https___porr-group.com_en_data-protection-policy_.xml
http___fpz.unizg.hr_o-fakultetu.asp_m_zastita-osobnih-podataka_1.xml
1.1 2.1 2.2 2.3 2.4 2.5 3.1 3.2 3.3 4.1 4.2 4.3 5.1 6.1 6.2 6.3 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 28.2 28.3 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 38.1 39.1 40.1 41.1 41.2 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 49.2 49.3 50.1 51.1 51.2 52.1 52.2 53.1 53.2 54.1 55.1 56.1 56.2 57.1 57.2 58.1 58.2 58.3 59.1 60.1 60.2 60.3 60.4 61.1 61.2 62.1 62.2 63.1 64.1 64.2 65.1 66.1 67.1 68.1 69.1 69.2 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 88.2 89.1 90.1 91.1 92.1 93.1 94.1 95.1 96.1 96.2 96.3 96.4 96.5 96.6 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 109.2 109.3 109.4 110.1 110.2 110.3 110.4 110.5 110.6 111.1 112.1 113.1 114.1 114.2 114.3 114.4 114.5 114.6 115.1 115.2 115.3 116.1 116.2 116.3 116.4 117.1 117.2 117.3 117.4 117.5 118.1 119.1 119.2 119.3 119.4 119.5 119.6 119.7 120.1 120.2 121.1 122.1 122.2 122.3 123.1 124.1 124.2 124.3 124.4 125.1 126.1 127.1 127.2 127.3 127.4 128.1 128.2 129.1 130.1 131.1 131.2 131.3 131.4 131.5 131.6 131.7 132.1 133.1 133.2 133.3 134.1 134.2 134.3 134.4 134.5 135.1 136.1 136.2 137.1 138.1 138.2 138.3 139.1 139.2 140.1 140.2 141.1 142.1 143.1 144.1 144.2 144.3 144.4 145.1 145.2 145.3 146.1 146.2 147.1 148.1 149.1 150.1 151.1 152.1 152.2 153.1 154.1 155.1 155.2
Data protection policy Thank you for your interest in our company. Data protection is of the utmost importance to the board of PORR AG. PORR AG's websites may for the main part be used without submitting personal data. If a data subject wishes to avail themselves of specific services provided by our company via our website, this may necessitate the processing of personal data. If this is necessary, we will obtain the data subject's consent. Personal data will always be processed subject to the provisions of the General Data Protection Regulation and in compliance with national data protection legislation. This data protection policy is designed to inform our users about the contents and purposes of the personal data that we collect and process. Furthermore, this data protection policy informs data subjects about the rights they are entitled to. As the website operator, PORR AG has implemented an extensive number of technical and organisational measures in order to ensure that the data processed in connection with this website is reliably protected. However, there is always a possibility that data transmissions between your device and our server may feature security gaps, especially if the device you are using to communicate with our server can be accessed by third parties. If you have any concerns regarding security, you can use an alternative method, e.g. the telephone or one of our branch offices, to submit your information. Definition of terms PORR AG's data protection policy is based on the provisions and definitions of the General Data Protection Regulation (GDPR). Our data protection policy is designed to be easily readable and comprehensible for our visitors, clients and business partners. In order to ensure this, we would like to define the terms used beforehand: 1) Personal data Personal data comprises all information relating to an identifiable natural person. 2) Data subject A data subject is any identifiable natural person whose personal data is processed by a controller. 3) Controller The controller is the company that collects the data subject's personal data and determines the purposes and means of processing. 4) Processor The processor is a natural person or company involved by the controller in the processing of personal data. 5) Recipient The recipient is a natural or legal person, or public authority, to whom the personal data are disclosed. 6) Third party A third party is a natural or legal person or public authority who processes personal data on behalf of the controller or processor. 7) Processing Processing is any operation performed in connection with personal data. This ranges from the collection and storage to the restriction or erasure of personal data. 8) Restriction of processing Restriction of processing means limiting the use of personal data. 9) Consent Consent means any statement issued by a person to indicate that he or she agrees to the processing of personal data concerning him or her. 10) Revocation A person issuing a revocation revokes the right of the controller to process his or her data on the basis of consent. 11) Pseudonymisation Pseudonymisation separates the data from the identifiable person. This connection cannot be re-established without the use of additional, specially safeguarded information. The pseudonymisation process also corresponds to what is known as data minimisation. 12) Profiling Profiling is any form of automated evaluation of personal data. Name and address of the controller For the purposes of the GDPR, the controller is: PORR AG Absberggasse 47 1100 Vienna Austria Email: datenschutz@porr.at Website: porr-group.com Collection of data Every time the PORR AG website is accessed, the website collects a variety of data and information which is then stored in the server's logfiles. The information collected in this manner includes, among other things: 1) Browser types and versions 2) Your computer's operating system 3) The website that linked you to us 4) Pages accessed on our web server 5) The date and time of your visit 6) Your IP address 7) Your Internet service provider When using this anonymously collected information, PORR AG will not attempt to use it to identify the data subject. This data is, however, necessary in order to deliver the content of our website correctly, optimise the display, and provide the authorities with the necessary information in the event of a hacking attack. The data is therefore processed by PORR AG both statistically and as a technical measure to ensure data protection and information security of this processing and your data. Registering on our website You have the option of registering on our website. The data entered by the data subject is processed solely for the controller's internal use and purposes. By registering on our website, the IP address assigned by your Internet service provider, the date, and the time of registration will be stored. This data will, in general, not be disclosed to third parties insofar as no legal disclosure obligations exist or disclosure is not required for the purposes of prosecution. Registration allows us to offer you content and services which may only be offered to registered users. As a registered user, you may change your submitted data at any time or have it erased from our database in its entirety. Cookies PORR AG's web pages use cookies, i.e. text files that are stored in a computer's data system via an Internet browser. Cookies contain a cookie ID, which is an unambiguous identifier. They allow PORR AG to distinguish the data subject's browser from other Internet browsers, display content in an individualised manner and cater to the data subject's wishes and results. The shopping basket cookie in the online shop is one example of this. The online shop uses a cookie to remember the items a customer has placed in the virtual shopping basket. If you wish to prevent cookies from being set, you can define this in the security settings of your Internet browser, thereby permanently preventing the storage of cookies. Any cookies that are already on your computer can be deleted at any time via the Internet browser or directly from within the data system. Please be aware that deactivating cookies may result in limiting the set of functions provided by the website. Subscribing to our newsletter Users have the option of subscribing to our newsletter via our website. We use our newsletter to keep our customers and business partners informed about our offers at regular intervals. After you have registered, a confirmation email will be sent to the email address you have submitted, using the double opt-in method. This confirmation email serves to ensure that you, as the owner of the email address, have actually authorised delivery of the newsletter. If you subscribe to the newsletter via our website, your email address, the IP address assigned by your Internet service provider, and the date and time of registration will be stored. This data will, in general, not be disclosed to third parties insofar as no legal disclosure obligations exist or disclosure is not required for the purposes of prosecution. You can, of course, unsubscribe from our newsletter at any time. Please see the bottom of the newsletter for the necessary information. Contacting us via the website Due to legal provisions, our website contains information on how to easily contact PORR AG. If you contact us via email or a contact form, the data you have transmitted will be automatically stored and used solely for the purposes of replying to your message. Routine erasure and blocking of personal data PORR AG shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or insofar as this is granted by legal provisions. If the storage purpose or the legal basis are no longer given, your personal data will be blocked or erased on the basis of our processes and in accordance with legal requirements. Rights of the data subject Comprehensive rights of the data subject apply for the processing of personal data, in accordance with the EU-GDPR. A general list of these rights is provided below for your information: 1) Right of access Every data subject shall at any time have the right to obtain information about the stored personal data concerning him or her as well as a copy of this information from the controller. 2) Right to rectification Every data subject shall have the right to obtain the rectification or completion of inaccurate personal data concerning him or her from the controller without delay. 3) Right to erasure Every data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her, where one of the following grounds applies - The purposes for processing no longer exist - The legal grounds for processing no longer exist (termination of the contract, revocation of consent) Please contact one of our staff members at any time - in particular by electronic means via datenschutz@porr.at - to obtain erasure of your data stored by us. 4) Right of restriction Every data subject affected by the processing of personal data shall have the right to obtain from the controller restriction of processing where one of the following applies: - The purposes for processing no longer exist - The legal grounds for processing no longer exist (termination of the contract, revocation of consent) Please contact one of our staff members at any time - in particular by electronic means via datenschutz@porr.at - to obtain restriction of processing of your data stored by us. 5) Right of data portability Every data subject shall have the right to receive the personal data that he or she has personally provided to a controller, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from the original controller, if the processing is based on consent or on a contract and is carried out by electronic means. Please contact one of our staff members at any time - in particular, by electronic means via datenschutz@porr.at - to obtain transmission of your data stored by us. 6) Right to object Every data subject shall have the right to object to the processing of personal data concerning him or her based on legitimate interests. In the event of an objection, PORR AG will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. Please contact one of our staff members at any time - in particular, by electronic means via datenschutz@porr.at - to exercise your right to object. 7) Automated individual decision-making, including profiling As a responsible company, we refrain from automated decision-making and profiling. 8) Right to revoke consent Every data subject shall have the right to revoke his or her consent to the processing of his or her personal data at any time. Please contact one of our staff members at any time - in particular by electronic means via datenschutz@porr.at - to exercise your right to revoke consent. Data protection relating to applications and during the application process The controller collects and processes applicants' personal data for the purposes of implementing the application process. This processing may also be undertaken by electronic means. This applies in particular, in cases where the applicant submits their respective application documents to the controller by electronic means, for example, via email or via the careers portal porr-group.com/en/karriere. If PORR AG enters into a service contract with an applicant, the submitted data will be stored for the purposes of implementing the employment relationship. If PORR AG does not enter into a service contract with the applicant, the applicant’s application documents will be automatically deleted, at the latest, six months after he or she is notified of this decision, insofar as this is not precluded by other legitimate interests of PORR AG or the applicant's consent to further processing. If your application is not targeted towards a specific role listed in the careers portal (speculative application), your data may be forwarded on to a company within the PORR Group, depending on your qualifications, to satisfy mutual, legitimate interests. What data are collected? The following data are collected and processed for the automatic processing of your application: 1) First name, last name, email address and address/place of residence, if applicable, date of birth, title, telephone number, nationality 2) Additional questions, depending on the respective job offer (e.g. driver's licence) 3) CV, in particular, information regarding your professional experience and education 4) Professional experience and education 5) Skills (e.g. Photoshop, MS Office) 6) Application photo 7) Qualifications, awards and language skills 8) Cover letter 9) Any data and documents you may have uploaded Data protection provisions concerning the application and use of Facebook Our website contains plugins provided by Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. Facebook is a social network. The respective plugin can be identified by the Facebook logo or the "like" button. An overview of all of the Facebook plugins is provided under the following link: developers.facebook.com/docs/plugins As soon as you visit our website, the Facebook plugin creates a direct connection between your Internet browser and Facebook's servers. This informs Facebook that our website was accessed by your IP address. If you are logged into Facebook, you can link the content on our website to your Facebook profile by clicking on the "like" button. Facebook will then be able to assign your visit to our website to your Facebook account. Facebook does not inform us, as the providers of our website, of the content of the transmitted data or the data usage. For more information, please click on the following link: www.facebook.com/policy.php If you are a member of Facebook but do not want data concerning you to be transmitted to Facebook via our website and linked to your membership data, please sign out of Facebook before viewing our website. Data protection provisions concerning the application and use of Google Analytics (with anonymisation function) Our website uses Google Analytics. This is a web analysis service operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called cookies. Cookies are files. By storing cookies on your computer, Google can analyse your usage of our website. This information and your anonymised IP address are transmitted to Google's servers in the USA and stored there. We use the application “_gat. _anonymizeIp” for web analytics via Google Analytics. This abbreviates and anonymises your IP address. Google evaluates the information relating to your use of our website. Reports on your activities on our website are created and provided to us. This can also serve the purpose of allowing us to offer or provide other services concerning the use of our website or the Internet. Google may pass this information on to a third party if this is legally required or if said third party has been commissioned by Google to process this data. You can prevent these cookies from being stored on your computer by adjusting the settings of your Internet browser accordingly. This may, however, restrict your use of our website. You may also prevent Google from collecting, transmitting and processing your data and IP address. To do so, please download and install a plugin for your Internet browser. This plugin is available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de Data protection provisions concerning the application and use of LinkedIn Our website features plugins provided by the social network LinkedIn, or the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as "LinkedIn"). The LinkedIn plugins can be identified by the corresponding logo or the "recommend" button. Please be aware that the plugin creates a direct connection between your respective Internet browser and LinkedIn's server when you visit our website. This informs LinkedIn that our website has been viewed from your IP address. If you click on LinkedIn's "recommend" button while signed into LinkedIn, you can link content from our web pages to your LinkedIn profile. This allows LinkedIn to assign your visit to our website to you or your user account. Please be aware that we are not informed of the content of the transmitted data and how this is used by LinkedIn. Further details concerning the collection of data, your legal options, and settings options can be obtained from LinkedIn. These details can be viewed under www.linkedin.com/legal/privacy-policy Data protection provisions concerning the application and use of Shariff PORR AG has integrated the component Shariff on this website. The Shariff component provides social media buttons that comply with data protection provisions. Shariff was developed for the German computer journal c't and is published via GitHub, Inc. The developer of the component is GitHub, Inc. 88 Colin P. Kelly Junior Street, San Francisco, CA 94107, USA. The button solutions provided by the social networks themselves generally transmit personal data to the respective social network whenever the user visits a website where a social media button has been integrated. By using the Shariff component, personal data are not transmitted to social networks unless the website user actively clicks on one of the social media buttons. The computer journal c't provides further information on the Shariff component under www.heise.de/newsticker/meldung/Datenschutz-und-Social-Media-Der-c-t-Shariff-ist-im-Einsatz-2470103.html. Using the Shariff component serves to protect the personal data of visitors to our website while at the same time enabling us to integrate a button solution for social networks into this website. Further information and the data protection provisions that apply for GitHub can be viewed under help.github.com/articles/github-privacy-policy/. Data protection provisions concerning the application and use of Twitter PORR AG's website incorporates functions provided by Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA. If you use Twitter and, in particular, the "retweet" function, Twitter will link your Twitter account to the websites you have frequented. Other Twitter users, particularly your followers, are notified of this. Data is also transmitted to Twitter in this way. Twitter does not inform us, as the providers of our website, of the content of the transmitted data, nor of how it uses the data. Please click on the following link for further information: twitter.com/privacy However, please be aware that you have the option of changing your data protection settings for Twitter in the settings for your Twitter account under twitter.com/account/settings. Data protection provisions concerning the application and use of XING This website uses the XING "share" button. By accessing this website, a connection is made from your browser to the servers of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. This allows the share functions (e.g. displaying the counter value) to be carried out. It does not store your personal data via your visit to this website. In particular, XING does not store IP addresses. Nor does it evaluate your usage patterns. For up-to-date information on data protection concerning the "share" button and other relevant information on this topic, please click on the following link: www.xing.com/app/share Data protection provisions concerning the application and use of YouTube This website contains at least one YouTube plugin. YouTube is operated by the company YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. As soon as you view one of the pages of our website that features a YouTube plugin, a connection to YouTube's servers is established. YouTube's servers are informed of which specific page of our website you have visited. If you are also signed into your YouTube account, this allows YouTube to assign your browsing patterns directly to your personal profile. You can rule out this possibility by logging out of your account before visiting our web pages. Please see YouTube's data protection provisions under policies.google.com/privacy for more information on how YouTube collects and uses your data. Data protection provisions concerning the application and use of whatchado PORR AG has integrated whatchado components into this website. whatchado is a career platform which matches companies with suitable job candidates. whatchado is operated by the company whatchado GmbH, Möllwaldplatz 4/39 1040 Vienna, Austria. Every time one of the individual pages of this website, which is operated by the controller and into which a whatchado page (web pages and videos) has been incorporated, the corresponding whatchado component automatically instructs the Internet browser on the data subject's IT system to download a diagram of the respective whatchado component. Further information on whatchado is available under www.whatchado.com/en/about-us. As part of this technical procedure, whatchado is informed of which specific subpage of our website is currently being viewed by the data subject. If the data subject is logged into whatchado while viewing a subpage of our website that contains a whatchado video, whatchado will identify which specific subpage the data subject is currently viewing. This information is collected by whatchado and assigned to the data subject's respective whatchado account. The whatchado component always informs whatchado that the data subject has viewed our website if the data subject is simultaneously logged into whatchado, regardless of whether or not the data subject clicks on a whatchado video. If the data subject does not want this information to be transmitted to whatchado, he or she can prevent transmission by logging out of his or her whatchado account before viewing our website. Information on how whatchado collects, processes and uses personal data is provided in the whatchado data protection provisions, which can be viewed under www.whatchado.com. Data protection provisions concerning the application and use of kununu. PORR AG has integrated components provided by kununu into this website. With a total of 2.4 million reviews of over 650,000 companies to date, kununu is Europe's largest employer review sites. kununu is operated by the company kununu GmbH, a subsidiary of XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Every time one of the individual pages of this website, which is operated by the controller, and into which a kununu component has been incorporated, the corresponding kununu component automatically instructs the Internet browser on the data subject's IT system to download a diagram of the respective kununu component. As part of this technical procedure, kununu is informed of which specific subpage of our website is currently being viewed by the data subject. If the data subject is logged into kununu while viewing our website, kununu will identify which specific subpage the data subject is currently viewing every time the website is accessed by the data subject and for the entire viewing period. This information is collected by the kununu component and assigned to the data subject's respective kununu account by kununu. If the data subject clicks on one of the buttons integrated into our website, for example the "rate employer" button, kununu will assign this information to the data subject's personal kununu user account and store this personal data. The kununu component always informs kununu that the data subject has viewed our website if the data subject is simultaneously logged into kununu, regardless of whether or not the data subject clicks on the kununu component. If the data subject does not want this information to be transmitted to kununu, he or she can prevent transmission by logging out of his or her kununu account before viewing our website. Information on how kununu collects, processes and uses personal data is provided in the data protection provisions that apply for kununu, which can be viewed under privacy.xing.com/en. Forwarding data PORR AG may issue instructions for your contact data to be forwarded on to one or more processors, for example a parcel service provider, who will also use the personal data exclusively for internal purposes, which are to be ascribed to the controller. Our contracts with all the relevant processors ensure that these service providers also comply with the provisions of the GDPR. Legal basis for processing The legal basis for processing personal data on our website is either our legitimate interest in acquiring you as a future customer, e.g. as a pre-contractual measure, informing you of our products and services, or to fulfil our contractual obligations towards you as the data subject, if an order has been placed that would necessitate the delivery of goods. Legal retention obligations or the obligation to provide statements to government authorities may, as a result, become a legal basis, in and of themselves. We will obtain your revocable consent for all other processing operations, e.g. newsletters. Period for which the personal data will be stored The storage of personal data is limited to the statutory retention period. After this period has expired, the corresponding data will be deleted, insofar as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 11.1 12.1 13.1 13.2 14.1 15.1 16.1 16.2 16.3 16.4 16.5 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 23.2 24.1 25.1 26.1 26.2 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 37.2 38.1 38.2 39.1 40.1 40.2 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 48.2 49.1 50.1 51.1 52.1 53.1 54.1 55.1
Zaštita osobnih podataka Politika zaštite osobnih podataka TEMELJNE INFORMACIJE Fakultet prometnih znanosti Sveučilišta u Zagrebu poštuje privatnost svake osobe čije osobne podatke prikuplja. Fakultet prometnih znanosti, kao Voditelj obrade Vaših podataka obvezuje se na zaštitu Vaših osobnih podataka te jamči da će prikupljanje i čuvanje podataka izvoditi u skladu s odredbama Uredbe EU 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (Opća uredba o zaštiti podataka), Zakona o provedbi Opće uredbe o zaštiti podataka (NN 42/2018) i ostalih propisa koji uređuju predmetno područje, a imaju primjenu u Republici Hrvatskoj. Primjena načela zaštite podataka Fakultet prometnih znanosti posebno pazi na poštivanje načela obrade podataka, stoga obrađuje podatke: - Zakonito – obrada će biti moguća ako je ista dopuštena zakonom i to u granicama koje zakon dopušta. - Pošteno – uvažavajući specifičnosti svakog odnosa, primjenjujući sve adekvatne mjere za zaštitu osobnih podataka i privatnosti općenito te ne sprečavajući ispitanika u ostvarivanju svojih prava. - Transparentno – informirajući ispitanike o obradama osobnih podataka. Od samog prikupljanja podataka kada su ispitanici informirani o svim aspektima obrade podataka pa sve do prestanka obrade podataka ispitanicima se pruža jednostavan i brz pristup vlastitim podacima što uključuje mogućnost uvida i dobivanja kopije u skladu s odredbama Uredbe. Određene informacije mogu se ograničiti samo kada je to zahtijevano zakonom ili kada je to nužno za zaštitu trećih osoba. - Uz ograničenje svrhe – obrađujući osobne podatke u one svrhe u koji su prikupljeni a u druge svrhe ako su za to ispunjeni uvjeti iz Uredbe. - Uz ograničenje pohrane – pohranjujući podatke u obliku koji omogućuje identifikaciju ispitanika samo onoliko dugo koliko je potrebno u svrhe radi kojih se osobni podaci obrađuju, a duže samo ako je dopušteno Uredbom ili pozitivnim propisom. - Uz smanjenje količine podataka – obrađujući podatke ako su primjereni, relevantni i ograničeni na ono što je nužno. Posebno se pazi da se ne prikupljaju podaci za koje ne postoji opravdana potreba za obradom. - Vodeći računa o točnosti – vodeći računa o točnosti i ažurnosti podataka i brišući netočne podatke u okviru mogućnosti. - Vodeći računa o cjelovitosti i povjerljivosti – pružajući tehničkim i organizacijskim mjerama odgovarajuću sigurnost osobnih podataka, uključujući zaštitu od neovlaštene ili nezakonite obrade te od slučajnog gubitka, uništenja ili oštećenja primjenom odgovarajućih tehničkih ili organizacijskih mjera. Vaše osobne podatke obrađivat ćemo samo na temelju zakonske obveze, radi ispunjenja ugovorne obveze, Vaše privole ili druge legitimne osnove. Prikupljene osobne podatke obrađujemo uz obaveznu primjenu odgovarajućih pravnih, tehničkih i organizacijskih mjera sigurnosti kako bismo spriječili svaku neovlaštenu obradu podataka. Pristup Vašim osobnim podacima ograničen je samo na one zaposlenike kojima su te informacije potrebne. Prikupljamo samo one podatke koji su nužni za predmetnu obradu te jamčimo da podaci koji su prikupljeni za jednu svrhu neće se koristiti ni za jednu drugu svrhu ili na način koji nije u skladu s odobrenom svrhom. Za svrhu obrade koja se ne provodi temeljem zakonske osnove ili ugovora tražit ćemo od Vas posebnu privolu. Za izvršavanje određenih usluga Fakultet je ovlastio treće osobe – izvršitelje obrade, kojima dostavlja Vaše podatke u svrhu obavljanja ugovorenih usluga. S izvršiteljima obrade Fakultet sklapa ugovor u pogledu njihovih ovlasti i obveza kod obrade osobnih podataka, povjerljivosti ustupljenih podataka, a sve sukladno zahtjevima Uredbe i pozitivnim propisima. Razdoblje čuvanja podataka Fakultet će Vaše osobne podatke čuvati samo onoliko koliko je potrebno kako bi se izvršila ugovorna ili zakonska obveza ili legitimni interes, osim u slučaju obrade osobnih podataka na temelju privole, kada u trenutku povlačenja Vaše privole prestaje obrada. Privolu možete povući u svakom trenutku slanjem zahtjeva na e-adresu Službenika za zaštitu osobnih podataka Fakulteta prometnih znanosti (sluzbenik-za-zastitu-podataka@fpz.hr). Napominjemo da povlačenje privole ne utječe na zakonitost obrade temeljene na privoli prije njezina povlačenja. Ostvarivanje prava ispitanika Svaki ispitanik ima pravo da u svakom trenutku od voditelja obrade može zatražiti pristup svojim osobnim podacima, njihov ispravak ili dopunu, brisanje (ukoliko ne postoje opravdani razlozi za čuvanje podataka), ograničavanje njihove obrade (primjerice kada osporavate točnost podataka, sve dok ne provjerimo njihovu točnost) kao i pravo na povlačenje suglasnosti za obradu podataka. Navedena prava ostvaruju se podnošenjem zahtjeva na e-adresu Službenika za zaštitu osobnih podataka Fakulteta prometnih znanosti (sluzbenik-za-zastitu-podataka@fpz.hr). Obrada osobnih podataka kandidata za zapošljavanje Fakultet prometnih znanosti u svojstvu voditelja obrade prikuplja i obrađuje osobne podatke kandidata za zapošljavanje na otvorena radna mjesta na Fakultetu prometnih znanosti u sklopu postupka selekcije te u svrhu sklapanja i izvršavanja ugovora o radu s kandidatima, ovisno o rezultatima selekcijskog postupka. Fakultet prometnih znanosti ima legitimni interes za zapošljavanje onih radnika koji svojim znanjem, vještinama i osobnošću najbolje odgovaraju potrebama pojedinih radnih mjesta na Fakultetu. Radi ostvarivanja tog legitimnog interesa, Fakultet provodi selekcijske postupke vezane za izbor kandidata koji su se prijavili na objavljeni natječaj za posao. Tijekom selekcijskog postupka, a kako bi provjerio sposobnost i znanja kandidata te utvrdio koji od kandidata zadovoljavaju sve postavljene zahtjeve pojedinog radnog mjesta, Fakultet prometnih znanosti od kandidata prikuplja i obrađuje samo i isključivo one kategorije i vrste osobnih podataka koje su potrebne za provedbu selekcijskog postupka: - opće podatke o kandidatu (ime i prezime, OIB, datum rođenja, adresa prebivališta/boravišta, broj mobitela, e-mail adresa), - podatke o stečenom obrazovanju (stečeno zvanje i stručna sprema, naziv završene ustanove u kojoj je stečeno zvanje i stručna sprema, period trajanja obrazovanja), - podatke o prethodnom poslodavcu (tvrtka prethodnog poslodavca, naziv i opis radnog mjesta, razdoblje rada kod prethodnog poslodavca), - podatke o stažu, - dokaze o stečenim kvalifikacijama i znanjima (stečene diplome, certifikati i potvrde kojima kandidat potvrđuje svoje stručne i druge kompetencije koje je naveo u svojoj prijavi na natječaj), - uvjerenje nadležnog suda da se protiv kandidata ne vodi kazneni postupak i da nije kažnjavan,v - podatke o preporukama koje je kandidat naveo u svojoj prijavi, - dokumentacija koju kandidat dostavi s osnove prednosti pri zapošljavanju, - podatke o rezultatima provedenih testiranja kandidata. Vaši osobni podaci su nam potrebni radi utvrđivanja ispunjavate li uvjete raspisanog natječaja za slobodno radno mjesto. Ako nam ne pružite osobne podatke ili to ne učinite u mjeri u kojoj su nam ti podaci nužni za utvrđivanje ispunjavate li uvjete raspisanog natječaja, nećemo biti u mogućnosti uključiti Vas u raspisani natječaj. Vaši osobni podaci otkrivaju se zaposlenicima unutar kadrovske službe te voditeljima organizacijskih jedinica za koje podnosite zamolbu za zaposlenje, te zaposlenicima koji su u sastavu povjerenstva koje odlučuje o selekciji kandidata. Vaše osobne podatke možemo dostaviti i vanjskim primateljima, tj. fizičkim i pravnim osobama koje su s nama u poslovnom odnosu u vezi sa provođenjem postupka zapošljavanja odnosno provođenja testiranja kandidata. Za cijelo vrijeme njihove obrade osobni podaci kandidata tretiraju se kao poslovna tajna te se obrađuju uz primjenu adekvatnih tehničkih i organizacijskih mjera kojima se osigurava njihova zaštita. Podatke kandidata za posao koji nisu prošli selekcijski postupak brišu se, odnosno vraćaju se, nakon što proteknu rokovi za pravne lijekove po provedenom natječaju, osim u slučaju kada ih, uz izričitu privolu kandidata, zadržavamo u svojoj bazi podataka radi eventualnog budućeg zaposlenja. Ukoliko ne želite da čuvamo Vaše podatke, ističemo da u svakom trenutku možete povući svoj pristanak za obradu osobnih podataka u kojem slučaju ćemo izbrisati odnosno uništiti Vaše osobne podatke. Ukoliko Fakultet prometnih znanosti s kandidatom sklopi ugovor o radu, od Vas ćemo zatražiti i druge kategorije osobnih podataka koje smo dužni obrađivati sukladno zakonskim propisima a i koji su navedeni u našem pravilniku o radu, a isto u svrhu ostvarivanja prava iz radnog odnosa i radi poštivanja naše pravne obveze kao poslodavca. Ističemo kako Vi imate pravo na pristup svojim podacima, pravo na ispravak osobnih podataka (u slučaju da su pohranjeni Vaši osobni podaci netočni ili nepotpuni, imate pravo zatražiti ispravak ili nadopunu), pravo na brisanje osobnih podataka, pravo prigovora na obrade osobnih podataka temeljene na legitimnom interesu voditelja obrade, pravo na ograničenje obrade. Ako smatrate da obrada Vaših osobnih podataka nije u skladu s propisima o zaštiti osobnih podataka, imate pravo podnijeti pritužbu Agenciji za zaštitu osobnih podataka (https://www.azop.hr) Ne dovodeći u pitanje Vaše pravo na podnošenje pritužbe nadzornom tijelu predlažemo Vam da se prije podnošenja pritužbe obratite našem službeniku za zaštitu podataka radi razjašnjenja spornih pitanja. Također, za ostvarivanje svih svojih prava u vezi s obradom osobnih podataka možete se obratiti našem službeniku za zaštitu podataka putem navedenih kontaktnih podataka. Postupanje u slučaju povrede osobnih podataka Fakultet prometnih znanosti kao voditelj obrade osigurava da slučaju povrede osobnih podataka, bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvješćuje nadležno nadzorno tijelo o povredi osobnih podataka, osim ako nije vjerojatno da će povreda osobnih podataka prouzročiti rizik za prava i slobode pojedinaca. Izvješće koje se dostavlja nadzornom tijelu sadržava sve informacije sukladno Uredbi. U slučaju povrede osobnih podataka koje će vjerojatno prouzročiti visok rizik za prava i slobode pojedinaca, Fakultet prometnih znanosti bez nepotrebnog odgađanja obavješćuje ispitanika o povredi osobnih podataka. Ispitanike se neće obavijestiti u slučajevima kada Uredba propisuje da isto nije obvezno. Službenik za zaštitu podataka Službenikom za zaštitu podataka Fakulteta prometnih znanosti imenovana je Željka Ohnjec, dipl. iur. Adresa: Fakultet prometnih znanosti Sveučilišta u Zagrebu, Vukelićeva 4, 10 000 Zagreb. e-adresa: sluzbenik-za-zastitu-podataka@fpz.hr kontakt broj: 01/2380 358 - Odluka o imenovanju sluzbenika za zaštitu podataka - Uredba (EU) 2016/679 Europskog parlamenta i Vijeća: http://eur-lex.europa.eu/legal-content/HR/TXT/PDF/?uri=CELEX:32016R0679&from=EN