http___metalistaklo.hr_pravila-privatnosti__1.xml
1.1 2.1 3.1 4.1 5.1 5.2 5.3 6.1 7.1 8.1 9.1 10.1 12.1 13.1 14.1 15.1 16.1 17.1 19.1 20.1 20.2 20.3 21.1 22.1 23.1 23.2 24.1 24.2 25.1 25.2 25.3 26.1 27.1 28.1 29.1 29.2 29.3 30.1 31.1 32.1 32.2 33.1 34.1 35.1 36.1 37.1 37.2 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 48.2 48.3 48.4 49.1 50.1 51.1 51.2 52.1 52.2 52.3 53.1 54.1 55.1 56.1 57.1 57.2 57.3 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1 64.2 65.1 66.1 67.1 68.1 69.1 70.1 71.1 71.2 72.1 73.1 74.1 75.1 76.1 77.1 78.1 78.2 79.1 80.1 81.1 82.1 83.1 84.1 85.1 85.2 86.1 87.1 88.1 89.1 90.1 91.1 92.1 92.2 93.1 94.1 95.1 96.1 97.1 98.1 99.1 99.2 100.1 101.1 101.2 102.1 103.1 104.1 105.1 106.1 106.2 107.1 108.1 109.1 110.1 111.1 112.1 113.1 113.2 114.1 115.1 116.1 117.1 118.1 119.1 120.1 120.2 121.1 122.1 123.1 124.1 125.1 126.1 127.1 127.2 128.1 129.1 130.1 131.1 132.1 133.1 134.1 134.2 135.1 135.2 136.1 136.2 136.3 137.1 138.1 139.1 140.1 141.1 141.2 142.1 142.2 142.3 143.1 144.1 144.2 144.3 145.1 146.1 147.1 148.1 149.1 149.2 150.1 150.2 150.3 151.1 152.1 152.2 152.3 153.1 154.1 155.1 156.1 157.1 157.2
Data privacy statement Data privacy statements as per Articles 13, 14 and 21 GDPR for the website and external sites of Renusol Europe GmbH General Controller We, Renusol Europe GmbH, take the protection of your personal data and the legal obligations that serve to ensure this protection very seriously. The legal provisions require comprehensive transparency in all issues regarding the processing of personal data. Only when the processing is traceable for you as the data subject you can be deemed to be sufficiently informed about the purpose, type and scope of the processing. Therefore our Privacy Policy explains to you in detail which pieces of personal data we process when you use our websites (www.renusol.com and www.pv-configurator.com) or any other Internet pages that reference to it and in the other cases will be described here. “Controller” in terms of the General Data Protection Regulation (GDPR), of the Bundesdatenschutzgesetz – German Federal Data Protection Act (BDSG) and other data protection regulations is the Renusol Europe GmbH Piccoloministr. 51063 Cologne / Germany Email: info@renusol.com Referred to hereinafter as “controller” or “we”. You can contact our data protection officer under: Sascha Kremer Disch-Haus, Brückenstraße 21 50667 Köln (Innenstadt) Email: datenschutz@renusol.com Please be aware that you may be redirected to other Internet pages via links on our website whereby the other pages are not operated by us but by third parties. We either clearly mark such links or you can recognise them by the change of the address line of your browser. We are not responsible for compliance with the applicable data protection regulations and secure handling of your personal data by third parties operating such other Internet pages. Definitions From GDPR This Privacy Policy uses the terms used in the wording of the GDPR. The definitions (Article 4 GDPR) can be found, for instance, in https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679. Cookies and similar technologies Cookies are text files which a website places in your terminal or which are read out there. They contain letters and combinations of numbers to enable them, for instance, to recognise the user and its settings, when a connection is again established with the website that places the cookies, and to enable you to stay logged in a customer account or to conduct statistical analyses of certain user behaviour. The WebStorage technology allows storing variables and values locally in the user's browser cache. This technology includes both the so-called "sessionStorage" that remains stored until the browser-tab has been finished and the "localStorage" that remains stored in the browser-cache until the user clears the cache. Among others, the localStorage technology makes it possible to recognise the user and its settings when our website is called again. Special categories of data If we state the processed categories of data, they especially include the following types of data: Master data (e.g. name, address, date of birth), Contact data (e.g. email address, telephone number, messenger services), Content data (e.g. input texts, photographs, videos, contents of documents/files), Contract data (e.g. subject of contract, contract duration, customer category), Payment data (e.g. bank accounts, payment history, use of other payment service providers), Usage data (e.g. history on our website, use of special contents, access times, history of contacts or orders), Connection data (e.g. information of equipment, IP addresses, URL referrer), Location data (e.g. GPS data, IP geo-localisation, access points). Information about data processing We only process personal data to the extent which is permitted by law. Disclosure or transfer to third parties takes place only in the cases described below. Your personal data is protected by technical and organisational measures (e.g. pseudonymisation, encryption). Provided that we are not obliged by law to store or disclose personal data to third parties (especially to criminal prosecution authorities), the decision which personal data is processed by us and how long and to which extent we disclose it, if necessary, depends on which functions of the website you use in a given case. Storage period The personal data is cleared as soon as the purpose of processing is not applicable anymore or a prescribed storage period expires, unless continued storage of the personal data is necessary for the purpose of conclusion or performance of a contract. As far as we have to inform about the storage period of cookies and similar technologies you will find the referring details at the end of this Privacy Policy. Personal data that we process in the course of an application (see below) will be stored for six month after the end of the application process. Automated case-by-case decisions including profiling No automated case-by-case decisions are taken, including profiling. Rights of the data subjects You as the data subject are entitled to the right of access to the data subject according to Article 15 GDPR, the right of rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right of restriction of processing according to Article 18 GDPR as well as the right to data portability according to Article 20 GDPR. The right of access to the data subject as well as the right to erasure are subject to the restrictions under §§ 34, 35 BDGS. In addition, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR in combination with § 19 BDSG). The competent supervisory authority for us/for our head office is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2-4 40213 Düsseldorf However, you may also lodge a complaint with another supervisory authority. Please find a list of supervisory authorities in https://www.bfdi.bund.de/ (in Infothek/Anschriften und Links) Controller’s obligation to notify We will inform all recipients, to whom your personal data was disclosed, about any rectification or erasure of your personal data or any restriction of processing according to Article 16, Article 17 (1) and Article 18 GDPR unless it is impossible or requires unreasonable effort to notify them. We will also inform you about the recipients' identity at your request. Obligation to provide Unless otherwise described in the following details referring the legal basis you are not obliged to provide personal data. In the cases of Article 6 (1) point (b) GDPR personal data is however necessary for the performance of a contract or for the conclusion of a contract. If you do not provide the data subject the performance of a contract or the conclusion of a contract is not possible. If you do not provide data in the cases of Article 6 (1) point (a), (f) GDPR, the use of the parts concerned in our website will not be possible. Referring to our webinars (see II) you are not obliged to provide personal data, your participation in the webinars however will not be possible without this data. Right to object and withdrawal of consent You shall have the right to object on grounds relating to your particular situation at any time to processing of your personal data which is carried out according to point (f) of Article 6 (1) GDPR. Where personal data is processed for direct marketing processes, you have the right to object at all time to processing of your personal data for the purpose of such marketing. As per Article 7 (3) sentence 1, GDPR, you shall have the right to withdraw your consent at any time with effect for the future informally by mail or e-mail. However, the withdrawal does not concern the lawfulness of the processing that took place with your consent before the withdrawal. Upon your withdrawal we will clear the personal data processed on the basis of the consent, provided there is no other legal basis for their processing. Objection and withdrawal can be done informal and should be directed to the above mentioned contact data. Data processing in connection with the use of our website Using the website and its functions requires the regular processing of personal data. Google Tag Manager For embedding contents provided by third providers we use the Google Tag Manager. This is a technical solution that does not save or read out any cookies or similar technologies that demand consent but only controls the conditions under which the other programs used in our website are activated. These programs are described below. Provision of website Purpose of processing: Functionality and optimisation of the website as well as for ensuring safety of our information technology systems only for the purpose of information (no use of additional functions) on our website. Legal basis: Article 6 (1) point (f) GDPR Data categories: Connection data Recipient of data: Data is only transferred to third parties to the extent which is necessary for operating our website. For such purpose the personal data is transferred to the following recipients: IT service providers Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Subscription of our newsletter Purpose of processing: Subscription of our newsletter; proof of your consent; to ensure safety of our information technology systems (these are also our legitimate interests as per Article 6 (1) point (f) GDPR). Legal basis: Article 6 (1) point (a), (f) GDPR Data categories: Master data, contact data, if necessary, content data, usage data, connection data Recipient of data: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i. Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Online enquiries (transfer by e-mail) Purpose of processing: Inquiry regarding PV projects, possible co-operations and call-back request using our inquiry forms by email; to ensure safety of our information technology systems. Legal basis: Article 6 (1) point (f) GDPR; Article 6 (1) point (b) GDPR (if the inquiry causes a later conclusion of a contract or it concerns an existing contract) Data categories: Master data, contact data, if necessary, content data, usage data, contract data and connection data Recipient of data: None Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Renusol Project Configurator (on www.pv-configurator.com) Purpose of processing: Creation of a customer account (as a precondition for the use of our Project Configurator); usage of our Renusol Project Configurator for technical specifications and inquiries for PV projects; safety of our information technology systems. Legal basis: Article 6 (1) point (f) GDPR; Article 6 (1) point (b) GDPR (if the inquiry causes a later conclusion of a contract or it concerns an existing contract) Data categories: Master data, contact data, if necessary, content data, contract data, usage data and connection data Recipient of data: IT service providers Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Applications Purpose of processing: Processing of your application and execution of application process. Legal basis: Article 88 (1) GDPR in connection with § 26, section 1, sentence 1, BDSG Data categories: Master data, contact data, content data, contract data, if necessary, connection data, if necessary usage data and, if necessary, special categories of personal data in the sense of Article 9 (1) GDPR (depending on the specific tender; these pieces of data are saved exclusively for your application that we received from you and that we are allowed to process in the context of your application) Recipient of data: None Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Making contact Purpose of processing: Processing of your contact request and call-back request. Legal basis: Article 6 (1) point (f) GDPR; Article 6 (1) point (b) GDPR (if the inquiry causes a later conclusion of a contract or it concerns an existing contract) Data categories: Master data, contact data, content data, if necessary, usage data, connection data, if necessary, contract data (depending on the type of inquiry). Recipient of data: None Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Registration and conducting of our webinars via Microsoft teams Purpose of processing: Registration for our webinars via Microsoft teams; preparation and conducting of webinars. Proof of your registration; to ensure safety of our information technology systems (these are also our legitimate interests as per Article 6 (1) point (f) GDPR). Legal basis: Article 6 (1) point (b), (f) GDPR Data categories: Master data, contact data, content data, contract data and connection data (depending on the respective webinar and your configuration) Recipient of data: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft“) Intended third country transfer: In the individual case USA (on the basis of the standard data protection clauses of the EU Commission, Article 46 (2) point (c) GDPR) Do we store personal data on your terminal on the basis of your consent or do we read such? No Google Maps Purpose of processing: Embedding of interactive maps and map functions of Google Maps when using our Project Configurator. Legal basis: Article 6 (1) point (f) GDPR Data categories: Usage data, connection data, location data (depending on the type of usage) Recipient of data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: No Do we store personal data on your terminal on the basis of your consent or do we read such? No YouTube Purpose of processing: Embedding of videos via the video plug-in of YouTube for the personal design of our website. Legal basis: Article 6 (1) point (f) GDPR Data categories: Connection data Recipient of data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: In the individual case USA Do we store personal data on your terminal on the basis of your consent or do we read such? No Analysis of our website („Visitors“) Purpose of processing: Statistical analysis of our website via the plug-in „Visitors“ (visitor and access counter); optimisation and customised design of our website. Legal basis: Article 6 (1) point (f) GDPR Data categories: Connection data Recipient of data: IT service providers Intended third country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No Matomo Purpose of processing: Statistical analysis, optimisation and customised design of our website. Legal basis: Article 6 (1) point (f) of GDPR Data categories: Usage data, connection data Recipient of data: none Intended third-country transfer: None Do we store personal data on your terminal on the basis of your consent or do we read such? No III. Information on external websites of the Renusol Europe GmbH Purpose of processing: We established an Internet site for our enterprise („Facebook site“) on the „Facebook“ platform under the address https://www.facebook.com/pages/Renusol-GmbH/172955659401429. If you call this site, Facebook will process your personal data. We receive statistics on the usage of this site that is derived from this data. Legal basis: Article 6 (1) point (f) GDPR Data categories: Master data, contact data, content data, usage data, connection data, if necessary, location data Recipient of data: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“) (as joint controller, Article 26 GDPR – the essentials of the agreement can be called under https://www.facebook.com/legal/terms/page_controller_addendum) Intended third country transfer: In the individual case USA Do we store personal data on your terminal on the basis of your consent or do we read such? No Rights of the data subjects: Facebook is responsible for the implementation of the rights of the data subject. Facebook informs about your rights of the data subject on https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also exercise your rights against us; we will then forward your inquiry to Facebook. LinkedIn (profile) Purpose of processing: We established an Internet site for our enterprise on the „LinkedIn“ platform under the address https://www.linkedin.com/company/renusol-gmbh. If you call this site, LinkedIn will process your personal data. We receive statistics on the usage of this site that is derived from this data. Legal basis: Article 6 (1) point (f) GDPR Data categories: Master data, contact data, content data, usage data, connection data, if necessary, location data Recipient of data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as joint controller as per Article 26 GDPR – the essentials of the agreement can be called under https://legal.linkedin.com/pages-joint-controller-addendum) Intended third country transfer: In the individual case USA Do we store personal data on your terminal on the basis of your consent or do we read such? No Rights of the data subjects: LinkedIn is responsible for the implementation of the rights of the data subjects. LinkedIn informs about your rights of the data subject on https://www.linkedin.com/legal/privacy-policy. You can also exercise your rights against us; we will then forward your inquiry to LinkedIn. YouTube Channel Purpose of processing: We established a video channel on the "YouTube" platform of Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland ("Google") under the address https://www.youtube.com/channel/UC_lXBF9JcKLNM3e-_ErUwrQ. If you call this site, Google will process your personal data. We receive statistics on the usage of this site that is derived from this data. Legal basis: Article 6 (1) point (f) GDPR Data categories: Master data, contact data, content data, usage data, connection data, if necessary, location data Recipient of data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: In the individual case USA Do we store personal data on your terminal on the basis of your consent or do we read such? No
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 8.2 9.1 9.2 9.3 10.1 11.1 11.2 12.1 13.1 14.1 15.1 15.2 16.1 17.1 18.1 18.2 19.1 20.1 20.2
IZJAVA O PRIVATNOSTI / PRAVILA PRIVATNOSTI Svrhe obrade: Prikupljamo i obrađujemo sljedeće osobne podatke: 1. o radnicima: 2. o kupcima: 3. o dobavljačima: Pravna osnova obrade: Osobne podatke o radnicima prikupljamo i obrađujemo radi izvršenja zakonskih obveza o vođenju evidencija o radnicima i radnom vremenu, isplati plaća i drugih primitaka. Osobne podatke o kupcima i dobavljačima prikupljamo i obrađujemo u svrhu sklapanja i izvršenja ugovora i narudžbi. Osobni podaci obuhvaćaju podatke potrebne za uspostavljanje i odvijanje poslovnog odnosa, zaključivanje kupoprodajnog ugovora, izdavanje računa i drugu poslovnu korespondenciju. Osobne podatke nužne za uspostavljanje poslovnog odnosa, kontakt po tom pitanju i izdavanje računa obvezni smo prikupiti sukladno Zakonu o obveznim odnosima, a vi ste ih obvezni pružiti jer u suprotnom, nismo u mogućnosti poštovati naše zakonske obveze i vaša zakonska prava. Ako odbijete pružiti takve osobne podatke, posljedica za vas može nemogućnost realizacije ugovorenog i naručenog posla odnosno sklapanja ugovora ili ostvarivanja nekog prava iz ugovora. Primatelji osobnih podataka: Prikupljene osobne podatke dostavljamo knjigovodstvenom servisu radi knjigovodstvenog evidentiranja poslovanju i prema potrebi državnim institucijama temeljem njihovih zakonskih ovlasti. Osobne podatke ne dostavljamo trećim osobama osim uz vašu suglasnost i privolu. Razdoblje čuvanja osobnih podataka Osobne podatke pohranjujemo u rokovima određenim zakonima i našom politikom zaštite osobnih Podataka propisanih Pravilnikom. Prava ispitanika Svaki ispitanik ima pravo od nas kao voditelja obrade zahtijevati pristup osobnim podacima, ispravak, brisanje, ograničenje obrade ili uložiti prigovor. Radi dokumentiranog postupanja prema vašem zahtjevu, očekujemo i tražimo da zahtjev podnesete u pisanom obliku. Obvezni smo odgovoriti na svaki vaš zahtjev u roku od mjesec dana od njegova primitka. Obrada na osnovi privole Ako obrađujemo osobne podatke na osnovi vaše privole, imate pravo u svako doba povući takvu privolu. Povlačenje vaše privole ne utječe na zakonitost obrade vaših osobnih podataka prije davanja izjave o povlačenju. Pravo na pritužbu Ako ne postupimo prema vašem zahtjevu radi ostvarivanja nekog od vaših prava kao ispitanika u roku od mjesec dana od primitka vašeg zahtjeva, o tome ćemo vas izvijestiti pisanim putem. Ako smatrate da smo našim postupkom povrijedili vaša prava kao ispitanika, imate pravo podnijeti pritužbu Agenciji za zaštitu osobnih podataka.