http___lily-tours.com_politika-zastite-osobnih-podataka-klijenata__1.xml
1.1 2.1 2.2 2.3 3.1 4.1 4.2 4.3 4.4 5.1 5.2 5.3 6.1 6.2 7.1 8.1 9.1 9.2 9.3 9.4 9.5 9.6 10.1 11.1 11.2 12.1 12.2 13.1 13.2 14.1 14.2 14.3 14.4 14.5 15.1 16.1 16.2 16.3 16.4 17.1 17.2 18.1 18.2 18.3 18.4 19.1 20.1 21.1 21.2 21.3 21.4 22.1 23.1 23.2 24.1 25.1 26.1 27.1 28.1 28.2 29.1 30.1 31.1 31.2
COMICSPRING PRIVACY POLICY This Privacy Policy shall constitute an integral part of the Terms of Service of Comicspring Platform dated 29/09/2016 (Terms of Service). Definitions of the terms used in this Privacy Policy have been included in the Terms of Service. The provisions of the Terms of Service shall be applied accordingly. PERSONAL DATA Personal data provided by the User shall be processed by Comicspring (i.e. COMICSPRING—Michal Klimczyk, ul. Golikówka 33A, 30-723 Kraków, NIP: 679-279-54-02, REGON: 362521218), which is the Personal Data Controller within the meaning of the Data Protection Act of 29 August 1997. You may contact us in particular via e-mail at the following e-mail address: hello@comicspring.com. The scope of the processed personal data shall be determined by the scope of data completed by the User and subsequently sent to us by means of a relevant form. Processing the personal data may pertain to User’s e-mail address, first and last name, and computer IP address. Comicspring guarantees that the processing of personal data shall take place in accordance with and upon the terms prescribed in the content of GENERAL DATA PROTECTION REGULATION (Regulation (EU) 2016/679). User’s personal data shall be processed for the following purposes: (a) creation of the Account, provision of services by electronic means, examination of filed complaints and other actions as specified in the Terms of Service; (b) possible promotional and commercial actions of Comicspring; (c) settlement of disputes; (d) evaluation of the interest in Comicspring services; (e) in the case of having Users’ express consents—for the purpose of notifying the Users on services and updates; (f) implementation of the applicable legal provisions; (h) prevention of potentially prohibited or illegal actions, and enforcement of the Agreement. Comicspring guarantees that only persons authorized by Comicspring to administer the IT system on the basis of granted authorisations which include confidentiality statements in the scope of processing data and relevant safeguards shall have access to Users’ personal data. Provision of the personal data by the User shall be voluntary, but the lack of consent to process personal data marked as obligatory shall prevent Comicspring from performing services and agreements. The legal basis for processing User’s personal data in the case referred to in clause 1.3 is the statutory authorization to process data which are essential to act in accordance with the law, as well as the statutory authorization to process data which are necessary to perform an agreement if the data subject is a party to such agreement, or if it is essential for undertaking certain actions prior to conclusion of an agreement upon request of the data subject, and a voluntary consent of the User. User’s personal data shall only be transferred for the purpose of performing agreements for provision of services by electronic means by Comicspring to a hosting company providing services to Comicspring. An entity to which Comicspring transfers personal data for processing on the basis of a personal data transfer agreement (hereinafter referred to as Transfer Agreement) shall guarantee an adequate level of security and confidentiality of the processing of personal data. Comicspring shall, within the frames of the Transfer Agreement, transfer Users’ personal data for processing only to entities observing the applicable corporate rules or holding relevant certificates. An entity processing User’s personal data on the basis of the Transfer Agreement through another entity shall proceed only on the basis of prior written consent given by Comicspring. The personal data collected by Comicspring may also be disclosed to: competent state bodies upon their request on the basis of relevant provisions of law, or other persons and entities—in the cases prescribed in the provisions of law. This shall not apply to cases when personal data are processed by third parties for marketing and advertising purposes and the processing requires express/separate consent of the User. Disclosing User’s personal data to unauthorized entities under this Privacy Policy may only take place upon User’s prior consent. The User shall have the right to control the process of data which refer to him/her, and which are collected in databases; in particular, he/she shall have the right to: (a) access the content of his/her data and correct them through filing a relevant request with Comicspring; (b) demand temporary or permanent suspension of their processing, or their deletion if they are incomplete, invalid, inaccurate, or if they have been collected in violation of the act, or they have become unnecessary for realization of the purpose for which they had been collected; (c) raise an objection against processing his/her personal data—in other cases as prescribed by the law—and the right to demand their deletion if they have become unnecessary for realization of the purpose for which they had been collected. The User shall have the right to request Comicspring to delete the collected personal data referring to him/her, both from the system belonging Comicspring as well as from bases of entities which have co-operated with Comicspring, to restrict the processing of data and the moving of the personal data collected by Comicspring and referring to him/her, in this to receive them in a structured form, to file a complaint to the supervising body if the User finds that his/her data are processed in violation of the law, and to lodge legal remedies before a court against the supervising body and the entity committing the violations. If Comicspring is advised that the User uses the service provided by electronic means in a way violating the Terms of Service or applicable provisions of law (unauthorized use), then Comicspring may process User’s personal data in the scope required for establishing his/her liability. Comicspring may also disclose User’s data for the purposes related to the law, protection, and security. User’s data may be processed in an automated manner in the form of profiling, which shall consist in creation of dynamic contact forms on the website, dynamic and automated messages and advertising content, after-sales communication, contact segmentation and sending of e-mail messages, reminders on an abandoned cart, automatic selection of communication channels, contact management, and which shall result in generation of personalised marketing actions by Comicspring. OTHER DATA The Platform may store http enquiries, therefore the files containing web server logs may store certain data, including the IP address of the computer sending the enquiry, the name of User’s station—identification through http protocol, if possible—date and system time of registration on the Platform and receipt of the enquiry, number of bytes sent by the server, the URL address of the site visited by the User before if the User has entered the Platform through a link, information concerning User’s browser, information concerning errors occurred by realization of the http transaction. Web server logs may be collected for the purpose of proper administration of the Platform. Only persons authorized to administer the IT system shall have access to the data. The files containing web server logs may be analyzed for the purposes of preparing statistics concerning traffic on the Platform and occurring errors. Summary of such details shall not identify Users. INFORMATION SECURITY User’s personal data are stored and secured in accordance with the rules as prescribed by the applicable legal provisions. Comicspring shall apply technological and organizational means in order to secure the process of the personal data corresponding to the threats and category of data to be secured; in particular through technical and organizational means Comicspring shall secure the data against being published to unauthorized persons, taken over by an unauthorized person, processed in violation of the law and changed, lost, damaged or destroyed. The Users’ personal data shall be collected and stored on a secured server, moreover, the data shall be secured by Comicspring’s internal procedures related to the process of personal data and information security policy. Comicspring uses the secure socket layer (SSL) technology, which is designed to encrypt the transmission of information exchanged between User’s browser and Comicspring’s website. In order to log in to the Account, it shall be necessary to provide a relevant username and password. In order to ensure an appropriate level of security, the password for the Account shall exist only in an encrypted form. At the same time, Comicspring states that using the Internet and services provided by electronic means poses a threat of malware breaking into User’s teleinformatic system and device, as well as of an unauthorized access to User’s data, including personal data, by third parties. Nevertheless, this shall not release Comicspring from the obligation to introduce all necessary system security means in a manner ensuring security of the processing of Users’ personal data and protection against incidents connected with violation of security of the personal data processing. In order to minimize such threats, the User shall use appropriate technical security means, e.g. using updated antivirus programs or programs securing identification of the User in the Internet. In order to obtain detailed and professional information related to the security in the Internet, Comicspring recommends taking advice from entities specializing in such IT services. Comicspring declares to have in place and to introduce all necessary technical means as prescribed in Articles 25, 30, 32–34, 35–39 GDPR (GENERAL DATA PROTECTION REGULATION (Regulation (EU) 2016/679) which provide for enhanced protection and security of the processing of Users’ personal data, including anonymisation and pseudonymisation of data, and technical solutions which enable it to keep the ability to provide for continuous confidentiality, integrity, accessibility, resilience of the personal data processing systems and services and the ability to quickly restore accessibility of personal data and access to them in the case of a physical or technical incident. COOKIES For the purposes of a correct operation of the Platform, Comicspring uses Cookies support technology. Cookies are packages of information stored on the User’s device through the website, usually containing information corresponding to the intended use of a particular file, by means of which the User uses the website—these are usually: address of the Internet service, date of publishing, lifetime of a Cookie, unique number and additional information corresponding to the intended use of a particular file. The terms regulating collection of Cookies by Comicspring are compliant with the Regulation concerning the respect for private life and the protection of personal data in electronic communications 2002/58/EC (e-Privacy Regulation). The collection shall be carried out only for the purpose of and in connection with the performance of the Agreement by Comicspring. Comicspring shall use two types of Cookies: session cookies, which are permanently deleted upon the closing of Service Provider the session of the User’s browser, and permanent cookies, which remain on the User’s device after closing the session until they are deleted, whereby in the case of the latter type of files collection and storage of the relevant type of cookies may take place upon consent of the User through selection of relevant settings in the Internet browser. It is not possible to identify the User on the basis of Cookie files, whether session or permanent. The Cookie mechanism prevents collection of any personal data by introducing the procedure of anonymisation, pseudonymisation and separation, aggregation etc. of data and other solutions effectively protecting User’s privacy. The Cookies used on the website are safe for User’s device, in particular they prevent viruses or other software from breaking into to the device. The User may disable storing Cookies on his/her device in accordance with the instructions of the browser producer, but this may disable entire services or parts of them. Comicspring shall use own Cookies for the following purposes: authenticating the User and preserving User’s session; adjusting the content of sites to User’s preferences, such as: recognizing User’s device, remembering settings set up by the User; Cookies ensuring security of data; analyses and researches of views; advertisement services. Subject to prior consent of the User if he/she selects certain settings in the Internet browser settings used, Comicspring shall use third-party Cookies for the following purposes: preparing statistics (anonymous) for the purposes of optimizing functionality of the website by means of analytic tools such as Google Analytics; using interactive functions by means of social networks, in this facebook.com. The User may individually change the Cookies settings at any time, stating the conditions of their storage in the scope of privacy settings, thereby giving his/her consent to change the protection level in this scope, through the Internet browser settings or configuration of the service. The User may also individually delete Cookies stored on his/her device at any time in accordance with the instructions of the browser producer, provided that he/she gave his/her consent to their earlier storage. Detailed information concerning Cookies support is available in the browser settings. PERSONAL DATA OF PERSONS BELOW THE AGE OF 13 Comicspring shall not process personal data of persons below the age of 13, unless it has obtained the consent of a legal custodian of such person. Persons below the age of 13 may only use the services provided by Comicspring within the Website and whose personal data will be processed in connection with this shall obtain prior consent of the legal custodian whose identity shall be verified by Comicspring before proceeding to the processing.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 59.3 59.4 60.1 61.1 62.1 63.1 64.1 65.1 66.1 66.2 67.1 68.1 69.1 70.1 70.2 71.1 72.1 72.2 72.3 73.1 74.1 75.1 76.1 77.1 78.1 78.2 78.3
UVODNE ODREDBE Turistička agencija „Lily Tours“ pridaje posebnu pažnju zaštiti osobnih podataka svojih klijenata, u skladu s najboljom poslovnom praksom i važećim hrvatskim i europskim propisima, uključujući i Opću uredbu o zaštiti podataka (Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016.) Cilj ove politike je pružiti svim zainteresiranim stranama sve potrebne informacije o načinu obrade i zaštite osobnih podataka i pravima koje klijenti u vezi obrade osobnih podataka imaju. PODRUČJE PRIMJENE Politika se primjenjuje na sve osobne podatke klijenata koje Turistička agencija „Lily Tours“ prikuplja i obrađuje i podataka koje prikupljaju i obrađuju partneri Turističke agencije „Lily Tours“ u ime i za potrebe „Lily Tours-a“. Klijentom se smatra osoba koja je od Turističke agencije „Lily Tours“ zatražila uslugu ili ponudu za uslugu. Osobni podatak je svaki podatak koji se odnosi na pojedinca čiji je identitet utvrđen ili se može utvrditi (Članak 4. Opće uredbe o zaštiti podataka). Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka (Članak 4. Opće uredbe o zaštiti podataka). NAČELA OBRADE OSOBNIH PODATAKA Zakonita, poštena i transparentna obrada Podatke obrađujemo u skladu s važećim zakonima koji se odnose na obradu osobnih podataka i u skladu s najboljom poslovnom praksom zaštite podataka. Obrada u skladu sa svrhom prikupljanja podataka Prikupljene podatke obrađujemo samo u skladu sa svrhom za koje su ti podaci prikupljeni. Ograničenje količine podataka Prikupljamo i obrađujemo samo one podatke koji su nužni za postizanje svrhe obrade. Točnost podataka Posebnu pažnju pridajemo točnosti prikupljenih podataka. Korisnik u svakom trenutku ima pravo uvida u podatke i ispravka svojih podataka. Ograničavanje vremena obrade i čuvanja podataka Podatke obrađujemo i čuvamo samo onoliko dugo koliko je potrebno za ispunjenje svrhe za koju su podaci prikupljeni ili koliko nalažu primjenjivi propisi. Sigurnost osobnih podataka Pridajemo najveću moguću pažnju sigurnosti osobnih podataka. PRAVA KLIJENATA U skladu s Općom uredbom o zaštiti podataka, klijent ima sljedeća prava: Pravo na pristup podacima Klijent ima pravo dobiti potvrdu obrađujemo li njegove osobne podatke, te ako obrađujemo, ima pravo dobiti sljedeće informacije: informaciju o svrsi obrade, o kategoriji osobnih podataka koje obrađujemo, o primateljima ili kategorijama primatelja podataka koje obrađujemo, o predviđenom razdoblju u kojem će podaci biti pohranjeni ili kriterijima za utvrđivanje tog razdoblja, o pravu da zatraži ispravak, brisanje i ograničenje obrade podataka, o pravu na podnošenje tužbe nadzornom tijelu, , informacije o sustavu za automatizirano odlučivanje, poput izrade profila, o zaštitnim mjerama ako se podaci prenose u treću zemlju. Pravo na ispravak i brisanje Klijent ima pravo ishoditi ispravak netočnih podataka. Klijent ima pravo ishoditi brisanje podataka, osim ako su podaci nužni za svrhu za koju su prikupljeni ili ih je potrebno čuvati prema važećim zakonskim propisima. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o promjeni ili brisanju podataka napravljenih na zahtjev klijenta. Pravo na ograničenje obrade Klijent ima pravo ishoditi ograničenje obrade podataka, pod uvjetima definiranima u Općoj uredbi o zaštiti podataka. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o ograničenju obrade napravljenom na zahtjev klijenta. Pravo na prenosivost podataka Klijent ima pravo zaprimiti podatke koje nam je dostavio u strukturiranom, uobičajenom i strojno čitljivom formatu, te ih prenijeti drugom voditelju obrade bez ograničenja. Pravo na prigovor Klijent ima u svakom trenutku pravo na prigovor na obradu osobnih podataka. Klijent ima u svakom trenutku pravo na prigovor na izravni marketing, u kom slučaju podatke više nećemo koristiti u tu svrhu. Automatizirano donošenje odluka uključujući izradu profila Klijent ima pravo da se na njega ne odnose odluke temeljene na automatiziranoj obradi, uključujući izradu profila. NAČIN PRIKUPLJANJA OSOBNIH PODATAKA Podatke o svojim klijentima prikupljamo na sljedeće načine: Prikupljanje podataka u poslovnicama Prilikom izrade rezervacije ili ponude, tražimo od korisnika osobne podatke potrebne za rezervaciju ili ponudu. Korisnik svoje podatke može ostaviti osobno, ili u ime korisnika to može napraviti druga osoba, ili nam korisnik podatke može javiti telefonom ili mailom. Privola klijenta Privola klijenta znači svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose (Članak 4. Opće uredbe o zaštiti podataka). Bez privole klijenta nikad nećemo upotrebljavati osobne podatke klijenta ni u kakve svrhe za koje je prema važećim propisima nužna privola. VRSTE OSOBNIH PODATAKA KOJE PRIKUPLJAMO Prikupljamo samo one podatke koji su nužni za izvršenje svrhe prikupljanja podataka i u skladu s važećim zakonskim propisima. Podaci koje prikupljamo su: ime i prezime, datum rođenja djece radi ostvarivanja popusta, broj telefona i e-mail adresu radi kontakta, lokacija, spol, državljanstvo, broj putovnice ili drugog odgovarajućeg osobnog dokumenta tamo gdje je to potrebno radi izvršenja zakonskih obveza (npr. kod prelaska granice), broj kreditne kartice ili podatke o drugom sredstvu plaćanja. Zbog prirode putničkih usluga može se dogoditi potreba za obradom posebno zaštićenih kategorija osobnih podataka koji otkrivaju, primjerice, vjerska ili filozofska uvjerenja, članstvo u sindikatu i podataka koji se odnose na zdravlje klijenta i to isključivo u svrhu izvršenja ugovora između Turističke agencije „Lily Tours“ i klijenta, odnosno obavljanja radnji koje prethode sklapanju ugovora. Smatrat će se da je klijent koji je Turističkoj agenciji „Lily Tours“ dao podatak iz posebne kategorije osobnih podataka time izričito iskazao svoju privolu na obradu takvih podataka. SVRHA PRIKUPLJANJA OSOBNIH PODATAKA Osobne podatke prikupljamo u sljedeće svrhe: Radi izvršenja ugovora ili pripreme za izvršenje ugovora Osobne podatke prikupljamo kako bismo mogli izvršiti uslugu prema klijentu ili kako bismo mogli napraviti ponudu za uslugu klijentu. Radi obavještavanja korisnika o uslugama i proizvodima Ako je klijent dao privolu, podatke klijenta možemo upotrebljavati kako bismo klijenta upoznali s našim uslugama i proizvodima koji mogu biti zanimljivi klijentu. Za interne potrebe Podatke klijenta čuvamo kako bismo zaštitili legitimne interese klijenta ili naše legitimne interese, a u skladu s važećim zakonskim propisima. To na primjer može uključivati čuvanje podataka klijenta kako bismo na najbolji način mogli odgovoriti na eventualne prigovore klijenata, upotrebu podataka klijenata radi sprječavanja, otkrivanja i procesuiranja zloupotreba na štetu klijenata ili Turističke agencije „Lily Tours“, osiguravanja sigurnosti zaposlenika, klijenata, proizvoda i usluga Turističke agencije „Lily Tours“, kreiranja usluga i ponuda koje odgovaraju potrebama i željama klijenata, osiguravanja vrhunskog korisničkog iskustva, personalizirane korisničke podrške, istraživanja i analize tržišta, optimizacije prodajnih kanala itd. Pravna osnova za obradu podataka u ove svrhe jest legitiman interes Turističke agencije „Lily Tours“, osim kad su od tog interesa jači interes ili temeljna prava i slobode koje zahtijevaju zaštitu podataka klijenta i/ili pravna osnova zaštite ključnih interesa klijenta ili druge fizičke osobe. Iznimka su slučajevi kada je pravna osnova privola. U svrhu ispunjenja zakonskih obveza Na temelju pisanog zahtjeva utemeljenog na važećim propisima, Turistička agencija „Lily Tours“ je nadležnim državnim tijelima (npr. sudovima, policiji, turističkoj inspekciji itd.) obvezna dostaviti ili omogućiti pristup određenim osobnim podacima klijenata. Pravna osnova za obradu podataka u ove svrhe jest ispunjavanje zakonskih obveza Turističke agencije „Lily Tours“. PROSLJEĐIVANJE PODATAKA TREĆIM STRANAMA Podatke klijenata prosljeđujemo trećim stranama u sljedećim slučajevima: U svrhu izvršenja ugovora ili priprema za izvršenje ugovora s klijentom Podatke prosljeđujemo trećoj strani kad je to potrebno da bismo klijentu pružili ugovorenu uslugu ili tražene informacije. To na primjer uključuje slanje podataka klijenta hotelu ili prijevozniku, kada je to potrebno da bi se izvršila usluga ili napravila ponuda za uslugu. Kada je korisnik dao privolu Podatke prosljeđujemo trećoj strani ako je to potrebno za svrhu za koju je korisnik dao izričitu privolu. Kada za obavljanje pojedinih poslova angažiramo podizvođače Ako za obavljanje pojedinih poslova angažiramo podizvođače kao izvršitelje obrade, u tom slučaju prosljeđujemo osobne podatke podizvođaču. Pritom koristimo podizvođače isključivo s prostora EU i ti podizvođači rade isključivo po nalogu Turističke agencije „Lily Tours“ i po ugovoru sklopljenim s Turističkom agencijom „Lily Tours“, što osigurava mjere zaštite podatka kao da podatke obrađuje Turistička agencija „Lily Tours“. ZAŠTITA OSOBNIH PODATAKA U svrhu zaštite osobnih podataka svojih klijenata koristimo najbolje poslovne prakse u području turizma i informacijsko-komunikacijskih tehnologija. Kontinuirano prilagođavamo naše interne procese kako bismo postigli optimalnu razinu zaštite osobnih podataka. Pritom koristimo različite organizacijske mjere i tehnička sredstva zaštite podataka korisnika od neovlaštenog uvida, promjene, gubitka, krađe ili druge zloupotrebe podataka. KONTAKT Klijent može ostvariti svoja prava iz Opće uredbe o zaštiti podataka podnošenjem zahtjeva na adresu elektroničke pošte info@lily-tours.com Ako klijent sumnja na povredu svojih osobnih podataka, može poslati prijavu na adresu elektroničke pošte info@lily-tours.com Klijent također može prijavu podnijeti Agenciji za zaštitu osobnih podataka. Izmjene, dopune i prijelazne odredbe Politike Politika stupa na snagu i počinje se primjenjivati na dan objave te je dostupna na internetskim stranicama i na prodajnim mjestima Turističke agencije „Lily Tours“. O mogućim izmjenama i dopunama Politike klijenti će biti pravovremeno obaviješteni, uključujući i putem objave na internetskim stranicama. Pravo na prenosivost osobnih podataka, brisanje podataka i ograničenje obrade osobnih podataka klijent ima najkasnije od početka primjene Opće uredbe o zaštiti osobnih podataka, tj. od 25. svibnja 2018. godine.