https___resources.vainu.io_database-privacy-statement_.xml
http___fpz.unizg.hr_o-fakultetu.asp_m_zastita-osobnih-podataka_1.xml
1.1 2.1 2.2 3.1 4.1 4.2 5.1 6.1 6.2 6.3 6.4 7.1 8.1 8.2 8.3 8.4 8.5 9.1 10.1 10.2 11.1 12.1 12.2 12.3 13.1 13.2 13.3 14.1 15.1 15.2 16.1 16.2 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 29.2 30.1 31.1 32.1 33.1 33.2 33.3 34.1 34.2 35.1 36.1 36.2 37.1 38.1 39.1 40.1 40.2 40.3 40.4 41.1 41.2 42.1 42.2 42.3 42.4 42.5 43.1 43.2 43.3 44.1 44.2 44.3 45.1 46.1 46.2 46.3 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 55.2 56.1 57.1 58.1 58.2 59.1 59.2 60.1 61.1 61.2 62.1 63.1 64.1 65.1 66.1 67.1 68.1 68.2 69.1 69.2 69.3 69.4 69.5 69.6 70.1 71.1 72.1 72.2 73.1 73.2 73.3 74.1 74.2 74.3 74.4
VAINU DATABASE PRIVACY STATEMENT Privacy is important to us, and we are committed to protecting personal information that is processed in our database product and service (hereinafter referred to as “Service”). This database privacy statement explains our purposes and legal basis for what information we may collect about data subjects, sources of information and how the information is processed. What personal data is included in the Service? Most of the data processed in the Service consists of information about legal entities, such as Companies key figures, the area of business and general contact details. However, a limited amount of data is collected and processed which may be linked to the name of natural persons based on their public role in in the Company’s business, which has been publicly disclosed in their role as the Company’s representative or is otherwise available and freely accessible in the public domain. How is the data collected? The Service is a software-based database, using intelligent data collection technology and machine learning algorithms. The software searches open and public data on a constant basis, extracts, and indexes the data and populates the fields companies with the help of named-entity recognition. The collected data consists of data in the public domain, such as public officials, Patent and Registration offices, company websites, press releases and other source material made available to the public by the Company or its representatives. The Service may also provide links to external websites, where Company related information is published. How is personal data processed? Vainu processes only publicly available personal data that is directly related to the person’s role in the Company. Our Service is designed not collect or process any personal data in the Service in excess of what is directly relative to the Company information. Processing is limited to have a minimal privacy impact and the processing of personal data is not extended beyond what the data subjects could reasonably expect (names and contact details of Company representatives, as available in the original public source). Our intelligent data collection technology constantly re-searches and updates the information we collect and process, which provides that no inaccurate or obsolete personal data related to Companies is stored in the Service beyond a reasonable time. If the original source is updated or removed, the personal data in the Service will also be updated or removed after a short period of time. How do we ensure the legitimacy of our personal data processing? The processing of the limited Company related personal data in our Service is based on our legitimate interest to freely conduct business and maintain our Service in accordance with European Union law and national laws. We limit the processing to persons holding a role in public life such as business-people, members of regulated professions and personal data available in the public domain. Who owns the information? Vainu operates an intelligent database reflecting information available in public sources and the internet. While we index and store data, we control what data is gathered and how we process it. Our processing is uniquely filtering data that is already available, and we do not use it for any other purpose than making it further available to our customers. When we make the data accessible to our customer, the customer may use our tool to browse through the data we have indexed, and they may choose to import the data into their systems. In doing so, our customers assume control over the data and process personal data in accordance with their privacy policies. We require our customers to commit to the lawful use of the data provided by us Detailed information about the Vainu Database Record The name of the personal data record is Database Record of Vainu (“Record”). Data subjects of the Record are decision-makers of legal entities, business-people, members of regulated professions and other similar data subjects that are considered to fulfill a role in public life and/or may be in the public interest. Vainu. io Software Oy Pohjoinen Makasiinikatu 3-5 FI-00130 Helsinki Finland Contact Us https://company.vainu.io/#contact-us Arkadiankatu 6 D FI-00100 Helsinki Finland Data Privacy Officer: Saara Somersalmi Arkadiankatu 6 D, 00100 Helsinki, Finland saara@vainu.io Processing of a limited amount of personal data is based on our legitimate interest to freely conduct business and maintain our Service in accordance with Union law and national laws. Processing is limited to persons holding a role in public life such as business-people, members of regulated professions and personal data available in the public domain or which is in the public interest. In accordance with the statement by the Article 29 Working Party (an independent advisory body established under the EU’s Data Protection Directive (95/46/EC)), business-people and members of the (regulated) professions can usually be considered to fulfill a role in public life. Our use, processing and maintaining such public data in the database record is limited to have a minimal privacy impact, and processing of personal data is not extended to beyond what the data subjects could reasonably expect during the period that the data subject is in the position at the legal entity, and the same information is available and freely accessible by the public in the public domain. Personal data in the Vainu database record may be processed for following purposes: Vainu collects personal data primarily from open and public data of legal entities, which is available in the public domain or has been made available to the public by the legal entities. Regular sources include national Patent and Registration offices (or their equivalents), public officials, company websites, press releases and other source material made available to the public by the Company or its representatives. All personal data in our database is linked to the source where it was acquired, and our technology is designed to update the personal data based on that source. The Record contains a limited amount of personal data which is directly linked to the data subjects’ role in the legal entity. Other personal data is not included in the Record. The Register may contain the following personal data in connection with the legal entity: Service users and Vainu’s customers have access to the personal data in relation to the Companies they search for, where such data is available in the Service. A limited amount of Company information and relative personal data is also available through the search engine on our website, which may be used without a customer relationship with Vainu. All personal data that is available to the users and customers of our Service is freely accessible in the public domain, or otherwise available to the public in the same manner and similar format as is provided in our Service. We may use third parties in providing the Service. The data that Vainu collects from data subjects is not transferred to, or stored at, a destination outside the European Economic Area (“EEA”). However, our Service may be used by our customers and other users at a location outside the EEA. As part of the use of the Service, our customers access the database through searches and filters and choose to import data from our database into their systems. We require our customers to commit to the lawful use of the data provided by us, including the lawfulness of any data transfer. By using the Service our customers and users independently evaluate whether they choose to collect and process the personal data which is available in the Service for its purposes. Personal Data may be disclosed to authorities in cases required by the mandatory local legislation or court order. Data may also be disclosed if the disclosure is permitted by applicable law or regulation. Personal data will be stored in the database only as long as and only to the extent that is necessary to provide timely and accurate information on Company decision-makers as part of providing information on Companies included in the Vainu database, as designed in the Service. When such requirements no longer exist, personal data will be deleted. The requirement is deemed to exist during the period that the data subject is in the position of the legal entity, which has been recorded in the original source. The retention periods for personal data in Vainu have been designed to reflect the retention period of the original data source. The database is automatically updated on a regular basis, and personal data will not be stored beyond a reasonable time after it has been removed from the original source. The information security of personal data and processing and confidentiality, integrity and usability are ensured with appropriate technical and administrative measures in accordance with Vainu's information security principles. The employees of Vainu have bound themselves to comply with professional secrecy and concealment regarding the information they receive during the processing of personal information. Privacy and security guidelines have been communicated to employees and strictly enforce privacy safeguards within the company. All databases and information systems are accessible only with individual and personal login information (username and password) granted by Vainu. The rights to access the master database are restricted, so that the information can only be viewed and processed by persons who are legally admitted and required to do so. The customers and users of our Service may only have access to the personal data which is made available in the Service by Vainu. You as a Data Subject whose personal data is governed by the EU General Data Protection Regulation, have the certain rights and this section of the database privacy notice is intended to provide to you information on your rights. The EU General Data Protection Regulation grants you the below-detailed rights concerning your personal data in the extent that it has been recorded into the Database Record. In the use of your rights, we emphasize that the nature of our service is to collect, index and filter public data, and all personal data in our Record is obtained from other public sources. If the data is modified or removed from the original source, it will also be modified or erased from our Service shortly. For any of the below detailed rights, please submit all requests and inquiries on data protection primarily to the following address privacy@vainu.io. Information and access to personal data The data subject has right to receive information; what data is being collected, the purposes of the processing for which the personal data are intended as well as the legal basis for the processing and the recipients or categories of recipients of the personal dataif any. If your data is included in the Vainu database, its processing shall be governed by this Vainu Database Record. Right of access by the data subject The data subject has the right to obtain from Vainu confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data.. Vainu will confirm to you if your data is included in our Services, what is the data identifiable to you that we have gathered, and provide you with information about the original source of your personal data. Right to rectification The data subject shall have the right to obtain from Vainu, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. We will automatically update the personal data we gather about you when you change the information in the source of the data. Right to erasure The data subject has the right to request erasure of personal data in the Register, if the legal basis for processing of personal data has ceased. Despite the request for erasure, the data may not be erased if there is a legal basis for maintaining the data, or if Vainu is obliged to process personal data for the establishment, exercise or defense of legal claims. We will automatically delete the personal data we gather about you, when you delete the information in the source of the data. Some of the data may be of such nature that it can be preserved based on an exemption of the General Data Protection Regulation or related jurisprudence, such as personal data whose availability is in the public interest. Right to lodge a complaint You may also lodge a complaint to the supervisory authority, if you consider that the processing of personal data violates the relevant data protection legislation in force. The national supervisory authority in Finland is Data Protection Ombubsman (tietosuoja@om.fi). Vainu has the right to change or update this Database Privacy Statement at any time, and we recommend that you will read it from time to time. Currently, a user can be asked for these scopes when connecting Google Account to Vainu: https://www.googleapis.com/auth/gmail.readonly https://www.googleapis.com/auth/spreadsheets Explanations of each scope and their usages: https://www.googleapis.com/auth/gmail.readonly Gmail integration enables to user to create a target group based on email contacts. Gmail integration is optional and the process is started when the user requests it from the user interface. Only email sender domains are scanned from the email and no exact email data is saved to Vainu databases. This domain is matched to a company and if a company is found this company is saved to users Gmail target group in Vainu. A user can follow triggers/events by companies in this target group. This target group data can only be accessed by the user when he/she is logged in to Vainu. New email domains are scanned periodically from users email. A user can remove and delete the target group at any time from the user interface. https://www.googleapis.com/auth/spreadsheets Google Spreadsheet scope is used to read and write back company related data to a user-defined spreadsheet. The authorization is prompted each time user initiates the process from Vainu and OAuth 2.0 code flow is then used to get access/refresh tokens for a single run. Only spreadsheet scope is requested for these tokens. Spreadsheet data is accessed via API calls using the official Python API client. A sheet is assumed to contain arbitrary company information (such as company names, business ids, addresses, domains, etc.) and this data is matched against Vainu's database of companies. Matched data is then parsed and written back to the sheet using the API client. Company data read from the sheet is only used at runtime and then discarded - no business information on the sheet is saved to our database. Sheet metadata is however stored for handling the process and allowing easier feedback for the user. This metadata includes sheet ID, name, ranges and column names. No information about the process, or spreadsheet contents is shared between users.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 11.1 12.1 13.1 13.2 14.1 15.1 16.1 16.2 16.3 16.4 16.5 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 23.2 24.1 25.1 26.1 26.2 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 37.2 38.1 38.2 39.1 40.1 40.2 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 48.2 49.1 50.1 51.1 52.1 53.1 54.1 55.1
Zaštita osobnih podataka Politika zaštite osobnih podataka TEMELJNE INFORMACIJE Fakultet prometnih znanosti Sveučilišta u Zagrebu poštuje privatnost svake osobe čije osobne podatke prikuplja. Fakultet prometnih znanosti, kao Voditelj obrade Vaših podataka obvezuje se na zaštitu Vaših osobnih podataka te jamči da će prikupljanje i čuvanje podataka izvoditi u skladu s odredbama Uredbe EU 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (Opća uredba o zaštiti podataka), Zakona o provedbi Opće uredbe o zaštiti podataka (NN 42/2018) i ostalih propisa koji uređuju predmetno područje, a imaju primjenu u Republici Hrvatskoj. Primjena načela zaštite podataka Fakultet prometnih znanosti posebno pazi na poštivanje načela obrade podataka, stoga obrađuje podatke: - Zakonito – obrada će biti moguća ako je ista dopuštena zakonom i to u granicama koje zakon dopušta. - Pošteno – uvažavajući specifičnosti svakog odnosa, primjenjujući sve adekvatne mjere za zaštitu osobnih podataka i privatnosti općenito te ne sprečavajući ispitanika u ostvarivanju svojih prava. - Transparentno – informirajući ispitanike o obradama osobnih podataka. Od samog prikupljanja podataka kada su ispitanici informirani o svim aspektima obrade podataka pa sve do prestanka obrade podataka ispitanicima se pruža jednostavan i brz pristup vlastitim podacima što uključuje mogućnost uvida i dobivanja kopije u skladu s odredbama Uredbe. Određene informacije mogu se ograničiti samo kada je to zahtijevano zakonom ili kada je to nužno za zaštitu trećih osoba. - Uz ograničenje svrhe – obrađujući osobne podatke u one svrhe u koji su prikupljeni a u druge svrhe ako su za to ispunjeni uvjeti iz Uredbe. - Uz ograničenje pohrane – pohranjujući podatke u obliku koji omogućuje identifikaciju ispitanika samo onoliko dugo koliko je potrebno u svrhe radi kojih se osobni podaci obrađuju, a duže samo ako je dopušteno Uredbom ili pozitivnim propisom. - Uz smanjenje količine podataka – obrađujući podatke ako su primjereni, relevantni i ograničeni na ono što je nužno. Posebno se pazi da se ne prikupljaju podaci za koje ne postoji opravdana potreba za obradom. - Vodeći računa o točnosti – vodeći računa o točnosti i ažurnosti podataka i brišući netočne podatke u okviru mogućnosti. - Vodeći računa o cjelovitosti i povjerljivosti – pružajući tehničkim i organizacijskim mjerama odgovarajuću sigurnost osobnih podataka, uključujući zaštitu od neovlaštene ili nezakonite obrade te od slučajnog gubitka, uništenja ili oštećenja primjenom odgovarajućih tehničkih ili organizacijskih mjera. Vaše osobne podatke obrađivat ćemo samo na temelju zakonske obveze, radi ispunjenja ugovorne obveze, Vaše privole ili druge legitimne osnove. Prikupljene osobne podatke obrađujemo uz obaveznu primjenu odgovarajućih pravnih, tehničkih i organizacijskih mjera sigurnosti kako bismo spriječili svaku neovlaštenu obradu podataka. Pristup Vašim osobnim podacima ograničen je samo na one zaposlenike kojima su te informacije potrebne. Prikupljamo samo one podatke koji su nužni za predmetnu obradu te jamčimo da podaci koji su prikupljeni za jednu svrhu neće se koristiti ni za jednu drugu svrhu ili na način koji nije u skladu s odobrenom svrhom. Za svrhu obrade koja se ne provodi temeljem zakonske osnove ili ugovora tražit ćemo od Vas posebnu privolu. Za izvršavanje određenih usluga Fakultet je ovlastio treće osobe – izvršitelje obrade, kojima dostavlja Vaše podatke u svrhu obavljanja ugovorenih usluga. S izvršiteljima obrade Fakultet sklapa ugovor u pogledu njihovih ovlasti i obveza kod obrade osobnih podataka, povjerljivosti ustupljenih podataka, a sve sukladno zahtjevima Uredbe i pozitivnim propisima. Razdoblje čuvanja podataka Fakultet će Vaše osobne podatke čuvati samo onoliko koliko je potrebno kako bi se izvršila ugovorna ili zakonska obveza ili legitimni interes, osim u slučaju obrade osobnih podataka na temelju privole, kada u trenutku povlačenja Vaše privole prestaje obrada. Privolu možete povući u svakom trenutku slanjem zahtjeva na e-adresu Službenika za zaštitu osobnih podataka Fakulteta prometnih znanosti (sluzbenik-za-zastitu-podataka@fpz.hr). Napominjemo da povlačenje privole ne utječe na zakonitost obrade temeljene na privoli prije njezina povlačenja. Ostvarivanje prava ispitanika Svaki ispitanik ima pravo da u svakom trenutku od voditelja obrade može zatražiti pristup svojim osobnim podacima, njihov ispravak ili dopunu, brisanje (ukoliko ne postoje opravdani razlozi za čuvanje podataka), ograničavanje njihove obrade (primjerice kada osporavate točnost podataka, sve dok ne provjerimo njihovu točnost) kao i pravo na povlačenje suglasnosti za obradu podataka. Navedena prava ostvaruju se podnošenjem zahtjeva na e-adresu Službenika za zaštitu osobnih podataka Fakulteta prometnih znanosti (sluzbenik-za-zastitu-podataka@fpz.hr). Obrada osobnih podataka kandidata za zapošljavanje Fakultet prometnih znanosti u svojstvu voditelja obrade prikuplja i obrađuje osobne podatke kandidata za zapošljavanje na otvorena radna mjesta na Fakultetu prometnih znanosti u sklopu postupka selekcije te u svrhu sklapanja i izvršavanja ugovora o radu s kandidatima, ovisno o rezultatima selekcijskog postupka. Fakultet prometnih znanosti ima legitimni interes za zapošljavanje onih radnika koji svojim znanjem, vještinama i osobnošću najbolje odgovaraju potrebama pojedinih radnih mjesta na Fakultetu. Radi ostvarivanja tog legitimnog interesa, Fakultet provodi selekcijske postupke vezane za izbor kandidata koji su se prijavili na objavljeni natječaj za posao. Tijekom selekcijskog postupka, a kako bi provjerio sposobnost i znanja kandidata te utvrdio koji od kandidata zadovoljavaju sve postavljene zahtjeve pojedinog radnog mjesta, Fakultet prometnih znanosti od kandidata prikuplja i obrađuje samo i isključivo one kategorije i vrste osobnih podataka koje su potrebne za provedbu selekcijskog postupka: - opće podatke o kandidatu (ime i prezime, OIB, datum rođenja, adresa prebivališta/boravišta, broj mobitela, e-mail adresa), - podatke o stečenom obrazovanju (stečeno zvanje i stručna sprema, naziv završene ustanove u kojoj je stečeno zvanje i stručna sprema, period trajanja obrazovanja), - podatke o prethodnom poslodavcu (tvrtka prethodnog poslodavca, naziv i opis radnog mjesta, razdoblje rada kod prethodnog poslodavca), - podatke o stažu, - dokaze o stečenim kvalifikacijama i znanjima (stečene diplome, certifikati i potvrde kojima kandidat potvrđuje svoje stručne i druge kompetencije koje je naveo u svojoj prijavi na natječaj), - uvjerenje nadležnog suda da se protiv kandidata ne vodi kazneni postupak i da nije kažnjavan,v - podatke o preporukama koje je kandidat naveo u svojoj prijavi, - dokumentacija koju kandidat dostavi s osnove prednosti pri zapošljavanju, - podatke o rezultatima provedenih testiranja kandidata. Vaši osobni podaci su nam potrebni radi utvrđivanja ispunjavate li uvjete raspisanog natječaja za slobodno radno mjesto. Ako nam ne pružite osobne podatke ili to ne učinite u mjeri u kojoj su nam ti podaci nužni za utvrđivanje ispunjavate li uvjete raspisanog natječaja, nećemo biti u mogućnosti uključiti Vas u raspisani natječaj. Vaši osobni podaci otkrivaju se zaposlenicima unutar kadrovske službe te voditeljima organizacijskih jedinica za koje podnosite zamolbu za zaposlenje, te zaposlenicima koji su u sastavu povjerenstva koje odlučuje o selekciji kandidata. Vaše osobne podatke možemo dostaviti i vanjskim primateljima, tj. fizičkim i pravnim osobama koje su s nama u poslovnom odnosu u vezi sa provođenjem postupka zapošljavanja odnosno provođenja testiranja kandidata. Za cijelo vrijeme njihove obrade osobni podaci kandidata tretiraju se kao poslovna tajna te se obrađuju uz primjenu adekvatnih tehničkih i organizacijskih mjera kojima se osigurava njihova zaštita. Podatke kandidata za posao koji nisu prošli selekcijski postupak brišu se, odnosno vraćaju se, nakon što proteknu rokovi za pravne lijekove po provedenom natječaju, osim u slučaju kada ih, uz izričitu privolu kandidata, zadržavamo u svojoj bazi podataka radi eventualnog budućeg zaposlenja. Ukoliko ne želite da čuvamo Vaše podatke, ističemo da u svakom trenutku možete povući svoj pristanak za obradu osobnih podataka u kojem slučaju ćemo izbrisati odnosno uništiti Vaše osobne podatke. Ukoliko Fakultet prometnih znanosti s kandidatom sklopi ugovor o radu, od Vas ćemo zatražiti i druge kategorije osobnih podataka koje smo dužni obrađivati sukladno zakonskim propisima a i koji su navedeni u našem pravilniku o radu, a isto u svrhu ostvarivanja prava iz radnog odnosa i radi poštivanja naše pravne obveze kao poslodavca. Ističemo kako Vi imate pravo na pristup svojim podacima, pravo na ispravak osobnih podataka (u slučaju da su pohranjeni Vaši osobni podaci netočni ili nepotpuni, imate pravo zatražiti ispravak ili nadopunu), pravo na brisanje osobnih podataka, pravo prigovora na obrade osobnih podataka temeljene na legitimnom interesu voditelja obrade, pravo na ograničenje obrade. Ako smatrate da obrada Vaših osobnih podataka nije u skladu s propisima o zaštiti osobnih podataka, imate pravo podnijeti pritužbu Agenciji za zaštitu osobnih podataka (https://www.azop.hr) Ne dovodeći u pitanje Vaše pravo na podnošenje pritužbe nadzornom tijelu predlažemo Vam da se prije podnošenja pritužbe obratite našem službeniku za zaštitu podataka radi razjašnjenja spornih pitanja. Također, za ostvarivanje svih svojih prava u vezi s obradom osobnih podataka možete se obratiti našem službeniku za zaštitu podataka putem navedenih kontaktnih podataka. Postupanje u slučaju povrede osobnih podataka Fakultet prometnih znanosti kao voditelj obrade osigurava da slučaju povrede osobnih podataka, bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvješćuje nadležno nadzorno tijelo o povredi osobnih podataka, osim ako nije vjerojatno da će povreda osobnih podataka prouzročiti rizik za prava i slobode pojedinaca. Izvješće koje se dostavlja nadzornom tijelu sadržava sve informacije sukladno Uredbi. U slučaju povrede osobnih podataka koje će vjerojatno prouzročiti visok rizik za prava i slobode pojedinaca, Fakultet prometnih znanosti bez nepotrebnog odgađanja obavješćuje ispitanika o povredi osobnih podataka. Ispitanike se neće obavijestiti u slučajevima kada Uredba propisuje da isto nije obvezno. Službenik za zaštitu podataka Službenikom za zaštitu podataka Fakulteta prometnih znanosti imenovana je Željka Ohnjec, dipl. iur. Adresa: Fakultet prometnih znanosti Sveučilišta u Zagrebu, Vukelićeva 4, 10 000 Zagreb. e-adresa: sluzbenik-za-zastitu-podataka@fpz.hr kontakt broj: 01/2380 358 - Odluka o imenovanju sluzbenika za zaštitu podataka - Uredba (EU) 2016/679 Europskog parlamenta i Vijeća: http://eur-lex.europa.eu/legal-content/HR/TXT/PDF/?uri=CELEX:32016R0679&from=EN