http___mihael-putovanja.hr_kontakt__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 57.2 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 65.2 65.3 66.1 67.1 68.1 68.2 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 84.2 85.1 86.1 87.1 87.2 88.1 89.1 90.1 90.2 91.1 92.1
This document, entitled “Personal Data Protection Policy,” hereinafter referred to as the Policy, governs the rules for the processing of personal data by the company under the business name of Velvet CARE sp. z o.o., with its registered office in Klucze, Klucze-Osada 3, 32-310 Klucze, hereinafter referred to as Velvet CARE. This Policy is a personal data processing policy within the meaning of the Regulation of the European Parliament and of the Council (UE) 2016/679 of 27 April 2016 on the protection of natural persons as regards personal data processing and free movement of such data and repealing the Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR. DEFINITIONS. - Policy – this “Personal Data Protection Policy”, in force as of 25 May 2018; - Velvet CARE – the company under the business name of Velvet CARE sp. z o.o., with its registered office in Klucze, KluczeO sada 3, 32-310 Klucze; - GDPR – the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons as regards personal data processing, on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation); - Controller – Velvet CARE sp. z o.o., with its registered office in Klucze, Klucze-Osada 3, 32-310 Klucze; - Employee – a person employed at Velvet CARE under an employment agreement, - Customer – a natural or legal person related to Velvet CARE under a civil law agreement governing mutual rights and responsibilities of the parties within a specific scope, - Guest – a natural person who is not an Employee, entering the premises of the facility in Klucze, - personal data – information on an identified or identifiable natural person; the identifiable natural person can be directly or indirectly identified, especially based on such identifiers as the full name, identification no., data on location, Internet identifier or special factor(s) to determine the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person; - processing – an operation or set of operations performed on personal data or personal data sets whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; - data set – a structured set of personal data accessible pursuant to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis; - processor – a natural or legal person, public authority, unit or another entity processing personal data on behalf of Velvet CARE; - recipient – a natural or legal person, public authority, unit or another entity with whom/which personal data is shared; - consent – a freely given, specific, informed and unambiguous indication, in the form of a declaration or clear affirmative action, of the data subject’s consent to the processing of their personal data; - personal data protection breach – an infringement of security leading to an accidental or illegal destruction, loss, modification, unauthorised disclosure or unauthorised access to personal data transmitted, stored or otherwise processed. PERSONAL DATA PROTECTION AT VELVET CARE.. - The Controller of the personal data the subjects of which are Employees, Customers and Guests, in other words the entity specifying the purposes and methods of personal data processing, is Velvet CARE. - You may contact the Controller within the scope of personal data processing in the following manners: 1) by registered mail delivered to the address of Velvet CARE sp. z o.o., Klucze-Osada 3, 32-310 Klucze, 2) by e-mail delivered to the address: dane.osobowe@velvetcare.pl. - For the fulfilment of the overriding objective, which is the respect of the privacy of data subjects, Velvet CARE ascertains that it exercises due diligence so that the personal data of such individuals is properly secured against unauthorised interference or access of third parties. - Velvet CARE has acquired the Employees’ personal data based on the applicable legal provisions, especially under Art. 221 (1) and (2) of the Labour Code. - As regards a specific Employee, Velvet CARE processes their personal data upon entering the Employment Agreement with the Employee. - Within the scope related to the processing of personal data, Velvet CARE applies the following rules: 1) lawfulness – Velvet CARE processes personal data according to generally applicable law, 2) purposefulness – Velvet CARE processes personal data only for the explicit and legitimate purpose, 3) security – Velvet CARE ensures the application of sufficient technical and organisational measures, which guarantee the high level of security of such personal data, through the regular performance of control activities within this scope, 4) respect for the individual’s rights – Velvet CARE allows its Employees to exercise their rights specified in generally applicable legal provisions and exercises such rights; 5) adequacy – Velvet CARE assures that it processes only such personal data as may be necessary for the fulfilment of the purpose for which it is collected; 6) substantive correctness – at the Employee’s request, Velvet CARE updates or corrects personal data subject to processing throughout the statutory period; 7) limitation of personal data storage – Velvet CARE stores the personal data of its former Employees only for the period necessary pursuant to generally applicable legal provisions; 8) transparency – Velvet CARE declares full readiness and availability for raising the consciousness among its Employees as regards all risks, rules, protection measures and rights related to personal data processing, and for showing its Employees all methods in which they can exercise their rights due to such personal data processing by Velvet CARE; 9) accountability – Velvet CARE is sufficiently prepared to demonstrate at any moment that it complies with the aforementioned rules of personal data processing. - Velvet CARE processes personal data especially for the following purposes: 1) in relation to its Employees – for the purposes related to their employment and, at the express request of a specific Employee, for other purposes, such as for instance: a) deduction on behalf of the Employee of the contribution due to the membership in the trade union from the remuneration to which the specific Employee is entitled, b) when the specific Employee benefits from the Employee Savings and Loan Association, c) when the specific Employee benefits from the Company Social Benefits Fund, d) when the specific Employee participates in an incentive scheme for employees recommending candidates for work at Velvet CARE e) when the specific Employee benefits from additional services provided by third parties, such as insurance, medical care, use of sports and recreational facilities, etc.; 2) in relation to its Customers – for purposes related to the proper performance of agreements executed by Velvet CARE with such Customers; 3) in relation to its Guests – for purposes related to ensuring the sufficient level of security of people and property on the premises of the facility based in Klucze. - Velvet CARE stores personal data for periods determined on the basis of the following criteria: 1) in relation to its Employees or former Employees – for periods throughout which Velvet CARE is obliged to store the personal data of its former Employees pursuant to generally applicable legal provisions; 2) in relation to its Customers and former Customers – for the term of the agreement executed with a specific Customer or so, until the satisfaction of all claims to which Velvet CARE is entitled from the Customers or former Customers or until such claims are barred by statute of limitations; 3) in relation to its Guests – until the satisfaction by the Guests of all potential claims to which Velvet CARE may be entitled from the Guests (e.g. when the Guest causes damage to Velvet CARE) or until such claims are barred by statute of limitations; 4) in relation to such individuals who consented to the processing of their personal data – until the effective withdrawal of the consent or when the purpose for which such data is processed expires. - Velvet CARE processes personal data only in such cases where at least one of the premises mentioned below occurs: 1) data subject consents to it, 2) it is necessary for the performance of the agreement executed by Velvet CARE with the data subject, 3) it is necessary for Velvet CARE to fulfil the legal obligation imposed on Velvet CARE, 4) it is necessary for the protection of vital interests of the data subject, 5) it is necessary for purposes stemming from legally justified interests of Velvet CARE or third party. - Velvet CARE may disclose personal data which it processes, at the same time acting as the controller, to third parties only when it is justified due to the original purpose of such data processing, and when it is requisite due to the contents of agreements executed by Velvet CARE with such third parties. Personal data may especially be disclosed by Velvet CARE on behalf of the following categories of recipients: 1) entities with equity, personal or organisational links to Velvet CARE, 2) third parties providing counselling services on behalf of Velvet CARE, for instance auditing, consulting or law companies, 3) insurance companies, 4) companies leasing passenger cars to be used by Employees, 5) third parties providing services directly on behalf of Employees, such as medical care, use of sports and recreational facilities, etc., 6) advertising and marketing agencies – only in relation to the personal data of natural persons who are not the Employees and who consented to receive from Velvet CARE commercial information related to Velvet CARE products and promotional, advertising or marketing activities carried out by Velvet CARE. - Velvet CARE does not intend to send the personal data it processes to third countries or international organisations. - Velvet CARE and its trusted advertising partners process the personal data, including personal data collected through the use of cookies and other similar technologies for marketing purposes in connection with presenting persons whose personal data will be processed with targeted behavioural advertising, i.e. advertisements adjusted to preferences of the person whose personal data will be processed. Actions of Velvet CARE may also consist in display of advertisements to persons who have visited Velvet CARE services on other websites and social networks. Personal data processing is performed based on legitimate interests of Velvet CARE, in connection with the consent provided by the person whose personal data will beprocessed to sending information and access to it on their terminal equipment (the so-called cookie consent). - Velvet CARE does not intend to process personal data based on automated decision-making, including personal data profiling. RIGHTS OF DATA SUBJECTS. - Velvet CARE ascertains that it fully respects and undertakes to exercise all the rights related to or arising from GDPR, to which all data subjects are entitled within the framework of Velvet CARE’s processing of such data. These especially include the following rights: 1) right to access personal data, including the right to obtain the copy of such data; 2) right to demand that personal data be rectified (corrected) – in each and every case when such data is incorrect or incomplete; 3) right to demand that personal data be erased (referred to as “right to be forgotten”) – in each and every case when: a) such data is necessary for purposes for which it has been collected or otherwise processed, b) data subject objected to the processing of their personal data, c) data subject withdrew the consent under which the processing is based and there is no legal basis for the processing, d) data is processed unlawfully, e) data must be erased in order to fulfil the obligation stemming from legal provisions, 4) right to demand that the processing of personal data be restricted when: a) data subject questions the correctness of their personal data, b) data processing is unlawful, and the data subject objects to the erasure of their data, demanding its limitation instead, c) controller no longer needs the data for processing, but the data subject needs it to establish, defend against or assert claims, d) data subject lodged an objection against data processing – until determined whether the legally justified basis on the part of the controller overrides the objection basis, 5) right to personal data portability – when the processing is under the agreement executed with the data subject or consent expressed by such a person, 6) right to object to the processing of personal data, when causes arise related to the special situation of the data subject. - The data subject has the right to withdraw the consent within the scope within which it was given for Velvet CARE to process their personal data. The withdrawal of the consent does not affect the lawfulness of the prior processing of such personal data by Velvet CARE. - If acknowledged that Velvet CARE’s processing of personal data violates the GDPR provisions, each and every data subject has the right to lodge a complaint with the proper supervisory authority. FINAL PROVISIONS - This Policy should also be construed as Velvet CARE’s fulfilment of the information obligation towards data subjects, as specified in Art. 13 GDPR. - This policy is available: 1) at the registered office of Velvet CARE, tj. address: Klucze-Osada 3, 32-310 Klucze; 2) at the office of Velvet CARE in Warszawa, address: ul. Złota 59, 00-120 Warszawa; 3) at Velvet CARE website, i.e. www.velvetcare.com, www.velvet.pl - This Policy enters into force on 25 May 2018.
1.1 2.1 3.1 4.1 5.1 6.1 8.1 10.1 12.1 14.1 15.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 33.1 34.1 34.2 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 45.1 45.2 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 56.2
Ured Adresa Putnička agencija Mihael d.o.o. Pavlinska 5, 42000 Varaždin, Hrvatska Voditelj poslova: Valentina Šimić Radno vrijeme: pon – pet 08.00 – 16.00 sati OIB Telefoni Fax info@mihael-putovanja.hr Podaci za uplatu SWIFT: PBZGHR2X (za inozemne uplate) Model: 00 Poziv na broj: datum puta Svrha uplate: putovanje i Vaše prezime Dokumenti za preuzimanje: Pošaljite upit MIHAEL putnička agencija,d.o.o. SJEDIŠTE: Varaždin, Pavlinska 5 Radno vrijeme: ponedjeljak – petak 08.00 – 16.00 sati Voditelj poslova: Valentina Šimić Nastupa u svojstvu stalno i u punom radnom vremenu zaposlenog voditelja poslova. Ovlaštena je za praćenje poslovanja turističke agencije sukladno odredbama Zakona o pružanju usluga u turizmu. Djelatnost turističke agencije podliježe nadzoru Državnog inspektorata, područni ured Varaždin. Porezni obveznik upisan je u sudski registar: Trgovački sud u Varaždinu pod matičnim brojem MBS: 070077587, temeljem rješenja navedenog suda Tt-07/262-2 od 26.02.2007. Temeljni kapital: 20.000,00 kn uplaćen u cijelosti. Direktor: Milan Kruljac ZAŠTITA PRIVATNOSTI Naziv voditelja obrade: MIHAEL Putnička agencija d.o.o. Adresa: Pavlinska 5, Varaždin OIB: 20054015482 Sukladno Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27.travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka (u daljnjem tekstu Opća uredba o zaštiti podataka), koja je u punoj primjeni od dana 25. svibnja 2018. godine u Republici Hrvatskoj i svim zemljama članicama Europske unije, kao i Zakonu o provedbi Opće uredbe o zaštiti podataka (Narodne novine broj 42/18), odnosno sukladno pravnom okviru zaštite osobnih podataka u Republici Hrvatskoj i Europskoj uniji, Mihael putnička agencija d.o.o. kao voditelj obrade osobnih podataka korisnika svojih usluga, zaposlenika i kupaca, izradilo je Politiku o zaštiti privatnosti osobnih podataka te se u skladu s tim traži Ova privola predstavlja pravnu osnovu za prikupljanje i obradu podataka ispitanika te se smatra dobrovoljnim, informiranim i nedvosmislenim izražavanjem želja ispitanika kojom on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose. Vrste podataka koji se prikupljaju i obrađuju: Podaci koji se prikupljanju i obrađuju su sljedeći: ime i prezime, adresa, osobni identifikacijski broj (OIB), datum rođenja, spol, kontakt broj telefona i/ili mobitela, kontakt podatke elektroničke pošte (e-mail adresa), podaci iz osobne iskaznice i putovnice, podaci o bankovnom računu i broju kartice, podaci iza isplatu odštetnog zahtjeva za osiguravajuću kuću kao I prateća zdravstvena dokumentacija. Svrha prikupljanja i obrade podataka: Navedeni osobni podaci ispitanika, sukladno pravima i obvezama Zakona o pružanju usluga u turizmu te ugovornim obvezama koje proizlaze iz turističke djelatnosti, koriste se isključivo za potrebe pojedinog projekta (putovanja) baziranog na međusobnim ugovorima. Trajanje čuvanja i obrade osobnih podataka: Ovisno o svrsi i pravnoj osnovi temeljem koje se prikupljaju osobni podaci ispitanika, voditelj obrade je u pojedinim slučajevima obvezan čuvati osobne podatke u vremenskom trajanju (razdoblju) koje za pojedinu svrhu propisuju mjerodavni propisi ili prestankom svrhe u koju su prikupljeni. Obveze voditelja obrade prema ispitaniku: Voditelj obrade podataka obvezan je na temelju podnesenog pisanog zahtjeva ispitanika na gore naznačenu adresu voditelja obrade podataka istom omogućiti pristup osobnim podacima koje obrađuje o njemu, ispravak netočnih osobnih podataka, brisanje osobnih podataka ili ograničenje obrade osobnih podataka, kao i upoznati ga s mogućnošću prigovora na obradu osobnih podataka te pravom na prenosivost podataka. Prosljeđivanje podataka trećim osobama: Osobni podaci ispitanika proslijeđuju se trećim osobama (osiguravajućim kućama, hotelima, avio kompanijama, turističkim agencijama i ostalim trećim osobama ovisno o potrebi, odnosno tipu putovanja) koje sudjeluju u organizaciji putovanja te u tu svrhu koriste osobne podatke ispitanika. Prava ispitanika: Ispitanik ima pravo na pristup osobnim podacima. Voditelj obrade dužan je na temelju pisanog zahtjeva ispitanika informirati ispitanika o osobnim podacima koje obrađuje o njima. Ispitanik ima pravo na ispravak netočnih podataka. Voditelj obrade podataka dužan je ispitaniku omogućiti ispravak netočnih osobnih podataka kada je utvrđeno da prikupljeni osobni podaci nisu ispravni ili je došlo do promjene osobnih podataka. Ispitanik ima pravo na brisanje osobnih podataka kada osobni podaci ispitanika više nisu nužni za ispunjenje svrhe obrade, kada ispitanik povuče privolu kao pravni temelj za obradu osobnih podataka, kada ispitanik uloži prigovor na obradu podataka, kada su osobni podaci nezakonito obrađeni, kada se osobni podaci moraju brisati radi ispunjenja pravnih obveza iz prava Europske unije ili prava države članice kojem podliježe voditelj obrade podataka. Ispitanik ima pravo na ograničenje obrade podataka. Voditelj obrade podataka dužan je osigurati ograničenje obrade podataka u slučajevima kada ispitanik osporava točnost podataka, kada je obrada nezakonita, kada voditelj obrade više ne treba osobne podatke za potrebe obrade ili kada ispitanik uloži prigovor na obradu osobnih podataka. Povlačenje privole: Ispitanik ima pravo u bilo kojem trenutku povući ovu privolu. U tom slučaju, voditelj obrade podataka dužan je odmah prestati s obradom podataka, odnosno obrisati ili anonimizirati osobne podatke, osim ako postoji neka druga pravna osnova obrade osobnih podataka. Potpisom ove privole ispitanik izjavljuje da je upoznat sa svrhom prikupljanja osobnih podataka koji se na njega odnose, da je upoznat s identitetom voditelja obrade osobnih podataka, da dobrovoljno stavlja na raspolaganje svoje osobne podatke, da preuzima obvezu obavijestiti voditelja obrade podataka o svakoj promjeni osobnih podataka. Potpisom i pečatom ove privole voditelj obrade podataka obvezuje se čuvati osobne podatke ispitanika i raspolagati njima u skladu sa zakonskim propisima o zaštiti osobnih podataka i određenjima iz ove privole. Ova privola biti će poslana svakom putniku sa ugovorom o putovanju. PRIGOVORI Sukladno Čl. 10. st. 3. NN 41/14 Zakona o zaštiti potrošača obavještavamo potrošače da nezadovoljstvo na kvalitetu naših usluga te pruženu uslugu mogu iskazati prigovorom u pisanoj formi na slijedeći način i to u roku od 8 dana od pružene usluge ili putovanja.: Adresa: Mihael putnička agencija, do.o.o Pavlinska 5, 42000 Varaždin, Hrvatska ili Telefax broj: 00 385 42 302 045 ili putem e-maila: info@mihael-putovanja Odgovor na Vaš prigovor dobit ćete u pisanom obliku najkasnije 15 dana od primitka prigovora. Kako bi se dobio odgovor, molimo podnositelja prigovora da navede: ime i prezime te adresu ili e-mail za dostavu odgovora.