http___lily-tours.com_politika-zastite-osobnih-podataka-klijenata__1.xml
1.1 2.1 3.1 4.1 5.1 5.2 6.1 6.2 7.1 8.1 8.2 8.3 9.1 9.2 9.3 9.4 10.1 11.1 12.1 12.2 13.1 13.2 14.1 15.1 15.2 15.3 15.4 16.1 16.2 16.3 16.4 17.1 17.2 17.3 17.4 18.1 19.1 19.2 19.3 19.4 19.5 19.6 19.7 20.1 21.1 21.2 21.3 22.1 22.2 22.3 22.4 22.5 22.6 23.1 24.1 24.2 24.3 25.1 26.1 26.2 26.3 27.1 28.1 29.1 29.2 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 36.3 37.1 37.2 37.3 37.4 37.5 38.1 39.1 40.1 40.2 41.1 42.1 42.2 43.1 44.1 44.2 45.1 45.2 46.1 46.2 47.1 48.1 49.1 49.2 50.1 50.2 51.1 51.2 52.1 52.2 53.1 53.2 54.1 54.2 55.1 55.2 56.1 56.2 57.1 57.2 57.3 58.1 58.2 59.1 59.2 59.3 60.1 61.1 61.2 61.3 62.1 63.1 64.1 64.2 65.1 66.1 66.2 66.3 67.1 67.2 68.1 69.1 69.2 70.1 70.2 70.3 71.1 72.1 73.1 74.1 75.1
Privacy Policy Version: 1.0 Last updated: April 2018 About this privacy notice At Open Utility we respect your privacy and commit to protecting your personal data. This “privacy notice” explains what we do with your personal data, why we want to use it, how we protect it, and what rights you have to control our use of it. It applies not just to use of our websites and online services, but also personal data that we process through other interactions with individuals in the course of running our organisation, such as individuals working for our customers, partners and suppliers. Our websites and services are not intended for children and we do not knowingly collect data relating to children. Information about the data controller This privacy notice is for Open Utility Ltd (collectively referred to as "Open Utility", "we", "us" or "our" in this privacy notice). We collect, use and are responsible for certain personal data about you. When we do so we are regulated under the General Data Protection Regulation (“GDPR”), which applies across the European Union (including the United Kingdom) and we are responsible as “data controller” of that personal information for the purposes of the law. Our contact address is 35 Holland Grove, London, SW9 6ER. Our company number is 8384033. We are a software company offering services under the brand name “Piclo”. Our mission is to help transition to a future where distributed renewables and smart systems power our businesses, homes and schools. If you want to contact us about any of the points on this notice, or just generally about how we protect your privacy, please email us at hello@openutility.com. The purpose and lawful basis for processing your personal data, how we collect it and how long we hold it for Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We use personal data from different categories of individual for several different purposes and these each have a different lawful basis. This section describes these in detail and, although it’s technical, we’re required by law to explain this to you. If you visit our websites We use Google Analytics on our website to track visitor numbers and user activity on our site. We record your computer’s IP address so we can tell how each user and repeat visitor is using our site (your IP address is also a piece of your personal data). We do this on the basis that it is necessary for our legitimate interests in tracking website users so that we can improve our service and keep our websites relevant and useful. The IP address information will be held in accordance with Google’s standard procedures. There may be options to download documents or similar. If you choose to do so we will request and store your name, company name and contact details, for the purposes of tracking and understanding the interest in our services and enabling us to send you occasional updates on future thought leadership pieces and research we contribute to. We do this on the basis that it is necessary for our legitimate interests in tracking the efficacy of our thought leadership activities and developing our business. We will hold your details for as long as we continue producing thought leadership pieces, or until you choose to unsubscribe from an email or ask us to delete them. There may be options to “register interest” in Piclo services. If you choose to do so we will request and store your name, company, contact details, as well as some details about your company (which are not personal data), for the purposes of letting you know more about our services in accordance with your request and helping us to understand our customers better. We do this on the basis that it is necessary for our legitimate interests in developing our business and answering customer requests. We will hold your details for as long as we continue developing and offering similar services, or until you choose to unsubscribe from an email or ask us to delete them. If you are a Piclo account holder We will hold your name, company, contact details and IP address. We will also hold some details about the relevant electricity meter points, including address, meter number and tariff information (this will be your ‘personal data’ if you are a residential customer, but not if you are a business customer). You will have provided these details through the account creation process (and we will have collected the IP address automatically) or we may have been provided with them by an authorised third party, such as your energy supplier. We need these details for the following purposes of operating our services. We do this on the basis that it is necessary for our legitimate interests in operating our services for customers who have chosen to receive them. We will hold your data for as long as you hold the account [and for a period of 2 years afterwards]. If you no longer require your account you can email us (see “How to contact us” below). If you receive our email update newsletter We hold your email address for the purpose of sending you updates on Open Utility and industry news. We process this data on the basis that we have your consent. You can withdraw your consent at any time by using the “unsubscribe” links at the bottom of each email. If you work for a customer, partner organisation or industry contact or if you are working in a field relevant to our mission: We may hold your name, company, job title and contact details. We may have been provided with this data by you or your employer or in some cases we may have sourced it from publicly available sources, such as Linkedin and internet searches. We need this data in order to interact with you (or your employer) for the following purposes: Operating and developing our business; Communicating with interested people regarding our industry events, news and developments in our services. We do this on the basis that it is necessary for our legitimate interests in running and growing our business. We will hold your details for as long as we need to interact with you for these purposes. In all cases if you would like us to update or delete your information, please send us an email (see “How to contact us” below). If you are a supplier or work for a supplier We may hold your name and contact details because we have a legitimate interest in doing business with your company. Our purpose for processing your personal data is to interact with you or your employer to procure and pay for goods and services. We will aim to hold this information for as long as we need to interact with you. Whether information has to be provided by you and if so why We need to collect certain personal data from you if wish to receive the benefits of our services or updates. If you do not provide the personal data requested, you will not be able to benefit from those services or updates. In some cases where we are required to collect personal data by law or under a contract with you or your employer, if you fail to provide the personal data requested we will not be able to perform the contract we have or are trying to enter into with you or your employer. Who we share your personal data with Data processors We use a number of different service providers (acting as ‘data processors’) who provide IT and system administration services to enable us to operate our business and the services we provide to our users and partners. Your personal data is transferred to (and stored by) these data processors, who generally fall under the following categories: - Website analytics service providers - Website and data hosting service providers - Document storage service providers - Email, contacts and calendar service providers - CRM service providers - Accounting software service providers For security reasons we do not name all our service providers in this privacy notice. The types of personal data we hold about you (and that may be transferred to our data processors) are set out above. Please contact us (see below) if you want further information on specific data processors or the types of personal data they process for us. Other circumstances in which we may need to share personal data with third partiesWe may also share your personal data with the following third parties in certain circumstances: We will share personal information with law enforcement or other authorities (such as tax authorities) if required by applicable law. We may share personal information with third parties to whom we may choose to sell, transfer, or merge parts of our organisation or our assets. Alternatively, we may seek to acquire other organisations or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice. We may share personal information with professional advisors such as lawyers, accountants or auditors in order to provide legal, accounting or auditing services. We will not sell or rent your information to third parties and we will never share your information with third parties for marketing purposes. International transfers of personal data, and the measures in place to safeguard it We do not directly transfer any of your personal data outside the European Economic Area (EEA). However, some of our data processors may do so and this section explains the impact of these international transfers and how your information is protected. Many of our data processors operate “cloud-based systems”, which means the information is held in information data centres in different locations. All the cloud-based systems we use reserve the right to hold copies of your personal information outside the EEA. Please note that the reason companies may choose to do this is to hold back-up copies, so they can guarantee recovery. In each case our processors and/or we employ one or more of the following means that are designed to help safeguard your privacy rights and give you remedies in the unlikely event of abuse: - Certain processors may only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries. - Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries. - Providers storing data in the US, may be self-certified to the EU-US Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield. Please contact us (see below) if you want further information on the specific mechanisms used by our data processors when transferring your personal data out of the EEA. Your personal data rights The personal data we hold about you is your data, so you have certain rights over the data under the GDPR. This section summarises your rights and how you can exercise them (generally free of charge). You have the right to request a copy of all personal data we hold relating to you. You also have the right to require us to correct any mistakes in the personal data we hold relating to you. Where we are processing your data based on your consent you can withdraw that consent and we must immediately stop processing your data. Please note that up to that point, we’re acting lawfully with your consent, withdrawal of consent cannot be backdated. Where we process your data based on a “legitimate interest” (underlined in the section on “purpose and lawful basis”, above) you still have the right to object to our processing of that data if you feel it impacts on your fundamental rights and freedoms. From that point, we must stop processing your data until we have determined whether your rights override our interests. You also have the right to object where we are processing your personal data for direct marketing purposes. The easiest way to do this is to use the unsubscribe links at the bottom of all marketing emails. In certain situations, you have the right to require us to erase personal data where there is no good reason for us continuing to process it. However, note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. You have the right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) where you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Finally, you have the right to request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format. Note that this right only applies to automated processing of information about you, which we carry out based on your consent or where it is necessary to perform a contract with you. For further information on each of these rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation. If you would like to exercise any of these rights, the easiest way is by dropping us an email (see “How to contact us” below). Please note: We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests quickly, but in any event within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. Your rights to lodge a complaint with the Regulator At all times, you have the right to report a concern or lodge a complaint with the Information Commissioner’s Office. Please refer to the ICO at https://ico.org.uk/concerns/ or by calling them on 0303 123 1113. Of course, we hope that we can resolve your issue quickly and fairly ourselves. Automated processing of your personal data We do not undertake any automated processing of personal data, or profiling. Note that you have a right to object to any decisions being taken through the processing of your personal data by automated means if they produce legal effects concerning you or similarly significant effects on you. We do not use your personal data in a way that makes such decisions. Keeping your personal information secure We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. In addition, we limit access to your personal data to those employees, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so. Other purposes for processing personal data We don’t process your personal data for any other purpose than we’ve described here. We won’t sell your personal data to other companies. As we develop our activities and services, we might add new data processes that use your personal information. Should we decide that we want to develop a new processing purpose, we will contact you to let you know what we intend to do, the lawful basis we will use, and your rights over our intended new processing. We’ll also publish information about it here. Changes to this privacy notice This privacy notice was last updated on 23 March 2018 and historic versions can be obtained by contacting us. We may change this privacy notice from time to time by amending this page. How to contact us If you have any questions, concerns or just want some more information about our privacy management, drop us a line at hello@openutility.com.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 59.3 59.4 60.1 61.1 62.1 63.1 64.1 65.1 66.1 66.2 67.1 68.1 69.1 70.1 70.2 71.1 72.1 72.2 72.3 73.1 74.1 75.1 76.1 77.1 78.1 78.2 78.3
UVODNE ODREDBE Turistička agencija „Lily Tours“ pridaje posebnu pažnju zaštiti osobnih podataka svojih klijenata, u skladu s najboljom poslovnom praksom i važećim hrvatskim i europskim propisima, uključujući i Opću uredbu o zaštiti podataka (Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016.) Cilj ove politike je pružiti svim zainteresiranim stranama sve potrebne informacije o načinu obrade i zaštite osobnih podataka i pravima koje klijenti u vezi obrade osobnih podataka imaju. PODRUČJE PRIMJENE Politika se primjenjuje na sve osobne podatke klijenata koje Turistička agencija „Lily Tours“ prikuplja i obrađuje i podataka koje prikupljaju i obrađuju partneri Turističke agencije „Lily Tours“ u ime i za potrebe „Lily Tours-a“. Klijentom se smatra osoba koja je od Turističke agencije „Lily Tours“ zatražila uslugu ili ponudu za uslugu. Osobni podatak je svaki podatak koji se odnosi na pojedinca čiji je identitet utvrđen ili se može utvrditi (Članak 4. Opće uredbe o zaštiti podataka). Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka (Članak 4. Opće uredbe o zaštiti podataka). NAČELA OBRADE OSOBNIH PODATAKA Zakonita, poštena i transparentna obrada Podatke obrađujemo u skladu s važećim zakonima koji se odnose na obradu osobnih podataka i u skladu s najboljom poslovnom praksom zaštite podataka. Obrada u skladu sa svrhom prikupljanja podataka Prikupljene podatke obrađujemo samo u skladu sa svrhom za koje su ti podaci prikupljeni. Ograničenje količine podataka Prikupljamo i obrađujemo samo one podatke koji su nužni za postizanje svrhe obrade. Točnost podataka Posebnu pažnju pridajemo točnosti prikupljenih podataka. Korisnik u svakom trenutku ima pravo uvida u podatke i ispravka svojih podataka. Ograničavanje vremena obrade i čuvanja podataka Podatke obrađujemo i čuvamo samo onoliko dugo koliko je potrebno za ispunjenje svrhe za koju su podaci prikupljeni ili koliko nalažu primjenjivi propisi. Sigurnost osobnih podataka Pridajemo najveću moguću pažnju sigurnosti osobnih podataka. PRAVA KLIJENATA U skladu s Općom uredbom o zaštiti podataka, klijent ima sljedeća prava: Pravo na pristup podacima Klijent ima pravo dobiti potvrdu obrađujemo li njegove osobne podatke, te ako obrađujemo, ima pravo dobiti sljedeće informacije: informaciju o svrsi obrade, o kategoriji osobnih podataka koje obrađujemo, o primateljima ili kategorijama primatelja podataka koje obrađujemo, o predviđenom razdoblju u kojem će podaci biti pohranjeni ili kriterijima za utvrđivanje tog razdoblja, o pravu da zatraži ispravak, brisanje i ograničenje obrade podataka, o pravu na podnošenje tužbe nadzornom tijelu, , informacije o sustavu za automatizirano odlučivanje, poput izrade profila, o zaštitnim mjerama ako se podaci prenose u treću zemlju. Pravo na ispravak i brisanje Klijent ima pravo ishoditi ispravak netočnih podataka. Klijent ima pravo ishoditi brisanje podataka, osim ako su podaci nužni za svrhu za koju su prikupljeni ili ih je potrebno čuvati prema važećim zakonskim propisima. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o promjeni ili brisanju podataka napravljenih na zahtjev klijenta. Pravo na ograničenje obrade Klijent ima pravo ishoditi ograničenje obrade podataka, pod uvjetima definiranima u Općoj uredbi o zaštiti podataka. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o ograničenju obrade napravljenom na zahtjev klijenta. Pravo na prenosivost podataka Klijent ima pravo zaprimiti podatke koje nam je dostavio u strukturiranom, uobičajenom i strojno čitljivom formatu, te ih prenijeti drugom voditelju obrade bez ograničenja. Pravo na prigovor Klijent ima u svakom trenutku pravo na prigovor na obradu osobnih podataka. Klijent ima u svakom trenutku pravo na prigovor na izravni marketing, u kom slučaju podatke više nećemo koristiti u tu svrhu. Automatizirano donošenje odluka uključujući izradu profila Klijent ima pravo da se na njega ne odnose odluke temeljene na automatiziranoj obradi, uključujući izradu profila. NAČIN PRIKUPLJANJA OSOBNIH PODATAKA Podatke o svojim klijentima prikupljamo na sljedeće načine: Prikupljanje podataka u poslovnicama Prilikom izrade rezervacije ili ponude, tražimo od korisnika osobne podatke potrebne za rezervaciju ili ponudu. Korisnik svoje podatke može ostaviti osobno, ili u ime korisnika to može napraviti druga osoba, ili nam korisnik podatke može javiti telefonom ili mailom. Privola klijenta Privola klijenta znači svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose (Članak 4. Opće uredbe o zaštiti podataka). Bez privole klijenta nikad nećemo upotrebljavati osobne podatke klijenta ni u kakve svrhe za koje je prema važećim propisima nužna privola. VRSTE OSOBNIH PODATAKA KOJE PRIKUPLJAMO Prikupljamo samo one podatke koji su nužni za izvršenje svrhe prikupljanja podataka i u skladu s važećim zakonskim propisima. Podaci koje prikupljamo su: ime i prezime, datum rođenja djece radi ostvarivanja popusta, broj telefona i e-mail adresu radi kontakta, lokacija, spol, državljanstvo, broj putovnice ili drugog odgovarajućeg osobnog dokumenta tamo gdje je to potrebno radi izvršenja zakonskih obveza (npr. kod prelaska granice), broj kreditne kartice ili podatke o drugom sredstvu plaćanja. Zbog prirode putničkih usluga može se dogoditi potreba za obradom posebno zaštićenih kategorija osobnih podataka koji otkrivaju, primjerice, vjerska ili filozofska uvjerenja, članstvo u sindikatu i podataka koji se odnose na zdravlje klijenta i to isključivo u svrhu izvršenja ugovora između Turističke agencije „Lily Tours“ i klijenta, odnosno obavljanja radnji koje prethode sklapanju ugovora. Smatrat će se da je klijent koji je Turističkoj agenciji „Lily Tours“ dao podatak iz posebne kategorije osobnih podataka time izričito iskazao svoju privolu na obradu takvih podataka. SVRHA PRIKUPLJANJA OSOBNIH PODATAKA Osobne podatke prikupljamo u sljedeće svrhe: Radi izvršenja ugovora ili pripreme za izvršenje ugovora Osobne podatke prikupljamo kako bismo mogli izvršiti uslugu prema klijentu ili kako bismo mogli napraviti ponudu za uslugu klijentu. Radi obavještavanja korisnika o uslugama i proizvodima Ako je klijent dao privolu, podatke klijenta možemo upotrebljavati kako bismo klijenta upoznali s našim uslugama i proizvodima koji mogu biti zanimljivi klijentu. Za interne potrebe Podatke klijenta čuvamo kako bismo zaštitili legitimne interese klijenta ili naše legitimne interese, a u skladu s važećim zakonskim propisima. To na primjer može uključivati čuvanje podataka klijenta kako bismo na najbolji način mogli odgovoriti na eventualne prigovore klijenata, upotrebu podataka klijenata radi sprječavanja, otkrivanja i procesuiranja zloupotreba na štetu klijenata ili Turističke agencije „Lily Tours“, osiguravanja sigurnosti zaposlenika, klijenata, proizvoda i usluga Turističke agencije „Lily Tours“, kreiranja usluga i ponuda koje odgovaraju potrebama i željama klijenata, osiguravanja vrhunskog korisničkog iskustva, personalizirane korisničke podrške, istraživanja i analize tržišta, optimizacije prodajnih kanala itd. Pravna osnova za obradu podataka u ove svrhe jest legitiman interes Turističke agencije „Lily Tours“, osim kad su od tog interesa jači interes ili temeljna prava i slobode koje zahtijevaju zaštitu podataka klijenta i/ili pravna osnova zaštite ključnih interesa klijenta ili druge fizičke osobe. Iznimka su slučajevi kada je pravna osnova privola. U svrhu ispunjenja zakonskih obveza Na temelju pisanog zahtjeva utemeljenog na važećim propisima, Turistička agencija „Lily Tours“ je nadležnim državnim tijelima (npr. sudovima, policiji, turističkoj inspekciji itd.) obvezna dostaviti ili omogućiti pristup određenim osobnim podacima klijenata. Pravna osnova za obradu podataka u ove svrhe jest ispunjavanje zakonskih obveza Turističke agencije „Lily Tours“. PROSLJEĐIVANJE PODATAKA TREĆIM STRANAMA Podatke klijenata prosljeđujemo trećim stranama u sljedećim slučajevima: U svrhu izvršenja ugovora ili priprema za izvršenje ugovora s klijentom Podatke prosljeđujemo trećoj strani kad je to potrebno da bismo klijentu pružili ugovorenu uslugu ili tražene informacije. To na primjer uključuje slanje podataka klijenta hotelu ili prijevozniku, kada je to potrebno da bi se izvršila usluga ili napravila ponuda za uslugu. Kada je korisnik dao privolu Podatke prosljeđujemo trećoj strani ako je to potrebno za svrhu za koju je korisnik dao izričitu privolu. Kada za obavljanje pojedinih poslova angažiramo podizvođače Ako za obavljanje pojedinih poslova angažiramo podizvođače kao izvršitelje obrade, u tom slučaju prosljeđujemo osobne podatke podizvođaču. Pritom koristimo podizvođače isključivo s prostora EU i ti podizvođači rade isključivo po nalogu Turističke agencije „Lily Tours“ i po ugovoru sklopljenim s Turističkom agencijom „Lily Tours“, što osigurava mjere zaštite podatka kao da podatke obrađuje Turistička agencija „Lily Tours“. ZAŠTITA OSOBNIH PODATAKA U svrhu zaštite osobnih podataka svojih klijenata koristimo najbolje poslovne prakse u području turizma i informacijsko-komunikacijskih tehnologija. Kontinuirano prilagođavamo naše interne procese kako bismo postigli optimalnu razinu zaštite osobnih podataka. Pritom koristimo različite organizacijske mjere i tehnička sredstva zaštite podataka korisnika od neovlaštenog uvida, promjene, gubitka, krađe ili druge zloupotrebe podataka. KONTAKT Klijent može ostvariti svoja prava iz Opće uredbe o zaštiti podataka podnošenjem zahtjeva na adresu elektroničke pošte info@lily-tours.com Ako klijent sumnja na povredu svojih osobnih podataka, može poslati prijavu na adresu elektroničke pošte info@lily-tours.com Klijent također može prijavu podnijeti Agenciji za zaštitu osobnih podataka. Izmjene, dopune i prijelazne odredbe Politike Politika stupa na snagu i počinje se primjenjivati na dan objave te je dostupna na internetskim stranicama i na prodajnim mjestima Turističke agencije „Lily Tours“. O mogućim izmjenama i dopunama Politike klijenti će biti pravovremeno obaviješteni, uključujući i putem objave na internetskim stranicama. Pravo na prenosivost osobnih podataka, brisanje podataka i ograničenje obrade osobnih podataka klijent ima najkasnije od početka primjene Opće uredbe o zaštiti osobnih podataka, tj. od 25. svibnja 2018. godine.