – the data is kept according to the term stipulated in the Tourism Act and the secondary legislation. - when submitting contact form data – the data is kept for 2 years or until the sender receives a service that satisfies his requirements. - Financial accounting documents and invoices – data is kept for up to 10 years. - the personal data of the employees of Tsarevets 56 Ltd. are stored and processed for a longer period in accordance within the requirement of the Accounting Act. - video surveillance of the site – data is kept for 2 months. When in connection with the activity of the Company it is necessary to process or store data of persons under the age of 18 years, this is done by the explicit consent of the parent/guardian. Responsibility of the Company for personal data protection: In connection with the personal data controller responsibility introduced by Regulation (EU) 2016/679 and the Personal Data Protection Act, and to ensure adequate data protection, the Company applies all necessary organizational and technical measures to protect personal data of individuals. For maximum security in the processing, transmission and storage of personal data, the Company uses protection mechanisms for data stored both electronically and on paper. Computer access via a local network to files containing personal data is carried out only by employees of Tsarevets 56 Ltd. or by a data protection officer authorized with statutory rights, solely from their physical workplace, by a specially designated computer and after identification by login and password to the system. At the end of the working day, employees turn off their local computer. In order to increase the security of access to information, employees must change their passwords for a period not exceeding 2 months, determined by Tsarevets 56 Ltd. The Company uses a fully licensed operating system to perform its data protection functions. Any other software of unlicensed origin is prohibited to use. Installation of software products on office computers is done only by a designated person - IT specialist. Policy changes: The Company has the right to update, amend and supplement the Privacy Policy at any time in the future when circumstances require it. Contact details of the personal data controller: Address: 21, Chitalishtna Str., Veliko Tarnovo, Bulgaria Email: office@spa-hoteltsarevets.com Data protection supervisor: Data protection supervisor at national level is the Personal Data Protection Commission. It monitors the correct application of Regulation (EU) 2016/679, and any natural person who considers that his or her rights regarding the processing of his/her personal data have been infringed may submit a complaint to the Commission at the following address: Address: 2, Prof. Tsvetan Lazarov Str., Sofia, Bulgaria Email: kzld@cpdp.bg Website: www.cpdp.bg
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 7.2 7.3 8.1 10.1 12.1 14.1 16.1 18.1 20.1 22.1 24.1 26.1 27.1 27.2 28.1 29.1 30.1 31.1 31.2 31.3 32.1 32.2 33.1 34.1 35.1 36.1 37.1 38.1 39.1 39.2 40.1 41.1 42.1 44.1 46.1 48.1 50.1 51.1 52.1 54.1 56.1 58.1 58.2 60.1 62.1 64.1 65.1 65.2 65.3 65.4 65.5 66.1 66.2 67.1 68.1 70.1 71.1 73.1 74.1 75.1 75.2 76.1 76.2 78.1 80.1 81.1 81.2 82.1 83.1 83.2 84.1 85.1 86.1 87.1 87.2 88.1 89.1 90.1 92.1 94.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 105.2 105.3 105.4 106.1 106.2 107.1 108.1 109.1 109.2 111.1 113.1 115.1 117.1 119.1 121.1 123.1 124.1 124.2 124.3 125.1 126.1 127.1 128.1 128.2 129.1 130.1 131.1 132.1 133.1 134.1 135.1 136.1 137.1
Beartas príobháideachais Réamhrá Ón 11 Nollaig 2018 i leith, tá próiseáil sonraí pearsanta an duine ag institiúidí an Aontais á rialú le Rialachán (AE) 2018/1725 ó Pharlaimint na hEorpa agus ón gComhairle an 23 Deireadh Fómhair 2018[1]. Faoin rialachán sin, leantar na prionsabail agus na rialacha céanna atá leagtha síos sa Rialachán Ginearálta maidir le Cosaint Sonraí[2]. Tá an fhaisnéis anseo thíos bunaithe ar Airteagail 15 agus 16 de Rialachán (AE) 2018/1725. Cén fáth go ndéanaimid do shonraí a phróiseáil? Is ardán comhoibritheach ar líne é lechéile.eu a bhfuil sé mar aidhm aige saoránaigh agus eagraíochtaí a spreagadh chun páirt a ghlacadh sa daonlathas. Tá an t-ardán faoi úinéireacht an Aontais Eorpaigh, arna ionadú ag Parlaimint na hEorpa, agus forbraíodh é chun cumhacht a thabhairt do shaoránaigh agus d’eagraíochtaí ról gníomhach a imirt chun todhchaí níos fearr a chruthú in AE. Cuireann sé ar chumas na saoránach agus na n-eagraíochtaí idirghníomhú le pobal lechéile.eu agus gníomhaíochtaí agus taithí a chomhroinnt trí inneachar ilmheán amhail gearrthóga fuaime, físeáin, íomhánna agus téacs. Chomh maith leis sin, is féidir le húsáideoirí scéalta agus teistiméireachtaí pearsanta a chomhroinnt, gníomhaíochtaí agus imeachtaí a thaifeadadh, imeachtaí a mholadh agus a eagrú don chuid eile den phobal, agus ábhar fógraíochta a chur ar fáil chun tacú le cumarsáid na Parlaiminte. Is gá do shonraí pearsanta a bhailiú agus a phróiseáil tuilleadh chun an t-ardán lechéile.eu agus na feidhmiúlachtaí comhfhreagracha seo a leanas a bhainistiú: an nós imeachta clárúcháin agus rochtain ar an ardán lechéile.eu a éascú; faisnéis ábhartha a sholáthar do rannpháirtithe maidir le himeachtaí agus rannpháirtíocht i ngníomhaíochtaí arna n-eagrú ag an bParlaimint agus ag an bpobal a éascú; teachtaireachtaí amhail ríomhphoist, nuachtlitreacha agus cuirí (lena n-áirítear bainistiú na liostaí teagmhála ríomhphoist), a bhféadfadh próifíliú a bheith i gceist leo chun faisnéis a bhaineann le do leasanna a chur chugat; tá an cinneadh faisnéis a sheoladh chugat nasctha go huathoibríoch leis na roghanna atá socraithe ag an úsáideoir; tá sé sin bailí do gach úsáideoir cláraithe; ranníocaíochtaí ó úsáideoirí cláraithe a thíolacadh, a chomhroinnt agus a mhaolú; rochtain a fháil ar fhóraim; rannpháirtíocht i gcomórtais arna n-eagrú ag an bParlaimint; chun críoch staidrimh agus anailíseach; dea-fheidhmiú agus cothabháil an ardáin lechéile.eu; gníomhaíochtaí na Parlaiminte a chur chun cinn. Is féidir suirbhéanna anaithnide a dhéanamh d’fhonn measúnú a dhéanamh ar fheidhmíocht agus ar ghníomhaíochtaí na Parlaiminte. Sna suirbhéanna sin, ní bhailítear ach sonraí comhiomlánaithe agus anaithnidithe. Cad é an bunús dlí atá le próiseáil do chuid sonraí pearsanta? I gcomhréir le hAirteagal 5(1)(d) de Rialachán (AE) 2018/1725, sonraítear nach mór go mbeadh toiliú tugtha ag an ábhar sonraí a shonraí pearsanta nó a sonraí pearsanta a phróiseáil chun críoch sonrach amháin nó níos mó. I gcás comórtais ar líne, beidh feidhm ag Airteagal 5(1)(c) de Rialachán (AE) 2018/1725, ina luaitear go bhfuil gá le sonraí pearsanta a phróiseáil chun conradh a chomhlíonadh ar páirtí ann an t-ábhar sonraí, nó chun bearta a dhéanamh arna iarraidh sin ag an ábhar sonraí sula ndéanfaidh sé nó sí conradh. Ina theannta sin, tá próiseáil sonraí bunaithe ar an gCinneadh ó Bhiúró Pharlaimint na hEorpa an 17 Meitheamh 2019[3] mar a thuairiscítear i miontuairiscí ghnáthchruinniú an Bhiúró an 17 Meitheamh 2019, inar leag Feisirí de Pharlaimint na hEorpa béim ar an tábhacht a bhaineann le líonra bunaithe na gcomhpháirtithe príobháideacha agus poiblí a choimeád, i ndiaidh na dtoghchán freisin, agus chuir siad in iúl nach mór don chumarsáid leis na saoránaigh faoi Pharlaimint na hEorpa a bheith ina bheart leanúnach, seachas ina hócáid speisialta a tharlaíonn uair amháin gach cúig bliana roimh na toghcháin. Déileáiltear le do chuid faisnéise pearsanta i gcomhréir leis na coinníollacha a thuairiscítear in Airteagal 5(1)(a) de Rialachán (AE) 2018/1725. Is ar mhaithe le leas an phobail a dhéantar cúraimí a bhaineann le feachtas institiúideach faisnéise agus cumarsáide na Parlaiminte agus tá siad bunaithe ar chreat um fhorghníomhú straitéiseach Ardrúnaíocht na Parlaiminte. Ní dhéanfaidh Parlaimint na hEorpa do shonraí pearsanta a phróiseáil ach de réir mar is gá chun na cúraimí thuasluaite a chomhlíonadh agus, i gcás inarb infheidhme, má tá toiliú gan débhrí tugtha agat leis an bpróiseáil agus sa chás sin amháin. Ní phróiseálfar do shonraí pearsanta ach a mhéid is gá chun go gcomhlíonfar na cuspóirí a bhí leagtha amach tráth ar seoladh na sonraí sin agus a raibh siad ag teastáil lena n-aghaidh. Cé atá freagrach as próiseáil do shonraí? (Rialaitheoir) Feidhmíonn an Pharlaimint mar rialaitheoir sonraí agus déantar do shonraí a phróiseáil faoi fhreagracht chomhpháirteach na Stiúrthóireachta um na hOifigí Idirchaidrimh agus na Stiúrthóireachta um Fheachtais de chuid Ard-Stiúrthóireacht na Cumarsáide i bParlaimint na hEorpa, a ndéanann an Stiúrthóir um na hOifigí Idirchaidrimh agus an Stiúrthóir um Fheachtais ionadaíocht orthu. Chun tuilleadh eolas a fháil, is féidir leat teagmháil a dhéanamh leis na rialtóirí ag dataprotection@together.eu. Cad iad na sonraí pearsanta a ndéanaimid próiseáil orthu? Bíonn an fhaisnéis a bhailítear ag brath ar an gcineál úsáideora atá i gceist. Úsáideoirí neamhchláraithe Maidir leis an gcuairteoir bunúsach, ní féidir ach a seoladh IP a phróiseáil ar chúiseanna slándála. Coinnítear an fhaisnéis sin ar feadh 10 lá. Úsáideoirí cláraithe agus a bhfuil páirt á glacadh acu De dhíth Tá an fhaisnéis seo a leanas ag teastáil chun cuntas a chruthú ar an ardán: Ainm agus sloinne; Réigiún agus tír chónaithe; Sonraí teagmhála (m.sh. seoladh ríomhphoist); Rogha teanga. Coinníonn an Pharlaimint súil freisin ar rátaí oscailte ríomhphost agus rátaí eile (i.e. ráta cliceála tríd agus preabráta) chun críoch staidrimh agus tuairiscithe. Roghnach Sonraí teagmhála (m.sh. uimhir ghutháin, seoladh, etc.); Pictiúr próifíle; Naisc do na meáin shóisialta, e.g. Facebook, cuntas Twitter; Roghanna cumarsáide amach anseo, lena n-áirítear roghanna liostála agus ábhair spéise atá roghnaithe agat chun tuilleadh faisnéise a fháil fúthu; Líon na n-úsáideoirí a earcaíonn úsáideoirí eile tríd an ardán chun críoch staidrimh agus tuairiscithe; D'íomhá (grianghraif agus físeáin) a bailíodh le linn imeachtaí. In imthosca áirithe, beidh saoránaigh in ann faisnéis a chomhroinnt go deonach leis an bpobal trí theistiméireachtaí agus ábhar closamhairc a chur isteach agus trí imeachtaí. Sna cásanna sin, baileofar toiliú breise. Ní bheidh an toiliú sin bailí ach i gcás aon teistiméireacht ar leith nó aon ábhar closamhairc ar leith a chomhroinnfear ar an suíomh gréasáin. Féadfaidh ionadaí ó eagraíocht chláraithe faisnéis a sholáthar faoin eagraíocht freisin i dtéarmaí faisnéis phoiblí agus feachtas a d’fhéadfaí a eagrú. Déanfaidh an fhoireann an t-ábhar atá molta ag na húsáideoirí a bhailíochtú ar dtús d’fhonn a sheiceáil go bhfuil téarmaí agus coinníollacha agus cód iompair an tsuímh gréasáin á n-urramú. Nuair a eagraítear comórtais ar líne ar na meáin shóisialta nó ar bhealaí eile tríd an ardán seo, d’fhéadfadh céimeanna breise a bheith i gceist a éilíonn sonraí pearsanta breise a phróiseáil (faisnéis faoi phasanna agus/nó cuntas bainc). Cuirfear téarmaí agus coinníollacha sonracha in iúl don ábhar sonraí go soiléir. Eagraíocht chláraithe Sa bhreis ar na sonraí a bhailítear mar úsáideoir cláraithe, is féidir a iarraidh ar ionadaí eagraíochta cláraithe an fhaisnéis bhreise seo a leanas a chur ar fáil: Post agus réimse na hoibre laistigh den eagraíocht do na húsáideoirí a chláraíonn mar ionadaithe eagraíochta. Riarthóirí Seoladh ríomhphoist feidhmiúil. Cé aige a bhfuil rochtain ar do chuid sonraí pearsanta agus cé dó a nochtar iad? Access to your personal data is provided to the authorised Parliament staff members and contractors responsible for carrying out this processing operation according to the ‘need-to-know’ principle. These employees abide by statutory, and when required, additional confidentiality agreements. Tá rochtain ag baill foirne sainordaithe de chuid sheirbhísí na Parlaiminte, a bhfuil baint acu leis an tionscadal lechéile.eu, ar shonraí pearsanta a bhailítear trí ardán tiomnaithe comhéadain riaracháin chun an tionscadal a oibriú agus chun bearta leantacha a dhéanamh a d’fhéadfadh a bheith riachtanach chun críocha tuilleadh próiseála (e.g. arna iarraidh sin ag an ábhar sonraí). Tá sé tábhachtach a thabhairt faoi deara, áfach, nach bhfuil na sonraí inrochtana ach amháin ar bhonn ‘riachtanais eolais’, go sonrach: Tá rochtain ag foireann TF na Parlaiminte ar shonraí atá fíor-riachtanach chun tacaíocht theicniúil agus lóistíochta iomchuí a sholáthar (e.g. deasc chabhrach, bainistiú ceart rochtana, cothabháil an ardáin); Beidh rochtain ag riarthóirí ar na sonraí pearsanta uile a sholáthraítear le linn an chlárúcháin. Ní dhéanann Parlaimint na hEorpa aon sonraí a tharchur chuig tríú páirtithe lasmuigh de na faighteoirí sin. Ní chomhroinneann sí sonraí pearsanta le tríú páirtithe le haghaidh margaíocht dhíreach. Ní féidir do shonraí a aistriú chuig na húdaráis inniúla (Cúirt Iniúchóirí na hEorpa, Cúirt Bhreithiúnais an Aontais Eorpaigh, an Maoirseoir Eorpach ar Chosaint Sonraí nó an Oifig Eorpach Frith-Chalaoise) ach amháin má iarrtar sin le dlí, nó i gcás iniúchta nó nósanna imeachta breithiúnacha. D’fhéadfadh sé go mbeadh naisc le suíomhanna gréasáin eile ar an árdan seo. Ós rud é nach bhfuil aon smacht ag Parlaimint na hEorpa ar na suíomhanna sin, tugaimid cuireadh duit athbhreithniú a dhéanamh ar bheartais phríobháideachais féin na suíomhanna gréasáin sin. Cá fhad a stóráiltear do shonraí pearsanta? Beidh an tréimhse choinneála ag brath ar shonraí agus ar phróifíl an ábhair sonraí. Úsáideoirí neamhchláraithe Baileofar seoladh IP na gcuairteoirí nach bhfuil cuntas acu agus nach ndéanann ach brabhsáil ar an suíomh gréasáin chun críoch slándála. Tar éis 10 lá, scriosfar na logaí ina bhfuil na sonraí seo. Úsáideoirí, rannpháirtithe agus eagraíochtaí cláraithe Ós rud é go bhfuil sé ríthábhachtach go gcoinneoidh an Pharlaimint cumarsáid leanúnach le saoránaigh san fhadtéarma, níl aon dáta deiridh socraithe le haghaidh na sonraí a bhailítear do na próifílí sin. Tá na bearta seo a leanas curtha i bhfeidhm chun smacht ar do chuid sonraí a neartú: Go tráthrialta, tar éis gach toghcháin Eorpaigh, cuirfimid i gcuimhne do bhaill uile an phobail (i.e. na hábhair sonraí uile) gur féidir leo a dtoiliú a tharraingt siar agus a iarraidh go mbainfí a gcuid sonraí tráth ar bith; I ngach cumarsáid ríomhphoist, gheobhaidh tú séanadh ina mínítear conas is féidir leat do shonraí a bhaint as an gcóras agus/nó díliostáil lenár gcumarsáid ríomhphoist; I gcomhthéacs an chláraithe, mura ndéantar cuntas a bhailíochtú i gceart laistigh de 15 lá, scriosfar na sonraí ar fad a bhailítear don chuntas seo. Riarthóirí Coimeádtar an fhaisnéis chomh fada agus is gá don úsáideoir rochtain a bheith aige ar an gcomhéadan riaracháin. Imeachtaí Maidir leis na grianghraif agus na físeáin a tógadh le toiliú an ábhair sonraí le linn imeachta, coinneofar iad ar feadh bliain amháin. Comórtais I gcomhthéacs comórtas sonrach, má bhailítear aon sonraí breise, cuirfear an t-ábhar sonraí ar an eolas faoin dáta coinneála. An gcomhroinnfear do shonraí pearsanta le tír nach bhfuil san Aontas Eorpach nó le heagraíocht? Ní chomhroinnfidh an Pharlaimint do shonraí pearsanta le tír nach bhfuil in AE ná le heagraíocht. Tá Parlaimint na hEorpa tiomanta do shlándáil d’fhaisnéise pearsanta a chosaint. Bainimid úsáid as réimse éagsúil teicneolaíochtaí slándála agus nósanna imeachta a chabhraíonn le dʼfhaisnéis phearsanta a chosaint ó rochtain, úsáid nó nochtadh neamhúdaraithe. Tá an t-ardán lechéile.eu á óstáil i néalseirbhís le tacaíocht ó Seirbhísí Gréasáin Amazon (AWS). Tá conradh ag an bParlaimint le AWS faoi nós imeachta srianta idirinstitiúideach, lena n-áirítear clásail éagsúla maidir le cosaint sonraí chun comhlíonadh Rialachán (AE) 2018/1725 a áirithiú. Faoi na forálacha conarthacha sin, is in AE amháin a fheidhmeofar na néalseirbhísí. Níl gá le seirbhísí a thairgeann an conraitheoir, a bhféadfadh aistriú sonraí a bheith ag teastáil uathu lasmuigh den Limistéar Eorpach Eacnamaíoch, agus ní úsáidtear iad chun críoch lechéile.eu. Ina theannta sin, agus in ainneoin go bhfuil na freastalaithe a úsáidtear le haghaidh stórála lonnaithe in AE, ráthaítear criptiú na sonraí atá stóráilte ar na néalfhreastalaithe trí chur chun feidhme féin na Parlaiminte maidir le comhroinnt sonraí. Cad iad na cearta atá agat nuair a dhéanaimid do shonraí pearsanta a phróiseáil agus conas is féidir leat na cearta sin a fheidhmiú? Tá cearta sonracha agat mar ‘ábhar sonraí’ faoi Chaibidil III (Airteagail 14 go 25) de Rialachán (AE) 2018/1725. Maidir leis an oibríocht phróiseála sin, is féidir leat na cearta seo a leanas a fheidhmiú: an ceart chun rochtain a fháil ar do shonraí pearsanta; an ceart chun do shonraí pearsanta a cheartú má tá siad míchruinn nó neamhiomlán; an ceart chun do shonraí pearsanta a scriosadh; i gcás inarb infheidhme, an ceart go gcuirfí srian ar phróiseáil do shonraí pearsanta; an ceart chun iniomparthachta sonraí; an ceart chun agóid a dhéanamh i gcoinne phróiseáil do shonraí pearsanta a dhéantar go dleathach de bhun Airteagal 5(1)(a); má tá do thoiliú tugtha agat don oibríocht próiseála reatha, an ceart chun í a tharraingt siar tráth ar bith trí fhógra a thabhairt don Rialaitheoir Sonraí, gan difear a dhéanamh do dhlíthiúlacht na próiseála atá bunaithe ar an toiliú sin a fháil roimh an tarraingt siar. Ábhair sonraí ar mian leo a gcearta a fheidhmiú faoi Rialachán (AE) 2018/1725, is féidir leo ríomhphost a sheoladh chuig dataprotection@together.eu nó iarraidh a sheoladh trína spás pearsanta ar an suíomh gréasáin. Seolfar an t-iarratas chuig dataprotection@together.eu, agus déileálfar leis trí chóras ticéadaithe a bheidh comhtháthaithe sa réiteach bogearraí. Pléifidh foireann lárnach leis na hiarratais sin agus coinneoidh siad súil ar na gníomhaíochtaí gaolmhara go léir. Cé leis ar cheart teagmháil a dhéanamh má bhíonn ceist nó gearán agat? Is é an chéad phointe teagmhála atá agat ná dataprotection@together.eu. Féadfaidh tú dul i dteagmháil, tráth ar bith, le hOifigeach Cosanta Sonraí na Parlaiminte (Data-Protection@europarl.europa.eu) má bhíonn aon ábhar imní/aon ghearán agat faoi phróiseáil do shonraí pearsanta. Áirithíonn Oifigeach Cosanta Sonraí na Parlaiminte cur i bhfeidhm inmheánach Rialachán (AE) 2018/1725. Seo a leanas seoladh an Oifigigh Cosanta Sonraí: An tOifigeach Cosanta Sonraí Parlaimint na hEorpa 2, rue Alcide De Gasperi L-1615 Lucsamburg Tá sé de cheart agat gearán a dhéanamh leis an Maoirseoir Eorpach ar Chosaint Sonraí (edps@edps.europa.eu) tráth ar bith maidir le próiseáil do shonraí pearsanta. Feidhmíonn an Maoirseoir Eorpach ar Chosaint Sonraí mar údarás maoirseachta neamhspleách agus cinntíonn sé go ndéanann institiúidí agus comhlachtaí uile an Aontais an ceart chun príobháideachta atá ag daoine a urramú agus a sonraí pearsanta á bpróiseáil acu. [1] Rialachán (AE) 2018/1725 ó Pharlaimint na hEorpa agus ón gComhairle an 23 Deireadh Fómhair 2018 maidir le daoine nádúrtha a chosaint i ndáil le sonraí pearsanta a phróiseáil ag institiúidí, comhlachtaí, oifigí agus gníomhaireachtaí an Aontais agus maidir le saorghluaiseacht sonraí den sórt sin. [2] Rialachán (AE) 2016/679 ó Pharlaimint na hEorpa agus ón gComhairle an 27 Aibreán 2016 maidir le daoine nádúrtha a chosaint i ndáil le sonraí pearsanta a phróiseáil agus maidir le saorghluaiseacht sonraí den sórt sin. [3] Cinneadh ó Bhiúró Pharlaimint na hEorpa an 17 Meitheamh 2019 maidir leis na rialacha cur chun feidhme a bhaineann le Rialachán (AE) Uimh. 2018/1725 ó Pharlaimint na hEorpa agus ón gComhairle maidir le daoine nádúrtha a chosaint i ndáil le sonraí pearsanta a phróiseáil ag Institiúidí, Comhlachtaí, Oifigí agus Gníomhaireachtaí an Aontais agus maidir le saorghluaiseacht sonraí den sórt sin.