http___medjimurska-zupanija.hr_2017_01_27_zastita-osobnih-podataka__1.xml
1.1 2.1 3.1 4.1 4.2 5.1 6.1 6.2 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 15.2 16.1 17.1 17.2 18.1 19.1 19.2 20.1 21.1 22.1 23.1 24.1 25.1 26.1 26.2
SIA "BALTIC COUNCIL" GENERAL PRINCIPLES TERMS AND DEFINITIONS FOR PROCESSING PERSONAL DATA. Personal data provider means any person who processes personal data and / or any person on whose behalf personal data is processed. The main operator is the company SIA "BALTIC COUNCIL", registration number: 41203037717, address: 17, Kuldīgas str, Ventspils, LV 3600, Latvia. The authorized operator is the person authorized by the main operator to process personal data. The authorized operator is an internal employee of SIA "BALTIC COUNCIL" . "Data subject" means any natural or legal person who has shared its personal data to the Principal Operator and whose data is processed by the Principal Data Operator in accordance with the general principles of personal data processing. Personal data - data about the data subject that the data subject sent / informed the operator of personal data via a website, e-mail or telephone. These data include the name, surname, phone number, e-mail address, address, passport number, date of birth, gender and other data that allow you to identify a person. Personal data processing - any activity carried out with personal data, including collecting, recording, organizing, storing, changing, disclosing, accessing, viewing, extracting, using, transferring, sharing, merging, terminating, deleting or destroying personal data or some of the above actions, regardless of how the activities are carried out or what means are used. "Third party" means any natural or legal person, with the exception of the data subject, the main operator, the authorized operator or the person processing personal data on behalf of the principal or authorized operator. OBJECTIVES AND PRINCIPLES OF PERSONAL DATA PROCESSING The personal data operator processes personal data for the general management of relations with customers and for the provision, sale, promotion and administration of products and services. The personal data operator can not transfer, lease or transfer personal data or transmit them in any other way to third parties and for use by third parties (except in cases and where provided for in these General Principles of Personal Data Processing ). When processing personal data, the personal data operator must comply with the principles stipulated in the Personal Data Protection Act and the General Regulation on Data Protection of the EU. CONSENT OF THE DATA SUBJECT Personal data is processed on the basis of the consent of the data subject indicated in accordance with Section 7 (1) of the Personal Data Protection Act and Article 6 (1) of the EU General Data Protection Regulations. The data subject must consent to the operator of personal data to process his personal data in accordance with these principles and the purpose of processing personal data. To give their consent, the data subject must fill in the appropriate printed questionnaires or online forms on the website of the personal data operator www.balticcouncilfairs.org or provide their data by e-mail or telephone. Granting consent is a prerequisite for cooperation with the data subject, and uncoordinated consent means that the primary operator can not perform the requested service of the data subject. The data subject may withdraw his consent at any time by notifying the operator of his personal data to the e-mail address info@balticcouncil.org or unsubscribe from the electronic mailings sent by the Personal Data Operator. The withdrawal of consent does not affect the legality of the processing of personal data that occurred prior to the withdrawal of consent. PROTECTION OF PERSONAL DATA AND RESPONSIBILITY The personal data operator ensures the protection of personal data by all types of organizational, physical and IT security measures. The personal data operator confirms that all measures necessary to protect personal data have been implemented, the processing of personal data is limited to the extent necessary to achieve the purpose of processing personal data. If the data subject has agreed to the processing of personal data in connection with the requested service, the personal data must be stored to refuse the consent of the data subject. The personal data operator permits access to personal data only to those employees of the personal data operator who have the right to process personal data, and only to the extent necessary to achieve the purposes for which the processing of personal data is carried out. The operator of personal data is responsible for compliance with the requirements set forth in the Personal Data Protection Act and the General Provision on Data Protection of the EU after its entry into force. PROTECTION OF THE RIGHTS OF THE DATA SUBJECT The data subject has the right to access his personal data stored by the Personal Data Operator and to obtain additional information on the processing of his personal data. The data subject has the right at any time to apply for processing of his personal data, including requesting the termination of processing or disclosure of his personal data or the termination of access to personal data and / or the removal, correction or blocking of collected data, if this right is in compliance with the standards The law on the protection of data of individuals or any other law. If the data subject discovers that the Personal Data Operator has violated his / her rights in the processing of personal data or if the data subject is requesting the deletion of his data, the data subject has the right to file a request to terminate or eliminate the operator's personal data violation via e-mail info@balticcouncil.org . The data subject has the right to apply to the State Data Inspectorate or the court at any time to protect his rights.
1.1 2.1 3.1 3.2 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 10.2 11.1 11.2 12.1 13.1 14.1 15.1 18.1
Zakonom o zaštiti osobnih podataka („Narodne novine“ broj 103/03, 118/06, 41/08, 130/11 i 106/12 – pročišćeni tekst) uređuje se zaštita osobnih podataka o fizičkim osobama te nadzor nad prikupljanjem, obradom i korištenjem osobnih podataka. Svrha zaštite osobnih podataka je zaštita privatnog života i ostalih ljudskih prava i temeljnih sloboda u prikupljanju i korištenju osobnih podataka. Osobni podatak je svaka informacija koja se odnosi na identificiranu fizičku osobu ili fizičku osobu koja se može identificirati (Ispitanik). Osoba ili Ispitanik koja se može identificirati je osoba čiji se identitet može utvrditi izravno ili neizravno, posebno na osnovi identifikacijskog broja ili jednog ili više obilježja za njezin fizički, psihološki, mentalni, gospodarski, kulturni ili socijalni identitet. Voditelj zbirke osobnih podataka je fizička ili pravna osoba, državno ili drugo tijelo koje utvrđuje svrhu i način obrade osobnih podataka. Kada je svrha i način obrade podataka propisan zakonom, istim se zakonom određuje i voditelj zbirke osobnih podataka. Službenik za zaštitu osobnih podataka je osoba imenovana od strane voditelja zbirke osobnih podataka koja vodi brigu o zakonitosti obrade osobnih podataka i ostvarivanju prava na zaštitu osobnih podataka. Službenik za zaštitu osobnih podataka obavlja slijedeće dužnosti: – vodi brigu o zakonitosti obrade osobnih podataka u smislu poštivanja odredbi Zakona i ostalih propisa koji uređuju pitanje obrade osobnih podataka, – upozorava Voditelja zbirke osobnih podataka na nužnost primjene propisa o zaštiti osobnih podataka u slučajevima planiranja i radnji koje mogu imati utjecaj na pitanja privatnosti i zaštitu osobnih podataka, – upoznaje sve osobe zaposlene u obradi osobnih podataka s njihovim zakonskim obvezama u svrhu zaštite osobnih podataka, – brine o izvršavanju obveza iz članka 14. i 17. Zakona, – omogućava ostvarivanje prava Ispitanika iz članka 19. i 20. Zakona, – surađuje s Agencijom za zaštitu osobnih podataka u vezi s provedbom nadzora nad obradom osobnih podataka. Međimurska županija kao jedinica područne (regionalne) samouprave koja u obavljanju poslova iz svog samoupravnog djelokruga zapošljava više od 20 zaposlenika imenovala je službenika za zaštitu osobnih podataka. Sukladno odredbama Zakona o zaštiti osobnih podataka župan Međimurske županije kao voditelj zbirke osobnih podataka dužan je službene kontakt podatke službenika za zaštitu osobnih podataka učiniti javno dostupnima na županijskim web stranicama ili na drugi odgovarajući način. Službenica zadužena za zaštitu osobnih podataka u Međimurskoj županiji je Đurđa Varga, zaposlena na radnom mjestu stručne suradnice za poslove Skupštine i službeničke odnose u Upravnom odjelu za poslove Skupštine i opće poslove Međimurske županije. e-pretinac: djurdja.varga@medjimurska-zupanija.hr