https___en.girlsinmotion-store.com_datenschutz.xml
http___gajeta-zg.hr_politika-privatnosti_1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 9.1 10.1 11.1 12.1 12.2 12.3 12.4 12.5 12.6 12.7 12.8 12.9 13.1 13.2 13.3 13.4 13.5 13.6 13.7 13.8 14.1 15.1 16.1 17.1 17.2 17.3 17.4 17.5 17.6 17.7 17.8 17.9 17.10 17.11 17.12 17.13 18.1 19.1 19.2 20.1 20.2 21.1 21.2 22.1 23.1 23.2 23.3 24.1 25.1 26.1 27.1 28.1 29.1 30.1 30.2 30.3 31.1 31.2 31.3 32.1 33.1 33.2 33.3 33.4 34.1 35.1 35.2 35.3 36.1 37.1 37.2 38.1 38.2 39.1 40.1 40.2 40.3 41.1 42.1 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 48.1 48.2 49.1 50.1 51.1 51.2 52.1 53.1 53.2 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 71.2 71.3 72.1 73.1 73.2 73.3 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 86.2 86.3 87.1 88.1 88.2 88.3 89.1 90.1 91.1 92.1 93.1 94.1 95.1 95.2 95.3 96.1 96.2 96.3 96.4 96.5 96.6 97.1 98.1 99.1 100.1 101.1 102.1 103.1 103.2 103.3 104.1 105.1 105.2 106.1 107.1 107.2 107.3 107.4 107.5 107.6 107.7 107.8 108.1 108.2 108.3 108.4 109.1 110.1 111.1 111.2 111.3 112.1 112.2 112.3 113.1 114.1 114.2 115.1 115.2 115.3 115.4 115.5 115.6 116.1 117.1 118.1 118.2 118.3 119.1 120.1 120.2 121.1 122.1 122.2 122.3 122.4 122.5 122.6 123.1 124.1 124.2 124.3 125.1 126.1 126.2 127.1 127.2 127.3 128.1 129.1 129.2 130.1 131.1 131.2 132.1 132.2 132.3 132.4 132.5 132.6 133.1 134.1 135.1 135.2 135.3 135.4 136.1 137.1 137.2 137.3 137.4 138.1 138.2 139.1 140.1 140.2 140.3 140.4 140.5 141.1 141.2 142.1 143.1 143.2 143.3 143.4 143.5 144.1 145.1 145.2 145.3 145.4 145.5 145.6 145.7 146.1 147.1 148.1 148.2 148.3 148.4 149.1 149.2 149.3 149.4 150.1 150.2 150.3 151.1 152.1 152.2 153.1 154.1 155.1 156.1 156.2 156.3 157.1 158.1 158.2 158.3 159.1 159.2 160.1 161.1 161.2 161.3 161.4 162.1 163.1 164.1 164.2 165.1 166.1 166.2 167.1 168.1 169.1 170.1 171.1 172.1 173.1 173.2 173.3 174.1 175.1 175.2 175.3 175.4 176.1 177.1 177.2 177.3 177.4 177.5 177.6 177.7 177.8 177.9 177.10 177.11 177.12 177.13 177.14 177.15 178.1 179.1 180.1 181.1 181.2 182.1 183.1 183.2 184.1 185.1 186.1 187.1 188.1 188.2 188.3 188.4 189.1 189.2 189.3 190.1 191.1 192.1 192.2 193.1 194.1 195.1
DATA PROTECTION Who is responsible for your personal data? Responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions with data protection character are the publishers: Amm Eva-Maria, Fröba Ines, Klostermeier Sarah, Sölch Carmen Amm, Fröba, Klostermeier, Sölch GbR Address: Mittlerer Kanalstrasse 1a 90429 Nuremberg Email: hello@girls-in-motion.de Website: www.girlsinmotion-store.com Cookies The Girls in Motion Store website uses cookies. Cookies are text files that are stored and stored on a computer system via an internet browser. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID. By using cookies, the Girls in Motion Store can provide users of this website with more user-friendly services that would not be possible without the cookie setting. A cookie can be used to optimize the information and offers on our website in the interests of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. The user of a website that uses cookies, for example, does not have to enter his access data every time he visits the website, because this is carried out by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart via a cookie. We also use cookies on our website that enable an analysis of the surfing behavior of users. The following data can be transmitted in this way: Frequency of page views Entered search terms Use of website functions The user data collected in this way is pseudonymized using technical measures. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users. When you visit our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration. The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR. The data subject can prevent the setting of cookies by our website at any time by making the appropriate setting in the internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the internet browser used, under certain circumstances not all functions of our website can be used to their full extent. Collection of general data and information The website Girls in Motion Store collects a series of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the server's log files saved. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that use an accessing system on our website can be controlled, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serves to avert risks in the event of attacks on our information technology systems. When using this general data and information, the Girls in Motion Store draws conclusions about the person concerned. Rather, this information is required in order to (1) deliver the content of our website correctly, (2) optimize the content of our website and the advertising for it, (3) the permanent functionality of our website guarantee information technology systems and the technology of our website and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. This anonymously collected data and information is therefore statistically evaluated by the Girls in Motion Store and also with the aim of increasing data protection and data security in our company in order to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject. In addition, the following personal data is also collected, insofar as the express permission of the users concerned and in compliance with the applicable data protection regulations: First and last names of users IP address of the user Email address of the users Place of residence (address.) Phone number The processing of personal data takes place on the basis of our legitimate interest to fulfill our contractually agreed services and to optimize our online offer. You can also visit this website without providing any personal information. However, in order to improve our online offer, we save (without Personal reference) Your access data to this website. These access data include e.g. B. the file you requested or the name of your Internet provider. By anonymizing the data, conclusions about your person are not possible. Registration on our website The data subject has the option of registering on the website of the data controller by providing personal data. Which personal data are transmitted to the person responsible for processing results from the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for their own purposes. The controller can process the Arrange for it to be passed on to one or more processors, for example a parcel service provider, who also uses the personal data exclusively for internal use, which is attributable to the controller. By registering on the website of the controller, the IP address assigned by the data subject's Internet service provider (ISP), the date and the time of registration are also stored. This data is stored against the background that this is the only way to prevent misuse of our services, and if necessary, this data enables the investigation of committed crimes. In this respect it is Storage of this data to secure the data controller required. In principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on serves to prosecute. The registration of the data subject with the voluntary provision of personal data serves the data controller to offer the data subject content or services that, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have them completely deleted from the 8/21 database of the data controller. The person responsible for processing grants any data subject at any time on request Information about which personal data about the data subject are stored. Furthermore, the person responsible for processing corrects or deletes the personal data at the request or advice of the data subject, provided that there are no statutory retention requirements. In this context, the entire staff of the controller is available to the data subject as a contact person. Contact option via the website Due to legal regulations, the website Girls in Motion Store contains information that enables quick electronic contact to our company and direct communication with us, which is also a general address of includes so-called electronic mail (email address). If a data subject contacts the data controller by email or via a contact form, the personal data transmitted by the data subject will be automatically saved. Such personal data transmitted by a data subject to the data controller on a voluntary basis are stored for the purpose of processing or contacting the data subject. This personal data is not passed on to third parties. Routine deletion and blocking of personal data The data controller processes and stores personal data of the data subject only for the period of time necessary to achieve the storage purpose or if this is done by the European directive and regulation giver or another legislator in laws or regulations, which of the data controller subject, was provided. If the purpose of storage is omitted or one of the European directives and Regulator or other relevant legislator Storage period, the personal data are routinely blocked or deleted in accordance with the statutory provisions. In any case, personal data will be deleted with a maximum period: 18 months Rights of the data subject 1) Right to confirmation Every data subject has the right granted by the European directive and regulation giver to ask the data controller to confirm whether personal data concerning them are being processed. If a data subject wishes to exercise this right of confirmation, they can contact an employee of the controller at any time. 2) Right to information Any person affected by the processing of personal data has the right granted by the European directive and regulation giver to receive free of charge information about the personal data stored about him and a copy of this information from the controller at any time. In addition, the European directive and regulation giver has granted the data subject information about the following information: - the processing purposes - the categories of personal data that are processed - the recipients or categories of recipients to whom the personal Data has been or will be disclosed, particularly with recipients in third countries or with international organizations - If possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration - the existence of a right to rectification or erasure of those affecting them personal data or if processing is restricted by the Controller or a right to object to this processing - the existence of a right to lodge a complaint with a supervisory authority if the personal data is not collected from the data subject: all available information about the origin of the data - the existence of automated decision-making, including profiling in accordance with Article 22 Paragraph 1 and 4 GDPR and - at least in these cases - meaningful Information about the logic involved as well as the scope and the intended Effects of such processing on the data subject The data subject also has the right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate guarantees in connection with the transfer. If a data subject wishes to exercise this right to information, they can contact an employee of the controller at any time. 3) Right to rectification Any person affected by the processing of personal data has the right granted by the European directive and regulation giver to request the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, subject to the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary statement. An affected person would like this To exercise the right to rectification, they can contact an employee of the controller at any time. 4) Right to erasure (right to be forgotten) Every person affected by the processing of personal data has this right granted by the European directive and regulation giver, by the Responsible to request that the personal data concerning them will be deleted immediately if one of the following reasons applies and so far processing is not required: - The personal data was collected for such purposes or in some other way processed for which they are no longer necessary. - The data subject withdraws their consent on which the processing was based in accordance with Art. Paragraph 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR, and is missing another legal basis for the processing. - In accordance with Art. 21 Para. 1 GDPR, the data subject objects to the Processing, and there are no overriding legitimate reasons for the processing or the data subject objects to the data protection according to Art. 21 Para. 2 GDPR Processing one. - The personal data was processed illegally. - The deletion of personal data is to fulfill a legal obligation required under Union law or the law of the Member States to which the Responsible is subject. - The personal data were collected in relation to the services offered by the Information society in accordance with Art. 8 Para. 1 GDPR. If one of the above-mentioned reasons applies and a data subject wishes to have personal data stored by the Girls in Motion Store deleted, they can contact an employee of the controller at any time . The employee of the Girls in Motion Store will arrange for the request for deletion to be complied with immediately. If the personal data has been made public by the Girls in Motion Store and our company as the controller is obliged to delete the personal data in accordance with Art. 17 Para. 1 GDPR, the Girls in Motion Store takes into account the available technology and implementation costs Reasonable measures, also of a technical nature, to inform other data controllers who process the published personal data that the data subject has deleted all links to this personal data or copies of them from these other data controllers Has requested replications of this personal data, as far as the processing is not necessary. The employee of the Girls in Motion Store will arrange the necessary in individual cases. 5) Right to restriction of processing Any person affected by the processing of personal data has the right granted by the European directive and regulation giver to request the controller to restrict processing if one of the following conditions is met: The data subject disputes the accuracy of the personal data for a period of time that enables the person responsible to check the accuracy of the personal data. The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data. The controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims. The data subject has objected to processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject. If one of the above requirements is met and an affected one Anyone wishing to request the restriction of personal data stored at the Girls in Motion Store can contact an employee of the controller at any time . The employee of the Girls in Motion Store will arrange for the processing to be restricted. 6) Right to data portability Every person affected by the processing of personal data has the right granted by the European directive and regulation giver to receive the personal data concerning them, which were provided by the data subject to a responsible person, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent in accordance with Art. 6 Para. 1 Letter a GDPR or Art. 9 Para . 2 letter a GDPR or on a contract in accordance with Art. 6 para. 1 letter b GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority, which has been transferred to the person responsible. Furthermore, when exercising their right to data portability in accordance with Art. 20 Para. 1 GDPR, the data subject has the right to have the personal data transferred directly from one person responsible to another, insofar as this is technically feasible and if so this does not affect the rights and freedoms of other people. In order to assert the right to data portability, the person concerned can contact an employee of the Girls in Motion Store at any time. 7) Right to object Any person affected by the processing of personal data has the right granted by the European directive and regulation giver, for reasons arising from their particular situation, at any time against the processing of personal data concerning them, which is based on Art. 6 Para. 1 Letter e or f DS-GVO takes place to object. This also applies to profiling based on these provisions. In the event of an objection, the Girls in Motion Store will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defense of legal claims. Processed the Girls in Motion Store personal data in order to operate direct mail, the data subject has the right to object to the processing of the data at any time to insert personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected to such direct advertising. If the data subject objects to the Girls in Motion Store processing for direct marketing purposes, the store will no longer process personal data for these purposes. In addition, the person concerned has the right, for reasons that arise from their particular situation, against the processing of personal data concerning them, scientific or historical research purposes at the Girls in Motion Store or for statistical purposes in accordance with Art. 89 Para. 1 DS GMOs to raise an objection, unless such processing is necessary to fulfill a task in the public interest. To exercise the right to object, the data subject can contact any employee of the Girls in Motion Store or another employee directly. The data subject is also free to exercise their right to object in connection with the use of information society services, regardless of Directive 2002/58 / EC, using automated procedures that use technical specifications. 8) Automated decisions in individual cases including profiling Any person affected by the processing of personal data has the right granted by the European directors and regulators not to be subjected to a decision based solely on automated processing - including profiling - which has a legal effect on them or similarly significantly affects them, unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) due to Union or Member State law to which the Responsible person is subject to, is permissible and this legislation contains appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject or (3) is carried out with the express consent of the data subject. If the decision (1) is necessary for the conclusion or fulfillment of a contract between the data subject and the person responsible or (2) it is made with the express consent of the data subject, the Girls in Motion Store takes appropriate measures to protect the rights and freedoms as well to protect the legitimate interests of the data subject, which includes at least the right to obtain the intervention of a person on the part of the person responsible, to state their own position and to contest the decision. If the data subject wishes to assert rights with regard to automated decisions, they can contact an employee of the controller at any time. 9) Right to withdraw consent under data protection law Any person affected by the processing of personal data has the right granted by the European directive and regulation giver to revoke their consent to the processing of personal data at any time. If the data subject wishes to exercise their right to withdraw consent, they can contact an employee of the controller at any time. Use of Google Analytics This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses so-called "cookies", which are text files that are saved on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually sent to a Google server transmitted to and stored in the USA Due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to further analyze website usage and services related to Internet use to be provided by the website operator. The IP address transmitted by your browser as part of Google Analytics is not included other data from Google merged. The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, other related services are then to be provided. The processing is based on the legitimate interest of the website operator. You can save the cookies by changing your settings accordingly Prevent browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: Browser Add On to deactivate Google Analytics. In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and this browser in the future as long as the cookie remains installed in your browser. Use of Adobe Analytics This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited ("Adobe"). Adobe Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. If a tracking data record is transmitted from a browser of a website visitor to the Adobe Datacenter, then the server setting made by us will ensures that the IP address is anonymized before geolocation, ie the last octet of the IP address is replaced by zeros. Before the tracking package is saved, the IP address is replaced by individual generic IP addresses. On behalf of the operator of this website, Adobe will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Adobe Analytics will not be merged with other Adobe data. You can prevent the storage of cookies by setting your browser software accordingly. However, this offer points out to the users that in this case you may not be able to use all functions of this website to their full extent. Users can also prevent Adobe from collecting the data generated by the cookie and relating to their use of the website (including your IP address) and from processing this data by Adobe by using the browser plug-in available under the following link. Download and install in: http://www.adobe.com/de/privacy/opt-out.html Analysis by Wireminds Our website uses tracking pixel technology from WiredMinds AG (www.wiredminds.de) to analyze visitor behavior. Data is collected, processed and stored, from which user profiles are created under a pseudonym. Where possible and sensible, these usage profiles are completely anonymized. Cookies can be used for this come. Cookies are small text files that are stored in the visitor's Internet browser and are used to recognize the Internet browser. The data collected, which may also include personal data, are transmitted to WiredMinds or collected directly by WiredMinds. WiredMinds may use information left by visits to the website to create anonymized usage profiles. The data obtained will not be used to personally identify the visitor to this website without the separate consent of the person concerned and will not be combined with personal data about the bearer of the pseudonym. If IP addresses are recorded, they are anonymized immediately by deleting the last number block. The data collection, processing and storage can be objected to at any time with future effect under the following link: Exclude from website tracking. Use of libraries (web fonts) In order to present our content correctly and graphically appealing across browsers, we use website libraries and font libraries such as B. Google Webfonts (https://www.google.com/webfonts/). Google web fonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google Webfonts or prevents access, content is displayed in a standard font. Calling up libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - but currently unclear whether and for what purposes - that the operator is more appropriate Libraries collect data. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/ Using Adobe Typekit We use Adobe Typekit for the visual design of our website. Typekit is a service of Adobe Systems Software Ireland Ltd. which gives us access to a font library. To integrate the fonts we use, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. This gives Adobe the information that our website has been accessed from your IP address. Further information on Adobe Typekit can be found in Adobe's data protection notice, which you can access here: www.adobe.com/privacy/typekit.html Payment Methods 1) PayPal: The controller has integrated PayPal components on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also has the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes over Trustee functions and offers buyer protection services. The European operating company of PayPal is the PayPal (Europe) SNrl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If the person concerned selects "PayPal" as the payment option during the ordering process in our online shop, the data of the person concerned is automatically transmitted to PayPal. By selecting this payment option, the person concerned consents to the transmission of personal data required for payment processing. The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that are necessary for payment processing. In order to process the purchase contract, personal data related to the respective order are also necessary. The purpose of the transmission of the data is to process payments and prevent fraud. The person responsible for processing will transmit PayPal personal data in particular if a legitimate one Interest in the transmission is given. The personal data exchanged between PayPal and the person responsible for processing may be transmitted by PayPal to credit reporting agencies. The purpose of this transmission is to verify identity and creditworthiness. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data are to be processed in the order. The data subject has the option of withdrawing their consent to the handling of personal data from PayPal at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. PayPal's current data protection regulations can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full. 2) Klarna: The data controller has integrated components from Klarna on this website. Klarna is an online payment service provider that enables purchase on account or flexible payment in installments. Klarna also offers other services, such as buyer protection or an identity and credit check. Klarna is operated by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. If the data subject selects either "purchase on account" or "hire purchase" as a payment option during the ordering process in our online shop, the data of the data subject will be automatically transmitted to Klarna. By selecting one of these payment options, the data subject consents to the transmission of personal data, which is necessary for the processing of the invoice or installment purchase or for identity and credit check. The personal data transmitted to Klarna are usually first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data that are necessary to process an invoice or installment purchase . In order to process the purchase contract, personal data related to the respective order are also necessary. In particular, there may be mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and tax levies, information on previous purchasing behavior or other information on the financial situation of the person concerned . The purpose of the transmission of the data is, in particular, to verify the identity Payment administration and fraud prevention. The controller will provide Klarna with personal data, in particular if there is a legitimate interest in the transfer. Klarna transmits the personal data exchanged between Klarna and the data controller to credit reporting agencies. The purpose of this transmission is to verify identity and creditworthiness. Klarna also passes on the personal data to affiliated companies (Klarna Group) and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data are to be processed in the order. To decide on the establishment, implementation or termination of a The contractual relationship collects and uses Klarna data and information about the data subject's previous payment behavior as well as probability values for their behavior in the future (so-called scoring). Scoring is calculated on the basis of scientifically recognized mathematical and statistical methods. The data subject has the option of consent to handling to withdraw personal data from Klarna at any time. A revocation does not affect personal data that are mandatory (contractual) payment processing must be processed, used or transmitted. Klarna's current data protection regulations can be found at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf be retrieved. Legal basis for processing Art. 6 I lit. a GDPR serves our company as the legal basis for Processing operations in which we have given consent for a particular Obtain processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations for the execution of pre-contractual ones Measures are required, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and his name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR are based. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if processing is necessary to safeguard the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh them. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if the data subject is a customer of the person responsible (recital 47 sentence 2 GDPR). Legitimate interests in processing by the controller or a third party Is the processing of personal data based on Article 6 I lit. f GDPR is our legitimate interest in carrying out our business for the benefit of all our employees and our shareholders. Duration for which the personal data is stored The criterion for the duration of the storage of personal data is the respective legal retention period. After the period has expired, the corresponding data will be routinely deleted, provided that it is no longer required to fulfill or initiate a contract. Legal or contractual regulations for the provision of the personal data; Necessity for the conclusion of the contract; Obligation of the data subject, the personal data to provide; possible consequences of not providing We will inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information about the contracting party). Sometimes it may be necessary to conclude a contract that a data subject provides us with personal data that we subsequently have to process. For example, the person concerned is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide personal data would result in the contract not being concluded with the person concerned could. Before the data subject provides personal data, the data subject must contact one of our employees. Our employee clarifies the person concerned on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences are Non-provision of personal data. Change of data protection regulation We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, for example when introducing new services. The new data protection declaration then applies to your next visit. Existing automated decision making As a responsible company, we do without an automatic one Decision making or profiling.
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 38.2 39.1 40.1 40.2 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 57.2 57.3 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 69.2 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1
OPĆA POLITIKA O ZAŠTITI OSOBNIH PODATAKA - Općenito Opća politika zaštite osobnih podataka opisuje svrhu i ciljeve prikupljanja, obrade i upravljanja osobnim podacima od strane GAJETA d.o.o. Cankareva 6, 10000 Zagreb, OIB: 38448070359 (u daljnjem tekstu Voditelj obrade) te osigurava adekvatnu razinu zaštite osobnih podataka u skladu s Općom uredbom o zaštiti podataka ( Uredba EU 2016/679 ) i Zakonom o provedbi Opće uredbe o zaštiti podataka ( NN 42/2018 ). Cilj jest uspostaviti primjerene procese zaštite i upravljanja osobnim podacima ispitanika, a primjenjuje se na sve obrade osobnih podataka, osim u slučaju gdje se obrađuju anonimizirani podaci ili su obrade takve prirode da se radi o statističkim analizama iz kojih nije moguće identificirati pojedinca. Pojmovi * osobni podaci - su svi podaci koji se odnose na pojedinca (ispitanika) čiji je identitet utvrđen ili se može utvrditi Pojedinac čiji se identitet može utvrditi jest osoba koje se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. * obrada podataka - svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim ili neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodna, izmjena, pronalaženje, vršenje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanje na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje. * izrada profila - svaki oblik automatizirane obrade i upotrebe osobnih podataka radi ocjene određenih osobnih aspekata povezanih s pojedincem radi analize ili predviđanje aspekata u vezi s radnim učinkom, ekonomskim stanjem, zdravljem, osobnim sklonostima, interesima, lokacijom, kretanjem tog pojedinca * voditelj obrade - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje samo ili zajedno s drugima određuje svrhe i sredstva obrade osobnih podataka, kada su svrhe i sredstva takve obrade utvrđeni pravom Unije ili pravom države članice * izvršitelj obrade - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje obrađuje podatke u ime voditelja obrade * primatelj - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo kojem se otkrivaju osobni podaci, neovisno o tome da li je on treća strana * treća strana - fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje nije ispitanik, voditelj obrade, izvršitelj obrade ni osobe koje su ovlaštene za obradu osobnih podataka koji se na njega odnose * privola - svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose * povreda osobnih podataka - kršenje sigurnosti koje dovodi do slučajnog ili nezakonitog uništenja, gubitka, izmjene, neovlaštenog otkrivanja ili pristupa osobnim podacima koji su preneseni, pohranjeni ili na drugi način obrađivani * nadzorno tijelo - u Republici Hrvatskoj - Agencija za zaštitu osobnih podataka * usluga informacijskog društva - usluga definirana čl. 1 st. 1 točkom 2 Direktive 2015/1535 Europskog parlamenta i Vijeća - svaka usluga informacijskog društva, to jest svaka usluga koja se obično pruža uz naknadu, na daljinu, elektroničkim sredstvima te na osobni zahtjev primatelja usluga - Načela obrade podataka Načela obrade podataka su osnovna pravila kojih se pridržavamo prilikom obrade osobnih podataka ispitanika, a to su: * zakonitost i poštenost - obrađujemo osobne podatke ispitanika sukladno važećim zakonima i poštujući sva prava ispitanika * transparentnost - pružamo ispitanicima sve potrebne informacije te na zahtjev osiguravamo uvid u njihove osobne podatke koje obrađujemo. Ispitanik će ujedno biti, prije samog prikupljanja osobnih podataka, upoznat sa svrhom obrade i svojim pravima * ograničenje svrhe - osobne podatke prikupljamo u posebne, jasne i zakonite svrhe te iste ne obrađujemo u svrhe za koje privola nije dana, osim za obrade koje su uvjetovane zakonom ili su neophodne za kvalitetnu isporuku usluge ili dostave * ograničenje pohrane - osobne podatke ispitanika čuvamo u obliku koji omogućava identifikaciju ispitanika samo onoliko dugo koliko je to potrebno u svrhu ili svrhe radi kojih se osobni podaci obrađuju. Mi možemo pohraniti osobne podatke na duži vremenski period, ukoliko nam to nalaže posebni zakonski propis ili legitimni interes ( npr. sudski spor) * smanjenje količine podataka - osobne podatke obrađujemo na način da su primjereni, relevantni i ograničeni u odnosu na svrhu ili svrhe za koje se obrađuju. * točnost - osobni podaci koje obrađujemo moraju biti točni i po potrebi ažurirani * cjelovitost i pouzdanost - osobne podatke obrađujemo na način kojim se osigurava odgovarajuća sigurnost osobnih podataka, uključujući zaštitu od neovlaštene ili nezakonite obrade te od slučajnog gubitka, uništenja ili oštećenja, primjenom odgovarajućih tehničkih i organizacijskih mjera. - Zakonitost obrade Obrada osobnih podataka je zakonita samo ako je ispunjen jedan od niže navedenih uvjeta: * ispitanik je dao privolu za obradu svojih osobnih podataka u jednu ili više svrha * obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka ili kako bi se poduzele radnje na zahtjev ispitanika prije sklapanja ugovora * obrada je nužna radi poštovanja pravnih obveza voditelja obrade * obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane, osim kada su od tih interesa jači interesi ili temeljna prava i slobode ispitanika koji zahtjevaju zaštitu obrade osobnih podataka, osobito ako je ispitanik dijete. Pod legitimnim interesom smatrane su obrade koje služe npr. da bi se unaprijedio i modernizirao proces razvoja proizvoda i usluga, ponudili proizvodi i usluge koje bi ispitaniku olakšali poslovanje sa voditeljem obrade ili npr. u svrhu sudskih sporova * obrada je nužna kako bi se zaštitili ključni interesi ispitanika ili druge fizičke osobe * obrada je nužna za izvršavanje zadaća od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade - Prava ispitanika U trenutku prikupljanja podataka ispitaniku ćemo pružiti sljedeće informacije: identitet i kontakt podatke voditelja obrade, svrhe obrade radi kojih se prikupljaju osobni podaci, pravnu osnovu za obradu, legitimne interese, primatelje ili kategorije primatelja osobnih podataka, ukoliko isti postoje, namjeru prijenosa osobnih podataka trećim zemljama, ukoliko ista postoji, razdoblje pohrane podataka ili kriterije koji definiraju to razdoblje, sva prava ispitanika, potencijalno postojanje automatiziranog donošenja odluka što podrazumijeva i izradu profila (smislene informacije o kojoj logici obrade je riječ, potencijalnim posljedicama i važnosti same obrade za ispitanika). U slučaju da se osobni podaci ne prikupljanju od ispitanika, navodimo i izvor osobnih podataka. * pravo na pristup - ispitanik ima pravo dobiti potvrdu obrađuju li se njegovi osobni podaci te ako se takvi podaci obrađuju, pristup osobnim podacima i svrsi obrade, * pravo na ispravak - ispitanik ima pravo bez nepotrebnog odgađanja ishoditi ispravak netočnih osobnih podataka koji se odnose na njega. Uzimajući u obzir svrhe obrade, ispitanik ima pravo dopuniti nepotpune osobne podatke, među ostalima i davanjem dodatne izjave. * pravo na brisanje ("pravo na zaborav")- ispitanik ima pravo ishoditi brisanje osobnih podataka koji se na njega odnose, a mi imamo obvezu obrisati osobne podatke bez nepotrebnog odgađanja ako je ispunjen jedan od sljedećih uvjeta: - osobni podaci više nisu nužni u odnosu na svrhe za koje su prikupljeni ili na drugi način obrađeni - ispitanik povuče privolu na kojoj se obrada temelji, a ne postoji druga pravna osnova za obradu, ispitanik uloži prigovor na obradu, a legitimni razlozi za realizaciju prava na brisanje su veći od legitimnog interesa nas kao voditelja obrade za obradu i/ili čuvanje podataka - osobni podaci su nezakonito obrađeni - osobni podaci moraju se brisati radi poštovanja pravne obveze propisane pravom Unije ili pravom Republike Hrvatske - osobni podaci su prikupljeni u vezi s ponudom usluge informacijskog društva izravno djetetu ispod dobne granice od 16 godina * pravo na ograničenje obrade - ispitanik ima pravo od nas tražiti ograničenje obrade osobnih podataka u slučaju da se osporava njihova točnost, kada je obrada nezakonita ( a ispitanik se protivi brisanju osobnih podataka te umjesto toga traži ograničenje njihove uporabe), te u slučaju kada je ispitanik uložio prigovor na obradu osobnih podataka očekujući potvrdu nadilaze li legitimni razlozi voditelja obrade razloge ispitanika * pravo na prijenos podataka - ispitanik ima pravo zaprimiti svoje osobne podatke koji se na njega odnose, a koje nam je dao temeljem svoje privole, u strukturiranom, uobičajeno upotrebljavanom i strojno čitljivom formatu te ima pravo tražiti prijenos tih podataka drugom voditelju obrade, ukoliko je tehnički izvedivo. * pravo na prigovor - ispitanik ima pravo na temelju svoje posebne situacije u svakom trenutku uložiti prigovor na obradu osobnih podataka koji se odnose na njega. Mi u takvoj situaciji više ne smijemo obrađivati osobne podatke, osim ako dokažemo da postoje legitimni razlozi za daljnju obradu koji nadilaze interese, prava i slobode ispitanika ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Nadalje, ako se osobni podaci obrađuju za potrebe izravnog marketinga, ispitanik u svakom trenutku ima pravo uložiti prigovor na obradu osobnih podataka koji se odnose na njega, što uključuje i izradu profila u mjeri koja je povezana s takvim izravnim marketingom. Dodatno, ispitanik ima pravo zatražiti da se na njega ne odnosi odluka koja se temelji isključivo na automatiziranoj obradi, uključujući izradu profila, koja proizvodi učinke na njega ili na sličan način značajno na njega utječu, osim ako je ta odluka: - dopuštena zakonom - potrebna za izvršavanje odluka između ispitanika i voditelja obrade - temeljena na izričitoj privoli ispitanika Ispitanik svoja prava može ostvariti u svakom trenutku na način da nas kontaktira na: GAJETA d.o.o. Cankareva 6, 10000 Zagreb, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite. Ispitaniku će biti pružene informacije o poduzetim radnjama najkasnije u roku od mjesec dana od dana zaprimanja zahtjeva. Ukoliko je obrada zahtjeva složena ili se radi o velikom broju zahtjeva, taj rok se može produžiti za još dva mjeseca, ali će u tome slučaju ispitanik biti izvješten o razlozima eventualnog produljenja roka. Također, ukoliko se ne postupi po zahtjevu ispitanika u roku od mjesec dana od primitka zahtjeva, o odluci će ispitanik biti izvješten uz navođenje razloga za takvu odluku te njegovoj mogućnosti podnošenja pritužbe Agenciji za zaštitu osobnih podataka, Martićeva 14, 10000 Zagreb. U slučaju da su zahtjevi ispitanika očito neutemeljeni ili pretjerani, osobito zbog njihovog učestalog ponavljanja, možemo naplatiti razumnu naknadu na temelju administrativnih troškova ili odbiti postupati po zahtjevu ispitanika. - Sigurnost i obveze U nekim poslovnim procesima se pojavljujemo kao voditelji obrade, u tome slučaju samostalno određujemo svrhu i način obrade osobnih podataka, međutim, u nekim poslovnim procesima smo u ulozi izvršitelja obrade, u kojem situacijama obrađujemo osobne podatke u ime voditelja obrade. U skladu s time kontinuirano provodimo odgovarajuće tehničke i organizacijske mjere zaštite kako bi zaštitili osobne podatke ispitanika, u kojoj god da se ulozi nalazimo. Osobne podatke čuvamo u skladu sa našim integriranim standardima sigurnosti, a gdje je to primjenjivo, koristimo kriptografske metode zaštite podataka te unapređujemo sigurnosne mjere u svrhu sprječavanja povrede osobnih podataka ispitanika. Ne dopuštamo neovlašteno prikupljanje, obradu ili korištenje osobnih podataka te primjenjujemo pravilo ograničavanja pristupa podacima samo na one podatke koji su potrebni za obavljanje pojedinih poslovnih zadataka, sukladno našim internim odlukama. Osobne podatke štitimo od neovlaštenog pristupa, korištenja, izmjene te gubitka neovisno od toga da li su isti pohranjeni u papirnatom ili elektroničkom obliku. - Povreda osobnih podataka U slučaju da dođe do povrede osobnih podataka, svi naši radnici imaju dužnost obavijestiti odgovorne osobe o povredi bez odgode, a mi kao voditelji obrade smo dužni, bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvijestiti nadzorno tijelo odnosno Agenciju za zaštitu osobnih podataka. U slučaju da se nalazimo u ulozi izvršitelja obrade, o povredi obavještavamo u tome slučaju voditelja obrade podataka. Ukoliko je riječ o povredi osobnih podataka koja će vjerojatno prouzročiti visok rizik za prava i slobode pojedinaca, o povredi ćemo obavijestiti i ispitanika, osim ako: - su poduzete odgovarajuće tehničke i organizacijske mjere zaštite i te su mjere primijenjene na osobne podatke obuhvaćene povredom osobnih podataka, posebno one koje osobne podatke čine nerazumljivima bilo osobi koja im nije ovlaštena pristupiti, kao što je enkripcija - su poduzete naknadne mjere kojima se osigurava da više nije vjerojatno da će doći do visokog rizika za prava i slobode ispitanika - bi se time zahtijevao nerazmjeran napor, u kojem slučaju mora postojati javna obavijest ili slična mjera kojom se ispitanici obavještavaju na jednako djelotvoran način Ispitanik ima pravo podnijeti pritužbu nadzornom tijeku - Agenciji za zaštitu osobnih podataka u slučaju - povrede njegovih osobnih podatka ili - ako drži da se njegova prava grubo krše sukladno Općom uredbom o zaštiti osobnih podataka - Završne odredbe Ova Opća politika stupa na snagu danom donošenja, a dostupna je u poslovnim prostorijama na oglasnoj ploči GAJETA d.o.o. Zagreb, 25.05.2018. godine GAJETA d.o.o. kojeg zastupa direktor Jasminka Jović