http___manos.hr_pravila-privatnosti__1.xml
1.1 2.1 3.1 3.2 3.3 4.1 4.2 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 33.3 34.1 35.1 36.1 36.2 37.1 38.1 39.1 40.1 41.1 42.1 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 47.2 48.1 48.2 48.3 49.1 50.1 51.1 51.2 52.1 52.2 52.3 53.1 54.1 54.2 55.1 56.1 57.1 57.2 57.3 58.1 58.2 59.1 60.1 61.1 61.2 62.1 63.1 64.1 65.1 65.2 65.3 66.1 66.2 67.1 68.1 68.2 69.1 70.1 71.1 72.1 73.1 73.2 73.3 74.1 74.2 74.3 74.4 75.1 75.2 76.1 77.1 78.1 79.1 80.1 81.1 81.2 82.1 83.1 83.2 84.1 85.1 86.1 87.1 87.2 87.3 88.1 88.2 88.3 88.4 89.1 89.2 90.1 91.1 92.1 93.1 94.1 95.1 95.2 96.1 97.1 98.1 98.2 99.1 100.1 101.1 102.1 102.2 102.3 103.1 103.2 103.3 103.4 104.1 104.2 105.1 106.1 107.1 108.1 109.1 110.1 110.2 111.1 112.1 112.2 113.1 114.1 115.1 115.2 115.3 116.1 116.2 116.3 116.4 117.1 117.2 118.1 119.1 120.1 121.1 122.1 123.1 123.2 124.1 125.1 125.2 126.1 127.1 128.1 128.2 128.3 129.1 129.2 129.3 130.1 131.1 131.2 132.1 133.1 133.2 134.1 135.1 136.1 137.1 138.1 139.1 139.2 139.3 140.1 141.1 142.1 142.2 142.3 143.1 143.2 144.1 145.1 145.2 146.1 147.1 148.1 149.1 149.2 150.1 150.2 151.1 152.1 152.2 153.1 154.1 155.1 156.1 156.2 156.3 156.4 157.1 157.2 157.3 158.1 158.2 159.1 160.1 161.1 162.1 162.2 163.1 164.1 165.1 166.1 166.2 166.3 167.1 168.1 169.1 169.2 169.3 169.4 169.5 169.6 170.1 171.1 172.1 172.2 173.1 173.2 173.3 174.1 175.1 176.1 177.1 178.1 179.1 179.2 179.3 179.4 180.1 180.2 181.1 182.1 183.1 183.2 184.1 184.2 185.1 186.1 187.1 188.1 189.1 190.1 191.1 192.1 193.1 194.1 195.1 196.1 197.1 198.1 199.1 200.1 201.1 202.1 203.1 204.1 205.1 206.1 207.1 208.1 209.1 209.2 210.1 211.1 212.1 212.2 213.1 213.2 214.1 214.2 214.3 215.1 216.1 217.1 218.1 218.2 219.1 220.1 220.2 221.1 222.1 222.2 222.3 222.4 223.1 223.2 223.3 223.4 223.5 224.1 224.2 224.3 224.4 224.5 224.6 224.7 224.8 225.1 225.2 225.3 225.4 225.5 226.1 226.2 227.1 228.1 229.1 230.1 230.2 230.3 230.4 231.1 231.2 232.1 232.2 232.3 232.4 233.1 233.2 234.1 235.1 236.1 236.2 237.1 237.2 237.3 237.4 237.5 237.6 237.7 238.1 239.1 240.1 240.2 240.3 240.4 240.5 240.6 241.1 242.1 242.2 242.3 242.4 242.5 243.1 244.1 245.1 245.2 245.3 245.4 245.5 246.1 246.2 247.1 247.2 247.3 248.1 249.1 250.1 251.1 251.2 251.3 251.4 251.5 252.1 253.1 254.1 255.1 255.2 256.1 257.1 257.2 257.3 257.4 257.5 258.1 259.1 260.1 261.1 261.2 262.1 262.2 262.3 262.4 263.1 263.2 264.1 265.1 266.1 267.1 268.1 269.1 269.2 269.3 270.1 271.1 272.1 272.2 273.1 274.1 275.1 276.1 277.1 278.1 279.1 282.1
Privacy statement and consent to use of data centrovital | centromed Berlin-Spandau Betriebs GmbH & Co. KG We are glad for your visit to our homepage and thank you for your interest in our company. Our relationship with our customers and interested parties is a matter of trust. The trust placed in us is of very high value to us, and so is also, therefore, the significance and duty of care for your data and protecting it from misuse. So that you may feel secure and comfortable when visiting our website, we take the protection of your personal data and its confidential treatment very seriously. This is why our actions are in accordance with the applicable legal provisions for the protection of personal data and for data security. With these notes about data protection, we would therefore like to inform you of when we save which data, and how we use it – of course, always under observance of the applicable legislation. Data protection at centromed Berlin-Spandau Betriebs GmbH & Co. KG (centrovital Berlin) is especially based on the European General Data Protection Regulation (GDPR). Overview Name and address of the responsible entity Name and address of the data protection officer General items related to data protection Provision of the website and establishing log files Contact/E-mail-contact Online booking via the website Online booking via other websites Conference bookings Purchasing a voucher on the website Newsletter service Counsel, advertising and market research Online evaluation Use of cookies Protection of minors Rights of the data subject Right to complain to a supervisory authority Security Declaration of consent of the user Name and address of the responsible entity The responsible entity, in the sense of the GDPR and other national data protection laws of the Member States, as well as other data protection-related provisions, is: centromed Berlin-Spandau Betriebs GmbH & Co. KG, Neuendorfer Straße 25, D-13585 Berlin, Germany, telephone: +49/30/818 75-0, e-mail: info@centrovital-berlin.de Name and address of the data protection officer The data protection officer of the responsible entity is: Berit Schubert, DataSolution Thurmann GbR, Isarstraße 13, D-14974 Ludwigsfelde, Germany, telephone: +49 (0) 3378 202513, e-mail: mail@hoteldatenschutz.de General items related to data protection Scope of the processing of personal data Fundamentally, we record and use personal data of our users only when this is necessary for the provision of a functional website as well as our content and services. Recording and using personal data of our users is conducted regularly, only after consent from the user. There is an exception in cases where a prior request for consent is not possible for concrete reasons, and the processing of the data is authorised through legal provisions. Provision of the website and establishing log files Descriptions and scope of the data processing At every consultation of our internet site, our system automatically records data and information from the computer system of the consulting computer. The following data is thereby recorded: (1) Information about the browser type and version used (2) The user’s operating system (3) The user’s IP address (4) Date and time of the access (5) Websites from which the user’s system is redirected to our website (6) Websites that are called up by the user’s system via our website The data is saved in our system’s log files. This data is never saved together with other personal data of the user. Personal user profiles cannot be created from it. The saved data is only evaluated for statistical purposes. Legal basis for the data processing The legal basis for the temporary saving of the data and the log files is the article 6 paragraph 1 letter f of the GDPR. Purpose of the data processing The temporary saving of the IP address by the system is necessary to enable the delivery of the website to the user’s computer. For this reason, the user’s IP address must remain saved for the length of the session. The saving in log files is conducted to ensure the functional capacity of the website. In addition, the data helps us optimise the website and ensure the security of our technical information system. In this context, there is no evaluation of the data for marketing purposes. These purposes also constitute our legitimate interest in data processing in accordance with article 6 paragraph 1 letter f of the GDPR. Length of storage The data is deleted as soon as it is no longer necessary to achieve the purpose of its recording. In the case of the data being recorded in order to provide the website, this is the case at the end of the session in question. In the case of the data being saved in log files, this is the case after seven days at the latest. A record lasting longer than this period is possible. In this case, the user’s IP address is deleted or anonymised so that its assignment to the consulting customer is no longer possible. Possibility of opposition and disposal The recording of the data in order to provide the website and the saving of data in log files is absolutely necessary for the operation of the internet site. Therefore, the user has no right to oppose this. Contact/E-mail contact Description and scope of the data processing A contact possibility is present on our internet site, which can be used for electronical communications. If a user makes use of this possibility, they can contact the relevant person via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail is saved in the e-mail system. In this context, there is no transmission of data to third parties. The data is used exclusively to process the conversation. Legal basis for the data processing The legal basis for the data processing, with the consent of the user, is the article 6 paragraph 1 letter a of the GDPR. A further legal basis for the data processing is article 6 paragraph 1 letter f of the GDPR. If the contact request targets the conclusion of a contract, an additional legal basis for the data processing is the article 6 paragraph 1 letter b of the GDPR. Purpose of the data processing For the processing of personal data in the context of a contact request by e-mail, the necessary legitimate interest for processing data is present. Length of storage The data is deleted as soon as it is no longer necessary to achieve the purpose of its recording. In the case of personal data being sent by e-mail, this is the case when the conversation in question with the user is finished. The conversation is finished when the circumstances make it clear that the issue in question has been definitively resolved. If a request for contact concerns a precontractual relationship (offer or reservation request), the data sent will be saved in our hotel software and used for the execution of the contract. If no contractual relationship arises, we delete the data after one year at the year’s end. Possibility of opposition and disposal The user has the possibility, at any time, of opposing the processing of their personal data. For this, we have established the e-mail address widerruf@centrovital-berlin.de. We bring your attention to the fact that in the case of an opposition, the conversation cannot be continued, we cannot establish an offer, etc. In this case, all personal data that was saved in the course of the contact request is deleted. Online booking via the website Description and scope of the data processing Our internet site offers the possibility of booking hotel rooms and arrangements. If a user makes use of this offer, the data entered into the form is sent to us and saved. This data consists of: first name, surname, e-mail address, telephone, address, number of persons staying, provisional arrival time, requests, payment data (credit card), date, time. When you undertake an online booking on our website, this is conducted via the online reservation system of the company HotelNetSolutions GmbH., Genthiner Straße 8, 10785 Berlin, Germany. All the booking data you provide is transmitted in encrypted form. HotelNetSolutions GmbH has committed to complying with the data protection provisions with regards to the data transmitted to them. They have taken all the necessary organisational and technical measures to protect your data. In this context, there is no other transmission of the data to third parties. The data is used exclusively for processing the booking and for communication purposes. Legal basis for the data processing The legal basis for the data processing is the conclusion of a hosting contract with the user in accordance with article 6 paragraph 1 letter b of the GDPR. Purpose of the data processing The processing of the personal data entered into the form solely serves to process the booking request and payment transaction. Length of storage The data is deleted as soon as it is no longer necessary to achieve the purpose of its recording. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual safeguarding period provisions have been observed. Possibility of opposition and disposal The user has the possibility, at any time, of opposing the processing of their personal data. For this, we have established the e-mail address widerruf@centrovital-berlin.de. We bring your attention to the fact that in the case of an opposition, the booking cannot be completed, and the conversation cannot be continued. Online booking via other websites Description and scope of the data processing centrovital Berlin gives interested parties the possibility of booking rooms and arrangements for the hotel via hotel reservation portals (third-party providers). If a user makes use of this possibility, the data they enter into the form will be transmitted to us and saved to the extent that the hotel reservation portal in question allows in accordance with their own data protection provisions. This data can consist of: first name, surname, e-mail address, telephone, address, number of persons staying, provisional arrival time, requests, payment data (credit card). The data provided will be transmitted to our hotel software through a so-called channel manager. All booking data received is transmitted in encrypted form. HotelNetSolutions GmbH, Genthiner Straße 8, D-10785 Berlin, Germany, as provider of the channel manager, has committed to complying with the data protection provisions with regards to the data transmitted. They have taken all the necessary organisational and technical measures to protect your data. In this context, there is no other transmission of the data to third parties. The data is used exclusively for processing the booking and possibly for communication purposes. Legal basis for the data processing The legal basis for the data processing is the conclusion of a hosting contract with the user in accordance with article 6 paragraph 1 letter b of the GDPR. Purpose of the data processing The processing of the personal data entered into the form solely serves to process the booking request and payment transaction. Length of storage The data is deleted as soon as it is no longer necessary to achieve the purpose of its recording. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual safeguarding period provisions have been observed. We have no influence on the storage periods of the hotel reservation portal in question. Possibility of opposition and disposal The user has the possibility, at any time, of opposing the processing of their personal data. For this, we have established the e-mail address widerruf@centrovital-berlin.de. We bring your attention to the fact that in the case of an opposition, the booking cannot be completed, and the conversation cannot be continued. Conference bookings Description and scope of the data processing It is possible to book conferences and events on our internet site. If a user makes use of this possibility, the data entered into the form is sent to us and saved. This data consists of: title/company first name, surname, e-mail address, telephone. When you book a conference or an event on our website, this is conducted through the online ordering platform of the company ZELFMADE GmbH, Paul-Nevermann-Platz 5, D-22765 Hamburg, Germany. All the ordering data you provide will be transmitted in encrypted form. ZELFMADE GmbH has committed to complying with the data protection provisions with regards to your transmitted data. They have taken all the necessary organisational and technical measures to protect your data. In this context, there is no other transmission of the data to third parties. The data is used exclusively for processing the booking and for communication purposes. Legal basis for the data processing The legal basis for the data processing is the conclusion of a purchase contract with the user in accordance with article 6 paragraph 1 letter b of the GDPR. Purpose of the data processing The processing of the personal data entered into the form solely serves to process the booking request and payment transaction. Length of storage The data is deleted as soon as it is no longer necessary to achieve the purpose of its recording. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual safeguarding period provisions have been observed. Possibility of opposition and disposal The user has the possibility, at any time, of opposing the processing of their personal data. For this, we have established the e-mail address widerruf@centrovital-berlin.de. Purchasing a voucher on the website Description and scope of the data processing It is possible to purchase vouchers on our internet site. If a user makes use of this possibility, the data entered into the form is sent to us and saved. This data consists of: title/company first name, surname, date of birth, e-mail address, address, telephone/fax, voucher value, requests, payment details. When you purchase a voucher on our website, this is conducted through the online ordering platform of the company INCERT eTourismus GmbH & Co KG, Leonfeldner Straße 328, A-4040 Linz, Austria. All the ordering data you provide will be transmitted in encrypted form. INCERT has committed to complying with the data protection provisions with regards to your transmitted data. INCERT has taken all the necessary organisational and technical measures to protect your data. In this context, there is no other transmission of the data to third parties. The data is used exclusively for processing the booking and for communication purposes. Legal basis for the data processing The legal basis for the data processing is the conclusion of a purchase contract with the user in accordance with article 6 paragraph 1 letter b of the GDPR. Purpose of the data processing The processing of the personal data entered into the form solely serves to process the booking request and payment transaction. Length of storage The data is deleted as soon as it is no longer necessary to achieve the purpose of its recording. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, statutory or contractual safeguarding period provisions have been observed. Possibility of opposition and disposal The user has the possibility, at any time, of opposing the processing of their personal data. For this, we have established the e-mail address widerruf@centrovital-berlin.de. Newsletter service Description and scope of the data processing It is possible to register for our newsletter service in several ways on our internet site. If a user makes use of this possibility, the data entered into the form is sent to us and saved. This data consists of: e-mail address and optional information such as title, first name, surname, language, preferred destination or subjects. When you register for the newsletter on our website, the data is saved in our newsletter tool by Lianatech GmbH, Prannerstraße 10, D-80333 Munich, Germany. Lianatech GmbH has committed to complying with the data protection provisions with regards to your transmitted data. They have taken all the necessary organisational and technical measures to protect your data. If we receive an e-mail address in another way, where the recipient clearly indicates they wish to receive the newsletter, we will enter their data in the form on our website. In this context, there is no other transmission of the data to third parties. The data is used exclusively for sending newsletters. Legal basis for the data processing The legal basis for the data processing is the presence of the recipient’s consent, in accordance with article 6 paragraph 1 letter a of the GDPR. This is ensured through a double opt-in procedure. Purpose of the data processing The processing of the personal data serves exclusively to send individual newsletters. Length of storage The data is deleted as soon as the newsletter service is cancelled. Possibility of opposition and disposal The user has the possibility, at any time, of opposing the processing of their personal data. The user can cancel the newsletter service with every newsletter. In addition, we have established the e-mail address widerruf@centrovital-berlin.de. Counsel, advertising and market research Description and scope of the data processing For the support, counsel and promotion of corporate customers, in addition to the business partner or potential business partner, we also record and use the contact person’s name, telephone number and the postal address. We receive the information from various sources, either through request (e-mail or telephone), but also through events, trade shows, business cards that our sales employees receive, etc. The data is saved in the CRM modules of our central hotel software. In this context, there is no other transmission of the data to third parties. The data is used exclusively for the purpose described above. Legal basis for the data processing The legal basis for the data processing is the article 6 paragraph 1 letter f of the GDPR. If the contact request aims to create a contract, this becomes an additional legal basis for the processing in accordance with article 6 paragraph 1 letter b of the GDPR. Purpose of the data processing We use this contact data exclusively for our own purposes and for the needs-based design of our own sales activities. Length of storage Fundamentally, no deletion deadline is planned. However, if our company has had no contact with the corporate contact in question for 3 years, the sales department will decide whether the data of the contact partner in the company in question should be deleted. If a request for contact concerns a precontractual relationship (offer or reservation request), the data transmitted will be saved in our hotel software and used for the execution of the contract. If no contractual relationship arises, we delete the data after one year at the year’s end. Possibility of opposition and disposal The corporate contact has the possibility, at any time, of opposing the processing of their personal data. For this, we have established the e-mail address widerruf@centrovital-berlin.de. In this case, all personal data of the contact partner of the business partner in question that is saved will be deleted. Online evaluation Description and scope of the data processing Former guests can leave a review of our hotel after their check-out. For this, we would like to send you an e-mail within 14 days after your departure, to request that you leave a hotel review. Each review can be published in an anonymised form if you prefer. If you did not feel comfortable in our hotel, we would like to take the opportunity to contact you. If you give an online evaluation on our website, the data will be saved in the evaluation tool of the company CA Customer Alliance GmbH, Ullsteinstraße 118 | Turm B, D-12109 Berlin, Germany. Customer Alliance has committed to complying with the data protection provisions with regards to your transmitted data. They have taken all the necessary organisational and technical measures to protect your data. In this context, there is no other transmission of the data to third parties. The data is exclusively used for the publication of the evaluation and arbitration in the case of bad reviews. Legal basis for the data processing The legal basis for the data processing is the article 6 paragraph 1 letter f of the GDPR, i.e. legitimate interest. Purpose of the data processing The purpose of the hotel reviews is to communicate and summarise the opinions of hotel guests on our website, so that interested parties can form their own ideas about our services. In addition, the results are of use in our internal quality management. Length of storage The data is not deleted. Possibility of opposition and disposal It is possible, at any time, to delete the published evaluation (right to be forgotten). For this, we have established the e-mail address widerruf@centrovital-berlin.de. In this case, please tell us which evaluation you would like to have deleted. Use of cookies Description and scope of the data processing Cookies are small files that make it possible to save specific, device-related information on the user’s access device (PC, smartphone or other). They help improve the user-friendliness of websites on the one hand, and thus help the users (for example by saving login data). They also serve to record the statistical data of the website use and make it possible to analyse this data for the purpose of improving our offer. The user can influence the implementation of the cookies. Most browsers have an option with which the saving of cookies can be limited or completely prevented. However, please note that the use and particularly the comfort of use without cookies can be limited. You can manage many online advertisement cookies from companies via the US-American website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/. What are the different types of cookies? - Absolutely necessary cookies – this type of cookies is always activated, as they are necessary for the basic functioning of the website. This includes cookies that can save the course of navigation around the website. - Functionality and performance – with these analytical cookies, the anonymous tracking of user behaviours can help improve the functionality of the website. These cookies can also help queries be answered faster, for example. This includes communication with Facebook, Twitter or other social networks. www.centrovital-berlin.de uses cookies to be able to offer you the desired information and services with optimum quality, as well as to be able to better transmit information and news concerning our website. Legal basis for the data processing The legal basis for the processing of personal data with use of technically necessary cookies is article 6 paragraph 1 letter f of the GDPR. The legal basis for the processing of personal data with use of cookies for analysis purposes is, along with the presence of the user’s consent to this, article 6 paragraph 1 letter a of the GDPR. Purpose of the data processing The purpose of using technically necessary cookies is to simplify the use of websites for the user. Certain functions of our internet site cannot be provided without using cookies. For these, it is necessary for the browser to continue to be recognised, even after a change of page. The user data recorded through technically necessary cookies is not used to create user profiles. Analysis cookies are used with the purpose of improving the quality of our website and its contents. The analysis cookies tell us how the website is used and can thus help us to continuously improve our offer. These purposes also constitute our legitimate interest in the processing of personal data in accordance with article 6 paragraph 1 letter f of the GDPR. Length of storage, possibility of opposition and disposal Cookies are saved on the user’s computer and transmitted from there to our website. Therefore, you as user have full control of the cookies. You have the possibility of changing your cookie settings directly in your browser settings. Alternatively, you can also use the following possibility: Cookies on our website: Our website uses the following cookies: Absolutely necessary content to guarantee fundamental functionality of the website: - CookieConsent: To store the consent to the use of cookies - etracker opt-out: To store the opt-out of etracker - gaopt-out: To store the opt-out of Google Analytics Performance cookies to improve user experience - etracker: Information about all cookies used by etracker can be found here. - Google Analytics - _ga: Used to differentiate users. - _gat: Used to throttle the request rate. - _gid: used to differentiate users. - Google Adwords Conversions - Hotelchamp If cookies are deactivated for our website, all the functions of our website may not be completely usable. If you are worried about cookies of third-party providers, you can refuse these and still receive the cookies that let our website function correctly. You can refuse cookies in each of the main browsers as follows: Mozilla Firefox: http://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&answer=95647&p=cpn_cookies Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11 Safari: http://support.apple.com/kb/PH11913 Please note, however, that in these cases you will be faced with a limited display of the website and a limited user experience. Additional information In addition to the information above about the use of cookies, please note the following: Use of Google Analytics, Google Convers Tracking and Google Remarketing Our internet presence uses Google Analytics, Google Convers Tracking and Google Remarketing. These services are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). Web page improvement Google Analytics This website uses Google Analytics, a web analytic service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google") on the legal basis of overriding legitimate interest (analysis of website use). For this purpose, we have concluded a data processing agreement with Google. When you visit our website, a software creates a connection to the Google servers and transmits data to the Google servers, some of which are located in the USA. Google Analytics uses cookies to store information on the user of the website and to analyze the website use. This website uses the "IP anonymization" functionality. Google truncates and therefore anonymizes your IP-address within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. According to Google, Google uses this information to evaluate your use of the website, to compile reports on website activities, and to provide other services relating to website activity and internet use. Google may also transmit that information to third parties, if this is prescribed by law and to the extent that third parties process such data on behalf of Google. Detailed information on how Google Analytics uses user data can be found in the data privacy statement of Google or Google Analytics. - You can generally block the collection of your user data by adjusting the settings of your browser to "Do Not Track". Our website then takes into account the "Do Not Track" signal, which your browser then sends to all websites. - You can generally block the collection of your user data by Google Analytics by downloading and installing a browser plugin which is available at: https://tools.google.com/dlpage/gaoptout - You can block the collection of your data by Google Analytics only on this website by clicking the following link. This allows you to set an opt-out cookie which blocks the collection of your data if you visit this website again: deactivate Google Analytics. Google AdWords conversion tracking We use Google AdWords to display advertisements on Google and other third-party websites. Conversion tracking helps us determine how successful each ad is. Our purpose is to show you advertisements of interest to you and to make our website more interesting to you. The legal basis for the processing of your data is Article 6 paragraph 1 (f) of the GDPR. The advertising is delivered by Google via what are known as “ad servers”. We use cookies to measure certain performance metrics, such as ads or user clicks. If you access our website via a Google ad, Google Adwords will save a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, typically the unique cookie ID, number of ad impressions per placement (Frequency), last impression (relevant to post-view conversions), and opt-out information (mark that the user does not want to be addressed anymore) are saved as analysis parameters. These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot be tracked via the websites of AdWords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We receive only statistical analyses provided by Google. On the basis of these analyses, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify the users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection to Google's servers. We have no influence over the scope and further use of the data collected by Google and will inform you to the best of our knowledge. By integrating AdWords Conversion Tracking, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a service provided by Google, Google may match the visit to your account. Even if you are not registered with Google or have not logged in, the provider may obtain and store your IP address. You can refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do so, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin Google participates in the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework More information on Google’s Privacy Policy is available here: https://policies.google.com/privacy?hl=en etracker The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. Cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of use-related content or advertising. Cookies are small text files that are stored by the internet browser on the user's device. etracker cookies do not contain any information that enables the identification of a user. The data generated with etracker is processed and stored by etracker solely in Germany on behalf of the provider of this website and is thus subject to strict German and European data protection laws and standards. In this regard, etracker was checked, certified and awarded the ePrivacyseal data protection seal of approval. The data is processed on the legal basis of Article 6 paragraph 1 (f) (legitimate interest) of the EU General Data Protection Regulation (GDPR). Our legitimate interest is the optimisation of our online offer and our website. As the privacy of our visitors is very important to us, etracker anonymises the IP address as early as possible and converts login or device IDs into a unique key that is not linked to a specific person. etracker does not use this for any other purpose, combine this with other data or pass this on to third parties. You may object to the aforementioned processing of your data at any time insofar as it is related to your person. Your objection shall have no detrimental consequences for you. Further information on data protection with etracker can be found here. Google Maps This page uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The use of Google Maps is in the interest of an appealing representation of our online offers and an easy findability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. You can find more information on the handling of user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/ Use of YouTube plugins This website uses plug-ins from the site YouTube, which is owned by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page of this website that features a YouTube plug-in, a connection to YouTube’s servers is established, which will inform the YouTube server which of our web pages you have visited. If you are logged in to your YouTube account, YouTube will be able to update your personal profile with details of your surfing behaviour. You can prevent this by logging out of your YouTube account. For more information on the handling of user data, see YouTube’s privacy policy at https://www.google.de/intl/en/policies/privacy/. Use of hotelchamp We use the services of Hotelchamp, a professional provider of online software and services, to optimize our online booking process and help us to improve and personalize our interaction with you. In providing this service to us and to you, Hotelchamp may process some of your personal information on our behalf. Both Hotelchamp and we value and respect your privacy and we process and protect your personal information in accordance with all applicable laws and regulations. We have entered into a "Data Processing Agreement" with Hotelchamp to make special arrangements for the processing and protection of your personal information. We and Hotelchamp can process data such as your e-mail address, IP address and browser fingerprint in combination with your booking data and your other interactions on our website, to provide you with content and offers that we think are relevant and appealing to you. Facebook-Fanpage Description and scope of the data processing On our Facebook Fanpage at: de-de.facebook.com/centrovital/ we use plugins of the provider Facebook.com, which are operated by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, US. By using the fan page, data is forwarded to the Facebook servers, which contain information about your visits to our fan page. For logged-in Facebook users, this results in the usage data being assigned to their personal Facebook account. As soon as you actively use the Facebook plug-in as a logged-in Facebook user (for example by clicking on the "Like" button or using the comment function), this data will be transferred to your Facebook account and published. This can only be avoided by logging out of your Facebook account. We do not know exactly which data Facebook stores and uses. As a user of the fan page, you must therefore expect that Facebook also saves your actions on the fan page without gaps. Facebook receives your IP address, processor type and browser version by clicking on the "Like" button. Through your IP address, Facebook, along with other data and your real name, if you have given it to your Facebook profile, could identify your identity and habits under that profile. If you always log in to Facebook via this user profile, Facebook could in particular find out your preferences, contacts and lifestyle. Otherwise, the General Terms of Use of Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland under www.facebook.com/terms.php apply. With regard to data protection on Facebook, please note the following privacy policy of Facebook Ireland Limited: www.facebook.com/about/privacy/ Legal basis for the data processing The legal basis for the processing of personal data for analysis purposes is the legitimate interest of the company acc. Art. 6 para. 1 lit. f DSGVO. Purpose of the data processing The use of the analysis tools is for creating statistics for the use of the Facebook-Fanpage. Length of storage, possibility of opposition and disposal Responsible for the duration of the storage, the right of objection and the rights of those affected is Facebook. Please note the following privacy notices of Facebook Ireland Limited: www.facebook.com/about/privacy/. Protection of minors This website is mainly intended for adults. We currently market no special area for children. We therefore knowingly collect neither information about age nor personal data from children under the age of 16. We would, however, like to request of all of the visitors to our website under the age of 16 that they neither disclose nor provide any personal data via our website. If we notice that a child under the age of 16 has provided us with personal information, we shall delete the child’s data from our files, to the extent this is technically possible, in accordance with the Children's Online Privacy Protection Act (see the Federal Trade Commission website at www.ftc.gov/kidzprivacy for more information about this law). Rights of the data subject If personal data of yours is processed, you are the data subject in the sense of the GDPR, and you have the following rights with regards to the responsible entity: You have a right to information about your personal data that is saved, about the purposes of its processing, about any possible transmission to other places and about the period it is saved for. If data is false or no longer necessary for the purpose it was recorded for, you can request its rectification, deletion or the limitation of its processing. To the extent possible according to the processing procedures, you can also view and rectify your data yourself. If there are reasons arising from your particular personal situation to oppose the processing of your personal data, you can oppose it, to the extent that the processing is based on a legitimate interest. In this case, the responsible entity will no longer process your personal data, unless they can prove that there are absolutely necessary, protection-compliant reasons for the processing that are more important than your interests, rights and freedoms, or if the processing serves to enforce, exercise or defend legal claims. If the personal data pertaining to you is processed to run direct advertising, you have the right to oppose the processing of personal data pertaining to you for such advertising purposes, at any time; this also applies to profiling, if it is linked to such direct advertising. If you oppose the processing for advertising purposes or profiling, your personal data will no longer be used for these purposes. You have the right to withdraw your privacy-related declaration of consent at any time. The withdrawal of the consent does not affect the legality of the processing conducted until the withdrawal on the basis of the consent. In case of questions about your rights and how they are respected, please contact the responsible entity or the data protection officer. Right to complain to a supervisory authority As a data subject, you have the right to file a complaint with a supervisory authority for data protection regardless or any other administrative or legal remedy, particularly in the Member State of your place of residence or the place of the presumed breach, if you are of the opinion that the processing of the personal data pertaining to you is in breach of privacy regulations. The supervisory authority with which the complaint is filed shall inform you about the status and the results of your complaint, including the possibility of a legal remedy. Security centrovital Berlin has implemented technical and organisational security measures in accordance with article 32 of the GDPR to protect the data in our care from accidental or deliberate manipulation, loss, destruction or the access of unauthorised persons. Our security measures are continuously improved according to the latest technological developments. Access is only possible for a few authorised persons particularly subject to data security, who are in charge of the technical, administrative or editorial care of the data. Declaration of consent of the user With the use of our website and the offers contained within, you declare to agree with us saving the personal data voluntarily provided by you and processing and using this data in accordance with this privacy statement. We reserve the right to modify, update or add to these privacy guidelines at any time. Modified privacy guidelines only apply to personal data recorded or changed after the validity of the modified guidelines. Version | May 2018 Further questions? Please contact our data protection officer: DataSolution Thurmann GbR Ms Berit Schubert Isarstraße 13 D-14974 Ludwigsfelde E-Mail: centrovital@hoteldatenschutz.de
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 12.1 13.1 13.2 13.3 14.1 15.1 15.2 15.3 16.1 17.1 18.1 19.1 20.1 20.2 21.1 22.1 22.2 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 44.1 45.1 45.2 46.1 47.1 47.2 48.1 49.1 49.2 49.3 50.1 51.1 52.1 53.1 53.2 53.3 53.4 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 73.2 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 84.2 85.1 86.1 87.1 88.1 88.2 89.1 90.1 91.1 92.1 92.2 93.1 93.2 93.3 93.4 93.5 93.6 94.1 94.2 94.3 94.4 95.1 95.2 95.3 95.4 96.1 96.2 96.3 96.4 96.5 96.6 96.7 96.8 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 118.2 119.1 119.2 119.3 120.1 120.2 121.1 121.2 121.3 122.1 122.2 122.3 123.1 123.2 123.3 124.1 124.2 124.3 124.4 124.5 125.1 126.1 126.2 126.3 126.4 127.1 128.1 128.2 128.3 128.4 128.5 128.6 129.1 129.2 129.3 130.1 130.2 130.3 130.4 131.1 131.2 131.3 131.4 132.1 133.1 133.2 133.3 133.4 133.5 134.1 135.1 135.2 135.3 136.1 136.2 137.1 137.2 137.3 137.4 137.5 138.1 138.2 138.3 138.4 139.1 139.2 139.3 140.1 140.2 140.3 140.4 140.5 140.6 141.1 141.2
Pravila privatnosti PRAVILA PRIVATNOSTI Privatnost podataka je od velike važnosti za Manos d.o.o. i želimo biti otvoreni i transparentni s obradom Vaših osobnih podataka. Stoga imamo pravila koja određuju kako će se Vaši osobni podaci obrađivati i zaštititi. Tko je voditelj obrade Vaših osobnih podataka? Voditelj obrade obrađuje Vaše osobne podatke u skladu s važećim pravilima o zaštiti podataka, posebno u skladu s Općom uredbom o zaštiti podataka (EU) 679/2016 (u nastavku: Opća uredba) Voditelj obrade: Ivana Kovačić Manos d.o.o. Zagreb Franje Milićevića 31 Gdje pohranjujemo vaše podatke? Podaci koje prikupimo pohranjujemo unutar Europskog gospodarskog područja (EGP), ali se također mogu prenijeti i obrađivati u zemlji izvan EGP-a. Svaki takav prijenos osobnih podataka provest će se u skladu s primjenjivim zakonima. Za prijenose izvan EGP-a koristimo Standardne ugovorne klauzule i zaštitu privatnosti. Tko pristupiti vašim podacima? Nikad nećemo prosljeđivati, prodavati ili mijenjati vaše podatke u marketinške svrhe trećim stranama izvan voditelja obrade. Podaci koji se prosljeđuju trećim stranama koriste se samo za pružanje naših usluga. U nastavku ćete pronaći koje kategorije trećih strana pod svakim određenim postupkom. Koji je pravni temelj za obradu? Za svaku specifičnu obradu osobnih podataka koje prikupimo obavijestiti ćemo Vas je li pribavljanje osobnih podataka statutarno ili je obvezno za izvršavanje ugovora te da li ste obvezni pružiti osobne podataka te moguće posljedica ako ih odlučite ne pružiti. Koja su vaša prava? Pravo na pristup: Imate pravo zatražiti informacije o Vašim osobnim podacima koje držimo u bilo kojem trenutku. Možete nam se obratiti putem e-maila ili putem telefona. Pravo na prenosivost: Kad god voditelj obrade obrađuje Vaše osobne podatke automatiziranim sredstvima na temelju privole ili na temelju ugovora, imate pravo dobiti kopiju podataka u strukturiranom, uobičajenom obliku i strojno čitljivom formatu, te imate pravo prenijeti te podatke drugom voditelju obrade. To uključuje samo osobne podatke koje ste nam poslali. Pravo na ispravak: Imate pravo zatražiti ispravak Vaših osobnih podataka ako su netočni, uključujući i pravo na dopunjavanje nepotpunih osobnih podataka. Pravo brisanja: Imate pravo u bilo kojem trenutku zatražiti brisanje osobnih podataka koje je voditelj obrade obrađivao sukladno čl. 17. Opće uredbe osim u sljedećim situacijama. Pravo na prigovor na obradu na temelju legitimnog interesa: Imate pravo prigovoriti obradi osobnih podataka koja se temelji na legitimnom interesu voditelja obrade i koji neće nastaviti obrađivati osobne podatke u takve svrhe, osim ako legitimni interes za obradu ne nadilazi interese, prava i slobode ispitanika ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva . Pravo prigovora na izravni marketing: Imate pravo prigovoriti izravnom marketingu, uključujući analizu profiliranja koja je napravljena za izravne marketinške svrhe. Možete se isključiti iz izravnog marketinga na sljedeće načine: slijedeći upute u svakoj marketinškoj pošti putem e-mail-a ili na telefon voditelja obrade Pravo na ograničenje obrade: Imate pravo tražiti da voditelj obrade ograniči obradu Vaših osobnih podataka pod sljedećim okolnostima: ako se suprotstavite legitimnom interesu voditelja obrade da obrađuje osobne podatke, voditelj obrade će ograničiti svu obradu takvih podataka čekajući provjeru legitimnog interesa ako osporavate točnost osobnih podataka, voditelj obrade će ograničiti svu obradu takvih podataka na razdoblje provjere točnosti osobnih podataka ako je obrada nezakonita možete se suprotstaviti brisanju osobnih podataka i zatražiti ograničenje uporabe umjesto svojih osobnih podataka ako voditelj obrade više nema za osobnim podacima za potrebe obrade, ali je to potrebno za vas da postavite, ostvarite ili branite pravne zahtjeve. Kako možete ostvariti svoja prava? Zaštitu podataka shvaćamo vrlo ozbiljno i zato nas možete kontaktirati putem e-maila: dpo@manos.hr Službenik za zaštitu osobnih podataka: Imenovali smo službenika za zaštitu podataka kako bismo osigurali da kontinuirano obrađujemo vaše osobne podatke na otvoren, točan i legalan način. Možete se obratiti našem službeniku za zaštitu podataka na [dpo@manos.hr] i napisati DPO kao predmet ili putem telefona: 01/5615089. Pravo na pritužbu nadzornom tijelu: Ako smatrate da voditelj obrade obrađuje Vaše osobne podatke na nezakoniti način, možete nas kontaktirati. Imate i pravo podnijeti prigovor nadzornom tijelu. Ažuriranja naše obavijesti o privatnosti: Možda ćemo morati ažurirati naša Pravila privatnosti. Najnovija verzija Pravila privatnosti uvijek su dostupna na našoj web stranici. Obavijestit ćemo Vas o svim materijalnim promjenama u Pravilima privatnosti, na primjer promjene svrhe obrade osobnih podataka, identiteta izvršitelja obrade ili vaših prava. SLUŽBA ZA KORISNIKE Zašto koristimo vaše osobne podatke? Koristit ćemo vaše osobne podatke za upravljanje Vašim upitima, za rješavanje pritužbi i jamstva za proizvode i tehničku podršku putem e-pošte, telefona i putem društvenih medija. Internet stranica sadrže forme i informacije koje omogućuju brzi elektronički kontakt s nama, kao i izravnu komunikaciju s nama, što također uključuje i opću adresu tzv. elektronske pošte (e-mail adresu). Ako ispitanik kontaktira voditelja obrade putem e-pošte ili putem obrasca za kontakt, osobni podaci koje je podnio ispitanik automatski se pohranjuju. Takvi osobni podatci koje ispitanik dobrovoljno isporučuje voditelju obrade čuvaju se kod voditelja obrade radi obrade i/ili kontaktiranja nositelja. Nema prijenosa tih osobnih podataka trećim stranama. Možemo vas također kontaktirati ako postoji problem s Vašom narudžbom. Koje vrste osobnih podataka obrađujemo? Obradit ćemo sve podatke koje nam date, uključujući sljedeće kategorije * kontaktne informacije kao što su ime, adresa, adresa e-pošte i telefonski broj * datum rođenja * podaci o plaćanju i povijest plaćanja * kreditne informacije * informacije narudžbe * račun ili broj člana u klubu * sva korespondencija u vezi sa upitom Tko ima pristup vašim osobnim podacima? Podaci koji se prosljeđuju trećim stranama koriste se samo za pružanje navedenih usluga. Koji je pravni temelj za obradu vaših osobnih podataka? Obrada Vaših osobnih podataka temelji se na zakonitom interesu voditelja obrade. Vaše pravo na prigovor na obradu na temelju legitimnog interesa: Imate pravo prigovoriti obradi osobnih podataka koja se temelji na legitimnom interesu voditelja obrade i koji neće nastaviti obrađivati osobne podatke u takve svrhe, osim ako legitimni interes za obradu ne nadilazi interese, prava i slobode ispitanika ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva . SPRJEČAVANJE ZLOUPORABE I KAŽNJIVIH DJELA Zašto koristimo vaše osobne podatke? Koristit ćemo Vaše osobne podatke kako bismo osigurali da poštujete prava i obveze iz našeg odnosa, a kako bismo spriječili gubitak podataka kroz menadžment sigurnosti podataka i kako bismo spriječili zlouporabu naših usluga. Također ćemo koristiti Vaše osobne podatke putem video nadzora iz sigurnosnih razloga. Ovi će se podaci koristiti za praćenje incidenata i sprečavanje i prijavljivanje kaznenih djela u našim trgovinama. Vaši će se osobni podaci upotrebljavati za sprječavanje i za istragu zloupotrebe naših usluga na Internetu, gubitaka i prijevara. Koje vrste osobnih podataka obrađujemo? Obradit ćemo sljedeće kategorije osobnih podataka: • kontaktne informacije kao što su ime, adresa, telefonski broj i e-mail adresa • video snimke • povijest narudžbi • informacije o dostavi • povijest plaćanja Tko ima pristup vašim osobnim podacima? Vaši osobni podaci, koji su proslijeđeni trećim stranama koriste se samo za gore navedene svrhe. Osobni podaci koji su bitni za obradu incidenata i prijevara mogu se dijeliti s osiguravajućim društvima, upravnim i sudskim tijelima te (lokalnim ili globalnim) izvršnim vlastima za dovršetak istrage. Imajte na umu da takvi primatelji imaju neovisno pravo ili obvezu obrade Vaših osobnih podataka. Koji je pravni temelj za obradu vaših osobnih podataka? Obrada Vaših osobnih podataka kako bi se spriječila zlouporaba naših usluga temelji se na našem legitimnom interesu. Koliko dugo spremamo vaše podatke? Vaše podatke čuvamo za vrijeme koje trebamo spriječiti i/ili prijaviti potencijalne prijevare i druge prekršaje. Video snimke bit će spremljene u skladu s važećem zakonu, najviše 6 mjeseci. Vaše pravo na odbijanje obrade vaših podataka: Imate pravo prigovoriti obradi vaših osobnih podataka koji se temelje na legitimnim interesima voditelja obrade tako što ćete kontaktirati na dpo@manos.hr ili na telefon 01/5615089. KOLAČIĆI Naša web stranica koristi kolačiće. Kolačići su tekstualne datoteke koje se pohranjuju u računalni sustav putem internetskog preglednika. Mnoge web stranice i poslužitelji koriste kolačiće. Mnogi kolačići sadrže takozvani ID kolačića. ID kolačića jedinstven je identifikator kolačića. Sastoji se od niza znakova putem kojeg se internetske stranice i poslužitelji mogu dodijeliti određenom internetskom pregledniku u kojem je pohranjen kolačić. To omogućava posjećenim internetskim stranicama i poslužiteljima da razlikuju pojedinačne preglednike od drugih internet preglednika koji sadrže druge kolačiće. Poseban internetski preglednik može se prepoznati i identificirati pomoću jedinstvenog ID-a kolačića. Korištenjem kolačića, korisnicima naše web stranica možemo pružiti user-friendly osjećaj koji ne bi bilo moguće postići bez upotrebe kolačića. Kada korisnik pristupa web stranici kolačić se pohranjuje na računalni sustav korisnika. Drugi primjer je kolačić košarice za kupnju u online trgovini. Online trgovina pamti stavke koje je kupac stavio u virtualnu košaricu za kupnju putem kolačića. U bilo koje vrijeme spriječiti postavljanje kolačića putem odgovarajuće postavke web preglednika koji se koristi i stoga može trajno uskratiti postavljanje kolačića. Nadalje, već postavljeni kolačići mogu se izbrisati u bilo kojem trenutku putem internetskog preglednika ili drugih softverskih programa. To je moguće u svim popularnim internetskim preglednicima. Ako ispitanik deaktivira postavljanje kolačića u korištenom internetskom pregledniku, sve funkcije na našoj web stranici možda neće biti potpuno raspoložive. Naša web stranica prikuplja niz općih podataka i osobnih podataka kada ispitanik ili automatizirani sustav zatraži web stranicu. Ovi opći podaci i informacije pohranjeni su u datotekama dnevnika poslužitelja. Prikupljeni su (1) tipovi i inačice preglednika, (2) operativni sustav koji koristi pristupni sustav, (3) web stranicu s kojeg pristupni sustav dopire do našeg web mjesta (tzv. Preporuke), (4) datum i vrijeme pristupa internetskim stranicama, (5) adresu internetskog protokola (IP adresa), (6) davatelja internetskih usluga pristupnog sustava i (7) sve druge slične podatke i informacije koje se mogu koristiti u slučaju napada na naše informacijske tehnologije. Kada upotrebljavate ove opće podatke i informacije, mi ne donosimo zaključke o ispitaniku. Ove informacije potrebne su kako bi: (1) pravilno isporučili sadržaj naše web stranice, (2) optimizirali sadržaj naših web stranica, kao i oglas, (3) osigurali dugoročnu održivost naših informatičkih tehnologija i web tehnologije, i (4) tijelima nadležnim za provođenje zakona mogli pružiti informacije potrebne za kazneni progon u slučaju cyber-napada. Voditelj obrade anonimno analizira prikupljene podatke i informacije, s ciljem povećanja zaštite i sigurnosti podataka, te osiguranja optimalne razine zaštite za osobne podatke koje obrađujemo. Anonimni podaci zapisa poslužitelja (log) pohranjuju se odvojeno od svih osobnih podataka koje daje ispitanik. ISPUNJAVANJE PRAVNIH OBVEZA Zašto koristimo vaše osobne podatke? Koristit ćemo Vaše osobne podatke kako bi bili u skladu s obvezama iz zakona, sudskih odluka i odluka upravnih tijela. To uključuje upotrebu Vaših osobnih podataka za prikupljanje i provjeru računovodstvenih podataka u skladu s našim pravilima o čuvanju poslovnih knjiga. Koje vrste osobnih podataka obrađujemo? Obradit ćemo sljedeće kategorije osobnih podataka • broj kupca • broj narudžbe • ime i prezime • poštanska adresa • iznos transakcije • Datum transakcije • OIB (ukoliko je zatraženo ispisivanje R1 računa) Tko ima pristup vašim osobnim podacima? Vaši će podaci biti dostavljeni društvima koje pružaju nama uslugu u svezi gore navedenih podataka (društva koja pružaju uslugu pohrane podataka, IT društva koje pružaju rješenja za knjigovodstvo, upravnim tijelima sukladno zakonskim obvezama). Koji je pravni temelj za obradu vaših osobnih podataka? Obrada vaših osobnih podataka je neophodna da voditelj obrade ispunjava svoju zakonsku obvezu. Koliko dugo spremamo vaše podatke? Spremit ćemo vaše podatke u skladu s pravilima čuvanja poslovne i računovodstvene dokumentacije. ODREDBE O ZAŠTITI PODATAKA O PRIMJENI I KORIŠTENJU FACEBOOKA Na svojim web stranicama voditelj obrade može integrirati ili ima integrirane komponente poduzeća Facebook. Facebook je društvena mreža. Društvena mreža mjesto je društvenih sastanaka na Internetu, mrežne zajednice koja obično omogućuje korisnicima međusobnu komunikaciju i interakciju u virtualnom prostoru. Društvena mreža može poslužiti kao platforma za razmjenu mišljenja i iskustava, ili omogućiti internetskoj zajednici pružanje osobnih ili poslovnih informacija. Facebook omogućuje korisnicima društvene mreže da uključe stvaranje privatnih profila, učitavanje fotografija i mrežu putem zahtjeva prijatelja. Operativna tvrtka Facebook je Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, Sjedinjene Američke Države. Ako osoba živi izvan Sjedinjenih Američkih Država ili Kanade, voditelj obrade je Facebook Ireland Ltd., 4 trg Grand Canal, luka Grand Canal, Dublin 2, Irska. Svakim pozivom na jednu od pojedinačnih stranica ove internetske stranice, kojima upravlja voditelj obrade i na kojem je integrirana Facebook komponenta (Facebook plug-in), web preglednik na informacijskom sustavu nositelja podataka je automatski traži preuzimanje prikaza odgovarajuće Facebook komponente iz Facebooka putem Facebook komponente. Pregled svih Facebook dodataka može se pristupiti pod https://developers.facebook.com/docs/plugins/. Tijekom ovog tehničkog postupka Facebook je upoznat s time što je određeni sub-site naše web stranice posjetio ispitanik. Ako je osoba istovremeno prijavljena na Facebook, Facebook detektira svaki pristup nositelja podataka na naše internet stranice i za cijelo vrijeme trajanja boravka nositelja podataka na našim internetskim stranicama bilježi podatke o njegovim aktivnostima na našim stranicama. Ti se podaci prikupljaju putem Facebook komponente i povezani su s odgovarajućim Facebook računom nositelja. Ako korisnik klikne na jedan od Facebook-ovih gumba integriranih u našu web stranicu, npr. gumb “Sviđa mi se” ili ako subjekt podnese komentar, tada Facebook podudara ove podatke s osobnim Facebook korisničkim računom nositelja podataka i pohranjuje osobne podatke. Facebook uvijek prima, putem Facebook komponente, informacije o posjetu našoj web stranici od strane nositelja podataka, kad god se osoba podataka prijavljuje istovremeno na Facebooku tijekom poziva na našu web stranicu. To se događa neovisno o tome pokreće li korisnik podataka na Facebook komponentu ili ne. Ako takav prijenos podataka na Facebook nije poželjan za nositelja podataka, on ili ona to može spriječiti tako da se odjavite s računa na Facebooku prije nego što uputite poziv na našu web stranicu. Smjernica za zaštitu podataka koju je objavio Facebook, dostupna na adresi https://facebook.com/about/privacy/, pruža informacije o prikupljanju, obradi i korištenju osobnih podataka od strane Facebooka. Osim toga, objašnjava se on koje postavke Facebook nudi kako bi zaštitio privatnost predmeta podataka. Osim toga, dostupne su različite opcije konfiguracije kako bi se omogućilo uklanjanje prijenosa podataka na Facebook, na pr. Facebook bloker davatelja usluge Webgraph, koji se može dobiti pod http://webgraph.com/resources/facebookblocker/. Ovu aplikaciju može koristiti ispitanik kako bi se uklonio prijenos podataka na Facebook. ODREDBE O ZAŠTITI PODATAKA O PRIMJENI I KORIŠTENJU USLUGE GOOGLE ADSENSE Na svojim web stranicama voditelj obrade može integrirati ili ima integrirane komponente Google AdSense. Google AdSense usluga je online koja omogućuje postavljanje oglašavanja na web stranice trećih strana. Google AdSense temelji se na algoritmu koji odabire oglase prikazane na web stranicama treće strane kako bi se podudarale sa sadržajem odgovarajućeg web mjesta treće strane. Google AdSense dopušta ciljano usmjeravanje internetskog korisnika, a provodi se generiranjem pojedinačnih korisničkih profila. Operativna tvrtka Googleove AdSense komponente je Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States. Svrha Googleove AdSense komponente je integracija oglasa na našoj web stranici. Google AdSense stavlja kolačić na informacijsku tehnologiju predmetnog nositelja. Definicija kolačića je objašnjena u jednom od prethodnih poglavlja ovog dokumenta. Postavljanjem kolačića Alphabet Inc. omogućava analizu korištenja naše web stranice. Svakim posjetom na jednu od pojedinačnih internet stranica kojima upravlja voditelj obrade i u koju je integrirana komponenta Google AdSense, internetski preglednik na informacijskom sustavu nositelja podataka automatski će slati podatke putem Google AdSense komponenta u svrhu oglašavanja na mreži i poravnanja povjerenstava do Alphabet Inc. Tijekom ovog tehničkog postupka poduzeće Alphabet Inc. stječe znanje o osobnim podacima, kao što je IP adresa nositelja podataka koji služi Alphabet Inc. kako bi razumjeli podrijetlo posjetitelja i klikova i potom stvorili provizije. Ispitanik može, kao što je gore navedeno, u bilo kojem trenutku spriječiti postavljanje kolačića putem naše web stranice odgovarajućom prilagodbom korištenog web preglednika i time trajno uskraćivati postavljanje kolačića. Takvo prilagođavanje korištenim internetskim preglednikom također bi spriječilo Alphabet Inc da postavlja kolačić na informacijsku tehnologiju podataka nositelja. Osim toga, kolačići koji su već upotrebljavani od strane alata Alphabet Inc. mogu se izbrisati u bilo kojem trenutku putem web preglednika ili drugih softverskih programa. Nadalje, Google AdSense koristi se tzv pikselima za praćenje. Piksel za praćenje je minijaturna slika koja je ugrađena u web stranice kako bi omogućila snimanje dnevnika i analizu dnevnika pomoću koje se može provesti statistička analiza. Na osnovu ugrađenih piksela za praćenje, Alphabet Inc. može odrediti je li i kada je web stranica otvorila neka osoba i koje su veze na njega kliknuli. Pikseli za praćenje služe, između ostalog, za analizu tijeka posjetitelja na web stranici. Kroz Google AdSense osobni podaci i informacije – koji također uključuju IP adresu i koji su potrebni za prikupljanje i obračun prikazanih oglasa – prenose se u Alphabet Inc. u Sjedinjenim Američkim Državama. Ti će osobni podaci biti pohranjeni i obrađeni u Sjedinjenim Američkim Državama. Alphabet Inc. može otkriti prikupljene osobne podatke putem ove tehničke procedure trećim stranama. Google AdSense dodatno je objašnjen pod sljedećom vezom https://www.google.com/intl/en/adsense/start/ ODREDBE O ZAŠTITI PODATAKA O PRIMJENI I UPOTREBI USLUGE GOOGLE ANALYTICS (S FUNKCIJOM ANONIMIZACIJE) Na svojim web stranicama voditelj obrade može integrirati ili ima integrirane komponente Google Analytics (s funkcijom anonimnosti). Google Analytics prikuplja i analizira podatke o ponašanju posjetitelja web-lokacija. Usluga web analize prikuplja, između ostalog, podatke o web stranici s koje je osoba došla (tzv. Referrer), koje su podstranice bile posjećene ili koliko su često i za koje vrijeme pregledane podstranice. Web-analiza se uglavnom koristi za optimizaciju web stranice i za provođenje analize troškova i koristi internet oglašavanja. Operator komponente usluge Google Analytics je Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, Sjedinjene Države. Za web analitiku putem usluge Google Analytics kontroler koristi aplikaciju “_gat. _anonymizeIp”. Ovom aplikacijom Google skraćuje IP adresu internetske veze nositelja podataka i anonimizira se prilikom pristupa našim web stranicama iz države članice Europske unije ili druge države ugovornice na Sporazum o Europskom gospodarskom prostoru. Svrha komponente usluge Google Analytics jest analizirati promet na našoj web stranici. Google prikuplja prikupljene podatke i informacije, između ostalog, kako bi procijenio upotrebu naše web stranice i pružio online izvještaje koji prikazuju aktivnosti na našim web stranicama i pružaju druge usluge vezane uz korištenje naše internetske stranice za nas. Google Analytics postavlja kolačić na sustav informacijske tehnologije ispitanika. Definicija kolačića je objašnjena u jednoj od prehodnih točaka u dokumentu. Postavljanjem kolačića Google može analizirati upotrebu naše web stranice. Svakim pozivom na jednu od pojedinačnih stranica ove internetske stranice, kojima upravlja voditelj obrade i na kojem je integrirana komponenta usluge Google Analytics, internetski preglednik na informacijskom sustavu nositelja podataka automatski će slati podatke putem Komponenta usluge Google Analytics u svrhu oglašavanja na mreži. Tijekom ovog tehničkog postupka poduzeće Google stječe znanja o osobnim podacima, kao što je IP adresa nositelja podataka, koja Googleu, između ostalog, služi za razumijevanje podrijetla posjetitelja i klikova, te naknadno stvaranje nagodbi. Kolačić se koristi za pohranjivanje osobnih podataka, kao što su vrijeme pristupa, mjesto s koje je pristup napravljen i učestalost posjeta naših web stranica od strane nositelja podataka. Svakim posjetom na našem Internet stranicama, takvi osobni podaci, uključujući IP adresu internetskog pristupa koji koristi ispitanik, prenijet će se Googleu u Sjedinjenim Američkim Državama. Ovi osobni podaci pohranjuju Google u Sjedinjenim Američkim Državama. Google može prenijeti ove osobne podatke prikupljene tehničkim postupkom trećim stranama. Ispitanik može, kao što je prethodno navedeno, u bilo kojem trenutku spriječiti postavljanje kolačića putem naše web stranice odgovarajućom prilagodbom korištenog web preglednika i time trajno uskraćivati postavljanje kolačića. Takvo prilagođavanje korištenim internetskim preglednikom također bi spriječilo Google Analytics postavljanje kolačića na informacijsku tehnologiju predmetnog nositelja. Osim toga, kolačići koji Google Analytics već upotrebljavaju mogu se izbrisati u bilo kojem trenutku putem web preglednika ili drugih softverskih programa. Osim toga, ispitanik ima mogućnost prigovora zbirci podataka koje generira Google Analytics, koji se odnosi na upotrebu ove web stranice, kao i obrada tih podataka od strane Googlea i mogućnost da se spriječi opisano prukupljanje osobnih podataka. U tu svrhu, ispitanik mora preuzeti dodatni preglednik ispod veze https://tools.google.com/dlpage/gaoptout i instalirati ga. Ovaj dodatak preglednika govori Google Analyticsu putem JavaScript-a, da se svi podaci i informacije o posjetima internetskih stranica ne prenose u Google Analytics. Instalacija dodataka preglednika smatra se Googleovim prigovorom. Ako je informacijski sustav nositelja kasnije izbrisan, formatiran ili novo instaliran, ispitanik mora ponovno instalirati dodatke preglednika kako bi onemogućio Google Analytics. Ako je dodatni preglednik deinstalirao ispitanik ili bilo koja druga osoba koja se može pripisati svojoj nadležnosti ili je onemogućena, moguće je izvršiti ponovnu instalaciju ili ponovno aktiviranje dodataka preglednika. Dodatne informacije i primjenjive odredbe o zaštiti podataka od Googlea mogu se preuzeti na adresi https://www.google.com/intl/en/policies/privacy/ i http://www.google.com/analytics/terms/us.htnl. Google Analytics dodatno se objašnjava u sljedećoj vezi https://www.google.com/analytics/.