https___www.cis.de_en_privacy__2.xml
http___fpz.unizg.hr_o-fakultetu.asp_m_zastita-osobnih-podataka_1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 21.1 22.1 23.1 24.1 25.1 26.1 26.2 27.1 27.2 27.3 27.4 28.1 28.2 28.3 28.4 29.1 29.2 29.3 30.1 30.2 30.3 31.1 31.2 31.3 32.1 33.1 33.2 33.3 34.1 35.1 35.2 36.1 37.1 37.2 37.3 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 54.2 54.3 55.1 56.1 57.1 58.1 58.2 59.1 60.1 60.2 60.3 61.1 62.1 62.2 63.1 63.2 63.3 64.1 65.1 65.2 65.3 65.4 66.1 67.1 68.1 68.2 68.3 68.4 68.5 69.1 70.1 70.2 71.1 71.2 72.1 73.1 74.1 75.1 75.2 76.1 76.2 76.3 77.1 77.2 78.1 78.2 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 86.2 87.1 87.2 87.3 88.1 88.2 88.3 89.1 89.2 89.3 90.1 90.2 91.1 91.2 91.3 92.1 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 101.1 101.2 101.3 101.4 101.5 101.6 101.7 102.1 103.1 103.2 104.1 104.2 104.3 104.4 104.5 105.1 106.1 106.2 107.1 107.2 108.1 109.1 110.1 111.1 112.1 113.1 113.2 113.3 113.4 113.5 114.1 114.2 115.1 115.2 116.1 117.1 117.2 117.3 117.4 117.5 117.6 118.1 119.1 120.1 121.1 121.2 121.3 121.4 121.5 121.6 121.7 121.8 121.9 122.1 123.1 124.1 125.1 125.2 125.3 125.4 125.5 125.6 125.7 125.8 125.9 125.10 125.11 126.1 127.1 127.2 128.1 129.1 129.2 129.3 129.4 129.5 130.1 131.1 132.1 133.1 134.1 135.1 136.1 136.2 137.1 138.1 139.1 139.2 140.1 141.1 142.1 143.1 144.1 145.1 146.1 147.1 148.1 149.1 150.1 151.1 152.1 152.2 153.1 153.2 153.3 154.1 155.1 155.2 156.1 157.1 158.1 159.1 160.1 161.1 161.2 161.3 161.4 162.1 163.1 164.1 165.1 165.2 165.3 165.4 165.5 166.1 166.2 166.3 167.1 168.1 169.1 169.2 169.3 170.1 170.2 171.1 172.1 173.1 174.1 174.2 174.3 174.4 174.5 175.1 175.2 176.1 177.1 178.1 179.1 180.1 181.1 181.2 182.1 182.2 182.3 182.4 182.5 182.6 182.7 183.1 183.2 183.3 184.1 185.1 186.1 186.2 186.3 187.1 187.2 187.3 188.1 189.1 190.1 190.2 191.1 192.1 192.2 193.1 194.1 195.1 195.2 195.3 195.4 195.5 195.6 196.1 197.1 198.1 198.2 198.3 199.1 200.1 200.2 200.3 200.4 201.1
Data privacy statement This website (referred to hereinafter as the “website”) is provided by CiS Electronic GmbH (referred to hereinafter as “us” or “we”). For additional information about the provider of the website, refer to our legal notice. Name and address of the responsible party The responsible party as defined in the General Data Protection Regulation and other national data protection laws of the Member States, as well as other legal data privacy regulations is: CiS electronic GmbH Europark Fichtenhain A 15 47807 Krefeld, Germany Email: info(at)cis.de Website: www.cis.de Name and address of the data protection officer The data protection officer of the responsible party is: Peter Breidbach admeritia GmbH Elisabeth-Selbert-Str. 40764 Langenfeld, Germany Tel. Email: peter.breidbach(at)admeritia.de Website: https://www.admeritia.de Principles of the data processing Purpose and scope of the processing of personal data We only collect and use personal data of our users to the extent that is necessary to provide a functional website and our content and services. The collection and use of personal data of our users normally only takes place after the user’s consent. An exception applies in such cases where it is no possible to obtain consent beforehand based on the circumstances and the processing of the data is permitted by other statutory regulations. (1) Consent Insofar as we have obtained consent of the data subject to process personal data, Art. 6, para. 1 lit. of the EU General Data Protection Regulation (GDPR) as a legal basis. 2) Fulfilment of a contract When processing personal data of a person who is a contractual party is necessary for fulfilment of said contract, Art. 6, para. b of the GDPR applies as a legal basis. This also applies for processing which is necessary for implementation of pre-contractual measures. (3) Legal obligation Insofar as processing of personal data is necessary for fulfilment of a legal obligation to which our company is subject, Art. 6, para. c of the GDPR applies as a legal basis. (4) Vital interests In cases where the essential interests of the data subject or another natural person necessitate processing of personal data, Art. 6, para. d of the GDPR applies as a legal basis. (5) Entitled interests If processing is necessary for protection of a legitimate interest of our company or a third party and said interest does not override the interests, basic rights and basic liberties of the data subject, Art. 6, para. f of the GDPR applies as a legal basis for the processing. Storage period and data deletion The personal data of the data subject is deleted or blocked as soon as the purpose of storage is no longer provided. Storage beyond that time can also take place if required by European or national legislation in European Union regulations, statutes or other requirements to which the responsible party is subject. Blocking (“limitation”) or deletion of the data also takes place if a storage period prescribed by the indicated standards has expired, unless continued storage of the data is necessary for conclusion or fulfilment of a contract. Possibility of objection The collection of data for preparation of the website and the storage of data in log files are necessary for operation of the internet site. Consequently, there is no possibility of objection on the part of the user. Handling of personal data We would like to inform you about how we handle personal data with the use of this website. If nothing different is described in the paragraphs below, the legal basis for the handling of your personal data arises from the necessity of handling for the provision of the functionalities on this website requested by you (Art. 6(1)(b) General Data Protection Regulation). Accessing the website Use of the website When you call up our website, your browser transfers certain data to our web server in order to provide you with the information that you requested. In order to enable your visit to the website, the following data is collected, stored temporarily and used: - IP address - Date and time of the request - Time zone difference from Greenwich Mean Time (GMT) - Contents of the request (concrete page) - Operating system and its access status / HTTPS status code - Amount of data transmitted - Website from which the request to our website comes - Websites called up by the user of our website - Browser, language and version of the browser software Furthermore, we store the data for a limited time to protect our legitimate interests in order to be able to deduce personal data in case of impermissible access or attempts to access local servers (Art. 6(1)(f) General Data Protection Regulation). Use of cookies What cookies are We use “cookies” on this website. Cookies are small text files for your browser which are placed in the memory of your end device. Cookies store certain information (e.g. your preferred language or page settings) which can be sent to us by your browser on a return visit of our website (depending on the life of the cookie). Which cookies we use We differentiate between two categories of cookies: (1) technically necessary (function-related) cookies without which the functionality of our website and the provision of services would be limited for users of the website and (2) optional cookies for website analysis and marketing purposes. Basically, you can change the settings in your browser so that you are informed when cookies are set and decide whether to accept the cookies individually or to reject acceptance of cookies for specific cases or in general. Non-acceptance of cookies can limit the functionality of our website. We use the following optional cookies on this website: Web analysis with Google Analytics The purpose of the processing of this cookie is the issuance of a randomly generated ID for your device with which we recognise your device on your next visit. These cookies are stored for 6 months. Details about the website analysis are provided in the relevant chapter below. Subject to your consent We only use these optional cookies with your prior consent (Art. 6(1)(a) of the General Data Protection Regulation). If you are visiting our website for the first time, a banner appearing on our website requests your consent to the use of optional cookies. If you provide our consent, we store a cookie on your computer and the banner is no longer displayed for the life of the cookie. Afterwards, or if you actively delete this cookie beforehand, the banner will appear again on your next visit to our website in order to obtain your consent again. How you prevent the use of cookies Of course, you can also use our website entirely without cookies. You can configure or deactivate cookies in the settings of your browser at any time. However, this can result in limitations of the functions or user-friendliness of our offering. You can reject the use of optional cookies at any time by utilising the appropriate rejection possibilities in the table above. Google Analytics On this website, we use Google Analytics, a website analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google analyses your use of this website on our behalf. For this purpose, we use, among other things, cookies which are described in detail in the cookie table above. The information collected by Google about your use of this website (e.g. the referring URL, our pages you have visited, your web browser used for the visit, your language setting, your operating system or screen resolution) is sent to a Google server in the USA, stored and analysed there and the result is provided to use in an anonymised form. In the process, your usage data is not associated with your full IP address. We have activated the IP anonymisation function offered by Google on this website, so that the last octet (type IPv4) or the last 80 bits (type IPv6) of your IP address is/are deleted. Google is certified for EU-US Privacy Shield, so that a reasonable data protection level is established for data at Google in the USA. The legal basis for the evaluation of your data using Google Analytics is a legitimate interest (i.e. interest in the analysis, optimisation and commercial operation of our apps) within the meaning of Art. 6 (1) (f) of the GDPR. You can revoke your prior consent to web analysis at any time by downloading and installing the available browser plug-in from Google or revoking your consent as indicated in the table above, wherein an opt-out cookie is placed. Both possibilities prevent web analysis as long as you are using a browser on which you have installed the opt-out cookie and as long as you do not delete the opt-out cookie. For further information about Google Analytics, refer to the Google Analytics terms of use, the security and data protection principles of Google and the Google data privacy policy. Google reCAPTCHA On this website, we use reCAPTCHA, a Catcha service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). reCAPTCHA is used to differentiate whether an entry is made by a human or misuse has taken place with automated processing by a machine. The query made in this respect includes transmission of your IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and subsequent analysis there. The legal basis for the evaluation of your data by reCAPTCHA is our legitimate interest in the correctness of data (e.g. for prevention of automatic registrations or orders) (Art. 6, para. f of the GDPR). The collection of data for preparation of the website and the storage of data in log files are necessary for avoidance of bots and the commercial operation of our online offering. There is no possibility of objection on the part of the user. Google is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id= a2zt000000001L5AAI&status=Active). For further information about Google reCAPTCHA and the Google data privacy policy, use the following links: www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html Use of contact forms Personal data in the contact forms is processed exclusively for the purpose of establishing contact. In this connection, you have the possibility of providing us with the following information, in particular: - First and last name, title - Country - Contact details (e.g. email address, telephone number) - Message We collect, process and use the information disclosed by you via the contact form exclusively for the handling of your concrete matter. There is no transfer of data to third parties in this connection. The legal basis for the transfer data is the content given on registration in accordance with Art. 6, para. a of the GDPR. The legal basis for the processing of data transferred by sending an email is Art. 6, para. f of the GDPR. The intent of the email contact is the conclusion of a contract, so Art. 6, para. b of the GDPR is also a legal basis for the processing. We use data for this purpose until the respective conversation with you is finished. The conversation is finished when it can be assumed based on the circumstances that the relevant matter has been concluded. The user has the possibility to revoke their consent to the processing of their personal data at any time. If the user contacts us via email, they can reject the storage of their personal data at any time. In such cases, the conversation cannot continue. Registration on our website We offer users the possibility of registration with specification of personal data in order to be able to access certain content and services of our web offering. In the process, the following data is entered in an input mask and transmitted to us and stored: - All fields of the forms - Operating system of the user - Browser of the user - Name - IP address - Date/time of registration This data is stored in the Typo3 databases and then sent via email. In the further registration process, the user's consent to processing of their data is obtained. The legal basis for the processing of data is the user’s content in accordance with Art. 6, para. a of the GDPR. Transfer of the data to third parties does not take place. The data is deleted as soon as it is no longer need to achieve the purpose of its collection. Rejection of advertising If you object to advertising purposes, we will place your personal data (name, address, telephone number, fax number, email address) in a blocked list. In the process, we ensure that no undesired advertisements are sent to you. The legal basis is a legitimate interest in accordance with Art. 6, para. f of the GDPR, wherein the legitimate interest is that we fulfil our duties from your rejection of advertisements. The data is only stored for this purpose until you have asserted your right to deletion in accordance with Art. 16 of the GDPR. External services and content on our website We incorporate external services or content in our website. If you use such services or if third-party content is shown to you, data is exchanged between you and the respective provider for technical reasons. In addition, the provider of the respective service or content may process your data for other internal purposes. Services or content of providers who process known data for internal purposes have been configured in all conscious so that communication for other purposes than representation of contents or services on our website are omitted and communication only takes place if you actively decide to use said services. However, since we have no influence on the data collected by third parties and the processing thereof, we cannot provide any binding information about the purpose and scope of the processing of your data. For further information about the purpose and scope of the collection and processing of your data, therefore, please refer to the data protection information of the respective provider of the services or content integrated by us who is responsible according to data protection law: - YouTube (videos) - Google Maps 1.5.9 BootstrapCDN (MaxCDN) We use Bootstrap technology on our web pages for a modern design and to display the available content on a variety of consumer devices. To increase the loading speed of our web pages, we use BootstrapCDN (Content Delivery Network) from MaxCDN to deliver so-called ‘libraries’ (collections of technical instructions) to your browser. The probability is very high that you have already downloaded one of these libraries after visiting another BootstrapCDN website. In this case, your browser is able to access a saved copy in the cache. If your browser does not have a saved copy in its cache or you need to download the file from BootstrapCDN for some other reason, then your IP address will be transferred to MaxCDN, the provider of the BootstrapCDN server, during the connection. The provider is NetDNA, LLC. (MaxCDN), 3575 Cahuenga Blvd West suite 330, Los Angeles, Ca 90068, USA. More information about data protection at NetDNA, LLC. (MaxCDN) is available at: www.maxcdn.com/legal/ 1.5.10 Google Web Fonts Google Web Fonts are implemented on our web pages. These are responsible for displaying typesets. The use of Google Web Fonts accesses a Google server in the USA, provided your browser does not access a local copy in the cache. In this case, you IP address is transferred to Google. If you are simultaneously logged in to Google with your user account while visiting our web pages, Google may possibly also assign your visit to our web pages to your user behaviour. We do not have any influence on this process and do not receive any information from Google about the transferred content. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. More information about data protection at Google Inc. is available at: www.google.com/intl/de/policies/privacy/ 1.5.11 jQuery / ajax.googleapis.com We use the JavaScript jQuery library on our web pages. This library primarily enables a modern design on our web pages. To increase the loading speed of our web pages, we use the Google CDN (Content Delivery Network) to load this library. The probability is very high that you have already downloaded jQuery after visiting another Google CDN website. In this case, your browser is able to access a saved copy in the cache. If your browser does not have a saved copy in its cache or you need to download the file from the Google CDN for some other reason, then your IP address will be transferred to Google, the provider of the Google CDN, during the connection. If you are simultaneously logged in to Google with your user account while visiting our web pages, Google may possibly also assign your visit to our web pages to your user behaviour. Furthermore, additional cookies may be sent by Google to your browser. We do not have any influence on this process and do not receive any information from Google about the transferred content. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. More information about data protection at Google Inc. is available at: www.google.de/policies/privacy/ 1.5.12 CloudFlare Our website loads a web service from CloudFlare Inc., 101 Townsend St, 94107 San Francisco (hereafter: CloudFlare). We use these data to ensure the functionality of our website. In this context, your browser may transfer personal data to CloudFlare. The legal basis for this data processing is provided by Art. 6 Para.1 lit. f GDPR. The justified interest consists of smooth functionality of the website. CloudFlare has certified itself within the scope of the EU-US Privacy Shield agreement (see www.privacyshield.gov/list ). The data shall be deleted as soon as the purpose for their collection has been fulfilled. More information about how transferred data are handled is provided in the CloudFlare data protection declaration: www.cloudflare.com/security-policy/=https://www.google.de/ . You may prevent data collection and processing by CloudFlare by deactivating execution of script code in your browser or by installing a script blocker in your browser (examples are available from www.noscript.net and www.ghostery.com ). Transfer of data for processing on our behalf We use specialised service providers for some of the processing of your data. Our service provided are selected carefully and reviewed regularly. They only process personal data on our behalf and strictly according to our instructions on the basis of corresponding contracts for order processing. The legal basis for the use of these order processors is a legitimate interest as per Art. 6, para. f of the GDPR in pursuit of our commercial purposes, particularly also performance of the services described in this data privacy statement. There does not appear to be any conflicting interest, because we have concluded a contract with the respective contractors in accordance with Art. 28 of the GDPR. Inclusion of order processors for hosting For the purposes of hosting our platform and back-up services, we use order processors and, therefore, personal data that is stored on our platforms is transferred to these order processors. These order processors are digital art media nova gmbh new media & print, an der Eickesmühle 8, 41238 Mönchengladbach. These order processors will store personal data for as long as the data is stored on our platforms on the basis of the purposes defined in this data privacy statement. Inclusion of order processors for administrative, troubleshooting and support services For administrative, troubleshooting and support services, we use digital art media nova gmbh new media & print, an der Eickesmühle 8, 41238 Mönchengladbach, which may also have access to your personal data. Basically, digital art media nova gmbh new media & print, an der Eickesmühle 8, 41238 Mönchengladbach does not store your personal data. This only takes place in cases of exception, i.e. if it should be necessary in connection with the elimination of technical problems. In these cases, storage only takes place in the scope and for the period that is necessary. Processing of data outside of the EU / the EEA Your data is also processed, in part, in countries outside of the European Union ("EU") of the European Economic Area ("EEA"), where the data protection level could be lower than in Europe. In these cases, we also ensure that an adequate data protection level for your data is guaranteed with, for example, contractual agreements with our contractual partners (copy available on request), or we request your express consent. Information about your rights You may have further rights based on applicable data protection law. Right to information You can demand that the responsible party confirms whether personal data related to you is processed by us. If such processing takes place, you can demand the following information from the responsible party: (1) the purposes for which the personal data is processed; (2) the categories of personal data which are processed; (3) the recipients and/or categories of recipients to whom the personal data related to you was disclosed or is still disclosed; (4) the planned period of storage of the personal data related to you or, if concrete information is not possible, criteria for definition of the storage period; (5) the existence of a right to reporting or deletion of the personal data related to you, a right to limitation of the processing by the responsible party or a right of objection to this processing; (6) the existence of a right of appeal with a supervisory authority; (7) all available information about the origin of the data if the personal data is not collected from the data subject; (8) the existence of an automated decision-making process, including profiling in accordance with Art. 1 and 4 of the GDPR and – at least in these cases – meaningful information about the involved logic and the scope and desired effects of such processing for the data subject. You are entitled to demand information about whether the personal data relating to you will be transmitted to a third country or to an international organisation. In this connection, you can demand to be informed about the appropriate guarantees in accordance with Art. 46 of the GDPR in connection with the transmission. Right to reporting You have a right to reporting and/or completion from the responsible party insofar as the processed personal data relating to you is incorrect or incomplete. The responsible party must carry out the reporting immediately. Right to limitation of the processing Under the following conditions, you can demand limitation of the processing of the personal data related to you: (1) if you dispute the correctness of the personal data related to you for a period which makes it possible for the responsible to check the correctness of the personal data; (2) the processing is incorrect and the you reject the deletion of personal data and, instead, demand limitation of the use of the personal data; (3) the responsible party no longer requires the personal data for the purposes of processing, but they require it to assert, exercise or defend legal claims, or (4) if you have submitted an objection to the processing in accordance with Art. 1 of the GDPR and have not specified whether the legitimate reasons of the responsible party override your reasons. If the processing of the personal data related to you was limited, said data – apart from its storage – must only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of other natural or legal persons or for reasons of an important public interest of the Union or a Member State. If the limitation of the processing according to the aforementioned requirements was limited, you will be notified by the responsible party before the limitation is lifted. Right to deletion a) Deletion obligation You can demand that the responsible party deletes the personal data related to you immediately and the responsible party is obligated to delete this data immediately, insofar as one of the following reasons apply: (1) The personal data relating to you is no longer necessary for the purposes for which it was collected or processed in another manner. (2) You rescind your consent which supported the processing according to Art. 6, para. a or Art. 9, para. a of the GDPR, and there is no other legal basis for the processing. (3) In accordance with Art. 1 of the GDPR, you submit an objection to the processing and there are no prioritised legitimate reasons for the processing, or you submit an objection to the processing in accordance with Art. 2 of the GDPR. (4) The personal data related to you was processed wrongfully. (5) The deletion of the personal data related to you is necessary for fulfilment of a legal obligation according to Union law or the law of the Member States to which the responsible party is subject. (6) The personal data related to you was collected in relation to services offered by the information company in accordance with Art. 8, para. 1 of the GDPR. b) Information to third parties If the responsible party has published the personal data related to you and is obligated to delete said data in accordance with Art. 1 of the GDPR, they shall take reasonable measures, including of a technical manner, in consideration of the available technology and implementation costs in order to inform the party responsible for the data processing who processes the personal data that you as the data subject have demanded the deletion of all links to this personal data or copies or replications of said personal data. c) Exceptions The right to deletion does not exist insofar as the processing is necessary (1) to exercise the right to freedom of expression and information; (2) for fulfilment of a legal obligation which necessitates the processing of data according to the law of the Union or the Member States to which the responsible party is subject or for administration of a task which takes place in the public interest or when exercising official authority, which was transferred to the responsible party; (3) for reasons of public interests in the area of public health in accordance with Art. 9, para. h and i, as well as Art. 9, para. 3 of the GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 1 of the GDPR, insofar as the right mention under section a) foreseeably impedes the achievement of goals of this processing or makes it impossible altogether, or (5) to assert, exercise or defend legal claims. Right to notification If you have asserted the right to notification, deletion or limitation of the processing against the responsible party, they are obligated to notify all recipients to whom the personal data related to you was disclosed about this reporting or deletion of data or limitation of processing, unless this proves to be impossible or is associated with a disproportionately high expense. You are entitled to be informed by the responsible party about these recipients. Right to data portability You have the right to receive the personal data related to you which you have provided to the responsible party in a structured and common format which can be read by machine. Furthermore, you have the right transfer this data to a different responsible party without obstruction by the responsible party to whom the personal data was provided, insofar as 1) the processing is based on consent in accordance with Art. 6, para. a of the GDPR or Art. 9, para. a of the GDPR or is based on a contract according to Art. 6, para. b of the GDPR and (2) the processing takes place with the aid of automated processes. When exercising this right, you also have the right to demand that the personal data related to you is transferred from one responsible party directly to another responsible party, insofar as this is technically feasible. Freedoms and rights of other persons must not be interfered with in this connection. The right to data portability does not apply to processing of personal data which is necessary to administer a task which is in the public interest or when exercising official authority, which was transferred to the responsible party. Right to objection You have the right to submit an objection to the processing of the personal data related to you, which takes place on the basis of Art. 6, para. e or f of the GDPR, for reasons arising from your specific situation at any time; this also applies for profiling based on these provisions. The responsible party no longer processes the personal data related to you unless they can prove compelling reasons for the processing, which override your interests, rights and liberties or the processing is necessary to assert, exercise or defend legal claims. If the personal data related to you is processed for the purpose of direct advertising, you have the right to submit an objection to the processing of the personal data related to you for the purposes of said advertising; this also applies to profiling, insofar as it is related to such direct advertising. If you object to the processing for purposes of direct advertising, the personal data related to you will no longer be processed for these purposes. You have the possibility, in connection with use of the services of the information company – irrespective of Directive 2002/58/EC (Data protection directive for electronic communication, the so-called "ePrivacy Directive") – of exercising your right to objection by means of an automated process in which technical specifications are used. Right to revocation of the issued data privacy consent You have the right to revoke your issued data privacy consent at any time. By revoking consent, the legality of the processing which has taken place on the basis of the consent until the revocation remains unaffected. Automated decision in the individual case, including profiling You have the right to a be subject to a decision which is not exclusively based on automated processing – including profiling – which produces legal effects for you or significantly affects you negatively in another manner. This does not apply if the decision (1) is necessary for conclusion or fulfilment of a contract between you and the responsible party, (2) is permissible on the basis of legal regulations of the Union or the Member States to which the responsible party is subject and said legal regulations include reasonable measures for protection of your rights and liberties as well as your legitimated interests or (3) takes place with your express consent. However, these decisions must not apply to certain categories of personal data according to Art. 9, para. 1, GDPR, insofar as Art. 9, para. a ("express consent" or g of the GDPR ("public interest) does not apply and reasonable measures for protection of the rights and liberties and your legitimate interests were taken. With respect to the cases mentioned in (1) and (3), the responsible party takes reasonable measures to protect the rights and liberties as well as your legitimate interests, which includes at least the right to intervene with a person on the part of the responsible party on the presentation of their case and to contest the decision. Right to objection with a supervisory authority Without prejudice to other remedies under administrative law or judicial remedies, you have the right to file an objection with a supervisory authority, particularly in the Member State of your place of residence, your place of work or the location of the suspected violation if it is your view that the processing of the personal data related to you violates the GDPR. The supervisory authority with which the objection was submitted shall notify the complainant about the status and the results of the objection, including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR. Amendment of the data privacy statement We reserve the right to update this data privacy statement from time to time. Updates of this data privacy statement are published on our website. Amendments apply from the time of their publication on our website. Therefore, we recommend visiting this page regularly in order to remain informed about any updates which may have taken place. Date: 24 May 2018
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 11.1 12.1 13.1 13.2 14.1 15.1 16.1 16.2 16.3 16.4 16.5 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 23.2 24.1 25.1 26.1 26.2 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 37.2 38.1 38.2 39.1 40.1 40.2 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 48.2 49.1 50.1 51.1 52.1 53.1 54.1 55.1
Zaštita osobnih podataka Politika zaštite osobnih podataka TEMELJNE INFORMACIJE Fakultet prometnih znanosti Sveučilišta u Zagrebu poštuje privatnost svake osobe čije osobne podatke prikuplja. Fakultet prometnih znanosti, kao Voditelj obrade Vaših podataka obvezuje se na zaštitu Vaših osobnih podataka te jamči da će prikupljanje i čuvanje podataka izvoditi u skladu s odredbama Uredbe EU 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (Opća uredba o zaštiti podataka), Zakona o provedbi Opće uredbe o zaštiti podataka (NN 42/2018) i ostalih propisa koji uređuju predmetno područje, a imaju primjenu u Republici Hrvatskoj. Primjena načela zaštite podataka Fakultet prometnih znanosti posebno pazi na poštivanje načela obrade podataka, stoga obrađuje podatke: - Zakonito – obrada će biti moguća ako je ista dopuštena zakonom i to u granicama koje zakon dopušta. - Pošteno – uvažavajući specifičnosti svakog odnosa, primjenjujući sve adekvatne mjere za zaštitu osobnih podataka i privatnosti općenito te ne sprečavajući ispitanika u ostvarivanju svojih prava. - Transparentno – informirajući ispitanike o obradama osobnih podataka. Od samog prikupljanja podataka kada su ispitanici informirani o svim aspektima obrade podataka pa sve do prestanka obrade podataka ispitanicima se pruža jednostavan i brz pristup vlastitim podacima što uključuje mogućnost uvida i dobivanja kopije u skladu s odredbama Uredbe. Određene informacije mogu se ograničiti samo kada je to zahtijevano zakonom ili kada je to nužno za zaštitu trećih osoba. - Uz ograničenje svrhe – obrađujući osobne podatke u one svrhe u koji su prikupljeni a u druge svrhe ako su za to ispunjeni uvjeti iz Uredbe. - Uz ograničenje pohrane – pohranjujući podatke u obliku koji omogućuje identifikaciju ispitanika samo onoliko dugo koliko je potrebno u svrhe radi kojih se osobni podaci obrađuju, a duže samo ako je dopušteno Uredbom ili pozitivnim propisom. - Uz smanjenje količine podataka – obrađujući podatke ako su primjereni, relevantni i ograničeni na ono što je nužno. Posebno se pazi da se ne prikupljaju podaci za koje ne postoji opravdana potreba za obradom. - Vodeći računa o točnosti – vodeći računa o točnosti i ažurnosti podataka i brišući netočne podatke u okviru mogućnosti. - Vodeći računa o cjelovitosti i povjerljivosti – pružajući tehničkim i organizacijskim mjerama odgovarajuću sigurnost osobnih podataka, uključujući zaštitu od neovlaštene ili nezakonite obrade te od slučajnog gubitka, uništenja ili oštećenja primjenom odgovarajućih tehničkih ili organizacijskih mjera. Vaše osobne podatke obrađivat ćemo samo na temelju zakonske obveze, radi ispunjenja ugovorne obveze, Vaše privole ili druge legitimne osnove. Prikupljene osobne podatke obrađujemo uz obaveznu primjenu odgovarajućih pravnih, tehničkih i organizacijskih mjera sigurnosti kako bismo spriječili svaku neovlaštenu obradu podataka. Pristup Vašim osobnim podacima ograničen je samo na one zaposlenike kojima su te informacije potrebne. Prikupljamo samo one podatke koji su nužni za predmetnu obradu te jamčimo da podaci koji su prikupljeni za jednu svrhu neće se koristiti ni za jednu drugu svrhu ili na način koji nije u skladu s odobrenom svrhom. Za svrhu obrade koja se ne provodi temeljem zakonske osnove ili ugovora tražit ćemo od Vas posebnu privolu. Za izvršavanje određenih usluga Fakultet je ovlastio treće osobe – izvršitelje obrade, kojima dostavlja Vaše podatke u svrhu obavljanja ugovorenih usluga. S izvršiteljima obrade Fakultet sklapa ugovor u pogledu njihovih ovlasti i obveza kod obrade osobnih podataka, povjerljivosti ustupljenih podataka, a sve sukladno zahtjevima Uredbe i pozitivnim propisima. Razdoblje čuvanja podataka Fakultet će Vaše osobne podatke čuvati samo onoliko koliko je potrebno kako bi se izvršila ugovorna ili zakonska obveza ili legitimni interes, osim u slučaju obrade osobnih podataka na temelju privole, kada u trenutku povlačenja Vaše privole prestaje obrada. Privolu možete povući u svakom trenutku slanjem zahtjeva na e-adresu Službenika za zaštitu osobnih podataka Fakulteta prometnih znanosti (sluzbenik-za-zastitu-podataka@fpz.hr). Napominjemo da povlačenje privole ne utječe na zakonitost obrade temeljene na privoli prije njezina povlačenja. Ostvarivanje prava ispitanika Svaki ispitanik ima pravo da u svakom trenutku od voditelja obrade može zatražiti pristup svojim osobnim podacima, njihov ispravak ili dopunu, brisanje (ukoliko ne postoje opravdani razlozi za čuvanje podataka), ograničavanje njihove obrade (primjerice kada osporavate točnost podataka, sve dok ne provjerimo njihovu točnost) kao i pravo na povlačenje suglasnosti za obradu podataka. Navedena prava ostvaruju se podnošenjem zahtjeva na e-adresu Službenika za zaštitu osobnih podataka Fakulteta prometnih znanosti (sluzbenik-za-zastitu-podataka@fpz.hr). Obrada osobnih podataka kandidata za zapošljavanje Fakultet prometnih znanosti u svojstvu voditelja obrade prikuplja i obrađuje osobne podatke kandidata za zapošljavanje na otvorena radna mjesta na Fakultetu prometnih znanosti u sklopu postupka selekcije te u svrhu sklapanja i izvršavanja ugovora o radu s kandidatima, ovisno o rezultatima selekcijskog postupka. Fakultet prometnih znanosti ima legitimni interes za zapošljavanje onih radnika koji svojim znanjem, vještinama i osobnošću najbolje odgovaraju potrebama pojedinih radnih mjesta na Fakultetu. Radi ostvarivanja tog legitimnog interesa, Fakultet provodi selekcijske postupke vezane za izbor kandidata koji su se prijavili na objavljeni natječaj za posao. Tijekom selekcijskog postupka, a kako bi provjerio sposobnost i znanja kandidata te utvrdio koji od kandidata zadovoljavaju sve postavljene zahtjeve pojedinog radnog mjesta, Fakultet prometnih znanosti od kandidata prikuplja i obrađuje samo i isključivo one kategorije i vrste osobnih podataka koje su potrebne za provedbu selekcijskog postupka: - opće podatke o kandidatu (ime i prezime, OIB, datum rođenja, adresa prebivališta/boravišta, broj mobitela, e-mail adresa), - podatke o stečenom obrazovanju (stečeno zvanje i stručna sprema, naziv završene ustanove u kojoj je stečeno zvanje i stručna sprema, period trajanja obrazovanja), - podatke o prethodnom poslodavcu (tvrtka prethodnog poslodavca, naziv i opis radnog mjesta, razdoblje rada kod prethodnog poslodavca), - podatke o stažu, - dokaze o stečenim kvalifikacijama i znanjima (stečene diplome, certifikati i potvrde kojima kandidat potvrđuje svoje stručne i druge kompetencije koje je naveo u svojoj prijavi na natječaj), - uvjerenje nadležnog suda da se protiv kandidata ne vodi kazneni postupak i da nije kažnjavan,v - podatke o preporukama koje je kandidat naveo u svojoj prijavi, - dokumentacija koju kandidat dostavi s osnove prednosti pri zapošljavanju, - podatke o rezultatima provedenih testiranja kandidata. Vaši osobni podaci su nam potrebni radi utvrđivanja ispunjavate li uvjete raspisanog natječaja za slobodno radno mjesto. Ako nam ne pružite osobne podatke ili to ne učinite u mjeri u kojoj su nam ti podaci nužni za utvrđivanje ispunjavate li uvjete raspisanog natječaja, nećemo biti u mogućnosti uključiti Vas u raspisani natječaj. Vaši osobni podaci otkrivaju se zaposlenicima unutar kadrovske službe te voditeljima organizacijskih jedinica za koje podnosite zamolbu za zaposlenje, te zaposlenicima koji su u sastavu povjerenstva koje odlučuje o selekciji kandidata. Vaše osobne podatke možemo dostaviti i vanjskim primateljima, tj. fizičkim i pravnim osobama koje su s nama u poslovnom odnosu u vezi sa provođenjem postupka zapošljavanja odnosno provođenja testiranja kandidata. Za cijelo vrijeme njihove obrade osobni podaci kandidata tretiraju se kao poslovna tajna te se obrađuju uz primjenu adekvatnih tehničkih i organizacijskih mjera kojima se osigurava njihova zaštita. Podatke kandidata za posao koji nisu prošli selekcijski postupak brišu se, odnosno vraćaju se, nakon što proteknu rokovi za pravne lijekove po provedenom natječaju, osim u slučaju kada ih, uz izričitu privolu kandidata, zadržavamo u svojoj bazi podataka radi eventualnog budućeg zaposlenja. Ukoliko ne želite da čuvamo Vaše podatke, ističemo da u svakom trenutku možete povući svoj pristanak za obradu osobnih podataka u kojem slučaju ćemo izbrisati odnosno uništiti Vaše osobne podatke. Ukoliko Fakultet prometnih znanosti s kandidatom sklopi ugovor o radu, od Vas ćemo zatražiti i druge kategorije osobnih podataka koje smo dužni obrađivati sukladno zakonskim propisima a i koji su navedeni u našem pravilniku o radu, a isto u svrhu ostvarivanja prava iz radnog odnosa i radi poštivanja naše pravne obveze kao poslodavca. Ističemo kako Vi imate pravo na pristup svojim podacima, pravo na ispravak osobnih podataka (u slučaju da su pohranjeni Vaši osobni podaci netočni ili nepotpuni, imate pravo zatražiti ispravak ili nadopunu), pravo na brisanje osobnih podataka, pravo prigovora na obrade osobnih podataka temeljene na legitimnom interesu voditelja obrade, pravo na ograničenje obrade. Ako smatrate da obrada Vaših osobnih podataka nije u skladu s propisima o zaštiti osobnih podataka, imate pravo podnijeti pritužbu Agenciji za zaštitu osobnih podataka (https://www.azop.hr) Ne dovodeći u pitanje Vaše pravo na podnošenje pritužbe nadzornom tijelu predlažemo Vam da se prije podnošenja pritužbe obratite našem službeniku za zaštitu podataka radi razjašnjenja spornih pitanja. Također, za ostvarivanje svih svojih prava u vezi s obradom osobnih podataka možete se obratiti našem službeniku za zaštitu podataka putem navedenih kontaktnih podataka. Postupanje u slučaju povrede osobnih podataka Fakultet prometnih znanosti kao voditelj obrade osigurava da slučaju povrede osobnih podataka, bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvješćuje nadležno nadzorno tijelo o povredi osobnih podataka, osim ako nije vjerojatno da će povreda osobnih podataka prouzročiti rizik za prava i slobode pojedinaca. Izvješće koje se dostavlja nadzornom tijelu sadržava sve informacije sukladno Uredbi. U slučaju povrede osobnih podataka koje će vjerojatno prouzročiti visok rizik za prava i slobode pojedinaca, Fakultet prometnih znanosti bez nepotrebnog odgađanja obavješćuje ispitanika o povredi osobnih podataka. Ispitanike se neće obavijestiti u slučajevima kada Uredba propisuje da isto nije obvezno. Službenik za zaštitu podataka Službenikom za zaštitu podataka Fakulteta prometnih znanosti imenovana je Željka Ohnjec, dipl. iur. Adresa: Fakultet prometnih znanosti Sveučilišta u Zagrebu, Vukelićeva 4, 10 000 Zagreb. e-adresa: sluzbenik-za-zastitu-podataka@fpz.hr kontakt broj: 01/2380 358 - Odluka o imenovanju sluzbenika za zaštitu podataka - Uredba (EU) 2016/679 Europskog parlamenta i Vijeća: http://eur-lex.europa.eu/legal-content/HR/TXT/PDF/?uri=CELEX:32016R0679&from=EN