https___www.deinetickets.de_shop_blackserpent_en_datenschutz_nocookie_.xml
http___gajeta-zg.hr_politika-privatnosti_1.xml
1.1 2.1 2.2 3.1 4.1 5.1 6.1 7.1 9.1 10.1 11.1 12.1 12.2 13.1 14.1 14.2 14.3 14.4 15.1 16.1 16.2 16.3 17.1 17.2 17.3 17.4 18.1 18.2 18.3 18.4 19.1 20.1 20.2 20.3 21.1 21.2 22.1 23.1 23.2 24.1 24.2 24.3 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 34.2 35.1 36.1 36.2 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 49.1 49.2 49.3 49.4 49.5 50.1 50.2 51.1 51.2 51.3 51.4 51.5 51.6 51.7 52.1 52.2 53.1 54.1 54.2 54.3 54.4 54.5 54.6 54.7 54.8 54.9 54.10 55.1 56.1 56.2 56.3 56.4 56.5 57.1 58.1 58.2 59.1 60.1 60.2 60.3 60.4 60.5 60.6 60.7 60.8 60.9 60.10 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 102.2 103.1 104.1 105.1 106.1 106.2 107.1 108.1 108.2 109.1 110.1 111.1 112.1 112.2 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 125.1 126.1 127.1 128.1 129.1 130.1 131.1 131.2 132.1 133.1 133.2 133.3 134.1
Privacy Policy according to the EU General Data Protection Regulation ("GDPR") We are delighted by your interest in our services and would like you to feel secure with regard to the protection of your personal data while visiting our website. We take seriously the protection of your private sphere with the elevation, processing and use of your personal data according to the legal regulations. Name and Address The responsible body within the meaning of the applicable data protection laws is: Black Serpent Promotion Auf dem Knust 48 44805 Bochum Web: www.black-serpent-promotion.de Email: info@black-serpent-promotion.com SSL-Encryption Our website uses Secure Socket Layer (SSL) technology, which encrypts your personal information when you send your personal information on our Website. You can recognize the active connection by the green lock symbol in your webbrowsers address bar. Cookies Our website uses so called cookies. Cookies are small text files that are stored on your computer by your web browser. When a user opens a website, a cookie may be stored on the operation system of the user. The cookie only contains a checksum which lets us recognize your browser, when you visit our website again. The information, that we receive with the help of cookies, is used exclusively for the purpose of adapting our products and services as well as improving our site as comfortable for the user as possible. Some services and functions of our website can not be offered without the use of cookies. Therefore it is necessary that we recognize your browser after a page change. Cookies give us the ability to e.g. modify a website to reflect your interests, or to store your password for it to remove the need to re-enter it on each visit. You can, of course, also visit our website without allowing cookies to be stored on your computer. If you do not want your computer to be recognized on your next visit, you can also disallow the use of cookies by changing the settings in your browser to "do not allow cookies". You will find the respective procedure in the operating instructions of your respective browser. If you do not allow the use of cookies, however, there may be restrictions in the use of certain areas of our website. When using a deinetickets.de shop, a cookie with an encrypted checksum will be stored on your computer. This checksum will be verified each time you open any of our websites or go to the next page during an ordering process. This allows us, to store your data during the ordering process. This data includes the shopping cart, shipping and billing address, payment and shipping options as well as special characteristics (for example seat selections in seating plans). Once the order is completed, the cookie will be deleted within 30 minutes automatically, when no further input will be done, so that further assignments are no longer possible. The use of cookies is mandatory for the usage of the deinetickets.de shop. Ordering without the use of cookies is not possible. Also we use cookies on this website to record aggregate statistical information about the visitors to our site and the use that our visitors make of the website. This processing is carried out on the basis of Art. b GDPR. All collected data is aggregated to anonymous statistics, which do not enable us to track individual usage of our sites and will not be stored together with any other personal data we gathered during an order process. Cookies will be stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can prevent the storage of cookies and transmission of the data contained therein. Already saved cookies can be deleted at any time. We point out, however, that you may not be able to use all the features of this website in full. The links below will tell you how to manage (and disable) cookies on major browsers: Google Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/ You can easily use the free program "Ghostery" to see which tracking scripts or cookies are loaded on the website. This can be downloaded at https://www.ghostery.com Creation of server logfiles Certain data are stored automatically for each file request of this website. In particular the following data may be registered: (1) Information on the used browser and its version (2) Information about the operation system (3) Information about the internet service provider (4) IP-Address (5) Date and time of the access to the site (6) Domain names of web pages from which access is gained via a weblink (referrer) (7) Websites, accessed by using a link within our website Saving and processing of these data serves exclusively the purposes of system security and optimization of the internet presentation. All logfile data will always be stored separated from other identification details. Exclusion of trading data We do NOT release or sell customers personal information to any third parties. Unless we are required to by law or comply with an official investigation by a law enforcement organisation. Contact Form From May 25, 2018, express consent must be given to send a contact form through a clear, confirming act by which the person expresses its consent. This declaration may be made by an express statement or by the person by his own behavior indicating his consent to the processing of his data. For this purpose, we added a non-prefilled (opt-in) check box to all our contact forms and newsletter subscriptions. You have the opportunity to contact us via a contact form, specifying personal data. Which personal data is herewith transmitted, results from the input fields of the contact form. By using the contact form on our website, the IP address assigned by your internet service provider (ISP) and the date and time of your contact will also be saved. Alternatively, contact via the provided e-mail address is possible. If you contact us through one of these channels, the personal data provided by the data subject will be automatically saved. The data processing serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data. Processing is based on Art. a GDPR with your consent. The personal data entered by you is collected and stored solely for internal use by us and for our own purposes. If the sending of information by post is desired, the personal data can be passed on only for the purpose of sending to a postal service provider. At any time you have the option of having the personal data given in your contact request completely deleted from our database. A transfer of data to third parties does not take place. Collection, processing and use of personal data for orders During the order process, we collect and use your personal data only to the extent necessary to fulfill and process your order and to process your requests. The provision of the data is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. Processing is based on Art. b GDPR and is required to fulfill a contract with you. Your data is not disclosed or transferred to third parties without your consent. Excluded from this are only our service partners, which we need to process the contractual relationship or service providers of which we serve in the context of a processing order. In addition to the recipients named in the respective clauses of this privacy policy, these are, for example, recipients of the following categories: shipping service providers, payment service providers, management service providers, order processing service providers, web hosting providers and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of Data transmission is limited to a minimum. Forwarding of your E-mail address to shipping companies for information about the shipping status We will pass on your e-mail address as part of the contract to the transport company, if you have explicitly agreed to this in the ordering process. The purpose of the disclosure is to inform you by e-mail about the delivery status. Processing is based on Art. a GDPR with your consent. You may revoke your consent at any time by notifying us or the transport company without affecting the legality of the processing carried out on the basis of the consent until the revocation. Use of PayPal All PayPal transactions are subject to the PayPal Privacy Policy. These can be found here: www.paypal.com/en/webapps/mpp/ua/privacy-prev?locale.x=en_EN Use of jQuery Our website uses the Java Script extension jQuery, which is loaded by the website code.jquery.com. In this regard, program libraries are downloaded by StackPath servers. When you access one of our webpages, your browser loads the necessary program libraries into your browser cache. To this purpose, the browser you are using must connect to the StackPath servers in the United States. The use of jQuery takes place in the interest of an optimized and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. For more information on jQuery, visit www.jquery.com and the StackPath www.stackpath.com/privacy-statement/ Automatic and regular deletion of personal data All recorded personal data will only be saved for the length of time this data is required in order to fulfil the purpose for which it was stored and to comply with legal obligations. When the data-retention period is reached, we delete all personal data or anonymize them automatically. Rights of the data subject To the extent that we receive and process personal data from you, you have the following rights for the purposes of the GDPR: Right of access by the data subject You have the right to obtain confirmation as to whether or not personal data concerning you is or was being processed and where that is or was the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, referred to in GDPR Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to GDPR Article 46 relating to the transfer. Right to rectification You have the right to obtain the rectification of inaccurate personal data, without undue delay and you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. Right to restriction of processing You have the right to obtain the restriction of processing where one of the following applies: the accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of your personal data; the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead; the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; when you objected to processing pursuant to GDPR Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject. Where processing has been restricted under paragraph 1 such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. When you have obtained the restriction of processing pursuant to paragraph 1 you shall be informed by the controller before the restriction of processing is lifted. Right to be forgotten Where one of the following grounds apply, you have the right to obtain the erasure of personal data without undue delay: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the data subject withdraws consent on which the processing is based according to point (a) of GDPR Article 6(1), or point (a) of GDPR Article 9(2), and where there is no other legal ground for the processing; the data subject objects to the processing pursuant to GDPR Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to GDPR Article 21(2); the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; the personal data have been collected in relation to the offer of information society services referred to in GDPR Article 8(1). The right of erasure does not apply to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the area of public health in accordance with points (h) and (i) of GDPR Article 9(2) as well as GDPR Article 9(3); or archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defence of legal claims. Right of notification We communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with GDPR Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We inform you about those recipients if you request it. Right to data portability You have the right, to receive the personal you provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller where technically feasible. Right to object You have the right to object, on grounds relating to your particular situation, at any time to process personal data concerning you. We will then no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedom or for the establishment, exercise or defence legal claims. Right of withdrawal of the privacy policy consent You have the right to withdraw your consent at any time. The withdrawal of the consent does not affect the lawfulness of processing based on consent before its withdrawal. Right to lodge a complaint with a supervisory authority In any case of complain, you have the right to lodge a complaint to an appropriate supervisory authority. Recipients or Categories of Recipients, where personal date may be provided We are not selling your personal information to others and we will not share it with third parties except companies that perform functions on our behalf like delivering packages and processing payments. Your data is only transmitted with your agreement and/or if it is necessary for the purpose of the contract. Any compilation of person-related data and any transfer of personal data to institutions and authorities which are entitled to obtain such information are carried out only to the extend required by law or if we are obliged to do so by virtue of a court order or court ruling. Our employees and the service providers appointed by us are bound by a duty of confidentiality and are under an obligation to obey the provisions of the German Federal Data Protection Act. Legal basis of processing The legal basis of our processing operations are as follows - Consent of the data subject, Art. - Performance of a contract, Art. - Compliance of legal obligations, Art. - Vital interests, Art. - Purpose of legitimate interests, Art. The legitimate interest of our company lies in the execution of our business activities. We only process and use the personal data you provided for the purposes of which you have been informed, unless the information is being acquired, processed or used for another purpose directly connected to the original purpose for which the personal data was acquired, or if ist needed to prepare, negotiate or fulfil a contract to which you are the counterparty. When you purchased a product or service from us, we are entitled to send you informations on similar goods or services via the email you transmitted while purchasing (§ 7 Abs.3 UWG). You can object to the use of your e-mail address at any time without incurring any costs. Storage period of personal data / data retention All recorded personal data will only be saved for the length of time this data is required in order to fulfil the purpose for which it was stored and to comply with legal obligations. When the data-retention period is reached, we delete all personal data or anonymize them automatically. Privacy in Case of applications and application procedures If applicants include application documents in electronic form, for example as email, the data can be processed in electronical form. We collect and process application related personal data exclusively in connection with the application procedure. After an application has been cancelled, we delete the data automatically six months after you submitted it. Links to other websites Our website contains links to other websites. This privacy statement does not extend to other providers. We have no influence on the fact that their operators comply with the data protection regulations and therefore assume no responsibility for the accuracy, timeliness and completeness of the information provided there Last updated: 23.05.2018
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 38.2 39.1 40.1 40.2 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 57.2 57.3 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 69.2 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1
OPĆA POLITIKA O ZAŠTITI OSOBNIH PODATAKA - Općenito Opća politika zaštite osobnih podataka opisuje svrhu i ciljeve prikupljanja, obrade i upravljanja osobnim podacima od strane GAJETA d.o.o. Cankareva 6, 10000 Zagreb, OIB: 38448070359 (u daljnjem tekstu Voditelj obrade) te osigurava adekvatnu razinu zaštite osobnih podataka u skladu s Općom uredbom o zaštiti podataka ( Uredba EU 2016/679 ) i Zakonom o provedbi Opće uredbe o zaštiti podataka ( NN 42/2018 ). Cilj jest uspostaviti primjerene procese zaštite i upravljanja osobnim podacima ispitanika, a primjenjuje se na sve obrade osobnih podataka, osim u slučaju gdje se obrađuju anonimizirani podaci ili su obrade takve prirode da se radi o statističkim analizama iz kojih nije moguće identificirati pojedinca. Pojmovi * osobni podaci - su svi podaci koji se odnose na pojedinca (ispitanika) čiji je identitet utvrđen ili se može utvrditi Pojedinac čiji se identitet može utvrditi jest osoba koje se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. * obrada podataka - svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim ili neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodna, izmjena, pronalaženje, vršenje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanje na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje. * izrada profila - svaki oblik automatizirane obrade i upotrebe osobnih podataka radi ocjene određenih osobnih aspekata povezanih s pojedincem radi analize ili predviđanje aspekata u vezi s radnim učinkom, ekonomskim stanjem, zdravljem, osobnim sklonostima, interesima, lokacijom, kretanjem tog pojedinca * voditelj obrade - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje samo ili zajedno s drugima određuje svrhe i sredstva obrade osobnih podataka, kada su svrhe i sredstva takve obrade utvrđeni pravom Unije ili pravom države članice * izvršitelj obrade - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje obrađuje podatke u ime voditelja obrade * primatelj - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo kojem se otkrivaju osobni podaci, neovisno o tome da li je on treća strana * treća strana - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje nije ispitanik, voditelj obrade, izvršitelj obrade ni osobe koje su ovlaštene za obradu osobnih podataka koji se na njega odnose * privola - svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose * povreda osobnih podataka - kršenje sigurnosti koje dovodi do slučajnog ili nezakonitog uništenja, gubitka, izmjene, neovlaštenog otkrivanja ili pristupa osobnim podacima koji su preneseni, pohranjeni ili na drugi način obrađivani * nadzorno tijelo - u Republici Hrvatskoj - Agencija za zaštitu osobnih podataka * usluga informacijskog društva - usluga definirana čl. 1 st. 1 točkom 2 Direktive 2015/1535 Europskog parlamenta i Vijeća - svaka usluga informacijskog društva, to jest svaka usluga koja se obično pruža uz naknadu, na daljinu, elektroničkim sredstvima te na osobni zahtjev primatelja usluga - Načela obrade podataka Načela obrade podataka su osnovna pravila kojih se pridržavamo prilikom obrade osobnih podataka ispitanika, a to su: * zakonitost i poštenost - obrađujemo osobne podatke ispitanika sukladno važećim zakonima i poštujući sva prava ispitanika * transparentnost - pružamo ispitanicima sve potrebne informacije te na zahtjev osiguravamo uvid u njihove osobne podatke koje obrađujemo. Ispitanik će ujedno biti, prije samog prikupljanja osobnih podataka, upoznat sa svrhom obrade i svojim pravima * ograničenje svrhe - osobne podatke prikupljamo u posebne, jasne i zakonite svrhe te iste ne obrađujemo u svrhe za koje privola nije dana, osim za obrade koje su uvjetovane zakonom ili su neophodne za kvalitetnu isporuku usluge ili dostave * ograničenje pohrane - osobne podatke ispitanika čuvamo u obliku koji omogućava identifikaciju ispitanika samo onoliko dugo koliko je to potrebno u svrhu ili svrhe radi kojih se osobni podaci obrađuju. Mi možemo pohraniti osobne podatke na duži vremenski period, ukoliko nam to nalaže posebni zakonski propis ili legitimni interes ( npr. sudski spor) * smanjenje količine podataka - osobne podatke obrađujemo na način da su primjereni, relevantni i ograničeni u odnosu na svrhu ili svrhe za koje se obrađuju. * točnost - osobni podaci koje obrađujemo moraju biti točni i po potrebi ažurirani * cjelovitost i pouzdanost - osobne podatke obrađujemo na način kojim se osigurava odgovarajuća sigurnost osobnih podataka, uključujući zaštitu od neovlaštene ili nezakonite obrade te od slučajnog gubitka, uništenja ili oštećenja, primjenom odgovarajućih tehničkih i organizacijskih mjera. - Zakonitost obrade Obrada osobnih podataka je zakonita samo ako je ispunjen jedan od niže navedenih uvjeta: * ispitanik je dao privolu za obradu svojih osobnih podataka u jednu ili više svrha * obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka ili kako bi se poduzele radnje na zahtjev ispitanika prije sklapanja ugovora * obrada je nužna radi poštovanja pravnih obveza voditelja obrade * obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane, osim kada su od tih interesa jači interesi ili temeljna prava i slobode ispitanika koji zahtjevaju zaštitu obrade osobnih podataka, osobito ako je ispitanik dijete. Pod legitimnim interesom smatrane su obrade koje služe npr. da bi se unaprijedio i modernizirao proces razvoja proizvoda i usluga, ponudili proizvodi i usluge koje bi ispitaniku olakšali poslovanje sa voditeljem obrade ili npr. u svrhu sudskih sporova * obrada je nužna kako bi se zaštitili ključni interesi ispitanika ili druge fizičke osobe * obrada je nužna za izvršavanje zadaća od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade - Prava ispitanika U trenutku prikupljanja podataka ispitaniku ćemo pružiti sljedeće informacije: identitet i kontakt podatke voditelja obrade, svrhe obrade radi kojih se prikupljaju osobni podaci, pravnu osnovu za obradu, legitimne interese, primatelje ili kategorije primatelja osobnih podataka, ukoliko isti postoje, namjeru prijenosa osobnih podataka trećim zemljama, ukoliko ista postoji, razdoblje pohrane podataka ili kriterije koji definiraju to razdoblje, sva prava ispitanika, potencijalno postojanje automatiziranog donošenja odluka što podrazumijeva i izradu profila (smislene informacije o kojoj logici obrade je riječ, potencijalnim posljedicama i važnosti same obrade za ispitanika). U slučaju da se osobni podaci ne prikupljanju od ispitanika, navodimo i izvor osobnih podataka. * pravo na pristup - ispitanik ima pravo dobiti potvrdu obrađuju li se njegovi osobni podaci te ako se takvi podaci obrađuju, pristup osobnim podacima i svrsi obrade, * pravo na ispravak - ispitanik ima pravo bez nepotrebnog odgađanja ishoditi ispravak netočnih osobnih podataka koji se odnose na njega. Uzimajući u obzir svrhe obrade, ispitanik ima pravo dopuniti nepotpune osobne podatke, među ostalima i davanjem dodatne izjave. * pravo na brisanje ("pravo na zaborav")- ispitanik ima pravo ishoditi brisanje osobnih podataka koji se na njega odnose, a mi imamo obvezu obrisati osobne podatke bez nepotrebnog odgađanja ako je ispunjen jedan od sljedećih uvjeta: - osobni podaci više nisu nužni u odnosu na svrhe za koje su prikupljeni ili na drugi način obrađeni - ispitanik povuče privolu na kojoj se obrada temelji, a ne postoji druga pravna osnova za obradu, ispitanik uloži prigovor na obradu, a legitimni razlozi za realizaciju prava na brisanje su veći od legitimnog interesa nas kao voditelja obrade za obradu i/ili čuvanje podataka - osobni podaci su nezakonito obrađeni - osobni podaci moraju se brisati radi poštovanja pravne obveze propisane pravom Unije ili pravom Republike Hrvatske - osobni podaci su prikupljeni u vezi s ponudom usluge informacijskog društva izravno djetetu ispod dobne granice od 16 godina * pravo na ograničenje obrade - ispitanik ima pravo od nas tražiti ograničenje obrade osobnih podataka u slučaju da se osporava njihova točnost, kada je obrada nezakonita ( a ispitanik se protivi brisanju osobnih podataka te umjesto toga traži ograničenje njihove uporabe), te u slučaju kada je ispitanik uložio prigovor na obradu osobnih podataka očekujući potvrdu nadilaze li legitimni razlozi voditelja obrade razloge ispitanika * pravo na prijenos podataka - ispitanik ima pravo zaprimiti svoje osobne podatke koji se na njega odnose, a koje nam je dao temeljem svoje privole, u strukturiranom, uobičajeno upotrebljavanom i strojno čitljivom formatu te ima pravo tražiti prijenos tih podataka drugom voditelju obrade, ukoliko je tehnički izvedivo. * pravo na prigovor - ispitanik ima pravo na temelju svoje posebne situacije u svakom trenutku uložiti prigovor na obradu osobnih podataka koji se odnose na njega. Mi u takvoj situaciji više ne smijemo obrađivati osobne podatke, osim ako dokažemo da postoje legitimni razlozi za daljnju obradu koji nadilaze interese, prava i slobode ispitanika ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Nadalje, ako se osobni podaci obrađuju za potrebe izravnog marketinga, ispitanik u svakom trenutku ima pravo uložiti prigovor na obradu osobnih podataka koji se odnose na njega, što uključuje i izradu profila u mjeri koja je povezana s takvim izravnim marketingom. Dodatno, ispitanik ima pravo zatražiti da se na njega ne odnosi odluka koja se temelji isključivo na automatiziranoj obradi, uključujući izradu profila, koja proizvodi učinke na njega ili na sličan način značajno na njega utječu, osim ako je ta odluka: - dopuštena zakonom - potrebna za izvršavanje odluka između ispitanika i voditelja obrade - temeljena na izričitoj privoli ispitanika Ispitanik svoja prava može ostvariti u svakom trenutku na način da nas kontaktira na: GAJETA d.o.o. Cankareva 6, 10000 Zagreb, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite. Ispitaniku će biti pružene informacije o poduzetim radnjama najkasnije u roku od mjesec dana od dana zaprimanja zahtjeva. Ukoliko je obrada zahtjeva složena ili se radi o velikom broju zahtjeva, taj rok se može produžiti za još dva mjeseca, ali će u tome slučaju ispitanik biti izvješten o razlozima eventualnog produljenja roka. Također, ukoliko se ne postupi po zahtjevu ispitanika u roku od mjesec dana od primitka zahtjeva, o odluci će ispitanik biti izvješten uz navođenje razloga za takvu odluku te njegovoj mogućnosti podnošenja pritužbe Agenciji za zaštitu osobnih podataka, Martićeva 14, 10000 Zagreb. U slučaju da su zahtjevi ispitanika očito neutemeljeni ili pretjerani, osobito zbog njihovog učestalog ponavljanja, možemo naplatiti razumnu naknadu na temelju administrativnih troškova ili odbiti postupati po zahtjevu ispitanika. - Sigurnost i obveze U nekim poslovnim procesima se pojavljujemo kao voditelji obrade, u tome slučaju samostalno određujemo svrhu i način obrade osobnih podataka, međutim, u nekim poslovnim procesima smo u ulozi izvršitelja obrade, u kojem situacijama obrađujemo osobne podatke u ime voditelja obrade. U skladu s time kontinuirano provodimo odgovarajuće tehničke i organizacijske mjere zaštite kako bi zaštitili osobne podatke ispitanika, u kojoj god da se ulozi nalazimo. Osobne podatke čuvamo u skladu sa našim integriranim standardima sigurnosti, a gdje je to primjenjivo, koristimo kriptografske metode zaštite podataka te unapređujemo sigurnosne mjere u svrhu sprječavanja povrede osobnih podataka ispitanika. Ne dopuštamo neovlašteno prikupljanje, obradu ili korištenje osobnih podataka te primjenjujemo pravilo ograničavanja pristupa podacima samo na one podatke koji su potrebni za obavljanje pojedinih poslovnih zadataka, sukladno našim internim odlukama. Osobne podatke štitimo od neovlaštenog pristupa, korištenja, izmjene te gubitka neovisno od toga da li su isti pohranjeni u papirnatom ili elektroničkom obliku. - Povreda osobnih podataka U slučaju da dođe do povrede osobnih podataka, svi naši radnici imaju dužnost obavijestiti odgovorne osobe o povredi bez odgode, a mi kao voditelji obrade smo dužni, bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvijestiti nadzorno tijelo odnosno Agenciju za zaštitu osobnih podataka. U slučaju da se nalazimo u ulozi izvršitelja obrade, o povredi obavještavamo u tome slučaju voditelja obrade podataka. Ukoliko je riječ o povredi osobnih podataka koja će vjerojatno prouzročiti visok rizik za prava i slobode pojedinaca, o povredi ćemo obavijestiti i ispitanika, osim ako: - su poduzete odgovarajuće tehničke i organizacijske mjere zaštite i te su mjere primijenjene na osobne podatke obuhvaćene povredom osobnih podataka, posebno one koje osobne podatke čine nerazumljivima bilo osobi koja im nije ovlaštena pristupiti, kao što je enkripcija - su poduzete naknadne mjere kojima se osigurava da više nije vjerojatno da će doći do visokog rizika za prava i slobode ispitanika - bi se time zahtijevao nerazmjeran napor, u kojem slučaju mora postojati javna obavijest ili slična mjera kojom se ispitanici obavještavaju na jednako djelotvoran način Ispitanik ima pravo podnijeti pritužbu nadzornom tijeku - Agenciji za zaštitu osobnih podataka u slučaju - povrede njegovih osobnih podatka ili - ako drži da se njegova prava grubo krše sukladno Općom uredbom o zaštiti osobnih podataka - Završne odredbe Ova Opća politika stupa na snagu danom donošenja, a dostupna je u poslovnim prostorijama na oglasnoj ploči GAJETA d.o.o. Zagreb, 25.05.2018. godine GAJETA d.o.o. kojeg zastupa direktor Jasminka Jović