http___hr-itc.hr_uvjeti-koristenja-i-privatnost-podataka__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 8.1 9.1 10.1 11.1 12.1 12.2 13.1 14.1 15.1 16.1 17.1 17.2 18.1 18.2 18.3 18.4 19.1 19.2 20.1 20.2 21.1 22.1 22.2 22.3 23.1 24.1 24.2 25.1 25.2 25.3 25.4 26.1 26.2 26.3 26.4 26.5 26.6 26.7 26.8 26.9 27.1 27.2 27.3 27.4 27.5 27.6 27.7 27.8 28.1 29.1 29.2 29.3 30.1 31.1 32.1 32.2 32.3 32.4 33.1 33.2 33.3 33.4 34.1 34.2 34.3 34.4 35.1 35.2 35.3 35.4 36.1 37.1 37.2 37.3 37.4 38.1 39.1 39.2 40.1 41.1 41.2 42.1 42.2 43.1 44.1 45.1 45.2 45.3 45.4 45.5 45.6 46.1 46.2 46.3 47.1 47.2 47.3 48.1 48.2 48.3 48.4 49.1 49.2 49.3 49.4 50.1 50.2 51.1 51.2 51.3 52.1 52.2 52.3 52.4 53.1 54.1 54.2 55.1 56.1 56.2 56.3 56.4 57.1 57.2 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 70.2 70.3 70.4 70.5 70.6 70.7 70.8 70.9 71.1 71.2 72.1 73.1 73.2 74.1 74.2 74.3 74.4 74.5 75.1 76.1 76.2 76.3 76.4 76.5 76.6 76.7 76.8 77.1 77.2 77.3 77.4 77.5 77.6 78.1 79.1 79.2 79.3 79.4 79.5 80.1 81.1 82.1 83.1 84.1 85.1 85.2 86.1 86.2 86.3 86.4 87.1 88.1 88.2 89.1 89.2 89.3 89.4 89.5 90.1 90.2 90.3 90.4 90.5 90.6 91.1 91.2 92.1 92.2 93.1 93.2 93.3 94.1 94.2 95.1 96.1 97.1 98.1 98.2 98.3 98.4 98.5 99.1 100.1 101.1 101.2 101.3 101.4 101.5 101.6 101.7 102.1 102.2 103.1 103.2 104.1 104.2 104.3 104.4 104.5 104.6 104.7 104.8 104.9 104.10 105.1 105.2 105.3 106.1 106.2 106.3 107.1 107.2 108.1 108.2 108.3 108.4 108.5 108.6 108.7 108.8 109.1 109.2 109.3 109.4 110.1 111.1 111.2 111.3 112.1 112.2 113.1 113.2 114.1 115.1 115.2 115.3 115.4 115.5 115.6 115.7 115.8 116.1 116.2 117.1 118.1 118.2 119.1 119.2 120.1 121.1 122.1 122.2 123.1 123.2 123.3 123.4 123.5 123.6 123.7 124.1 125.1 126.1 127.1 127.2 128.1 128.2 128.3 129.1 129.2 129.3 129.4 129.5 130.1 131.1 131.2 132.1 132.2 132.3 133.1 133.2 133.3 134.1 134.2 135.1 135.2 136.1 136.2 137.1 137.2 138.1 139.1 139.2 140.1 140.2 140.3 140.4 140.5 141.1 142.1 143.1 144.1 145.1 145.2 145.3 145.4 146.1 147.1 148.1 149.1 150.1 151.1 151.2 152.1 152.2 152.3 153.1 154.1 155.1 156.1 157.1 158.1 158.2 158.3 159.1 160.1 161.1 162.1 163.1 164.1 165.1 166.1 167.1 167.2 168.1 169.1 169.2 169.3 169.4 169.5 170.1 170.2 171.1 171.2 171.3 171.4 171.5 171.6 171.7 171.8 172.1 172.2 172.3 173.1 173.2 173.3 173.4 173.5 174.1 174.2 174.3 174.4 174.5 175.1 175.2 175.3 176.1 176.2 177.1 178.1 179.1 179.2 179.3 180.1 181.1 181.2 181.3 181.4 181.5 182.1 183.1 183.2 184.1 185.1 185.2 185.3 185.4 186.1 186.2 187.1 188.1 188.2 188.3 189.1 189.2 189.3 190.1 190.2 190.3 191.1 191.2 192.1 193.1 194.1 195.1 196.1 196.2 196.3 197.1 198.1 198.2 198.3 198.4 199.1 200.1 201.1 201.2 201.3 201.4 202.1 202.2 202.3 203.1 204.1 204.2 205.1 206.1 206.2 206.3 206.4 207.1 207.2 208.1 208.2 208.3 209.1 209.2 209.3 209.4 210.1 210.2 211.1 212.1 212.2 213.1 213.2 214.1 215.1 216.1 216.2 217.1 218.1 218.2 218.3 219.1 220.1 220.2 220.3 220.4 220.5 220.6 220.7 220.8 220.9 220.10 221.1 222.1 222.2 222.3 223.1 224.1 224.2 224.3 225.1 226.1 227.1 227.2 228.1 228.2 228.3 228.4 228.5 229.1 230.1 230.2 231.1 231.2 231.3 231.4 232.1 232.2 233.1 234.1
Data Privacy NAME AND ADDRESS OF THE RESPONSIBLE AUTHORITY Responsible in the sense of the basic data protection regulation, other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature: CONCILIUS AG Palais am Oberanger Hermann-Sack-Straße 3 80331 Munich E-Mail: info@concilius.com Register Court Munich: HRB 163682 DATA PROTECTION OFFICER The data protection officer of the controller is: Bernd Gasteiger LL. M., Attorney at Law Roseggerstr.56 82229 Seefeld E-Mail: datenschutzbeauftragter@concilius.com E-Mail: gasteiger@grk-recht.de III. GENERAL NOTES AND MANDATORY INFORMATION We are pleased that you are visiting our homepage www.concilius.com and thank you for your interest in our company. The protection of your privacy as well as the security of all business data is an extremely important concern for us, which we take into account in our business processes. Data protection and information security are part of our corporate policy. The trust placed in us is very important to us and therefore the importance and obligation to handle your data with care and to protect it from misuse. To make you feel safe and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. Therefore, we act in accordance with the applicable legal provisions for the protection of personal data and data security. With these notes on data protection in this data protection declaration, we would therefore like to inform you about when we store which data and how we use it, of course in compliance with the applicable German jurisdiction. The data protection with us is based on General Data Protection Regulation (GDPR) and is based in particular on the current Federal Data Protection Act (BDSG). The scope of processing of personal data As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website as well as our contents and services and to realise our corporate purpose. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations. The purposes and legal basis for the processing of personal data We process personal data only to fulfil our contractual obligations or to protect our essential legitimate interests. Our legitimate interests are based on the implementation of our corporate purpose. As far as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. When processing personal data which is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing activities which are necessary for the implementation of pre-contractual measures. As far as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event, that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. Categories of recipients and personal data, their origin We pass on personal data to our business partners and service providers in order to implement our corporate purpose. To implement our corporate purpose, we typically use contact and address data of our customers and business partners. We typically receive the personal data directly from the person concerned or, with the consent of the person concerned, in exceptional cases from third parties. Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if: - you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, - the transfer in accordance with Art. 6 Para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not transferring your data, - in the event that there is a legal obligation to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and - this is legally permitted and required for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 sentence 1 lit. b GDPR. Transmission to third countries As a matter of principle, we do not pass on personal data to recipients in third countries (i.e. countries outside the EU). If data is transferred to recipients in third countries in the future, we will ensure that, in addition to the authorisation required for the transfer, the recipient in the third country ensures an adequate level of data protection (or there is an exception on the basis of Art. 49 para. 1 GDPR). INFORMATION ON THE COLLECTION OF PERSONAL DATA - In the following we inform about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. - When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. - We delete the data collected in this context after storage is no longer required, or restrict processing, if there are legal storage obligations. You will find more detailed explanations in section VIII of this data protection declaration. - If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. In this context, we also mention the defined criteria of storage duration. YOUR RIGHTS (RIGHTS OF DATA SUBJECTS) (1) You have the following rights in relation to the personal data concerning you: - Right according to Art. 7 para. 3 GDPR. to invoke your once given consent at any time vis-à-vis us. As a consequence, we are not allowed to continue the data processing, that was based on this consent for the future. The legality of the data processing carried out up to the time of revocation remains unaffected by your revocation; - Right to request information in accordance with Art. 15 DSGVO about your personal data processed by us. You are entitled to request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been and will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of such data; - Right of correction according to Art. 16 GDPR. Accordingly, you can immediately request the correction of incorrect or the completion of your personal data stored with us; - Right to deletion according to Art. 17 GDPR. In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; - Right to restrict processing in accordance with Art. 18 GDPR. You can then demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR; - Right to object to processing in accordance with Art. 21 GDPR; - Right to data transferability according to Art. 20 GDPR. You have the right to receive your personal data that you have provided us with in a structured, common, machine-readable format or to request that it be transferred to another responsible party. (2) You also have the right, in accordance with Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data by us. The competent supervisory authority is the state data protection commissioner of the federal state in which our company has its headquarters. An overview of the state data protection officers and their contact details is available at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/Landesdatenschutzbeauftragte/Landesdatenschutzbeauftragte_liste.html (3) The assertion of all rights mentioned in V. points (1) and (2) is basically free of charge for you. However, in the case of manifestly unjustified or – particularly in the case of frequent repetition and excessive requests, we may, in accordance with Art. 12 (5) DSGVO, either demand an appropriate fee, taking into account the administrative costs of informing or notifying or implementing the measure requested, or refuse to act on the basis of the request. COLLECTION AND STORAGE OF PERSONAL DATA WHEN VISITING OUR WEBSITE AND THE NATURE AND PURPOSE OF ITS USE (1) In principle, you can visit our website without telling us who you are. Our web servers automatically store information of a general nature. When you call up our websites, information is automatically sent to the server of our website by the browser used on your terminal device. This information is temporarily stored in a so-called log file. If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. The following information is recorded without your intervention and stored until it is automatically deleted: - IP address of the requesting computer, - Date and time of the request, - Name and URL of the retrieved file, - Website from which the request comes (referrer URL), - used browser, - Operating system Name of your access provider if applicable, - Language and version of the browser software. We process the above-mentioned data for the following purposes - Ensure a smooth connection of the website, - Guarantee a comfortable use of our website, - Evaluation of system security and stability and - for other administrative purposes. The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR follows from the purposes of data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. VII. USE OF COOKIES We do not use cookies on our website. VIII. STORAGE DURATION AND DATA ERASURE We comply with the principles of data reduction and data minimization. In particular, your personal data is deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed. Thereafter, the data will be deleted unless the storage is necessary to fulfil a legal obligation to process the data in accordance with EU or national law to which the individual is subject. Such a legal obligation is represented by the legal storage obligations, which are, for example, 10 years (for accounting data and payroll data) or 6 years (for commercial correspondence). For the duration of the storage obligations, the data is locked, after which it is deleted. CONTACT AND COMMUNICATION For questions of any kind we offer you the possibility to contact us by e-mail. It is necessary to provide a valid e-mail address so that we know from whom the request comes from and that we can answer it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us will be automatically deleted after the completion of your request. This data is only processed for this correspondence with you and for the purpose for which you have provided us with the data in each case within the scope of this communication, such as for processing your enquiries or to contact you at your request. In this case, the processing of personal data is carried out with your consent and is then permissible in accordance with Art. 6 para. 1 lit. a GDPR. We will delete your data in this regard if the purpose for which you have provided us with your data has been fulfilled or completed and we are not entitled or obliged to continue storing it for legal reasons. OTHER PROCESSING OPERATIONS CARRIED OUT IN RESPONSE TO A LEGITIMATE INTEREST; DATA PROCESSING FOR THE PURPOSE OF MAINTAINING BUSINESS CONTACTS As far as necessary, we process your data beyond the actual fulfilment of a contract concluded with you or a consent granted by you for the protection of legitimate interests of us or third parties, unless a consideration in the individual case shows that your legitimate basic rights and fundamental freedoms, which require the protection of personal data, outweigh (Art. 6 para. 1 lit. f GDPR). This may include: - advertising, as far as they have not objected to the use of your data; - Assertion of legal claims and defence in legal disputes; - Ensuring IT security and IT operation; - Prevention and investigation of criminal offences; - Measures for business management and further development of services and products. If we have received your contact data from us or others within the scope of a business event, within the scope of a business appointment or through the exchange of business cards or within the scope of an order, we use your contact data (in particular name, address, e-mail address) beyond that for the maintenance of our business contacts. For this purpose, we transfer your contact data to the CRM (Customer Relationship Management) system we use. This processing is carried out on the basis of a legitimate interest on our part within the meaning of Article 6 para. 1 lit. f GDPR. We have a justified economic interest in maintaining contacts that have arisen in the course of business transactions even beyond the initial contact and in using them to establish a business relationship and to remain in contact with the person concerned for this purpose. XI CONSENT - If you have given us your consent to process personal data for specific, additional purposes (e.g. receipt of the newsletter), this data processing is based on this consent. We will provide details of the content of the consent when the consent is requested. - Consent is always voluntary. If the processing of personal data is based on your consent, you have the right to revoke this consent at any time. The legal basis for data processing based on consent is Article 6 para. 1 lit. a GDPR. - Your personal data will only be processed beyond this if you have given us your consent and we are therefore entitled to process your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In some areas of our website you have the possibility to give such an explicit consent. We will inform you in each case of the purpose for which the data will be processed if you give your consent, and how long we will store this personal data. XII. OBJECTION OR WITHDRAWAL OF CONSENT TO THE PROCESSING OF YOUR DATA - If you have given your consent to the processing of your data, you can revoke this consent at any time. Such revocation affects the permissibility of processing your personal data after you have expressed it to us. - As far as we base the processing of your personal data on the weighing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is shown by us in the following description of the functions. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and either stop or adapt the data processing or show you our compelling reasons for continuing the processing that are worthy of protection. - Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. - If you wish to exercise your right of revocation or objection, it is sufficient to send an e-mail to the e-mail address info@concilius.com or a message to the contact addresses listed in the imprint. IP anonymization We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. Contract data processing We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics. We use Google Analytics to analyse and regularly improve the use of our website. With the statistics obtained, we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR. Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms and conditions: http://www.google.com/analytics/terms/de.html privacy policy overview: http://www.google.com/intl/de/analytics/learn/privacy.html , and the privacy policy: http://www.google.de/intl/de/policies/privacy. XIV. SOCIAL MEDIA PLUG – INS (1) We use social media plug-ins from Facebook and Twitter on our website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to make our company known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection compliant operation is to be guaranteed by the respective provider. The integration of this plug-in by us takes place by means of the so-called two-click method, in order to protect visitors to our website in the best possible way. Our relevant buttons act as external links, so that without clicking on one of the buttons no information is transferred to one of these providers. If you do not want these social networks to collect data on the use of our websites, please do not click on the buttons mentioned. You can recognize the providers of the plugins by the mark on the box by its initial letter or logo. (2) When the user clicks on one of the buttons, he is redirected to the website of the respective provider. The URL of the current page is passed as a parameter. We have no influence on whether or how the providers use this date for evaluation purposes. In the case of Facebook, the IP address is anonymised immediately after it has been collected, according to information provided by the respective providers in Germany. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data, in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box. We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also do not have any information about the deletion of the collected data by the plug-in provider. The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or the design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting, advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider in order to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR. he data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click on the activated button and, for example, link to the page, the plug-in provider will also save this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider. (3) Facebook If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, e.g. confirm the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook may use this information for the purposes of advertising, market research and the design of Facebook pages to meet the needs of the market. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please see the Facebook data protection information at (https://www.facebook.com/about/privacy/). (4) Twitter By using Twitter, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to third parties. These features are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This may include, for example, content such as images, videos or texts and buttons that allow users to express their favours regarding the content, to tell the authors of the content or to subscribe to our articles. If the users are members of the platform Twitter, Twitter can assign the call of the above mentioned contents and functions to the user profiles there. Privacy policy of Instgram: https://twitter.com/de/privacy. Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAOtatus=Active). Privacy policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization. (5) Further information on the purpose and scope of data collection and its processing by the plug-in providers can be found in the data protection declarations of these providers, which are provided below. There you will also receive further information on your rights in this regard and setting options to protect your privacy. Addresses of the respective plug-in providers and URL with their data protection information: a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted itself to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework. b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted itself to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework OTHER PLUGINS AND TOOLS GOOGLE WEB FONTS This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. Through this, Google obtains knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a default font is used by your computer. For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and Google’s privacy policy: https://www.google.com/policies/privacy/. GOOGLE MAPS This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an attractive presentation of our online offers and easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. For more information on how we handle user data, please refer to the Google privacy policy: https://www.google.de/intl/de/policies/privacy/. XVI. DATA SECURITY – SSL ENCRYPTION We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. Our servers are secured by firewalls and virus protection. We also use SSL or TLS encryption (SSL = Secure Sockets Layer; TLS = Transport Layer Security; SSL is the previous name of TLS) within your website visit. You can tell whether an individual page of our Internet presence is transmitted in encrypted form by the fact that the address line of the browser changes from “http://” to “https://” and also by the lock symbol in your browser line. If SSL or TLS encryption is activated, data that you transmit to us cannot be read by third parties. However, complete data security cannot be guaranteed when transmitting data over the Internet (e.g. when communicating by e-mail). You are therefore free to send confidential information by post only. XVII. LINKS TO WEBSITES OF OTHER PROVIDERS As far as this website refers to external pages of other providers (links), you leave the website and the contents of CONCILIUS through these links. The operators of these sites and not CONCILIUS are solely responsible for compliance with data protection regulations on these sites. XVIII. OBLIGATION OF EMPLOYEES AND EXTERNAL SERVICE PROVIDERS It goes without saying that our employees and the service companies commissioned by us are obliged to maintain secrecy and to comply with the provisions of data protection. XIX. COOPERATION WITH EXTERNAL SERVICE PROVIDERS If necessary, we commission other companies and individuals to perform tasks for us. Examples include parcel delivery, sending letters, maintaining our customer lists, analyzing our databases, advertising (including the provision of search results and links), processing payments (credit card, direct debit) and customer service. These service providers have access to personal information needed to perform their tasks. However, they may not use them for other purposes. Furthermore, they are obliged to treat the information in accordance with this data protection declaration as well as the German data protection laws and the basic data protection regulation. If these contractors are commissioned data processors in accordance with § 11 BDSG (commissioned processors in accordance with Article 28 GDPR), we have concluded corresponding contracts with them in conformity with the law. PUBLICATION OF JOB ADVERTISEMENTS/ ONLINE JOB APPLICATIONS The protection of your personal data during the entire application process is an important concern for us. Your application data will be collected and processed electronically by us exclusively for the purpose of handling the application procedure. The subject of data protection is personal data (Art. 4 para. 1 GDPR). This is information about personal or factual circumstances, such as name, address, e-mail address or telephone number, which you provide to us as part of the application process: - Personal master data (for example, applicant name, address, date of birth) - Communication data (e.g. telephone, e-mail) - Data from the applicant’s curriculum vitae (e.g. professional career, secondary employment, leisure activities) - Results of selection procedures (e.g. tests, interviews) - Process data (e.g. status, dates) The processing of your personal data is based on Article 6 paragraph 1 lit. GDPR, as you have given your consent to the processing of your personal data for one or more specific purposes before completing the application. If your application is followed by the conclusion of a contract of employment, your transmitted data may be stored by us in your personnel file for the purpose of the usual organisational and administrative process in compliance with the relevant legal provisions. If your job application is rejected, the data you provided will be deleted automatically no later than 6 months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (e.g. the duty of proof under the General Equal Treatment Act) or if you have expressly agreed to longer storage in our database of interested parties. There is no data transfer to third countries. You are responsible for all contents of the application, such as photos, and must take sole responsibility for compliance with legal requirements, such as trademark, copyright, personal or other rights of third parties. You have the right to data transferability and the right to complain to a data protection supervisory authority. You are entitled to revoke your consent to the use of personal data at any time. If you have any questions about data protection or wish to exercise your right of information or revocation, please contact the person who was given as contact person in the job advertisement or our external data protection officer datenschutzbeauftragter@concilius.com XXI. INFORMATION DUTIES ACCORDING TO ART. 13 GDPR IN RELATION TO EVENTS With the following information we give you an overview of the processing of your personal data (hereafter “data”) at events of CONCILIUS or at events of CONCILIUS for clients as well as your data protection rights. What data is stored about the customer? We process the following categories of personal data: - Contact information, in particular first and last name, title if applicable, address, telephone number if applicable, e-mail address - Details of the company or institution for which you work - Details of your professional position - any photos and video recordings made by you at the event - if applicable, date and place of birth (e.g. for invitations to events that require a security check by the BKA) In principle, we collect this data directly from you or from publicly accessible sources. In individual cases, we may receive personal information about you from the company or institution you work for so that we can invite you to one of our events, or from individuals who register you for events. For what purpose your data are processed (purpose of processing) and on what legal basis? We use your contact details (name, postal address, e-mail address) to send invitations to our events and for the purpose of further organising the event. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR based on our legitimate interest in adequate communication of our corporate strategy and our entrepreneurial activities. If you no longer wish to receive invitations to our events, you have the option of objecting to the use of your data for these purposes at any time by sending an e-mail with your objection to info@concilius.com. In this case we will immediately stop sending future invitations to our events. If you participate in an event that is hosted by us, we process your data mentioned under point 1 in order to carry out the event and enable that you can participate. This also includes that we may include your name, details of your company or institution and your current professional position in a list of participants, which will be made available to the other participants of the event (if necessary also in electronic form), or we may make your data (name, details of company/institution) available to the organizers of the event for the purpose of holding the event. In addition, we use this data to send you event-relevant materials (e.g. conference proceedings) produced after the event. Furthermore, we may pass on your data to cooperating institutions if this is necessary to carry out the event and to enable your participation, e.g. external guest management. The legal basis for these data processing operations is Art. 6 para. 1 sentence 1 lit. b GDPR. In accordance with Art. 21 para. 1 GDPR, you have the right to object to the publication of your data on the guest list with future effect at any time for reasons arising from your particular situation by sending an e-mail with your objection to info@concilius.com. If you are invited to an event which requires a security check by the BKA, your data mentioned under point 1 will be used to carry out the security check and will also be passed on to the BKA for this purpose. The legal basis for these data processing operations is Art. 6 para. 1 sentence 1 lit. b, c and e GDPR. In addition, photos and/or videos are regularly taken at our events, which are published in external and internal reports or in newsletters, if necessary, together with your name. In addition to photo and video recordings, metadata such as the time and place of recording and location are automatically stored in the digital cameras. The legal basis for taking and storing photographs and video recordings is Art. 6 para 1 sentence 1 lit. f GDPR based on our legitimate interest in reporting on the event. According to Art. 21 para. 1 GDPR, you have the right to object to the taking and storage of your photo and video recordings with future effect at any time for reasons arising from your particular situation by sending an e-mail with your objection to info@concilius.com. We expressly point out that external reporters are present at the events, who also produce photos and videos. However, as we have no influence on the photos and videos taken by the external reporters and their use by them, we cannot give any information on the purpose and extent of the processing of your data by these external reporters. Is there an obligation for you to provide the data? The provision of your data is not required by law or contract. However, if you wish to participate in our events or receive invitations to the events, you must provide us with your data. Without your data, we will generally not be able to send you invitations to our events or enable you to participate in our events. Who gets your data? We will pass on your data to the bodies mentioned in point 2 for the purposes mentioned in point 2. Furthermore, we use service providers (order processors, e.g. dispatch service providers) bound by instructions, among other things for the postal or digital dispatch of invitations or within the scope of guest management. All processors will only have access to your data to the extent and for the period of time necessary to provide the services. If these service providers process your data outside the European Union, this may result in your data being transferred to a country that does not guarantee the same standard of data protection as the European Union. In this case, we will ensure that the service providers guarantee an equivalent level of data protection by contract or otherwise. How long is your data stored? We store your contact data for the purpose of sending invitations until you object, in order to be able to meet the legitimate mutual interest in communication or information. We will store your objection for the purpose of securing evidence for a period of 2 years. Any other data collected for the purpose of the event or for security checks will be deleted immediately after the event. The photo and video recordings and metadata stored by you on the basis of Article 6 para.1 sentence 1 lit. f GDPR will be stored until you have lodged a justified objection to the storage in accordance with Article 21 lit. 1 GDPR, unless there are overriding legitimate reasons for processing data within the meaning of Article 21 para. 1 sentence 2 GDPR. Should data be passed on to processors who are bound by instructions, this shall only happen to the extent and for the period of time necessary for the provision of the services in question. We ensure that appropriate deletion agreements are observed. What rights do you have in relation to your data? You have the right to request information about the personal data we have stored about you at any time. If data about your person is incorrect or no longer current, you have the right to request that it be corrected. You also have the right to request the deletion or restriction of the processing of your data in accordance with Articles 17 and 18 of the GDPR. If you have provided us with data and the processing by means of automated procedures is based on your consent or on a contract with you, you have the right to receive this data provided by you in a structured, common and machine-readable format (right to data transferability). If you wish to exercise your rights, you may contact us at any time at the following address: datenschutzbeauftragter@concilius.com. For information on your right of objection, please refer to section 2. You also have the possibility to contact a data protection authority and file a complaint. The authority responsible for us is the Bavarian State Office for Data Protection Supervision. You can also contact the data protection authority responsible for your place of residence, which will then forward your request to the competent authority. XXII. GENERAL GUIDANCE REFERRED TO IN ARTICLES 13, 14 AND 21 - Who is responsible for data processing and whom can I contact? CONCILIUS AG Palais am Oberanger Hermann-Sack-Straße 3 80331 Munich Phone.: +49 89 944180 E-Mail: info@concilius.com Register Court Munich: HRB 163682 You can reach our data protection officer at The data protection officer of the responsible person is: Bernd Gasteiger LL. M., attorney at law Roseggerstr. 56 82229 Seefeld E-Mail: datenschutzbeauftragter@concilius.com - What sources and data do we use? We process personal data that we receive from you in the course of our business relationship. According to Art. 4 para. 1 of the DPA, personal data includes all information that relates or can be related to a natural person. - For what purpose do we process your data (purpose of processing) and on what legal basis? We process personal data exclusively for the intended purpose and in good faith in accordance with the provisions of the European Data Protection Basic Regulation (GDPR) and the Federal Data Protection Act (BDSG): a) To fulfil contractual obligations Art. 6 para. 1 lit. b GDPR The processing of personal data (Art. 4 para. 2 GDPR) is carried out for the purpose of providing services, in particular for the execution of our contracts with you, as well as for all activities necessary for the operation and administration of a company. The purposes of data processing are primarily based on the services offered and contractual services. b) As part of the balancing of interests (Article 6 para.1 lit. f GDPR) As far as necessary, we process your data beyond the actual fulfilment of the contract in order to protect the legitimate interests of us or third parties. c) On the basis of your consent (Art. 6 para. 1 lit. a GDPR) If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. A given consent can be revoked at any time. Please note that the revocation is only effective for the future. Processing operations that took place before the revocation are not affected. Your revocation has no influence on a processing data if we are legally entitled to continue processing. d) Due to legal requirements (Art. 6 para. 1 lit. c GDPR) We are also subject to various legal obligations, i.e. legal requirements. Insofar as data is processed in this respect, this is done exclusively on the basis of these regulations. - Who gets my data? Within the company, your data will be passed on to those bodies that need it to fulfil our contractual and legal obligations. When we transmit personal data to affiliated companies, agents, service providers or contractors, we do so only in connection with contracts for order processing. Other data recipients may be those entities for which you have given us your consent to transfer data (Art. 6 Paragraph 1 a GDPR). - How long will my data be stored? As far as necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract or for the fulfilment of the contractual purposes. In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods of retention or documentation specified there are two to ten years. - Is data transferred to a third country or to an international organisation? Insofar as data is transferred to third countries or disclosed to bodies in third countries, the additional requirements are observed. In accordance with these regulations, a contract will be concluded between us and the respective processing unit in accordance with the EU standard contract clauses and in conformity with the GDPR data protection regulations. This contract will also guarantee the data subject an adequate level of data protection when personal data are processed in third countries. - What data protection rights do I have? Every data subject has the right of access under Art. 15 GDPR, the right of rectification under Art. 16 GDPR, the right of deletion under Art. 17 GDPR, the right to restrict processing under Art. 18 GDPR and the right to data transferability under Art. 20 GDPR. With regard to the right of information and the right of deletion, the restrictions according to §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). Furthermore, we refer to § 2 of this data protection declaration. - Is there an obligation for me to provide data? Within the scope of our business relationship, you only need to provide us with personal data that is necessary for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or we will no longer be able to execute an existing contract and may have to terminate it. All other information is voluntary. - To what extent is there automated decision-making in individual cases? We do not use a fully automated decision-making process in accordance with Art. 22 GDPR to establish and conduct the business relationship. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law. - To what extent is my data used for targeted information and scoring? We do not process your data automatically. - Information about your right of objection under Art. 21 of the Basic Data Protection Regulation (GDPR) You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Article 6 para. 1 lit. e of the DPA (data processing in the public interest) and Article 6 para. 1 lit. f of the basic data protection regulation (data processing based on a balancing of interests). If you object, we will no longer process your personal data, unless we can prove compelling reasons for processing that are worthy of protection, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. XXIII. UPDATE OF THIS PRIVACY POLICY From time to time it may be necessary to update this data protection information, for example due to new legal or official requirements or new offers on our website. We will then inform you at this point. In general, we recommend that you check this privacy policy regularly to see whether there have been any changes. You can see whether changes have been made by the fact that the status at the very bottom of this document has been updated. XXIV. PRINT AND SAVE THIS DATA PROTECTION NOTICE You can print and save this data protection notice directly, for example by using the print or save function in your browser. Status: January 2020
1.1 2.1 3.1 4.1 4.2 4.3 5.1 6.1 6.2 7.1 8.1 8.2 8.3 8.4 8.5 9.1 10.1 10.2 11.1 12.1 13.1 14.1 14.2 14.3 14.4 15.1 16.1 16.2 16.3 16.4 16.5 16.6 17.1 18.1 18.2 18.3 18.4 18.5 18.6 18.7 18.8 18.9 18.10 18.11 19.1 20.1 21.1 21.2 21.3 21.4 22.1 23.1 23.2 24.1 25.1 26.1 27.1 28.1 29.1 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 38.2 38.3 39.1 39.2 40.1 40.2 41.1 42.1 43.1 44.1 44.2 45.1 46.1 46.2 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 58.2 59.1 60.1 60.2 61.1 62.1 63.1 63.2 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 84.2 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 94.2 95.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 102.2 103.1 104.1 105.1 106.1 107.1 108.1
Uvijeti korištenja Pravne obavijesti Sadržaji objavljeni na internet stranicama HR-ITC d.o.o., vlasništvo su HR-ITC d.o.o. i mogu se upotrebljavati samo u nekomercijalne svrhe, pri čemu se moraju poštivati i sva navedena upozorenja o autorskim pravima, što znači da se ne smiju prepisivati, umnožavati ili na bilo koji drugi način dijeliti. HR-ITC d.o.o., nije odgovoran za privremenu nedostupnost ili nepotpunu funkcionalnost internet stranica, eventualnu netočnost podataka niti za eventualnu štetu nastalu zbog upotrebe netočnih ili nepotpunih informacija. HR-ITC d.o.o., niti bilo koja druga pravna ili fizička osoba koja je sudjelovala u nastanku i izradi ovih internet stranica, nije odgovorna ni za kakvu štetu koja bi mogla proizaći iz pristupa informacijama, upotrebe ili nemogućnosti upotrebe informacija na tim internet stranicama ili bilo kakve pogreške ili nedostatka u njihovom sadržaju. Također, HR-ITC d.o.o. zadržava pravo izmjene sadržaja. Intelektualno vlasništvo: Svi sadržaji objavljeni na ovim internetskim stranicama HR-ITC d.o.o. kao što su tekstovi, grafički sadržaji, zaštitni znakovi (logotipi), ikonice, sličice, audio i video zapisi, digitalni sadržaji, programski paketi (softver) i ostali nenavedeni sadržaji objavljeni na ovim stranicama, vlasništvo su ili HR-ITC d.o.o. ili trgovca ili dobavljača programskih paketa (softvera) te su zaštićeni domaćim i međunarodnim pravima o zaštiti autorskih prava i prava intelektualnog vlasništva te njihova neovlaštena uporaba nije dopuštena. Ovim istovremeno pristajete na zabranu reprodukcije, umnožavanja ili distribucije dizajna ili podloge internetskih stranica HR-ITC d.o.o., pojedinačnih elemenata stranica, dizajna, logotipa te marke HR-ITC d.o.o. bez izričitoga pisanog odobrenja HR-ITC d.o.o. Dostupnost: Iako vam HR-ITC d.o.o. nastoji dati najbolju moguću ponudu usluga, HR-ITC d.o.o. ne može jamčiti da će usluge na internetskim stranicama HR-ITC d.o.o. odgovarati vašim potrebama. HR-ITC d.o.o. također ne može jamčiti da će usluga biti bez pogrešaka. Ukoliko dođe do pogreške, molimo vas da je prijavite na e-poštu: info@hr-itc.hr kako bismo je otklonili na najbrži mogući način. Pristup na HR-ITC d.o.o. Internet stranicu ponekad može biti nedostupan zbog radova, održavanja ili uvođenja novih sadržaja. Ostale Internet stranice: HR-ITC d.o.o. Internet stranica uključuje poveznice na druge internetske stranice, a materijali su na tim stranicama izvan kontrole HR-ITC d.o.o. i stoga nije odgovoran za sadržaj na tim stranicama. Cijena: Prema cijenama po kojima ste dogovorili uslugu biti će vam izrađen račun. Izmjene: Molimo vas primite na znanje da HR-ITC d.o.o. može u svako vrijeme, bez prethodne najave, ažurirati ili izmijeniti podatke pohranjene na svim svojim internetskim stranicama. HR-ITC d.o.o. zadržava pravo na izmjenu ovih Uvjeta i pravila. Sve promjene primijenit će se na korištenje svih mrežnih stranica HR-ITC d.o.o. Ukoliko se ne slažete s navedenim pravilima korištenja i ne želite ih prihvatiti, molimo vas obratite se našem djelatnicima na info@hr-itc.hr sa svojim primjedbama. Pomoć: Provodimo istraživanja kako bismo dodatno unaprijedili naše usluge. Iznimno bismo cijenili vaš doprinos navedenim istraživanjima pitanjima, komentarima, prigovorima i pohvalama. Molimo vas kontaktirajte HR-ITC d.o.o. na telefonskom broju +385 (0)33 721 172 svakim radnim danom od 08.00 do 16.00 sati, pošaljite e-poštu na info@hr-itc.hr ili nam pišite na adresu HR-ITC d.o.o., Matije Gupca 51, 33000 Virovitica. Molimo vas vodite računa o tome da slanje privatnih poruka elektroničkom poštom može biti nesigurno i podložno neovlaštenom pristupu trećih ili pogrešnoj dostavi. Svaka poruka zaprimljena elektroničkom poštom smatrat će se nepovjerljivom te HR-ITC d.o.o. ne odgovara za sigurnost i privatnost takvih poruka, zadržavajući pritom pravo da iste reproducira, upotrijebi, raspolaže i distribuira trećima bez ograničenja. Nadalje, slobodni smo upotrebljavati ideje, nacrte, stručna znanja ili tehnike sadržane u takvim porukama za bilo koju svrhu, uključujući primjerice marketing usluga sadržanih u takvim porukama. Isključenje odgovornosti: Ovime prihvaćate i podvrgavate se hrvatskom materijalnom pravu kao isključivo mjerodavnom za tumačenje, primjenu i pravne učinke svih dopuštenja, isključenja i uvjeta upotrebe ove internetske stranice. Hrvatski sudovi isključivo su nadležni za sve zahtjeve i sporove koji nastanu kao rezultat upotrebe predmetnih internetskih stranica ili u vezi s njima. HR-ITC d.o.o. ne jamči da su materijali sadržani na predmetnim stranicama primjereni ili korisnički dostupni na određenim lokacijama, odnosno ne odgovara za pristup istima s teritorija država gdje je njihov sadržaj zakonom zabranjen. Smatrat će se da je pristup internetskim stranicama s navedenih lokacija poduzet samovoljno uz odgovornost korisnika prema mjerodavnom pravu. Sve informacije dostupne na internetskim stranicama isključivo su informativnog karaktera, ne smiju se koristiti u komercijalne svrhe niti distribuirati trećima. Informacije o uslugama s ovih internetskih stranica podložne su određenim ograničenjima u vezi sa subjektima kojima takve informacije mogu biti dostupne. Informacije koje HR-ITC d.o.o. objavljuje na ovim internetskim stranicama smatraju se točnima i pouzdanima u vrijeme njihovog unošenja, međutim HR-ITC d.o.o. ne jamči za točnost, istinitost ili pouzdanost bilo kojih podataka pohranjenih na ovim internetskim stranicama. HR-ITC d.o.o. ne jamči, izričito ili prešutno, uključujući jamstva u pogledu utrživosti, odnosno podobnosti za određenu svrhu, niti preuzima bilo kakvu odgovornost za potpunost ili korisnost bilo koje od izloženih informacija, sustava, proizvoda ili procesa. Informacije dostupne na internetskim stranicama ne smiju se smatrati temeljem za donošenje značajnih osobnih, financijskih ili poslovnih odluka, te ste suglasni da nas nećete smatrati odgovornima za neostvarivanje svojih očekivanja u vezi s tim. Do zakonom predviđenih ograničenja, HR-ITC d.o.o. neće odgovarati za bilo kakvu izravnu ili neizravnu, slučajnu, nematerijalnu ili materijalnu štetu, gubitke ili troškove nastale kao rezultat upotrebe ili nemogućnosti upotrebe koje od informacija dostupnih na ovim internetskim stranicama. U tom smislu predlažemo konzultacije s odgovarajućim stručnjakom koji će moći dati savjet posebno prilagođen vašoj konkretnoj situaciji. Privatnost podataka Uvodne odredbe Sukladno Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (Službeni list Europske unije L 119, 4.5.2016., str. 1., u daljnjem tekstu: Opća uredba o zaštiti podataka), koja je u punoj primjeni od dana 25. svibnja 2018. godine u Republici Hrvatskoj i svim zemljama članicama Europske unije, kao i Zakonu o provedbi Opće uredbe o zaštiti podataka (Narodne novine broj 42/18, u daljnjem tekstu: Zakon) odnosno sukladno pravnom okviru zaštite osobnih podataka u Republici Hrvatskoj i Europskoj uniji te najboljoj europskoj praksi, društvo HR-ITC društvo s ograničenom odgovornošću za međunarodni transport i trgovinu, sa sjedištem u Republici Hrvatskoj, Virovitica, Matije Gupca 51, upisano u sudski registar Trgovačkog suda u Zagrebu pod matičnim brojem subjekta upisa (MBS): 0854387, osobni identifikacijski broj (OIB): 31587016821 (u daljnjem tekstu: Društvo), kao voditelj obrade osobnih podataka korisnika svojih usluga i kupaca, izradilo je Politiku o zaštiti privatnosti korisnika usluga i kupaca. Politika o zaštiti privatnosti je jednostrano obvezujući pravni akt zasnovan na temeljnim načelima u obradi osobnih podataka, kojim se regulira koji podaci korisnika i/ili kupaca se prikupljaju, na koji način se takvi podaci obrađuju, u koje se svrhe upotrebljavaju. Politika o zaštiti privatnosti ujedno upoznaje korisnike usluga i/ili kupce s njihovim pravima u prikupljanju i daljnjoj obradi osobnih podataka, sve u svrhu zaštite njihove privatnosti u širem smislu. Politika o zaštiti privatnosti temelji se na sljedećim načelima obrade osobnih podataka: načelu zakonitosti, transparentnosti i najbolje prakse, načelu ograničene obrade i smanjenju količine podataka, načelu točnosti i potpunosti osobnih podataka, načelu ograničene pohrane, načelu cjelovitosti i povjerljivosti podataka, načelu odgovornosti, načelu povjerenja i poštene obrade, načelu oportunosti (svrhe obrade), načelu obrade u neimenovanom (anonimiziranom) obliku. Politika o zaštiti privatnosti se primjenjuje na sve usluge koje nudi Društvo, pri čemu je cilj Politike na jasan i transparentan način upoznati korisnike i/ili kupce s postupcima obrade njihovih osobnih podataka i njihovim pravima. Prije svega, korisnici i/ili kupci mogu se u svakom trenutku obratiti Društvu sa zahtjevom za izmjenu ili dopunu i/ili ažuriranje podataka koji se na njih odnose, kao i sa zahtjevom za očitovanje o tome u koje svrhe žele ili ne žele da se njihovi podaci obrađuju. Za obradu osobnih podataka odgovorno je Društvo: HR-ITC društvo s ograničenom odgovornošću za međunarodni transport i trgovinu, sa sjedištem u Republici Hrvatskoj, Virovitica Matije Gupca 51, upisano u sudski registar Trgovačkog suda u Zagrebu pod matičnim brojem subjekta upisa (MBS): 0854387, osobni identifikacijski broj (OIB): 31587016821. Kontakt podaci službenika za zaštitu osobnih podataka: e-mail: mario@hr-itc.hr Način prikupljanja i vrste podataka koji se prikupljaju Pojedine usluge koje Društvo pruža zahtijevaju prikupljanje osobnih podataka korisnika i/ili kupaca, pri čemu se prikupljaju osnovni podaci na sljedeće načine: Izravno od strane samih korisnika i/ili kupaca na način da ih korisnici i/ili kupci sami dostave uz privolu Društvu kao voditelju obrade u određenom opsegu podataka koji je bitan za pružanje odgovarajućih usluga. U svrhu pružanja odgovarajućih usluga korisnik i/ili kupac je dužan dostaviti Društvu sljedeće podatke koji su istome potrebni za zasnivanje ugovornog odnosa radi pružanja pojedine usluge: a) ime i prezime; b) tvrtka; c) adresa; d) kontakt broj telefona i/ili mobitela; e) kontakt podatke elektroničke pošte (e-mail adresa); Iz drugih izvoraodnosno od naših poslovnih partnera ili iz javno dostupnih izvora (primjerice, podaci dostupni uvidom u telefonski imenik i druge javno dostupne servise); Automatski posjetom našim mrežnim (web) stranicama, pri čemu se radi o podacima koji su pridruženi mrežnim identifikatorima (adrese internetskih protokola te identifikatori kolačića, kao što su Google Analytics za praćenje interakcije korisnika i/ili kupaca). Kolačić je mala podatkovna datoteka koja se pohranjuje na računalo ili mobilni uređaj pri posjetu određenoj web-stranici. Kolačići se upotrebljavaju radi pružanja boljeg korisničkog iskustva svakom korisniku i/ili kupcu, spremanje preferencija korisnika i/ili kupaca, s ciljem da bi web-stranice radile učinkovitije, kao i za praćenje i ispitivanje korištenja te posjećenosti web-stranice Društva. Kolačići se također upotrebljavaju za praćenje uporabe interneta i izradu korisničkih profila, a potom za prikaz prilagođenih internetskih oglasa na temelju preferencija korisnika i/ili kupca. Isključivanjem i/ili blokiranjem spremanja kolačića korisnik i/ili kupac i dalje može pregledavati web-stranice Društva. Međutim, postoji vjerojatnost da pojedine mogućnosti i/ili funkcionalnosti web-stranice neće biti dostupne takvom korisniku i/ili kupcu, odnosno da će vrijeme potrebno za pristup pojedinim funkcijama web-stranice biti duže od uobičajenog. Predmetni mrežni identifikatori mogu ostaviti tragove koji, u kombinaciji sa drugim identifikatorima i informacijama koje pružaju poslužitelji internetskih usluga, mogu poslužiti za identifikaciju korisnika i/ili kupca. Također, u navedenu svrhu prikupljamo i obrađujemo sljedeće podatke: a) podatke o IP adresi; b) podatke o korištenju pojedinih aplikacija; c) podatke o navikama korisnika i/ili kupaca – navedene podatke kreiramo u svrhu profiliranja korisnika i/ili kupaca. Količina, odnosno opseg osobnih podataka koje Društvo prikuplja ovise o vrsti usluge koju Društvo pruža svojim korisnicima i/ili kupcima, kao i o pravnoj osnovi na temelju koje isto prikuplja podatke. Društvo neprestano vodi brigu o prikupljanju samo nužnog opsega osobnih podataka koji je potreban za postizanje zakonom utvrđene svrhe u koju se podaci obrađuju. U koje svrhe se osobni podaci prikupljaju i dalje obrađuju Osobne podatke Društvo prikuplja kako bi moglo pružati, održavati, štititi i poboljšati svoje usluge vezane za kupnju određenih proizvoda, kako bi razumjelo načine na koje korisnici i/ili kupci koriste pružene usluge i upotrebljavaju mrežne (web) stranice Društva te u svrhu izvršavanja ugovornih obveza Društva. Takve podatke Društvo prikuplja podatke na temelju privole koju je dao korisnik i/ili kupac u jednu ili više točno određenih svrha, kao i u jednom od sljedećih slučajeva. Izvršenje ugovornih obveza Društvo prikuplja i dalje obrađuje osobne podatke korisnika i/ili kupaca u svrhu sklapanja i izvršenja ugovora, rješavanja prigovora korisnika i/ili kupaca te drugih radnji koje su povezane sa sklapanjem i izvršenjem ugovora u skladu s mjerodavnim propisima. Pravnu osnovu za obradu osobnih podataka korisnika i/ili kupaca u naprijed navedene svrhe predstavlja nužnost sklapanja ugovora, odnosno, u slučaju da korisnik i/ili kupac uskrati davanje bitnih podataka, Društvo neće biti u mogućnosti sklopiti ugovor i /ili poduzeti pojedine radnje vezane uz izvršenje sklopljenog ugovora. Ispunjavanje zakonskih obveza Društvo je obvezno na temelju podnesenog pisanog zahtjeva korisnika i/ili kupaca na gore naznačenu adresu službenika za zaštitu osobnih podataka istima omogućiti pristup osobnim podacima koje obrađuje o njima, ispravak netočnih osobnih podataka, brisanje osobnih podataka ili ograničenje obrade osobnih podataka, kao i upoznati ih s mogućnošću prigovora na obradu osobnih podataka te pravom na prenosivost podataka. Izravna promidžba (marketing) Kontakt podaci korisnika i/ili kupaca mogu se koristiti za slanje promidžbenih obavijesti o uslugama Društva ako je korisnik i/ili kupac dao privolu za takvu obradu ili ako postoji legitimni interes Društva za takvim radnjama, osim ako su od tih interesa jači interesi ili temeljna prava i slobode korisnika i/ili kupca koji zahtijevaju zaštitu osobnih podataka. Društvo može koristi kontakt podatke i osobno se obratiti korisnicima i/ili kupcima čije osobne podatke već posjeduje, na temelju legitimnog interesa za slanje promidžbenih obavijesti o svim uslugama koje pruža, koristeći sve dostupne kanale za promidžbu, osim ako se korisnik i/ili kupac ne usprotivi takvoj obradi. Kako bi korisnik i/ili kupac mogao dobivati obavijesti koje odgovaraju njegovim željama i navikama, neophodno je da Društvo koristi određene podatke korisnika i/ili kupaca za izradu personaliziranih promidžbenih obavijesti, sve dok se korisnik i/ili kupac izrijekom ne usprotivi takvoj obradi podataka, odnosno povuče svoju ranije danu prijavu za obradu. Pravna osnova za obradu osobnih podataka u navedene svrhe je legitimni interes Društva, osim ako su od tog interesa jači interes ili temeljna prava i slobode koji zahtijevaju zaštitu podataka. Interne svrhe Društvo koristi određene podatke korisnika i/ili kupaca isključivo za potrebe vlastitih evidencija, u svrhu zaštite legitimnih interesa korisnika i/ili kupaca i/ili Društva. Primjerice, navedeno uključuje korištenje osobnih podataka u svrhu kreiranja ponuda koje zadovoljavaju potrebe i želje korisnika i/ili kupaca, istraživanje i analizu tržišta. Podaci o potencijalnim korisnicima Društvo je također ovlašteno prikupljati podatke o potencijalnim korisnicima i/ili kupcima svojih usluga i/ili proizvoda. Ovi podaci uključuju osnovne podatke (ime i prezime, adresa elektroničke pošte), ali i interese potencijalnih korisnika i/ili kupaca koji se obraćaju Društvu sa željom da ih se informira i /ili im se ponudi određene proizvode i usluge. Pravna osnova za prikupljanje u opisanom slučaju je privola korisnika i/ili kupca. Vremensko trajanje čuvanja i obrade osobnih podataka Ovisno o svrsi i pravnoj osnovi temeljem koje je prikupljaju osobni podaci korisnika i/ili kupaca, Društvo je u pojedinim slučajevima obvezno čuvati osobne podatke u vremenskom trajanju (razdoblju) koje za pojedinu svrhu propisuju mjerodavni propisi ili prestankom svrhe u koju su prikupljeni. Protekom zakonskog roka koji obvezuje Društvo na čuvanje pojedinih osobnih podataka ili prestankom svrhe isti se brišu. U slučajevima kada osnovu za prikupljanje i obradu podataka čini legitimni interes Društva ili privola korisnika i/ili kupca, osobni podaci se čuvaju u sljedećim vremenskim razdobljima: a) podaci o postojećim korisnicima i/ili kupcima: za vrijeme trajanja ugovornog odnosa i 12 mjeseci nakon prestanka; b) podaci o potencijalnim korisnicima i/ili kupcima: 3 mjeseca; Podaci koji se obrađuju temeljem legitimnog interesa Društva i/ili privole korisnika i/ili kupaca mogu se brisati i prije proteka roka navedenog u ovoj Politici, u slučaju da takvo brisanje zahtijeva korisnik i/ili kupac odnosno kada se korisnik i/ili kupac usprotivi takvoj obradi. Prava korisnika/kupaca Pravo na pristup osobnim podacima Društvo se kao voditelj obrade obvezuje na temelju podnesenog pisanog zahtjeva korisnika i/ili kupca, koji zahtjev može biti i u obliku elektroničke pošte, omogućiti pristup osobnim podacima koje obrađuje o njima, informirati ih o svrsi obrade osobnih podataka u koju se obrađuju, o vrsti osobnih podataka koji se obrađuju, o primateljima ili kategorijama primatelja kojima su osobni podaci otkriveni ili će im biti otkriveni, o predviđenom vremenskom razdoblju obrade ili o kriterijima koji se koriste za utvrđivanje tog razdoblja. Pravo na ispravak netočnih podataka Društvo će kao voditelj obrade omogućiti ispravak netočnih osobnih podataka u svakom pojedinom slučaju kada se utvrdi da prikupljeni osobni podaci o korisniku i/ili kupcu nisu točni ili je došlo do promjene podataka korisnika i/ili kupca. Pravo na brisanje osobnih podataka Društvo će izvršiti brisanje osobnih podataka korisnika i/ili kupca u sljedećim slučajevima: a) kada osobni podaci korisnika i/ili kupca više nisu nužni za ispunjenje svrhe obrade, odnosno prestankom svrhe obrade; b) kada korisnik i/ili kupac povuče privolu kao pravni temelj za obradu podataka, a ne postoji druga pravna osnova za obradu podataka; c) kada korisnik i/ili kupac uloži prigovor na obradu podataka (vidi više pod naslovom Pravo na ulaganje prigovora) d) kada su osobni podaci nezakonito obrađeni; e) kada se osobni podaci moraju brisati radi ispunjenja pravnih obveza iz prava Europske unije ili prave države članice kojem podliježe voditelj obrade podataka; f) kada su osobni podaci prikupljeni u vezi s ponudom usluga informacijskog društva u odnosu na privolu djeteta. Pravo na ograničenje obrade podataka Ograničenje obrade osobnih podataka Društvo će osigurati u slučajevima kada korisnik i/ili kupac osporava točnost podataka, kada je obrada nezakonita a korisnik i/ili kupac se protivi brisanju podataka te umjesto toga traži ograničenje njihove uporabe, kada voditelj obrade više ne treba osobne podatke za potrebe obrade ali korisnik i/ili kupac traži podatke za ostvarenje pravnih zahtjeva, kao i u slučaju kada korisnik i/ili kupac uloži prigovor na obradu osobnih podataka temeljenu na legitimnom interesu Društva, uključujući i izradu profila korisnika i/ili kupaca. Pravo na ulaganje prigovora Korisnik i/ili kupac ima pravo na ulaganje prigovora na obradu osobnih podataka koji se odnose na njega ako se podaci obrađuju za potrebe legitimnog interesa voditelja obrade. U tom slučaju Društvo će, kao voditelj obrade, prestati obrađivati osobne podatke, osim ako dokaže da postoje uvjerljivi legitimni razlozi za obradu osobnih podataka u odnosu na prava korisnika i/ili kupca, odnosno u slučaju kada obrada podataka služi radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva. Ukoliko se osobni podaci korisnika i/ili kupca obrađuju za potrebe izravnog marketinga korisnik ima pravo u svakom trenutku uložiti prigovor na obradu za potrebe izravnog marketinga, osobito ako se osobni podaci koriste u svrhu izrade profila. Gdje se osobni podaci obrađuju Osobne podatke korisnika i/ili kupaca Društvo obrađuje u Republici Hrvatskoj. Pod kojim uvjetima se osobni podaci prosljeđuju trećima Osobne podatke korisnika i/ili kupaca Društvo prosljeđuje trećim osobama (uključujući nadležna tijela) samo u sljedećim slučajevima: a) privole korisnika i/ili kupca; b) radi ispunjenja zakonskih obveza Društva; c) kada je takva obrada nužna radi zaštite ključnih interesa korisnika i/ili kupaca. Upravljanje privolama Aktivna uloga korisnika i/ili kupca u zaštiti privatnosti ogleda se u davanju privola kao dobrovoljnog, posebno informiranog i nedvosmislenog izražavanja želja ispitanika kojima on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka. Upravljanje privolama podrazumijeva mogućnost da korisnik i/ili kupac aktivnom i nedvosmislenom radnjom ovlasti Društvo na prikupljanje i obradu pojedinih osobnih podataka u jednu ili više svrha (privola ispitanika), odnosno da na jednak način povuče ranije danu privolu radi prikupljanja i obrade osobnih podataka, u jednu ili više svrha. Kome se obratiti U slučaju bilo kakvih pitanja o zaštiti osobnih podataka od strane Društva, korisnici i/ili kupci se mogu obratiti službeniku za zaštitu osobnih podataka putem elektroničke pošte na e-mail adresu navedenu u ovoj Politici o zaštiti privatnosti ili pisanim putem na sljedeću adresu: HR-ITC d.o.o. n/r Službenika za zaštitu podataka Matije Gupca 51 Virovitica Izmjene i dopune Politike o zaštiti privatnosti Društvo zadržava pravo izmijeniti i dopuniti ovu Politiku u bilo kojem trenutku, bez davanja bilo kakve posebne obavijesti zainteresiranim osobama. Iz navedenog razloga preporuča se svim zainteresiranima da redovito provjeravaju sadržaj web-stranica Društva radi informiranosti oko ažurnog sadržaja ove Politike. U Virovitici, svibanj 2018. godine. HR-ITC d.o.o. HR-ITC d.o.o. Matije Gupca 51 Virovitica info@hr-itc.hr