http___lull.hr_politika-o-privatnosti__1.xml
1.1 2.1 2.2 2.3 2.4 2.5 3.1 4.1 4.2 5.1 5.2 6.1 7.1 8.1 9.1 10.1 11.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 21.2 21.3 21.4 22.1 23.1 23.2 24.1 24.2 24.3 24.4 25.1 25.2 25.3 25.4 26.1 27.1 28.1 29.1 29.2 30.1 31.1 32.1 32.2 32.3 32.4 32.5 33.1 34.1 35.1 36.1 36.2 36.3 37.1 37.2 37.3 38.1 39.1 40.1 40.2 40.3 41.1 41.2 41.3 41.4 41.5 41.6 41.7 42.1 42.2 42.3 43.1 44.1 45.1 45.2 45.3 45.4 45.5 45.6 45.7 45.8 45.9 46.1 46.2 46.3 47.1 47.2 48.1 49.1 50.1 51.1 52.1 53.1 54.1 54.2 54.3 54.4 55.1 56.1 56.2 56.3 56.4 56.5 56.6 56.7 57.1 58.1 58.2 58.3 59.1 60.1 61.1 61.2 61.3 61.4 61.5 62.1 63.1 64.1 64.2 64.3 64.4 65.1 65.2 66.1 66.2 66.3 67.1 67.2 67.3 67.4 67.5 68.1 69.1 70.1 71.1 71.2 72.1 72.2 73.1 73.2 74.1 74.2 75.1 75.2 75.3 75.4 75.5 75.6 76.1 77.1 77.2 77.3 78.1 79.1 80.1 80.2 80.3 81.1 81.2 82.1 82.2 83.1 83.2 83.3 84.1 84.2 85.1 85.2 85.3 86.1 86.2 86.3 86.4 87.1 88.1 88.2 88.3 88.4 89.1 90.1 91.1 91.2 91.3 92.1 94.1 95.1
We handle your personal information in strict confidence Thank you very much for your interest in our website. Protecting your personal data is important to us. The following will inform you about how data collected through your use of our website will be treated. Your data will be processed according to the statutory regulations governing data privacy. As a rule, you can use our website without providing personal data. Any personal data collected on our sites (such as your name, address or email addresses) is always provided voluntarily. Please note that data transmission in the internet (such as during communication by email) can contain security flaws. Data cannot be absolutely protected from third-party access. If links are provided to other websites, we have no influence or control over the linked contents or the data protection provisions which apply to those sites. We recommend that you read the data privacy statements of the linked websites to determine whether and to what extent personal data is collected, processed, used or made available to third parties. Contact information Controller The controller responsible for processing your data within the meaning of the EU General Data Protection Regulation (GDPR) is: SAE IT-systems GmbH & Co. KG Im Gewerbegebiet Pesch 14 50767 Cologne, Germany E-Mail: info(at)sae-it.de Data Protection Officer If you have any questions regarding the processing of your personal data, you can contact our external data protection officer at the postal address mentioned above with the following addendum: Personal / Confidential Attn: External data protection officer of SAE IT-systems GmbH & Co. KG or by e-mail privacy(at)sae-it.de Definitions Our data privacy statement should be simple and easy for anyone to understand. As a rule, our data privacy statement uses the terminology of the General Data Protection Regulation (GDPR). Those official definitions are explained in Art. 4 GDPR. Data processing through the visit to our website Whenever you access our website, it is technically necessary that data be transmitted to our web server via your internet browser. The following data will be recorded during an ongoing connection to communication between your internet browser and our web server. We collect the data listed to guarantee a smooth connection setup on the website and make our website comfortable to use. The log file also helps us evaluate system security and stability and serves administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 (1) f GDPR. For reasons of technical security, especially to defend against attacks attempted on our web server, as well as to optimise the underlying technology (server capacity), we store these data for a short time. These data cannot be used to draw any conclusions about specific people. These data are not evaluated, except in anonymised form for statistical purposes. These data will not be combined with data from other data sources. General data processing on the website To protect the security of your data during transmission, we use state-of-the-art encryption procedures (such as SSL) via HTTPS. a) Up- and download area (ShareFile) Our up- and download area is based on ShareFile. ShareFile, a service provided by Citrix, is hosted in our company and enables data to be accessed or exchanged more quickly and securely. When registering to use our download area, the following personal data will be collected in a user account: The legal basis for processing the data is Art. The data will be stored as long as the user account exists. Registered users can independently alter or delete data entered during registration at any time. Obviously, we will also give you information at any time about any of your personal data we are storing. We will gladly correct data or delete the user account at your request. To contact us for that purpose, please use the contact information given at the end of this data privacy statement. There will be no forwarding to third parties. b) Contact forms and establishing contact by email Our website contains contact forms for general questions, registrations for training, and repair requests or complaints. If you send us requests using a contact form or email, your information from the request form or your email, including the contact data you provide there, will be stored to process your request and help us answer follow-up questions. We will never forward those data without your permission. By selecting the option “hotel reservation desired” in the contact form to register for trainings, you are granting us your consent to forward the necessary contact information of the guest and the booking period to a hotel we choose, exclusively for the purpose of the one-time booking. The legal basis for processing the data is our legitimate interest in addressing your concerns under Art. 6 (1) f GDPR and Art. 6 (1) b GDPR, provided your request aims at concluding a contract. Newsletter Based on your expressly granted consent, we will periodically send you our newsletter or comparable information to the email address you have provided. To receive the newsletter, providing your first and last name and your email address will be enough. If you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by email of circumstances that are relevant to the service or registration (such as offers, technical matters, or changes to the newsletter). For a registration to be effective, we will need a valid email address. We use a “double opt-in” procedure to make sure we are registering the actual owner of the email address. To do so, we log the order of the newsletter, the sending of a confirmation email, and the receipt of the answer that email requests. If you answer in the affirmative, you are granting us your consent under Art. 6 (1) a GDPR to use your personal data to send the requested newsletter. No additional data will be collected to this end. The data will be used only to send the newsletter and will not be forwarded to third parties. You may at any time withdraw your consent to have your personal data stored or used to send the newsletter. Every newsletter contains a link for this purpose. You may also deregister at any time—either directly on this website or by notifying us of your intentions via the contact information given at the end of this data privacy statement. Web analysis and ad tracking Google Analytics Our website uses Google Analytics, a web analysis service of Google Ireland Limited (“Google”). Google Analytics uses what are known as “cookies”. Those are text files that are stored on your computer and allow us to analyse how you use our website. The information the cookie generates about your use of this website is normally transmitted to a Google server in the USA and stored there. We use Google Analytics only with activated IP anonymisation. This means that Google will truncate the user’s IP address within member states of the European Union, or in other Contracting Parties to the EEA Agreement, to keep it from being traced to a specific person. Google Ireland Limited has its registered office in Ireland (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and is certified for the US-European data protection treaty “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. The data is processed under Art. 6 (1) f GDPR or § 15 (3) TMG (German Telemedia Act), based on our legitimate interest in statistically analysing user behaviour for optimisation and marketing purposes. On behalf of this website’s operator, Google will use this information to evaluate how you use the website, compile reports about website activities, and render additional services for the website operator which are connected with the use of the website and the internet. The IP address transmitted as part of Google Analytics will not be pooled with other Google data. Google Analytics’ terms of use and information about data privacy can be accessed under the following links: www.google.com/analytics/terms/gb.htmll and under policies.google.com. You can prevent the cookies from being stored by adjusting your browser settings accordingly, but we must point out that if you do, you will not be able to use all of this website’s functions to their full extent. You can also prevent Google from capturing and processing the data collected through the cookie, which relates to your use of the website and includes your IP address, by downloading and installing the browser plug-in available under the URL tools.google.com/dlpage/gaoptout. Clicking the following link will prevent Google Analytics from capturing data by setting an opt-out cookie: Deactivate Google Analytics Google’s data privacy statement contains more information about how Google Analytics handles data: support.google.com/analytics/answer/6004245 Social Media a) Social media links Social networks (Kununu, Xing, LinkedIn and YouTube) are incorporated into our website as links to those services. By clicking the embedded text-image link, you will be redirected to the site of the provider in question. User information will not be forwarded to that provider until you have been redirected. Please read the data protection provisions of the site provider for information on how your personal data will be handled when using that website. b) Embedded YouTube videos We embed YouTube videos on our website. The operator of the plug-in in question is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is owned by Google Ireland Limited, which has its registered office in Ireland (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Visiting a site with a YouTube plug-in establishes a connection to YouTube’s servers. This informs YouTube of which sites you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account in advance. If a YouTube video is started, the provider places cookies to collect information about user behaviour. Users who deactivate the storage of cookies for the Google Ad programme won’t need to worry about such cookies when watching YouTube videos. However, YouTube also places usage information in other, non-personalised cookies. If you wish to prevent this, you must block the storage of cookies in your browser. Please consult the provider’s data privacy statement for more information about data privacy with YouTube: policies.google.com/privacy c) Google Maps This website uses Google Maps API to present geographic information visually. Google Maps ist ein Dienst der Google Ireland Limited mit Haupsitz in Irland (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When Google Maps are used, Google will also collect, process and use data about how visitors use the map function. You can find more information about processing by Google in Google’s Data Privacy Policy. You can also change your personal data privacy settings there, in the data privacy centre. You will find extensive instructions for managing your own data in connection with Google products here. Cookies Just like many websites, we use cookies. Cookies help make our services more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser. Most of the cookies we use are “session cookies”, which are deleted automatically when you close your browser. Cookie cannot be used to start programmes or transmit viruses to a computer. We use the information cookies contain to simplify navigation and have our website be correctly displayed. If personal data are also processed through individual cookies we implement, that processing will take place either to execute the contract (Art. 6 (1) b GDPR) or to guard our legitimate interests (Art. 6 (1) f GDPR) in having our website function at its best and our site visit be customer-friendly and effective. Naturally, you can also view our site without cookies being involved. Internet browsers are normally set to accept cookies. In general, you can deactivate the use of cookies at any time by changing your browser settings. Please use your browsers “Help” function to learn how to change its settings. Please note that individual functions of our website might not work if you deactivate the use of cookies. Data forwarding and recipient Your personal data will be forwarded to third parties only if • we have explicitly referred to this in the description to the data processing for the procedure in question • you have given us your express consent under Art. 6 (1) sentence 1 a GDPR • those data must be forwarded under Art. 6 (1) sentence 1 f GDPR to assert, exercise or defend against legal claims and there is no reason to assume that you have an overriding interest in the data not being forwarded that is worth protecting, • a statutory obligation for forwarding the data exists under Art. 6 (1) sentence 1 c GDPR • we must do so to develop our contractual relationship with you under Art. 6 (1) sentence 1 b GDPR Moreover, we use external service providers for that development, whom we have carefully selected and commissioned in writing. They are bound by our instructions. To this end, contracts on commissioned data processing have been concluded where necessary, under Art. 28 GDPR. We use service providers for web hosting, to send emails and the newsletter, and to maintain and care for our IT systems, etc. These service providers will not forward those data to third parties. Storage period for personal data The storage period for personal data is measured by the relevant statutory retention periods (such as those under commercial or tax law). After the time limit in question expires, the data will be routinely deleted. If data is needed to initiate or fulfil a contract, or we have a legitimate interest in further storage, the data will be deleted if they are no longer needed for those purposes or if you assert your right to object or withdraw consent. Rights of the data subject The following will inform you about which data subject rights toward the controller are granted to you by applicable data protection laws regarding the processing of your personal data: The right under Art. 15 GDPR to demand access to information about the personal data about you we are processing. In particular, you may demand access to information about the processing purpose, the categories of personal data, the categories of recipients to whom your data were or will be disclosed, the planned storage duration, the existence of rights to rectification, erasure, restriction of processing, objection or complaint, the origin or your data (if those data were not collected by us), and information about the existence of an automated decision-making procedure, including profiling, and any meaningful information about its details. The right under Art. 16 GDPR to demand that the personal data about you we have stored be rectified or completed if necessary. The right under Art. 17 GDPR to demand the erasure of personal data about you we have stored, unless those data must be processed to exercise the right to free information and expression of opinion, to fulfil a legal obligation, for reasons in the public interest, or to assert, exercise or defend against legal claims. The right under Art. 18 GDPR to demand the restriction of the processing of your personal data if you dispute its correctness, the processing is illegal, but you waive your right to have those data erased and we no longer need the data but you need them to assert, exercise or defend against legal claims, or you have lodged an objection against their processing under Art. 21 GDPR. The right under Art. 20 GDPR to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, or to demand that they be transmitted to another controller. The right to lodge a complaint with the supervisory authority under Art. 77 GDPR. As a rule, you can do so by contacting the supervisory authority of the federal province of our registered office specified above, or where you normally live or work. The right under Art. 7 (3) GDPR to withdraw a consent you have granted: You have the right at any time to withdraw a consent you have granted to have your data processed, with effect for the future. If you do so, we will delete the data concerned without undue delay, unless their further processing can be supported by the legal basis of “processing without the need for consent”. Withdrawing your consent will not affect the legality of processing that has already occurred based on your consent; Right to object If we are processing your personal data on the basis of legitimate interests under Art. 6 (1) sentence 1 f GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided this arises from reasons revealed by your particular situation. If your objection to the processing of personal data is aimed at direct marketing, you have a general right to object without being required to provide details about your particular situation. If you wish to assert your right of withdrawal or your right to object, please use the contact information given at the end of this data privacy statement. Adjustments and status of the data privacy statement We reserve the right to adapt or update this data privacy statement if necessary, under observance of applicable data protection provisions. This will allow us to adapt that statement to current legal requirements and take changes in our services into consideration, such as when introducing new services. The most current version will apply to your visit. Last revision of this data privacy statement: Contact For questions, objections or change requests, please send an email to marketing(at)sae-it.de.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 39.2 39.3 39.4 40.1 41.1 42.1 42.2 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 47.2 48.1 48.2 49.1 49.2 50.1 51.1 52.1 53.1 54.1 54.2 55.1 56.1 57.1 57.2 58.1 59.1 60.1 61.1 61.2 61.3 61.4 61.5 61.6 61.7 62.1 62.2 63.1 64.1 64.2 65.1 65.2 65.3 66.1 67.1 67.2 68.1 68.2 69.1 70.1 70.2 71.1 71.2 71.3 71.4 71.5 72.1 73.1 74.1 75.1 75.2 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 87.3 87.4 88.1
FOR A RELAXING HOME Pravila privatnosti: – Zaštita osobnih podataka i politika privatnosti Definicije Prema Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (dalje u tekstu: Opća uredba o zaštiti podataka), osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi („ispitanik”); pojedinac čiji se identitet može utvrditi jest osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje. Pravna osnova obrade podataka Pravne osnove za zakonitu obradu osobnih podataka sukladno Općoj uredbi o zaštiti podataka i Zakonu o provedbi Opće uredbe o zaštiti podataka su sljedeće: Načela Prilikom obrade osobnih podataka LULL Studio d.o.o. kao voditelj obrade poštuje sljedeća načela: (a) zakonitosti, poštenosti i transparentnosti; (b) ograničavanja svrhe; (c) smanjenja količine podataka; (d) točnost; (e) ograničenje pohrane; (f) cjelovitosti i povjerljivosti; (g) pouzdanosti. Podaci koji se pružaju ispitaniku Kupcu kao ispitaniku se pružaju sljedeće informacije u smislu odredbe čl. 13. Opće uredbe o zaštiti podataka: (a) identitet i kontaktni podaci voditelja obrade: LULL Studio d.o.o., Ulica Augusta Piazze 10, 10000 Zagreb, Hrvatska, [email protected], Tel: 00 385 99 497 5592, (b) kontaktni podaci službenika za zaštitu podataka: [email protected] (c) svrha obrade radi kojih se upotrebljavaju osobni podaci kao i pravna osnova za obradu: izvršavanje ugovora, izvršavanja dostave kupljenog proizvoda, zaštita ključnih interesa ispitanika, dostava newslettera, u svrhu osiguravanja podrške kupcima i marketing (d) primatelji ili kategorije primatelja osobnih podataka: posrednici i/ili suradnici koji su u ugovornom odnosu sa LULL Studio d.o.o. (e) LULL Studio d.o.o. neće dostavljati osobne podatke na teritorij treće zemlje ili međunarodne organizacije, osim uz Vašu izričitu privolu. (f) razdoblje u kojem će osobni podaci biti pohranjeni/kriteriji kojima se utvrdilo to razdoblje: pet godina računajući od dostave osobnih podataka LULL Studio d.o.o. (g) ispitanik ima pravo od LULL Studio d.o.o. zatražiti pristup osobnim podacima i ispravak ili brisanje osobnih podataka ili ograničavanje obrade koji se odnose na ispitanika ili prava na ulaganje prigovora na obradu takvih te prava na prenosivost podataka; (h) ako se obrada temelji na danoj privoli ispitanika, ispitanik je ovlašten u bilo kojem trenutku povući privolu, a da to ne utječe na zakonitost obrade koja se temeljila na privoli prije nego što je ona povučena; (i) pravo je ispitanika podnijeti prigovor nadzornom tijelu; (j) pružanje osobnih podataka nije uvjet nužan za sklapanje ugovora te ispitanik nema obvezu pružanja osobnih podataka i nema posljedica ako se takvi podaci ne pruže, ali nedostavljanje potrebnih podataka može utjecati na mogućnost i/ili kvalitetu ispunjenja ugovora; (k) ne postoji automatizirano donošenje odluka. Podaci koji se odnose na djecu Sukladno Općoj uredbi o zaštiti podataka djeca zaslužuju posebnu zaštitu u svakom pogledu, pa tako i u pogledu zaštite osobnih podataka. Sukladno članku 19., stavku 1. Zakona o provedbi Opće uredbe o zaštiti podataka, djecom se smatraju sve osobe mlađe od 16 godina, te LULL Studio d.o.o. ne traži niti prikuplja osobne podatke djece ili o njima bez suglasnosti nositelja roditeljske odgovornosti. Stoga će LULL Studio d.o.o. poduzeti sve razumne napore, kako bi podatke koje dobije od djece obrađivalo samo uz suglasnost nositelja roditeljske odgovornosti. Ako LULL Studio d.o.o. sazna da su mu poslani osobni podaci djece, ali bez valjane suglasnosti nositelja roditeljske odgovornosti, LULL Studio d.o.o. će u razumnoj mjeri nastojati učiniti sljedeće: Kada i kako Lull.hr prikuplja podatke korisnika? Osobni podaci se prikupljaju izravno od pojedinca – podaci dostavljeni za potrebe sklapanja ili izvršenja ugovora, kreiranjem korisničkog računa na Internet stranici LULL Studio d.o.o., neposredno, telefonskim razgovorom sa pojedincem. LULL Studio d.o.o. prikuplja osobne podatke Kupaca samo u mjeri koji su nužni za ispunjenje svoje obveze sukladno zahtjevima Kupca, odnosno za koje postoji legitimni interes te za koje ima privolu Kupca u svrhu informiranja, podrške kupcima i marketing u mjeri u kojoj je to važno za poslovanje LULL Studio d.o.o.. LULL Studio d.o.o. se obvezuje štititi osobne podatke Kupaca u skladu sa Općom uredbom o zaštiti osobnih podataka te se obvezuje da osobne podatke neće ni na koji način ustupiti trećim osobama bez pristanka Kupca (osim nužnih podataka za koje postoji legitimni interes u svrhu izvršavanja dostave kupljenog proizvoda) niti će ih koristiti u neodređene svrhe. Obrada osobnih podataka koja se temelji na legitimnom interesu ili predstavlja ugovornu obvezu obavlja se održavanjem najviši standarda sigurnosti i poslovanja. Kupac u svakom trenutku može izjaviti prigovor na obradu svojih osobnih podataka na temelju svoje specifične situacije. Kupac ima pravo zatražiti nadopunu, ispravak ili izmjenu netočnih osobnih podataka. Od ovog se izuzimaju slučajevi u kojima je LULL Studio d.o.o. po valjanom nalogu ovlaštenih državnih tijela, u skladu sa zakonom, dužan dostaviti ili dopustiti uvid u osobne podatke Kupaca. Podaci koje prikuplja LULL Studio d.o.o. su ime, prezime, adresa dostave, broj telefona i adresa e-pošte. Prilikom kupovine u Lull.hr fizičkoj i internetskoj trgovini tražimo od Vas određene osobne podatke koje su nužne za ispunjenje usluge i kupovinu. Pružanje osobnih podataka u svrhu prodaje nužno je za izvršavanje ugovora te ako ih ne pružite, to će utjecati na ispravno izvršenje ugovora ili ga čak onemogućiti. Tako prikupljene podatke koristimo samo za obradu traženih informacija i upita korisnika te u svrhu osiguravanja kvalitetnog korisničkog iskustva. Podaci su dostupni samo djelatnicima kojima su nužni za ispunjenje ugovora. Kupci i korisnici internetske stranice www.lull.hr suglasni su da u skladu sa Općom uredbom o zaštiti osobnih podataka te u skladu s traženim upitom obrađujemo osobne podatke te prihvaćaju sve rizike koji nastaju korištenjem internetske stranice. Informatički sustav koji koristi LULL Studio d.o.o. zaštićen je tehničkim mjerama od neovlaštenog pristupa, izmjene, širenja, gubljenja i brisanja podataka Kupaca. LULL Studio d.o.o. prikuplja e-mail adrese korisnika koje koristi za slanje newslettera odnosno elektroničkih poruka koje sadrže promotivne poruke, ponude i vijesti iz svijeta mobilne tehnologije. LULL Studio d.o.o. uz privolu Kupca može koristiti osobne podatke za informiranje o novim i akcijskim proizvodima te dostavu promotivnih materijala, newslettera te unapređenja odnosa s Kupcima. Ukoliko pristup podacima u svrhe marketinške obrade imaju treći pružatelji usluga, oni su detaljno opisani u ovim Uvjetima. LULL Studio d.o.o. je voditelj obrade osobnih podataka u skladu sa zakonom i propisima o zaštiti osobnih podataka. LULL Studio d.o.o. kao voditelj obrade osobnih podataka određuje svrhu i sredstva obrade osobnih podataka i odgovorna je za čuvanje i korištenje osobnih podataka u papirnatom i/ili elektronskom obliku. Temeljem članka 37. Opće uredbe o zaštiti podataka LULL Studio d.o.o. kao voditelj obrade osobnih podataka, imenovao je službenika za zaštitu osobnih podataka kojeg možete kontaktirati putem e-adrese [email protected] U slučaju povrede osobnih podataka LULL studio d.o.o. bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvješćuje nadzorno tijelo nadležno o povredi osobnih podataka, osim ako nije vjerojatno da će povreda osobnih podataka prouzročiti rizik za prava i slobode pojedinaca. Ako izvješćivanje nije učinjeno unutar 72 sata, mora biti popraćeno razlozima za kašnjenje. Tko su subjekti s kojima Lull.hr može dijeliti osobne podatke? Prilikom kreiranja Lull.hr računa na Lull.hr trgovini potrebno je unijeti svoje podatke (e-mail, ime i prezime). Prilikom prijave putem društvenih mreža, odnosno Google i Facebook računa, LULL Studio d.o.o. ne zadržava podatke prikupljene takvom prijavom. Lull.hr surađuje s pružateljima usluga trećim stranama kako bi se mogle provesti aktivnosti slanja e-pošte, oglašavanja i analiziranja upotrebe naših web mjesta i aplikacija te praćenja učinkovitosti kampanja. Osobne podatke dijelimo samo u onoj mjeri potrebnoj za izvršavanje usluge u naše ime. U nastavku možete provjeriti tko su davatelji usluga trećih strana potrebnih za suradnju: https://www.google.com/analytics/terms/gb.html, Opći pregled o načelima sigurnosti i privatnosti Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en, kao i Googleova Pravila privatnosti: https://policies.google.com/privacy?hl=en. Ove internetske stranice upotrebljavaju Google Analytics za analizu protoka posjetitelja neovisno o vrsti uređaja, a koji se temelji na korisničkom identifikacijskom broju (ID). Možete onemogućiti praćenje Vašeg korištenja više uređaja u svom Google računu pod „Moje informacije“ („My information“), „Osobne informacije“ („Personal information“). Pristup bazi Kupaca s osobnim podacima Kupaca uz LULL Studio d.o.o. u svrhu sklapanja ili izvršavanja ugovora, odnosno kupovine u Lull.hr trgovini i dostavu proizvoda imaju: • Plavi pixel d.o.o., specijalizirana tvrtka za izradu web trgovina s kojom LULL Studio d.o.o. ima sklopljen ugovor o zaštiti podataka. Politika kolačića „Kolačić“ je dio informacija spremljenih na računalo, mobitel ili tablet korisnika (dalje u tekstu: „uređaj“), koje mogu biti dostavljene neposredno od strane internetske stranice koju posjetite (kolačići od prve strane) ili u suradnji i za potrebe internetske stranice od treće strane (kolačići treće strane). Kolačići u pravilu spremaju postavke korisnika, postavke za internetsku stranicu i sl. Nakon što ponovno korisnik otvori internetsku stranicu, internetski preglednik korisnika šalje natrag kolačiće koji pripadaju ovoj web stranici. To omogućuje stranici da prikaže informacije prilagođene potrebama korisnika. Kolačići mogu imati širok raspon informacija, uključujući i dio osobnih informacija. Takve informacije mogu biti spremljene jedino ako to korisnik omogući. Sama internetska stranica ne može dobiti pristup informacijama koje im korisnik ne dopusti te ne mogu pristupiti niti jednoj drugoj datoteci na računalu korisnika. Kako bi stranice Lull.hr ispravno radile, one moraju na računalo korisnika spremiti malenu količinu kolačića (Cookies). Prema Općoj uredbi o zaštiti podataka, Zakonu o provedbi Opće uredbe o zaštiti podataka i Zakonu o elektroničkim komunikacijama, LULL Studio d.o.o. prije spremanja Cookiea mora zatražiti pristanak (privolu) korisnika. Ukoliko korisnik ne pristane na pohranu kolačića postoji mogućnost da stranica neće moći koristiti neke od funkcionalnosti koje daje LULL Studio d.o.o. web trgovina. Zadaća kolačića kojem ste dopustili da se pohrani na Vaše računalo je spremanje Vaših postavki, postavki web stranice, Vašeg preferiranog jezika ili adrese. Kada nakon nekog vremena opet posjetite istu stranicu internet preglednik kojim se koristite šalje informacije prilagođene Vašim potrebama. Ovisno o definiranoj zadaći kolačići spremaju širok spektar informacija koji između ostalih uključuju i osobne podatke. Međutim, isključivo vi odlučujete koje informacije će kolačići spremati. U postavkama Vašeg internet preglednika možete sami birati hoćete li zahtjeve za spremanje kolačića odobriti ili odbiti. Onemogućavanjem kolačića možda nećete moći koristiti neke od funkcionalnosti na stranicama koje posjećujete. Stalni kolačići ostaju na računalu nakon zatvaranja programa internet preglednika. Stalni kolačići ostat će na računalu ili mobilnom uređaju danima, mjesecima, čak i godinama te imaju svrhu pohraniti stalne podatke kao što su npr. korisničko ime i lozinka da se ne morate svaki puta iznova prijavljivati. Privremeni kolačići nestaju s računala nakon što zatvorite internet preglednik. Uz njihovu pomoć se pohranjuju privremeni podaci kao što su podaci koje dajete kad ste u online kupnji. Kolačići od prve strane mogu biti stalni ili privremeni, a pohranjuju podatke koje ćete ponovo koristiti prilikom sljedećeg posjeta stranicama sa kojih su pohranjeni na Vaše računalo. Kolačići treće strane ili tzv. reklamni kolačići pohranjuju se na Vaše računalo ako koristite reklame i oglase na stranici koju posjećujete a ona vas preusmjeri na treću stranu. Ovaj način služi za praćenje korištenja Interneta u marketinške svrhe. Lull.hr koristi kolačiće u svrhu poboljšanja korisničkog iskustva, u svrhu funkcioniranja stranice u kontekstu sigurnosti i u svrhu radnji koje posjetitelj stranice odabere samostalno (web forma za slanje poruka ili traženje usluga). Privremeni kolačići se brišu kada napustite internetski preglednik. Njihova jedina svrha je unaprijediti korisničko iskustvo za vrijeme posjete stranici. Stalni kolačići nemaju ograničenja i ostaju u Vašem pregledniku dok ih ručno ne obrišete. Prikupljeni podaci se koriste isključivo u statističke svrhe. Ovo su primjeri trećih strana koje pružaju usluge analize i marketinške obrade podataka Za više informacije o svrsi i opsegu prikupljanja podataka i obradi istih od strane pružatelja dodatka, molimo da pogledate izjave o zaštiti privatnosti ovih pružatelja koji su niže navedeni. Kako korisnici mogu ažurirati, urediti ili obrisati svoje osobne podatke? LULL Studio d.o.o. – internet trgovina. prikuplja podatke korisnika u skladu Općom uredbom o zaštiti osobnih podataka i Zakonom o provedbi Opće uredbe o zaštiti podataka. Svaki korisnik može u svakom trenutku može: LULL Studio d.o.o. može odbiti provođenja zahtjeva ukoliko se time ugrožava privatnost korisnika ili drugih korisnika, ako primjena zahtjeva je suprotna zakonu, u izuzecima radi zaštite javnog interesa (npr. sprječavanje ili otkrivanje zločina), pravnih obveza ili prava i sloboda drugih. Zahtjeve za pristup, ispravljanje ili brisanje podataka možete uputiti na: [email protected]lull.hr ili na adresu sjedišta Ulica Augusta Piazze 10, Zagreb, 10000 Zagreb, Hrvatska. Obrada takvog zahtjeva može biti tehnički i vremenski složen proces te je u složenim slučajevima ili u slučaju većeg broja zahtjeva potrebno duže vrijeme potrebno za obradu podataka o čemu ćemo vas obavijestiti na zakonit i siguran način. Kako čuvamo sigurnost Vaših podataka? U svrhu očuvanja sigurnosti, integriteta i dostupnosti osobnih podataka kupaca, podatke osiguravamo nizom sigurnosnih mjera koje uključuju enkripciju, autentifikaciju i strogo ograničeni pristup podacima. Neke od mjera koje koristimo uključuju: Sigurnosne mjere koje se provode imaju za cilj: Koliko dugo zadržavamo Vaše osobne podatke? Osobne podatke pohranjujemo i obrađujemo onoliko dugo koliko je potrebno za izvršenje određene legitimne svrhe, osim ako važećim propisima nije za pojedinu svrhu predviđeno duže vrijeme čuvanja. U slučaju davanja privole za marketing, podatke čuvamo pet godina računajući od dostave osobnih podataka LULL Studio d.o.o. Povlačenje privole ne utječe na zakonitost obrade na temelju privole prije njezina povlačenja. Povlačenje dostavlja se u pisanom obliku. Osobni podaci koji više nisu potrebni se ili nepovratno anonimiziraju ili se uništavaju na siguran način. Kontakti