http___mihael-putovanja.hr_kontakt__1.xml
1.1 2.1 3.1 3.2 3.3 4.1 4.2 5.1 6.1 6.2 7.1 8.1 8.2 8.3 8.4 9.1 10.1 11.1 12.1 13.1 14.1 15.1 15.2 15.3 15.4 16.1 17.1 17.2 17.3 18.1 19.1 19.2 19.3 19.4 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 34.2 34.3 35.1 36.1 37.1 37.2 37.3 37.4 37.5 38.1 39.1 39.2 39.3 39.4 39.5 40.1 40.2 41.1 41.2 41.3 42.1 42.2 42.3 43.1 44.1 45.1 46.1 46.2 47.1 47.2 47.3 47.4 48.1 48.2 48.3 48.4 48.5 49.1 50.1 50.2 50.3 51.1 51.2 51.3 51.4 52.1 53.1 53.2 53.3 53.4 53.5 54.1
Principles of personal data processing Personal data controller and data subject The personal data controller is STATECH s.r.o., Org. ID: 274 02 975, with registered office at Počapelská 346, 277 01 Dolní Beřkovice, registered in the Commercial Register at Prague Municipal Court, Section C, File 111021 (“controller”). The controller may be contacted in writing at the specified address or via email at privacy@statech.cz. The data subject is a natural person who provides their personal data to the data controller based on a rental agreement, purchase agreement, service agreement or other agreement concluded with the controller or based on consent to process personal data when subscribing to the newsletter distributed by the controller. The data subject may also be a natural person whose personal data the data controller obtains from other lawful sources. Scope of personal data processing The controller processes personal data in the scope provided by the data subject or in the scope obtained from other lawful sources by the controller. This primarily involves their given name, surname, date of birth, place of residence, place of business, identification number, tax ID number, payment card number, email address, phone, signature, positioning data (GPS in vehicles owned by the controller), audio-visual records from the CCTV system and personal data obtained from cookies. Purpose of personal data processing The controller processes the personal data of the data subject for the purposes of delivering on the agreements concluded between the data subject and the controller (aerial work platform rentals, sales and service), to comply with legal obligations and for direct marketing purposes (offering the controller’s products and services), including sending commercial communications within the meaning of Act No. 480/2004 Coll. on Specific Information Society Services. The controller only distributes business correspondence when the data subject has subscribed to the newsletter or if the controller has obtained detailed electronic contact details for the data subject during the sale of its products or services. The data subject may easily unsubscribe from the newsletter by sending an email to privacy@statech.cz. Determining the necessity of processing The controller shall protect the privacy of the data subject’s data, and therefore only processes that personal data necessary for the defined purposes of processing. Legal basis for processing personal data The legal basis for processing for direct marketing purposes is consent from the data subject to the processing of their personal data (subscribing to the newsletter) or the legitimate interests of the controller (whereby electronic contact details are obtained in connection with the sale of the controller’s product or service under Act No. 480/2004 Coll.). In other instances, the legal basis for processing is the performance of an agreement, to protect the legitimate interests of the controller (protect property, apply rights under an agreement within litigation, etc.) and to comply with legal obligations. Period of personal data processing If personal data is processed to perform an agreement, the controller shall process this personal data for the duration of the contractual relationship and for an additional 10-year period, given the length of the statute of limitations concerning compensation for damage or injury. If personal data is processed to comply with a legal obligation, the controller shall process this personal data for the period laid down in legislation. If personal data is processed based on consent from the data subject, the controller shall process this period data for a 10-year period, unless consent to such personal data processing is revoked at any time in such period. This has no prejudice on the controller’s obligation to process personal data for the period laid down in applicable legislation and in accordance therewith. Revocation of consent to personal data processing If the data subject provides the controller with consent to personal data processing, they may revoke such consent at any time and at no charge by sending an email to privacy@statech.cz. Revocation of consent has no prejudice against the lawfulness of processing based on consent issued before it is revoked. Revocation of consent has no impact on the personal data processed by the controller on a legal basis other than consent (i.e. processing to perform an agreement, legal obligations or other reasons specified in valid legislation). Access to personal data The controller has access to the personal data of data subjects, along with certain third parties, processors, who provide suitable guarantees and whose processing complies with the obligations under valid legislation and who ensure suitable protection of the rights of data subjects. Personal data processors include the operators of GPS devices installed on aerial work platforms owned by the controller (to protect the controller’s property, a legitimate interest) and companies focused on collecting receivables (collections agencies). Personal data processors may also be a company in a group of enterprises performing the same activities as the processor (disclosure within a group), whereby in such case this personal data shall only be disclosed within European Union member states. The processor shall not provide personal data to any third countries or international organisations (except for Google Analytics cookies, see below). Proof of identity of the data subject The processor may require that data subjects provide proof of their identity to restrict unauthorised access to personal data. Rights of data subjects concerning personal data Data subjects have the following rights with respect to personal data: a) the right to revoke consent at any time; b) the right to rectification of personal data; c) the right to restrict processing of personal data; d) the right to object to processing in certain cases; e) the right to data portability; f) the right to access personal data; g) the right to be informed if personal data protection is compromised in specific cases; h) the right to erasure (the right to be forgotten) in specific instances; and i) other rights laid down in the Personal Data Protection Act, the Personal Data Processing Act and the GDPR (Regulation No 2016/679). What does it mean when a data subject has the right to object? Under Article 21 of the GDPR, a data subject has, inter alia, the right to object to the processing of their personal data if such processing is performed based on a legitimate interest, including processing for direct marketing purposes. Objections addressed to the controller shall be sent via email to: privacy@statech.cz. If a data subject raises an objection to processing for direct marketing purposes, the personal data controller shall no longer process such data in the given scope. More information concerning such right is contained in Article 21 of the GDPR. Obligation to provide personal data The data subject provides its personal data on a completely voluntary basis. The data subject is under no obligation to provide such data. There is no threat of any penalty for not providing personal data. However, if a data subject chooses not to provide its personal data to the controller, no contract involving the controller and the data subject may be concluded or performed. It is completely within the competencies of the data subject to decide to enter any contractual relationship with the controller or not. Personal data protection All personal data is secured using standard procedures and technologies. However, it is not objectively possible to completely guarantee the security of personal data. Therefore, it is impossible to provide a 100% guarantee that no third party will gain access to such personal data, it cannot be copies, published, modified or destroyed by defeating the controller’s security measures. Within this context, the controller commits to regularly conduct vulnerability checks of the system and to ensure it has not been subject to attack, and to apply such security measures that may be reasonably demanded of the controller to prevent unauthorised access to the provided personal data and that provide sufficient protection given the current level of technology. All accepted security measures are regularly updated. GPS on aerial work platforms and the Q. Drive application GPS monitoring devices are installed on all aerial work platforms owned by the controller to monitor their movements and to protect the controller's property. Aerial work platform positioning data obtained from GPS devices are processed by the GPS system operator (processor), who provides suitable guarantees and the processing of which meets the conditions under valid legislation and secures suitable protection for the rights of data subjects. The data controller does not connect any aerial work platform positioning data to any identifiable natural persons (data subjects). The controller uses the Q. Drive application to monitor the movement of its vehicles. Details concerning personal data processing that is conducted through this application are contained in the privacy policy contained right in the application. Monitoring of the controller’s site The controller monitors its site and facility with a CCTV system that keeps temporary video recordings. Cookies The controller uses cookies on its websites that are saved on the data subject’s devices. Cookies are small files that make a website more functional, customise website content to meet the needs of data subjects, and remember selected settings. The operators of advertising systems operated on these websites also use cookies that are stored on the data subject’s devices. The controller uses the Google system for remarketing activities. Data from remarketing is exclusively used for segmentation of visitors for the purposes of presenting more relevant advertising materials. Segments are created using several general patterns of visitor behaviour. Information gathered from Google Analytics cookies used to analyse site traffic and remarketing purposes are sent to Google, which is headquartered in the USA (a third country). The transfer of personal data to these companies is based on standard contractual clauses. Google uses such information for the purposes of evaluating the use of websites and creating activity reports from such sites for the controller. The information is also used to provide other services related to activity on the site and the use of the Internet in general. Google may provide such information to third parties if required by law or if such third party processes this information for Google. The Google Analytics service is an expansion of the related advertising functions provided by Google, specifically: Google Display Network impressions, remarketing (showing content network ads based on viewed products) and extended demographic reports (reporting anonymous demographic data). If a data subject does not want to provide anonymous data on Internet usage to Google Analytics, they may use the plugin provided by Google. Data will no longer be transmitted once installed in your browser and activation. More information on the processing and use of data is provided in Google’s terms and conditions. Standard browsers (Safari, Internet Explorer, Firefox, Google Chrome and others) support cookies. Data subjects may delete individual cookies manually, block cookies or prohibit their use or simply block or allow cookies for individual websites using their browser settings. Data subjects may also use the help or other features provided with their browsers for more information. If a data subject’s browser is configured to accept cookies, the controller will operate under the assumption that such consent is for the use of standard cookies from the controller’s server. The controller will not associate the data obtained from cookies with any other data and shall handle this data in a way that does not allow specific persons to be identified. The controller uses temporary cookies and persistent cookies on its websites. Temporary cookies are only stored on the given device until the browser is closed. Temporary cookies allow information to be saved when navigating from one site to another and eliminate the need to repeat the entry of certain data. Persistent cookies enable the identification of a data subject’s device on frequently visited websites and the modification of site content to match the user’s interests, but do not allow for the identification of a specific individual. The information obtained from cookies is stored in a completely unanimous manner and is not associated with any other data. The following table shows how the controller uses the individual types of cookies:
1.1 2.1 3.1 4.1 5.1 6.1 8.1 10.1 12.1 14.1 15.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 33.1 34.1 34.2 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 45.1 45.2 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 56.2
Ured Adresa Putnička agencija Mihael d.o.o. Pavlinska 5, 42000 Varaždin, Hrvatska Voditelj poslova: Valentina Šimić Radno vrijeme: pon – pet 08.00 – 16.00 sati OIB Telefoni Fax info@mihael-putovanja.hr Podaci za uplatu SWIFT: PBZGHR2X (za inozemne uplate) Model: 00 Poziv na broj: datum puta Svrha uplate: putovanje i Vaše prezime Dokumenti za preuzimanje: Pošaljite upit MIHAEL putnička agencija,d.o.o. SJEDIŠTE: Varaždin, Pavlinska 5 Radno vrijeme: ponedjeljak – petak 08.00 – 16.00 sati Voditelj poslova: Valentina Šimić Nastupa u svojstvu stalno i u punom radnom vremenu zaposlenog voditelja poslova. Ovlaštena je za praćenje poslovanja turističke agencije sukladno odredbama Zakona o pružanju usluga u turizmu. Djelatnost turističke agencije podliježe nadzoru Državnog inspektorata, područni ured Varaždin. Porezni obveznik upisan je u sudski registar: Trgovački sud u Varaždinu pod matičnim brojem MBS: 070077587, temeljem rješenja navedenog suda Tt-07/262-2 od 26.02.2007. Temeljni kapital: 20.000,00 kn uplaćen u cijelosti. Direktor: Milan Kruljac ZAŠTITA PRIVATNOSTI Naziv voditelja obrade: MIHAEL Putnička agencija d.o.o. Adresa: Pavlinska 5, Varaždin OIB: 20054015482 Sukladno Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27.travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka (u daljnjem tekstu Opća uredba o zaštiti podataka), koja je u punoj primjeni od dana 25. svibnja 2018. godine u Republici Hrvatskoj i svim zemljama članicama Europske unije, kao i Zakonu o provedbi Opće uredbe o zaštiti podataka (Narodne novine broj 42/18), odnosno sukladno pravnom okviru zaštite osobnih podataka u Republici Hrvatskoj i Europskoj uniji, Mihael putnička agencija d.o.o. kao voditelj obrade osobnih podataka korisnika svojih usluga, zaposlenika i kupaca, izradilo je Politiku o zaštiti privatnosti osobnih podataka te se u skladu s tim traži Ova privola predstavlja pravnu osnovu za prikupljanje i obradu podataka ispitanika te se smatra dobrovoljnim, informiranim i nedvosmislenim izražavanjem želja ispitanika kojom on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose. Vrste podataka koji se prikupljaju i obrađuju: Podaci koji se prikupljanju i obrađuju su sljedeći: ime i prezime, adresa, osobni identifikacijski broj (OIB), datum rođenja, spol, kontakt broj telefona i/ili mobitela, kontakt podatke elektroničke pošte (e-mail adresa), podaci iz osobne iskaznice i putovnice, podaci o bankovnom računu i broju kartice, podaci iza isplatu odštetnog zahtjeva za osiguravajuću kuću kao I prateća zdravstvena dokumentacija. Svrha prikupljanja i obrade podataka: Navedeni osobni podaci ispitanika, sukladno pravima i obvezama Zakona o pružanju usluga u turizmu te ugovornim obvezama koje proizlaze iz turističke djelatnosti, koriste se isključivo za potrebe pojedinog projekta (putovanja) baziranog na međusobnim ugovorima. Trajanje čuvanja i obrade osobnih podataka: Ovisno o svrsi i pravnoj osnovi temeljem koje se prikupljaju osobni podaci ispitanika, voditelj obrade je u pojedinim slučajevima obvezan čuvati osobne podatke u vremenskom trajanju (razdoblju) koje za pojedinu svrhu propisuju mjerodavni propisi ili prestankom svrhe u koju su prikupljeni. Obveze voditelja obrade prema ispitaniku: Voditelj obrade podataka obvezan je na temelju podnesenog pisanog zahtjeva ispitanika na gore naznačenu adresu voditelja obrade podataka istom omogućiti pristup osobnim podacima koje obrađuje o njemu, ispravak netočnih osobnih podataka, brisanje osobnih podataka ili ograničenje obrade osobnih podataka, kao i upoznati ga s mogućnošću prigovora na obradu osobnih podataka te pravom na prenosivost podataka. Prosljeđivanje podataka trećim osobama: Osobni podaci ispitanika proslijeđuju se trećim osobama (osiguravajućim kućama, hotelima, avio kompanijama, turističkim agencijama i ostalim trećim osobama ovisno o potrebi, odnosno tipu putovanja) koje sudjeluju u organizaciji putovanja te u tu svrhu koriste osobne podatke ispitanika. Prava ispitanika: Ispitanik ima pravo na pristup osobnim podacima. Voditelj obrade dužan je na temelju pisanog zahtjeva ispitanika informirati ispitanika o osobnim podacima koje obrađuje o njima. Ispitanik ima pravo na ispravak netočnih podataka. Voditelj obrade podataka dužan je ispitaniku omogućiti ispravak netočnih osobnih podataka kada je utvrđeno da prikupljeni osobni podaci nisu ispravni ili je došlo do promjene osobnih podataka. Ispitanik ima pravo na brisanje osobnih podataka kada osobni podaci ispitanika više nisu nužni za ispunjenje svrhe obrade, kada ispitanik povuče privolu kao pravni temelj za obradu osobnih podataka, kada ispitanik uloži prigovor na obradu podataka, kada su osobni podaci nezakonito obrađeni, kada se osobni podaci moraju brisati radi ispunjenja pravnih obveza iz prava Europske unije ili prava države članice kojem podliježe voditelj obrade podataka. Ispitanik ima pravo na ograničenje obrade podataka. Voditelj obrade podataka dužan je osigurati ograničenje obrade podataka u slučajevima kada ispitanik osporava točnost podataka, kada je obrada nezakonita, kada voditelj obrade više ne treba osobne podatke za potrebe obrade ili kada ispitanik uloži prigovor na obradu osobnih podataka. Povlačenje privole: Ispitanik ima pravo u bilo kojem trenutku povući ovu privolu. U tom slučaju, voditelj obrade podataka dužan je odmah prestati s obradom podataka, odnosno obrisati ili anonimizirati osobne podatke, osim ako postoji neka druga pravna osnova obrade osobnih podataka. Potpisom ove privole ispitanik izjavljuje da je upoznat sa svrhom prikupljanja osobnih podataka koji se na njega odnose, da je upoznat s identitetom voditelja obrade osobnih podataka, da dobrovoljno stavlja na raspolaganje svoje osobne podatke, da preuzima obvezu obavijestiti voditelja obrade podataka o svakoj promjeni osobnih podataka. Potpisom i pečatom ove privole voditelj obrade podataka obvezuje se čuvati osobne podatke ispitanika i raspolagati njima u skladu sa zakonskim propisima o zaštiti osobnih podataka i određenjima iz ove privole. Ova privola biti će poslana svakom putniku sa ugovorom o putovanju. PRIGOVORI Sukladno Čl. 10. st. 3. NN 41/14 Zakona o zaštiti potrošača obavještavamo potrošače da nezadovoljstvo na kvalitetu naših usluga te pruženu uslugu mogu iskazati prigovorom u pisanoj formi na slijedeći način i to u roku od 8 dana od pružene usluge ili putovanja.: Adresa: Mihael putnička agencija, do.o.o Pavlinska 5, 42000 Varaždin, Hrvatska ili Telefax broj: 00 385 42 302 045 ili putem e-maila: info@mihael-putovanja Odgovor na Vaš prigovor dobit ćete u pisanom obliku najkasnije 15 dana od primitka prigovora. Kako bi se dobio odgovor, molimo podnositelja prigovora da navede: ime i prezime te adresu ili e-mail za dostavu odgovora.