http___metropolis-dizajn.hr_politika-privatnosti_1.xml
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 15.2 16.1 17.1 17.2 17.3 17.4 18.1 19.1 19.2 19.3 19.4 20.1 21.1 21.2 21.3 22.1 23.1 23.2 23.3 24.1 25.1 26.1 26.2 27.1 28.1 28.2 29.1 30.1 30.2 30.3 30.4 30.5 31.1 32.1 32.2 32.3 32.4 32.5 32.6 32.7 33.1 34.1 34.2 35.1 36.1 36.2 37.1 38.1 38.2 39.1 40.1 40.2 40.3 41.1 42.1 43.1 44.1 44.2 44.3 45.1 46.1 46.2 47.1 48.1 48.2 48.3 49.1 50.1 50.2 50.3 51.1 52.1 52.2 52.3 52.4 52.5
Data Privacy Policy Data Privacy Policy We at BioXpedia process personal data, including data about you and your use of our services. According to the EU General Data Protection Regulation (GDPR), we are responsible for how and for what purposes the data processing is carried out. Contents 1 For what purpose do we collect information? 2 What information do we collect and process? 3 How is the information collected? 4 How do we use the information? 5 With whom do we share data? 6 For how long do we store data? 7 Your rights 8 How do you withdraw consent? 9 Processor – Sensitive personal data 1 For what purpose do we collect information? BioXpedia only collects the personal information about you as set out in this privacy policy. We collect the information to ensure you the highest level of service from BioXpedia. 2 What information do we collect and process? We treat your personal information with confidentiality and process personal information in accordance with the legal basis set out in the General Data Protection Regulation. We collect customer data such as position, professional background, name, address, phone number, email and details about the services for which you have engaged us. We process personal data related to the samples that we analyze. We cannot in any way link these data to a certain identifiable person. 3 How is the information collected? Information that you have provided to us in conjunction with a work order with BioXpedia concerning the delivery of services is collected. Information is collected when you communicate with us, e.g., regarding project support, billing information, or when you sign up to receive information from us. Information from website cookies and social media such as LinkedIn is collected. Information is collected in conjunction with expressions of interest either as a person interested in our services or as a person interested in employment. 4 How do we use the information? To process customer data, the processing must have a legal basis in accordance with applicable privacy legislation. This means that the processing must be done based on: a) the processing is necessary to enable us to enter into a contract or to perform a work order with you, b) you have consented to the processing, or c) based on a legitimate interest. Examples of purposes for which we process your data and the legal basis for such processing can be found below. 4.1 To provide services and comply with laws When we provide services in accordance with the conditions of the contract between you and us, we process data to perform our obligations under the contract. We also process data to be able to process invoices and payments, to deal with complaints, for troubleshooting and for dealing with other incidents. The legal basis is ‘compliance with a legal obligation’. 4.2 To communicate to you about our services We process data to communicate with you about our services, and we may provide you with recommendations e.g., about how to use our service and inform you about new services and improvements. The legal basis is ‘a legitimate interest’. 4.3 To develop new services We conduct analyses of customer data with the aim to improve our activities and our existing services, to develop new services, and improve our way of working. The legal basis is ‘a legitimate interest’. 4.4 Processing for marketing purposes We process data to be able to market our services to you. We may send you such marketing by email and letter. The legal basis is ‘a legitimate interest’. If the processing of personal data is based on consent from you, you are entitled to revoke such consent at any time. You will find more information about how to withdraw consent in section 8. 5 With whom do we share data? We may share data with sub-contractors that perform services on our behalf, to fulfil the purposes above. It may be necessary to engage sub-contractors to be able to deliver our services to you. BioXpedia continue to be responsible for the processing of your data. Sub-contractors cannot use data for purposes other than those we specify. We shall only disclose your customer data to other parties, e.g., suppliers of third-party services, after you have provided your consent. Your personal data is not transferred to countries outside the EEA (i.e., a third country). All transfers within EEA are based on applicable law, and when we engage sub-contractors to perform part of our service, we will conclude a contract for the processing of personal data with such parties. 6 For how long do we store data? We will save your personal data as long it is necessary considering the purpose of the processing, i.e., different data will be saved for different periods of time. Certain data needs to be saved for a certain period to comply with applicable legislation. 7 Your rights The purpose of the data protection legislation is, among other things, to strengthen the rights of individuals to their data. You are consequently entitled to know what we do with your data, the purposes for which we process your data, for how long we will save it and who will have access to the data. 7.1 Data Protection Officer We have appointed a Data Protection Officer. You are welcome to contact our Data Protection Officer at [email protected] if you have questions about our processing of personal data or if you wish to exercise any of your rights described below. 7.2 Right to know what data we have concerning you You shall be able to get information about what personal data of yours we process. To receive such information, you must clearly state what information you want access to and identify yourself in a secure way. You are entitled to have this information free of charge, though no more than once per year. 7.3 Right to rectification If any of the data we process is inaccurate or if additional information is needed, you are entitled to have inaccurate data rectified or to supplement it with additional data that may be needed for processing. 7.4 Right to be forgotten You are entitled to have your personal data erased. Contact the Data Protection Officer in such a case. Contact details are provided above. 7.5 Right to restriction You are entitled to have the data processing that we carry out restricted. ‘Restriction’ means that data is marked so that it is only processed for certain limited purposes going forward. 7.6 Right to data portability You are entitled to data portability for the data you have submitted to us if we carry out processing based on your consent or when we process data to communicate with you. The right to portability only applies to data that we process electronic. This means that data only processed in paper files is not covered by the right to portability. 8 How do you withdraw consent? You are entitled at any time to withdraw the consent you have given to us for processing of your data. However, note that we may also perform processing on legal bases other than consent. Contact Data Protection Officer to withdraw consent, see section 7.1. 9 Processor – Sensitive personal data The personal data that we process for you, in relation to our analysis services, we process in our capacity as processor. We are responsible for this processing according to law and according to a work order with you. This means, among other things, that all sensitive personal data shall undergo pseudonymisation, i.e. it shall not be possible to link it to an individual person without further information (e.g. a key) to which we shall not have access. Furthermore, it means that we process no more data than what is necessary for each individual purpose and that data obtained shall be used only for the purpose for which we have obtained it. BioXpedia have taken appropriate technical and organisational measures to ensure data security in the form of access restrictions and pseudonymisation
1.1 2.1 2.2 3.1 4.1 4.2 5.1 6.1 7.1 8.1 9.1 10.1 11.1 11.2 12.1 13.1 14.1 15.1 16.1 17.1 18.1 20.1 21.1 22.1 22.2 23.1 24.1 24.2 25.1 26.1 26.2 27.1 28.1 29.1 30.1 30.2 30.3 30.4 31.1 32.1 32.2 33.1 34.1 35.1 35.2 36.1 36.2 37.1 38.1 38.2 39.1 39.2 40.1 40.2 41.1 42.1 42.2 43.1 44.1 45.1 46.1 47.1 49.1 49.2 50.1 51.1 52.1 52.2 52.3 53.1 54.1 55.1 56.1 57.1 58.1 58.2 59.1 60.1 61.1 62.1 62.2 62.3 63.1
Politika privatnosti Metropolis dizajn d.o.o. poštuje Vašu privatnost i Vaša prava. Ova politika privatnosti u skladu je sa Općom uredbom o zaštiti osobnih podataka. ŠTO JE OPĆA UREDBA O ZAŠTITI OSOBNIH PODATAKA (GDPR). To je Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka. U svim državama Europske unije (tako i u Republici Hrvatskoj) primjenjuje se od 25. svibnja 2018. godine. NAŠA NAČELA ZAŠTITE VAŠE PRIVATNOSTI - Prikupljamo samo neophodne kontakt podatke koje su nužni za međusobnu komunikaciju, - Vaše dobivene podatke obrađujemo samo uz Vašu privolu, - Podatke koristimo samo za onu svrhu za koju imamo Vašu privolu, - Ne prodajemo, ne posuđujemo i ne dijelimo Vaše podatke, - Vaše podatke ne šaljemo trećim stranama bez Vaše privole, - Vaše podatke čuvamo samo dok je potrebno. Nakon toga ih brišemo, - Provjeravamo sigurnost Vaših podataka. PODACI O VODITELJU OBRADE Voditelj obrade Vaših osobnih podataka na ovoj web stranici je tvrtka Metropolis dizajn d.o.o. Kontakt podaci voditelja obrade Vaših osobnih podataka: Metropolis dizajn d.o.o. Trumbićeva 16 10 000 Zagreb renata@metropolis-dizajn.hr KAKO I KOJE VAŠE PODATKE PRIKUPLJAMO - izravno od strane korisnika ove web stranice. Povremeno prikupljamo samo neophodne podatke (ime, e-mail adresa, broj telefona, korisnička poruka). - pomoću kolačića (cookies) - automatski (kroz serverske logove) - podaci koji su automatski generirani. Serverski logovi Vas ne mogu identificirati kao određenu osobu. SVRHA OBRADE OSOBNIH PODATAKA Svrha obrade je međusobna komunikacija. Najčešće je to odgovaranje na Vaše upite putem formulara na ovoj web stranici, putem e-maila ili telefonom. PRAVNA OSNOVA ZA OBRADU PODATAKA Pravna osnova za obradu osobnih podataka na ovoj web stranici je Vaša privola (privola ispitanika). KAKO ĆEMO KORISTITI VAŠE PODATKE Vaše podatke koristit ćemo za potrebe međusobne komunikacije, te za uspostavljanje zajedničke suradnje. Moguće je korištenje osobnih podataka i za statističke potrebe ove web stranice. Važno je da znate da ćemo Vaše podatke koristiti samo za svrhu za koju od Vas dobijemo privolu. Isto tako, tu privolu možete u svako doba povući, te ćemo istog trenutka prestati s obradom. KOLIKO DUGO ČUVAM PODATKE Podatke čuvamo samo dok postoji potreba za obradu podataka. Nakon toga ih brišemo. SVA VAŠA PRAVA Kada na ovoj web stranici ostavite svoje osobne podatke imate slijedeća prava: PRAVO NA TRANSPARENTNOST – Imate pravo znati naš identitet, naše kontakt podatke, svrhu obrade Vaših podataka, pravnu osnovu obrade, razdoblje pohrane itd. Možete poslati pisani zahtjev i mi ćemo Vam poslati odgovor na sva Vaša pitanja u vezi Vaših podataka. PRAVO NA PRISTUP PODACIMA – Omogućen Vam je pristup svim Vašim osobnim podacima koje obrađujemo. Možete zatražiti i dobiti informacije o podacima koji su pohranjeni. PRAVO NA ISPRAVAK – Ako su Vaši osobni podaci netočni imate pravo od nas zahtijevati ispravak podataka. PRAVO NA BRISANJE („PRAVO NA ZABORAV“) – Vi kao korisnik (ispitanik) imate pravo u bilo kojem trenutku zatražiti brisanje Vaših osobnih podataka. Pošaljite zahtjev na našu e-mail adresu i podaci će biti izbrisani što je prije moguće, a najkasnije u roku 8 dana. PRAVO NA OGRANIČENJE OBRADE PODATAKA – u pojedinim situacijama imate pravo zahtijevati umjesto brisanja ograničenje upotrebe osobnih podataka. U tom slučaju Vaši podaci bit će spremljeni ali neće do daljnjeg biti obrađivani. PRAVO NA PRIGOVOR – Imate pravo na prigovor. Prigovor pošaljite na našu e-mail adresu. PRAVO NA PRENOSIVOST – Imate pravo prenijeti podatke drugom voditelju obrade bez našeg ometanja. PRAVO NA POVLAČENJE PRIVOLE - U svakom trenutku možete povući svoju privolu. Vaš zahtjev pošaljite na našu e-mail adresu. PRAVO NA PODNOŠENJE PRIGOVORA NADZORNOM TIJELU - Izravno se možete obratiti nadležnom nadzornom tijelu. Nadležno nadzorno tijelo u Republici Hrvatskoj: Agencija za zaštitu osobnih podataka (AZOP) Martićeva 14 10 000 Zagreb PRAVO PROTIVLJENJA AUTOMATIZIRANIH POJEDINAČNIH ODLUKA - Imate pravo usprotiviti se donošenju automatiziranih pojedinačnih odluka. Automatizirano individualno donošenje odluke je donošenje odluke bez ikakvog ljudskog sudjelovanja. PRAVO NA IZVOR OSOBNIH PODATAKA - Imate pravo znati kako smo došli do Vaših podataka. PROVOĐENJE TEHNIČKIH I ORGANIZACIJSKIH MJERA ZAŠTITE Osigurane su sigurnosne mjere u svrhu zaštite Vaših osobnih podataka. Podaci su zaštićeni od uništenja, gubitka i neovlaštenog pristupa. Kada je god moguće, koristi se pseudonimizacija ili enkripcija osobnih podataka. PRIJENOS OSOBNIH PODATAKA TREĆOJ ZEMLJI Vaše osobne podatke ne prenosimo u treće zemlje ili međunarodne organizacije. KOLAČIĆI Svi detalji o korištenju kolačića nalaze se u Izjavi o kolačićima na ovoj web stranici. GOOGLE ANALYTICS Prilikom obrade osobnih podataka, u nekim slučajevima (ako web stranica koristi uslugu Google Analytics) moguća je pohrana određenih podataka od strane platforme Google Analytics. Za više podataka pročitajte pravila privatnosti platforme Google Analytics. POVREDA OSOBNIH PODATAKA U slučaju povrede osobnih podataka izvijestiti ćemo Vas i nadležno tijelo za zaštitu osobnih podataka (najkasnije u roku od 72 sata). PROMJENA PRAVILA O PRIVATNOSTI Zadržavamo pravo izmijeniti i dopuniti ovu Politiku privatnosti u bilo kojem trenutku. Nismo dužni davati bilo kakvu posebnu obavijest. Zato Vas kao korisnike molimo da povremeno provjerite ovu Politiku privatnosti. Ova politika privatnosti zadnji put ažurirana je 18. 08. 2018.