http___lily-tours.com_politika-zastite-osobnih-podataka-klijenata__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 7.3 8.1 9.1 9.2 10.1 10.2 11.1 11.2 11.3 12.1 12.2 13.1 13.2 13.3 13.4 13.5 14.1 14.2 15.1 16.1 17.1 17.2 17.3 17.4 17.5 17.6 17.7 17.8 18.1 19.1 20.1 21.1 22.1 22.2 22.3 22.4 22.5 22.6 22.7 22.8 22.9 22.10 23.1 24.1 24.2 24.3 25.1 25.2 26.1 26.2 27.1 27.2 27.3 28.1 28.2 29.1 30.1 31.1 32.1 32.2 32.3 32.4 33.1 33.2 34.1 35.1 36.1 36.2 36.3 36.4 37.1 38.1 39.1 39.2 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 54.2 55.1 55.2 57.1 59.1 61.1 61.2 63.1 65.1 65.2 67.1 69.1 69.2 69.3 71.1 72.1 73.1 73.2 74.1 74.2 75.1 76.1 77.1 77.2 78.1 79.1 79.2
Privacy Policy Privacy Statement for the BORA – hansgrohe Website (www.bora-hansgrohe.com) The BORA – hansgrohe Website is operated by Denk Pro Cycling GmbH & Co. KG (in the following: DPC), based in Niederndorf, Austria as controller. Data Protection Officer The controller has appointed a Data Protection Officer for this website, who can be reached at: Alexandra Beil, +498035907182, info@pro-cycling-gmbh.de Privacy Policy The protection of personal data plays an important role in our company. Therefore, we operate the BORA – hansgrohe Website consistent with the laws dedicated to the protection of personal data and data security. In the following you will find out which data we eventually collect, how we process and use them and to whom we eventually transfer them. Collection, Processing und Usage of Personal Data When you visit the BORA – hansgrohe Website, we generally find out only anonymous data, like the website from which you visit us, your Internet Service Provider, the sites, which you access on our website, your operating system and your web browser. DPC uses this information solely for statistical purposes and to improve the service on this website. We do not collect any personal data over the BORA – hansgrohe Website, except for, you provide us such data on a voluntary basis - for instance when you contact us, e.g. to receive certain information. Otherwise we only collect, process or use your personal data, if you gave us your explicit consent or if special legal provisions allow this. Usage data, like the Internet Protocol Address and respectively information about the start and duration of usage, are being generated automatically due to the employed technical means. For this reason the named data are mandatory for the communication with you. Data that is no longer needed for communication purposes will be deleted or anonymised by us. We use cookies (currently a UTM Urchin Tracking Module) for purposes of web statistics analysis, hence to ensure a user friendly and need-driven design of the website. You have the possibility to decline the storage of a cookie by setting your Internet Browser to delete any cookies from your computer hard drive, to block all cookies or to warn you before the storage of a cookie. Furthermore data can be stored on the computer of the website user. These data are called "Cookie", which serve to simplify the access behavior of the users. However the user has the option of deactivating this function within the respective web browser. In this case there may be restrictions on the usability of our website. The provider expressly points out that the transmission of data on the Internet (e.g. by e-mail) has security gaps and cannot be 100% protected against access by third parties. The use of the contact details of the provider identification - especially the phone / fax numbers and email address - for commercial advertising is expressly not desired, unless the provider had previously given his written consent or there is already a business contact. In the case of infringement, the provider reserves the right to legal action. YouTube This website uses the YouTube embedding function to show and play back videos of the provider, “YouTube”, which belongs to Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). The privacy-enhanced mode is used, which, according to the provider’s information, activates the storage of user information only when the video/videos is/are played back. If the playback of an embedded YouTube video is started, the provider, “YouTube”, implements cookies to gather information on user behaviour. According to information from “YouTube”, these serve, amongst other things, to capture video statistics, which improve user-friendliness and prevent abusive practices. If you are logged into Google, your data is associated directly with your account if you click on a video. If you do not want the association to be made with your YouTube profile, you must log out before activating the button. Google saves your data (even for users who are not logged in) as a user profile and analyses it. Such an analysis is carried out, in particular, pursuant to point (f) of Article 6(1) GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or the needs-based design of our website. You have a right to object to the creation of this user profile, which you must exercise by contacting YouTube. A connection is made to the Google network “DoubleClick” every time this website is accessed, regardless of whether embedded videos are played back, which can trigger further data-processing events over which we have no influence. Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level. You can find further information on data protection with YouTube in the data protection statement of the provider at: https://policies.google.com/privacy?hl=en&gl=de Google Analytics This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "Cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually sent to a Google server in the USA transferred and stored there. However f IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install. The current link is http://tools.google.com/dlpage/gaoptout?hl=de. Facebook This website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social Plug-in of Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: http://developers.facebook.com/plugins If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by it into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example, click the "Like" button or leave a comment, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be posted on Facebook and displayed to your Facebook friends. Facebook may use this information for the purpose of advertising, market research and tailor-made Facebook pages. For this purpose, Facebook uses usage, interest and relationship profiles, e.g. to evaluate your use of our website in relation to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for the protection of your privacy can be found in the Facebook privacy policy: http://www.facebook.com/policy.php Twitter Functions of the Twitter service are integrated on our sites. These features are provided by Twitter Inc., Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and shared with other users. This data is also transmitted to Twitter. We point out that we as the provider of the pages are not aware of the content of the transmitted data and their use by Twitter. For more information, see the Twitter Privacy Policy at http://twitter.com/privacy. You can change your privacy settings on Twitter in the Account Settings at http://twitter.com/account/settings. Newsletter In order to receive our newsletter, your e-mail address as well as your personal and surname as well as your salutation are required for personalization purposes. Your data provided during the registration will be used exclusively by us for sending the newsletter and will not be passed on to third parties. Before sending the newsletter, you must expressly confirm to us within the framework of the so-called double opt-in procedure that we should activate the newsletter service for you. You will then receive a confirmation and authorization email from us asking you to click on the link in this email to confirm that you wish to receive our newsletter. Of course you will find a corresponding unsubscribe link in each of our newsletters. Purposes of Collection, Processing or Use All personal data, which accumulates while you visit the BORA – hansgrohe Website will be handled compliant with the relevant data protection laws. Your personal data will only be collected, processed or used for the purposes of carrying out your requests as well as for preserving our own commercial interests regarding the need-driven design of the website and other marketing activities. For the maintenance of the BORA – hansgrohe Website as well as for the press work we fall back on the expertise of specialized service providers, who may collect, process or use personal data on our behalf. We or any commissioned third party will not sell your personal data to third parties or merchandise them in a similar other way. Purpose-driven Usage DPC will collect, process and use your personal data only for the purposes that have been communicated to you, unless the collection, processing or usage − takes place for purposes that are directly associated with the original purposes, − is necessary for the preparation, negotiation and fulfilment of a contract with you, − is necessary due to a legal provision or an official order judicial order, − is necessary for purposes of legal protection or for the defence against legal claims, − aim at the prevention of misuse or other illegal actions, that may compromise DPC's systems and with it the data security. Data Security DPC ensures through technical and organisational measures that your personal data is protected against accidental or illegal deletion, alteration or against loss and unauthorised transfer or access. Links DPC is not responsible for the privacy policies or the content of other websites to which links exist. User Rights At any time you have the right to withdraw your consent for the collection, processing or usage of your data, which you gave us with effect for the future. DPC will carry out your motions for disclosure, correction and deletion as well as for other rights readily and within the legal framework. The applicable data protection regulation gives you rights in relation to the controller with regard to the processing of your personal data (access and intervention rights). The information below explains these rights: Right of access pursuant to Article 15 GDPR: In particular, you have the right to information about the personal data we process that concerns you, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data is not collected from the data subject, any available information as to its source, the existence of automated decision-making, including profiling, and, as required, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject, as well as the notification obligation regarding rectification or erasure of personal data or restriction of processing information, which guarantees exist with regard to the sharing of your data with third countries pursuant to Article 46 GDPR; Right to rectification pursuant to Article 16 GDPR: You have a right to obtain from us without undue delay the rectification and/or completion of inaccurate personal data that concerns you; Right to erasure pursuant to Article 17 GDPR: You have the right to have your personal data erased subject to the conditions of Article 17(1) GDPR. However, this right does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or for the establishment, exercise or defence of legal claims; Right to restriction of processing pursuant to Article 18 GDPR: You have the right to the restriction of processing of your personal data, so long as the accuracy of the personal data contested by you is checked, if you oppose the erasure of the personal data due to improper data processing and request the restriction of its use instead; if you need your data for the establishment, exercise or defence of legal claims, since we no longer need this data for the purposes of the processing or if you objected to processing for reasons of your special situation, pending verification of whether the legitimate grounds of the controller override those of the data subject; Notification obligation regarding rectification or erasure of personal data or restriction of processing pursuant to Article 19 GDPR: If you have asserted your right to obtain rectification, erasure or restriction of your personal data from the controller, the controller is obliged to notify all the recipients to whom the personal data affected was disclosed of this rectification or erasure of the data or the restriction of the processing, unless this proves impossible or involves disproportionate effort. You have the right to be notified of these recipients. Right to data portability pursuant to Article 20 GDPR: You have the right to receive the personal data that concerns you, which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit this data to another controller, where technically feasible. Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw consent for processing data at any time with future effect. In the event of withdrawal, we will erase the relevant data with undue delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent up until the point of withdrawal; Right to lodge a complaint pursuant to Article 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. If we process your personal data as part of a consideration of interests on the basis of our predominant legitimate interest, you have the right to object, on grounds of your particular situation, to the processing of personal data that concerns you with future effect. If you exercise your right to object, we will no longer process the data concerned. However, we reserve the right to continue to process the personal data if we can demonstrate compelling legitimate reasons which override your interest, rights and freedoms or for the establishment, exercise or defense of legal claims. If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerned for the purpose of this sort of advertising. You can exercise the right to object as described above. If you exercise your right to object, we will no longer process the data concerned for direct marketing purposes. Duration of storage of personal data The duration of storage of personal data is measured according to the particular statutory retention period (e.g. retention periods concerning tax and commercial law). Once the period has expired, the data concerned is erased as a matter of routine, provided that it is no longer required for the fulfilment or development of a contract and/or there no longer remains a legitimate interest for further retention on our part. Contact For any questions with regard to the processing of your personal data, do not hesitate to contact us directly at DPC. Please find our contact details in the imprint.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 59.3 59.4 60.1 61.1 62.1 63.1 64.1 65.1 66.1 66.2 67.1 68.1 69.1 70.1 70.2 71.1 72.1 72.2 72.3 73.1 74.1 75.1 76.1 77.1 78.1 78.2 78.3
UVODNE ODREDBE Turistička agencija „Lily Tours“ pridaje posebnu pažnju zaštiti osobnih podataka svojih klijenata, u skladu s najboljom poslovnom praksom i važećim hrvatskim i europskim propisima, uključujući i Opću uredbu o zaštiti podataka (Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016.) Cilj ove politike je pružiti svim zainteresiranim stranama sve potrebne informacije o načinu obrade i zaštite osobnih podataka i pravima koje klijenti u vezi obrade osobnih podataka imaju. PODRUČJE PRIMJENE Politika se primjenjuje na sve osobne podatke klijenata koje Turistička agencija „Lily Tours“ prikuplja i obrađuje i podataka koje prikupljaju i obrađuju partneri Turističke agencije „Lily Tours“ u ime i za potrebe „Lily Tours-a“. Klijentom se smatra osoba koja je od Turističke agencije „Lily Tours“ zatražila uslugu ili ponudu za uslugu. Osobni podatak je svaki podatak koji se odnosi na pojedinca čiji je identitet utvrđen ili se može utvrditi (Članak 4. Opće uredbe o zaštiti podataka). Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka (Članak 4. Opće uredbe o zaštiti podataka). NAČELA OBRADE OSOBNIH PODATAKA Zakonita, poštena i transparentna obrada Podatke obrađujemo u skladu s važećim zakonima koji se odnose na obradu osobnih podataka i u skladu s najboljom poslovnom praksom zaštite podataka. Obrada u skladu sa svrhom prikupljanja podataka Prikupljene podatke obrađujemo samo u skladu sa svrhom za koje su ti podaci prikupljeni. Ograničenje količine podataka Prikupljamo i obrađujemo samo one podatke koji su nužni za postizanje svrhe obrade. Točnost podataka Posebnu pažnju pridajemo točnosti prikupljenih podataka. Korisnik u svakom trenutku ima pravo uvida u podatke i ispravka svojih podataka. Ograničavanje vremena obrade i čuvanja podataka Podatke obrađujemo i čuvamo samo onoliko dugo koliko je potrebno za ispunjenje svrhe za koju su podaci prikupljeni ili koliko nalažu primjenjivi propisi. Sigurnost osobnih podataka Pridajemo najveću moguću pažnju sigurnosti osobnih podataka. PRAVA KLIJENATA U skladu s Općom uredbom o zaštiti podataka, klijent ima sljedeća prava: Pravo na pristup podacima Klijent ima pravo dobiti potvrdu obrađujemo li njegove osobne podatke, te ako obrađujemo, ima pravo dobiti sljedeće informacije: informaciju o svrsi obrade, o kategoriji osobnih podataka koje obrađujemo, o primateljima ili kategorijama primatelja podataka koje obrađujemo, o predviđenom razdoblju u kojem će podaci biti pohranjeni ili kriterijima za utvrđivanje tog razdoblja, o pravu da zatraži ispravak, brisanje i ograničenje obrade podataka, o pravu na podnošenje tužbe nadzornom tijelu, , informacije o sustavu za automatizirano odlučivanje, poput izrade profila, o zaštitnim mjerama ako se podaci prenose u treću zemlju. Pravo na ispravak i brisanje Klijent ima pravo ishoditi ispravak netočnih podataka. Klijent ima pravo ishoditi brisanje podataka, osim ako su podaci nužni za svrhu za koju su prikupljeni ili ih je potrebno čuvati prema važećim zakonskim propisima. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o promjeni ili brisanju podataka napravljenih na zahtjev klijenta. Pravo na ograničenje obrade Klijent ima pravo ishoditi ograničenje obrade podataka, pod uvjetima definiranima u Općoj uredbi o zaštiti podataka. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o ograničenju obrade napravljenom na zahtjev klijenta. Pravo na prenosivost podataka Klijent ima pravo zaprimiti podatke koje nam je dostavio u strukturiranom, uobičajenom i strojno čitljivom formatu, te ih prenijeti drugom voditelju obrade bez ograničenja. Pravo na prigovor Klijent ima u svakom trenutku pravo na prigovor na obradu osobnih podataka. Klijent ima u svakom trenutku pravo na prigovor na izravni marketing, u kom slučaju podatke više nećemo koristiti u tu svrhu. Automatizirano donošenje odluka uključujući izradu profila Klijent ima pravo da se na njega ne odnose odluke temeljene na automatiziranoj obradi, uključujući izradu profila. NAČIN PRIKUPLJANJA OSOBNIH PODATAKA Podatke o svojim klijentima prikupljamo na sljedeće načine: Prikupljanje podataka u poslovnicama Prilikom izrade rezervacije ili ponude, tražimo od korisnika osobne podatke potrebne za rezervaciju ili ponudu. Korisnik svoje podatke može ostaviti osobno, ili u ime korisnika to može napraviti druga osoba, ili nam korisnik podatke može javiti telefonom ili mailom. Privola klijenta Privola klijenta znači svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose (Članak 4. Opće uredbe o zaštiti podataka). Bez privole klijenta nikad nećemo upotrebljavati osobne podatke klijenta ni u kakve svrhe za koje je prema važećim propisima nužna privola. VRSTE OSOBNIH PODATAKA KOJE PRIKUPLJAMO Prikupljamo samo one podatke koji su nužni za izvršenje svrhe prikupljanja podataka i u skladu s važećim zakonskim propisima. Podaci koje prikupljamo su: ime i prezime, datum rođenja djece radi ostvarivanja popusta, broj telefona i e-mail adresu radi kontakta, lokacija, spol, državljanstvo, broj putovnice ili drugog odgovarajućeg osobnog dokumenta tamo gdje je to potrebno radi izvršenja zakonskih obveza (npr. kod prelaska granice), broj kreditne kartice ili podatke o drugom sredstvu plaćanja. Zbog prirode putničkih usluga može se dogoditi potreba za obradom posebno zaštićenih kategorija osobnih podataka koji otkrivaju, primjerice, vjerska ili filozofska uvjerenja, članstvo u sindikatu i podataka koji se odnose na zdravlje klijenta i to isključivo u svrhu izvršenja ugovora između Turističke agencije „Lily Tours“ i klijenta, odnosno obavljanja radnji koje prethode sklapanju ugovora. Smatrat će se da je klijent koji je Turističkoj agenciji „Lily Tours“ dao podatak iz posebne kategorije osobnih podataka time izričito iskazao svoju privolu na obradu takvih podataka. SVRHA PRIKUPLJANJA OSOBNIH PODATAKA Osobne podatke prikupljamo u sljedeće svrhe: Radi izvršenja ugovora ili pripreme za izvršenje ugovora Osobne podatke prikupljamo kako bismo mogli izvršiti uslugu prema klijentu ili kako bismo mogli napraviti ponudu za uslugu klijentu. Radi obavještavanja korisnika o uslugama i proizvodima Ako je klijent dao privolu, podatke klijenta možemo upotrebljavati kako bismo klijenta upoznali s našim uslugama i proizvodima koji mogu biti zanimljivi klijentu. Za interne potrebe Podatke klijenta čuvamo kako bismo zaštitili legitimne interese klijenta ili naše legitimne interese, a u skladu s važećim zakonskim propisima. To na primjer može uključivati čuvanje podataka klijenta kako bismo na najbolji način mogli odgovoriti na eventualne prigovore klijenata, upotrebu podataka klijenata radi sprječavanja, otkrivanja i procesuiranja zloupotreba na štetu klijenata ili Turističke agencije „Lily Tours“, osiguravanja sigurnosti zaposlenika, klijenata, proizvoda i usluga Turističke agencije „Lily Tours“, kreiranja usluga i ponuda koje odgovaraju potrebama i željama klijenata, osiguravanja vrhunskog korisničkog iskustva, personalizirane korisničke podrške, istraživanja i analize tržišta, optimizacije prodajnih kanala itd. Pravna osnova za obradu podataka u ove svrhe jest legitiman interes Turističke agencije „Lily Tours“, osim kad su od tog interesa jači interes ili temeljna prava i slobode koje zahtijevaju zaštitu podataka klijenta i/ili pravna osnova zaštite ključnih interesa klijenta ili druge fizičke osobe. Iznimka su slučajevi kada je pravna osnova privola. U svrhu ispunjenja zakonskih obveza Na temelju pisanog zahtjeva utemeljenog na važećim propisima, Turistička agencija „Lily Tours“ je nadležnim državnim tijelima (npr. sudovima, policiji, turističkoj inspekciji itd.) obvezna dostaviti ili omogućiti pristup određenim osobnim podacima klijenata. Pravna osnova za obradu podataka u ove svrhe jest ispunjavanje zakonskih obveza Turističke agencije „Lily Tours“. PROSLJEĐIVANJE PODATAKA TREĆIM STRANAMA Podatke klijenata prosljeđujemo trećim stranama u sljedećim slučajevima: U svrhu izvršenja ugovora ili priprema za izvršenje ugovora s klijentom Podatke prosljeđujemo trećoj strani kad je to potrebno da bismo klijentu pružili ugovorenu uslugu ili tražene informacije. To na primjer uključuje slanje podataka klijenta hotelu ili prijevozniku, kada je to potrebno da bi se izvršila usluga ili napravila ponuda za uslugu. Kada je korisnik dao privolu Podatke prosljeđujemo trećoj strani ako je to potrebno za svrhu za koju je korisnik dao izričitu privolu. Kada za obavljanje pojedinih poslova angažiramo podizvođače Ako za obavljanje pojedinih poslova angažiramo podizvođače kao izvršitelje obrade, u tom slučaju prosljeđujemo osobne podatke podizvođaču. Pritom koristimo podizvođače isključivo s prostora EU i ti podizvođači rade isključivo po nalogu Turističke agencije „Lily Tours“ i po ugovoru sklopljenim s Turističkom agencijom „Lily Tours“, što osigurava mjere zaštite podatka kao da podatke obrađuje Turistička agencija „Lily Tours“. ZAŠTITA OSOBNIH PODATAKA U svrhu zaštite osobnih podataka svojih klijenata koristimo najbolje poslovne prakse u području turizma i informacijsko-komunikacijskih tehnologija. Kontinuirano prilagođavamo naše interne procese kako bismo postigli optimalnu razinu zaštite osobnih podataka. Pritom koristimo različite organizacijske mjere i tehnička sredstva zaštite podataka korisnika od neovlaštenog uvida, promjene, gubitka, krađe ili druge zloupotrebe podataka. KONTAKT Klijent može ostvariti svoja prava iz Opće uredbe o zaštiti podataka podnošenjem zahtjeva na adresu elektroničke pošte info@lily-tours.com Ako klijent sumnja na povredu svojih osobnih podataka, može poslati prijavu na adresu elektroničke pošte info@lily-tours.com Klijent također može prijavu podnijeti Agenciji za zaštitu osobnih podataka. Izmjene, dopune i prijelazne odredbe Politike Politika stupa na snagu i počinje se primjenjivati na dan objave te je dostupna na internetskim stranicama i na prodajnim mjestima Turističke agencije „Lily Tours“. O mogućim izmjenama i dopunama Politike klijenti će biti pravovremeno obaviješteni, uključujući i putem objave na internetskim stranicama. Pravo na prenosivost osobnih podataka, brisanje podataka i ograničenje obrade osobnih podataka klijent ima najkasnije od početka primjene Opće uredbe o zaštiti osobnih podataka, tj. od 25. svibnja 2018. godine.