http___lsadriatic.com_polica-privatnosti_18_1.xml
1.1 2.1 3.1 3.2 3.3 4.1 5.1 5.2 6.1 6.2 7.1 8.1 8.2 8.3 8.4 9.1 10.1 10.2 11.1 12.1 12.2 12.3 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1 22.1 22.2 22.3 23.1 24.1 25.1 26.1 27.1 27.2 28.1 28.2 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 41.2 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 49.1 49.2 49.3 50.1 51.1 51.2 52.1 52.2 52.3 53.1 53.2 53.3 54.1 54.2 54.3 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 63.2 63.3 63.4 64.1 65.1 65.2
Last updated May 2018 Privacy Statement Adiuvo Trustees Ltd (hereinafter referred to as the “Firm” or “Adiuvo”) values your privacy and cares about the way in which your personal data is treated. This Privacy Statement has been prepared in accordance with the provisions of the EU General Data Protection Regulation (“GDPR”) and describes how Adiuvo collects and processes data, whether on individuals (individuals who are clients, intermediaries or other third parties that the Firm interacts with, or any individual who is connected to those parties) or otherwise. Where the data held are on individuals, this document also sets out the rights of those individuals in respect of that personal data. Who we are Our Firm is a limited liability company registered in Cyprus in 2012 with Registration Number HE 307693 and has its registered address situated at 165, Spyrou Araouzou, Lordos Waterfront Court, Office 201A, 3036, Limassol, Cyprus. We are regulated and licensed by the Cyprus Bar Association with licence number 624. Adiuvo operates with a head office in Limassol, Cyprus and representation offices located in key technology, business, and financial centres and provides legal, corporate and other related services to clients that can be found here. Our team consists of lawyers, legal and tax consultants, business strategy advisors, immigration experts, specialists in the shipping industry whilst we closely cooperate with accountants, auditors, real estate advisors and Information Technology solution professionals. Are you required to provide personal data? As a general principle, you will provide us with your personal data entirely voluntarily; there are generally no detrimental effects for you if you choose not to consent or to provide personal data. However, there are circumstances in which Adiuvo cannot take action or provide services without certain of your personal data. For example, certain personal information is required to process your instructions, provide you with access to a newsletter or to carry out a legally required compliance screening. In these cases, it will unfortunately not be possible for us to provide you with what you request without the relevant personal information and we will notify you accordingly. What personal information we collect We may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage our legal or other services or as a result of your relationship with one or more of our employees and clients. The categories of data that we collect and process, according to the particulars of each case, may include: - Basic and contact information such as name, surname (including name prefix or title), job title, the company you work for, postal addresses, including your home/residential address, business address, phone and/or fax number(s), and email addresses); - Relevant information as required in order to meet legal, statutory and regulatory requirements, in particular in respect to Know Your Client and/or Anti-Money Laundering regulations and as part of our client intake procedures. This may possibly include evidence of source of funds, financial wealth and assets held, transactions entered into, tax status and financial information, such as payment related information, at the outset of and possibly from time to time throughout our relationship with clients, which we may request and/or obtain from third party sources. The sources for such verification may comprise documentation which we request from you or through the use of online sources or both. - If legally required for compliance purposes, information about relevant and significant disputes, litigation or other legal or court proceedings engaged in or a third party related to you and interaction with you which may be relevant for antitrust purposes; - Personal information provided to us by or on behalf of our clients or generated by us in the course or providing services to them, which may include special categories of data*; - Further business information necessarily processed in a project or client contractual relationship with Adiuvo or voluntarily provided by you, such as instructions given, payments made, requests and projects; - Details of your visits and meetings attended to our premises; - Technical information, such as information from your visits to our website or applications or in relation to materials and communications we send to you electronically; - Information collected from publicly available resources, integrity databases and credit agencies; - any other information relating to you that you may voluntarily provide to us. *Special Category Data – In certain instances, the personal data that the Firm processes may include “Special Category Data” which includes information on a person’s race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data processed for the purpose of uniquely identifying a natural person, health data or data relating to a person’s criminal record or alleged criminal activity. In such instances, legal bases for processing that data may include explicit consent (where the Special Category Data has been provided to the Firm by the data subject for any of the above-listed purposes) or the processing is being necessary for compliance with a legal obligation or for the purposes of legal proceedings or legal advice. Why do we need them The Firm ensures that the data collected and processed is relevant to one or more processing activities and that the Firm does not collect or process more or less data than what is reasonably required for achieving the purpose of each processing activity. Furthermore, for each purpose of processing, there is always at least one lawful basis to secure that the rights of individuals are safeguarded by all means. The purposes of processing and the lawful basis of each processing activity are mainly the following and are analysed in detail in the following table: - To perform our obligations in accordance with any contract that we may have with you. - It is in our legitimate interest or a third party’s legitimate interest to use personal information in such a way to ensure that we provide the Services in the best way that we can. - It is our legal obligation to use your personal information to comply with any legal obligations imposed upon us. With whom we share your personal information We may also share personal information with a variety of the following categories of third parties as necessary. These may include clients, intermediaries, data subjects directly, third parties connected to the data subject (for example, their employer or another service provider who provides services to the data subject) or open-source material. Reasonable endeavours are made to ensure that data is only accessible by those with a need for access to fulfil the purposes set out above. The following is a list of potential recipients of data (in each case including respective employees, directors and officers) is non-exhaustive and there may be other examples where we need to share with other parties in order to provide the services as effectively as we can. - employees of the Firm who have been provided with the appropriate training in order to handle personal data promptly and in compliance with European Union’s GDPR and other applicable laws are acquainted with the GDPR and who have also signed the Firm’s Confidentiality and Non-Disclosure Statement; - other service providers (legal, governance or otherwise, including any bank or financial institution providing services in relation to any matter on which the Firm is instructed) where disclosure to that provider of services is considered necessary to fulfil the purposes set out above; - third parties engaged in the course of the services we provide to clients such as lawyers, accountants, auditors, counsel, arbitrators, mediators, clerks, witnesses, courts, tribunals, opposing party and their lawyers, document review platforms and experts such as tax advisors or valuers; - any sub-contractors, agents or service providers of the Firm; - third parties to whom we outsource certain services such as, without limitation, document processing and translation services, confidential waste disposal, IT systems or software providers, IT Support service providers, document and information storage providers; - Third party service providers to assist us with client insight analytics, such as Google Analytics; - third parties with whom the Firm engages for the hosting of events or other marketing initiatives; - government or regulatory authorities or other governmental or supervisory bodies with a legal right to the material or a legitimate interest in any material; - law enforcement agencies where considered necessary for the Firm to fulfil legal obligations applicable to it; - any registrar of a public register where the data is to be included in a public registry. Third party contractors and other controllers Where the Firm is entering into an engagement with a third party or a sub-contractor pursuant to which data may be processed by that third party, the Firm will seek to enter into an agreement with that third party setting out the respective obligations of each party and it will seek to be reasonably satisfied that the third party has measures in place equal to those of the Firm to protect data against unauthorised or accidental use, access, disclosure, damage, loss or destruction. We conduct an appropriate level of due diligence and put in place contractual documentation in relation to any sub-contractor to ensure that they process personal information appropriately and according to our legal and regulatory obligations. In the event that any such third party is outside of the European Union and where the data being transferred would include personal data which would be protected under applicable Data Protection regulation the Firm will ensure that it meets the relevant requirements of that Data Protection regulation prior to carrying out any such transfer. Period of Retention of data For visitors to the website, we will retain relevant personal information for at least three years from the date of our last interaction with you and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer if we are required to do so according to our regulatory obligations or professional indemnity obligations. For service provision to any client, we will retain relevant personal information for at least six years from the date of our last interaction with that client and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer as we are required to do so according to our regulatory obligations or professional indemnity obligations. We may then destroy such files without further notice or liability. If personal information is only useful for a short period e.g. for specific marketing campaigns, after the fulfilment of the purposes for which the personal data was collected, such data will be destroyed. Your Rights Subject to certain legal conditions, data subjects in the European Union (or any jurisdiction with equivalent legislation to the European Union GDPR) have certain rights in respect of their personal data. Any such data subject wishing to exercise any rights under applicable data protection laws (including the right to withdraw any consent to processing previously given; the right of access to data; or to have data corrected, updated, rectified or erased; or for access to data to be restricted or provided to any third party; or to object to any particular processing; or to lodge a complaint with the relevant supervisory authority; or the right o data portability) should send the request in the first instance to admin@adiuvo-trustees.com. In response to such requests, the Firm reserves the right to require the individual making the request to provide certain details about himself/herself so that the Firm can validate that the individual is indeed the person whom the data refers to. The Firm is required to respond to the request of the individual within 40 days and it will endeavour to do so wherever possible. The Firm reserves the right to charge a reasonable fee to cover any expenses that may arise from the request. In any case in which a data subject chooses not to provide any personal data, or where any of the rights set out above are exercised to limit the processing of personal data, the Firm may be unable to provide relevant services, or there may be restrictions on the services which can be provided. Right of access: If you ask us, we’ll confirm whether we’re processing your personal information and, if necessary, provide you with a copy of that personal information (along with certain other details). If you require additional copies, we may need to charge a reasonable fee. Right to rectification: If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified. If you are entitled to rectification and if we’ve shared your personal information with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly. Right to erasure: You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we’ve shared your personal information with others, we’ll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly. Right to restrict processing; You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information or you object to us. If you are entitled to restriction and if we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly. Right to data portability: You have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice. Right to object: You can ask us to stop processing your personal information, and we will do so, if we are (i) relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or (ii) processing your personal information for direct marketing purposes. Right to withdraw consent: If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time. Right to lodge a complaint with the supervisory authority: If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the relevant Supervisory Authority. Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to reasons of legal professional privilege or professional secrecy obligations. Use of Personal Data in Legal Proceedings If it becomes necessary that the Firm has to take action against you for any reason whatsoever, including but not limited to recovering from you any money you owe to the Firm, you expressly agree that the personal data provided by you can be relied upon in identifying and taking legal action against you. Updates to this Privacy Statement This Privacy Statement was last updated on 24th May 2018. As we may make changes to this Privacy Statement from time to time, Adiuvo reserves the right to keep this Privacy Statement under review in order to ensure that it reflects any changes to the applicable laws or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. In any other case, any changes will appear on our website. How to contact us Adiuvo ensures that your privacy is respected. The Firm has a Data Protection Officer and all enquiries in respect of this Privacy statement or any requests or comments regarding this Privacy Statement should be directed to the Data Protection Officer at admin@adiuvo-trustees.com or via post at our registered address.
1.1 2.1 3.1 4.1 5.1 5.2 6.1 7.1 8.1 9.1 9.2 10.1 11.1 12.1 13.1 14.1 15.1 15.2 16.1 17.1 18.1 19.1 19.2 20.1 20.2 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 27.2 28.1 29.1 30.1 31.1 32.1 33.1 33.2 33.3 34.1 35.1 35.2 36.1 37.1 38.1 39.1 39.2 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 49.2 50.1 51.1 51.2 51.3 52.1 53.1 54.1 55.1 55.2 55.3 55.4 55.5 56.1 56.2 57.1 58.1 59.1 59.2 59.3 60.1 60.2 61.1 61.2 61.3 62.1 63.1 63.2 63.3 64.1 65.1 65.2 65.3 65.4 65.5 65.6 66.1 67.1 68.1 68.2 69.1 69.2 70.1
PRAVNA NAPOMENA Korištenjem www.lsadriatic.com. www.dubrovnik-excursion.com i www.lsadriatic.hr, Internet stranica ili ugovaranjem putovanja i/ili drugih usluga koje pruža LsAdriatic d.o.o. putnička agencija za Vas ili nekog drugog, prihvaćate Opće Uvjete koji se nalaze na linku http://www.lsadriatic.com/about-us/4, te izjavljujete da ste upoznati sa relevantnim odredbama vezanim uz korištenje osobnih podataka u svrhu ugovaranja i realizacije putovanja. Ukoliko niste suglasni s navedenim uvjetima lijepo molimo da nam ne šaljete bilo kakve Vaše osobne podatke ili ugovarate putovanje za sebe ili nekog drugog prije nego razjasnite sve eventualne dvojbe koje biste mogli imati, te nas slobodno zatražite dodatne informacije koje ćemo Vam rado dati putem emaila na info@lsadriatic.com ili +385 20 420392 ZAŠTITA OSOBNIH PODATAKA LsAdriatic d.o.o. putnička agencija, Rudimira Rotera 14, 20000 Dubrovnik kao Voditelj obrade Vaših osobnih podataka svjesna je važnosti navedenog i stoga pridaje izuzetnu pažnju zaštiti osobnih podataka svojih klijenata, u skladu s najboljom poslovnom praksom i važećim hrvatskim i europskim propisima, uključujući i Uredbu GDPR tj. Opću uredbu o zaštiti podataka (Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016.) U nastavku donosimo sve potrebne informacije o načinu obrade i zaštite osobnih podataka i pravima koje klijenti u vezi obrade osobnih podataka imaju. PRIVOLA Iako LsAdriatic d.o.o.. ima zakonski legitimni interes za obradu Vaših podataka i proslijeđivanje trećim stranama kad je to nužno u cilju izvršenja ugovora i pružanja usluga u okviru ugovorenog turističkog paket aranžmana, posebno skrećemo pažnju da će se smatrati da je klijent koji je LsAdriatic d.o.o. dao svoj osobni podatak time izričito iskazao svoju privolu na obradu tih podataka. Napominjemo da ukoliko ugovarate putovanje za druge osobe morate imati njihovu dozvolu za korištenje njihovih osobnih podataka u tu svrhu, odnosno privolu ostalih putnika za koje ugovarate putovanje i čije nam osobne podatke dostavljate. Svakako je bitno da sve putnike za koje ugovarate putovanje informirate o sadržaju ovog dokumenta prije nego nam pošaljete njihove osobne podatke. Ukoliko se ne slažete s bilo kojim navodom ispod, nemojte nam dostavljati nikakve osobne podatke, te Vas pozivamo da nas prije kontaktirate putem emaila info@lsadriatic.com, telefonski na +385 20 420392, te zatražite dodatne informacije koje ćemo Vam rado dati. VRSTE OSOBNIH PODATAKA KOJE PRIKUPLJAMO Prikupljamo samo one podatke koji su nužni za izvršenje svrhe prikupljanja podataka i u skladu s važećim zakonskim propisima. Podaci koje prikupljamo su: ime i prezime, datum rođenja (kako bismo bili u mogućnosti poslati ponudu i izvršiti usluge obuhvaćene Vašim Ugovorom o najmu apartmana, izletu, transferu, putovanju i turističkim paket aranžmanom), broj telefona i email adresu (kako bismo Vas u slučaju potrebe mogli kontaktirati prije, tijekom ili nakon putovanja s različitim informacijama ili pitanjima), OIB i adresu (u svrhu ugovaranja opcionalnog putnog osiguranja), a dodatno i po potrebi možemo tražiti informacije o spolu ukoliko nam nije razumljivo iz imena, državljanstvu (u svrhu davanja relevantnih informacija o potrebnim putnim dokumentima ili putnom osiguranju), Također, ukoliko pošaljete upit ili review putem formulara na Internet stranici sustav će automatski evidentirati i Vašu IP adresu. U određenim nestandardnim situacijama može se stvoriti potreba za obradom posebno zaštićenih kategorija osobnih podataka koji otkrivaju, vjerska ili filozofska uvjerenja, članstvo u sindikatu i podataka koji se odnose na zdravlje klijenta u svrhu pokretanja procedure aktivacije police putnog osiguranja. Navedeni podaci tražit će se isključivo u svrhu izvršenja ugovornih ili poslovnih obveza ili izvršenja ostalih usluga traženih od strane klijenta, odnosno obavljanja radnji koje prethode sklapanju ugovora ili izvršenju obveza tj. usluga. Smatrat će se da je klijent koji je LsAdriatic d.o.o. podatak iz posebne kategorije osobnih podataka time izričito iskazao svoju privolu na obradu takvih podataka. PODRUČJE PRIMJENE Navedeno u ovom dokumentu se primjenjuje na sve osobne podatke klijenata koje LsAdriatic d.o.o. i obrađuje, kao i na sve osobne podatake koje obrađuju LsAdriatic d.o.o. partneri (Hoteli, lokalni agenti, turističke agencije, autobusni prijevoznici, vodiči i pratitelji putovanja, avio kompanije, brodske kompanije i ostali pravni ili fizički subjekti angažirani od strane LsAdriatic d.o.o. za izvršenje usluga predviđenih turističkim paket aranžmanom, programom putovanja ili dodatnih usluga na zahtjev klijenta). Klijentom se smatra osoba koja je od LsAdriatic d.o.o.. zatražila uslugu, ponudu za uslugu, odgovor na upit ili informativni izračun cijene, kao i svaka ona osoba za koju je druga osoba (Ugovaratelj putovanja) ugovorila putovanje ili neku uslugu. Osobni podatak je svaki podatak koji se odnosi na pojedinca čiji je identitet utvrđen ili se može utvrditi (Članak 4. Opće uredbe o zaštiti podataka). Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka (Članak 4. Opće uredbe o zaštiti podataka). RELEVANTNA NAČELA OBRADE OSOBNIH PODATAKA Obrada u skladu sa svrhom prikupljanja podataka: Prikupljene podatke obrađujemo samo u skladu sa svrhom za koje su ti podaci prikupljeni. Ograničenje količine podataka: Prikupljamo i obrađujemo samo one podatke koji su nužni za postizanje svrhe obrade. Zakonita, poštena i transparentna obrada: Podatke obrađujemo u skladu s važećim zakonima koji se odnose na obradu osobnih podataka i u skladu s najboljom poslovnom praksom zaštite podataka. Točnost podataka: Izuzetnu pažnju pridajemo točnosti podataka. Klijent u svakom trenutku ima pravo uvida u podatke i ispravka svojih podataka. Ograničavanje vremena obrade i čuvanja podataka: Podatke obrađujemo i čuvamo samo onoliko dugo koliko je potrebno za ispunjenje svrhe za koju su podaci prikupljeni ili koliko nalažu primjenjivi propisi uz posebnu napomenu da će se određeni podaci poput imena i prezimena, kao i kontakt podaci, te ostali podaci koje ste nam samovoljno ustupili čuvati na maksimalni rok od 5 godina s ciljem udovoljavanja zakonskim regulativama. Sigurnost osobnih podataka: LsAdriatic d.o.o. putnička agencija se obvezuje poštovati privatnost svih svojih klijenata, a svi se podaci o klijentima se strogo čuvaju na lozinkom zaštićenim serverima i/ili računalima, pristup im imaju isključivo zaposlenici LsAdriatic d.o.o. i knjigovodstveni servis, koji su potpisali izjavu o zaštiti osobnih podataka klijenata, koja ih također obvezuje da će sve podatke klijenata koristiti isključivo u svrhu izvršavanja nužnih radnji za izvršenje usluga koje je klijent ugovorio na vlastiti zahtjev. Sve informacije koje korisnik pošalje ili su automatski zabilježene koriste se u skladu s ovom izjavom odnosno Zakonom o zaštiti osobnih podataka i Zakonom o elektroničkim komunikacijama. PRAVA KLIJENATA U skladu s Općom uredbom o zaštiti podataka, klijent ima sljedeća prava: Pravo na pristup podacima Klijent ima pravo dobiti potvrdu obrađujemo li njegove osobne podatke, te ako obrađujemo, ima pravo dobiti sljedeće informacije: informaciju o svrsi obrade, o kategoriji osobnih podataka koje obrađujemo, o primateljima ili kategorijama primatelja podataka koje obrađujemo, o predviđenom razdoblju u kojem će podaci biti pohranjeni ili kriterijima za utvrđivanje tog razdoblja, o pravu da zatraži ispravak, brisanje i ograničenje obrade podataka, o pravu na podnošenje tužbe nadzornom tijelu, informacije o sustavu za automatizirano odlučivanje, poput izrade profila, te o zaštitnim mjerama ako se podaci prenose u treću zemlju. Pravo na ispravak i brisanje Klijent ima pravo zatražiti i ishoditi ispravak netočnih podataka. Klijent ima pravo zatražiti i ishoditi brisanje podataka, osim ako su podaci nužni za svrhu za koju su prikupljeni ili ih je potrebno čuvati prema važećim zakonskim propisima. Global Travel d.o.o. ima obvezu potvrditi klijentu tj. obavijestiti klijenta o promjeni ili brisanju podataka napravljenih na zahtjev klijenta. Pravo na ograničenje obrade Klijent ima pravo ishoditi ograničenje obrade podataka, pod uvjetima definiranima u Općoj uredbi o zaštiti podataka. LsAdriatic d.o.o. ima obvezu obavijestiti klijenta o ograničenju obrade napravljenom na zahtjev klijenta. Pravo na prenosivost podataka Klijent ima pravo zaprimiti podatke koje nam je dostavio u strukturiranom, uobičajenom i strojno čitljivom formatu, te ih prenijeti drugom Voditelju obrade bez ograničenja. Pravo na prigovor Klijent ima u svakom trenutku pravo na prigovor na obradu osobnih podataka. Klijent ima u svakom trenutku pravo na prigovor na izravni marketing, u kom slučaju podatke nećemo koristiti u tu svrhu. Automatizirano donošenje odluka uključujući izradu profila Klijent ima pravo da se na njega ne odnose odluke temeljene na automatiziranoj obradi, uključujući izradu profila. Za realizaciju bilo kojeg od Vaših prava slobodno nam se obratite na mail. info@lsadriatic.com NAČIN PRIKUPLJANJA OSOBNIH PODATAKA Podatke o svojim klijentima prikupljamo na sljedeće načine: Prikupljanje podataka u osobnim putem u poslovnici, telefonski ili putem emaila. Prilikom rezervacije, izrade ponude, pružanja ostalih usluga na zahtjev klijenta ili provedbe pripremnih radnji vezanih uz tražene usluge ili turistički paket aranžman tražimo od klijenta osobne podatke potrebne za izvršenje predmetnog. Klijent svoje podatke može ostaviti osobno, ili u ime drugog klijenta to može napraviti druga osoba (Ugovaratelj putovanja), ali isključivo uz privolu klijenta ili odobrenje klijenta da se za njega može ugovoriti putovanje. Prikupljanje podataka putem Interneta Na našim Internet stranicama prilikom slanja upita ili zahtjeva za rezervacijom prikupljamo podatke potrebne za izradu rezervacije ili ponude. Klijent nam podatke dostavlja putem maila a review svoga obrasca na Internet stranicama. Privola klijenta Privola klijenta znači svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose (Članak 4. Opće uredbe o zaštiti podataka). Bez privole klijenta ili legitimnog interesa nikad nećemo upotrebljavati osobne podatke klijenta ni u kakve svrhe za koje je prema važećim propisima nužna privola. SVRHA PRIKUPLJANJA OSOBNIH PODATAKA Osobne podatke prikupljamo u sljedeće svrhe: Radi izvršenja ugovora ili pripreme za izvršenje ugovora: kako bismo mogli izvršiti uslugu prema klijentu ili kako bismo mogli napraviti ponudu za uslugu klijentu, te radi kasnijeg obavještavanja korisnika o uslugama ili relevantnim informacijama vezanim uz prošlo ili buduće ugovoreno putovanje. Za interne potrebe: Podatke klijenta čuvamo maksimalno do roka od pet godina kako bismo na zahtjev regulatornih vlasti mogli dokazati poslovanje u skladu sa zakonskom regulativom, zaštitili legitimne interese klijenta ili naše legitimne interese, a u skladu s važećim zakonskim propisima. LsAdriatic d.o.o. se obvezuje pritom čuvati isključivo podatke nužne za navedeno. To na primjer može uključivati čuvanje podataka klijenta kako bismo na najbolji način mogli odgovoriti na eventualne prigovore klijenata, upotrebu podataka klijenata radi sprječavanja, otkrivanja i procesuiranja zloupotreba na štetu klijenata ili LsAdriatic d.o.o., osiguravanja sigurnosti zaposlenika, klijenata, proizvoda i usluga LsAdriatic d.o.o., kreiranja usluga i ponuda koje odgovaraju potrebama i željama klijenata, istraživanja i analize tržišta, optimizacije prodajnih kanala, itd. Pravna osnova za obradu podataka u ove svrhe jest legitiman interes LsAdriatic d.o.o., osim kad su od tog interesa jači interes ili temeljna prava i slobode koje zahtijevaju zaštitu podataka klijenta i/ili pravna osnova zaštite ključnih interesa klijenta ili druge fizičke osobe. Iznimka su također svi slučajevi kada je pravna osnova privola. U svrhu ispunjenja zakonskih obveza: Na temelju pisanog zahtjeva utemeljenog na važećim propisima, LsAdriatic d.o.o. je nadležnim državnim tijelima obvezan dostaviti ili omogućiti pristup određenim osobnim podacima klijenata. Pravna osnova za obradu podataka u ove svrhe jest ispunjavanje zakonskih obveza LsAdriatic d.o.o.. PROSLJEĐIVANJE PODATAKA TREĆIM STRANAMA Podatke klijenata prosljeđujemo trećim stranama samo u sljedećim slučajevima: U svrhu izvršenja ugovora ili priprema za izvršenje ugovora s klijentom. Podatke prosljeđujemo trećoj strani kad je to potrebno da bismo klijentu pružili ugovorenu uslugu ili tražene informacije. To na primjer uključuje slanje podataka klijenta hotelu, osiguravajućoj kući, turističkoj agenciji u destinaciji zaduženoj za ugovaranje smještaja (lokalnom agentu), vlasniku smjestaja, prijevozniku, pratitelju putovanja i/ili turističkom vodiču, kada je to potrebno da bi se izvršila usluga ili napravila ponuda za uslugu. Kada je korisnik dao privolu. Podatke prosljeđujemo trećoj strani ako je to potrebno za svrhu za koju je korisnik dao privolu. Kada za obavljanje pojedinih poslova angažiramo podizvođače. Ako za obavljanje pojedinih poslova angažiramo podizvođače kao izvršitelje obrade, u tom slučaju prosljeđujemo osobne podatke podizvođaču. Pritom koristimo podizvođače isključivo s prostora EU i ti podizvođači rade isključivo po nalogu LsAdriatic d.o.o. i po ugovoru sklopljenom s LsAdriatic d.o.o., što osigurava mjere zaštite podatka kao da podatke obrađuje LsAdriatic d.o.o.. ZAŠTITA OSOBNIH PODATAKA U svrhu zaštite osobnih podataka svojih klijenata koristimo najbolje poslovne prakse u području turizma i informacijsko-komunikacijskih tehnologija. Kontinuirano prilagođavamo naše interne procese kako bismo postigli optimalnu razinu zaštite osobnih podataka. Pritom koristimo različite organizacijske mjere i tehnička sredstva zaštite podataka korisnika od neovlaštenog uvida, promjene, gubitka, krađe ili druge zloupotrebe podataka. INTERNETSKA STRANICA Naše internet stranice koriste cookie datoteke kako bi unaprijedili Vaše korisničko iskustvo i optimizirali ga u skladu s Vašim potrebama. Podaci u cookie datotekama i ostali podaci koji se pristupom na stranicu automatski bilježe, a nisu osobni podaci (npr. bounce rate, tip pretraživača, podaci o posjećenosti, vrijeme trajanja posjeta i sl.) LsAdriatic d.o.o. ima pravo koristiti isključivo radi ocjene posjećenosti stranice, te u svrhu unaprijeđenja funkcionalnosti ili sadržaja svojih web stranica. Cookie je tekstualna datoteka koju server snima na vaš tvrdi disk, a koje se ne mogu koristiti da bi naštetili vašem računalu i da bi se pokretali neželjeni programi. Pristupanjem stranici www.lsadriatic.com, www.dubrovnik-excursion.com, www.lsadriatic.hr pristajete na uporabu cookie datoteka u navedene svrhe. Pristupanjem stranici www.lsadriatic.com, www.dubrovnik-excursion.com, www.lsadriatic.hr, Vaša IP adresa može biti evidentirana u svrhu analitike i kasnije analize posjećenosti naših internet stranica. Naše internet stranice mogu sadržavati web linkove, odnosno smjernice na druge Internet stranice koje nisu dio naše stranice, te ne preuzimamo nikakvu odgovornost za sadržaje tuđih stranica. KONTAKT Klijent može ostvariti svoja prava iz Opće uredbe o zaštiti podataka podnošenjem zahtjeva na email adresu info@lsadriatic.com. U skladu sa zakonskim odredbama imate pravo na informaciju o Vašim osobnim podacima koji su pohranjeni u našim bazama podataka, te na ispravak, dopunu ili brisanje osobnih podataka. Ispravak, dopunu i brisanje osobnih podataka vršimo na pismeni zahtjev upućen na email adresu info@lsadriatic.com Ako klijent sumnja na povredu svojih osobnih podataka, može poslati prijavu na email adresu info@lsadriatic.com, u kojem slučaju će LsAdriatic d.o.o. po žurnom postupuku reagirati kako bi otklonio sve eventualne nepravilnosti ili dao dodatne informacije. Klijent također može prijavu podnijeti Agenciji za zaštitu osobnih podataka. Dubrovnik, svibanj 2018.g.