http___hotelguru.hr_izjava-o-za_C5_A1titi-podataka_1.xml
1.1 1.2 1.3 2.1 2.2 3.1 4.1 5.1 6.1 7.1 7.2 8.1 9.1 10.1 11.1 12.1 13.1 13.2 13.3 13.4 13.5 14.1 14.2 15.1 16.1 17.1 18.1 19.1 20.1 21.1 21.2 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 37.1 38.1 38.2 39.1 39.2 39.3 40.1 40.2 41.1 41.2 41.3 41.4 42.1 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 52.2 52.3 53.1 53.2 54.1 54.2 55.1 56.1 56.2 56.3 56.4 57.1 58.1 58.2 58.3
Protecting the personal data made available by visitors to its website and safeguarding visitors’ rights of autonomy with regard to information are important priorities for Budapest Airport. Budapest Airport is committed to handling visitors’ personal data in a way which complies fully with applicable legal provisions and contributes to ensuring the secure use of the internet by visitors. Budapest Airport handles visitors’ personal data confidentially, in accordance with valid legal provisions, provides for their security, takes the technical and organizational measures and establishes the procedural rules required to enforce applicable legal provisions and other recommendations. These Regulations specify the principles which define our policy and daily practices relating to the protection of personal data. In it we present our services for which we request personal data from website users, our declaration on how and for what purposes such data are used, as well as how we provide for their security and protection. During the drafting of the Regulations we took into account applicable legal provisions and international recommendations, with special emphasis on the following: - Act LXIII of 1992 on the protection of personal data and the disclosure of public data; - Act VI of 1998 on the protection of individuals during the machine-based processing of personal data; - Act C of 2003 on electronic communication - Government decree no. 226/2003. 13.) on special data handling conditions for electronic communication service providers, the data security of electronic communication services and the rules of displaying identifiers and of call forwarding - Act CVIII of 2001 on electronic commerce. If you have questions or problems in connection with the contents of these Regulations, or would like to make observations on something that is not clear from the Regulations or requires further explanation, please contact our colleague responsible for the protection of personal data at: info@bud.hu If and when requested by visitors, we provide detailed information on the personal data handled by Budapest Airport, the purpose, the legal basis and the duration of data handling and activities relating to data handling. Personal data may be handled if: a) The affected person consents to it, or b) This is prescribed by an act or by a municipal decree issued on the basis of statutory authorization, for a pre-defined scope. An act may prescribe the publication of personal data for reasons of public interest, with an exact specification of the scope of the data affected. In all other cases, publication requires the consent of the affected person, which must be given in writing in the case of special data. In case of any doubt, it must be presumed that consent has been refused. Consent shall be considered to have been granted with respect to data disclosed by the affected person during public appearances or handed over by him or her for the purpose of disclosure. Regulations on data handling and the protection of visitors’ personal data apply to natural persons only, in view of the fact that personal data can only be interpreted with respect to natural persons (based on section 1 of paragraph 2 of act LXIII of 1992 on the protection of personal data and the disclosure of public data). This Declaration is therefore only binding with respect to the handling of the personal data of natural persons. The most important principles relating to the handling of personal data, also enforced by Budapest Airport, are the following: • Personal data may only be handled for a specific purpose, for the exercising of rights or the fulfillment of obligations. • Data handling must be consistent with its objective during all of its phases. • During data handling only personal data may be handled which is indispensable for the objective of the data handling, and is suitable for attaining that objective. • Data may only be handled to the extent and for the time necessary to attain the given objective. • In the absence of statutory regulations, personal data may only be handled with the consent of the visitor in question. • The nature of the data provision, whether it is voluntary or mandatory, must be specified prior to the recording of the data. In case of mandatory data provision, the legal provisions prescribing this must be specified. • In the course of data handling data may only be used for the objective specified. • In addition to the objective of data handling, clear information must be provided as to who will handle and process the data. • Data must be stored securely, in a manner proportionate with the objective of data handling, for the time necessary to attain the objective of data handling. The data handler is obliged to provide for the security of the data, and is obliged to take the technical and organizational measures and to establish the procedural rules necessary for the enforcement of applicable legal provisions. • Data must be protected, especially against unauthorized access, alteration, publication and deletion, as well as damage and destruction. • Visitors may request information at any time during data handling, may check the contents of their data and may request their correction, modification, alteration or deletion at any time. • Visitors may modify or revoke their consent to data handling at any time. • Data is usually processed in a mechanical way. • Data must be deleted concurrently with the attaining of the goal of data handling, in accordance with legal provisions. • Data may be forwarded and different cases of data handling may be linked if the affected visitor has consented to this, or if an act permits this, and if the conditions of data handling are fulfilled for all personal data. Prior to implementing data handling, the service provider must provide clear and understandable information, in compliance with legal provisions, about the manner and the objective of data recording, and, in the case of voluntary data provisions, about the indication of the voluntary basis. By data or information suitable for personal identification we mean the personal data of natural persons with which someone can be personally identified, communication may be established with them or someone’s physical accessibility may be defined, including, without limitation: name, address, mailing address, telephone number, fax number, email address, bank credit rating, social security number, tax number, credit card information, customer profiles, biometric identifiers. Anonymous information collected without enabling personal identification and which cannot be linked to natural persons, as well as demographic data collected without being linked to the personal data of identifiable persons, thereby preventing connection to a natural person, do not qualify as personal data. By personal data provided by third persons based on the required consent we mean data or information suitable for personal identification, applying to the persons using the service, i.e. visitors, which were collected and provided by the service provider with the cooperation of a third party, in compliance with legal provisions. We affirm as a general principle that in all cases when we request personal data from visitors, they can decide freely on whether to provide it or not, after reading and interpreting the relevant information. It must be noted, however, that if visitors decide not to provide their personal data, they may in some cases be unable to use some of the services requiring this. Under no circumstances does Budapest Airport collect any special information relating to race, nationality, minority and ethnic origin, political views or affiliation, religious or other conviction, state of health, pathological addictions, sexual activity or criminal history. We also request basic demographic data (age, sex, qualification, occupation, marital status, place of residence) from visitors during registration for certain services. Such data is used for analytical purposes, to improve and develop the quality of our services and to ensure that the services we provide fully satisfy visitors’ needs, but are not disclosed to third parties. If we request visitors to register on certain subpages of our website bud.hu, we display in all cases which data is requested to be provided as “mandatory”, for what purpose and with what conditions. In this case the use of the word “mandatory” does not refer to the mandatory nature of data provision, but to the fact that there are some data fields which must be filled out for successful registration, and that failure to complete certain fields, or inappropriate completion could lead to the rejection of registration. Data requested to be provided as “mandatory” is requested in such a generalized format that they are not suitable for personal identification in any way whatsoever. Personal and other data provided by visitors are not amended or linked with data or information originating from other sources. If such linking of data originating from different sources were to occur in the future, this would only be done based on prior consent from visitors, with the relevant information having been provided. In case Budapest Airport commissions business partners to provide or operate some of its services, pages or campaigns, and such services involve the collection of personal data, the data is subject to the same rights of use and data handling for Budapest Airport as if it collected and stored the data itself. In the course of such cooperation, the business partner collects the data on behalf of and as a representative of Budapest Airport, and the provisions of these Regulations apply to such cases as well. If Budapest Airport maintains co-branded services with a content partner, the rights to use the personal data are shared, but the provisions of these Regulations still apply, based on data handling regulations with the same contents, prescribed for partners as part of the contractual relationship. In case of the above data handling scenarios, the identity of the data handler is clearly specified during the data provision process. In the absence of specific authorization thereto, personal data made available by visitors is not disclosed to third parties under any circumstances. However, the complete implementation of services may require the handover of some of visitors’ personal data to third parties on a temporary basis for the purpose of data processing or data handling, in case the necessary consent is granted. For example, if visitors undertake online payment on our service pages, the credit card number, indispensable for payment, is forwarded to the partner financial institution, but the credit card number is not stored. If as a result of a purchase made on our website bud.hu the product purchased needs to be sent to the buyer, the product to be delivered, its price, the name and the address of the addressee are handed over to the business partner performing delivery, specified on the opening page of the service in question, but the delivery partner may not use these data for any other purpose besides the delivery. The handling of personal data in this manner is not possible without consent to the forwarding of the data. In compliance with its statutory obligation, Budapest Airport hands over requested and available information to the competent authorities if it is requested to hand over personal data in a manner consistent with legal provisions (received in a resolution seizing official data in connection with the suspicion of a criminal act). If visitors make personal data available to us, we will take all necessary measures to provide for the security of such data, both during network communication (online data handling) and data storage (offline data handling). If the services in question require clients to send personal data (e.g. credit card number) online to be able to use the service, we provide a channel ensuring appropriate protection for such messages (SSL-based connection). As soon as the personal data are inside the IT infrastructure used by Budapest Airport, actions relating to the safeguarding and protection of the data are defined by the principles, procedures and security controls specified in the IT Security Policy of Budapest Airport, with all company employees being responsible for compliance therewith. Only persons working in relevant positions may have access to personal data, with the application of high level access control measures. The modification and deletion of personal data If any of our clients requests the deletion of their personal data from our system (of course in some cases accepting that from then on they will not be able to use the service linked to the data, or at least not in the same way), such a request will be fulfilled immediately by deleting from our database the appropriate records specified by the visitor. The placement of anonymous visitor identifiers (cookies) An anonymous visitor identifier (cookie) is a unique series of signals suitable for identification and the storage of profile information, which service providers place on visitors’ computers. It is important to know that the complete IP address is not stored during the use of such signal series; they are therefore not able to identify the client, i.e. the visitor, in any way whatsoever on their own, they are only suitable for recognizing the visitor’s computer. It is not necessary to provide a name, email address or any other personal information, since service providers do not request data from visitors during the application of such solutions; data is only exchanged between computers. In the era of the internet, personal information and personalized services can only be provided if service providers are able to individually identify the habits and the needs of their clients. Similarly to other service providers, Budapest Airport handles the aforementioned anonymous identifiers, which do not contain personal information, with the aim of finding out more about the information usage habits of clients in order to be able to improve the quality of its services and to be able to display tailor-made pages and marketing (advertising) content for clients visiting its website. If you do not want such an identifier signal to be placed on your computer, you can adjust the settings of your browser in such a way that it will not allow the placement of such a unique identifier signal on your computer (in the case of most browsers this can be done in the settings / internet settings tab under the tools menu). In this case you will be able to use most of our services, but we will not be able to serve you fully in some cases (for example on pages offering solutions tailored to individual needs). The analysis of log files The analysis of log files generated during the use of web-based services provides information for service providers which is useful in several respects. In the log files the servers providing the service record data about the requests sent by visitors, such as the dynamic IP address of the computer sending the request, the type of browser used, the time of the request, the address of the requested page, etc. Budapest Airport uses such information for technical purposes (analyzing the secure operation of servers, subsequent checks) only. The data queues thus generated are not linked with information suitable for identification, originating from other sources. The sending of special offers Budapest Airport sends an email welcoming clients signing up for services requiring registration or subscription, which in some cases also contains information important in terms of the use of the service (for example confirmation of username and password). Subject to consent thereto, we also circulate emails to clients from time to time, providing information on new services, special offers, etc. If clients do not wish to receive such promotional messages going forward, even though they have not indicated this intention earlier, they can unsubscribe from these in the same manner and through the same channel as used to initiate the use of the service.
1.1 1.2 1.3 2.1 3.1 4.1 5.1 6.1 7.1 7.2 8.1 9.1 10.1 11.1 12.1 12.2 13.1 14.1 14.2 15.1 16.1 17.1 18.1 19.1 19.2 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 42.3 43.1 44.1 45.1 46.1 47.1 47.2 47.3 47.4 47.5 48.1 49.1 50.1 51.1 51.2 52.1 52.2 52.3 52.4 52.5 53.1 54.1 55.1 55.2 56.1 57.1 57.2 58.1 59.1 59.2
Glavni cilj, a ujedno i obveza szallas.hu-a je zaštita osobnih podataka koji su nam dani. U okviru toga primjenjuju se relevantni zakoni koji u potpunosti posjetiteljima osiguravaju siguran internet (Secure Internet). Szallas.hu portal rukuje sa osobnim podatcima posjetitelja s povjerenjem, u skladu sa propisima releventnih zakona obezbjeđuje sigurnost, te poduzima tehničke i organizacijske mjere kako bi se mogao držati načela zaštite podataka u skladu sa postupovnim pravilima. Naša izjava o zaštiti osobnih podataka sadrži načela koja definiraju zaštitu osobnih podataka te našu praksu u svezi s time, pri čemu primjenjujemo za to određene zakonske propise. Ako imate pitanja u svezi sadržaja Izjave, njenim razumijevanjem ili u svezi primjene onog što u predmetnoj Izjavi piše, molimo da stupite u kontakt sa kolegom koji je odgovoran za zaštitu osobnih podataka na sljedeći mail: szallas@szallas.hu Na zahtjev posjetitelja možemo pružiti detaljne informacije o obradi osobnih podataka, o cilju obrade podataka, pravnim osnovama, vremenskom roku i aktivnosti koje se odnose na obradu osobnih podataka. Pojmovi osobni podatak: određene fizičke osobe (u daljnjem tekstu i ranije: "posjetitelj") mogu biti povezane s podatcima, ti podatci se mogu odbiti od strane posjetitelja. Obrada osobnih podataka je moguća sve dok je moguće uspostaviti kontakt sa posjetiteljem; posebni podatci: rasno podrijetlo, političko mišljenje ili stranačka pripadnost, vjerska ili druga uvjerenja, zdravlje, patološke ovisnosti, seksualni život i kaznene presude; elementi podatka: Dobar dio osobnih podataka; Neovisno o procesu koji se koristi skupljanje, snimanje, pohranjivanje, obrada i brisanje ili bilo kakva uporaba osobnih podataka (tu se podrazumijeva i prosljeđivanje i javno objavljivanje). Pod upravljanjem podataka podrazumijeva se i njihova promjena i sprečavanje njihove daljnje primjene; obrada podataka: bez obzira na primjenjen proces skupljanje, preuzimanje, pohrana, obrada, brisanje i bilo koja primjena (ovdje podrazumijevajući i prosljeđivanje i objavljivanje) osobnih podataka. Pod obradom podataka podrazumijeva se i promjena, te zabrana daljnje uporabe osobnih podataka; prosljeđivanje podataka: nekolicina podataka dostupna trećim osobama; objava: nekolicina podataka dostupna bilo kome; ona fizička ili pravna osoba ili neinkorporirana organizacija koja određuje svrhu obrade osobnih podataka, upravljanje njima i koja donosi i provodi odluke, odnosno povjerava proces nekoj drugoj osobi. U slučaju obaveznog rukovođenja osobnim podatcima cilj i uvjeti rukovanja podatcima te samog kontrlora određuje zakonska regulativa ili samouprava; operator: je fizička ili pravna osoba, ili neinkorporirana organizacija kojoj kontrolor povjerava obradu podataka; brisanje podataka: neprepoznatljivi podatci na način na koji ih nije moguće vratiti. validnost: Provjera točnosti podatka i jesu li isti odgovarajući, tehničkim ili osobnim načinom. Najvažnija temeljna načela koja su donijeta od strane szallas.hu-a, a u svezi rukovanja osobnim podatcima: -Upravljati osobnim podatcima smije se samo zbog strogo određenog cilja, u interesu pravnih propisa i ispunjavanjem obveza, koja u svakom dijelu odgovara cilju. -U smislu upravljanja podatcima, upravljati se može samo sa onim osobnim podatcima koji se ne mogu izbjeći radi ostvarivanja cilja, te su ista odgovarajuća za postizanje cilja. -Rukovanje podatcima može biti samo u određenom vremenskom roku i u određenoj mjeri. -Osobni podatci – u nedostatku zakonske regulative – njima se može rukovati isključivo uz pristanak posjetitelja. -Izvješćivanje – dobrovoljno ili obavezno – mora biti unaprijed objavljeno. U slučaju obveznog izvješćivanja mora se naglasiti zakonska regulativa. -Pri rukovanju podatcima isti se mogu koristiti samo u osnovnim načelima za ostvarivanje cilja. -Uz cilj rukovođenja podatcima isti se mogu koristiti samo u osnovnim načelima informativno nedvojbeno o tome tko će upravljati podatcima, odnosno tko će ih obraditi. -Pohranjivanje podataka u skladu sa rukovanjem podatka, je potrebno izvršiti za vrijeme koje je potrebno za ostvarenje cilja rukovanja podatcima i to uz potrebne mjere sigurnosti. -Kontrolor je obavezan voditi računa o zaštiti podataka, odnosno obavezan je poduzeti one tehničke i organizacijske mjere, ispostaviti one propise postupaka, koji doprinose ispunjavanju zakonskih propisa. -Podatci se moraju zaštiti od ilegalnog pristupka, izmjena, objavljivanja ili brisanja, odnosno od njihove povrede, ili poništavanja. -Posjetitelj može bilo kada tražiti informacije o rukovanju podatcima, odnosno može provjeriti sadržaj podataka, te ih može prema vlastitom nahođenju bilo kada ispraviti, izmijeniti, promijeniti, te može zatražiti njihovo brisanje. -Posjetitelj može bilo kada promijeniti rukovanje podatcima, odnosno može ga opozvati. -Nakon završetka procesa rukovanje podatcima isti se u skladu sa relevantnim zakonskim propisima trebaju obrisati. -Podatci se mogu prosljeđivati, odsnosno pojedini podatci se mogu povezivati onda kada posjetitelj za to da svoju suglasnost, ili to omogućava relevantni zakon, te kada uvjeti rukovanja podatcima budu, za svaki osobni podatak pojedinačno gledano, ispunjeni. -Kontroloru prije provedbe upravljanja podatcima – uzimajući u obzir zakonske odredbe – potrebno je uz to nedvojbeno informirati o načinu i cilju uzimanja podatka. -Osobnim podatcima se ne smatraju one anonimne informacije koje su mogu prikupiti bez osobne identifikacije, koje se prikupljaju bez osobne identifikacije i koje se ne mogu povezati sa stvarnom osobom, odnosno oni demografski i drugi podatci koji se prikupljaju na način da nisu povezani sa identifikacijom osobe i njezinim podatcima, te se pomoću njih ne može uspostaviti poveznica sa stvarnom osobom. -Preko treće strane – na temelju posebnih procesa, tehničkim putem, itd. – dobivene zaštićene osobne podatke, informacije, koje su odgovarajuće za osobnu identifikaciju, smatramo onima koje se odnose na osobu koje traži uslugu, odnosno odnose se na gosta. Ovakvi osobni podatci zbog prirode funkcioniranja interneta tehničkim putom automatski mogu doći do kontrolora (ovdje se podrazumijeva, ali ne i isključuje aktualna IP adresa), odnosno pridržavanjem zakonskih odredbi uz pomoć treće strane može se prikupljati i zaštiti podatke. Dodatne informacije u svezi obrade podataka radi neposrednog poslovanja Pozivajući se na neposredno poslovanje Szallas.hu d.o.o. i Sanoma Media Budapest d.d. informira svoje posjetitelje o sljedećem, (1) davanje podataka je dobrovoljno, (2) pravna osnova za rukovanje podatcima je prethodno informiranje, (4) relevantne zakonske odredbe su LXIII. Zakon iz 1992. (od 2012. je CXII. Zakon iz 2011.) i XLVIII. Zakon iz 2008., (5) kontrolori podatke mogu prepoznati radi obavljanja svojih zadataka i to u potrebnoj mjeri, (6) svoj pristanak osobe mogu opozvati bilo kada i u bilo kojoj mjeri, bez naknade i troška u potpunosti ili pojedinačno pismenim putem na 1037 Budapest, Montevideo u. 9, donsono E-mailom na sanomamedia@sanomamedia.hu. Poseban postupak od strane sazallas.hu-a -U slučaju prijave na Newsletter szallas.hu-a rezervacije na stranici slanje upita, putem weba ili mailom, a sve dobrovoljno, korisnik se slaže sa stime da mu szallas.hu šalje elektroničku poštu. Szallas.hu osigurava da se korisnik bilo kada može odjaviti sa Newslettera ili da prestane slati mailove i to na sljedeći način: klikom na link u podnožju pisma! -Korisnik prihvaća da će u slučaju konzumacije rezervacije nakon napuštanja smještaja primiti od nas upitnik kojeg će ispuniti anonimnim putem u kojem će moći ocijeniti smještaj. Szallas.hu zadržava pravo promjene tih procjena, njihovo uklanjanje i odbijanje. Ispunjavanje upitnika je u potpunosti dobrovoljno. Davanje osobnih podataka je dobrovoljno. Cilj procjene je unapređivanje razine pružanja usluga ili prilagođavanje sadržaja web stranice našim korisnicima. Registracija, prijava posjetitelja,"cookies" korištenje i monitoring weba: Pružanjem naših usluga pomoću cookie-a, dopuštenim od treće strane korištenim cookie-ima, monitoringom weba i/ili drugim tehničkim rješenjima koristimo neosobne podatke i pratimo navike pretraživanja, te vršimo monitoring i bilježimo korištenje i posjećivanje naše web stranice, te podatke skupljamo i tako sakupljene koristimo kao statistiku – na način da se identifikacija korisnika ne može izvršiti Ciljevi i primjena Svaki puta kada od naših posjetitelja tražimo podatke, posjetitelj u potpunosti može biti siguran da u potpunosti dobrovoljno odlučuje o davanju traženih informacija. Ipak, moguće je da kada netko ne pruži osobne podatke, tada ne može iskoristiti uslugu koja je vezana uz davanje osobnih podataka, imajući u vidu, da postoje oni neophodni podatci bez kojih se, ako se ne proslijede, ne može uspješno završiti registracija, pa tako ne ispunjavanje određenih rubrika, ili njihovo neispravno popunjavanje, može dovesti do odbijanja registracije, zbog čega su potrebni osonovni podatci. Podatke koje tražimo sjedne strane koristimo u cilju procjene, a s druge strane za poboljšanje pružanja naših usluga, te njihovom razvoju, te ih pojedinčano na koristimo u interesu treće strane. Predmetna Izjava nije namijenjena objavljivanju posjetitelja, već se vezuje na osnovne podatke koji su dani szallas.hu-u. Ako netko samostalno objavi svoje osobne podatke ili to učini sa jednim njihovim dijelom, na takve informacije Izjava nema učinka. Pruženim podatcima upravlja Szallas.hu d.o.o., operator web stranice szallas.hu. Ovi propisi vrijede i za slučajeve kada se posjetitelj prijavi na szallas.hu Facebook društvenoj mreži nađenom Szallas.hu – prijava na Newsletter; sa tom razlikom da je način prijave na Facebook društvenoj mreži klikom na odgovarajući gumb. Korisnik je tada suglasan da Szallas.hu upravlja podatcima koji se nalaze na Facebook društvenoj mreži, i koji su tamo dostupni, dakle podatci koji su javni i privatni (ime, mjesto stanovanja, datum rođenja, jesi li u vezi ili ne, ako da, tada ime partnera, ima li djece, ako da, njihova imena, što ga zanima, i to gdje je već putovao.