http___lily-tours.com_politika-zastite-osobnih-podataka-klijenata__1.xml
1.1 2.1 3.1 4.1 5.1 5.2 5.3 5.4 5.5 6.1 7.1 7.2 8.1 9.1 10.1 11.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 26.1 27.1 28.1 29.1 30.1 31.1 33.1 34.1 35.1 35.2 36.1 37.1 37.2 38.1 39.1 39.2 40.1 41.1 42.1 43.1 43.2 44.1 45.1 46.1 47.1 48.1 48.2 49.1 49.2 50.1 50.2 51.1 51.2 52.1 52.2 52.3 52.4 52.5 52.6 53.1 54.1 55.1 55.2 55.3 56.1 57.1 57.2 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 65.2 66.1 66.2 67.1 68.1 68.2 69.1 69.2 70.1 71.1 72.1 73.1 73.2 73.3 74.1 75.1 76.1 77.1 78.1 78.2 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 87.3 87.4 87.5 88.1 89.1 90.1 91.1 91.2 92.1 93.1 93.2 94.1 95.1 96.1 97.1 98.1 98.2 98.3 99.1 99.2 99.3 100.1 101.1 102.1 103.1 104.1 105.1 105.2 106.1 106.2 106.3 107.1 108.1 108.2 109.1 110.1 110.2 110.3 111.1 112.1 112.2 112.3 112.4 112.5 113.1 114.1 115.1 115.2 116.1 116.2 116.3 116.4 117.1 117.2 118.1 119.1 120.1 121.1 122.1 122.2 123.1 124.1 125.1 126.1 126.2 126.3 126.4 127.1 127.2 127.3 127.4 128.1 128.2 128.3 129.1 129.2 129.3 129.4 130.1 131.1 131.2 132.1 133.1 134.1 135.1 136.1 137.1 138.1 138.2 139.1 140.1 140.2 141.1 141.2 141.3 141.4 141.5 142.1 142.2 143.1 144.1 145.1 145.2 146.1 146.2 146.3 147.1 147.2 147.3 148.1 149.1 149.2 149.3 149.4 149.5 150.1 151.1 151.2 151.3 152.1 153.1 153.2 154.1 155.1 156.1 156.2 156.3 156.4 156.5 157.1 158.1 158.2 159.1 159.2 159.3 159.4 159.5 160.1 160.2 161.1 161.2 161.3 162.1 163.1 164.1 165.1 165.2 165.3 166.1 166.2 166.3 166.4 167.1 167.2 168.1 169.1 170.1 170.2 171.1 171.2 172.1 172.2 173.1 173.2 173.3 174.1 175.1 176.1 176.2 177.1 177.2 177.3 177.4 177.5 178.1 179.1 180.1 181.1 181.2 182.1 182.2 182.3 183.1 183.2 183.3 184.1
Privacy Privacy Policy Data protection at a glance General The companies under the umbrella brand of Gauff Gauff.com offer independent engineering services and software solutions in the fields of infrastructure and mobility. Thanks to our global network of companies and interdisciplinary exchange of ideas and expertise, we are able to offer our customers sustainable solutions from one source. In doing so, the companies of the Gauff Gauff.com group guarantee that the data made available to them will be handled in a safe and transparent way. The following information provides an overview of how we process your personal data and what claims and rights you have under the relevant data protection legislation Personal data means any data by which you can be identified. Datailed information on the subject of data protection is provided in our Privacy Policy below. Who is reponsible for data processing and who can I contact if I have any queries? SETEC Engineering GmbH & CO. KG Feldkirchnerstraße 50 9020 Klagenfurt AUSTRIA Tel. E-mail: info@setec.at Companies register: Austrian trade register Trade register number: FN 180699i Authorized representatives: DI Gerhard Zimmerl and DI Wilhelm Tischendorf VAT identification number: ATU46515604 Data Protection Officer Mr Marko Pircer SETEC Engineering GmbH & Co. KG Feldkirchnerstraße 50 9020 Klagenfurt AUSTRIA Tel. E-mail: mpircer@setec.at Legal affairs Ms Katharina Isele, attorney-at-law Berner Straße 45 60437 Frankfurt am Main Tel. E-mail: kisele@gauff.com What sources and data do we use? We process personal data that we have received from you in the context of our contractual relationship. Such data includes, in particular, your company address, your company data, your bank details, your E-mail addresses and your contact details. For what purposes and on what legal grounds do we process your data? We process your personal data in compliance with the provisions of the European General Data Protection Regulation (EC/GDPR) and the German Federal Data Protection Act (BDSG). Data is used for company-internal purposes, as, for instance, to inform you about special offers or new products and send you invitations to events as well as information and reminders in connection with your existing contractual relationship with us. Who receives your personal data? Your personal data is used for the purpose of managing your contractual relationship with us only. Access to data is limited to our legal department, our management board and the respective project leaders. How long do we store your personal data? Your data is stored by us only as long as your contract concluded with us is valid and we are legally bound by statutory duties of retention and documentation. Transfer of your personal data to international or superordinate organizations Your data is transferred to authorities (e.g. tax authorities), auditors, subcontractors, employees, etc. to meet legal requirements and to prepare your final account. The respective authorities and institutions only use your personal data for administrative and invoicing/final accounting purposes related to your contractual relationship with us. Your personal data is neither processed nor disclosed for any other purposes. Legal basis We process your personal data on the following legal basis: The legal basis is the GDPR, whereby the processing of personal data relies on the following articles: - a) 6 I lit. a GDPR: the data subject (you) has given their consent to the processing of their personal data for one or several specific purposes, e.g. to conclude a contract with us. - b) 6 I lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject (you) is party, or in order to take steps at the data subject's request prior to enter into a contract. - c) 6 I lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject, e.g. tax obligations to which we are subject. - d) 6 I lit. d GDPR: Processing is necessary to protect vital interests of the data subject or another natural person; although this is a very rare event that hopefully will never occur, it includes, e.g., the situation where you would be injured within the scope of your contractual relationship with us, making it necessary for us to disclose your name, age or other vital information to a doctor, hospital or other third party. Art. 6 I lit. f GDPR: All processing operations to which none of the aforementioned articles apply, these operations being necessary to keep a legitimate interest of our company or any third party, provided there are no overriding interests, fundamental rights and fundamental freedoms of the data subject. Should the processing of personal data rely on this Art. 6 I lit. f GDPR, our legitimate interest would be to implement our existing contractual relationship with you. What privacy rights do you have? a) You have the right to obtain confirmation Any data subject has the right, granted by the European directive and regulatory authority, to obtain from the controller the confirmation as to whether or not personal data concerning them are being processed. If a data subject wishes to avail themselves of this right of confirmation, they may contact an employee of the controller at any time. In this case, please contact the Data Protection Officer. b) You have the right to obtain information Any data subject has the right, granted by the European directive and regulatory authority, to obtain at any time from the controller free information about their personal data stored, and a copy of this information. Also, the European directive and regulatory authority grants the data subject access to the following information: o the purposes of processing o the categories of personal data processed o the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations o where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period o the existence of the right to request from the controller rectification or deletion of personal data, or restriction of the processing of personal data concerning the data subject, or to object to such processing o the existence of the right to lodge a complaint with a supervisory authority o where the personal data are not collected from the data subject: any available information as to the source of these data o Furthermore, the data subject has a right to obtain information as to whether personal data was transferred to a third country or to an international organization. Where this is the case, the data subject has the right to be informed of the appropriate safeguards relating to the transfer. If a data subject wishes to avail themselves of this right of confirmation, they may contact an employee of the controller at any time. In this matter, please contact the Data Protection Officer. c) You have the right to obtain rectification Any data subject has the right, granted by the European directive and regulatory authority, to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement. If a data subject wishes to avail themselves of this right of rectification, they may contact an employee of the controller at any time. In this case, please contact the Data Protection Officer. d) You have the right to obtain deletion (Right to be forgotten) Any data subject has the right, granted by the European directive and regulatory authority, to obtain from the controller the deletion of their personal data without undue delay, and the controller has the obligation to delete the personal data without undue delay where one of the following grounds applies, as long as processing is not necessary: o The personal data is no longer required for the purposes for which it was collected or otherwise processed. o The data subject withdraws their consent, on which the processing was based pursuant to Article 6 (1) lit. a GDPR or Article 9 (2) lit. a GDPR, and where there is no other legal ground for this processing. The data subject objects to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) GDPR. o The personal data was processed unlawfully. o The personal data has to be deleted for compliance with a legal obligation under Union or Member State law to which the controller is subject. The personal data has been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR. If one of the aforementioned reasons applies and a data subject wishes to request the deletion of personal data stored by the companies of the Gauff Gauff.com group, they may contact an employee of the controller at any time. In this matter, please contact the Data Protection Officer. - e) You have the right to obtain restriction of processing Any data subject has the right, granted by the European directive and regulatory authority, to obtain from the controller restriction of processing in either of the following circumstances: o The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. o The processing is unlawful and the data subject opposes the deletion of the personal data and requests instead the restriction of their use. o The controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defense of legal claims The data subject has objected to the processing pursuant to Article 21 (1) GDPR, pending the verification whether the legitimate grounds of the controller override those of the data subject. If one of the aforementioned conditions is met and a data subject wishes to request the restriction of the personal data stored by the respective companies of the Gauff Gauff.com group, they may contact the Data Protection Officer at any time. - f) You have the right to obtain data transferability Any data subject has the right, granted by the European directive and regulatory authority, to receive their personal data, provided by the data subject to a controller, in a structured, commonly used and machine-readable format. They also have the right to transmit those data to another controller without hindrance from the controller to which the personal data was provided, as long as the processing is based on consent pursuant to Article 6 (1) lit. a GDPR or Article 9 (2) lit. a GDPR, or on a contract pursuant to Article 6 (1) lit. b GDPR and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising their right to data portability pursuant to Article 20 (1) GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others. In order to assert the right to data portability, the data subject may contact the Data Protection Officer at any time. - g) You have the right to oppose Any data subject has the right, granted by the European directive and regulatory authority, to object at any time, on grounds relating to their particular situation, to the processing of their personal data pursuant to Article 6(1) lit. e or f GDPR. We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims. In order to avail of the right to object, the data subject may contact the Data Protection Officer at any time. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use their right to object by automated means using technical specifications. - h) You have the right to complain If you find that the processing of your personal data is unlawful, you have the right to lodge a complaint with a supervisory authority responsible for data protection, that is competent for your place of residence, workplace or the place of the presumed infringement. - i) You have the right to withdraw your consent to data processing Any data subject has the right, granted by the European directive and regulatory authority, to withdraw consent to the processing of their personal data at any time. If the data subject wishes to assert their right to withdraw consent, they may contact the Data Protection Officer at any time. They simply have to send us an informal e-mail. The lawfulness of the data processing carried out until the consent is withdrawn shall remain unaffected by such withdrawal. We hope that the above information is sufficient for you. However, please do not hesitate to contact our Data Protection Officer or our Legal department for any questions you may have. Our Data Protection Officer or the Legal department will also be at your disposal should you have any other suggestions or further information relating to the implementation of the General Data Protection Regulation. Please note that we collect as few data as possible; however, we need the data collected and to be processed by us in order to manage our mutual contractual relationship properly and in compliance with further legal requirements, e.g. tax requirements. - Data collection on our website - Who is responsible for data collection on this website? Data collection on this website is carried out by the website operator whose contact details can be found in the imprint of this website. How do we collect your data? Some data is collected when you provide it to us. This could, for example, be data you enter on a contact form. Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data such as the browser, the operating system you are using or the time when you view the page. This data is collected automatically as soon as you enter our website. For what purposes do we use your data? Part of the data is compiled in order to ensure that the website is provided faultlessly. Other data can be used to analyze how you use the site. What rights do you have regarding your data? With regard to these rights, please refer to item I.8 of this privacy policy. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also file a complaint with the competent regulatory authority. Analytics and third-party tools When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and so-called analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Details can be found in the following privacy policy. General information and mandatory information a) Data privacy and protection The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy. If you use this website, various pieces of personal data will be collected. Personal data is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens. Please note that data transmitted via the internet (e.g. via e-mail communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible. With regard to the party responsible for this website, please refer to item I.1 of this privacy policy. b) Notice concerning the party responsible for this website The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.). c) SSL or TLS encryption This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the mandates or inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties. Data collection on our website a) Cookies Some of our web pages use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site. You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website. Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. f GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy. b) Server log files The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are: - Browser type and browser version - Operating system used - Referrer URL - Host name of the accessing computer - Time of the server request These data will not be combined with data from other sources. The basis for data processing is Art. f GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. c) Contact form Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission. We will, therefore, process any data you enter onto the contact form only with your consent in accordance with Art. a GDPR. You may revoke your consent at any time. An informal e-mail making this request is sufficient. The data processed before we receive your request may still be legally processed. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision. Analysis tools and advertising a) Google Analytics This website uses functions of the web analysis service Google Analytics. The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called cookies. These are text files that are saved on your computer and that allow an analysis to be made of your use of the website. The information provided by the cookie about your use of this website is usually transmitted to a Google server in the USA and saved there. The saving of Google Analytics cookies is done on the basis of Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both the operator’s web products and services, and advertising them. b) IP Anonymization We have activated the IP anonymization function on this website. This enables your IP address to be shortened by Google within member States of the European Union (EU) or in other countries party to the Agreement on the European Economic Area (EEA) before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information in order to analyze your use of the website and compile reports on website activity, and to provide the website operator with further services related to website and internet usage. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data. c) Browser plug-in You can prevent cookies from being saved by adjusting the relevant settings in your browser software. However, we point out that in this case it may happen that you are not able to fully use all the functions of this website. Moreover, you can also prevent Google from collecting and processing the data obtained from the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug-in provided at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. d) Objection to data collection You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie which prevents the collection of your data during future visits to this website: Deactivating Google Analytics. You can find further information as to how user data is handled by Google Analytics in Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de. e) Demographics with Google Analytics This website uses the Google Analytics Demographics function. It compiles reports containing information about the age, sex, and interests of website visitors. These data originate from interest-based advertising from Google, as well as visitor data from third-party providers. Such data cannot be associated with a specific individual. You can deactivate this function at any time via the display settings in your Google account, or generally refuse to allow the collection of your data by Google Analytics, as explained under "Objection to data collection". f) Google reCAPTCHA We use Google reCAPTCHA (hereinafter called reCAPTCHA) on our websites. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting their site from abusive automated crawling and spam. For more information about Google reCAPTCHA and Google’s privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html. Newsletter a) Newsletter data If you would like to receive the newsletter offered on our website, we require a valid e-mail address as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties. We will, therefore, process any data you enter onto the contact form only with your consent in accordance with Art. a GDPR. You can revoke consent to the storage of your data and e-mail address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed. The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. e-mail addresses for the members area) remain unaffected. Plug-ins and tools a) YouTube Our website uses plug-ins of the YouTube portal provided by Google. The pages are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit any of our pages featuring a YouTube plug-in, a connection to YouTube servers will be established. As part of this technical procedure, You Tube will be informed about which of our pages you have visited. If you do so while logged into your YouTube account, you allow YouTube to directly associate your surfing behavior with your personal profile. You can prevent this from happening by logging out of your YouTube account beforehand. We use YouTube to facilitate the visually attractive presentation of our online products and services. Pursuant to Article 6 (1) lit. f GDPR, this is a legitimate interest. You can find further information as to how user data is handled in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy. Google Web Fonts This site uses so-called web fonts, provided by Google for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, your browser has to create a connection with the servers of Google. Hereby Google obtains knowledge that our website was called up via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online products and services. This is a legitimate interest pursuant to Article 6 (1) lit. f GDPR. If your browser does not support web fonts, a default font will be used by your computer. For further information about Google web fonts please refer to https://developers.google.com/fonts/faq and to Google's privacy policy: https://www.google.com/policies/privacy/ . c) Google Maps This website uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This is a legitimate interest pursuant to Article 6 (1) lit. f GDPR. You can find further information as to how user data is handled in Google’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 59.3 59.4 60.1 61.1 62.1 63.1 64.1 65.1 66.1 66.2 67.1 68.1 69.1 70.1 70.2 71.1 72.1 72.2 72.3 73.1 74.1 75.1 76.1 77.1 78.1 78.2 78.3
UVODNE ODREDBE Turistička agencija „Lily Tours“ pridaje posebnu pažnju zaštiti osobnih podataka svojih klijenata, u skladu s najboljom poslovnom praksom i važećim hrvatskim i europskim propisima, uključujući i Opću uredbu o zaštiti podataka (Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016.) Cilj ove politike je pružiti svim zainteresiranim stranama sve potrebne informacije o načinu obrade i zaštite osobnih podataka i pravima koje klijenti u vezi obrade osobnih podataka imaju. PODRUČJE PRIMJENE Politika se primjenjuje na sve osobne podatke klijenata koje Turistička agencija „Lily Tours“ prikuplja i obrađuje i podataka koje prikupljaju i obrađuju partneri Turističke agencije „Lily Tours“ u ime i za potrebe „Lily Tours-a“. Klijentom se smatra osoba koja je od Turističke agencije „Lily Tours“ zatražila uslugu ili ponudu za uslugu. Osobni podatak je svaki podatak koji se odnosi na pojedinca čiji je identitet utvrđen ili se može utvrditi (Članak 4. Opće uredbe o zaštiti podataka). Obrada podataka znači svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka (Članak 4. Opće uredbe o zaštiti podataka). NAČELA OBRADE OSOBNIH PODATAKA Zakonita, poštena i transparentna obrada Podatke obrađujemo u skladu s važećim zakonima koji se odnose na obradu osobnih podataka i u skladu s najboljom poslovnom praksom zaštite podataka. Obrada u skladu sa svrhom prikupljanja podataka Prikupljene podatke obrađujemo samo u skladu sa svrhom za koje su ti podaci prikupljeni. Ograničenje količine podataka Prikupljamo i obrađujemo samo one podatke koji su nužni za postizanje svrhe obrade. Točnost podataka Posebnu pažnju pridajemo točnosti prikupljenih podataka. Korisnik u svakom trenutku ima pravo uvida u podatke i ispravka svojih podataka. Ograničavanje vremena obrade i čuvanja podataka Podatke obrađujemo i čuvamo samo onoliko dugo koliko je potrebno za ispunjenje svrhe za koju su podaci prikupljeni ili koliko nalažu primjenjivi propisi. Sigurnost osobnih podataka Pridajemo najveću moguću pažnju sigurnosti osobnih podataka. PRAVA KLIJENATA U skladu s Općom uredbom o zaštiti podataka, klijent ima sljedeća prava: Pravo na pristup podacima Klijent ima pravo dobiti potvrdu obrađujemo li njegove osobne podatke, te ako obrađujemo, ima pravo dobiti sljedeće informacije: informaciju o svrsi obrade, o kategoriji osobnih podataka koje obrađujemo, o primateljima ili kategorijama primatelja podataka koje obrađujemo, o predviđenom razdoblju u kojem će podaci biti pohranjeni ili kriterijima za utvrđivanje tog razdoblja, o pravu da zatraži ispravak, brisanje i ograničenje obrade podataka, o pravu na podnošenje tužbe nadzornom tijelu, , informacije o sustavu za automatizirano odlučivanje, poput izrade profila, o zaštitnim mjerama ako se podaci prenose u treću zemlju. Pravo na ispravak i brisanje Klijent ima pravo ishoditi ispravak netočnih podataka. Klijent ima pravo ishoditi brisanje podataka, osim ako su podaci nužni za svrhu za koju su prikupljeni ili ih je potrebno čuvati prema važećim zakonskim propisima. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o promjeni ili brisanju podataka napravljenih na zahtjev klijenta. Pravo na ograničenje obrade Klijent ima pravo ishoditi ograničenje obrade podataka, pod uvjetima definiranima u Općoj uredbi o zaštiti podataka. Turistička agencija „Lily Tours“ ima obvezu obavijestiti klijenta o ograničenju obrade napravljenom na zahtjev klijenta. Pravo na prenosivost podataka Klijent ima pravo zaprimiti podatke koje nam je dostavio u strukturiranom, uobičajenom i strojno čitljivom formatu, te ih prenijeti drugom voditelju obrade bez ograničenja. Pravo na prigovor Klijent ima u svakom trenutku pravo na prigovor na obradu osobnih podataka. Klijent ima u svakom trenutku pravo na prigovor na izravni marketing, u kom slučaju podatke više nećemo koristiti u tu svrhu. Automatizirano donošenje odluka uključujući izradu profila Klijent ima pravo da se na njega ne odnose odluke temeljene na automatiziranoj obradi, uključujući izradu profila. NAČIN PRIKUPLJANJA OSOBNIH PODATAKA Podatke o svojim klijentima prikupljamo na sljedeće načine: Prikupljanje podataka u poslovnicama Prilikom izrade rezervacije ili ponude, tražimo od korisnika osobne podatke potrebne za rezervaciju ili ponudu. Korisnik svoje podatke može ostaviti osobno, ili u ime korisnika to može napraviti druga osoba, ili nam korisnik podatke može javiti telefonom ili mailom. Privola klijenta Privola klijenta znači svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose (Članak 4. Opće uredbe o zaštiti podataka). Bez privole klijenta nikad nećemo upotrebljavati osobne podatke klijenta ni u kakve svrhe za koje je prema važećim propisima nužna privola. VRSTE OSOBNIH PODATAKA KOJE PRIKUPLJAMO Prikupljamo samo one podatke koji su nužni za izvršenje svrhe prikupljanja podataka i u skladu s važećim zakonskim propisima. Podaci koje prikupljamo su: ime i prezime, datum rođenja djece radi ostvarivanja popusta, broj telefona i e-mail adresu radi kontakta, lokacija, spol, državljanstvo, broj putovnice ili drugog odgovarajućeg osobnog dokumenta tamo gdje je to potrebno radi izvršenja zakonskih obveza (npr. kod prelaska granice), broj kreditne kartice ili podatke o drugom sredstvu plaćanja. Zbog prirode putničkih usluga može se dogoditi potreba za obradom posebno zaštićenih kategorija osobnih podataka koji otkrivaju, primjerice, vjerska ili filozofska uvjerenja, članstvo u sindikatu i podataka koji se odnose na zdravlje klijenta i to isključivo u svrhu izvršenja ugovora između Turističke agencije „Lily Tours“ i klijenta, odnosno obavljanja radnji koje prethode sklapanju ugovora. Smatrat će se da je klijent koji je Turističkoj agenciji „Lily Tours“ dao podatak iz posebne kategorije osobnih podataka time izričito iskazao svoju privolu na obradu takvih podataka. SVRHA PRIKUPLJANJA OSOBNIH PODATAKA Osobne podatke prikupljamo u sljedeće svrhe: Radi izvršenja ugovora ili pripreme za izvršenje ugovora Osobne podatke prikupljamo kako bismo mogli izvršiti uslugu prema klijentu ili kako bismo mogli napraviti ponudu za uslugu klijentu. Radi obavještavanja korisnika o uslugama i proizvodima Ako je klijent dao privolu, podatke klijenta možemo upotrebljavati kako bismo klijenta upoznali s našim uslugama i proizvodima koji mogu biti zanimljivi klijentu. Za interne potrebe Podatke klijenta čuvamo kako bismo zaštitili legitimne interese klijenta ili naše legitimne interese, a u skladu s važećim zakonskim propisima. To na primjer može uključivati čuvanje podataka klijenta kako bismo na najbolji način mogli odgovoriti na eventualne prigovore klijenata, upotrebu podataka klijenata radi sprječavanja, otkrivanja i procesuiranja zloupotreba na štetu klijenata ili Turističke agencije „Lily Tours“, osiguravanja sigurnosti zaposlenika, klijenata, proizvoda i usluga Turističke agencije „Lily Tours“, kreiranja usluga i ponuda koje odgovaraju potrebama i željama klijenata, osiguravanja vrhunskog korisničkog iskustva, personalizirane korisničke podrške, istraživanja i analize tržišta, optimizacije prodajnih kanala itd. Pravna osnova za obradu podataka u ove svrhe jest legitiman interes Turističke agencije „Lily Tours“, osim kad su od tog interesa jači interes ili temeljna prava i slobode koje zahtijevaju zaštitu podataka klijenta i/ili pravna osnova zaštite ključnih interesa klijenta ili druge fizičke osobe. Iznimka su slučajevi kada je pravna osnova privola. U svrhu ispunjenja zakonskih obveza Na temelju pisanog zahtjeva utemeljenog na važećim propisima, Turistička agencija „Lily Tours“ je nadležnim državnim tijelima (npr. sudovima, policiji, turističkoj inspekciji itd.) obvezna dostaviti ili omogućiti pristup određenim osobnim podacima klijenata. Pravna osnova za obradu podataka u ove svrhe jest ispunjavanje zakonskih obveza Turističke agencije „Lily Tours“. PROSLJEĐIVANJE PODATAKA TREĆIM STRANAMA Podatke klijenata prosljeđujemo trećim stranama u sljedećim slučajevima: U svrhu izvršenja ugovora ili priprema za izvršenje ugovora s klijentom Podatke prosljeđujemo trećoj strani kad je to potrebno da bismo klijentu pružili ugovorenu uslugu ili tražene informacije. To na primjer uključuje slanje podataka klijenta hotelu ili prijevozniku, kada je to potrebno da bi se izvršila usluga ili napravila ponuda za uslugu. Kada je korisnik dao privolu Podatke prosljeđujemo trećoj strani ako je to potrebno za svrhu za koju je korisnik dao izričitu privolu. Kada za obavljanje pojedinih poslova angažiramo podizvođače Ako za obavljanje pojedinih poslova angažiramo podizvođače kao izvršitelje obrade, u tom slučaju prosljeđujemo osobne podatke podizvođaču. Pritom koristimo podizvođače isključivo s prostora EU i ti podizvođači rade isključivo po nalogu Turističke agencije „Lily Tours“ i po ugovoru sklopljenim s Turističkom agencijom „Lily Tours“, što osigurava mjere zaštite podatka kao da podatke obrađuje Turistička agencija „Lily Tours“. ZAŠTITA OSOBNIH PODATAKA U svrhu zaštite osobnih podataka svojih klijenata koristimo najbolje poslovne prakse u području turizma i informacijsko-komunikacijskih tehnologija. Kontinuirano prilagođavamo naše interne procese kako bismo postigli optimalnu razinu zaštite osobnih podataka. Pritom koristimo različite organizacijske mjere i tehnička sredstva zaštite podataka korisnika od neovlaštenog uvida, promjene, gubitka, krađe ili druge zloupotrebe podataka. KONTAKT Klijent može ostvariti svoja prava iz Opće uredbe o zaštiti podataka podnošenjem zahtjeva na adresu elektroničke pošte info@lily-tours.com Ako klijent sumnja na povredu svojih osobnih podataka, može poslati prijavu na adresu elektroničke pošte info@lily-tours.com Klijent također može prijavu podnijeti Agenciji za zaštitu osobnih podataka. Izmjene, dopune i prijelazne odredbe Politike Politika stupa na snagu i počinje se primjenjivati na dan objave te je dostupna na internetskim stranicama i na prodajnim mjestima Turističke agencije „Lily Tours“. O mogućim izmjenama i dopunama Politike klijenti će biti pravovremeno obaviješteni, uključujući i putem objave na internetskim stranicama. Pravo na prenosivost osobnih podataka, brisanje podataka i ograničenje obrade osobnih podataka klijent ima najkasnije od početka primjene Opće uredbe o zaštiti osobnih podataka, tj. od 25. svibnja 2018. godine.