http___lull.hr_politika-o-privatnosti__1.xml
1.1 2.1 3.1 3.2 3.3 4.1 4.2 5.1 6.1 7.1 8.1 9.1 9.2 10.1 11.1 12.1 13.1 13.2 14.1 15.1 16.1 16.2 16.3 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 50.2 51.1 51.2 52.1 53.1 54.1 55.1 56.1 56.2 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 67.2 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 76.2 77.1 77.2 77.3 77.4 77.5 78.1 78.2 78.3 78.4 79.1 80.1 80.2 81.1 82.1 83.1 84.1 84.2 85.1 86.1 86.2 86.3 87.1 87.2 88.1 88.2 89.1 90.1 91.1 91.2 92.1 93.1 93.2 94.1 95.1 96.1 97.1 98.1 98.2 99.1 100.1 100.2 101.1 102.1 103.1 104.1 104.2 105.1 106.1 106.2 107.1 108.1 109.1 110.1 111.1 112.1 112.2 113.1 114.1 115.1 115.2 115.3 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 125.1 126.1 127.1 128.1 129.1 130.1 131.1 132.1 133.1 134.1 135.1 135.2 136.1 137.1 138.1 139.1 139.2 140.1 140.2 141.1 142.1 143.1 143.2 143.3 144.1 145.1 145.2 146.1 147.1 148.1 149.1 150.1 151.1 152.1 153.1 154.1 155.1 156.1 156.2 156.3 156.4 157.1 158.1 159.1 160.1 160.2 161.1 162.1 163.1 163.2 164.1 165.1 166.1
Privacy statement Agilitas Group Protection of the personal data of temporary workers in the context of their personnel file and salary data Agilitas Group treats in a secure and confidential manner the personal data that is collected on all temporary workers and temporary workers, collectively referred to as “temporary worker(s)” in this privacy policy. Agilitas Group undertakes to strictly comply with all the provisions regarding the protection of personal data in the context of the collection and processing of the personal data of its temporary workers. This policy defines the personal data processed by Agilitas Group, the basis on which it is processed and the reason for its processing, as well as how it is protected. This policy concerns in particular the protection of personal data during their processing in the context of the personnel file and salary data. It applies to all temporary workers bound to the employer by a temporary work contract, but also to people: - who are no longer in service, but whose employer is legally obliged to retain a certain amount of data; - who are in contact with the employer as part of an ongoing recruitment process. These two categories are referred to in this policy when it comes to “acting”. - Who to contact in case of questions? Agilitas Group SA, registered with the Banque-Carrefour des Entreprises under number (VAT BE) 0478.971.449, whose registered office is located at 2800 Mechelen, Stationsstraat 120, is responsible for processing personal data. Agilitas Group declares to respect, as data controller, the Belgian legislation on privacy, as well as the provisions of the General Data Protection Regulation from its entry into force. - What are personal data? The General Data Protection Regulation defines personal data as “ any information relating to an identified or identifiable natural person; is deemed to be an ‘identifiable natural person’ a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his physical, physiological, genetic, psychological, economic, cultural or social identity. If this Privacy Policy refers to personal data, reference is made to this definition in the Regulations. In principle, no special categories of personal data are processed, unless the execution of the employment contract requires it. “Processing of special categories of personal data” means: the processing of personal data which reveals racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. - What data is processed? - Nature of personal data Agilitas Group collects and processes various personal data of its temporary workers relating to their occupation. These data primarily relate to all data resulting from the application of legal, regulatory or conventional provisions in connection with the employment of personnel. They generally relate to the following elements: - the status and liability in terms of labor, social and tax law; - presences and absences, as well as their interpretation; - the components of the salary, the height, the payment and the evolution of the salary; - all other legal, regulatory and conventional aspects of personnel administration which have e.g. also relates to occupational accident insurance, occupational medicine, medical control of incapacity for work, etc. The data may also and more specifically, in the context of the performance of the employment contract and the application of legal, regulatory or conventional provisions, relate to different categories of personal data: - identification data (name, address, national register number, identity card number) - nationality (for the obligation to have an occupation permit) - financial data (bank account number, etc.) - personal characteristics (age, gender, marital status, work permit, certificate of good conduct, etc.) - composition of the household (dependants, date of birth of children, etc.) - curriculum vitae, cover letters, notes taken during the job interview - salary and payslips - working hours - data relating to profession and employment (personnel file in the strict sense) - job description - data necessary to determine the remuneration - overview of attendance and absence - agreements and objectives that the temporary worker must achieve in his function - evaluation and assessment data - skills he must have or acquire - if applicable: physical data (height, weight, etc. e.g. for work clothes) - data relating to certain habits (particularities in terms of travel and travel, civil distinctions, information concerning an accident, etc.) - accommodation characteristics (only if the employer provides accommodation) - data relating to training, including training courses taken, planned, training needs, etc. (educational leave, promotion, etc.) - certain judicial data that have an impact on the employment contract (former detention, garnishment of wages, etc.) - where applicable: political opinions, philosophical or religious beliefs (for the application of short-time work for communion, secular youth celebration, political leave, etc.) - affiliation to a mutual insurance company (accident records, etc.) - administrative/medical data (percentages of incapacity for work, medical certificates, examinations related to HR, etc.) - career planning data - name of a contact person in case of emergency These categories of personal data are intended to be exhaustive and do not in any way mean that the employer processes all this data. - Personal Information The temporary worker will provide all the relevant information the employer needs. At the time of his recruitment or when new measures are applied, the temporary worker gives the employer all the information necessary for the application of the mandatory formalities, either in the field of social legislation or for the granting, suspension or termination of the right to indemnities and other allowances. The employer reserves the right to request a copy of the diplomas and/or certificates obtained if these documents are important in the function performed by the temporary worker. The employer will treat the information collected with the required privacy. Any change in the original personal information (change of address, marital status, dependents, etc.) will be communicated spontaneously and without delay online, in writing or by e-mail to the temporary employment agency. The temporary worker is responsible for the non-information or the late information of the employer and will have to reimburse, if necessary, the indemnities, allowances or interventions unduly perceived. - Collection of personal data from third parties In accordance with appendix 4 of the Decree of the Flemish Government implementing the decree relating to private placement, no references or data are requested from their current or previous employer without the prior and explicit consent of the temporary worker. If personal data is collected from third parties, the temporary worker is expressly informed, and his explicit consent will be requested beforehand. Consent is granted by the signature by the temporary worker of a declaration which clearly informs him, and which includes at least the following data: the identity of the temporary worker, the identity of the organizations or persons questioned, the nature of the data requested, the reason for requesting the data and the period during which the consent will be used. The temporary worker is aware that the explicit reference in his curriculum vitae to a reference person is considered as implicit consent. - Protected personal data - Some data is only processed to grant an advantage to the temporary worker. - “ Sensitive data” may be processed when it is necessary for the execution of the file holder’s labor rights and duties. (Article 9 of the General Data Protection Regulation, Article 8 of the Law of December 8, 1992, Articles 25 to 27 inclusive of the Royal Decree of February 13, 2001) - “Membership of a mutual insurance company” may be processed in order to meet a legitimate interest of the data subject if the processing aims to grant a real advantage and insofar as the data subject does not object to the processing. (Articles 25 to 27 inclusive of the Royal Decree of February 13, 2001) - Processing of personal data The personal data available to the employer can be obtained both through the temporary worker and through other information channels. If the employer does not obtain the temporary worker’s personal data, the temporary worker is informed within a reasonable period of time. The processing of this data is subject to the law of December 8, 1992 relating to the protection of privacy with regard to the processing of personal data and to Regulation 2016/679 of April 27, 2016 relating to the protection of natural persons. with regard to the processing of personal data and on the free movement of such data. The controller is the employer who processes personal data with due care. You will find further information on the rights of the temporary worker in the context of this processing and on the security of the processing below. - Why are these personal data processed and what is the legal basis for the processing? The personal data collected and processed is intended for storage and use by Agilitas Group and related companies such as Ergoflex, in the context of their recognized activities as employment agencies, and more specifically recruitment and selection, labor interim or in the context of recognition as a service company. The personal data of the temporary worker are processed: - due to laws, regulations and instructions at regional, federal and international level in the field of labor law, social security, tax legislation, including collective labor agreements and individual employment contracts as well as work regulations; - under the employment contract; - a legitimate interest of the controller or a third party. As part of the personnel file and payroll administration, a large amount of personal data is processed which is required by laws, regulations and instructions at regional, federal and international level in the areas of labor law, social security, tax legislation, including collective labor agreements and individual employment contracts as well as work regulations. Where appropriate, the purposes will be formulated more clearly and communicated to the interim. Personal data is mainly used for salary management, with the possible help of a social secretariat, as well as for personnel administration. They are dealt with under the temporary employment contract. These are mainly data that appear on the annual individual account. Marital status and dependent children are necessary for the calculation for tax and social purposes. The origin (nationality) must be checked and processed in order to meet the obligation to have an occupation permit. Resumes, cover letters and notes taken during the job interview as well as evaluation forms are treated to go through the application process, as a legitimate interest. Personal data obtained from assessments of the temporary worker or from the monitoring of the temporary worker will also be processed due to the existence of an employment contract. If this information is used for other purposes, the temporary worker will be informed in due time according to the legal rules. Photos and videos are collected and processed for use for internal communication purposes, but only with prior consent. The name of a contact person is collected in order to contact a family member or close friend in the event of an emergency, with the legal basis being the need to protect the vital interests of the temporary worker. Different data will also be processed due to a legal obligation that rests on the employer or when the processing is necessary and reasonable to defend the interests of the controller (employer) or of a third party. The employer will inform the temporary worker in good time if necessary. In some cases, the processing of personal data is based on the express consent of the temporary worker. - Rights of the temporary worker in the context of the processing of personal data - Processing of personal data by customers Agilitas Group customers may process the personal data of temporary workers. This processing of personal data is governed by the customer’s privacy policy. - Right of consultation and copy The temporary worker has the right to consult free of charge the personal data that the employer processes about him, as well as the reason for which the employer does it, the location from which the employer extracted the data and the person who receives the data. In this case, the temporary worker can also find out how long the employer intends to keep the data, whether the data is used for automatic decision-making and whether the employer intends to send given to a country outside the European Union. The temporary worker wishing to exercise this right can request it in writing or electronically to privacy@agilitasgroup.be The employer provides the requested information in writing or electronically within a reasonable time. If the temporary worker so requests, the information is communicated verbally, provided that the identity of the person concerned is proven by other means. The temporary worker also has the right to a copy of the personal data that is processed. When the temporary worker submits his request electronically, the information is provided in electronic form, unless the temporary worker requests otherwise. In the event that the pay slips are made available to the temporary worker in electronic form, the latter can consult this data at any time. - Right of rectification The temporary worker may request the correction or completion of (incorrect) personal data. The employer undertakes to accede to this request as soon as possible. - Right to erasure The temporary worker has the right to have personal data relating to him erased. The employer grants this request from the temporary worker within a reasonable time, for example in the following cases: - when the personal data is no longer necessary for the purposes for which it was collected or processed; - when the processing was based exclusively on the consent of the temporary worker and the latter withdraws his consent; - when the temporary worker contests the processing for well-founded reasons; - when the employer did not have a legal basis to process the data. This request to erase personal data can only be refused by the employer when this is justified, for example in the context of the exercise or defense of legal claims or because of a legal duty to keep and to process certain data. The temporary worker cannot oppose the processing of personal data necessary for the administration of salaries. - Right to limitation of personal data The temporary worker can ask the employer to limit the processing of his personal data when he disputes the accuracy of the data, when the processing is illegitimate or when the employer no longer needs the data for the purposes of the processing. Personal data may then only be processed in the following cases: - with the consent of the temporary worker; - and for the purpose of legal claims or to protect the rights of others. - Right to object A temporary worker has the right to object to the processing of his personal data, including profiling on the basis of these provisions. The processing is then ceased, unless it remains necessary for compliance with social and tax legislation, the defense of the interests of the employer or a third party or for the establishment, exercise or defense legal rights. - Right to data portability A temporary worker can ask the employer, for all the processing of personal data based on the explicit consent or the exercises of the employment contract, to obtain them in a structured, commonly used and machine-readable format. In addition, the temporary worker can subsequently transmit this data to another employer or controller. - Right of complaint The temporary worker may at any time lodge a complaint about the processing of personal data with the competent body in the Member State in which he has his habitual residence, his place of work or in which the alleged infringement was committed. In Belgium, a complaint can be lodged with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels (Tel.: +32 22744800; fax: +32 22744835, e-mail address: commission@privacycommission. In addition, the temporary worker may at any time bring a civil action and claim damages, for example in the event that he suffers damage as a result of the processing of his personal data. - Right to withdraw consent When the processing of personal data is based on the consent of the temporary worker, the temporary worker may at any time withdraw this consent, without this affecting the legitimacy of the processing on the basis of the consent before the withdrawal of that consent. -this. - Guarantees and security of personal data - Securing personal data The employer makes every effort to ensure compliance with technical and organizational security measures for the processing of personal data, in particular to avoid destruction, loss, falsification, modification, access by persons not authorities or the mistaken notification to third parties of personal data collected as well as any other unauthorized processing of this data. This security is guaranteed by high-tech tools and the quality of the staff. The staff is bound by professional secrecy. - Technical measures - Use of antivirus, firewall… - Regular adjustment of passwords - No unsecured hard drives - Securing data access - Data transmission encryption - No insecure backups - Work on secure hard drives with access limited by team or individual - Organizational measures - Well-defined people with access - Incident management procedure - Policy for temporary workers and employees - Training for temporary workers and employees - Privacy clauses - Application portals are provided to offer the temporary worker the possibility of determining the processing of personal data. - Employee exit procedure If certain documents are transmitted to the temporary worker electronically (eg the pay slip) and stored in electronic form, this goes through the social secretariat by applying strict security standards. In the event of transfer of personal data to countries outside the European Union, appropriate safeguards will be taken by the employer or the consent of the temporary worker will be requested. - Controller and Data Protection Officer The controller – employer – ensures the accuracy and relevance of the personal data processed. It ensures compliance with applicable regulations. The temporary worker may contact the controller or the controller’s representative at any time to exercise his rights or to request additional information. Where applicable, the data protection officer will ensure compliance with the protection of personal data. - Duration of retention of personal data The personal data of temporary candidates are kept for 3 years after the first registration. At the end of the 3-year period, the temporary worker is contacted again asking for his consent if he wishes to be kept in the database. The personal data of temporary workers who have actually worked at Agilitas Group are kept for 5 years after the conclusion of the last contract. At the end of the 5-year period, the temporary worker is contacted again, asking him to give his consent if necessary if he wishes to be kept in the database even longer, without prejudice to legal, regulatory or contractual provisions or limitation periods obliging or requiring the retention of the personnel file or part of the personnel file for a longer period in the organization, for example in view of or following legal claims. - Who can view personal data? - Data queries Only authorized members of the employer’s staff and persons designated by the company are authorized to carry out internal searches of personal data. These persons reasonably need the data for the purpose of their task or for the needs of the service. The company provides a limited access system and an appropriate level of security. - (Categories of) persons to whom the personal data is communicated (external communications) The personal data of the temporary worker are used by the companies that are part of the Agilitas Group and the related company Ergoflex. Communications of personal data to third parties are limited to the application of legal and regulatory provisions or, if the communications are necessary for the normal performance of personnel management or salary administration, such as public services , social security bodies and cooperating social security institutions, or the execution of temporary work. Certain personal data is communicated to third parties: - The payroll information is communicated both to our Acerta social secretariat for payroll administration and to the competent public authorities on the basis of legal obligations (e.g. Belgian and/or foreign judicial services, police services and security organizations social); - The necessary information is communicated to the supplier for the granting of Edenred meal vouchers and/or ecocheques; - The surname, first name, address and function are communicated to the external service for prevention and protection at work (SEPPT) Attentia Prevention & Protection to allow the correct exercise of its tasks; - The surname, first name, address and function are communicated to Certimed to allow the correct exercise of its tasks; - The surname, first name, address, function and professional risk are communicated to the Ethias insurance company to insure the risk of accidents at work; - The surname, first name, address and bank account number are communicated to the Isabel multibank platform for the payment of salaries, expenses, etc. - The surname, first name and curriculum vitae can be distributed via the candidate database to potential employers/users of temporary workers; The surname, first name and possibly the national register number, for the recording of time, are communicated to Agilitas Group customers in the event that work services are started. The temporary worker’s personnel file may also be sent to the audit office with a view to carrying out an audit in the context of obtaining/maintaining the quality label of the professional federation. In exceptional circumstances, personal data is communicated to third parties for the exercise of their mission, such as chartered accountants, consultants and lawyers in the context of tax and/or legal support, researchers and service providers. ICT services. These third parties process personal data on behalf of the employer in order to perform a certain task. A processing contract is concluded with the aforementioned subcontractors, in particular so that the temporary worker’s personal data is sufficiently protected and secure. Personal data will not be sold, rented, shared or otherwise marketed to third parties except as described above or with prior consent. The employer may be required to disclose personal data by court order or to comply with other binding legislation or regulations. - Companies in the group having access to personal data Agilitas Group is part of the French HR group Proman, together with Rialto Recruitment. It is within this corporate structure that the data is collected. The personal data of the temporary worker can be consulted by the companies belonging to Proman, more specifically Rialto Recruitment and the related company Ombrelo, and this within the framework of their activities recognized as employment agencies. Personal data is processed with a view to accompanying the temporary worker / candidate to a suitable job. The legal basis for granting access to personal data to Rialto Recruitment and related company Ombrelo is legitimate interest. Rialto Recruitment/Ombrelo will first contact the temporary worker/candidate and only with the latter’s explicit consent, Rialto Recruitment respectively Ombrelo will take the temporary worker/candidate into a selection procedure. - When does this policy come into effect? This policy comes into effect on May 25, 2018. Last update : December 17, 2020
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 34.1 35.1 36.1 37.1 38.1 39.1 39.2 39.3 39.4 40.1 41.1 42.1 42.2 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 47.2 48.1 48.2 49.1 49.2 50.1 51.1 52.1 53.1 54.1 54.2 55.1 56.1 57.1 57.2 58.1 59.1 60.1 61.1 61.2 61.3 61.4 61.5 61.6 61.7 62.1 62.2 63.1 64.1 64.2 65.1 65.2 65.3 66.1 67.1 67.2 68.1 68.2 69.1 70.1 70.2 71.1 71.2 71.3 71.4 71.5 72.1 73.1 74.1 75.1 75.2 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 87.3 87.4 88.1
FOR A RELAXING HOME Pravila privatnosti: – Zaštita osobnih podataka i politika privatnosti Definicije Prema Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (dalje u tekstu: Opća uredba o zaštiti podataka), osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi („ispitanik”); pojedinac čiji se identitet može utvrditi jest osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje. Pravna osnova obrade podataka Pravne osnove za zakonitu obradu osobnih podataka sukladno Općoj uredbi o zaštiti podataka i Zakonu o provedbi Opće uredbe o zaštiti podataka su sljedeće: Načela Prilikom obrade osobnih podataka LULL Studio d.o.o. kao voditelj obrade poštuje sljedeća načela: (a) zakonitosti, poštenosti i transparentnosti; (b) ograničavanja svrhe; (c) smanjenja količine podataka; (d) točnost; (e) ograničenje pohrane; (f) cjelovitosti i povjerljivosti; (g) pouzdanosti. Podaci koji se pružaju ispitaniku Kupcu kao ispitaniku se pružaju sljedeće informacije u smislu odredbe čl. 13. Opće uredbe o zaštiti podataka: (a) identitet i kontaktni podaci voditelja obrade: LULL Studio d.o.o., Ulica Augusta Piazze 10, 10000 Zagreb, Hrvatska, [email protected], Tel: 00 385 99 497 5592, (b) kontaktni podaci službenika za zaštitu podataka: [email protected] (c) svrha obrade radi kojih se upotrebljavaju osobni podaci kao i pravna osnova za obradu: izvršavanje ugovora, izvršavanja dostave kupljenog proizvoda, zaštita ključnih interesa ispitanika, dostava newslettera, u svrhu osiguravanja podrške kupcima i marketing (d) primatelji ili kategorije primatelja osobnih podataka: posrednici i/ili suradnici koji su u ugovornom odnosu sa LULL Studio d.o.o. (e) LULL Studio d.o.o. neće dostavljati osobne podatke na teritorij treće zemlje ili međunarodne organizacije, osim uz Vašu izričitu privolu. (f) razdoblje u kojem će osobni podaci biti pohranjeni/kriteriji kojima se utvrdilo to razdoblje: pet godina računajući od dostave osobnih podataka LULL Studio d.o.o. (g) ispitanik ima pravo od LULL Studio d.o.o. zatražiti pristup osobnim podacima i ispravak ili brisanje osobnih podataka ili ograničavanje obrade koji se odnose na ispitanika ili prava na ulaganje prigovora na obradu takvih te prava na prenosivost podataka; (h) ako se obrada temelji na danoj privoli ispitanika, ispitanik je ovlašten u bilo kojem trenutku povući privolu, a da to ne utječe na zakonitost obrade koja se temeljila na privoli prije nego što je ona povučena; (i) pravo je ispitanika podnijeti prigovor nadzornom tijelu; (j) pružanje osobnih podataka nije uvjet nužan za sklapanje ugovora te ispitanik nema obvezu pružanja osobnih podataka i nema posljedica ako se takvi podaci ne pruže, ali nedostavljanje potrebnih podataka može utjecati na mogućnost i/ili kvalitetu ispunjenja ugovora; (k) ne postoji automatizirano donošenje odluka. Podaci koji se odnose na djecu Sukladno Općoj uredbi o zaštiti podataka djeca zaslužuju posebnu zaštitu u svakom pogledu, pa tako i u pogledu zaštite osobnih podataka. Sukladno članku 19., stavku 1. Zakona o provedbi Opće uredbe o zaštiti podataka, djecom se smatraju sve osobe mlađe od 16 godina, te LULL Studio d.o.o. ne traži niti prikuplja osobne podatke djece ili o njima bez suglasnosti nositelja roditeljske odgovornosti. Stoga će LULL Studio d.o.o. poduzeti sve razumne napore, kako bi podatke koje dobije od djece obrađivalo samo uz suglasnost nositelja roditeljske odgovornosti. Ako LULL Studio d.o.o. sazna da su mu poslani osobni podaci djece, ali bez valjane suglasnosti nositelja roditeljske odgovornosti, LULL Studio d.o.o. će u razumnoj mjeri nastojati učiniti sljedeće: Kada i kako Lull.hr prikuplja podatke korisnika? Osobni podaci se prikupljaju izravno od pojedinca – podaci dostavljeni za potrebe sklapanja ili izvršenja ugovora, kreiranjem korisničkog računa na Internet stranici LULL Studio d.o.o., neposredno, telefonskim razgovorom sa pojedincem. LULL Studio d.o.o. prikuplja osobne podatke Kupaca samo u mjeri koji su nužni za ispunjenje svoje obveze sukladno zahtjevima Kupca, odnosno za koje postoji legitimni interes te za koje ima privolu Kupca u svrhu informiranja, podrške kupcima i marketing u mjeri u kojoj je to važno za poslovanje LULL Studio d.o.o.. LULL Studio d.o.o. se obvezuje štititi osobne podatke Kupaca u skladu sa Općom uredbom o zaštiti osobnih podataka te se obvezuje da osobne podatke neće ni na koji način ustupiti trećim osobama bez pristanka Kupca (osim nužnih podataka za koje postoji legitimni interes u svrhu izvršavanja dostave kupljenog proizvoda) niti će ih koristiti u neodređene svrhe. Obrada osobnih podataka koja se temelji na legitimnom interesu ili predstavlja ugovornu obvezu obavlja se održavanjem najviši standarda sigurnosti i poslovanja. Kupac u svakom trenutku može izjaviti prigovor na obradu svojih osobnih podataka na temelju svoje specifične situacije. Kupac ima pravo zatražiti nadopunu, ispravak ili izmjenu netočnih osobnih podataka. Od ovog se izuzimaju slučajevi u kojima je LULL Studio d.o.o. po valjanom nalogu ovlaštenih državnih tijela, u skladu sa zakonom, dužan dostaviti ili dopustiti uvid u osobne podatke Kupaca. Podaci koje prikuplja LULL Studio d.o.o. su ime, prezime, adresa dostave, broj telefona i adresa e-pošte. Prilikom kupovine u Lull.hr fizičkoj i internetskoj trgovini tražimo od Vas određene osobne podatke koje su nužne za ispunjenje usluge i kupovinu. Pružanje osobnih podataka u svrhu prodaje nužno je za izvršavanje ugovora te ako ih ne pružite, to će utjecati na ispravno izvršenje ugovora ili ga čak onemogućiti. Tako prikupljene podatke koristimo samo za obradu traženih informacija i upita korisnika te u svrhu osiguravanja kvalitetnog korisničkog iskustva. Podaci su dostupni samo djelatnicima kojima su nužni za ispunjenje ugovora. Kupci i korisnici internetske stranice www.lull.hr suglasni su da u skladu sa Općom uredbom o zaštiti osobnih podataka te u skladu s traženim upitom obrađujemo osobne podatke te prihvaćaju sve rizike koji nastaju korištenjem internetske stranice. Informatički sustav koji koristi LULL Studio d.o.o. zaštićen je tehničkim mjerama od neovlaštenog pristupa, izmjene, širenja, gubljenja i brisanja podataka Kupaca. LULL Studio d.o.o. prikuplja e-mail adrese korisnika koje koristi za slanje newslettera odnosno elektroničkih poruka koje sadrže promotivne poruke, ponude i vijesti iz svijeta mobilne tehnologije. LULL Studio d.o.o. uz privolu Kupca može koristiti osobne podatke za informiranje o novim i akcijskim proizvodima te dostavu promotivnih materijala, newslettera te unapređenja odnosa s Kupcima. Ukoliko pristup podacima u svrhe marketinške obrade imaju treći pružatelji usluga, oni su detaljno opisani u ovim Uvjetima. LULL Studio d.o.o. je voditelj obrade osobnih podataka u skladu sa zakonom i propisima o zaštiti osobnih podataka. LULL Studio d.o.o. kao voditelj obrade osobnih podataka određuje svrhu i sredstva obrade osobnih podataka i odgovorna je za čuvanje i korištenje osobnih podataka u papirnatom i/ili elektronskom obliku. Temeljem članka 37. Opće uredbe o zaštiti podataka LULL Studio d.o.o. kao voditelj obrade osobnih podataka, imenovao je službenika za zaštitu osobnih podataka kojeg možete kontaktirati putem e-adrese [email protected] U slučaju povrede osobnih podataka LULL studio d.o.o. bez nepotrebnog odgađanja i, ako je izvedivo, najkasnije 72 sata nakon saznanja o toj povredi, izvješćuje nadzorno tijelo nadležno o povredi osobnih podataka, osim ako nije vjerojatno da će povreda osobnih podataka prouzročiti rizik za prava i slobode pojedinaca. Ako izvješćivanje nije učinjeno unutar 72 sata, mora biti popraćeno razlozima za kašnjenje. Tko su subjekti s kojima Lull.hr može dijeliti osobne podatke? Prilikom kreiranja Lull.hr računa na Lull.hr trgovini potrebno je unijeti svoje podatke (e-mail, ime i prezime). Prilikom prijave putem društvenih mreža, odnosno Google i Facebook računa, LULL Studio d.o.o. ne zadržava podatke prikupljene takvom prijavom. Lull.hr surađuje s pružateljima usluga trećim stranama kako bi se mogle provesti aktivnosti slanja e-pošte, oglašavanja i analiziranja upotrebe naših web mjesta i aplikacija te praćenja učinkovitosti kampanja. Osobne podatke dijelimo samo u onoj mjeri potrebnoj za izvršavanje usluge u naše ime. U nastavku možete provjeriti tko su davatelji usluga trećih strana potrebnih za suradnju: https://www.google.com/analytics/terms/gb.html, Opći pregled o načelima sigurnosti i privatnosti Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en, kao i Googleova Pravila privatnosti: https://policies.google.com/privacy?hl=en. Ove internetske stranice upotrebljavaju Google Analytics za analizu protoka posjetitelja neovisno o vrsti uređaja, a koji se temelji na korisničkom identifikacijskom broju (ID). Možete onemogućiti praćenje Vašeg korištenja više uređaja u svom Google računu pod „Moje informacije“ („My information“), „Osobne informacije“ („Personal information“). Pristup bazi Kupaca s osobnim podacima Kupaca uz LULL Studio d.o.o. u svrhu sklapanja ili izvršavanja ugovora, odnosno kupovine u Lull.hr trgovini i dostavu proizvoda imaju: • Plavi pixel d.o.o., specijalizirana tvrtka za izradu web trgovina s kojom LULL Studio d.o.o. ima sklopljen ugovor o zaštiti podataka. Politika kolačića „Kolačić“ je dio informacija spremljenih na računalo, mobitel ili tablet korisnika (dalje u tekstu: „uređaj“), koje mogu biti dostavljene neposredno od strane internetske stranice koju posjetite (kolačići od prve strane) ili u suradnji i za potrebe internetske stranice od treće strane (kolačići treće strane). Kolačići u pravilu spremaju postavke korisnika, postavke za internetsku stranicu i sl. Nakon što ponovno korisnik otvori internetsku stranicu, internetski preglednik korisnika šalje natrag kolačiće koji pripadaju ovoj web stranici. To omogućuje stranici da prikaže informacije prilagođene potrebama korisnika. Kolačići mogu imati širok raspon informacija, uključujući i dio osobnih informacija. Takve informacije mogu biti spremljene jedino ako to korisnik omogući. Sama internetska stranica ne može dobiti pristup informacijama koje im korisnik ne dopusti te ne mogu pristupiti niti jednoj drugoj datoteci na računalu korisnika. Kako bi stranice Lull.hr ispravno radile, one moraju na računalo korisnika spremiti malenu količinu kolačića (Cookies). Prema Općoj uredbi o zaštiti podataka, Zakonu o provedbi Opće uredbe o zaštiti podataka i Zakonu o elektroničkim komunikacijama, LULL Studio d.o.o. prije spremanja Cookiea mora zatražiti pristanak (privolu) korisnika. Ukoliko korisnik ne pristane na pohranu kolačića postoji mogućnost da stranica neće moći koristiti neke od funkcionalnosti koje daje LULL Studio d.o.o. web trgovina. Zadaća kolačića kojem ste dopustili da se pohrani na Vaše računalo je spremanje Vaših postavki, postavki web stranice, Vašeg preferiranog jezika ili adrese. Kada nakon nekog vremena opet posjetite istu stranicu internet preglednik kojim se koristite šalje informacije prilagođene Vašim potrebama. Ovisno o definiranoj zadaći kolačići spremaju širok spektar informacija koji između ostalih uključuju i osobne podatke. Međutim, isključivo vi odlučujete koje informacije će kolačići spremati. U postavkama Vašeg internet preglednika možete sami birati hoćete li zahtjeve za spremanje kolačića odobriti ili odbiti. Onemogućavanjem kolačića možda nećete moći koristiti neke od funkcionalnosti na stranicama koje posjećujete. Stalni kolačići ostaju na računalu nakon zatvaranja programa internet preglednika. Stalni kolačići ostat će na računalu ili mobilnom uređaju danima, mjesecima, čak i godinama te imaju svrhu pohraniti stalne podatke kao što su npr. korisničko ime i lozinka da se ne morate svaki puta iznova prijavljivati. Privremeni kolačići nestaju s računala nakon što zatvorite internet preglednik. Uz njihovu pomoć se pohranjuju privremeni podaci kao što su podaci koje dajete kad ste u online kupnji. Kolačići od prve strane mogu biti stalni ili privremeni, a pohranjuju podatke koje ćete ponovo koristiti prilikom sljedećeg posjeta stranicama sa kojih su pohranjeni na Vaše računalo. Kolačići treće strane ili tzv. reklamni kolačići pohranjuju se na Vaše računalo ako koristite reklame i oglase na stranici koju posjećujete a ona vas preusmjeri na treću stranu. Ovaj način služi za praćenje korištenja Interneta u marketinške svrhe. Lull.hr koristi kolačiće u svrhu poboljšanja korisničkog iskustva, u svrhu funkcioniranja stranice u kontekstu sigurnosti i u svrhu radnji koje posjetitelj stranice odabere samostalno (web forma za slanje poruka ili traženje usluga). Privremeni kolačići se brišu kada napustite internetski preglednik. Njihova jedina svrha je unaprijediti korisničko iskustvo za vrijeme posjete stranici. Stalni kolačići nemaju ograničenja i ostaju u Vašem pregledniku dok ih ručno ne obrišete. Prikupljeni podaci se koriste isključivo u statističke svrhe. Ovo su primjeri trećih strana koje pružaju usluge analize i marketinške obrade podataka Za više informacije o svrsi i opsegu prikupljanja podataka i obradi istih od strane pružatelja dodatka, molimo da pogledate izjave o zaštiti privatnosti ovih pružatelja koji su niže navedeni. Kako korisnici mogu ažurirati, urediti ili obrisati svoje osobne podatke? LULL Studio d.o.o. – internet trgovina. prikuplja podatke korisnika u skladu Općom uredbom o zaštiti osobnih podataka i Zakonom o provedbi Opće uredbe o zaštiti podataka. Svaki korisnik može u svakom trenutku može: LULL Studio d.o.o. može odbiti provođenja zahtjeva ukoliko se time ugrožava privatnost korisnika ili drugih korisnika, ako primjena zahtjeva je suprotna zakonu, u izuzecima radi zaštite javnog interesa (npr. sprječavanje ili otkrivanje zločina), pravnih obveza ili prava i sloboda drugih. Zahtjeve za pristup, ispravljanje ili brisanje podataka možete uputiti na: [email protected]lull.hr ili na adresu sjedišta Ulica Augusta Piazze 10, Zagreb, 10000 Zagreb, Hrvatska. Obrada takvog zahtjeva može biti tehnički i vremenski složen proces te je u složenim slučajevima ili u slučaju većeg broja zahtjeva potrebno duže vrijeme potrebno za obradu podataka o čemu ćemo vas obavijestiti na zakonit i siguran način. Kako čuvamo sigurnost Vaših podataka? U svrhu očuvanja sigurnosti, integriteta i dostupnosti osobnih podataka kupaca, podatke osiguravamo nizom sigurnosnih mjera koje uključuju enkripciju, autentifikaciju i strogo ograničeni pristup podacima. Neke od mjera koje koristimo uključuju: Sigurnosne mjere koje se provode imaju za cilj: Koliko dugo zadržavamo Vaše osobne podatke? Osobne podatke pohranjujemo i obrađujemo onoliko dugo koliko je potrebno za izvršenje određene legitimne svrhe, osim ako važećim propisima nije za pojedinu svrhu predviđeno duže vrijeme čuvanja. U slučaju davanja privole za marketing, podatke čuvamo pet godina računajući od dostave osobnih podataka LULL Studio d.o.o. Povlačenje privole ne utječe na zakonitost obrade na temelju privole prije njezina povlačenja. Povlačenje dostavlja se u pisanom obliku. Osobni podaci koji više nisu potrebni se ili nepovratno anonimiziraju ili se uništavaju na siguran način. Kontakti