https___www.survio.com_en_privacy-policy_3.xml
http___gacina-adriaticcharter.hr_gdpr_hr.html_1.xml
1.1 1.2 2.1 3.1 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 11.1 13.1 14.1 14.2 14.3 15.1 15.2 16.1 17.1 17.2 18.1 18.2 19.1 20.1 20.2 20.3 20.4 20.5 20.6 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 27.2 28.1 28.2 28.3 29.1 30.1 31.1 32.1 33.1 34.1 34.2 34.3 35.1 36.1 36.2 37.1 38.1 39.1 39.2 39.3 39.4 39.5 40.1 41.1 42.1 42.2 43.1 43.2 44.1 44.2 45.1 46.1 47.1 48.1 49.1 50.1 50.2 51.1 51.2 52.1 53.1 54.1 55.1 56.1 57.1 58.1 58.2 58.3 59.1 59.2 60.1 60.2 60.3 60.4 61.1 62.1 62.2 63.1 64.1 65.1 65.2 65.3 66.1 66.2 67.1 67.2 67.3 67.4 68.1 69.1 69.2 70.1 71.1 71.2 71.3 71.4 72.1 72.2 72.3 72.4 72.5 73.1 74.1 74.2 75.1 76.1 76.2 77.1 77.2 77.3 78.1 79.1 79.2 79.3 79.4 80.1 81.1 81.2 82.1 82.2 82.3 83.1 83.2 83.3 84.1 84.2 85.1 85.2 86.1 87.1 88.1 89.1 90.1 90.2 90.3 90.4 91.1 91.2 91.3 91.4 92.1 93.1 94.1 95.1 96.1 96.2 97.1 98.1 98.2 99.1 100.1 100.2 101.1 101.2 102.1 102.2 102.3 103.1 103.2 104.1 105.1 106.1 107.1 108.1 108.2 109.1 109.2 110.1 110.2 110.3 111.1 111.2 111.3 111.4 112.1 112.2 112.3 112.4 113.1 113.2 114.1 115.1 115.2 115.3 115.4 115.5 115.6 116.1 116.2 116.3 116.4 116.5 116.6 117.1 117.2 117.3 117.4 117.5 117.6 117.7 117.8 117.9 117.10 117.11 118.1 119.1 120.1 121.1 121.2 122.1 123.1 124.1 125.1 126.1 126.2 126.3 127.1 128.1 128.2 129.1 130.1 131.1 132.1 133.1 134.1 135.1 136.1 137.1 138.1 139.1 140.1 141.1 142.1 143.1 144.1 145.1 145.2 146.1 146.2 147.1 147.2 148.1 148.2 148.3 148.4 148.5 148.6 149.1 150.1 150.2 150.3 150.4 150.5 150.6 150.7 151.1 152.1 152.2 152.3 153.1 153.2 153.3 154.1 155.1 156.1 156.2 157.1 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 166.1 167.1 167.2 168.1 169.1 170.1 171.1 172.1 173.1 174.1 175.1 176.1 177.1 178.1 179.1 179.2 180.1 181.1 182.1 183.1 184.1 184.2 185.1 186.1 186.2 186.3 187.1 188.1 189.1 190.1 191.1 191.2 191.3 192.1 193.1 194.1 194.2 194.3 195.1 195.2 196.1 197.1 198.1 199.1 200.1 201.1 202.1 203.1 204.1 205.1 206.1 207.1 208.1 209.1 210.1 210.2 210.3 211.1 211.2 211.3 211.4 211.5 212.1 213.1 214.1 215.1 216.1 217.1 218.1 219.1 219.2 219.3 219.4 220.1
Survio recognizes that its customers, visitors, users and others utilizing the Survio System or visiting the Survio website value their privacy. This document (Personal Data Protection Rules) contains important information pertaining to the processing of personal data by our company. Survio would therefore like to inform you of the principles and procedures in the processing of personal data, which is conducted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”). The Privacy policy relates to the Survio Terms of Use (hereinafter the “Terms”), which are available here. Please note: In the event of any discrepancies between the English and Czech language version of these Personal Data Protection Rules, the English version shall prevail. The English version is available at: www.survio.com. The following terms, among others, are used within the text – “User”, “Survio Sites/Questionnaires” and “Third Party”, the definitions of which are set out in the Terms. Further, under the term “Agreement”, Survio means a legal act on the basis of which the provider undertakes to provide you with its services, whether for payment or free of charge. Under the term “Survio System”, Survio means software that enables Users to create questionnaires/surveys according to the User’s requirements. Basic Information Controller’s Identification and Contact Information: Survio s.r.o., identification number (IČ) 28300785, with its registered office at: Brno, Hlinky 995/70, ZIP code 60300, Czech Republic, contact address: Hlinky 78a, Brno, 603 00, Czech Republic, a company registered in the Commercial Register with the Regional Court in Brno, section C, file 59684 (hereinafter also referred to as “Survio” or “we”), contact e-mail: support@survio.com. Data Protection Officer: Survio has appointed a Data Protection Officer to help address any data protection issues. If any such issues arise, please contact the Data Protection Officer directly. The Data Protection Officer is available to help you deal with inquiries regarding the handling of personal data or to provide additional information on the protection of personal data: Name: Richard Žižka Email: support@survio.com Transfer of Personal Data to a Third Country or International Organization: In cases where Survio transfers your personal data to non-EU countries, it always ensures compliance with Article 44, et seq., of the GDPR and also requires compliance from personal data processors. Survio will transfer data only to non-EU countries that are able to ensure the level of protection provided under the GDPR. This level of protection is ensured in particular by the adequacy decision issued by the EU Commission or the application of standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. Survio does not transfer personal data to third countries or international organizations, except for the transfer of personal data to Twilio Inc., 375 Beale Street, Suite 300, San Francisco, CA 94105, which operates the SendGrid service. This processor shall ensure an adequate level of security of personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and Directive 95/46/EC, on the basis of standard contract clauses, please see: https://www.twilio.com/legal/data-protection-addendum. Automated Individual Decision-Making: Survio does not conduct profiling or automated individual decision-making. Information on the Purpose of Data Processing: If personal data are being processed for the purpose of fulfilling an agreement or fulfilling legal obligations, the provision of data is a statutory requirement. If personal data are being processed on the basis of the consent of the data subject, the provision of data is a contractual requirement. Supervisory Authority: The relevant supervisory authority according to Survio’s registered office is the Office for Personal Data Protection with its registered office at: Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, e-mail: posta@uoou.cz, tel.: +420 234 665 125. Certification: Survio declares that it has obtained the ISO/IEC 27001 certification, which guarantees that the company meets internationally recognized standards for information security management systems. Survio operates both in the position of a personal data controller, as well as in the position of a personal data processor. Survio operates in the position of a personal data controller in relation to the personal data of Users and of natural persons who visit the Survio website (Art. II of these Rules). In relation to personal data that the User stores on Survio servers (the User puts together a questionnaire in which respondents fill in their personal data), Survio operates as a processor, as it only provides the User with data space for the purposes of data storage. The controller of such personal data is the User itself (Art. III of these Terms). Survio as a Personal Data Controller Survio operates in the position of a personal data controller in relation to the personal data of Users and natural persons who visit the Survio website. Why does Survio process personal data? For the purpose of fulfilling agreements (in particular communicating with customers and concluding agreements), implementing measures taken before the conclusion of an agreement (negotiations before the conclusion of an agreement) or fulfilling legal obligations (in particular bookkeeping and issuance and registration of tax documents), Survio processes primarily the following personal data: name, surname, company name, identification number, tax identification number, residence/registered address, phone number, and e-mail address. Survio also processes data that it obtains from the User and other natural persons through their use of the Survio system or their visits to the Survio website: cookie files, protocol files (IP address, or other online identifiers). Such personal data is processed on the basis of our legitimate interest or your consent. Based on legitimate interest or your consent, Survio processes: e-mail address, phone number (sending business messages/newsletters by e-mail and SMS, providing direct marketing). In the event that Survio intends to process different personal data than as stated in this article, or for different purposes, it can only do so on the basis of a validly granted consent to the processing of personal data. Consent to the processing of personal data must be granted in a separate document. Survio declares that it does not process the payment information of Users. All payment information is processed by a third party, specifically by the company cleverbridge AG, with registered office at Gereonstr. 43-65, 50670 Cologne, Federal Republic of Germany. Information on the processing of personal data of employees is provided in a separate internal regulation. As the controller of personal data, Survio does not process the personal data of Users that fall under special categories of personal data pursuant to Article 9 of the GDPR. For what period of time does Survio process personal data? Survio processes your personal data for as long as there is a legal reason to keep it, after which we will delete the data immediately. The specified scope of Users‘personal data of (name, e-mail address, and address) is processed for the duration of the contractual relationship and subsequently for a maximum of 5 years from the termination of the contractual relationship. Personal data processed for the purpose of fulfilling obligations arising from special legal regulations, such as legal data retention or documentation obligations, is processed by Survio for the period specified by the applicable laws. These include, in particular, data retention obligations under applicable civil, commercial or tax laws. If the data retention obligation ceases, the personal data will be deleted immediately. Where does Survio obtain personal data? Survio obtains personal data directly from data subjects when entering into the Agreement. Survio always informs data subjects as to which of their personal data they must provide for the purposes of fulfilling the Agreement. When visiting our website: When visiting our website, Survio collects, processes, and stores the following types of data: browser type and language, IP address of the accessing computer, server requests, incl. time information and the referring URL (i.e. the address of the previous website, if you were redirected to the Survio website by clicking on a link). This data is necessary in order for the website to be displayed correctly. In addition, this data can also be used as needed to keep the website secure (for example, to prevent hacking attempts). The IP address and browser language are also used to suggest the appropriate language settings for our website. The referring URL is used in anonymised form for statistical purposes. For technical security reasons and in particular to deter attempts to attack the Survio server, this type of data shall be processed in accordance with Article 6(1)(f) of the GDPR. Customer care, answering questions and technical support: You can use the Survio website for inquiries or to request technical support. The contact e-mail or the form available after logging in is used to enter the data necessary for communication (e-mail address or phone number) and to write a message (Article 6(1)(a)(b) of the GDPR). This data is used to manage customer relationships (the course of contact) and to answer your questions/provide technical support. If an individual solution needs to be adopted, especially in the case of a request for a phone consultation, you may be asked to provide the necessary data that Survio will process in order to provide an adequate level of support to the individual customer. It may include, in particular: name, surname, and employee position in the case of a corporate customer. You may also be contacted in order to receive customer care by Survio. If you would like to participate in and possibly customise Survio services to your needs, you may be asked to provide contact information, in particular: name, surname, and employee position in the case of a corporate customer. When using all communication channels, Survio adheres to the principle of data minimisation, so that you only have to enter data that Survio needs to be able to contact you and process your request. In addition, for technical security reasons and to prevent attack attempts, your IP address is processed. Conclusion of a contract: Contact and billing information are required to process an order. Your data provided within an order is processed by Survio only for the purpose of implementation or performance of the contractual relationship (Article 6(1)(a)(b) of the GDPR), unless expressly provided for other purposes. The principle of data minimisation and avoiding unnecessary data is observed by providing only the information that Survio necessarily needs to perform the contract or to fulfill its contractual obligations (i.e. your name, ID number, address, e-mail address) or in respect to data which Survio has a legal obligation to handle. Survio does not process your payment details in any way; you only communicate this information to cleverbridge AG; please see below. For technical and security reasons, your IP address is also processed. Of course, you may provide other information about yourself; however, the provision of such information is voluntary. Newsletters: If you have subscribed to the newsletter, Survio will collect and process the following data: address, surname, name, and e-mail address. For statistical purposes, we also perform anonymous link tracking. Registration / Customer account: On our website, Survio offers Users the opportunity to register by entering personal data. Registration is therefore required either for the performance of the contract (via the Survio online shop) with you or to carry out pre-contractual measures (Article 6(1)(a)(b) of the GDPR). At the same time, Survio adheres to the principle of data minimisation and the avoidance of unnecessary data collection, so only the necessary fields are marked as mandatory when registering. Mandatory data include the e-mail address and password, including the password repeat. Other fields are optional and are marked as such. By registering on the Survio website, the User’s IP address, date and time of registration (technical data in the background) are also stored. By clicking the “Register” button, you complete the creation of your customer account. Please note: Survio will store your password in encrypted form. Survio employees cannot read this password. Therefore, they cannot provide you with any information if you forget your password. In this case, use the “Forgot Password” feature to receive an automatically generated new password by e-mail. Payment systems: Survio uses the services of cleverbridge AG, a third-party partner, to handle and process your payments. In accordance with the principle of data minimisation, Survio does not process any payment data and you only communicates such data to cleverbridge AG. Further details on data protection at cleverbridge AG can be found at: https://www.cleverbridge.com. Product demonstration requests: Survio provides parties interested in the product with the opportunity to have the product demonstrated. When a demonstration is requested, Survio requests information about the interested party in order to prepare and provide the demonstration. For this reason, Survio processes the following data of the interested party: surname, first name, e-mail address, phone number, field of business, job title and number of employees. III. Survio as a Personal Data Processor Survio provides the User with data space for the purposes of storing data operated within the Survio system, on Survio servers. The User’s data may also include the personal data of natural persons. In regard to personal data that the User stores on our servers (personal data of respondents), Survio operates as a personal data processor. The controller of such personal data is the User itself. Notice for the User If you will be collecting the personal data of natural persons through questionnaires, you become a personal data collector and you are obligated to comply with all personal data protection rules set out by the GDPR and by other legal regulations governing such issue. Survio does not bear any liability for a breach of personal data protection rules by Users. Notice for respondents The utilization of the Survio system may be subject to the principles and rules of the given User, if Users have such principles. Users are allowed to refer to their policies directly in the questionnaire. If you provide your personal data to Users, contact the User directly with any questions regarding personal data protection, as the User is in the position of a personal data controller. Survio cannot be liable for the personal data protection principles or security procedures used by the User, which may differ from these Personal Data Protection Rules. Survio is not entitled to publish information about its Users (personal data controllers). If you have provided your personal data when filling out the questionnaire, you have the right to contact the User through Survio in order for the User to fulfill its information obligation. Survio will inform you that Survio has forwarded your request to the User. Survio is not responsible for the User’s decision on whether to accept your request. If your request has not been satisfactorily resolved, you have the opportunity to request the deletion of personal data in accordance with the GDPR. What is the purpose of processing and how does Survio handle data? Survio does not conduct any operations with Users’ data, including personal data, with the exception of storing them on Survio servers, does not intervene in them in any manner, does not modify them, does not make them accessible, nor does it transfer them to third parties (with the exception of making them accessible to state authorities in accordance with the law), unless the Agreement provides otherwise. The sole purpose of handling such personal data is their storage and the possibility of them being accessed by the User. What kind of personal data does Survio process? Survio only process such personal data of respondents that will be stored through a Survio questionnaire on Survio servers, i.e. data that end users fill into questionnaires within the Survio system. These may be primarily name, surname, gender, age, job position, residence address, e-mail, etc. In the event that data belonging to special data categories is stored on the Survio servers, the User is responsible for the lawfulness of obtaining and handling such data in accordance with the GDPR and the applicable national laws. Survio reserves the right to remove such personal data from its servers if Survio finds non-compliance with the conditions for processing personal data of special categories. Before deleting the personal data of respondents, Survio contacts the User with a request for correction. For what period of time does Survio process personal data? Survio processes personal data for the duration of the contractual relationship with the User. After the account is cancelled by the User, all data are erased. Users are entitled to request the deletion of data at any time during the contractual relationship. In the event of receipt of the User’s request to delete data, Survio will delete all data without undue delay, but no later than within 15 days of receiving such a request. Recipients of Personal Data Survio does not transfer personal data to any other controllers. Processors of personal data are: - Hosting and server service provider, NETHOST s.r.o., ID number 26226979, with its registered office at: Kšírova 435/136, Brno, Czech Republic. The processor processes the data that Users store on the Survio servers. The sole purpose of processing is to store data and operate the Survio website. - Email service provider, Twilio Inc., 375 Beale Street, Suite 300, San Francisco, CA 94105. The processor only processes the following data of Users: e-mail address. The sole purpose of processing is to send bulk emails to Users of Survio services. - E-mail services, online chat on the Survio website, product tours and other customer support services are provided by Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2. The processor only processes the following data of Users: first and last name and e-mail of the Users. - Providers of legal services (law firms) based in the Czech Republic within the scope necessary to resolve complaints and requests from Users and respondents, in the event of legal disputes. It will include primarily the contact information of the User. The processing of personal data may be conducted by processors exclusively on the basis of a personal data processing agreement, i.e. with guarantees of the organizational and technical security of such data with the definition of the purpose of processing, whereby processors cannot use data for other purposes. Under certain conditions, personal data may be made available to state authorities (courts, police, notaries, financial authorities, etc., within the scope of the exercise of their statutory powers) or may be provided to other entities within the scope as set out by a special law. Data Security Methods For the purpose of securing the User’s data against their unauthorized or accidental disclosure, Survio utilizes reasonable and appropriate technical and organizational measures. Technical measures consist in the application of technologies that prevent unauthorized access to the User’s data by third parties, in particular the use of firewalls, updated antivirus programs, etc. For the purpose of maximum protection, Survio uses encryption of the User’s and end users’ data, primarily including passwords for logging into the Survio system, communication within the Survio system and all data stored on servers. Survio uses TLS/SSL (Transport Layer Security/Secure Socket Layer) encryption for data transmission. Access to areas with a high concentration of personal data processing is protected by electronic security systems. Organizational measures comprise a set of rules for our employees’ behaviour and are incorporated into Survio’s internal regulations, which are, however, considered confidential due to security reasons. The procedures are based exclusively on the “need to know” principle. Survio thus limits the number of persons who have access to personal data and the ability to handle personal data. Employee access to personal data, as well as methods of handling it, is closely monitored. Survio takes to ensure that, in the event of the placement of servers at a data center operated by a third party, similar technical and organizational measures are also implemented by such third party. All data are placed only on servers located within the European Union or in countries ensuring personal data protection in a manner equivalent to the protection ensured by the legal regulations of the Czech Republic. Rights of Data Subjects As a data subject, you have: - the right to access to personal data: a data subject has the right to obtain from Survio a confirmation of whether personal data pertaining to him/her are or are not being processed, and if so, he/she has the right to access to such personal data and to the following information: a) the purpose of processing; b) the category of personal data affected; c) the recipients to whom personal data have been or will be made available; d) the planned time period for which the personal data will be stored; e) the existence of the right to require the rectification or erasure of personal data from the controller or a restriction on their processing, or to lodge an objection against such processing; f) the right to submit a complaint with a supervisory authority; g) all available information on the source of personal data, if not obtained from the data subject; h) the fact that automated decision-making is occurring, including profiling. The data subject also has the right to obtain a copy of the personal data being processed. - the right to the rectification of personal data: the data subject has the right to require that we rectify inaccurate personal data pertaining to him/her without undue delay, or that we complete incomplete personal data. - the right to the erasure of personal data: the data subject has the right to require that we erase personal data pertaining to him/her without undue delay in the event that: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) the data subject withdraws the consent on the basis of which the data were processed, and there is no other legal reason for processing; c) the data subject lodges objections against processing and there are no prevailing legitimate reasons for processing; d) personal data have been processed unlawfully; e) personal data must be erased in order to fulfill a legal obligation set out in the law of the Union or of the Czech Republic; f) personal data have been collected in connection with an offer of information society services. However, the right to erasure shall not apply if the processing is necessary in order to fulfil legal obligations, for the establishment, exercise or defense of legal claims, and in other cases set out by the GDPR. - the right to the restriction of processing: the data subject has the right to require that we restrict processing, in any of the following cases: a) the data subject refutes the accuracy of the personal data, for the period of time necessary in order for us to be able to verify the accuracy of the personal data; b) the processing of data is illegal and the data subject refuses to allow the erasure of the personal data and requests, in place thereof, the restriction of their use; c) Survio no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defense of legal claims; d) the data subject has lodged an objection against processing, until it is verified whether our legitimate reasons prevail over the legitimate reasons of the data subject. - the right to lodge a complaint against processing: the data subject has the right, for reasons pertaining to his/her specific situation, to lodge a complaint at any time against the processing of personal data that pertain to him/her and that we are processing on grounds of his/her legitimate interest. In such a case, Survio does not process the personal data further, unless it proves compelling legitimate interests for processing that prevail over the interests or rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims. - the right to data portability: the data subject has the right to obtain personal data pertaining to him/her and that he/she has provided us with, in a structured, commonly-used and machine-readable format, and the right to transmit such data to another controller, without Survio hindering it, in the event that: a) processing is based upon consent and b) processing is conducted in an automated manner. In the exercise of his/her right to data portability, the data subject has the right for personal data to be transmitted directly by one controller to another controller, if this is technically feasible. - the right to lodge a complaint with the supervisory authority: ff the data subject believes that we are not processing his/her personal data in a lawful manner, he/she has the right to lodge a complaint with the supervisory authority. The supervisory authority is the Office for Personal Data Protection with registered office at Pplk. Sochora 27, 170 00 Praha 7, Czech republic, e-mail: posta@uoou.cz, tel.: +420 234 665 125. - the right to information regarding the rectification or erasure of personal data or restriction of processing: Survio is obligated to notify individual recipients to whom personal data have been made available of all rectifications or erasures of personal data or restrictions of processing, with the exception of cases when this proves impossible or requires disproportionate effort. If the data subject requests it, we inform the data subject of such recipients. - the right to be informed in the event of a breach of personal data security: if it is likely that a certain case of a breach of personal data security will result in a high risk to the rights and freedoms of natural persons, Survio is obligated to notify the data subject of such breach without undue delay. - the right to withdraw consent to the processing of personal data: in the event that the processing of some of the personal data is being conducted on the basis of a consent, the data subject has the right to withdraw his/her consent to the processing of personal data in writing at any time, by sending a disapproval of the processing of personal data to the e-mail address support@survio.com In connection with the right to withdraw consent, the following applies: - If Survio processes your personal data for the purposes of direct advertising, you have the right at any time to object to such processing without giving reasons. - If you do not consent to processing for direct advertising purposes, Survio will no longer process your personal data for these purposes; simply email support@survio.com. - In the event that Survio processes your data to protect its legitimate interests, you may disagree with such processing at any time for reasons arising out of your particular situation; this also applies to profiling on the basis of these provisions. Subsequently, Survio will cease processing your personal data unless Survio is able to demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the purpose of the processing is to enforce or defend legal claims. VII. Cookie Files and Protocol Files Survio uses cookie files, which are small text files that identify the user of the website www.survio.com and record the user’s user activities. The text in a cookie file is often comprised of a series of numbers and letters that positively identify the user’s computer, but do not provide any specific personal data on the User. The cookie usually contains the domain name from which it was sent, information on the age of the cookie, and an alphanumeric identifier. The website www.survio.com automatically identifies the user’s IP address. An IP address is a number automatically assigned to the user’s computer after connecting to the internet. All such information is recorded in an activity file by the server, which enables the subsequent processing of data. In addition, Survio records the request from the browser and the time of the request, as well as the status and the amount of data transferred within this request. Survio also collects information about your browser and your computer’s operating system and their versions. It also records the website from which you accessed the Survio website. Your computer’s IP address is only stored for as long as the website is used and for the following three months. After three months, the IP address is deleted or anonymised by truncation. This data is used by Survio to operate the website, in particular to identify and remedy any errors, to determine the use of the website and to make adjustments or improvements. These are the purposes for which Survio has a legitimate interest in the processing of data pursuant to Article 6(1)(f) of the GDPR. Types of cookies Based on its legitimate interest (Article 6 (1)(f) of the GDPR), Survio uses technically necessary cookies, which are necessary for the operation of the website and to ensure its functionality. Survio uses two types of cookies, persistent cookies and session cookies. Persistent cookies remain on your hard drive even after you close your browser. Persistent cookies may be used by the browser during further visits to the website: www.survio.com. Persistent cookies can be deleted. Session cookies are temporary and are deleted as soon as you close your browser. In addition, Survio uses additional cookies with your permission. These cookies allow Survio to analyse how Users use our website. Survio can thus create the content of the website according to the needs of the visitors. Cookies also allow Survio to measure the effectiveness of a given advertisement and place it, for example, according to the User’s interests. Survio needs your consent to process personal data (Article 6(1)(a) of the GDPR). Of course, if you have given your consent, you can withdraw it at any time without giving a reason. Survio uses the CookieYes Consent Management platform to obtain and manage your consent. It is operated by CookieYes Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, England, MK12 5NW, United Kingdom. The CookieYes Consent Management platform uses JavaScript to collect device information, browser information, anonymisedanonymised IP address, login and logout information, date and time of visit, URL requests, website path and geographical location. This JavaScript allows CookieYes Limited to inform Users about certain tags and web technologies on our website and to obtain, manage and document their consent. The legal basis for data processing is Article 6(1)(c) of the GDPR, and Survio is required by law to provide proof of consent (in accordance with Article 7(1) of the GDPR). The aim is to know the preferences of Users and to implement and legally document them accordingly. The data will be deleted as soon as it is no longer needed for logging and there are no legal retention requirements. Consent data (consent and withdrawal of consent) are stored for a period of three years. The data will then be deleted immediately or provided to the relevant authority in the form of a data export upon request. The User can permanently prevent the execution of JavaScript at any time using the appropriate settings in the User’s browser, which would also prevent CookieYes Limited from running JavaScript. For more information on the privacy of CookieYes Limited, please visit: https://www.cookieyes.com/privacy-policy/ Please note: If you disable optional cookies, not all features of the Survio website may be fully usable. Why does Survio use cookies? Cookie files and similar technologies serve several purposes, which include: - Log-in and verification: As soon as the User uses a personal account in order to log on, an encrypted cookie file is stored on the User’s device, which enables the User to move between the pages of the website without the need to repeatedly log on. The User can also save their log-in information so that they do not need to log in every time they return to the website www.survio.com. - Editing: Survio uses cookie files in order to adjust the content and information to the requirements of Users in order to ensure the user-friendliness of the website. - Marketing: Survio uses cookie files in order to monitor its advertising campaigns, and for the monitoring of User submissions, applications and discount coupons, promotions and contests. - Diagnostics: Survio uses cookie files for the purpose of diagnosing and repairing technical problems reported by Users or programmers that are associated with the IP addresses under the control of a specific web company or connection provider. - Analysis: Survio uses cookie files and other identifiers for the purpose of collecting data on the use and performance of the website www.survio.com. There may also be third party cookie files located on the website www.survio.com. This may be, for example, because we have authorized a third party to conduct a website analysis. Survio utilizes the following service providers: Google Analytics On its website, Survio uses the Google Analytics tracking tool from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This is how your User’s interactions with the Survio website are obtained and systematically evaluated. In doing so, your following data is stored: - IP address - website usage information - click progress - application updates - browser information - device information - JavaScript support - visited websites - URL of the referring server - downloads - Flash version - location information - shopping activity - widget interactions - date and time of the visit The legal basis for the processing of your personal data is your consent pursuant to Article 6(1) sentence 1 letter a) of the GDPR. You can withdraw your consent at any time. The purpose of processing your personal data by Google Analytics is to analyse the interaction of visitors to the Survio website with the Survio website. By evaluating the data obtained here, Survio can optimize its offer and increase User comfort. Survio deletes or anonymises data collected by Google Analytics as soon as it is no longer needed for Survio’s purposes. It takes place after 26 months. This service may transfer the collected data to another country. Survio points out that this service may transfer data outside the European Union and the European Economic Area and to countries that do not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes without any legal remedies available. Below is a list of countries to which the data is transferred. This can be done for various purposes, such as storage or processing. However, Survio is taking the measures that are possible and necessary under Article 44et seq., of the GDPR in order to ensure the level of data protection in third countries. Google Tag Manager The Survio website uses Google Tag Manager from Google Ireland Limited, Google Gordon House Building, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service makes it possible to manage tags on a website via the User interface. The Tag Manager tool itself (which implements tags) is a domain that does not use cookies. In principle this means: no cookies are used and no personal data is collected. Google Tag Manager runs other tags that can collect data. However, Google Tag Manager does not access such data. If deactivation has been performed at the domain or cookie level, it remains in effect for all tracking tags that are implemented together with Google Tag Manager. Learn more at: https://www.google.com/tagmanager/use-policy.html. In addition, Google Tag Manager includes the following sub-services (Eloqua, LinkedIn Insight Tag, Hotjar, Google Ads Remarketing, Google Ads Conversion Tracking, Facebook Pixel) and Google Tag Manager, and the sub-services are linked based on your consent (Article 6(1)(a) of the GDPR). You can find the cancellation option in the description of individual sub-services. If you object to one sub-service, that objection will automatically apply to the other sub-services included in Google Tag Manager. These services may transfer data to another country outside the European Union and the European Economic Area and to countries that do not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes without any legal remedies. However, we take measures that are possible and necessary according to Article 44et seq., of the GDPR in order to ensure the adequate level of data protection in third countries. Microsoft Cookies are set by Microsoft Corporation. - This cookie is set by websites that run on the Windows Azure cloud platform. The file is used to assign a client to an instance of the Azure Web application. - This cookie is installed by Microsoft Bing. CookieYes The cookies set by CookieYes Limited are used to check: - whether the consent banner is active on the website; - the unique visitor identifier used by CookieYes with regards to granting consent; - maintaining the User’s consent to the use of cookies on the website; - maintaining an overview of activities performed by the User; - maintaining Users’ consent to the use of cookies in the categories “Necessary”, “Functional”, “Analytic”, “Advertisement” and “Other”. Cloudflare Cookies are set by Cloudflare, Inc. - This cookie is used by cdn services such as Cloudflare to identify clients behind a shared IP address and to set security for individual clients. It does not match any user ID in the web application and does not store any personal data. - This cookie is set by Cloudflare, Inc. and is used to support Cloudflare Bot Management. LinkedIn Cookies are set by LinkedIn Corporation. - The purpose of the cookie is to enable LinkedIn features on the website. - The cookie is used for routing, to store the User’s language preferences and to display the content in the saved language each time the User visits the website. - This is a browser identification cookie set by share buttons and ad tags on LinkedIn. - This cookie is also used: - To store visitors’ consent to the use of the cookies for secondary purposes; - To track visitors to multiple websites in order to display advertising according to visitors’ preferences; - To store information about when the synchronization with the lms_analytics cookie for Users in specified countries took place. G2Crowd G2.com, Inc. This cookie is used to store information on the User’s session with a unique session ID. It stores information such as referrer, landing page, and other. Facebook Cookies are set by Facebook, Inc. This cookie is used: - to deliver ads to users of Facebook or another digital platform using Facebook advertising after the User visits the website, - to show relevant ads to Users and to measure and improve ads. The cookie also tracks User behaviour across the web interface on websites that have Facebook pixel or Facebook social plugin. Datadog Cookies are set by Datadog, Inc. The RUM SDK browser relies on cookies to store session information and track the User’s session on various websites. These are first-party files (set up on your domain) that aren't used for cross-site tracking. More information on: https://docs.datadoghq.com/real_user_monitoring/browser/troubleshooting/#rum-cookies Sklik Cookies are set by Seznam.cz, a.s. - This cookie is very common and is used for session state management. Cookie Settings The majority of web browsers accept cookie files automatically. However, it is possible to utilize the controls that enable them to be blocked or removed. Users of the website www.survio.com are thus entitled to set their browser in such a way so that the use of cookies on their computer is prevented. Instructions for blocking or removing cookie files in browsers can generally be found in the personal data protection principles or in the user guide documentation of individual browsers. Protocol Files The User’s browser automatically reports certain information upon every display of the website www.survio.com. When registering on the website www.survio.com or when browsing the website, servers automatically record certain information that the web browser sends upon every visit to the website. These server protocols (so-called “log files”) may contain information such as a web request, IP address, type of internet browser, browser language, linking / exit sites and URLs, platform type, number of clicks, domain names, entry portals, number of pages seen and the order of such pages, the amount of time spent on certain pages, the date and time of a submitted request, and one or more cookie files that may positively identify the web browser. VIII. Applicable Personal Data Protection Legislation Survio declares that in the provision of personal data protection, it abides primarily by the following legal regulations: European Union Legislation All of the legislation based upon Article 16 of the Treaty on the Functioning of the European Union and Article 7 and 8 of the Charter of Fundamental Rights of the European Union, specifically: - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); - Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector; - Commission Regulation (EU) No. 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications (to a limited extent); - Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (to a limited extent). Council of Europe Legislation - Council of Europe Convention No. 108 dated 28 January 1981 for the Protection of Individuals with Regard to Automatic Processing of Personal Data. Czech Republic Legislation - Act No. 110/2019 Coll., on Personal Data Processing; - Act No. 121/2000 Coll., the Act on Copyright, on Rights Related to Copyright. Social networks Survio is present on social networks to facilitate communication with customers, interested parties and Users who are logged in there and to inform them about Survio’s offers. Please note that you use these platforms and their features at your own risk. This is especially true for using interactive features (e.g. commenting, sharing or rating). Survio also points out that your data may be processed outside the European Union. In addition, your data may be processed for market research and advertising purposes. In this way, for example, it is possible to create User profiles using your User behaviour and interests. For example, ads that are likely to match your interests may be turned on or off within the platform. For this purpose, so-called cookies are usually stored on your computer. Independently, User profiles can also store data that was not obtained directly from your end device (especially if you are a member of the respective platform and you are logged in to it). As a provider of this information service, Survio does not collect or process any other data about your use of its service beyond this scope. The processing of the User’s personal data takes place on the basis of Survio’s legitimate interests in effective User information and communication with the User pursuant to Article 6(1) sentence 1 letter f) of the GDPR. - Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Statement: https://www.facebook.com/about/privacy/. - Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Statement: https://twitter.com/de/privacy. - LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Statement https://www.linkedin.com/legal/privacy-policy. Final Provisions By entering into the Agreement, the User confirms that it has acquainted itself with these Personal Data Protection Rules. If necessary, Survio may update these Personal Data Protection Rules. The current version of the Privacy policy will always be available on the website www.survio.com. If a significant change occurs within these Privacy policy in regard to the manners of handling personal data, Survio will inform the User by publishing a notification in a visible manner prior to the implementation of such changes. We recommend checking the Privacy policy from time to time when utilizing the Survio system or the website www.survio.com. Last modified 2022-01-17.
1.1 2.1 3.1 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 10.2 10.3 11.1 11.2 12.1 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 28.2 29.1 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 41.2 41.3 42.1 43.1 44.1 45.1 46.1 47.1 49.1 50.1 51.1 52.1 52.2 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 73.2 73.3 73.4 73.5 74.1 75.1 76.1 77.1
Uvod Gaćina Adriatic Charter d.o.o. sa sjedištem u Šibeniku, Bana Josipa Jelačića 13 b, OIB: 50286165539 (nadalje u tekstu: Gaćina Adriatic Charter), u svom poslovanju mora prikupljati i koristiti određene podatke o pojedincima. Svrha ove politike je osigurati da Gaćina Adriatic Charter u potpunosti postupa u skladu s pravnim, organizacijskim i tehničkim obvezama u odnosu na zaštitu osobnih podataka. Svi zaposlenici Gaćina Adriatic Charter su u potpunosti upoznati sa sadržajem ove politike i osiguravaju njezinu primjenu prilikom rukovanja osobnim podacima ili obrade osobnih podataka. Zaposlenici čiji zadaci uključuju i rukovanje osobnim podacima su adekvatno educirani u pogledu svojih zadataka u odnosu na zaštitu osobnih podataka. Ova politika se odnosi na sve osobne podatke koje drži Gaćina Adriatic Charter u odnosu na bilo koju osobu, bez obzira je li bila, trenutno jest ili će biti klijent, dobavljač ili kontakt. Ova politika ja izrađena s ciljem da se spriječi nastanak potencijalne štete Gaćina Adriatic Charteru i njegovim zaposlenicima te ispitanicima i da osigura kako je obrada osobnih podataka od strane Gaćina Adriatic Chartera u potpunosti u skladu sa zakonom i drugim propisima. Definicija i primjena Osobnim podacima smatraju se svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi, to jest pojedinac koji se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. Pod obradom osobnih podataka smatra svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, povlačenje, pronalaženje, obavljanje uvida, uporaba ili korištenje, otkrivanje prijenosom, širenjem, objavljivanjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje te provedba logičkih, matematičkih i drugih operacija s tim podacima. Gaćina Adriatic Charter osobne podatke prikuplja i obrađuje prije svega radi pružanja usluga u svom poslovanju. Stoga Gaćina Adriatic Charter ima potrebu prikupljati i obrađivati određene vrste podataka o pojedincima koji dolaze u kontakt s Gaćina Adriatic Charterom (ispitanici). S tim osobnim informacijama Gaćina Adriatic Charter postupa adekvatno, bez obzira kako ti podaci bili prikupljeni, zabilježeni, čuvani i korišteni – na papiru, ili na drugom materijalu. U trenutku dostavljanja podataka ispitanika Gaćina Adriatic Charteru, ispitanik pristaje da Gaćina Adriatic Charter obrađuje njegove osobne podatke, sukladno naznačenoj svrsi. Zaštita privatnosti podataka ispitanika je trajna, a u svakom trenutku ispitanik može koristiti svoja prava koja su niže pobrojana i objašnjena. Gaćina Adriatic Charter osobne podatke ispitanika prikuplja i obrađuje u skladu sa Zakonom o zaštiti osobnih podataka (NN 103/03, 118/06, 41/08, 130/11, 106/12), drugim hrvatskim propisima, Direktivom 95/46/EC i Općom uredbom i zaštiti osobnih podataka (GDPR) (Uredba (EU) 2016/679 Europskog parlamenta i vijeća od 27. travnja 2016.). Prikupljene podatke Gaćina Adriatic Charter čuva na primjeren način i osigurava njihovu povjerljivost. Gaćina Adriatic Charter prikupljene podatke neće prosljeđivati trećim osobama bez dozvole ispitanika, osim u slučajevima kada je to potrebno radi izvršavanja zakonskih obveza Gaćina Adriatic Chartera, u slučajevima kada je to nužno radi ispunjenja zadataka koji se izvršavaju u javnom interesu ili u slučajevima kada je ispitanik sam objavio te podatke, kao i u drugim nadležnim propisom određenim slučajevima. Ispitanik, u pogledu osobnih podataka koje za njega obrađuje Gaćina Adriatic Charter, ima sljedeća prava: Pravo na informiranost Ispitanik ima pravo u svakom trenutku tražiti obavijest obrađuju li se njegovi osobni podaci i za koju svrhu, tko je voditelj obrade, kontakt podatke službenika za zaštitu podataka, koje kategorije osobnih podataka se obrađuju, na koje razdoblje se obrađuju odnosno pohranjuju, tko je izvor za dobivanje njegovih osobnih podataka, tko su sve primatelji njegovih osobnih podataka, kao i pravo na obavijest o drugim njegovim pravima navedenima u ovoj politici (pravo na pristup, pravo na ispravak, pravo na brisanje, pravo na ograničavanje obrade i drugo). Pravo pristupa Ispitanik ima pravo od Gaćina Adriatic Chartera dobiti potvrdu obrađuju li se osobni podaci koji se na njega odnose, zatim dobiti pristup tim podacima i informacijama o: - svrsi obrade, - kategorijama osobnih podataka koji se obrađuju; - primateljima ili kategorijama primatelja kojima su podaci otkriveni ili će biti otkriveni; - ako je moguće, o razdoblju na koje se podaci pohranjuju odnosno o kriterijima pomoću kojih je moguće utvrditi to razdoblje; - da od Gaćina Adriatic Chartera zatraži ispravak ili brisanje osobnih podataka ili ograničavanje obrade osobnih podataka koji se odnose na ispitanika ili prava na prigovor na takvu obradu; - pravu na podnošenje pritužbe nadzornom tijelu; - ako se osobni podaci ne prikupljaju od ispitanika, svakoj dostupnoj informaciji o njihovu izvoru; - postojanju automatiziranog donošenja odluka, što uključuje izradu profila, s posljedicama. Pravo na ispravak Ispitanik ima pravo bez nepotrebnog odgađanja ishoditi od Gaćina Adriatic Chartera ispravak netočnih osobnih podataka koji se na njega odnose. Ispitanik ima pravo dopuniti nepotpune osobne podatke, među ostalim i davanjem dodatne izjave. Pravo na brisanje / pravo na zaborav Ispitanik ima pravo da Gaćina Adriatic Charter bez odlaganja izbriše osobne podatke koji se na njega odnose ako osobni podaci više nisu nužni u odnosu na svrhe za koje su prikupljeni ili na drugi način obrađeni, ako ispitanik povuče privolu na kojoj se obrada temelji a ne postoji drugi pravni temelj obrade, ako ispitanik uloži prigovor na obradu, ako su osobni podaci nezakonito obrađeni, ako se osobni podaci moraju brisati radi poštovanja pravne obveze iz prava Unije ili prava države članice kojem podliježe Gaćina Adriatic Charter, ako su osobni podaci prikupljeni u vezi s ponudom usluga informacijskog društva djetetu. Navedeno se ne primjenjuje ako je obrada nužna (i u mjeri u kojoj je nužna) radi ostvarivanja prava na slobodu izražavanja i informiranja, radi poštovanja pravne obveze kojom se zahtijeva obrada u pravu Unije ili pravu države članice kojem podliježe Gaćina Adriatic Charter ili za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti Gaćina Adriatic Chartera, zbog javnog interesa u području javnog zdravlja, u svrhe arhiviranja u javnom interesu, u svrhe znanstvenog ili povijesnog istraživanja, radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Pravo na podnošenje prigovora nadzornom tijelu Ispitanik ima pravo na temelju svoje posebne situacije u svakom trenutku uložiti prigovor na obradu osobnih podataka koji se odnose na njega, uključujući izradu profila, u slučajevima ako je obrada nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti Gaćina Adriatic Chartera odnosno ako je obrada nužna za potrebe legitimnih interesa Gaćina Adriatic Chartera ili treće strane. Gaćina Adriatic Charter više ne smije obrađivati osobne podatke osim ako Gaćina Adriatic Charter dokaže da postoje uvjerljivi legitimni razlozi za obradu koji nadilaze interese, prava i slobode ispitanika ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Ako se osobni podaci obrađuju za potrebe izravnog marketinga, ispitanik u svakom trenutku ima pravo uložiti prigovor na obradu osobnih podataka koji se odnose na njega za potrebe takvog marketinga, što uključuje izradu profila u mjeri koja je povezana s takvim izravnim marketingom. Pravo na prenosivost podataka Ispitanik ima pravo zaprimiti osobne podatke koji se odnose na njega, a koje je pružio Gaćina Adriatic Charteru u strukturiranom, uobičajeno upotrebljavanom i strojnom formatu te ima pravo, bez ometanja od strane Gaćina Adriatic Chartera, prenijeti te podatke drugom voditelju obrade ako se obrada temelji na njegovoj privoli i ako se obrada provodi automatiziranim putem. Ispitanik ima pravo na izravni prijenos od Gaćina Adriatic Chartera drugom voditelju obrade ako je to tehnički izvedivo, a ovo pravo ne smije negativno utjecati na prava i slobode drugih. Prava vezana uz automatsko donošenje odluka i profiliranje Ispitanik ima pravo da se na njega ne odnosi odluka koja se temelji isključivo na automatiziranoj obradi, uključujući izradu profila, koja proizvodi pravne učinke koji se na njega odnose ili na sličan način značajno na njega utječu, osim ako je ta odluka potrebna za sklapanje ili izvršenje ugovora između ispitanika i Gaćina Adriatic Chartera, ako je dopuštena pravom Unije ili pravom države članice kojem podliježe Gaćina Adriatic Charter ili temeljena na izričitoj privoli ispitanika. Pravo na povlačenje privole Privola ispitanika je jedna od pravnih osnova za obradu podataka koji se odnose na ispitanika. Ispitanik ima pravo u svakom trenutku povući privolu koju je dao. Povlačenje privole ne utječe na zakonitost obrade podataka koja je učinjena prije povlačenja privole. Pravo na ograničavanje obrade Ispitanik ima tražiti ograničenje obrade njegovih osobnih podataka: ako osporava točnost njegovih osobnih podataka - na razdoblje potrebno da Gaćina Adriatic Charter tu točnost provjeri, ako je obrada njegovih osobnih podataka nezakonita a ne traži brisanje nego samo ograničavanje obrade, ako Gaćina Adriatic Charter više ne treba njegove osobne podatke, ali mu je postojanje istih potrebno radi ostvarivanja njegovih pravnih zahtjeva, ako je stavio prigovor na obradu ima pravo tražiti ograničenje obrade za razdoblje do utvrđenja nadilaze li legitimni razlozi Gaćina Adriatic Chartera za obradu njegove razloge iz prigovora. Radi ostvarivanja svojih prava, ispitanik se treba obratiti službeniku za zaštitu osobnih podataka slanjem pisane obavijesti odnosno zahtjeva službeniku za zaštitu osobnih podataka Gaćina Adriatic Charter d.o.o., elektroničkom poštom korištenjem svoje e-mail adrese koju su dali Gaćina Adriatic Charter d.o.o. ili zemaljskom poštom na adresu: Bana Josipa Jelačića 13 b, 22 000 Šibenik, ili dostavom osobne izjave izravno u poslovnim prostorijama Gaćina Adriatic Charter d.o.o., uz prethodnu najavu na broj telefona +385 (0)91 2100 100, uz identifikaciju važećim osobnim dokumentom. Službenik za zaštitu osobnih podataka: Gaćina Adriatic Charter je imenovao osobu službenika za zaštitu osobnih podataka: Jere Gaćina e-mail adresa: info@gacina-adriaticcharter.hr Sva pitanja u vezi zaštite osobnih podataka trebaju se uputiti službeniku za zaštitu osobnih podataka. Načela zaštite osobnih podataka: Gaćina Adriatic Charter smatra da je zakonito i pravilno postupanje s osobnim podacima vrlo važno te stoga osigurava da se osobni podaci tretiraju zakonito i ispravno. U tu svrhu Gaćina Adriatic Charter u potpunosti podržava i pridržava se Načela zaštite podataka. Načela zaštite podataka zahtijevaju da se osobni podaci: - moraju obrađivati pravedno i zakonito i osobito da ne se ne smiju obrađivati ako uvjeti određeni propisima nisu ispunjeni; - prikupljaju se samo za jednu ili više određenih i zakonitih svrha i ne smiju se dalje obrađivati ni na koji način koji bi bio nespojiv s tim svrhama; - obrada mora biti adekvatna, relevantna i ne pretjerana u odnosu na svrhu ili svrhe za koje se obrađuju, a podaci moraju biti točni i ažurni; - ne smiju se zadržavati duže nego što je potrebno za primjenjivu svrhu; - moraju se obrađivati u skladu s pravima ispitanika u skladu s važećim propisima: - moraju se poduzeti odgovarajuće tehničke i organizacijske mjere protiv neovlaštene ili nezakonite obrade osobnih podataka i protiv slučajnog gubitka, uništavanja ili oštećenja osobnih podataka; - ne smije se prenijeti na zemlju ili teritorij izvan EU, osim ako ta država ili teritorij ne osigura odgovarajuću razinu zaštite prava i sloboda ispitanika u vezi s obradom osobnih podataka. Aktivnosti Gaćina Adriatic Chartera u vezi obrade podataka: Gaćina Adriatic Charter poduzima sljedeće: - u potpunosti poštuje uvjete pravednog prikupljanja i obrade osobnih podataka; - ispunjava obvezu da specificira svrhu za koju se osobni podatak obrađuje; - prikuplja i obrađuje adekvatne osobne podatke i to samo u onoj mjeri u kojoj je to potrebno radi ispunjavanja operativnih potreba ili u skladu sa svim zakonskim zahtjevima; - dostavlja sve potrebne podatke Agenciji za zaštitu osobnih podataka; - vrši strogu provjeru duljine čuvanja osobnih podataka; - osigurava da se prava osoba, čiji podaci se obrađuju, mogu u potpunosti ostvariti u skladu sa zaštitom osobnih podataka; - poduzima odgovarajuće tehničke i organizacijske sigurnosne mjere za zaštitu osobnih podataka; - osigurava da se osobni podaci ne prenose u inozemstvo bez osiguravajuće zaštite; - tretira sve osobe pravedno i pošteno bez obzira na njihovu dob, vjeru, invalidnost, spol, spolnu orijentaciju ili etničku pripadnost, kada postupa u vezi njihovih zahtjeva za obavještavanjem; - utvrđuje jasne postupke za odgovaranje na zahtjeve za obaviještenost. Gaćina Adriatic Charter na svojoj Internet stranici može objaviti sadržaj kolačića za oglašavanje i praćenje statistike prometa temeljeno na interesima i informacijama posjetitelja Internet stranica Gaćina Adriatic Chartera sa društvenih mreža. Ako ispitanik upotrebljava sadržaj na društvenim mrežama Gaćina Adriatic Chartera ili u aplikacijama, kolačić s navedenih mreža i aplikacija mogao bi se pohraniti na uređaju ispitanika s kojeg pristupa Internet stranici Gaćina Adriatic Chartera. Posjetitelji imaju pravo isključiti kolačiće. Internetski preglednici obično su programirani tako da im je prihvaćanje kolačića zadana postavka, ali to ispitanici mogu jednostavno podesiti promjenom postavki svog preglednika. Ako ispitanik želi ograničiti ili blokirati sve kolačiće koje uključuju web-mjesta/aplikacije Gaćina Adriatic Chartera (što može onemogućiti upotrebu određenih dijelova web-mjesta) ili druga web-mjesta/aplikacije, ispitanik to može učiniti u postavkama preglednika. U slučaju povrede osobnih podataka koje će vjerojatno prouzročiti visok rizik za prava i slobode ispitanika, Gaćina Adriatic Charter bez nepotrebnog odgađanja obavješćuje ispitanika o povredi osobnih podataka, osim ako je Gaćina Adriatic Charter poduzeo odgovarajuće tehničke i organizacijske mjere zaštite i te su mjere primijenjene na osobne podatke pogođene povredom osobnih podataka, posebno one koje osobne podatke čine nerazumljivima bilo kojoj osobi koja im nije ovlaštena pristupiti odnosno ako je Gaćina Adriatic Charter poduzeo naknadne mjere kojima se osigurava da više nije vjerojatno da će doći do visokog rizika za prava i slobode ispitanika odnosno ako bi se time zahtijevao nerazmjeran napor, u kojem slučaju će Gaćina Adriatic Charter primijeniti javno obavješćivanje ili sličnu mjeru kojom se ispitanici obavješćuju na jednako djelotvoran način. Pregled i provjera: Gaćina Adriatic Charter ima pravo ažurirati ovu politiku ako je potrebno kako bi odražavala najbolju praksu i kako bi se osiguralo poštivanje bilo kakvih promjena ili izmjena u pogledu zaštite osobnih podataka. Link za preuzimanje Privole