http___martipark.hr_pravila-privatnosti__1.xml
1.1 1.2 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 11.2 12.1 12.2 13.1 13.2 14.1 15.1 16.1 17.1 17.2 17.3 17.4 18.1 19.1 19.2 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 30.1 30.2 31.1 31.2 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 58.2 59.1 59.2 60.1 61.1 62.1 63.1 63.2 63.3 63.4 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 71.2 72.1 73.1 74.1 75.1 76.1 76.2 77.1 78.1 78.2 79.1 79.2 80.1 80.2 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 91.2 92.1 93.1 93.2 94.1 94.2 95.1 96.1 97.1 98.1 98.2 98.3 98.4 99.1 100.1 100.2 101.1 102.1 102.2 103.1 103.2 103.3 104.1 105.1 106.1 107.1 108.1 109.1 110.1 110.2 111.1 112.1 112.2 113.1 113.2 114.1 114.2 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 125.1 125.2 126.1 127.1 128.1 129.1 129.2 130.1 130.2 130.3 131.1 131.2 132.1 133.1 134.1 135.1 135.2 135.3 135.4 136.1 137.1 137.2 138.1 139.1 140.1 141.1 142.1 143.1 143.2 144.1 145.1 145.2 146.1 147.1 147.2 148.1 148.2 149.1 150.1 151.1 152.1 153.1 154.1 155.1 156.1 157.1 158.1 159.1 160.1 161.1 162.1 163.1 163.2 164.1 165.1 165.2 166.1 166.2 167.1 168.1 169.1 170.1 170.2 170.3 170.4 171.1 172.1 173.1 173.2 173.3 174.1 175.1 176.1 177.1 178.1 179.1 180.1 181.1 182.1 182.2 183.1 184.1 184.2 185.1 185.2 186.1 186.2 187.1 188.1 189.1 190.1 191.1 192.1 194.1
Respecting your privacy, and taking into account the information obligation under the GDPR, we provide you with the following information so that you can find out to what extent your personal data is processed. Please read the appropriate clause (scrolling down the page). The information clause for job applicants INFORMATION ON THE PROCESSING OF PERSONAL DATA In connection with the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in view of the acquisition of your personal data for recruitment purposes we inform you that: Personal data controller The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation). Purpose and basis for processing personal data Your data will only be processed if the Controller has a legal basis to do so stemming from the GDPR and only for a purpose corresponding to such basis. Your personal data may be processed by the Controller for the purpose of carrying out recruitment activities. The processing of your data in this respect is necessary to take action before entering into an employment contract / a contract for services [Article 6(1)(b) GDPR]. If you agree to the processing of your data for the purpose of future recruitments, the Controller will also be able to process the data for that purpose. The processing of personal data in this case will be based on your consent [Article 6(1)(a) GDPR]. III. Information on recipients of personal data or categories of recipients Your data may be transferred to entities processing the data on behalf of the Controller, e.g. subcontractors or service providers. Your data may also be made available to the Controller’s legal and advisory service providers and other contractors. In each such case, the transfer of your data does not entitle the recipient to use the data in any other way except for the purpose expressly indicated by the Controller. The recipients of your data may also be entities entitled to obtain your data on the basis of the provisions of the applicable law, such as courts or law enforcement authorities, if they request the data on an appropriate legal basis. Transfer of data to third countries or international organisations As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law. Retention period of personal data Personal data processed by the Controller for the purposes related to the recruitment process for will be kept for the duration of the recruitment process and up to 4 weeks from the moment the recruitment process has ended or expiry of a separate consent to participate in subsequent recruitment processes. The aforementioned applies unless it is necessary to retain the personal data for a longer period for the purposes of defending claims in (pending) legal proceedings. If the processing is based on your consent, the processing will continue until your consent is revoked, limited or otherwise restricted and in any case no longer than necessary for the purposes for which the personal data are processed. Rights related to the processing of personal data You have the right of access to your data and the right to demand their rectification, erasure or restriction of processing. You have the right to data portability and the right to object to the processing of your personal data. If you have given your consent to data processing, you can withdraw it at any time. Withdrawal of the consent to the processing of your personal data shall not affect the validity of the Controller’s previous processing of such data on the basis of that consent. You have the right to lodge a complaint with the supervisory authority if you believe that the Controller is violating the law during the processing of your personal data. VII. Obligation to provide personal data Your personal data are necessary for the actions to be taken before entering into an employment contract/a contract for services with you. Making your data available for future recruitment processes with the Controller is voluntary. VIII. Changes to the information clause The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the changes introduced. Controller’s contact details In order to exercise any of your rights or to find out more about how to exercise them, you can contact us by e-mail: office@plichadvisory.com or in writing to the Controller’s address. CONSENT TO THE PROCESSING OF DATA FOR FUTURE RECRUITMENT I consent to the processing of my personal data provided by me in the application documents by Plich Advisory & Investments B.V. during the recruitment process for the purposes of future recruitment activities for a period of one year. INFORMATION ON THE PROCESSING OF PERSONAL DATA Acting in conformance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in connection with the collection of your personal data for the purpose of employment by/contract with Plich Advisory & Investments B.V. we inform you that: Personal data controller The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation). Purpose and basis for processing personal data Your data will only be processed if the Controller has a legal basis stemming from the GDPR and only for a purpose corresponding to the legal basis to that basis. Your personal data may be processed by the controller for employment-related purposes, which includes: a) performance of an employment contract/a contract for services We process your personal data for the purpose of managing the employment/contractor relationship between you and the Controller and for the purpose of performing the Controller’s duties resulting from the terms of the employment contract/contract for services documented in writing and the applicable internal regulations of the Organization. The Controller’s duties include, e.g., payroll administration, management and servicing of employee benefits and making tax settlements. The Controller is also obliged to retain and process information containing personal data such as official identification numbers, information on sick leaves and maternity or parental leaves, pensions and taxes. The processing of your data in the above cases is carried out in accordance with your contract of employment /contract for services [Article 6(1)(b) GDPR] and the Controller’s obligations under generally applicable laws, such as the labour, tax or social security law [Article 6(1)(c) GDPR]. b) essential objectives of the Organisation The Controller may process your personal data for other relevant and necessary purposes related to the conduct of the business activity of the Organisation, which includes: handling of personnel matters (both during and after employment), providing the contractors with the data of employees involved in the performance of the contract concluded with them, issuing certificates of employment, assessment of work performance, conducting investigations in case of allegations of breach of employment obligations, conducting analyses of working time and attendance at work, resolving labour disputes, issues related to the protection of health and safety at work in the Organisation, improvement of the professional qualifications of workers, service providers and contractors. The processing of your data for the above purposes is carried out in connection with the performance of the Controller’s obligations under the generally applicable laws [Article 6(1)(c) GDPR], as well as the Controller’s legitimate interest in ensuring the proper functioning of the Organisation [Article 6(1)(f) GDPR]. c) other purposes of processing personal data Should the need arise to process your data for purposes other than those listed above, you will be informed in advance, indicating the legal basis for such processing. III. Information on recipients of personal data or categories of recipients Your data may be transferred to entities processing it on behalf of the Controller, e.g. subcontractors or service providers. Your data may also be made available to legal and advisory service providers and the Controller’s contractors. In each such case, the provision of your data does not entitle the recipient of the data to use it in any other way except for the purposes expressly indicated by the Controller. The recipients of your data may also be entities entitled to collect your data on the basis of the provisions of generally applicable laws, such as courts or law enforcement authorities, if they request for the data on a valid legal basis. Transfer of data to third countries or international organisations As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law. Retention period of personal data The retention period of your personal data is dependent on the category of the personal data. Identification data: 5 years after your employment has ended Payroll tax statements: 5 years after your employment has ended Payroll/payment records: 7 years after your employment has ended Performance review information: 2 years after the employment agreement has ended (or sooner if the personal data is no longer needed) Documents related to sick or maternity leave: 2 years after the employment agreement has ended. Where no statutory (minimum) retention period is foreseen, your personal data will in principle be retained for a period of 2 years after your employment agreement / contract for services has ended. It is possible that personal data will be stored for a longer period if claims are being brought against Controller. Rights relating to the processing of personal data You have the right of access to your data and the right to their rectification, erasure and restriction of processing. You have the right to data portability and the right to object to the processing of your data. You have the right to lodge a complaint with the supervisory authority if you believe that the controller is violating the law during the processing of your personal data. VII. Obligation to provide personal data In principle, the provision of personal data is voluntary. In certain cases, however, it may be necessary to provide personal details in order to conclude a specific contract or to implement its provisions. Therefore, if the Controller is deprived of the basis for the processing of your data for the purpose of a certain contract, it may be difficult or impossible for the Controller to fulfil its obligations arising from the contract. VIII. Changes to the information clause The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes. Controller’s contact details In order to exercise any of your Rights or to find out more how you can exercise them you can contact us by e-mail: at office@plichadvisory.com or in writing to the Controller’s address. The information clause for counterparties INFORMATION ON THE PROCESSING OF PERSONAL DATA Acting pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in connection with the collection of your personal data for the purpose of entering into a cooperation we inform you that: Personal data Controller The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation). Purpose and basis for processing personal data Your data will only be processed if the Controller or another processor has a legal basis stemming from the GDPR and only for the purpose corresponding with such basis. The Controller may process your personal data for the purposes related to: The Controller may process your data on the basis of your separate consent. In this case, the basis for the processing of personal data shall be the consent [Article 6(1)(a) GDPR]. Should the need arise to process your data for purposes other than those mentioned above, you will be informed about it in advance by the Controller, indicating the legal basis for such processing. III. Information on recipients of personal data or categories of recipients Your data may be transferred to entities processing it on behalf of the Controller, e.g. subcontractors or service providers. The Controller may also make your data available to its legal and advisory service providers. In each such case, the transfer of your data does not entitle the recipient to any other use of the data except for the purposes expressly indicated by the Controller. Recipients of your data may also be subjects entitled to obtain your data on the basis of the provisions of the applicable laws, such as courts or law enforcement authorities, if they request access on a valid legal basis. Transfer of data to third countries or international organisations As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law. Retention period of personal data Your data will be processed for the duration of your cooperation with the Controller. As regards the necessity of the data to perform the contract, this will normally be the time needed to perform the contract and to secure any claims arising from it. If the processing is based on your consent, the processing will continue until your consent is revoked, limited or otherwise restricted and in any case no longer than necessary for the purposes for which the personal data are processed. In situations where the processing of data is carried out in compliance with a legally prescribed obligation, the retention period will be determined on the basis of the relevant legal regulations. The retention period in relation to a legal administration regulation is 5-10 years (depending on the relevant administration obligation). Where the basis for the processing of the data is a legitimate interest of the Controller, the Controller shall keep your data as long as such legitimate interest exists. In case of legal claims, the personal data may be processed for as long as necessary to defend the Controller’s interests. In all other cases your personal data will be kept for a duration of 2 years after business relationship has ended or any meaningful contact took place with the Controller. Rights relating to the processing of personal data You have the right of access to your data and the right to request their rectification, erasure and restriction of processing. You have the right to transfer data and the right to object to their processing. If you have given your consent to data processing, you can withdraw it at any time. Withdrawal of consent to the processing of your personal data shall not affect the validity of the Controller’s earlier processing of such data on the basis of this consent. You have the right to lodge a complaint with the supervisory authority if you believe that the controller is violating the law during the processing of your personal data. VII. Obligation to provide personal data In principle, the provision of personal data is voluntary. In certain cases, however, it may be necessary to provide personal details in order to conclude a specific contract or to implement its provisions. Therefore, if the Controller is deprived of the basis for the processing of your data for the purpose of a certain contract, it may be difficult or impossible for the Controller to fulfil its obligations arising from the contract. VIII. Changes to the information clause The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes. Controller’s contact details In order to exercise any of your Rights or to find out more how you can exercise them you can contact us by e-mail: at office@plichadvisory.com or in writing to the Controller’s address. The information clause for individuals whose data are processed in social media INFORMATION ON THE PROCESSING OF PERSONAL DATA Acting pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in connection with the collection of your personal data in connection with profile management in social media, we inform you that: Personal data Controller The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation). Purpose and basis for processing personal data Your data will only be processed if the Controller has a legal basis stemming from the GDPR and only for the purpose corresponding to that basis. Your personal data may be processed by the Controller for the purposes of running a fan page on Facebook or a profile on LinkedIn, including: informing you about our activities, promoting events that we organise or participate in, promoting our products and services, and communicating with you using the available functionalities (due to the fact that you have subscribed to our fan page or profile by clicking the “Like” or “Follow” icons [Facebook] “Recommend”, “Follow” or “Like” [LinkedIn], adding comments on our profile, clicking on reactions under posts, share posts, chatting, messaging). We process your personal data on the basis of our legitimate interest in promoting our brand and products and services, building and maintaining a community associated with us and communicating with you and on the basis of your consent expressed by liking our fan page or profile [Article 6(1)(f) of the GDPR and Article 6(1)(a) of the GDPR]. archiving information to secure its availability in case of a legal need to prove events or facts which is our legitimate interest [Article 6(1)(f) GDPR]. potential formulation, pursuit or defence of claims, which is our legitimate interest [Article 6(1)(f) GDPR]. data analysis, which is our legitimate interest [Article 6(1)(f) GDPR]. III. Information on recipients of personal data or categories of recipients The Controller shall make personal data available to the owner of the social network Facebook, i.e. Facebook Inc. or LinkedIn, i.e. LinkedIn Ireland Unlimited Company, and to the extent necessary to ensure the operation of the fan page on Facebook or LinkedIn to other users of that network. Your data may be transferred to entities processing it on the Controller’s request, e.g. subcontractors or service providers and entities associated with the Controller. Your data may also be made available to the Controller’s legal advisors, service providers and contractors In each such case, the provision of your data does not entitle the recipient of the data to use it in any way except for the purpose expressly stated by the Controller. The recipients of your data may also be entities entitled to obtain your data on the basis of the provisions of the applicable law, such as courts or law enforcement authorities, if they request the data on an appropriate legal basis. Transfer of data to third countries or international organisations The Controller using Facebook may transfer your data to the United States or other countries outside your country of residence. Such data transfers are necessary to provide the services specified in the regulations of the websites. Facebook Inc. uses standard contractual clauses approved by the European Commission and complies with the decisions of the European Commission stating an adequate level of data protection in relation to specific countries, where applicable, for the transfer of data from the EEA to the United States and other countries. In other cases, the Controller shall not transfer your data to third countries or international organisations. Retention period of personal data Where the basis for processing the data is the legitimate interest of the Controller, the Controller shall retain your data as long as such legitimate interest exists. In case of legal claims, the personal data may be processed for as long as necessary to defend the Controller’s interests. In situations where the processing of data is carried out in compliance with a legally prescribed obligation, the retention period will be determined on the basis of the relevant legal provisions. If you withdraw your consent to the processing of data (unliking/ceasing to follow a profile on the website), the Controller will from that moment cease to process your data based on the list of people who like/follow the profile). Rights relating to the processing of personal data You have the right of access to your data and the right to rectification, erasure or restriction of processing of the data. You have the right to data portability and the right to object to processing. You have the right to withdraw your consent to the processing of your data by unliking/ceasing to follow the Facebook or LinkedIn profile. The withdrawal of your consent to the processing of your personal data does not affect the validity of the Controller’s earlier processing of such data on the basis of your consent. You have the right to lodge a complaint with the supervisory authority if you believe that the Controller is violating the law during the processing of your personal data. VII. Obligation to provide personal data The provision of personal data is voluntary. VIII. Changes to this information clause The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes. Controller’s contact details In order to exercise any of your rights or to find out more on how to exercise them, you can contact us via e-mail: office@plichadvisory.com or in writing to the Controller’s office address. Additional information Please note that if you have a Facebook or LinkedIn account, Facebook Inc. or LinkedIn Ireland Unlimited Company is also the Controller of your data, and depending on the terms and conditions and approvals you have given, they may act otherwise. The information clause for natural persons active in the medical and pharmaceutical industry with whom the Controller enters into a relationship INFORMATION ON THE PROCESSING OF PERSONAL DATA Acting pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’), and in view of the collection of your personal data in connection with entry into cooperation, we inform you that: Personal data Controller The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation). Purpose and basis for processing personal data Your data will only be processed if the Controller or another processor has a legal basis stemming from the GDPR and only for a purpose corresponding to that basis. The Controller may process your personal data for the purposes related to: The Controller may process your data on the basis of your separate consent. In this case, the basis for the processing of personal data shall be the consent [Article 6(1)(a) GDPR]. Should the need arise to process your data for purposes other than those mentioned above, you will be informed about it in advance by the Controller, indicating the legal basis for such processing. III. Information on recipients of personal data or categories of recipients Your data may be entrusted by the Controller for processing or made available to other entities, e.g. customers, subcontractors or service providers. The Controller may also make your data available to its legal advisors and service providers. In case of entrusting the processing of your data, it does not entitle the recipient of the data to use them in any other way except for the purposes expressly indicated by the Controller. Recipients of your data may also be subjects entitled to collect your data on the basis of the provisions of the applicable laws, such as courts or law enforcement authorities, if they request access on a valid legal basis. Transfer of data to third countries or international organisations As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law. Retention period of personal data In situations where the processing of data will be carried out in compliance with a legally prescribed obligation, the retention period will be determined on the basis of the relevant legal provisions. Where the basis for the processing of the data is a legitimate interest of the Controller, the Controller shall keep your data as long as such legitimate interest exists. In case of legal claims, the personal data may be processed for as long as necessary to defend the Controller’s interests. In all other cases your personal data will be kept for a duration of 2 years after business relationship has ended or any meaningful contact took place with the Controller. As regards the necessity of the data to perform the contract, this will normally be the time needed to perform the contract and to secure any claims arising from it. If the processing is based on your consent, the processing will continue until your consent is revoked, limited or otherwise restricted and in any case no longer than necessary for the purposes for which the personal data are processed. Rights relating to the processing of personal data You have the right of access to your data and the right to request their rectification, erasure and restriction of processing. You have the right to transfer data and the right to object to their processing. If you have given your consent to data processing, you can withdraw it at any time. Withdrawal of consent to the processing of your personal data shall not affect the validity of the Controller’s earlier processing of such data on the basis of this consent. You have the right to lodge a complaint with the supervisory authority if you believe that the controller is violating the law during the processing of your personal data.. VII. Obligation to provide personal data In principle, the provision of your data is voluntary. In certain cases, however, it may be necessary to provide personal details in order to conclude a specific contract or to implement its provisions. Therefore, if the Controller is deprived of the basis for the processing of your data for the purpose of a certain contract, it may be difficult or impossible for the Controller to fulfil its obligations arising from the contract. VIII. Changes to the information clause The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes. Controller’s contact details In order to exercise any of your Rights or to find out more how you can exercise them you can contact us by e-mail: at office@plichadvisory.com or in writing to the Controller’s address. Plich Advisory & Investments B.V. Strawinskylaan 3051 1077 ZX Amsterdam Netherlands mail: office@plichadvisory.com
1.1 2.1 3.1 3.2 4.1 4.2 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 11.2 11.3 12.1 12.2 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1 21.2 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 37.1 38.1 39.1 40.1 40.2 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1
Pravila privatnosti PRAVILA PRIVATNOSTI Sukladno zahtjevima Opće uredbe o zaštiti osobnih podataka (Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ) i Zakona o provedbi Opće uredbe o zaštiti podataka (NN 42/2018), trgovačko društvo KVADRATI UPRAVLJANJE d.o.o. (dalje u tekstu: Voditelj Obrade), koje upravlja nekretninama poštuje i uvažava privatnost posjetitelja web stranice te u nastavku ovih pravila privatnosti pruža osnovne informacije o obradi osobnih podataka. Ova Pravila privatnosti odnose se na podatke koji se prikupljaju korištenjem web stranice www.martipark.hr Informacije koje slijede imaju za cilj pružiti Vam pregled o obradi osobnih podataka i upoznati Vas sa pravima ispitanika u vezi s obradom osobnih podataka. Voditelj Obrade ulaže znatne napore u zaštitu osobnih podataka vodeći se načelima zakonite, poštene, transparente, ograničene, pouzdane, točne i cjelovite obrade osobnih podataka. Voditelj Obrade poduzima razne mjere u pojedinim aktivnostima obrade kako bi na što razumljiviji i jednostavniji način informirao ispitanike o tome koje podatke prikuplja, kako ih koristi i koliko dugo pohranjuje. Kako bismo olakšali komunikaciju i informiranje svih zainteresiranih strana, javno su dostupni kontaktni podaci Službenika za zaštitu podataka. Voditelj obrade osobnih podataka KVADRATI UPRAVLJANJE d.o.o. sa sjedištem u Zagrebu, Heinzelova ulica 33, OIB: 12203294486 e-mail adresa službenika za zaštitu podataka: privacy.marti@kvadratiupravljanje.hr Kolačići (cookies) Što su kolačići i u koje svrhe se mogu koristiti? “Kolačić” je mala tekstualna datoteka koju mrežna stranica stvara na računalu korisnika u trenutku u kojem isti pristupi određenoj stranici, s ciljem skladištenja i prijenosa informacija. Mrežni poslužitelj (računalo na kojem se nalazi posjećena mrežna stranica) šalje kolačiće korisnikovom pregledniku (Internet Explorer, Mozilla Firefox, Google Chrome, itd.) te se isti pohranjuju na njegovo računalo. Prilikom sljedećih posjeta, kolačići se ponovno šalju mrežnoj stranici. Neke se radnje ne mogu izvršiti bez korištenja tehničkih kolačića, koji su u tim slučajevima neophodni za ispravan rad stranice. U drugim slučajevima stranica koristi kolačiće kako bi se korisniku pojednostavilo korištenje stranice ili kako bi se istima omogućilo korištenje posebno zatraženih usluga. Kolačići mogu ostati u sustavu tijekom dužeg razdoblja i mogu sadržavati i jedan jedinstveni identifikacijski kod. Navedeno omogućuje stranicama koje analiziraju kolačiće praćenje načina korištenja stranice, ali i za statističke ili marketinške svrhe, odnosno za stvaranje personaliziranih korisnikovih profila, počevši od stranice koje je isti posjetio te mu pokazati i/ili poslati mu ciljane promotivne obavijesti. Koji se kolačići koriste i u koje svrhe? Ova stranica koristi različite vrste tehničkih kolačića, ali ne i kolačiće za profiliranje i analitičke kolačiće. Voditelj obrade niže navodi specifične kategorije korištenih kolačića, njihovu svrhu i posljedice njihova isključivanja: Kolačići treće strane Na ovoj mrežnoj stranici nisu prisutni kolačići trećih strana, odnosno kolačići koje stvara mrežna stranica različita od one koju korisnik trenutačno posjećuje. Isključivanje i uključivanje kolačića Korisnik je dao svoju izričitu privolu na obradu podataka korištenjem svih ili pojedinih kolačića koji su gore navedeni putem odgovarajućeg „prozora“ na naslovnoj stranici. Navedena privola predstavlja pravnu osnovu obrade u smislu Opće uredbe o zaštiti podataka. Uključivanje/isključivanje pojedinih kolačića može se slobodno izvršiti i putem vlastitog preglednika (odabrati postavke te kliknuti internet, otvoriti privatnost te odabrati željenu razinu blokiranja kolačića). Osim toga, možete označiti opciju „Isključi praćenje“ koja je dostupna kod većine preglednika novije generacije. Sporedne svrhe: Otkrivanje trećim stranama i primateljima Obrada Vaših osobnih podataka vrši se u skladu s ugovorom i drugim pravnim obvezama, uključujući one zakonske i/ili regulatorne koje iz istih proizlaze. Vaši podaci se neće otkrivati trećim stranama/primateljima za njihove osobne svrhe, osim ako: Vi ne date privolu; - isto nije neophodno za ispunjavanje obveza koje proizlaze iz ugovora i zakona koje ih uređuju (npr. za zaštitu Vaših prava, itd.); Osobni podaci koje Voditelj obrade obrađuje u navedene svrhe, uključuju, između ostalog: IP adresu i kolačiće. Računalna sigurnost Voditelj obrade obrađuje samostalno i putem svojih ugovornih partnera – izvršitelja obrade, Vaše osobne podatke, uključujući one računalne (npr. logički pristup) ili podatke o prometu koji su prikupljeni ili zaprimljeni u slučaju izloženih usluga na mrežnoj stranici, u mjeri koja je nužna i razmjerna kako bi se jamčila sigurnost i sposobnost određene mreže ili poslužitelja na istu spojenog da se odupru, na pouzdanom stupnju povjerljivosti, slučajnim događajima ili nezakonitim ili zlonamjernim radnjama koje ugrožavaju dostupnost, ispravnost, integritet i povjerljivost pohranjenih ili prenesenih osobnih podataka. Što ako ne pružite Vaše podatke? Upućujemo Vas da pogledate posljedice isključenja određenih kolačića kako je navedeno u gornjoj tablici. Podaci koji se prikupljaju putem rubrike „Kontakt“ Za slanje poruka putem rubrike „kontakt“ na web stranici, Voditelj Obrade prikuplja najmanje sljedeće osobne podatke: ime, e-mail adresa i drugi osobni podaci koje sam korisnik upiše u polje „poruka“. Svrha prikupljanja navedenih osobnih podataka je omogućavanje potencijalnim klijentima i posjetiteljima web stranice da njenim putem stupe u kontakt sa Voditeljem Obrade i postave upite vezane uz njegove djelatnosti. Svojevoljnim upisom svojih osobnih podataka i označavanjem polja „Suglasan sam s obradom osobnih podataka koje sam naveo u upitu u skladu s pravilima privatnosti“, pošiljatelj daje jasnu privolu Voditelju Obrade za obradu osobnih podataka u skladu s odredbama ove točke. Podaci se prikupljaju temeljem privole ispitanika koja je dana prilikom slanja poruke, sa svrhom odgovaranja na upite ispitanika. Način obrade i primatelji osobnih podataka Podaci su zaštićeni najmanje sljedećim zaštitnim mjerama: pristup je omogućen samo ovlaštenim osobama koje su obvezane na povjerljivost, uz evidenciju pristupa te primjenu mjera informatičke sigurnosti od neželjenog pristupa i zaštite od gubitka: backup, firewall. Osobni podaci prikupljeni putem web stranice mogu se prenositi pojedinim ugovornim partnerima Voditelja Obrade, a osobito pružatelju informatičkih usluga. Svi ugovorni partneri Voditelja Obrade preuzeli su obveze o povjerljivosti osobnih podataka sukladno Općoj uredbi o zaštiti podataka i ostalim primjenjivim propisima na polju zaštite osobnih podataka. Razdoblje pohrane osobnih podataka Podaci prikupljeni putem rubrike „Kontakt“ se pohranjuju do povlačenja privole, a najdulje na razdoblje od 5 godina od rješavanja upita ispitanika, osim ukoliko po osnovi upita nije nastala nova i zasebna pravna osnova za obradu osobnih podataka, primjerice u slučaju sklapanje ugovora s ispitanikom. Povlačenjem ili opozivanjem privole za obradu osobnih podataka Vaši osobni podaci se više neće koristiti, međutim povlačenje ili opozivanje iste ne utječe na zakonitost obrade koja se temeljila na privoli prije njena povlačenja. Privola se može opozvati djelomično ili u cijelosti. Privola se opoziva slanjem pisanog opoziva na adresu Voditelja Obrade ili e-mailom na adresu službenika za zaštitu podataka navedenu u uvodu. Prava ispitanika - Pravo na pristup osobnim podacima – pravo od Voditelja Obrade dobiti potvrdu obrađuju li se osobni podaci, informacije o svrsi obrade, kategorijama podataka koji se obrađuju, primateljima, vremenu pohrane, te postojanju prava da se zatraži ispravak, brisanje, ograničenje obrade ili prigovor na obradu. - Pravo na ispravak – pravo zatražiti ispravak netočnih podataka ili dopuniti nepotpune podatke koji se na odnose na ispitanika. - Pravo na brisanje – pravo od Voditelja Obrade ishoditi brisanje osobnih podataka koji se odnose na ispitanika pod određenim uvjetima, osim ukoliko njihova pohrana nije izričito dopuštena propisom. - Pravo na ograničenje obrade osobnih podatka – pravo od Voditelja Obrade ishoditi ograničenje obrade koje se odnose na ispitanika pod određenim uvjetima. - Pravo na ulaganje prigovora na obradu – pravo uložiti prigovor na obradu osobnih podataka. - Pravo na prenosivost podataka – pravo prenijeti svoje osobne podatke kod drugog voditelja obrade, a ukoliko je tehnički izvedivo, prijenos će se izvršiti automatiziranim putem. - Pravo na podnošenje prigovora nadzornom tijelu: Agenciji za zaštitu osobnih podataka, Selska cesta 136, HR – 10 000 Zagreb, e-mail: azop@azop.hr, web: www.azop.hr.