http___srp-international.com_index.php_privacy-e.xml
http___gacina-adriaticcharter.hr_gdpr_hr.html_1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 12.2 12.3 13.1 13.2 13.3 14.1 15.1 16.1 16.2 17.1 18.1 18.2 19.1 20.1 21.1 21.2 21.3 21.4 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 29.2 29.3 30.1 31.1 32.1 33.1 34.1 34.2 35.1 35.2 35.3 36.1 37.1 38.1 38.2 39.1 40.1 41.1 41.2 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 48.2 48.3 49.1 50.1 50.2 50.3 51.1 52.1 53.1 54.1 55.1 55.2 56.1 57.1 57.2 58.1 59.1 60.1 61.1 62.1 63.1 64.1 64.2 65.1 66.1 67.1 68.1 68.2 69.1 70.1 70.2 70.3 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 88.1 89.1 89.2 90.1 91.1 92.1 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 109.2 110.1 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 120.2 121.1 122.1 123.1 123.2 124.1 125.1 126.1 126.2 127.1 128.1 128.2 129.1 130.1 131.1 132.1 132.2 133.1 134.1 134.2 135.1 136.1 137.1 138.1 139.1 140.1 141.1 142.1 143.1 144.1 145.1 146.1 146.2 147.1 150.1 151.1
privacy Privacy Statement Controller’s name and address Your contact person as the controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is: SRP Schneider & Partner Ingenieur-Consult GmbH Ruppenweg 24 D-96317 Kronach Commercial Register: Coburg HRB 2082 VAT ID No.: DE 812018330 Managing Directors: Dipl. Ing. Hans-Joachim Brandt Dipl. Ing. (FH) Werner Kuhnlein (hereinafter referred to as "We", "Us" or "Our") Data Protection Officer’s name and address The protection of your personal data is very important to SRP. To express this importance, we have appointed an internal data protection officer to take over these key issues. For all questions regarding data protection and data security at SRP Schneider & Partner Ingenieur-Consult GmbH, please contact our data protection officer directly: Email: This email address is being protected from spambots. You need JavaScript enabled to view it. General information on data processing Scope of the processing of personal data This website’s operators take the protection of your personal data very seriously. In principle, we will only process your personal data to the extent necessary for the performance of our services. Normally, your personal data will only be processed with your consent. An exception applies in those cases where prior consent cannot be obtained for practical reasons or the processing of your personal data is permitted by law. Legal bases for the processing of personal data If we obtain your consent for the processing of personal data, Article 6(1)(a) GDPR shall serve as our legal basis. Article 6(1)(b) GDPR shall serve as our legal basis for the processing of personal data required for the performance of a contract between you and us. This also applies to processing operations necessary to implement pre-contractual measures. Article 6(1)(c) GDPR shall serve as our legal basis for a processing of personal data necessary to fulfil a legal obligation to which we are subject. Article 6(1)(d) GDPR shall serve as our legal basis if your vital interests or those of another natural person render the processing of personal data necessary. Article 6(1)(f) GDPR shall serve as our legal basis for processing that is necessary to protect one of our legitimate interests or those of a third party, and if the your interests, fundamental rights and freedoms do not outweigh the first-mentioned interest. Data erasure and storage duration Your personal data shall be erased or blocked once the purpose of storage ceases to apply. Data may also be stored if this has been stipulated by national or European legislation in the form of EU regulations, laws or other provisions to which we are subject. Data shall also be blocked or erased if a storage period prescribed by the above-mentioned regulations expires, unless there is a need for further storage of the data for the conclusion or performance of a contract. Provision of the website and creation of log files Legal basis for data processing Article 6(1)(f) GDPR is the legal basis for the processing of your personal data within the context of the provision of the website and the creation of log files. Purpose of the data processing Our temporary storage of your personal data is necessary to enable the website to be delivered to your computer. To this end, your personal data shall be stored for the duration of the session. The purpose of storing your personal data in log files is to ensure the website’s functionality. We also use your personal data to optimize the website and to ensure the security of our information technology systems. Your personal data will not be evaluated for marketing purposes in this connection. Our legitimate interest in data processing under Article 6(1)(f) GDPR is also based on these purposes. Storage duration Your personal data shall be erased once it is no longer needed to achieve the purpose for which it was collected. If your personal data is collected for the provision of the website, it shall be erased once the respective session has ended. If your personal data is stored in log files, it shall be erased after seven days at the latest. Objection and rectification possibilities The collection of your personal data for the provision of the website and the storage of your personal data in log files is absolutely necessary for the website’s operation. Consequently, you cannot object to this. Contact form and making contact via e-mail Legal basis for data processing Article 6(1)(f) GDPR is the legal basis for the processing of your personal data transmitted in the event of contact through the contact form or by email. Article 6(1)(b) GDPR constitutes an additional legal basis for processing if the purpose of the contact through the contact form or by email is for the conclusion of a contract. Purpose of the data processing The sole purpose of the processing of your personal data in the event of contact through the contact form or by email is to process the contact. Duration of storage Your personal data shall be erased once it is no longer needed to achieve the purpose for which it was collected. The personal data sent through the contact form or by email shall be erased when the respective exchange with you has ended. The exchange shall be deemed terminated when it can be inferred from the circumstances that the respective issue has been definitively resolved between you and us. Objection and rectification possibilities You may object prospectively at any time to the processing of your personal data in the context of making contact through the contact form or by email. The exchange between you and us cannot be continued in such a case. In this event, all personal data stored in the course of making contact shall be deleted. Direct Marketing Legal basis for data processing The legal basis for the processing of your personal data within the context of direct marketing by post is Article 6(1)(f) GDPR. Purpose of the data processing The purpose of processing your personal data within the context of direct marketing is to promote the marketing of sales of services. Our legitimate interest in data processing under Article 6(1)(f) GDPR is based on these purposes. Duration of storage Your personal data shall be erased once it is no longer needed to achieve the purpose for which it was collected. This shall particularly apply if an objection is lodged. Objection and rectification possibilities You can object prospectively to the processing of your personal data within the context of direct marketing at any time. Assertion of legal defences and legal rights Legal basis for data processing The legal basis for the processing of your personal data within the context of the assertion of legal defences and legal rights is Article 6(1)(f) GDPR. Purpose of the data processing The purpose of processing your personal data within the context of the assertion of legal defences and legal rights is the defence against unjustified claims and the legal enforcement of claims and rights. Our legitimate interest in data processing under Article 6(1)(f) GDPR is based on these purposes. Duration of storage Your personal data shall be erased once it is no longer needed to achieve the purpose for which it was collected. Objection and rectification possibilities The processing of your personal data within the context of the assertion of legal defences and legal rights is absolutely necessary for asserting legal defences and legal rights. Consequently, you cannot object to this. Recipient categories The departments and departments within our companies receive the personal data which they require to fulfil the aforementioned purposes. We also make use of various service providers and transfer your personal data to other trustworthy recipients. These could be, for instance: • Banks; • IT service providers; • Lawyers and courts. Data subject’s rights When we process your personal data, you are a data subject within the meaning of the GDPR, and you have the following rights with respect to us: Right to information You can request from us a confirmation as to whether or not we are processing personal data concerning you. Where that is the case, you can obtain the following information from us: (1) the purposes for which the personal data is being processed; (2) the categories of personal data being processed; (3) the recipients or categories of recipients to whom personal data concerning you has been or will be disclosed; (4) the planned duration of the storage of personal data concerning you or, if specific information in this respect is not possible, the criteria for determining the storage period; (5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of our processing or a right to object to such processing; (6) the existence of a right to lodge a complaint with a supervisory authority; (7) all available information about the origin of the data if the personal data was not collected from you; (8) the existence of automated decision making including profiling in accordance with Article 22(1) and (4) GDPR and, – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you. You have the right to request information as to whether or not personal data concerning you has been transferred to a third country or an international organization. In this context, you may request to be informed of the appropriate safeguards in accordance with Article 46 GDPR in connection with the transmission. Right to rectification You have a right to rectification and/or completion with respect to us if the processed personal data concerning you are inaccurate or incomplete. We are required to immediately effect the rectification. Right to restriction of processing You can request the restriction of the processing of personal data concerning you where one of the following conditions applies: (1) if you dispute the accuracy of the personal data concerning you for a period that enables us to verify the personal data’s accuracy; (2) the processing is unlawful and you oppose the personal data’s erasure and instead request that its use be restricted; (3) we no longer need the personal data for the purposes of processing, but you do need them to establish, exercise or defend legal claims, or (4) if you have objected to the processing pursuant to Article 21(1) GDPR and it is yet to be established whether our legitimate grounds override yours. If the processing of the personal data concerning you has been restricted, this data may only be processed – with the exception of storage – with your consent or for the purpose of establishing, exercising or defending legal claims or protecting the rights of another natural person or legal entity or on the grounds of an important public interest of the Union or a Member State. If processing has been restricted according to the above conditions, we shall notify you before the restriction is lifted. Right to erasure Deletion obligation You have the right to request us to erase personal data concerning you immediately, and we shall be obliged to do so immediately if one of the following reasons applies: (1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed. (2) You withdraw your consent on which the processing under Article 6(1)(a) or Article 9(2)(a) GDPR was based, and there is no other legal basis for processing. (3) You oppose the processing under Article 21 (1) GDPR, and there are no overriding legitimate grounds for the processing or you oppose the processing under Article 21(2) GDPR. (4) The personal data concerning you was processed illegally. (5) The erasure of the personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject. (6) The personal data concerning you was collected in relation to the information society services offered under Article 8(1) GDPR. Information to third parties If we have made the personal data concerning you public and we are obliged to erase them in accordance with Article 17(1) GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data processors who process the personal data that you, as a data subject, have requested them to erase all links to this personal data or copies or replications of it. iii. Exclusions There is no right to erasure if the processing is necessary: (1) to exercise the right to freedom of expression and information; (2) to fulfil a legal obligation required for processing under the law of the Union or of the Member States to which we are subject, or to perform a task in the public interest or in the exercise of official authority vested in us; (3) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, if the law referred to in a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or (5) for the establishment, exercise or defence of legal claims. Right to information If you have exercised your right to rectification, erasure or restriction of processing with respect to us, we shall notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. You also have the right to obtain information from us about these recipients. Right to data portability You have the right to receive the personal data concerning you that you have supplied to us in a structured, commonly used and machine-readable format. You also have the right to transfer this personal data provided to us to another controller without our interference, if (1) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and (2) the processing is carried out by automated means. When exercising the right to data portability, you also have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible. Other persons’ rights and freedoms shall not be affected by this. The right to data portability shall not apply to a processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority vested in us. Right to object You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) GDPR. This also applies to a profiling based on these provisions. We shall no longer process personal data concerning you unless we can prove compelling reasons worthy of protection for the processing that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. This also applies to profiling if it is associated with such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by means of automated procedures using technical specifications. Right to withdraw declaration of consent under data protection law You have the right to withdraw at any time your declaration of consent given under data protection law. In the event of revocation, the lawfulness of the processing carried out on the basis of the consent until the revocation shall not be affected. Automated decisions in individual cases including profiling You have the right not to be subject to a decision based exclusively on automated processing – including profiling – which produces legal effects concerning you or similarly affects you significantly. This does not apply if the decision (1) is necessary for the conclusion or performance of a contract between you and us, (2) is authorised by Union or Member State law to which we are subject and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or (3) is based on your express consent. However, these decisions may not be based on special categories of personal data under Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests. With respect to the cases described in (1) and (3), we shall implement suitable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision. Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of work or wherein the alleged infringement occurred if you believe that the processing of personal data concerning you infringes the GDPR. The supervisory authority with jurisdiction over us is: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27 91522 Ansbach This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.lda.bayern.de The supervisory authority with which the complaint has been lodged shall notify you of the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR. Please contact our data protection officer if you have any questions.
1.1 2.1 3.1 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 11.1 11.2 12.1 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 28.2 29.1 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 41.2 41.3 42.1 43.1 44.1 45.1 46.1 47.1 49.1 50.1 51.1 52.1 52.2 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 73.2 73.3 73.4 73.5 74.1 75.1 76.1 77.1
Uvod Gaćina Adriatic Charter d.o.o. sa sjedištem u Šibeniku, Bana Josipa Jelačića 13 b, OIB: 50286165539 (nadalje u tekstu: Gaćina Adriatic Charter), u svom poslovanju mora prikupljati i koristiti određene podatke o pojedincima. Svrha ove politike je osigurati da Gaćina Adriatic Charter u potpunosti postupa u skladu s pravnim, organizacijskim i tehničkim obvezama u odnosu na zaštitu osobnih podataka. Svi zaposlenici Gaćina Adriatic Charter su u potpunosti upoznati sa sadržajem ove politike i osiguravaju njezinu primjenu prilikom rukovanja osobnim podacima ili obrade osobnih podataka. Zaposlenici čiji zadaci uključuju i rukovanje osobnim podacima su adekvatno educirani u pogledu svojih zadataka u odnosu na zaštitu osobnih podataka. Ova politika se odnosi na sve osobne podatke koje drži Gaćina Adriatic Charter u odnosu na bilo koju osobu, bez obzira je li bila, trenutno jest ili će biti klijent, dobavljač ili kontakt. Ova politika ja izrađena s ciljem da se spriječi nastanak potencijalne štete Gaćina Adriatic Charteru i njegovim zaposlenicima te ispitanicima i da osigura kako je obrada osobnih podataka od strane Gaćina Adriatic Chartera u potpunosti u skladu sa zakonom i drugim propisima. Definicija i primjena Osobnim podacima smatraju se svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi, to jest pojedinac koji se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. Pod obradom osobnih podataka smatra svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, povlačenje, pronalaženje, obavljanje uvida, uporaba ili korištenje, otkrivanje prijenosom, širenjem, objavljivanjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje te provedba logičkih, matematičkih i drugih operacija s tim podacima. Gaćina Adriatic Charter osobne podatke prikuplja i obrađuje prije svega radi pružanja usluga u svom poslovanju. Stoga Gaćina Adriatic Charter ima potrebu prikupljati i obrađivati određene vrste podataka o pojedincima koji dolaze u kontakt s Gaćina Adriatic Charterom (ispitanici). S tim osobnim informacijama Gaćina Adriatic Charter postupa adekvatno, bez obzira kako ti podaci bili prikupljeni, zabilježeni, čuvani i korišteni – na papiru, ili na drugom materijalu. U trenutku dostavljanja podataka ispitanika Gaćina Adriatic Charteru, ispitanik pristaje da Gaćina Adriatic Charter obrađuje njegove osobne podatke, sukladno naznačenoj svrsi. Zaštita privatnosti podataka ispitanika je trajna, a u svakom trenutku ispitanik može koristiti svoja prava koja su niže pobrojana i objašnjena. Gaćina Adriatic Charter osobne podatke ispitanika prikuplja i obrađuje u skladu sa Zakonom o zaštiti osobnih podataka (NN 103/03, 118/06, 41/08, 130/11, 106/12), drugim hrvatskim propisima, Direktivom 95/46/EC i Općom uredbom i zaštiti osobnih podataka (GDPR) (Uredba (EU) 2016/679 Europskog parlamenta i vijeća od 27. travnja 2016.). Prikupljene podatke Gaćina Adriatic Charter čuva na primjeren način i osigurava njihovu povjerljivost. Gaćina Adriatic Charter prikupljene podatke neće prosljeđivati trećim osobama bez dozvole ispitanika, osim u slučajevima kada je to potrebno radi izvršavanja zakonskih obveza Gaćina Adriatic Chartera, u slučajevima kada je to nužno radi ispunjenja zadataka koji se izvršavaju u javnom interesu ili u slučajevima kada je ispitanik sam objavio te podatke, kao i u drugim nadležnim propisom određenim slučajevima. Ispitanik, u pogledu osobnih podataka koje za njega obrađuje Gaćina Adriatic Charter, ima sljedeća prava: Pravo na informiranost Ispitanik ima pravo u svakom trenutku tražiti obavijest obrađuju li se njegovi osobni podaci i za koju svrhu, tko je voditelj obrade, kontakt podatke službenika za zaštitu podataka, koje kategorije osobnih podataka se obrađuju, na koje razdoblje se obrađuju odnosno pohranjuju, tko je izvor za dobivanje njegovih osobnih podataka, tko su sve primatelji njegovih osobnih podataka, kao i pravo na obavijest o drugim njegovim pravima navedenima u ovoj politici (pravo na pristup, pravo na ispravak, pravo na brisanje, pravo na ograničavanje obrade i drugo). Pravo pristupa Ispitanik ima pravo od Gaćina Adriatic Chartera dobiti potvrdu obrađuju li se osobni podaci koji se na njega odnose, zatim dobiti pristup tim podacima i informacijama o: - svrsi obrade, - kategorijama osobnih podataka koji se obrađuju; - primateljima ili kategorijama primatelja kojima su podaci otkriveni ili će biti otkriveni; - ako je moguće, o razdoblju na koje se podaci pohranjuju odnosno o kriterijima pomoću kojih je moguće utvrditi to razdoblje; - da od Gaćina Adriatic Chartera zatraži ispravak ili brisanje osobnih podataka ili ograničavanje obrade osobnih podataka koji se odnose na ispitanika ili prava na prigovor na takvu obradu; - pravu na podnošenje pritužbe nadzornom tijelu; - ako se osobni podaci ne prikupljaju od ispitanika, svakoj dostupnoj informaciji o njihovu izvoru; - postojanju automatiziranog donošenja odluka, što uključuje izradu profila, s posljedicama. Pravo na ispravak Ispitanik ima pravo bez nepotrebnog odgađanja ishoditi od Gaćina Adriatic Chartera ispravak netočnih osobnih podataka koji se na njega odnose. Ispitanik ima pravo dopuniti nepotpune osobne podatke, među ostalim i davanjem dodatne izjave. Pravo na brisanje / pravo na zaborav Ispitanik ima pravo da Gaćina Adriatic Charter bez odlaganja izbriše osobne podatke koji se na njega odnose ako osobni podaci više nisu nužni u odnosu na svrhe za koje su prikupljeni ili na drugi način obrađeni, ako ispitanik povuče privolu na kojoj se obrada temelji a ne postoji drugi pravni temelj obrade, ako ispitanik uloži prigovor na obradu, ako su osobni podaci nezakonito obrađeni, ako se osobni podaci moraju brisati radi poštovanja pravne obveze iz prava Unije ili prava države članice kojem podliježe Gaćina Adriatic Charter, ako su osobni podaci prikupljeni u vezi s ponudom usluga informacijskog društva djetetu. Navedeno se ne primjenjuje ako je obrada nužna (i u mjeri u kojoj je nužna) radi ostvarivanja prava na slobodu izražavanja i informiranja, radi poštovanja pravne obveze kojom se zahtijeva obrada u pravu Unije ili pravu države članice kojem podliježe Gaćina Adriatic Charter ili za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti Gaćina Adriatic Chartera, zbog javnog interesa u području javnog zdravlja, u svrhe arhiviranja u javnom interesu, u svrhe znanstvenog ili povijesnog istraživanja, radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Pravo na podnošenje prigovora nadzornom tijelu Ispitanik ima pravo na temelju svoje posebne situacije u svakom trenutku uložiti prigovor na obradu osobnih podataka koji se odnose na njega, uključujući izradu profila, u slučajevima ako je obrada nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti Gaćina Adriatic Chartera odnosno ako je obrada nužna za potrebe legitimnih interesa Gaćina Adriatic Chartera ili treće strane. Gaćina Adriatic Charter više ne smije obrađivati osobne podatke osim ako Gaćina Adriatic Charter dokaže da postoje uvjerljivi legitimni razlozi za obradu koji nadilaze interese, prava i slobode ispitanika ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Ako se osobni podaci obrađuju za potrebe izravnog marketinga, ispitanik u svakom trenutku ima pravo uložiti prigovor na obradu osobnih podataka koji se odnose na njega za potrebe takvog marketinga, što uključuje izradu profila u mjeri koja je povezana s takvim izravnim marketingom. Pravo na prenosivost podataka Ispitanik ima pravo zaprimiti osobne podatke koji se odnose na njega, a koje je pružio Gaćina Adriatic Charteru u strukturiranom, uobičajeno upotrebljavanom i strojnom formatu te ima pravo, bez ometanja od strane Gaćina Adriatic Chartera, prenijeti te podatke drugom voditelju obrade ako se obrada temelji na njegovoj privoli i ako se obrada provodi automatiziranim putem. Ispitanik ima pravo na izravni prijenos od Gaćina Adriatic Chartera drugom voditelju obrade ako je to tehnički izvedivo, a ovo pravo ne smije negativno utjecati na prava i slobode drugih. Prava vezana uz automatsko donošenje odluka i profiliranje Ispitanik ima pravo da se na njega ne odnosi odluka koja se temelji isključivo na automatiziranoj obradi, uključujući izradu profila, koja proizvodi pravne učinke koji se na njega odnose ili na sličan način značajno na njega utječu, osim ako je ta odluka potrebna za sklapanje ili izvršenje ugovora između ispitanika i Gaćina Adriatic Chartera, ako je dopuštena pravom Unije ili pravom države članice kojem podliježe Gaćina Adriatic Charter ili temeljena na izričitoj privoli ispitanika. Pravo na povlačenje privole Privola ispitanika je jedna od pravnih osnova za obradu podataka koji se odnose na ispitanika. Ispitanik ima pravo u svakom trenutku povući privolu koju je dao. Povlačenje privole ne utječe na zakonitost obrade podataka koja je učinjena prije povlačenja privole. Pravo na ograničavanje obrade Ispitanik ima tražiti ograničenje obrade njegovih osobnih podataka: ako osporava točnost njegovih osobnih podataka - na razdoblje potrebno da Gaćina Adriatic Charter tu točnost provjeri, ako je obrada njegovih osobnih podataka nezakonita a ne traži brisanje nego samo ograničavanje obrade, ako Gaćina Adriatic Charter više ne treba njegove osobne podatke, ali mu je postojanje istih potrebno radi ostvarivanja njegovih pravnih zahtjeva, ako je stavio prigovor na obradu ima pravo tražiti ograničenje obrade za razdoblje do utvrđenja nadilaze li legitimni razlozi Gaćina Adriatic Chartera za obradu njegove razloge iz prigovora. Radi ostvarivanja svojih prava, ispitanik se treba obratiti službeniku za zaštitu osobnih podataka slanjem pisane obavijesti odnosno zahtjeva službeniku za zaštitu osobnih podataka Gaćina Adriatic Charter d.o.o., elektroničkom poštom korištenjem svoje e-mail adrese koju su dali Gaćina Adriatic Charter d.o.o. ili zemaljskom poštom na adresu: Bana Josipa Jelačića 13 b, 22 000 Šibenik, ili dostavom osobne izjave izravno u poslovnim prostorijama Gaćina Adriatic Charter d.o.o., uz prethodnu najavu na broj telefona +385 (0)91 2100 100, uz identifikaciju važećim osobnim dokumentom. Službenik za zaštitu osobnih podataka: Gaćina Adriatic Charter je imenovao osobu službenika za zaštitu osobnih podataka: Jere Gaćina e-mail adresa: info@gacina-adriaticcharter.hr Sva pitanja u vezi zaštite osobnih podataka trebaju se uputiti službeniku za zaštitu osobnih podataka. Načela zaštite osobnih podataka: Gaćina Adriatic Charter smatra da je zakonito i pravilno postupanje s osobnim podacima vrlo važno te stoga osigurava da se osobni podaci tretiraju zakonito i ispravno. U tu svrhu Gaćina Adriatic Charter u potpunosti podržava i pridržava se Načela zaštite podataka. Načela zaštite podataka zahtijevaju da se osobni podaci: - moraju obrađivati pravedno i zakonito i osobito da ne se ne smiju obrađivati ako uvjeti određeni propisima nisu ispunjeni; - prikupljaju se samo za jednu ili više određenih i zakonitih svrha i ne smiju se dalje obrađivati ni na koji način koji bi bio nespojiv s tim svrhama; - obrada mora biti adekvatna, relevantna i ne pretjerana u odnosu na svrhu ili svrhe za koje se obrađuju, a podaci moraju biti točni i ažurni; - ne smiju se zadržavati duže nego što je potrebno za primjenjivu svrhu; - moraju se obrađivati u skladu s pravima ispitanika u skladu s važećim propisima: - moraju se poduzeti odgovarajuće tehničke i organizacijske mjere protiv neovlaštene ili nezakonite obrade osobnih podataka i protiv slučajnog gubitka, uništavanja ili oštećenja osobnih podataka; - ne smije se prenijeti na zemlju ili teritorij izvan EU, osim ako ta država ili teritorij ne osigura odgovarajuću razinu zaštite prava i sloboda ispitanika u vezi s obradom osobnih podataka. Aktivnosti Gaćina Adriatic Chartera u vezi obrade podataka: Gaćina Adriatic Charter poduzima sljedeće: - u potpunosti poštuje uvjete pravednog prikupljanja i obrade osobnih podataka; - ispunjava obvezu da specificira svrhu za koju se osobni podatak obrađuje; - prikuplja i obrađuje adekvatne osobne podatke i to samo u onoj mjeri u kojoj je to potrebno radi ispunjavanja operativnih potreba ili u skladu sa svim zakonskim zahtjevima; - dostavlja sve potrebne podatke Agenciji za zaštitu osobnih podataka; - vrši strogu provjeru duljine čuvanja osobnih podataka; - osigurava da se prava osoba, čiji podaci se obrađuju, mogu u potpunosti ostvariti u skladu sa zaštitom osobnih podataka; - poduzima odgovarajuće tehničke i organizacijske sigurnosne mjere za zaštitu osobnih podataka; - osigurava da se osobni podaci ne prenose u inozemstvo bez osiguravajuće zaštite; - tretira sve osobe pravedno i pošteno bez obzira na njihovu dob, vjeru, invalidnost, spol, spolnu orijentaciju ili etničku pripadnost, kada postupa u vezi njihovih zahtjeva za obavještavanjem; - utvrđuje jasne postupke za odgovaranje na zahtjeve za obaviještenost. Gaćina Adriatic Charter na svojoj Internet stranici može objaviti sadržaj kolačića za oglašavanje i praćenje statistike prometa temeljeno na interesima i informacijama posjetitelja Internet stranica Gaćina Adriatic Chartera sa društvenih mreža. Ako ispitanik upotrebljava sadržaj na društvenim mrežama Gaćina Adriatic Chartera ili u aplikacijama, kolačić s navedenih mreža i aplikacija mogao bi se pohraniti na uređaju ispitanika s kojeg pristupa Internet stranici Gaćina Adriatic Chartera. Posjetitelji imaju pravo isključiti kolačiće. Internetski preglednici obično su programirani tako da im je prihvaćanje kolačića zadana postavka, ali to ispitanici mogu jednostavno podesiti promjenom postavki svog preglednika. Ako ispitanik želi ograničiti ili blokirati sve kolačiće koje uključuju web-mjesta/aplikacije Gaćina Adriatic Chartera (što može onemogućiti upotrebu određenih dijelova web-mjesta) ili druga web-mjesta/aplikacije, ispitanik to može učiniti u postavkama preglednika. U slučaju povrede osobnih podataka koje će vjerojatno prouzročiti visok rizik za prava i slobode ispitanika, Gaćina Adriatic Charter bez nepotrebnog odgađanja obavješćuje ispitanika o povredi osobnih podataka, osim ako je Gaćina Adriatic Charter poduzeo odgovarajuće tehničke i organizacijske mjere zaštite i te su mjere primijenjene na osobne podatke pogođene povredom osobnih podataka, posebno one koje osobne podatke čine nerazumljivima bilo kojoj osobi koja im nije ovlaštena pristupiti odnosno ako je Gaćina Adriatic Charter poduzeo naknadne mjere kojima se osigurava da više nije vjerojatno da će doći do visokog rizika za prava i slobode ispitanika odnosno ako bi se time zahtijevao nerazmjeran napor, u kojem slučaju će Gaćina Adriatic Charter primijeniti javno obavješćivanje ili sličnu mjeru kojom se ispitanici obavješćuju na jednako djelotvoran način. Pregled i provjera: Gaćina Adriatic Charter ima pravo ažurirati ovu politiku ako je potrebno kako bi odražavala najbolju praksu i kako bi se osiguralo poštivanje bilo kakvih promjena ili izmjena u pogledu zaštite osobnih podataka. Link za preuzimanje Privole