http___lumini.hr_pravila-privatnosti__1.xml
1.1 2.1 3.1 3.2 3.3 4.1 4.2 4.3 4.4 5.1 5.2 5.3 5.4 5.5 6.1 6.2 6.3 6.4 7.1 7.2 7.3 7.4 8.1 8.2 8.3 9.1 10.1 11.1 11.2 12.1 12.2 12.3 12.4 13.1 13.2 14.1 14.2 15.1 15.2 15.3 15.4 16.1 16.2 17.1 17.2 18.1 18.2 19.1 19.2 19.3 20.1 21.1 21.2 21.3 22.1 23.1 24.1 24.2 24.3 24.4 25.1 25.2 26.1 27.1 28.1 28.2 28.3 29.1 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 37.2 37.3 38.1 39.1 40.1 41.1 41.2 42.1 42.2 43.1 44.1 44.2 45.1 46.1 47.1 48.1 49.1 50.1
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is: Contact data of the officially appointed Data Protection Officer: RWTH Aachen processes personal data of visitors of the site only insofar as this is necessary to provide a functional website as well as our contents and services. The collection and processing of the personal data of our users take place only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law. Insofar as RWTH obtains the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as a legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as a legal basis. This also applies to processing operations required to carry out pre-contractual activities. Insofar as the processing of personal data is required to fulfil a legal obligation to which RWTH Aachen University is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. If processing is necessary to safeguard a legitimate interest of the university or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for processing. The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this is required by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned regulations expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract. Each time our website is accessed, the RWTH Aachen system may collect automated data and information from the computer system of the user's computer. In this process, the following data may be collected: The data is stored in the log files of the University's system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Temporary storage of the IP address through the system is necessary to deliver the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session. The data is used for the purpose of optimizing the website and ensuring the safety of information technology systems. The data is not evaluated for marketing purposes in this context. The data will be deleted as soon as it is no longer necessary for carrying out the purpose of its collection. Typically, data is deleted seven days after its storage at the latest. It is possible that the data is stored for a longer period. In this case, the user's IP address is deleted or anonymized, so that the client accessing the website can no longer be identified. The collection of data for the purpose of providing the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. On some of our pages we use so-called "session cookies" to make it easier for you to use our websites. Cookies are small text files which are only stored on your hard disk for the duration of your visit to our website and are deleted, depending on your browser settings, when you close your browser. Cookies do not affect your PC or the data stored on it. Cookies do not allow access to the contents of your hard disk. The provision of the information is not required by law or contract and there is no obligation to provide personal data. If you do not wish cookies to be used, you can make use of your Internet browser's option to deactivate the setting of cookies and thus permanently object to the use of cookies. You can delete cookies that have already been saved at any time using the corresponding option in your Internet browser or with the help of other software programs. As a precaution, we point out that not all functions of our website may be available if you make use of the option to deactivate the setting of cookies. If we process personal data with the help of cookies, this is done to protect the above-mentioned legitimate interests in accordance with Article 6 para. 1 lit. f GDPR. Subject to the conditions described in more detail, you are entitled to the rights of the data subjects referred to in Section 7. We respect your right to privacy and, therefore, we do not use web analytics services. On some pages we include map material from OpenStreetMap ("OSM"). OSM is a free project that collects and structures freely usable geodata and stores it in a database for use by anyone under a free license. The integrated map material is not hosted via our servers, but is provided by the OSM server via a frame. The processing of data is the sole responsibility of OSM and its use is subject to OSM's privacy policy, which can be found at: https://wiki.openstreetmap.org/wiki/DE:Datenschutz or https://wiki.openstreetmap.org/wiki/Privacy_Policy. If any of your personal data is being processed, you are considered a data subject according to the GDPR. Thus, you have the following rights vis-a-vis the person responsible: You can ask the responsible person to confirm whether your personal data is or will be processed by RWTH. If your data is being processed, you can request the following information from the person responsible: You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission. This right to information may be restricted in so far as it is expected to make the realization of research and statistical purposes impossible or severely limits it, and this restriction is necessary for the fulfillment of the research or statistical purpose. You have a right of rectification and/or completion vis-à-vis the person responsible if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay. This right to information may be restricted in so far as it is expected to make the realization of research and statistical purposes impossible or severely limits it, and this restriction is necessary for the fulfillment of the research or statistical purpose. Under the following conditions, you may request that the processing of personal data concerning you shall be restricted: If the processing of personal data relating to you has been restricted, such data may only be processed – aside from being stored – with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted. This right to information may be restricted in so far as it is expected to make the realization of research and statistical purposes impossible or severely limits it, and this restriction is necessary for the fulfillment of the research or statistical purpose. You may request the data controller to delete the personal data relating to you without delay, and the controller is obliged to delete this data without delay if one of the following reasons applies: If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, he or she shall take appropriate measures, including technical ones, and taking into account the available technology and the implementation costs, to inform those who are responsible for processing the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data. The right to cancellation does not exist insofar as the processing is necessary If you have exercised your right to have the data controller correct, delete or limit the processing, he or she is obliged to inform all recipients to whom the personal data relating to you have been disclosed of this correction, deletion or restriction on processing, unless this proves impossible or would involve a disproportionate effort. You have the right, vis-à-vis the data controller, to be informed of these recipients. You have the right to obtain the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another data controller without obstruction by the data controller to whom the personal data was made available, provided that In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be compromised by this. The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller. You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6 para 1 lit e or lit. f GDPR; this also applies to profiling activities based on these provisions. The data controller no longer processes the personal data relating to you, unless he or she can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing activities. If you object to the processing for direct marketing purposes, the personal data concerning you are no longer to be processed for these purposes. You have the opportunity – notwithstanding Directive 2002/58/EC – to exercise your right of objection in connection with the use of Information Society services by means of automated processes using technical specifications. In addition you have the right, on grounds relating to your particular situation, to object to processing of personal data relating to you, which are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 Art. This right to information may be restricted in so far as it is expected to make the realization of research and statistical purposes impossible or severely limit it, and this restriction is necessary for the fulfillment of the research or statistical purpose.
1.1 2.1 4.1 5.1 5.2 5.3 5.4 5.5 5.6 5.7 6.1 7.1 7.2 8.1 9.1 10.1 11.1 12.1 13.1 14.1 14.2 14.3 15.1 16.1 17.1 17.2 18.1 19.1 20.1 20.2 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 28.2 29.1 29.2 30.1 31.1 31.2 32.1 33.1 33.2 34.1 34.2 35.1 36.1 36.2 37.1 38.1 39.1 39.2 40.1 40.2 40.3 41.1 41.2 41.3 42.1 42.2 43.1 44.1 45.1 46.1 46.2 47.1 48.1 48.2 49.1 50.1 51.1 52.1 53.1 54.1 55.1
Pravila privatnosti PRAVILA PRIVATNOSTI TRGOVAČKI CENTAR LUMINI d.o.o. Uvod Pravila privatnosti opisuju način na koji društvo Trgovački Centar Lumini d.o.o., sa sjedištem u Zagrebu, Branimirova 29, OIB: 90092662934 (dalje u tekstu: Društvo) postupa s osobnim podacima koje ste nam dostavili tijekom korištenja web stranice www.lumini.hr. Radi izbjegavanja bilo kakve sumnje, kada Društvo zaprima osobne podatke koje ste pružili tijekom korištenja web stranice Društva, ono se smatra voditeljem obrade tih osobnih podataka. Pravila privatnosti primjenjuju se neovisno o tome upotrebljavate li računalo, mobilni telefon, tablet ili drugi uređaj da biste pristupili našim uslugama. Važno je da pozorno pročitate ova Pravila privatnosti jer svaki put kada upotrebljavate naše usluge (opisane niže) pristajete na uvjete opisane u ovim Pravilima. Ako ne prihvatite uvjete opisane u ovim Pravilima, odnosno ne date privolu za obradu osobnih podataka, nećete moći upotrebljavati usluge na našoj stranici. Druge pravne posljedica u slučaju odbijanja pružanje osobnih informacija ne postoje. Ova pravila privatnosti napisana su u skladu s Uredbom (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te Uredbe o stavljanju izvan snage Direktive 95/46/EZ (Opća uredba o zaštiti podataka, SL L 119, 04.05.2016.) Koje podatke prikupljamo o Vama Pod osobnim podacima koje prikupljamo i obrađujemo od Vas smatraju se osobni podaci koje nam izravno pružite u vezi s uslugama na našoj web stranici. Pritom uvijek prikupljamo i obrađujemo samo one podatke koji su nužni za postizanje određene zakonite svrhe, te ih dalje ne obrađujemo na način koji nije u skladu sa svrhom u koju su prikupljeni, osim ako nije drugačije propisano zakonom ili na temelju privole korisnika. Ti podaci mogu uključivati: - ime i prezime, - adresu elektroničke pošte, - kućnu adresu - telefonski broj - podatke o Vašoj trenutnoj lokaciji Društvo prikuplja neke ili sve od gore navedenih osobnih podataka isključivo temeljem Vaše privole. Pod privolom se smatra dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želje kojim se izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka u određene svrhe (tzv. opt-in). Napominjemo da ste u mogućnosti povući Vašu privolu u svakom trenutku, no od trenutka povlačenja pa nadalje nećete biti u mogućnosti koristiti usluge dostupne na web stranici www.lumini.hr. Privola se povlači putem obavijesti Društvu, odnosno pritiskom na poveznicu „Odjava“ u našem biltenu (newsletteru). Svrha prikupljanja i obrade Vaših podataka Društvo prikuplja i obrađuje osobne podatke kako bi Vam pružilo usluge koje tražite, kao što je primanje biltena (newsletter), usluga izdavanje Lumini club kartice, organiziranje različitih nagradnih igara i sl. Podatke prikupljamo i obrađujemo u marketinške svrhe kako bi Vam ponudili prilagođen sadržaj i oglašavanje te radi shvaćanja načina na koji upotrebljavate naše usluge tako da možemo poboljšati Vaše korisničko iskustvo. Društvo prikupljene informacije neće koristiti radi automatiziranog donošenja odluka, što uključuje uporabu osobnih podataka za ocjenu određenih osobnih aspekata povezanih s pojedincem. Dijeljenje osobnih podataka koje ste nam pružili Društvo se obvezuje čuvati osobne podatke koje ste nam pružili u tajnosti, te ih neće distribuirati, objavljivati, davati trećim stranama (što uključuje treće strane u drugim zemljama i međunarodne organizacije) na korištenje, niti ih na bilo koji drugi način učiniti dostupnima bilo kojoj trećoj osobi bez Vaše prethodne suglasnosti. Međutim, Društvo može dijeliti sve ili neke od osobnih podataka koje prikupi s pravosudnim tijelima Republike Hrvatske, u slučajevima propisanim zakonom. Razdoblje prikupljanja osobnih podataka koje ste nam pružili Vaše ćemo podatke prikupljati i obrađivati sve dok koristite naše usluge i sve dok niste povukli privolu za obradu osobnih podataka koje ste nam pružili. Vaša prava (pristup, ispravak, brisanje, ograničenje obrade, prenosivost podataka, prigovor) - Pravo na pristup podacima - od nas možete zatražiti pristup Vašim osobnim podacima, odnosno imate pravo dobiti informaciju obrađujemo li osobne podatke koji se odnose na Vas; - Pravo na ispravak – ako su osobni podaci koji se odnose na Vas netočni, imate pravo (bez nepotrebnog odgađanja) ishoditi ispravak tih podataka, kao i dopuniti ih ako su isti nepotpuni; - Pravo na brisanje – imate pravo ishoditi brisanje osobnih podataka bez nepotrebnog odgađanja i pod uvjetima navedenim u važećim propisima o zaštiti podataka; - Pravo na ograničenje obrade – imate pravo ishoditi ograničenje obrade osobnih podataka pod uvjetima navedenim u važećim propisima o zaštiti podataka; - Pravo na prenosivost podataka – imate pravo zaprimiti osobne podatke koje ste nam pružili u strukturiranom, uobičajeno upotrebljavanom i strojno čitljivom formatu te ih prenijeti drugom voditelju obrade bez ometanja s naše strane. Ako je to tehnički izvedivo, imate pravo na izravni prijenos Vaših osobnih podataka drugome voditelju obrade; - Pravo na prigovor – u svakom trenutku imate pravo na temelju svoje posebne situacije uložiti prigovor na obradu osobnih podataka koje ste nam pružili, u tom slučaju više ne smijemo obrađivati osobne podatke osim ako dokažemo da postoji uvjerljivi legitimni razlozi za obradu koji nadilaze Vaše interese, prava i slobode ili radi postavljanja, ostvarivanja ili obrane pravnih zahtjeva; ako se osobni podaci obrađuju za potrebe izravnog marketinga, u svakom trenutku imate pravo uložiti prigovor na obradu Vaših osobnih podataka za potrebe takvog marketinga, što uključuje izradu profila u mjeri koja je povezana s takvim izravnim marketingom. Ističemo da u slučaju da se protivite obradi za potrebe izravnog marketinga, Vaši osobni podaci više se ne smiju obrađivati u takve svrhe; Kolačići Kolačići (cookies) su male datoteke koje Vaš preglednik sprema na disk prilikom posjete naše web stranice. To omogućuje našoj stranici da prepozna Vaše računalo kada nas sljedeći put posjetite, kako bi vam sukladno tome ponudili personalizirano iskustvo prilikom vašeg surfanja. Da bi „kolačiće“ mogli koristiti sukladno Zakonu o elektroničkim komunikacijama, Zakonu o zaštiti osobnih podataka i Direktivama EU 2002/58/EZ i 95/46/EZ treba nam vaša privola. Korištenjem ove Internet stranice dajete privolu i pristajete na uporabu kolačića. Blokiranjem kolačića i dalje možete pregledavati stranicu, no neke njezine mogućnosti Vam neće biti dostupne. Kolačići nisu usmjereni na špijuniranje korisnika i ne slijede sve što korisnik radi te nisu zlonamjerni kod ili virus. Također kolačići nisu povezani s neželjenim porukama ili spamom, ne mogu spremiti lozinku i nisu namijenjeni isključivo za reklame ili oglašavanje. Informacije poput Vašeg imena ili e-mail adrese neće biti spremljene - web stranice ne mogu pristupiti vašim osobnim informacijama i datotekama na Vašem računalu. Isključivanjem kolačića odlučujete hoćete li dopustiti pohranjivanje kolačića na vašem računalu. Postavke za kolačiće mogu se kontrolirati i konfigurirati u vašem Internet pregledniku. Ovlašteni ste zabraniti primanje kolačića tako da u izborniku Alati/Opcije (Tools/Options) u svom pregledniku izaberete tu mogućnost. Sustav videonadzora Upozoravamo naše posjetitelje da se objekt Trgovački centar LUMINI, zajedno sa vanjskim parkirnim površinama nalazi pod videonadzorom. Sustav video nadzora koristi se u svrhu zaštite sigurnosti posjetitelja, radnika i svih drugih osoba koje se nađu u Trgovačkom centru LUMINI, te radi sprječavanja požara i/ili drugih elementarnih nepogoda i radi zaštite imovine koja se nalazi u perimetru snimanja. Kamere snimaju isključivo pokretne slike bez zvuka, te ne bilježe niti pohranjuju bilo kakve audio snimke, a nalaze se na parkiralištu, na ulazima, te u zajedničkim dijelovima objekta Trgovački centar LUMINI. Pri ulasku u perimetar snimanja nalazi se vidljiva oznaka „OBJEKT POD VIDEO NADZOROM“. Obavijest sadrži i podatke o voditelju obrade kao i njegove kontakt podatke. Snimke videokamera se pohranjuju na rok od 8-10 dana, a nakon toga se automatski brišu, osim u slučaju da se pojedini događaj zabilježen na videosnimci iz opravdanih razloga sukladno članku 29. Zakona o provedbi Opće uredbe o zaštiti podatka (NN 42/2018) (primjerice u svrhu dokaznog sredstva u sudskome postupku) zasebno ne pohrani na posebnom mediju. U tom slučaju, voditelj obrade napravit će službenu bilješku o točnim razlozima pohrane tih podataka, kao i vremenu na koje će ti podatci biti pohranjeni. Pravo pristupa osobnim podatcima dobivenim sustavom videonadzora ima odgovorna osoba voditelja i/ili izvršitelja osobnih podataka putem videonadzora. Pravo pristupa osobnim podatcima prikupljenim putem sustava videonadzora ostvaruje se sukladno Zakonu o provedbi Opće uredbe o zaštiti podatka (NN 42/2018). Videonadzor se vrši 24 sata dnevno. Treće strane Na našoj web stranici nalaze se poveznice (linkovi) koji vode na druge web stranice, kao što su profili Društva na društvenim mrežama, stranice javnog transporta kojim možete doći do trgovačkog centra i sl. Nismo odgovorni za sigurnost ili privatnost bilo kojih podataka koje prikupe te web stranice njihovim korištenjem. Molim Vas da pažljivo pročitate izjave o privatnosti koje se primjenjuju na tim web stranicama. Izmjene Pravila privatnosti Društvo može izmijeniti ili dopuniti ova Pravila u svakom trenutku te će se na web stranici Društva uvijek nalaziti posljednja verzija Pravila privatnosti. Molimo provjerite datum stupanja na snagu objavljen pri vrhu da biste vidjeli kada su Pravila privatnosti zadnji put ažurirana. Kome se obratiti U slučaju bilo kakvih pitanja možete se slobodno obratiti našem službeniku za zaštitu podataka pisanim putem na adresu: Ulica grada Lipika 15,42204 Donji Kneginec, Turčin ili na e-adresu: info@lumini.hr . Također, sukladno čl. 34. Zakona o provedbi Opće uredbe o zaštiti podataka imate pravo na podnijeti zahtjev za utvrđivanje povrede prava Agenciji za zaštitu osobnih podataka, na adresu elektroničke pošte azop@azop.hr ili na adresu Martićeva ulica 14, 10000 Zagreb. Podijeli s prijateljima Facebook LinkedIn E-mail