http___mediotehna.hr_hr_contacts__1.xml
1.1 2.1 3.1 3.2 3.3 4.1 5.1 6.1 6.2 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 18.2 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 26.1 27.1 28.1 29.1 29.2 29.3 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 56.2 57.1 58.1 58.2 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 75.2 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 94.2 94.3 95.1 96.1 96.2 96.3 97.1 98.1 98.2 98.3 98.4 98.5 98.6 98.7 98.8 98.9 98.10 98.11 98.12 98.13 98.14 99.1 100.1 100.2 101.1 102.1 102.2 103.1 104.1 104.2 104.3 104.4 104.5 104.6 105.1 106.1 106.2 107.1 108.1 109.1 109.2 110.1 111.1 112.1 113.1 114.1 114.2 115.1 115.2 115.3 115.4 116.1 116.2 117.1 118.1 119.1 119.2 120.1 121.1 121.2 122.1 123.1 123.2 123.3 123.4 124.1 124.2 124.3 124.4 125.1 125.2 126.1 126.2 126.3 126.4 126.5 127.1 128.1 129.1 130.1 130.2 131.1 132.1 133.1 134.1 135.1 135.2 136.1 137.1 138.1 139.1 140.1 141.1 141.2 141.3 141.4 142.1 143.1 143.2 144.1 145.1 146.1 146.2 146.3 146.4 146.5 146.6 146.7 147.1 147.2 148.1 148.2 149.1 149.2 150.1 150.2 150.3 150.4 151.1 152.1 152.2 152.3 153.1 154.1 154.2 154.3 154.4 155.1 156.1 156.2 157.1 157.2 157.3 158.1 158.2 158.3 158.4 158.5 159.1 160.1 160.2 161.1 162.1 163.1 163.2 163.3 163.4 164.1 165.1 165.2 165.3 165.4 165.5 166.1 166.2 167.1 168.1 168.2 168.3 168.4 169.1 169.2 170.1 171.1 171.2 171.3 172.1 172.2 172.3 172.4 173.1 174.1 174.2 174.3 174.4 174.5 175.1 176.1 176.2 177.1 177.2 178.1 178.2 178.3 178.4 178.5 179.1 179.2 179.3 179.4 180.1 180.2 180.3 181.1 181.2 181.3 181.4 181.5 182.1 183.1 184.1 184.2 185.1 185.2 186.1 186.2 187.1 188.1 189.1 189.2 189.3 189.4 189.5 189.6 190.1 191.1 192.1 192.2 192.3 193.1 193.2 193.3 193.4 193.5 194.1 194.2 195.1 196.1 196.2 197.1
Data protection declaration (GDPR) Definitions The data protection declaration of SC Parts Group Ltd. is based on the terms which were used by the European guideline and regulation giver in relation with the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terms used in advance. We use the following terms, among others, in this data protection declaration: Personal data Personal data are all information relating to an identified or identifiable natural person (hereinafter "data subject"). Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Concerned persons Data subject is any identified or identifiable natural person whose personal data are processed by the controller. Processing Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the collection, collection, organisation, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, erasure or destruction. Limitation of processing Restriction of processing is the marking of stored personal data with the aim of restricting their future processing. Profiling Profiling is any form of automated processing of personal data, consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, behaviour, location or relocation of that natural person. Pseudonymisation Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not assigned to an identified or identifiable natural person. The person responsible or the person responsible for the processing The person responsible for processing of data is a natural or legal person, public authority, institution or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States. Contract processors A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Receiver Recipient or receiver is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities which may receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients. Third party A third party is a natural or legal person, authority, institution or other body other than the data subject, the data processor, the data processor and the persons authorised to process the personal data under the direct responsibility of the data processor or the data processor. Consent Consent shall mean any informed and unequivocal expression of will voluntarily given by the data subject in the particular case in the form of a declaration or other clear affirmative act by which the data subject indicates his or her consent to the processing of personal data concerning him or her. General Information and Mandatory Information Data privacy We - SC Parts Group Ltd. - as the operator of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. Note on the responsible body The responsible body for data processing on this website is: SC Parts Group Ltd. 14 Cobham Way, Gatwick Road Crawley, West Sussex RH10 9RX Telephone +44 12 93 84 72 25 E-mail: enquiries@scparts.co.uk Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.). Rights of the data subject under the GDPR Right of information The data subject has the right to request confirmation from the data controller as to whether personal data concerning him or her are being processed; if this is the case, he or she has a right of access to such personal data and to the following information: the processing purposes; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations; if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration; the existence of a right of rectification or deletion of personal data concerning him or of a restriction on processing by the controller or of a right of opposition to such processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from the data subject, all available information on the origin of the data; the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject. Where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of the appropriate guarantees in accordance with Article 46 in relation to the transfer. The controller shall make available a copy of the personal data which are the subject of the processing. For any further copies requested by the data subject, the controller may charge an appropriate fee based on the administrative costs. If the data subject submits the application electronically, the information shall be provided in a common electronic format, unless otherwise indicated. The right to obtain a copy in accordance with paragraph 3 shall not prejudice the rights and freedoms of other persons. Right to correction The data subject shall have the right to request the controller to rectify any inaccurate personal data concerning him/her without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration. Right to cancellation ("Right to oblivion") Any data subject shall have the right to require the data controller to delete any personal data concerning him/her without delay. The person responsible is obliged to delete personal data immediately if one of the following reasons applies: The personal data have been collected or otherwise processed for purposes for which they are no longer necessary. The data subject withdraws his/her consent on which the processing was based pursuant to Article 6(1)(a) GDBR or Article 9(2)(a) GDBR and there is no other legal basis for the processing. The data subject objects to processing under Article 21(1) of the GDBR and there are no overriding legitimate grounds for processing or the data subject objects to processing under Article 21(2) of the GDBR. The personal data have been processed unlawfully. The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject. The personal data was collected in relation to information society services offered in accordance with Article 8 (1) of GDBR. Where the data controller has made the personal data public and is obliged to delete them in accordance with paragraph 1, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data processors who process the personal data that a data subject has requested them to delete all links to such personal data or copies or replications of such personal data. Right to limitation of processing The data subject, you, has the right to require the controller to restrict processing if one of the following conditions is met: The accuracy of the personal data is disputed by the data subject for a period which enables the data controller to verify the accuracy of the personal data, the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted; the data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the enforcement, exercise or defence of legal claims, or the data subject has lodged an objection to the processing referred to in Article 21(1) DSGVO until it has been established whether the data subject's justified grounds outweigh those of the data subject. Right to data transferability The data subject, the person shall have the right to receive the personal data concerning him/her which he/she has provided to a controller in a structured, current and machine-readable format and to transmit such data to another controller without hindrance by the controller to whom the personal data have been provided, provided that the processing is based on a consent pursuant to Article 6(1)(a) GDBR or Article 9(2)(a) GDBR or on a contract pursuant to Article 6(1)(b) GDBR and the processing is carried out using automated procedures. In exercising his right to data transferability under paragraph 1 GDBR, the data subject shall have the right to have the personal data transferred directly by a data controller to another data controller, where technically feasible. The exercise of this right is without prejudice to Article 17 GDBR. This right shall not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller. The right to data transferability shall not affect the rights and freedoms of others. Right of objection The data subject shall have the right to object at any time, including to profiling based on these provisions, to the processing of personal data concerning him/her under Article 6(1)(e) or (f) of the GDBR for reasons arising from his particular situation. The data controller no longer processes the personal data unless he can prove compelling reasons for protection for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him/her for the purposes of such advertising, including profiling in so far as it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. The person concerned must be expressly informed of the law referred to in Article 21(1) and (2) GDPR at the latest at the time of the first communication with him/her; this information must be provided in an understandable form separate from other information. In the context of the use of information society services, notwithstanding Directive 2002/58/EC, the data subject may exercise his right of opposition by means of automated procedures using technical specifications. The data subject shall have the right to object to the processing of personal data relating to him/her for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR on grounds arising from his particular situation, unless such processing is necessary for the performance of a task in the public interest. Automated decisions in individual cases including profiling The data subject shall not be subject to a decision based exclusively on automated processing, including profiling, which has legal effect against him or significantly affects him or her in a similar manner. This does not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and the data controller, is admissible under Union or Member State law to which the data controller is subject and that law contains appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject; or with the express consent of the data subject. In the cases referred to in points (a) and (c), the controller shall take appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to state his own position and to challenge the decision. Decisions may not be based on specific categories of personal data referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights, freedoms and legitimate interests of the data subject. Right of revocation for the data protection consent The data subject has the right to revoke his/her consent to the processing of personal data at any time. If the data subject wishes to exercise his/her right to withdraw his/her consent, he/she may do so by contacting the controller. The legality of the data processing up to the revocation remains unaffected by the revocation. Right of appeal to the competent supervisory authority In the event of breaches of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the country in which our company is based. A list of data protection officers and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. Legal basis of the processing Article 6 (1)a GDPR serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case for example with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Article 6 (I)b GDPR. The same applies to such processing processes that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfil tax obligations, the processing is based on Art. 6 (1) c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information had to be passed on to a doctor, a hospital or other third parties. The processing would then be based on Art. 6 (1)d GDPR. Ultimately, processing operations could be based on Art. 6 (1) f GPPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. Such processing procedures are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the person concerned is a customer of the person responsible (recital reason 47, second sentence, GDPR). Entitled interests in the processing pursued by the controller or a third party If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is to conduct our business for the well-being of all our employees and our shareholders. Duration for which the personal data is stored The criterion for the duration of the storage of personal data is the respective legal retention period. After the expiry of this period, the corresponding data will be routinely deleted, provided that it is no longer necessary for the fulfilment or initiation of the contract. Legal or contractual provisions for the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide them We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In some cases, it may be necessary for a contract to be concluded if a data subject provides us with personal data which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our company enters into a contract with him/her. Failure to provide personal data would mean that the contract with the data subject could not be concluded. Prior to the provision of personal data by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or required for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have. Objection against advertising mails We herewith object to the use of contact data published within the scope of the imprint obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails. Data protection Who is responsible for the data collection on this website? The data processing on this website is carried out by SC Parts Group Ltd.. You can find our contact details in the imprint of this website. What do we use your data for? Part of the data is collected in order to ensure error-free provision of the website, to protect us from cyber attacks or to be able to track them if necessary or to obtain statistical information about visitors to our website. Contact via the website Due to legal regulations, our website contains information that enables you to contact our company electronically quickly and to communicate directly with us, which also includes a general address for so-called electronic mail (e-mail address). If you as the person concerned contact the person responsible for the processing by e-mail or via a contact form on the website, the personal data transmitted by you will be stored automatically. These personal data transmitted voluntarily by you as the person concerned will be stored for the purpose of processing or contacting you. The data entered in the contact form is therefore processed exclusively on the basis of your consent (Article 6 (1) a GDPR. You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation. The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected. Data protection for applications and in the application process We collect and process the personal data of applicants for the purpose of handling the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant sends corresponding application documents to the controller by electronic means, for example by e-mail or via a web form on the website. If an employment contract is concluded between SC Parts Group Ltd. and the applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal regulations. If no employment contract is concluded between SC Parts Group Ltd. and the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that there are no other justified interests to the contrary. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). Cookies Some Internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser the next time you visit our website. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited. Cookies, which are necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping basket function), are stored on the basis of Art. 6 para. 1 lit.f GDPR. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimized provision of his services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these will be treated separately in this data protection declaration. List of cookies we collect This table lists all cookies and describes what information they collect. SSL or TLS encryption This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Encrypted payment transactions on this website Since we do not process payments ourselves, we work together with the following partners. Wirecard as payment method We use the service provider Wirecard for payment processing. Wirecard CCE is an online payment service provider that enables payment by credit card. The operating company of Wirecard CCE is Wirecard Central Eastern Europe GmbH, Reininghausstraße 13a,8020 Graz, Austria. If the customer selects "credit card" as a payment option in our online shop during the order process, the customer is forwarded to a Wirecard CCE web form for payment processing, where he enters his credit card data and transfers them to Wirecard CCE for payment processing. In this case, the following data is recorded: Credit card number, cardholder name, credit card expiry date, CVV number, IP address. In addition the online shop automatically transmits these data to Wirecard CCE. The purpose of data transmission is to process payments and prevent fraud. SC Parts Group Ltd. will transfer personal data to Wirecard CCE in particular if there is a legitimate interest in the transfer. Personal data exchanged between Wirecard CCE and SC Parts Group Ltd. may be transferred by Wirecard CCE to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. Wirecard CCE may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of Wirecard CCE. The customer may revoke his consent to the handling of personal data vis-à-vis Wirecard CCE at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing. The applicable data protection provisions of Wirecard CCE can be found at https://www.wirecard.at/datenschutz/ PayPal as payment method We have integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and provides buyer protection services. PayPal's European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If the person concerned selects "PayPal" as a payment option in our online shop during the order process, the data of the person concerned are automatically transmitted to PayPal. By selecting this payment option, the person concerned consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is usually first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data in connection with the respective order are also necessary for the processing of the purchase contract. The purpose of data transmission is to process payments and prevent fraud. The controller will provide PayPal with personal data, especially if there is a legitimate interest in the transfer. Personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reference agencies. The purpose of this transmission is to verify identity and creditworthiness. PayPal may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of PayPal. The person concerned has the option to revoke his/her consent to the handling of personal data with PayPal at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing. PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full Sofortüberweisung as payment method We have integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment of products and services on the Internet. Sofortüberweisung represents a technical procedure by which the online merchant immediately receives a confirmation of payment. This enables a dealer to deliver goods, services or downloads to the customer immediately after placing the order. The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany. If the customer selects "Sofortüberweisung" as a payment option in our online shop during the order process, the data of the person concerned are automatically transferred to Sofortüberweisung. With a selection of this payment option, the person concerned consents to the transfer of personal data required for payment processing. In the case of purchase transactions via direct bank transfer, the buyer transmits the PIN and the TAN to Sofort GmbH. Immediate transfer then carries out a transfer to the online merchant after a technical check of the account balance and retrieval of further data to check the account cover. The execution of the financial transaction is then automatically communicated to the online merchant. The personal data exchanged by direct bank transfer is first name, surname, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. The purpose of data transmission is to process payments and prevent fraud. The controller will immediately transfer other personal data even if there is a legitimate interest in the transfer. The personal data exchanged between Sofortüberweisung and the controller may be transferred by Sofortüberweisung to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. Sofortüberweisung passes on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of the company. The person concerned has the possibility to revoke his/her consent to the handling of personal data at any time by Sofortüberweisung. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing. The applicable data protection provisions of Sofortüberweisung can be found at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/ Registration on this website You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration. In the event of important changes, such as the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way. The data entered during registration will be processed on the basis of your consent Art. a GDPR. You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing already carried out remains unaffected by the revocation. The data collected during registration is stored by us as long as you are registered on our website and is subsequently deleted. Legal retention periods remain unaffected. Processing of data (customer and contract data) We collect, process and use personal data only to the extent necessary for the establishment, content design or change of the legal relationship (inventory data). This is done on the basis of Art. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our Internet pages (usage data) only to the extent necessary to enable or invoice the user for the use of the service. The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected. Data transfer upon conclusion of contract for online shops, dealers and dispatch of goods We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the company entrusted with the delivery of the goods or the bank entrusted with the payment processing. A further transmission of the data will not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. Google Analytics (with anonymisation function) We have integrated the component Google Analytics (with anonymisation function) on this website. Google Analytics is a web analytics service. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to Internet sites. A web analysis service collects, among other things, data on the website from which a person concerned has accessed a website (so-called referrer), which subpages of the website have been accessed or how often and for how long a subpage has been viewed. A web analysis is mainly used to optimize a website and for cost-benefit analysis of Internet advertising. The Google Analytics component is operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addition, Google shortens and anonymizes the IP address of the Internet connection of the person concerned when accessing our Internet pages from a member state of the European Union or from another state party to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information collected to evaluate the use of our website, among other things, to compile online reports for us that show the activities on our website and to provide other services in connection with the use of our website. Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website is called up, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the person concerned, which serves Google, among other things, to trace the origin of visitors and clicks and subsequently enable commission statements. Cookies are used to store personal information, such as access time, the location from which access came and the frequency of visits to our website by the person concerned. Whenever you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties. The customer can prevent the setting of cookies by our website at any time, as already described above, by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, it is possible for the person concerned to object to and prevent the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the person concerned must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout This browser add-on informs Google Analytics via JavaScript that no data and information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If the person's information technology system is deleted, formatted or reinstalled at a later time, the person concerned must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within their control, it is possible to reinstall or reactivate the browser add-on. Further information and Google's current privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html Google Analytics will be explained in more detail under this link https://www.google.com/intl/de_en/analytics/. Google Analytics Remarketing Our websites use the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables the target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized advertising messages that were adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC). Once you give your permission, Google will link your web and app browsing history to your Google Account for that purpose. This way, the same personalized advertising messages can be delivered to every device you sign in to with your Google Account. To support this feature, Google Analytics collects Google authenticated user IDs that are temporarily linked to our Google Analytics data to define and create cross-device ad targeting. You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google Account by following this link: https://www.google.com/settings/ads/onweb/. The summary of the data collected in your Google Account is based solely on your consent, which you can submit or revoke to Google (Art. 6 par. 1 lit. a GDPR). For data collection operations that are not merged into your Google Account (for example, because you do not have a Google Account or have opposed the merge), the collection of data is based on Article 6(1)f of the GDPR. The legitimate interest arises from the fact that the website operator has an interest in anonymous analysis of website visitors for advertising purposes. Further information and the data protection regulations can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/. Newsletter data If you would like to subscribe to the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for the dispatch of the requested information and do not pass these on to third parties. The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing processes already carried out remains unaffected by the revocation. The data you provide us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this. Changes to our data protection regulations We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply for your next visit. End of the data protection declaration
1.1 2.1 3.1 3.2 3.3 3.4 3.5 3.6 3.7 4.1 4.2 4.3 4.4 4.5 4.6 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 12.2 13.1 14.1 14.2 15.1 16.1 17.1 17.2 18.1 19.1 19.2 20.1 20.2 21.1 21.2 22.1 23.1 23.2
Privola Izjava o davanju suglasnosti za obradu osobnih podataka – Poslovni partneri Mediotehna d.o.o. kao Voditelj zbirke osobnih podataka, obavještava Vas da su Vaši osobni podaci poslani sa web stranice www.mediotehna.hr (dalje u tekstu web stranice) i da će biti obrađeni. Prihvaćanjem ove Izjave smatra se da slobodno i izričito dajete privolu za prikupljanje i daljnju obradu svih Vaših osobnih podataka koje ste unijeli u kontakt obrazac dostupan na web stranicama www.mediotehna.hr kao korisniku putem ovih web stranica u poslovne svrhe. Prihvaćanjem ove Izjave i ustupanjem Vaših osobnih podataka unosom u prijavni obrazac smatra se da ste suglasni s time da će Vaši osobni podaci biti uneseni u našu bazu klijenata. U svakom trenutku možete opozvati danu privolu. Mediotehna d.o.o. s Vašim će osobnim podacima postupati sukladno Zakonu o zaštiti osobnih podataka i općom uredbom o zaštiti osobnih podataka uz primjenu odgovarajućih tehničkih i sigurnosnih mjera zaštite osobnih podataka od neovlaštenog pristupa, zlouporabe, otkrivanja, gubitka ili uništenja. Mediotehna d.o.o.. štiti privatnost svojih korisnika i posjetitelja web stranica, čuva povjerljivost Vaših osobnih podataka te omogućava pristup i priopćavanje osobnih podataka samo onim svojim zaposlenicima kojima su isti potrebni radi provedbe njihovih poslovnih aktivnosti, a trećim osobama samo u slučajevima koji su izričito propisani zakonom. Voditelj zbirke Vaših osobnih podataka registrirani je ured Mediotehna d.o.o. na pravnoj adresi Jure Kaštelana 4, 10 000 Zagreb. U svako doba možete dobiti uvid koji osobni podaci su sačuvani u našoj tvrtci. Napominjemo da možete u svako doba, u potpunosti ili djelomice, bez naknade i objašnjenja odustati od dane privole i zatražiti prestanak aktivnosti obrade te brisanje Vaših osobnih podataka. Opoziv privole možete podnijeti osobno na adresi naše tvrtke, poštom ili e-mailom na adresu: info@mediotehna.hr. Molimo Vas da pažljivo pročitate ovu Izjavu. Prihvaćanjem ove Izjave i ustupanjem Vaših osobnih podataka putem ovih web stranica potvrđujete da ste istu pročitali i razumjeli te dopuštate da Mediotehna d.o.o.kao Voditelj zbirke osobnih podataka, obrađuje i koristi vaše osobne podatke u poslovne svrhe. Ovim putem izričito izjavljujete da imate više od 18 godina i da zakonski možete dati privolu za obradu osobnih podataka kako je to navedeno u ovoj Izjavi. Mediotehna d.o.o. jamči da su prikupljeni osobni podaci cjeloviti, dostupni, a poslovni partner može u bilo koje doba možete zatražiti uvid i izmjenu prikupljenih podataka. Osjetljivi podaci o rasi, spolnoj orijentaciji, religiji i političkim uvjerenjima od Vas se neće zahtijevati ni prikupljati. Mediotehna d.o.o. ne prikuplja biometrijske podatke (otisak prsta, snimka šarenice oka) . Mediotehna d.o.o. kao voditelj zbirke osobnih podataka prikuplja i pohranjuje samo one osobne podatke koji su neophodni za legitimne potrebe poslovanja, a pristup osobnim podacima omogućen je samo onim osobama kojima je to stvarno potrebno, i to samo onim podacima koji im trebaju. Mediotehna d.o.o. se kao Voditelj zbirke osobnih podataka u slučaju povrede osobnih podataka obvezuje bez nepotrebnog odgađanja obavijestiti ispitanika o povredi osobnih podataka Mediotehna d.o.o. je kao voditelj obrade osobnih podataka poduzela odgovarajuće tehnicke, kadrovske i organizacijske mjere zaštite osobnih podataka. Temeljni cilj provedbe opće uredbe o zaštiti osobnih podataka u tvrtci Mediotehna d.o.o. je zaštita povjerljivosti, dostupnosti i integriteta osobnih podataka poslovnih partnera. Pristup i korištenje našeg robno-financijskog modula za srednja i mala poduzeća u kojem su uneseni osobni podaci imaju samo i isključivo zaposlenici naše tvrtke sa svojim individualnim korisničkim imenom i lozinkom. Svi zaposlenici su potpisanom privolom obvezani da osobne podatke neće prosljeđivati trećim stranama i da će pri unosu bilo kakvih osobnih podataka o poslovnim partnerima imati u vidu da unose samo one podatke koji su nužni za potrebe našeg poslovanja, Navedeni zahtjevi i mjere doneseni su u svrhu smanjenja rizika za sigurnost osobnih podataka. Mediotehna d.o.o. se obvezuje najkasnije u roku od 72 sata od saznanja o povredi osobnih podataka o istome obavijestiti nadležno nadzorno tijelo, tj. Agenciju za zaštitu osobnih podataka. Poslovni partner ima pravo na : • transparentnost - pružanje informacija prilikom prikupljanja osobnih podataka kada voditelj obrade osobnih podataka, tj Mediotehne d.o.o. mora među ostalim informacijama obavijestiti ispitanika i o svojem identitetu i kontakt podacima, svrhama obrade i pravnoj osnovi za obradu podataka, primateljima, iznošenju u treće zemlje, razdoblju pohrane, mogućnosti povlačenja privole, itd.; • pristup podacima - dobivanje potvrde od strane voditelja obrade osobnih podataka, tj. Mediotehne d.o.o.obrađuju li se osobni podaci koji se odnose na njega te ako se takvi osobni podaci obrađuju, pristup osobnim podacima i informacije, među ostalim, o obrađenim osobnim podacima, o svrsi obrade, roku pohrane, iznošenju u treće zemlje itd.; • pravo na ispravak - poslovni partner ima pravo od strane voditelja obrade osobnih podataka, tj Mediotehne d.o.o. zahtijevati ispravak netočnih osobnih podataka koji se na njega odnose, a uzimajući u obzir svrhe obrade, ispitanik ima pravo dopuniti nepotpune osobne podatke, među ostalim i davanjem dodatne izjave • brisanje („pravo na zaborav“) poslovni partner ima pravo od voditelja obrade osobnih podataka, tj. Mediotehne d.o.o. ishoditi brisanje osobnih podataka koji se na njega odnose bez nepotrebnog odgađanja te voditelj obrade ima obvezu obrisati osobne podatke ako, među ostalim, osobni podaci više nisu nužni u odnosu na svrhu obrade, ispitanik je povukao privolu za obradu, osobni podaci su nezakonito obrađeni itd. • pravo na ograničenje obrade - u pojedinim situacijama (na primjer kada je točnost podataka osporavana ili kada pravo na brisanju ispitanik želi da voditelj obrade osobnih podataka, tj. Mediotehna d.o.o. zadrži njegove podatke) ispitanik ima pravo zahtijevati da se obrada ograniči uz iznimku pohrane i nekih drugih vrsta obrade • pravo na prenosivost - poslovni partner ima pravo zaprimiti svoje osobne podatke, a koje je prethodno pružio voditelju obrade osobnih podataka,tj. Mediotehni d.o.o. u strukturiranom obliku te u uobičajeno upotrebljavanom i strojno čitljivom formatu te ima pravo prenijeti te podatke drugom voditelju obrade bez ometanja od strane voditelja obrade kojem su osobni podaci pruženi, ako se obrada provodi automatiziranim putem i temelji na privoli ili ugovoru; • pravo na prigovor - poslovni partner ima pravo uložiti prigovor na obradu osobnih podataka Mediotehni d.o.o. ako se ista temelji na zadaće od javnog interesa, na izvršavanje službenih ovlasti voditelja obrade ili na legitimne interesa voditelja obrade (uključujući i profiliranje), tada voditelj obrade ne smije više obrađivati osobne podatke ispitanika osim ako dokaže da njegovi legitimni razlozi za obradu nadilaze interese ispitanika te radi zaštite pravnih zahtjeva, također ako se ispitanik protivi obradi za potrebe izravnog marketinga, osobni podaci više se ne smiju obrađivati; • pravo usprotiviti se donošenju automatiziranih pojedinačnih odluka (profiliranje) - poslovni partner ima pravo od voditelju obrade osobnih podataka,tj. Mediotehne d.o.o. tražiti da se na njega ne odnosi odluka koja se temelji isključivo na automatiziranoj obradi, uključujući izradu profila, koja proizvodi pravne učinke koji se na njega odnose ili na sličan način značajno na njega utječu, osim ako je takva odluka potrebna za sklapanje ili izvršenje ugovora između poslovnog partnera i voditelja obrade podataka, ako je dopuštena pravom EU-a ili nacionalnim pravom koji se propisuju odgovarajuće mjere zaštite prava i sloboda te legitimnih interesa poslovnog partnera ili temeljena na izričitoj privoli ispitanika.