http___mihael-putovanja.hr_kontakt__1.xml
1.1 2.1 2.2 2.3 3.1 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 14.2 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 33.3 33.4 34.1 34.2 34.3 34.4 34.5 34.6 35.1 36.1 37.1 38.1 38.2 38.3 39.1 39.2 39.3 39.4 40.1 40.2 41.1 42.1 42.2 43.1 44.1 45.1 45.2 46.1 47.1 47.2 47.3 48.1 49.1 50.1 50.2 51.1 51.2 51.3 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 60.1 61.1 62.1 63.1 64.1 64.2 64.3 65.1 65.2 66.1 67.1 67.2 68.1
PERSONAL DATA PROTECTION POLICY This is the data protection policy (hereinafter: Policy) of the company FOOD PASSION Kft. (Registered office: 1088 Budapest, Krúdy Gyula utca 5. (Hereinafter: data controller). For the Data Controller, as supplier, the protection of personal data of visitors to the website www.foodpassion.hu, as well as the assurance of their right to IT self-determination, is of fundamental importance. The Data Controller undertakes to process the personal data of the visitors in such a way as to contribute to the safe use of internet by them, according to the relevant legal regulations. The data controller processes / manages the personal data of visitors confidentially, according to the relevant legal regulations. This Policy is especially governed by the following laws: - - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data (GDPR), as well as the free circulation of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), - - Act CXII of 2011, - - Act CVIII of 2001, - - Act XLVIII of 2008. The main objective of the Policy is to inform interested parties about the registration, management, use, transmission, registration of data stored with the data controller.DEFINITIONS: - database: the set of data processed in the e-registration system, - data processing: carrying out technical tasks related to data management, regardless of the method, means applied for the operation and the place of application, - the person in charge of data processing: natural, legal or non-legal person, who, by mandate of the data controller, carries out processing of personal data, - data processing: any operation or set of operations, applied to personal data or sets of personal data, concerning, by way of example, the collection, registration, organization, storage, modification, use, blocking, communication, dissemination, deletion and destruction of data, as well as the obstacle to further use of the data. Furthermore, the taking / recording of photos, videos, voice and other suitable means to identify a person (e.g. iris, fingerprint, DNA) is considered data processing. - data controller: the natural, legal, non-legal person, responsible for the decisions regarding the purposes and execution of the processing of personal data and the processing of data, the tools used, including decisions relating to assignment of the person in charge of data processing for its execution. - data cancellation: total physical cancellation of the data or the data medium, - data transmission: dissemination of data to third parties, - destruction of data: destruction of data in such a way that it can no longer be recovered, - data retention: making the transmission, knowledge, modification, communication, dissemination, cancellation and destruction, use, connection of data impossible for a specific period or permanently, - third parties: the natural, legal, non-legal person, other than the data subject, the data controller and the person in charge of data processing, - consent: the voluntary and decisive expression of the interested party of his desire to consent to the processing of his data, based on the correct information, - special data: data relating to race, ethnic or national minorities, political, religious positions, health condition, vices, sexual life, criminal data, - publication: making the data accessible to third parties, - registration: communication of the customer's identification data to the data controller of personal data, - personal data: any data connected to identified or identifiable natural persons (hereinafter: Data Subject) as well as conclusions that may be disunited from this data regarding the Data Subject. People can be considered identifiable, especially if they can be identified on the basis of the parameters / factors of name, n. identifying, physical, physiological, mental, economic, cultural or social. - dispute: declaration of the interested party, in which he disputes the processing of his personal data, requesting the dissolution of the data processing or the cancellation of the data processed. Personal data may be processed exclusively for the purpose of fulfilling obligations and exercising rights and applying the relevant laws.PERSONAL DATA CAN BE PROCESSED IN THE FOLLOWING CASES: - the interested party has given his consent, - a law requires it or on the basis of legal authorization, - the data of the interested party communicated during his registration, as necessary and sufficient data for the identification of the same, are treated, in accordance with Act CVIII of 2001, for the purpose of concluding service contracts relating to the information society, determining, modifying, verifying compliance, invoicing the relative value, as well as demanding the related claims. - The data controller does not process / manage special data. - The law, for the public interest, may order the publication of personal data, indicating the type of such data. In all other cases, the consent of the interested party is required for the publication of personal data, in cases of special data, by written consent. In case of doubts, the consent is considered not given / refused, except for public figures and / or data delivered for the purpose of its publication. In cases initiated at the relative request of the interested party, it must be assumed that the consent was given by the same. - The rights and obligations of the person in charge of data processing, relating to the processing of personal data, are determined by the data controller. The data controller is responsible for the legality of the instructions relating to the data processing operation. The person in charge of data processing, as part of his activity, is responsible for the processing, modification, cancellation, transmission, destruction and publication of personal data. The data processor cannot carry out his data processing activity together with another data processor. The person in charge of data processing cannot make decisions regarding the personal data of which he has become aware can be processed, stored and kept according to the instructions of the personal data owner. Furthermore, it cannot process the data for its own purposes. - On the basis of the above, the data controller processes / manages the following data of the interested parties: name, email address, address, n. telephone, billing data, order data. - The Data Controller guarantees the interested party that he/she can forbid the processing of data in order to increase the efficiency of his services, to transmit electronic advertising or other market research. - The interested party, with his registration, gives his/her consent to hand over his/her data to the person in charge of data processing, as well as to other collaborators of the data controller and of the person in charge of data processing (hereinafter : third parties), for purposes for which the data controller is authorized to process the data. - The obligation of the interested customer to provide data is voluntary but, in the absence of necessary and sufficient data, it is not possible to place orders for the same. Consequently, we ask that you communicate the data necessary to be able to fulfill our services, taking into consideration the requirements set out in this Policy. Failing it, registration may be refused. - By registering, the interested party acknowledges that he/she has voluntarily given his previous consent in advance to receiving electronic advertising from the supplier and/or suppliers collaborating with the supplier. This consent can be revoked at any time, without any countervalue, limitation and motivation. In this case, the supplier immediately deletes the name from the register prescribed by law, and no longer advertises it. When sending electronic advertisements, the advertiser informs the interested party about the electronic contact details, on which the intention to prohibit sending electronic advertisements can be communicated, using services connected to the information society. - In the case of our services related to registration and subscription, we occasionally send our customers information circulars about our new services, special offers. In the event that our customers do not intend to receive these informative circulars, they can cancel in the same way they requested the service. - By registering, the interested party, as the customer, acknowledges that he/she has known and accepted the data processing rules of the supplier, and the registration is considered authorization of data processing. - The data controller undertakes to communicate in advance to the readers of its site the changes in the principles and use relating to the processing of personal data, in order that they can know exactly the principles and practice of data processing, valid on the site / portal of the data controller. This Policy always reflects the principles and practice actually applied. - If we intend to use personal data in a different way from the principles and objectives published for the collection of personal data, in that case we will inform the interested parties in advance by email, asking if they give their consent to treat the data in a different way their personal data. - Anonymous information, which is collected with the exclusion of personal identificability and cannot be linked to any natural person, is not considered personal data. - We do not integrate and do not link personal data and other data communicated by data subjects with data, information deriving from other sources. Otherwise, we ask the interested party for the relative previous consent. - In the event that the authorized authorities request the provider to hand over personal data in a prescribed manner by law, the data controller, in fulfilling his legal obligations, delivers the requested information. - The data controller, for the moment, does not offer services expressly for minors under the age of 18, and declares that it does not collect and process personal data from individuals under the age of 18. In the case of requests / needs for the processing of such data, the appropriate consent of the parent or legal representative of the minor is required in a controllable form. In the absence of it, the personal data of minors will not be recorded. - In the event of termination of the right of data processing, the data controller deletes the data of the interested party. - The interested party may request the update on the processing of his personal data, as well as the correction and cancellation (with the exception of the processing of data ordered by law) of his/her personal data. - At the request of the interested party, the data controller gives information regarding the data processed by the same or by the person in charge of data processing, on the purpose, legal title, duration of data processing, name, address, activity relating to the data processing of the data processor, as well as who and for what purpose received or receives such data. The data controller is required to give this communication in writing no later than 30 days from the filing of the relative request. - The information of the interested party can be denied by the data controller only if it is limited by law, for the internal and external security of the State, such as defense of the State, the security of the Nation, the prevention of crime, or anti-crime, or in the State or municipal fiscal interest, or for the protection of the rights of the interested party or third parties. The data controller is required to communicate to the interested party the reason for the refusal of the communication. The data controller informs the data protection commissioner about annually rejected requests. - The data controller is required to correct any data that does not correspond to reality. - Personal data must be destroyed if: - its processing is illegal, - the interested party requests it, - is incorrect or incomplete, and that status cannot be corrected, provided that the law does not exclude destruction, - the purpose of the data processing has ceased, or the mandatory period of data storage has expired, - was ordered by a Court or by the data protection commissioner. - The interested party and all in favor of whom such data were transmitted must be informed about the correction or destruction of the data. This communication can be ignored, if that does not violate the legitimate interest of the data subject. - The interested party can object to the processing of his personal data, if: - the processing and transmission of personal data is only necessary for the exercise of the legitimate rights or interests of the data controller, except in the case where the data processing has been ordered by law, - the use or transmission of personal data is carried out to directly purchase business, public opinion polling, scientific research, - the law allows to exercise the right of objection. - The Data Controller - with the simultaneous suspension of the data processing - is required to verify the objection, within 15 days from the filing of the complaint, and communicate the outcome in writing to the applicant. In the event that the objection is reasonable, the data controller is required to stop processing the data and block the data, as well as inform all those to whom he had transmitted the personal data in question about the objection and the related provision, who are also required to enforce the right of objection. If the interested party does not agree with this decision of the data controller, within 30 days of the relative communication, he can apply to the court. - The data controller cannot delete the data of the interested party, if the data processing has been ordered by law. The data cannot, however, be transmitted to the person who takes them over if the data controller agrees with the protest or a court has established the legitimacy of the protest. - In the event of a violation of the rights of the data subject, he / she can appeal to the court against the data controller. The computer system and the other data storage locations of Food Passion Kft. are located at its registered office located at 1088 Budapest, Krúdy Gyula utca 5. The e-mail address of the Data Controller is: info@foodpassion.hu.
1.1 2.1 3.1 4.1 5.1 6.1 8.1 10.1 12.1 14.1 15.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 33.1 34.1 34.2 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 45.1 45.2 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 56.2
Ured Adresa Putnička agencija Mihael d.o.o. Pavlinska 5, 42000 Varaždin, Hrvatska Voditelj poslova: Valentina Šimić Radno vrijeme: pon – pet 08.00 – 16.00 sati OIB Telefoni Fax info@mihael-putovanja.hr Podaci za uplatu SWIFT: PBZGHR2X (za inozemne uplate) Model: 00 Poziv na broj: datum puta Svrha uplate: putovanje i Vaše prezime Dokumenti za preuzimanje: Pošaljite upit MIHAEL putnička agencija,d.o.o. SJEDIŠTE: Varaždin, Pavlinska 5 Radno vrijeme: ponedjeljak – petak 08.00 – 16.00 sati Voditelj poslova: Valentina Šimić Nastupa u svojstvu stalno i u punom radnom vremenu zaposlenog voditelja poslova. Ovlaštena je za praćenje poslovanja turističke agencije sukladno odredbama Zakona o pružanju usluga u turizmu. Djelatnost turističke agencije podliježe nadzoru Državnog inspektorata, područni ured Varaždin. Porezni obveznik upisan je u sudski registar: Trgovački sud u Varaždinu pod matičnim brojem MBS: 070077587, temeljem rješenja navedenog suda Tt-07/262-2 od 26.02.2007. Temeljni kapital: 20.000,00 kn uplaćen u cijelosti. Direktor: Milan Kruljac ZAŠTITA PRIVATNOSTI Naziv voditelja obrade: MIHAEL Putnička agencija d.o.o. Adresa: Pavlinska 5, Varaždin OIB: 20054015482 Sukladno Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27.travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka (u daljnjem tekstu Opća uredba o zaštiti podataka), koja je u punoj primjeni od dana 25. svibnja 2018. godine u Republici Hrvatskoj i svim zemljama članicama Europske unije, kao i Zakonu o provedbi Opće uredbe o zaštiti podataka (Narodne novine broj 42/18), odnosno sukladno pravnom okviru zaštite osobnih podataka u Republici Hrvatskoj i Europskoj uniji, Mihael putnička agencija d.o.o. kao voditelj obrade osobnih podataka korisnika svojih usluga, zaposlenika i kupaca, izradilo je Politiku o zaštiti privatnosti osobnih podataka te se u skladu s tim traži Ova privola predstavlja pravnu osnovu za prikupljanje i obradu podataka ispitanika te se smatra dobrovoljnim, informiranim i nedvosmislenim izražavanjem želja ispitanika kojom on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose. Vrste podataka koji se prikupljaju i obrađuju: Podaci koji se prikupljanju i obrađuju su sljedeći: ime i prezime, adresa, osobni identifikacijski broj (OIB), datum rođenja, spol, kontakt broj telefona i/ili mobitela, kontakt podatke elektroničke pošte (e-mail adresa), podaci iz osobne iskaznice i putovnice, podaci o bankovnom računu i broju kartice, podaci iza isplatu odštetnog zahtjeva za osiguravajuću kuću kao I prateća zdravstvena dokumentacija. Svrha prikupljanja i obrade podataka: Navedeni osobni podaci ispitanika, sukladno pravima i obvezama Zakona o pružanju usluga u turizmu te ugovornim obvezama koje proizlaze iz turističke djelatnosti, koriste se isključivo za potrebe pojedinog projekta (putovanja) baziranog na međusobnim ugovorima. Trajanje čuvanja i obrade osobnih podataka: Ovisno o svrsi i pravnoj osnovi temeljem koje se prikupljaju osobni podaci ispitanika, voditelj obrade je u pojedinim slučajevima obvezan čuvati osobne podatke u vremenskom trajanju (razdoblju) koje za pojedinu svrhu propisuju mjerodavni propisi ili prestankom svrhe u koju su prikupljeni. Obveze voditelja obrade prema ispitaniku: Voditelj obrade podataka obvezan je na temelju podnesenog pisanog zahtjeva ispitanika na gore naznačenu adresu voditelja obrade podataka istom omogućiti pristup osobnim podacima koje obrađuje o njemu, ispravak netočnih osobnih podataka, brisanje osobnih podataka ili ograničenje obrade osobnih podataka, kao i upoznati ga s mogućnošću prigovora na obradu osobnih podataka te pravom na prenosivost podataka. Prosljeđivanje podataka trećim osobama: Osobni podaci ispitanika proslijeđuju se trećim osobama (osiguravajućim kućama, hotelima, avio kompanijama, turističkim agencijama i ostalim trećim osobama ovisno o potrebi, odnosno tipu putovanja) koje sudjeluju u organizaciji putovanja te u tu svrhu koriste osobne podatke ispitanika. Prava ispitanika: Ispitanik ima pravo na pristup osobnim podacima. Voditelj obrade dužan je na temelju pisanog zahtjeva ispitanika informirati ispitanika o osobnim podacima koje obrađuje o njima. Ispitanik ima pravo na ispravak netočnih podataka. Voditelj obrade podataka dužan je ispitaniku omogućiti ispravak netočnih osobnih podataka kada je utvrđeno da prikupljeni osobni podaci nisu ispravni ili je došlo do promjene osobnih podataka. Ispitanik ima pravo na brisanje osobnih podataka kada osobni podaci ispitanika više nisu nužni za ispunjenje svrhe obrade, kada ispitanik povuče privolu kao pravni temelj za obradu osobnih podataka, kada ispitanik uloži prigovor na obradu podataka, kada su osobni podaci nezakonito obrađeni, kada se osobni podaci moraju brisati radi ispunjenja pravnih obveza iz prava Europske unije ili prava države članice kojem podliježe voditelj obrade podataka. Ispitanik ima pravo na ograničenje obrade podataka. Voditelj obrade podataka dužan je osigurati ograničenje obrade podataka u slučajevima kada ispitanik osporava točnost podataka, kada je obrada nezakonita, kada voditelj obrade više ne treba osobne podatke za potrebe obrade ili kada ispitanik uloži prigovor na obradu osobnih podataka. Povlačenje privole: Ispitanik ima pravo u bilo kojem trenutku povući ovu privolu. U tom slučaju, voditelj obrade podataka dužan je odmah prestati s obradom podataka, odnosno obrisati ili anonimizirati osobne podatke, osim ako postoji neka druga pravna osnova obrade osobnih podataka. Potpisom ove privole ispitanik izjavljuje da je upoznat sa svrhom prikupljanja osobnih podataka koji se na njega odnose, da je upoznat s identitetom voditelja obrade osobnih podataka, da dobrovoljno stavlja na raspolaganje svoje osobne podatke, da preuzima obvezu obavijestiti voditelja obrade podataka o svakoj promjeni osobnih podataka. Potpisom i pečatom ove privole voditelj obrade podataka obvezuje se čuvati osobne podatke ispitanika i raspolagati njima u skladu sa zakonskim propisima o zaštiti osobnih podataka i određenjima iz ove privole. Ova privola biti će poslana svakom putniku sa ugovorom o putovanju. PRIGOVORI Sukladno Čl. 10. st. 3. NN 41/14 Zakona o zaštiti potrošača obavještavamo potrošače da nezadovoljstvo na kvalitetu naših usluga te pruženu uslugu mogu iskazati prigovorom u pisanoj formi na slijedeći način i to u roku od 8 dana od pružene usluge ili putovanja.: Adresa: Mihael putnička agencija, do.o.o Pavlinska 5, 42000 Varaždin, Hrvatska ili Telefax broj: 00 385 42 302 045 ili putem e-maila: info@mihael-putovanja Odgovor na Vaš prigovor dobit ćete u pisanom obliku najkasnije 15 dana od primitka prigovora. Kako bi se dobio odgovor, molimo podnositelja prigovora da navede: ime i prezime te adresu ili e-mail za dostavu odgovora.