http___lull.hr_politika-o-privatnosti__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 16.2 16.3 16.4 16.5 16.6 17.1 18.1 18.2 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 78.2 79.1 79.2 80.1 81.1 81.2 81.3 82.1 83.1 83.2 84.1 85.1 86.1 86.2 86.3 87.1 88.1 88.2 89.1 90.1 91.1 92.1 93.1 94.1 95.1 96.1 97.1 98.1 98.2 98.3 99.1 99.2 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 109.2 110.1 111.1 111.2 112.1 112.2 112.3 113.1 113.2 114.1 115.1 115.2 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 125.1 125.2 126.1 127.1 128.1 129.1 130.1 131.1 132.1 133.1 133.2 134.1 135.1 136.1 137.1 138.1 140.1 141.1 142.1 143.1 144.1 145.1 146.1 147.1 148.1 149.1
Welcome to ELECTRA HOTELS & RESORTS GROUP Our Group is comprised of the following companies that operate the Hotels listed next to each company name: – The societe anonyme under the corporate name “HOTEL ENTERPRISES ELEKTRA SA”, which operates the hotels ELECTRA at 5 Ermou str in Athens and ELECTRA PALACE at Aristotelous Square in Thessaloniki. Contact details of the data controller: HOTEL ENTERPRISES ELECTRA SA, Head office: 5 Ermou str, Athens, Tax Registration Number: 094075519, Tax Office: FAE ATHINON, Tel.: 2310294000 – The societe anonyme under the corporate name “HOTEL AND TOURISM COMPANY ELECTRA SA”, which operates the hotel ELECTRA PALACE at 18 Navarchou Nikodimou str in Athens. Contact details of the data controller: HOTEL AND TOURISM COMPANY ELECTRA SA Head office: 18 Navarchou Nikodimou str, Athens, Tax Registration Number: 094030956, Tax Office: FAE ATHINON, Tel.: 2103370000 – The societe anonyme under the corporate name “HOTELS ELECTRA SA”, which operates the hotel ELECTRA PALACE in Rhodes. Contact details of the data controller: HOTELS ELECTRA SA, Head Office: 5 Ermou str, Athens, Tax Registration Number: 094439368, Tax Office: FAE ATHINON, Tel.: 2103378000 – The societe anonyme under the corporate name “HOTEL ENTERPRISES AGIA DINAMIS SA”, which operates the hotel ELECTRA METROPOLIS at 15 Mitropoleos str in Athens. Contact details of the data controller: HOTEL ENTERPRISES AGIA DINAMIS SA, distinctive title: ELECTRA METROPOLIS SA, Head Office: 15 Mitropoleos str, Athens, Tax Registration Number: 800648709, Tax Office: FAE ATHINON, Tel.: 21410062000 – The societe anonyme under the corporate name “ELECTRA MANAGEMENT SA” Contact details of the data controller: ELECTRA MANAGEMENT SA., Head Office: 8 Xenofontos & Felellinon str, Athens, Tax Registration Number: 800648709, Tax Office: FAE ATHINON, – The societe anonyme under the corporate name “ELECTRA KEFALONIA SA”, which operates the hotel ELECTRA KEFALONIA HOTEL & SPA in Kefalonia. Contact details of the data controller: ELECTRA KEFALONIA SA, Head Office: 2 Bouziki str., Athens, Tax Registration Number: 800966816, Tax Office: FAE ATHINON, Tel.: 2103370006 Objects and purpose of this policy Our Group, ELECTRA HOTELS & RESORTS GROUP respects your privacy and protects your personal data. Each of the above companies is commercially independent. For any issue that may be addressed herein, you may contact the data protection officer listed below. With this policy we aim to keep you informed of the personal data we collect and process during our operation. Your personal data is collected and maintained for the necessary time, for the specified, explicit and legitimate purposes described below, processed in a lawful, fair and transparent manner, always in accordance with the applicable legal framework and in a manner that guarantees completeness and confidentiality. This data shall be suitable, relevant, appropriate, and not exceed the data required in the light of the foregoing purposes and shall be accurate and, if necessary, updated. Concepts and Definitions “Personal data”: any information relating to an identified or identifiable natural person (“data subject”). Identifiable is the natural person whose identity can be directly or indirectly identified, in particular by reference to an identifier such as name, identification number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of this natural person. “Processing of Personal Data”: any act or series of acts performed with or without the use of automated means on personal data or on personal data sets, such as the collection, registration, organization, structure, storage, adjustment or alteration, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of distribution, link or combination, restriction, deletion or destruction. “Data Controller” is the natural or legal person, public authority, agency or other body that, alone or in along with others, determines the purposes and manner of processing personal data. “Performer of the processing” means the natural or legal person, public authority, service or other entity that processes personal data on behalf of the data controller. “Consent” of the data subject: any indication of a free, specific, explicit and fully aware will, with which the data subject indicates that he or she agrees, with a statement or a clear affirmative action, to the processing of personal data relating to him / her “Personal data breach“: the breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed “Health Data”: personal data related to the physical or mental health of a natural person, including the provision of health care services, and which discloses information about his or her state of health. “Special categories of personal data/Sensitive personal data” personal data revealing racial or ethnic origin, political beliefs, religious or philosophical beliefs or participation in trade unions, as well as the processing of genetic data, biometric data for the unambiguous identification of face, health data or data concerning the sexual life of a natural person or the sexual orientation. General Principles for the Processing of Personal Data The ELECTRA HOTELS & RESORTS GROUP ensures that the personal data it processes are - Subject to processing that is lawful and legitimate with respect to the data subject - Collected for specified express and legal purposes - Appropriate, relevant and limited to those necessary for the purposes for which they are processed - Accurate and updated - Processed in such a way as to guarantee the appropriate security of personal data, including their protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures. - Retained only for the time required for the processing of personal data. In some cases they may be retained for a longer period, especially if the processing of such data is deemed necessary for: – the compliance with a legal obligation imposed by a provision of another law. – the compliance of the ELECTRA HOTELS & RESORTS GROUP with the duty to fulfill a public interest objective. – archiving for purposes of public interest, scientific or historical research – for purposes relating to the protection of public health – for statistical purposes – for the foundation, opposition, exercise or support of legal claims. Legal Framework for the Protection of Personal Data In addition to the Regulation (EU) 2016/679 of the European Parliament and of the Council (2016/679) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, any national law with respect to the processing and protection of personal data, as well as the Directives issued by the Data Protection Authority, shall apply. Indicatively, the following laws are mentioned: - Law 4624/2019 (Measures for the Implementation of the European Parliament’s General Data Protection Regulation [2016/679]) - Law 2472/1997 on the protection of individuals from the processing of personal data. - Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data. - Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector. - Directive 1/2011 of the Data Protection Authority on the Use of Video Surveillance Systems for the Protection of Persons and Goods. - Directive 115/2001 of the Data Protection Authority on the Protection of Personal Data in the Field of Labor Relations. - Law 3471/2006 on the protection of personal data and privacy in the field of electronic communications - Regulations of the relevant administrative bodies. - Health Protocols, Acts of Legislative Content, Joint Ministerial Decisions. Purposes of Processing In accordance with the above legal framework, personal data collected by the ELECTRA HOTELS & RESORTS GROUP are used for the following processing purposes: a) To manage the booking of rooms as well as any other hosting service b) To manage the relationship with you before, during and after your stay at the hotel c) For the Company’s compliance with Greek and European Law d) For marketing purposes e) For the establishment, recognition, exercise or defense of a right and legal claims f) To support business processes g) To improve our hotel services h) For the security of our information systems i) For membership acquisition programs such as the Electra Rewards program. j) For the performance of a task performed in the public interest and in the field of public health Legal basis for the Processing of Personal Data The ELECTRA HOTELS & RESORTS GROUP processes your personal data transparently, in accordance with the principles of legality, proportionality, confidentiality and integrity, limitation of purpose and accuracy, specific time of data retention and data minimization. The legal basis for processing your personal data may be: a) your consent b) the need to process your data in the context of our contractual obligation or at the pre-contractual stage c) the need to process your data in accordance with our legal obligation d) the need to process your data in the context of safeguarding our legitimate interests e) the need to process data to protect the vital interests of you or the person you accompany f) the need to export statistics g) the need for processing to fulfil a duty in the public interest, in particular in the field of public health. Data that the ELECTRA HOTELS & RESORTS GROUP processes For the above purposes, the ELECTRA HOTELS & RESORTS GROUP collects and processes personal data, including indicatively the following: G.1 Employees / External Partners: full name, father’s name, mother’s name, year of birth, place of birth, gender, nationality, address, email address, contact phone numbers, identification card number (ID), tax registration number (VAT), AMKA, bank account number (IBAN), marital status, education and training status of the employee/ partner, work experience, curriculum vitae, salary, working hours, medical record / health certificate Purposes / Legal basis for data processing: –Managing the working relationship between the ELECTRA HOTELS & RESORTS GROUP and the employee/external partner. The processing of this data is considered necessary for the performance of the employment contract. – Fulfilling the employer’s obligations of the ELECTRA HOTELS & RESORTS GROUP. The processing of data is necessary for the compliance of the ELECTRA HOTELS & RESORTS GROUP with its legal obligations. Prospective Employees: name, surname, contact information, education, work experience, email, nationality, marital status The ELECTRA HOTELS & RESORTS GROUP collects and processes candidates’ personal data for vacancies. This data is collected by the candidate upon submission of the relevant application. In case of non-recruitment, the CV of the candidate is retained for 2 years to cover any future job opportunities. Purposes / Legal basis for processing -Assessment of the candidate’s suitability for a particular job vacancy. The legal basis for processing is the legal interest of the ELECTRA HOTELS & RESORTS GROUP and the consent of the prospective employee. Participants, speakers and invited to scientific conferences, actions and events a) Full name, postal address, status, profession, email. b) Image data (photo / video recording). As part of the implementation of the actions of the ELECTRA HOTELS & RESORTS GROUP, it is possible to take pictures and / or videotape the various events, conferences or workshops organized by the ELECTRA HOTELS & RESORTS GROUP. This data may be posted on the site or social media managed by the ELECTRA HOTELS & RESORTS GROUP. Purposes / Legal basis for data processing: – The purpose is the successful organization. The processing of personal data is considered essential for the successful management and organization of their actions and purposes. Hotel Residents / Visitors: full name, passport number, date of birth, credit card number, length of stay, price, email, address, telephone, pricing information Purposes / Legal basis for data processing: – Performance of a contract to which the subject is a party – Consent of the subject – Compliance with the legal obligation of the ELECTRA HOTELS & RESORTS GROUP. Suppliers: Full Name, VAT, IBAN, Telephone, Address, Email Purposes / Legal basis for data processing: – Performance of a contract to which the subject is a contractual party Special categories of personal data G.6.1 Employees: The ELECTRA HOTELS & RESORTS GROUP may collect and process data belonging to specific categories of personal data (“sensitive data”), such as data relating to the health of its employees, in order to meet its insurance obligations. Electra HOTELS & RESORTS GROUP may also process health data in the context of the obligation to comply with the National Legislation and the application of the Health Protocols, as they apply each time. Similarly, in exceptional cases, when required by applicable law, the ELECTRA HOTELS & RESORTS GROUP may collect and process data relating to criminal convictions or offenses, such as copies of criminal records, always respecting the principle of proportionality. Residents / Visitors / Conference Participants: The ELECTRA HOTELS & RESORTS GROUP may process data belonging to specific categories of personal data (“sensitive data”), such as data on eating habits, allergies, religious beliefs, illnesses etc.. Electra HOTELS & RESORTS GROUP may also process health data in the context of the obligation to comply with the National Legislation and the application of the Health Protocols, as they apply each time. Purposes / Legal basis for data processing in the above cases under E.6: – Fulfillment of the obligations and exercise of specific rights of the ELECTRA HOTELS & RESORTS GROUP or the data subject in the field of labor law and social security and social protection law. – Protecting the data subject’s vital interests – The fulfilment of a duty in the public interest, in the field of public health. G.6.2 Communication Data Persons who have expressed their wish through valid consent to receive news and updates from the ELECTRA HOTELS & RESORTS GROUP. Purposes / Legal basis for data processing: Consent of persons wishing to receive updates and offers from the ELECTRA HOTELS & RESORTS GROUP Transmission of Data The entire workforce of the ELECTRA HOTELS & RESORTS GROUP that processes your personal data is contractually bound by the terms of confidentiality and privacy of your data. At ELECTRA HOTELS & RESORTS GROUP, it is part of our philosophy and our basic principle that we shall not disclose your information to third parties for their own independent business or marketing purposes without your consent. However, we may share your information with the following: - Affiliate companies. Your information may be shared with affiliates companies of the ELECTRA HOTELS & RESORTS GROUP. - Business partners. We may also share your information with trusted business partners. These partners may use your information to provide the services you requested and to provide you with promotional material, advertisments, and other material, in the event you have given your consent. - Service providers and / or any third party who may undertake the processing on our behalf. We may also disclose your information to companies that provide services on our behalf, such as IT subcontractors, companies that send bulk emails on our behalf, banks, credit card issuers, law firms, mail service companies, print service companies, etc. - Credit Approval: When you apply for a credit, your personal information is used and disclosed to appropriate third parties in accordance with the applicable law, in order to decide on granting and maintaining a credit limit for you. - Other third parties with your consent or by your order. In addition to the disclosures described in this Privacy Policy, we may share information about you with third parties if you give your consent or request it. - Public Bodies (e.g., National Public Health Organization), where expressly provided for by national legislation. Exceptionally, the following are allowed to have access to your personal data: a) the judicial and prosecutorial authorities in the exercise of their functions of their own motion or at the request of a third party claiming a legitimate interest and in accordance with lawful procedures; b) other bodies of the Greek State, which by virtue of their statutes have such a right and competence. Data Retention Time We take reasonable steps to ensure that your personal information is retained only for as long as it is necessary and for the purpose for which it was collected or for as long as it is required under contract or applicable law. The CVs collected by the relevant HR department are kept for two years and then destroyed. Tax information is maintained in accordance with tax law. Rights of the Subjects of Personal Data The ELECTRA HOTELS & RESORTS GROUP ensures that data subjects are able at any time to exercise their rights under the law regarding the collection and processing of personal data. These rights are as follows: ● The right to access the data. ● The right to correct the data. ● The right to delete data (“right to forget”). ●The right to limit the processing of data. ●The right to data portability. ●The right to object to the processing of data. Any request by the individual/ subject is submitted to the ELECTRA HOTELS & RESORTS GROUP at: dpo@electrahotels.gr The ELECTRA HOTELS & RESORTS GROUP will respond to your request free of charge, without delay and in any event within one month upon receipt of the request, except in exceptional cases, so that the above deadline may be extended by a further two months if necessary, taking into account the complexity of the request and/or the number of requests. The ELECTRA HOTELS & RESORTS GROUP will inform you of any extension within one month upon receipt of the request, as well as of the reasons for the delay. In the event that the satisfaction of your request is impossible, the ELECTRA HOTELS & RESORTS GROUP will inform you within one month upon receipt of the request, of the relevant reasons and of the possibility to file a complaint with the Data Protection Authority, as well as about your right to appeal to the competent judicial authorities. If your claim is deemed by the ELECTRA HOTELS & RESORTS GROUP to be manifestly unfounded or excessive, it may give rise to the charge of a reasonable and proportionate fee, taking into account administrative costs to satisfy it or refusing to process your claim. DPO information For any request regarding the processing of your personal data, please refer to the Data Protection Officer (DPO) of the ELECTRA HOTELS & RESORTS GROUP: Full name: Giannis Bilianis E-mail: dpo@electrahotels.gr Website: https://www.electrahotels.gr Address: 8 Xenofontos & Filellinon Street, Athens, PC: 10557 Right to report to the Competent Authority. In case you feel that your privacy is in any way affected, you may contact the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, 115 23, Athens, +30 210 6475600, +30 210 6475628, contact@dpa.gr). Changes to this Policy The ELECTRA HOTELS & RESORTS GROUP may unilaterally revise this Policy at any time for reasons of compliance with regulatory changes or for operational purposes. We encourage you to review this Policy regularly to find out how the ELECTRA HOTELS & RESORTS GROUP manages and processes your personal data. This Policy was posted on 29.04.2021 For the Terms of Use please click here
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 39.2 39.3 39.4 40.1 41.1 42.1 42.2 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 47.2 48.1 48.2 49.1 49.2 50.1 51.1 52.1 53.1 54.1 54.2 55.1 56.1 57.1 57.2 58.1 59.1 60.1 61.1 61.2 61.3 61.4 61.5 61.6 61.7 62.1 62.2 63.1 64.1 64.2 65.1 65.2 65.3 66.1 67.1 67.2 68.1 68.2 69.1 70.1 70.2 71.1 71.2 71.3 71.4 71.5 72.1 73.1 74.1 75.1 75.2 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 87.3 87.4 88.1
FOR A RELAXING HOME Pravila privatnosti: – Zaštita osobnih podataka i politika privatnosti Definicije Prema Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (dalje u tekstu: Opća uredba o zaštiti podataka), osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi („ispitanik”); pojedinac čiji se identitet može utvrditi jest osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje. Pravna osnova obrade podataka Pravne osnove za zakonitu obradu osobnih podataka sukladno Općoj uredbi o zaštiti podataka i Zakonu o provedbi Opće uredbe o zaštiti podataka su sljedeće: Načela Prilikom obrade osobnih podataka LULL Studio d.o.o. kao voditelj obrade poštuje sljedeća načela: (a) zakonitosti, poštenosti i transparentnosti; (b) ograničavanja svrhe; (c) smanjenja količine podataka; (d) točnost; (e) ograničenje pohrane; (f) cjelovitosti i povjerljivosti; (g) pouzdanosti. Podaci koji se pružaju ispitaniku Kupcu kao ispitaniku se pružaju sljedeće informacije u smislu odredbe čl. 13. Opće uredbe o zaštiti podataka: (a) identitet i kontaktni podaci voditelja obrade: LULL Studio d.o.o., Ulica Augusta Piazze 10, 10000 Zagreb, Hrvatska, [email protected], Tel: 00 385 99 497 5592, (b) kontaktni podaci službenika za zaštitu podataka: [email protected] (c) svrha obrade radi kojih se upotrebljavaju osobni podaci kao i pravna osnova za obradu: izvršavanje ugovora, izvršavanja dostave kupljenog proizvoda, zaštita ključnih interesa ispitanika, dostava newslettera, u svrhu osiguravanja podrške kupcima i marketing (d) primatelji ili kategorije primatelja osobnih podataka: posrednici i/ili suradnici koji su u ugovornom odnosu sa LULL Studio d.o.o. (e) LULL Studio d.o.o. neće dostavljati osobne podatke na teritorij treće zemlje ili međunarodne organizacije, osim uz Vašu izričitu privolu. (f) razdoblje u kojem će osobni podaci biti pohranjeni/kriteriji kojima se utvrdilo to razdoblje: pet godina računajući od dostave osobnih podataka LULL Studio d.o.o. (g) ispitanik ima pravo od LULL Studio d.o.o. zatražiti pristup osobnim podacima i ispravak ili brisanje osobnih podataka ili ograničavanje obrade koji se odnose na ispitanika ili prava na ulaganje prigovora na obradu takvih te prava na prenosivost podataka; (h) ako se obrada temelji na danoj privoli ispitanika, ispitanik je ovlašten u bilo kojem trenutku povući privolu, a da to ne utječe na zakonitost obrade koja se temeljila na privoli prije nego što je ona povučena; (i) pravo je ispitanika podnijeti prigovor nadzornom tijelu; (j) pružanje osobnih podataka nije uvjet nužan za sklapanje ugovora te ispitanik nema obvezu pružanja osobnih podataka i nema posljedica ako se takvi podaci ne pruže, ali nedostavljanje potrebnih podataka može utjecati na mogućnost i/ili kvalitetu ispunjenja ugovora; (k) ne postoji automatizirano donošenje odluka. Podaci koji se odnose na djecu Sukladno Općoj uredbi o zaštiti podataka djeca zaslužuju posebnu zaštitu u svakom pogledu, pa tako i u pogledu zaštite osobnih podataka. Sukladno članku 19., stavku 1. Zakona o provedbi Opće uredbe o zaštiti podataka, djecom se smatraju sve osobe mlađe od 16 godina, te LULL Studio d.o.o. ne traži niti prikuplja osobne podatke djece ili o njima bez suglasnosti nositelja roditeljske odgovornosti. Stoga će LULL Studio d.o.o. poduzeti sve razumne napore, kako bi podatke koje dobije od djece obrađivalo samo uz suglasnost nositelja roditeljske odgovornosti. Ako LULL Studio d.o.o. sazna da su mu poslani osobni podaci djece, ali bez valjane suglasnosti nositelja roditeljske odgovornosti, LULL Studio d.o.o. će u razumnoj mjeri nastojati učiniti sljedeće: Kada i kako Lull.hr prikuplja podatke korisnika? Osobni podaci se prikupljaju izravno od pojedinca – podaci dostavljeni za potrebe sklapanja ili izvršenja ugovora, kreiranjem korisničkog računa na Internet stranici LULL Studio d.o.o., neposredno, telefonskim razgovorom sa pojedincem. LULL Studio d.o.o. prikuplja osobne podatke Kupaca samo u mjeri koji su nužni za ispunjenje svoje obveze sukladno zahtjevima Kupca, odnosno za koje postoji legitimni interes te za koje ima privolu Kupca u svrhu informiranja, podrške kupcima i marketing u mjeri u kojoj je to važno za poslovanje LULL Studio d.o.o.. LULL Studio d.o.o. se obvezuje štititi osobne podatke Kupaca u skladu sa Općom uredbom o zaštiti osobnih podataka te se obvezuje da osobne podatke neće ni na koji način ustupiti trećim osobama bez pristanka Kupca (osim nužnih podataka za koje postoji legitimni interes u svrhu izvršavanja dostave kupljenog proizvoda) niti će ih koristiti u neodređene svrhe. Obrada osobnih podataka koja se temelji na legitimnom interesu ili predstavlja ugovornu obvezu obavlja se održavanjem najviši standarda sigurnosti i poslovanja. Kupac u svakom trenutku može izjaviti prigovor na obradu svojih osobnih podataka na temelju svoje specifične situacije. Kupac ima pravo zatražiti nadopunu, ispravak ili izmjenu netočnih osobnih podataka. Od ovog se izuzimaju slučajevi u kojima je LULL Studio d.o.o. po valjanom nalogu ovlaštenih državnih tijela, u skladu sa zakonom, dužan dostaviti ili dopustiti uvid u osobne podatke Kupaca. Podaci koje prikuplja LULL Studio d.o.o. su ime, prezime, adresa dostave, broj telefona i adresa e-pošte. Prilikom kupovine u Lull.hr fizičkoj i internetskoj trgovini tražimo od Vas određene osobne podatke koje su nužne za ispunjenje usluge i kupovinu. Pružanje osobnih podataka u svrhu prodaje nužno je za izvršavanje ugovora te ako ih ne pružite, to će utjecati na ispravno izvršenje ugovora ili ga čak onemogućiti. Tako prikupljene podatke koristimo samo za obradu traženih informacija i upita korisnika te u svrhu osiguravanja kvalitetnog korisničkog iskustva. Podaci su dostupni samo djelatnicima kojima su nužni za ispunjenje ugovora. Kupci i korisnici internetske stranice www.lull.hr suglasni su da u skladu sa Općom uredbom o zaštiti osobnih podataka te u skladu s traženim upitom obrađujemo osobne podatke te prihvaćaju sve rizike koji nastaju korištenjem internetske stranice. Informatički sustav koji koristi LULL Studio d.o.o. zaštićen je tehničkim mjerama od neovlaštenog pristupa, izmjene, širenja, gubljenja i brisanja podataka Kupaca. LULL Studio d.o.o. prikuplja e-mail adrese korisnika koje koristi za slanje newslettera odnosno elektroničkih poruka koje sadrže promotivne poruke, ponude i vijesti iz svijeta mobilne tehnologije. LULL Studio d.o.o. uz privolu Kupca može koristiti osobne podatke za informiranje o novim i akcijskim proizvodima te dostavu promotivnih materijala, newslettera te unapređenja odnosa s Kupcima. Ukoliko pristup podacima u svrhe marketinške obrade imaju treći pružatelji usluga, oni su detaljno opisani u ovim Uvjetima. LULL Studio d.o.o. je voditelj obrade osobnih podataka u skladu sa zakonom i propisima o zaštiti osobnih podataka. LULL Studio d.o.o. kao voditelj obrade osobnih podataka određuje svrhu i sredstva obrade osobnih podataka i odgovorna je za čuvanje i korištenje osobnih podataka u papirnatom i/ili elektronskom obliku. Temeljem članka 37. Opće uredbe o zaštiti podataka LULL Studio d.o.o. kao voditelj obrade osobnih podataka, imenovao je službenika za zaštitu osobnih podataka kojeg možete kontaktirati putem e-adrese [email protected] U slučaju povrede osobnih podataka LULL studio d.o.o. bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvješćuje nadzorno tijelo nadležno o povredi osobnih podataka, osim ako nije vjerojatno da će povreda osobnih podataka prouzročiti rizik za prava i slobode pojedinaca. Ako izvješćivanje nije učinjeno unutar 72 sata, mora biti popraćeno razlozima za kašnjenje. Tko su subjekti s kojima Lull.hr može dijeliti osobne podatke? Prilikom kreiranja Lull.hr računa na Lull.hr trgovini potrebno je unijeti svoje podatke (e-mail, ime i prezime). Prilikom prijave putem društvenih mreža, odnosno Google i Facebook računa, LULL Studio d.o.o. ne zadržava podatke prikupljene takvom prijavom. Lull.hr surađuje s pružateljima usluga trećim stranama kako bi se mogle provesti aktivnosti slanja e-pošte, oglašavanja i analiziranja upotrebe naših web mjesta i aplikacija te praćenja učinkovitosti kampanja. Osobne podatke dijelimo samo u onoj mjeri potrebnoj za izvršavanje usluge u naše ime. U nastavku možete provjeriti tko su davatelji usluga trećih strana potrebnih za suradnju: https://www.google.com/analytics/terms/gb.html, Opći pregled o načelima sigurnosti i privatnosti Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en, kao i Googleova Pravila privatnosti: https://policies.google.com/privacy?hl=en. Ove internetske stranice upotrebljavaju Google Analytics za analizu protoka posjetitelja neovisno o vrsti uređaja, a koji se temelji na korisničkom identifikacijskom broju (ID). Možete onemogućiti praćenje Vašeg korištenja više uređaja u svom Google računu pod „Moje informacije“ („My information“), „Osobne informacije“ („Personal information“). Pristup bazi Kupaca s osobnim podacima Kupaca uz LULL Studio d.o.o. u svrhu sklapanja ili izvršavanja ugovora, odnosno kupovine u Lull.hr trgovini i dostavu proizvoda imaju: • Plavi pixel d.o.o., specijalizirana tvrtka za izradu web trgovina s kojom LULL Studio d.o.o. ima sklopljen ugovor o zaštiti podataka. Politika kolačića „Kolačić“ je dio informacija spremljenih na računalo, mobitel ili tablet korisnika (dalje u tekstu: „uređaj“), koje mogu biti dostavljene neposredno od strane internetske stranice koju posjetite (kolačići od prve strane) ili u suradnji i za potrebe internetske stranice od treće strane (kolačići treće strane). Kolačići u pravilu spremaju postavke korisnika, postavke za internetsku stranicu i sl. Nakon što ponovno korisnik otvori internetsku stranicu, internetski preglednik korisnika šalje natrag kolačiće koji pripadaju ovoj web stranici. To omogućuje stranici da prikaže informacije prilagođene potrebama korisnika. Kolačići mogu imati širok raspon informacija, uključujući i dio osobnih informacija. Takve informacije mogu biti spremljene jedino ako to korisnik omogući. Sama internetska stranica ne može dobiti pristup informacijama koje im korisnik ne dopusti te ne mogu pristupiti niti jednoj drugoj datoteci na računalu korisnika. Kako bi stranice Lull.hr ispravno radile, one moraju na računalo korisnika spremiti malenu količinu kolačića (Cookies). Prema Općoj uredbi o zaštiti podataka, Zakonu o provedbi Opće uredbe o zaštiti podataka i Zakonu o elektroničkim komunikacijama, LULL Studio d.o.o. prije spremanja Cookiea mora zatražiti pristanak (privolu) korisnika. Ukoliko korisnik ne pristane na pohranu kolačića postoji mogućnost da stranica neće moći koristiti neke od funkcionalnosti koje daje LULL Studio d.o.o. web trgovina. Zadaća kolačića kojem ste dopustili da se pohrani na Vaše računalo je spremanje Vaših postavki, postavki web stranice, Vašeg preferiranog jezika ili adrese. Kada nakon nekog vremena opet posjetite istu stranicu internet preglednik kojim se koristite šalje informacije prilagođene Vašim potrebama. Ovisno o definiranoj zadaći kolačići spremaju širok spektar informacija koji između ostalih uključuju i osobne podatke. Međutim, isključivo vi odlučujete koje informacije će kolačići spremati. U postavkama Vašeg internet preglednika možete sami birati hoćete li zahtjeve za spremanje kolačića odobriti ili odbiti. Onemogućavanjem kolačića možda nećete moći koristiti neke od funkcionalnosti na stranicama koje posjećujete. Stalni kolačići ostaju na računalu nakon zatvaranja programa internet preglednika. Stalni kolačići ostat će na računalu ili mobilnom uređaju danima, mjesecima, čak i godinama te imaju svrhu pohraniti stalne podatke kao što su npr. korisničko ime i lozinka da se ne morate svaki puta iznova prijavljivati. Privremeni kolačići nestaju s računala nakon što zatvorite internet preglednik. Uz njihovu pomoć se pohranjuju privremeni podaci kao što su podaci koje dajete kad ste u online kupnji. Kolačići od prve strane mogu biti stalni ili privremeni, a pohranjuju podatke koje ćete ponovo koristiti prilikom sljedećeg posjeta stranicama sa kojih su pohranjeni na Vaše računalo. Kolačići treće strane ili tzv. reklamni kolačići pohranjuju se na Vaše računalo ako koristite reklame i oglase na stranici koju posjećujete a ona vas preusmjeri na treću stranu. Ovaj način služi za praćenje korištenja Interneta u marketinške svrhe. Lull.hr koristi kolačiće u svrhu poboljšanja korisničkog iskustva, u svrhu funkcioniranja stranice u kontekstu sigurnosti i u svrhu radnji koje posjetitelj stranice odabere samostalno (web forma za slanje poruka ili traženje usluga). Privremeni kolačići se brišu kada napustite internetski preglednik. Njihova jedina svrha je unaprijediti korisničko iskustvo za vrijeme posjete stranici. Stalni kolačići nemaju ograničenja i ostaju u Vašem pregledniku dok ih ručno ne obrišete. Prikupljeni podaci se koriste isključivo u statističke svrhe. Ovo su primjeri trećih strana koje pružaju usluge analize i marketinške obrade podataka Za više informacije o svrsi i opsegu prikupljanja podataka i obradi istih od strane pružatelja dodatka, molimo da pogledate izjave o zaštiti privatnosti ovih pružatelja koji su niže navedeni. Kako korisnici mogu ažurirati, urediti ili obrisati svoje osobne podatke? LULL Studio d.o.o. – internet trgovina. prikuplja podatke korisnika u skladu Općom uredbom o zaštiti osobnih podataka i Zakonom o provedbi Opće uredbe o zaštiti podataka. Svaki korisnik može u svakom trenutku može: LULL Studio d.o.o. može odbiti provođenja zahtjeva ukoliko se time ugrožava privatnost korisnika ili drugih korisnika, ako primjena zahtjeva je suprotna zakonu, u izuzecima radi zaštite javnog interesa (npr. sprječavanje ili otkrivanje zločina), pravnih obveza ili prava i sloboda drugih. Zahtjeve za pristup, ispravljanje ili brisanje podataka možete uputiti na: [email protected]lull.hr ili na adresu sjedišta Ulica Augusta Piazze 10, Zagreb, 10000 Zagreb, Hrvatska. Obrada takvog zahtjeva može biti tehnički i vremenski složen proces te je u složenim slučajevima ili u slučaju većeg broja zahtjeva potrebno duže vrijeme potrebno za obradu podataka o čemu ćemo vas obavijestiti na zakonit i siguran način. Kako čuvamo sigurnost Vaših podataka? U svrhu očuvanja sigurnosti, integriteta i dostupnosti osobnih podataka kupaca, podatke osiguravamo nizom sigurnosnih mjera koje uključuju enkripciju, autentifikaciju i strogo ograničeni pristup podacima. Neke od mjera koje koristimo uključuju: Sigurnosne mjere koje se provode imaju za cilj: Koliko dugo zadržavamo Vaše osobne podatke? Osobne podatke pohranjujemo i obrađujemo onoliko dugo koliko je potrebno za izvršenje određene legitimne svrhe, osim ako važećim propisima nije za pojedinu svrhu predviđeno duže vrijeme čuvanja. U slučaju davanja privole za marketing, podatke čuvamo pet godina računajući od dostave osobnih podataka LULL Studio d.o.o. Povlačenje privole ne utječe na zakonitost obrade na temelju privole prije njezina povlačenja. Povlačenje dostavlja se u pisanom obliku. Osobni podaci koji više nisu potrebni se ili nepovratno anonimiziraju ili se uništavaju na siguran način. Kontakti