http___mihael-putovanja.hr_kontakt__3.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 16.2 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 33.2 33.3 33.4 33.5 34.1 35.1 36.1 37.1 38.1 39.1 40.1 40.2 40.3 40.4 41.1 43.1 43.2 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 52.2 52.3 52.4 52.5 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 59.3 59.4 60.1 62.1 62.2 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 75.2 75.3 75.4 76.1 77.1 78.1 79.1 80.1 81.1 82.1 82.2 82.3 82.4 83.1 84.1 85.1 86.1 88.1 89.1 90.1 91.1 91.2 92.1 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 106.2 107.1 108.1 109.1 110.1 111.1 111.2 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 120.2 121.1 122.1 123.1 124.1 125.1 126.1 127.1 128.1 129.1 130.1 131.1 132.1 133.1 134.1 134.2 135.1 136.1 137.1 138.1 139.1 139.2 140.1 141.1 142.1 143.1 144.1 145.1 146.1 147.1 148.1 148.2 149.1 150.1 151.1 152.1 153.1 154.1 155.1 156.1 156.2 157.1 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 166.1 167.1 168.1 168.2 168.3 168.4 169.1 171.1 171.2 172.1 173.1 174.1 175.1 176.1 177.1 178.1 178.2 179.1 180.1 181.1 182.1 183.1 184.1 185.1 186.1 187.1 188.1 188.2 189.1 190.1 191.1 192.1 193.1 194.1 195.1 196.1 197.1 198.1 199.1 200.1 201.1 202.1 203.1 204.1 204.2 205.1 206.1 207.1 208.1 209.1 210.1 211.1 212.1 213.1 214.1 215.1 216.1 217.1 218.1 219.1 220.1 221.1 222.1 223.1 224.1 225.1 226.1 227.1 228.1 229.1 229.2 230.1 231.1 232.1 233.1 234.1 235.1 236.1 237.1 238.1 239.1 240.1 241.1 242.1 243.1 243.2 244.1 245.1 246.1 246.2 247.1 248.1 249.1 249.2 250.1 253.1 254.1
PRIVACY POLICY PRIVACY POLICY Introduction This document contains information regarding the personal data gathered by Nu Am Timp SRL (named allyourtime.com), who is the Operator of the personal data which you (as the Interested Party) will distribute to us to activate the electronic trade by using our site allyourtime.com and other technologies and associated acts with the Allyourtime online presence. In accordance with the General Data Protection Regulation (EU) 2016/679 regarding the protection of individuals concerning the processing of personal data and the free circulation of these data and the Directive 95/46/CE (General Data Protection Regulation) hereby repeal, in continuation: GDPR, we inform you that: The privacy policy can be accessed on the allyourtime.com site The modifications of the policy will come into force from the moment of the publication on the website mentioned above. Contact information of the data operator: Contact information of the Data Protection Officer: The Data Protection Officer declares that is not responsible for data protection, while there is no incident of cases provided in the GDPR paragraph (1) art. Definitions; - “personal data” is defined as any information relating to an identified or identifiable individual (“data subject”); an identifiable individual is a person who can be identified directly or indirectly through identification elements such as a name, an identification number, location data, an online identifier or one or more elements specific to their own physical, physiological, genetic, psychological, economic, cultural or social identity; - “processing” is defined as any operation or set of operations that are performed on personal data or sets of personal data, with or without using automated processing such as gathering, registering, organizing, structuring, storing, adapting or modifying, extracting, consulting, utilizing, disclosing by transmitting, disseminating or making it available in any other form, aligning or combating, restricting, deleting or destroying; - “operator” is defined as a natural or legal person, public authority, agency or organisation who alone or together-with others, establishes the purposes or means of the processing of the personal data; when the purposes and the means are established by the law of the Union or the national law, the operator or the specific criteria for the designation of it can be provided in the law of the Union or in the national law; - “authorized person by the operator” is defined as a natural or legal person, public authority, agency or organisation who is processing data in the name of the operator - “recipient” is defined as a natural or legal person, public authority, agency or organisation whose personal data is disclosed regardless of being a third party or not. However, public authorities are not considered recipients in case of an investigation conformed to the law of the Union or the national law; during the processing of the personal data public authorities are respecting the norms for protecting the personal data conformed to the purpose of the processing. - “consent” of the data subject is defined as any manifestation of free will acceptance, specific, informative and unambiguous of the data subject by declaration or unequivocal action the personal data that will be processed; - “violationing the of security of the personal data” is defined as a form of security violation results in the accidental or illegal destruction, loss, modification or unauthorized disclosure of transmitted personal data, stored or processed in other form, or unauthorized access to it; Principles concerning the processing of personal data Personal data is: - processed legally, equitable and transparent concerning the data subject (“legality, equitability and transparency”); - collected with determined, explicit and legitimate purposes, and is not processed after in incompatible form; processing is carried out for archiving purposes in public interest, for scientifical, historical or statistical purposes are not considered incompatible with initial purposes in accordance with paragraph (1) art. 89 (“limitations regarding the purpose”); - adequate, relevant and limited and necessary to the purposes of processing the personal data (“ reducing the data to the minimum”) - accurate when actualization is needed; in case of inaccurate personal data during processing the necessary action should be taken, deleting or rectification without delay (“accuracy”); - stored in the form that allows the identification of the data subject for a period that is not overlapping the period necessary for the processing of the data; personal data can be stored for an extended period when processing is carried out for archiving purposes in public interest, for scientifical, historical or statistical purposes in accordance with paragraph (1) art. 89, subjected to adequate measurements of technical and organizational order foreseen by the regulation guaranteeing the rights and liberties of the data subject (“limitations regarding storing”) - processing in the from that ensures adequate security of the personal data, including protection against unauthorized or illegal processing and against loss, accidental destruction or deterioration, by taking the necessary technical and organizational precautions (“integrity and security”) The operator is responsible for respecting all the above and is allowed to demonstrate that he respected it (responsibility). Processing Registration - Data collection, processed data and the purpose of the processing Regarding the e-mail address is not necessary for this to contain personal data. - Data subject: every individual registered on the webpage. - Data processing time, data deletion term: it takes the request of a data subject to delete it. With the deletion of the registration the personal data of the applicant is also deleted. According to art. 19 of the GDPR, the data operator has to notify the data subject in electronic form about the deletion of any personal data provided by the data subject. In case if, the data subject requested the deletion of e-mail address, the operator will delete the address after the notification. - Authorized people by the operator for the processing of the personal data, recipients of the personal data: Authorized people by the operator for the processing of the personal data are designated employees for this purpose according to the privacy policy. - The process of informing data subjects about their rights regarding the processing of personal data: - The data subject has the right to request access to the personal data from the operator, as well as the rectification, deletion or restriction of processing the personal data; and - Can oppose to the processing of it, as well as - Has the right to the portability of it, and to withdraw their consent at any moment. - The data subject can request to access the personal data, as well as the rectification, deletion or restriction of processing it, the portability of it, and to withdraw their consent at any moment by the following: - by post at the next address: Tg. Mureș, str. Kogălniceanu, nr. 18, jud. Mureș - by e-mailing to the next address: support@allyourtime.com - Basis of processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force from Romania. - We inform you that: - The processing of the data is based on your consent. - For registering you are obliged to provide us with personal data. - Not providing the data it is impossible to create an user account. Processing of the necessary data for the functioning of the online shop (utilization of services) - Data collection, processed data and the purpose of the processing Regarding the e-mail address is not necessary for this to contain personal data. - Data subject: every individual registered on/who ordered from the webpage. - Data processing time, data deletion time: is available until the data subject requests the deletion. With the deletion of the registration, the personal data of the requestent is deleted. By Article 19 from the GDPR, the data operator notifies the data subject in electronic form about the deletion of any personal data provided by the data subject. If the data subject requested the deletion of the e-mail address, the operator will delete the address after the notification. Exceptions are the accounting documents that are kept for 8 years, provided by the hungarian legislation (paragraph 2, Article 169 from Law C. from the year 2000 regarding accountability). - Authorized people by the operator for the processing of the personal data, recipients of the personal data: Authorized people by the operator for the processing of the personal data sales and marketing employees of the data operator according to the mentions above. - The process of informing data subjects about their rights regarding the processing of personal data: - The data subject has the right to request access to the personal data from the operator, as well as the rectification, deletion or restriction of processing the personal data; and - Can oppose to the processing of it, as well as - Has the right to the portability of it, and to withdraw their consent at any moment. - The data subject can request to access the personal data, as well as the rectification, deletion or restriction of processing it, the portability of it, and to withdraw their consent at any moment by the following: - by post at the next address: Tg. Mureș, str. Kogălniceanu, nr. 18, jud. Mureș - by e-mailing to the next address: support@allyourtime.com - Basis of processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. - We inform you that: - The processing of the data is based on your consent. - For registering you are obliged to provide us with personal data. - Not providing the data it is impossible to process the order, as well as impossible to deliver the order. - Data processing time, data deletion term is available until: - the data subject requests the deletion. - navigation on this website (we ask you to consult our cookie policy on this link). - Maximum 1 year - requesting contract. - Maximum 2 years - restriction zone for the user registered/authenticated (maximum 2 years) - Maximum 2 years - collecting data for selecting personal. - Maximum 24 months - receiving newsletter or promotional information in e-mail. - Maximum 10 years - selling online. - With the deletion of the registration the personal data of the applicant is also deleted. According to art. 19 of the GDPR, the data operator has to notify the data subject in electronic form about the deletion of any personal data provided by the data subject. In case if, the data subject requested the deletion of e-mail address, the operator will delete the address after the notification. - Authorized personnel by the operator for the processing of the personal data, recipients of the personal data: Authorized people by the operator for the processing of the personal data are designated employees for this purpose according to the privacy policy. Authorized personnel by the operator Web-hosting service provider - Service provided by the personnel authorized by the operator: web-hosting service provision. - Name and contact information of the personnel authorized by the operator: - Data collection, data processing: every personal data provided by the data subject Headquarters: Tg. Mureș, str. Kogălniceanu, nr. 18, jud. Mureș Business registration number: J26/1273/10.06.2019 Fiscal code: RO41247068 E-mail: support@allyourtime.com Web: allyourtime.com - Data subjects: every person benefiting from the services provided on the web page, as well as every person registered on/ordering from the web page. - Purpose of processing: accessibility, proper functioning of the web page / web-hosting service providing. - Data processing time, term of data deletion: until the end of the collaboration between the Provider and the Web-hosting service provider, or until the request of the data subject addressed to the Web-hosting service provider regarding the deletion of the data. - Basis of the processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. Delivery - Service provided by the personnel authorized by the operator: delivering products, transport. - Name and contact information of the personnel authorized by the operator: Name of the company:DELIVERY SOLUTIONS SA, Headquarters: București, Sectorul 6, Splaiul Independenței, Nr. 319, Bloc Ob17c Business registration number: J40/7031/2008 Fiscal code: 23743772 E-mail: office@sameday.ro Web: sameday.ro Phone number:021 – 637.06.60 - Data collection, processed data: name and delivery address, phone number, e-mail address. - Data subjects: every person requesting home delivery. - Purpose of processing: home delivery of the ordered product. - Data processing time, term of data deletion: until the execution of the service. - Basis of the processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. Online payment - Service provided by the personnel authorized by the operator: online payment. - Name and contact information of the personnel authorized by the operator: Name of the company: NETOPIA Payments SRL Headquarters: Bd. Dimitrie Pompeiu nr 9-9A, Iride Business Park, cladirea nr. 24, camera 4C, et. 4, sector 2, 020335, BUCUREȘTI Business registration number: J40/9170/2003 Fiscal code: RO15565496 E-mail: gdpr@netopia.ro Web: netopia-payments.com - Data collection, processed data: name and billing address, e-mail address. - Data subject: every person who requested online payment. - Purpose of processing: online payment executing, payment confirmation and executing fraud-monitoring to protect the users interests (abuse verification). - Data processing time, term of data deletion: until the execution of the online payment. - Basis of the processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. Web page administration - Service provided by the personnel authorized by the operator: web page administration (verification, technical updating, development of the security system, other developments, repair) - Name and contact information of the personnel authorized by the operator: Name of the company: SC Aprilred SRL Headquarters: Targu Mures, Romania, str.Köteles Sámuel nr. 8 Fiscal code: RO 2954 5677 E-mail: hello@aprilred.com Web: aprilred.com Phone number: +40 744 427 687 - Data collection, processed data: any personal data provided by the data subject. - Data subject: every person who beneficiated from the services provided on the web page as well as every person registered on/ordering from the web page. - Purpose of processing: web page administration (development, verification, reparation) - Data processing time, term of data deletion: until the end of the collaboration between the Provider and the Web page administrator, or until the request of the data subject addressed to the Web page administrator regarding the deletion of the data. - Basis of the processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. Accounting, billing - Service provided by the personnel authorized by the operator: Accounting, billing. - Name and contact information of the personnel authorized by the operator: Name of the company: I-TOM SOLUTIONS SRL Headquarters: Bl. Mircea Voda, nr. 21D, et.7, ap. 7.5, Sector 3, București Business registration number: J40/3342/2006 Fiscal code: RO18430442 E-mail: contact@itom.ro Web: fgo.ro - Data collection, processed data: Name, name and billing address. - Data subject: every person who ordered from the web page. - Purpose of processing: issuing the electronic bill/accounting. - Data processing time, term of data deletion: 8 years, according to the legislation in force in Romania (Law of accounting nr. 82/1991 republished). - Basis of the processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. Utilization of “cookies” - The utilization of “security cookies”, “session status cookies”, “permanent or saved cookies”, “internal or external cookies” does not require previous consent of the data subject. - Data collection, processed data: IP address, connection data. - Data subject: every person accessing the web page. - Purpose of processing: identification of the users and tracking visitors. - Data processing time, term of data deletion: - Authorized personnel for the processing of the personal data: because of the utilization of cookies the data operator does not process personal data. - Informing the data subjects about their rights regarding the data processing: The data subjects have the possibility to delete the cookies in the browser settings, at the setting point called data protection. For instance, in the Google Chrome browser the Instruments meniu contains an option with which you can Delete the navigation data. - Basis of the processing: in which case the purpose of the utilization of the cookies is transferring by electronic communication network, or the utilization is necessary for providing the requested services, the consent of the data subject is not necessary. Complaints: - Data collection, processed data and purpose of processing: - Data subjects: every person who ordered from the web page and made a complaint about the quality of the ordered product. - Data processing time, term of data deletion: Copies of the minutes drawn up with the registration of the complaint, of the address and the response to the address will be kept for 5 years. - Authorized personnel for the processing of the personal data, recipients of the personal data: Authorized personnel for the processing of the personal data are the sales and marketing representatives of the data operator in concordance with the principles mentioned above. - Informing the data subjects about their rights regarding the data processing: - The data subject has the right to request access to the personal data from the operator, as well as the rectification, deletion or restriction of processing the personal data; and - Can oppose to the processing of it, as well as - Has the right to the portability of it, and to withdraw their consent at any moment. - The data subject can request to access the personal data, as well as the rectification, deletion or restriction of processing it, the portability of it, and to withdraw their consent at any moment by the following: - by post at the next address: Tg. Mureș, str. Kogălniceanu, nr. 18, jud. Mureș - by e-mailing to the next address: support@allyourtime.com - Basis of processing: consent of the data subject following point f) (1) paragraph Article 6 from Reg. (EU) 2016/679, as well as the legislations in force in Romania. - We inform you that: - The processing of the data is based on your contractual consent. - The processing of the personal data is necessary for the conclusion of the contract. - For responding to your complaint you are obliged to provide us with personal data. - Not providing the data it is impossible to respond to your complaint. Social media - According to the legislation (Article 13 from the Reg. (EU) 2016/679), regarding the processing of personal data - concerning social media - are defined the following terms: - data collection, - data subject, - purpose of processing, - time of processing, - authorized personnel for processing of the data, - informing the data subjects about their rights regarding the processing of the data. - Data collection, processed data: Name that is registered to social media platforms Facebook/Google/Twitter etc., as well as public profile photos of the User. - Data subjects: Every person registered to social media platforms Facebook/Google/Twitter etc., and “liked” the Providers page or posts of the data operator. - Purpose of processing: Sharing, following or popularizing the products, services, discounts of elements of the web page, or the web page itself, on the social media platforms. - The data processing period, the data deletion period, the personnel authorized to the data processing and the informing of the data subjects about their data processing rights: information on the source, processing and transmission of data, and the basis of processing, are provided by the social media platform concerned. The data processing is carried out by the respective social media platforms, thus, regarding the period and the way of data processing, the possibilities of deletion and rectification of the data, the regulation of the web page in question applies. - Basis of processing: consent of the data subject for the processing of their personal data on the social media platforms. - For more information access: Facebook social login: https://developers.facebook.com/docs/plugins Twitter social login: https://support.twitter.com/articles/20170519 Google account login: https://www.google.com/policies/privacy Customer support and others - In case of questions or problems regarding the services provided by the data operator, the data subject can address to the data operator by the means mentioned on the web page (phone, e-mail, social media platforms etc.). - E-mails, messages, data provided by phone, Facebook, will be deleted by the data operator within 2 years at most. - About the cases of data processing not mentioned in the Privacy policy We will inform you at the moment of the registering the data. - In certain cases provided by law, at the request of the competent authorities, respectively at the request of other bodies based on incidental legal norms in question, the Provider has the obligation to provide data and to hand over documents to these bodies. - In these cases, the Provider transmits to the requesting bodies only the personal data, which is absolutely necessary in order to fulfill the requested purpose. Rights of the data subject - Right of access of the data subject The data subject has the right to get confirmation from the operator that the personal data is being processed or not, as well as access to the respective data. - Right to rectification: The data subject has the right to get from the operator without any unjustified delay the rectification of the personal data. Having in account the purpose of the personal data processing, the data subject has the right to complete the uncompleted personal data, including a supplementary declaration. - Right to deletion The data subject has the right to obtain the deletion of the personal data from the operator without any unjustified delay, and the operator has the obligation to delete the personal data without any unjustified delay in cases mentioned in the regulation. - “Right to being forgotten” In case if the operator made public the personal data and is obligated to delete it, taking into the consideration the available technology and the cost of implementation, take reasonable measures, including technical measures for informing the operator who are processing the personal data because the data subject has requested any of the links containing the data or any of the copies or reproductions of this personal data. - Right for restricting the process The data subject has the right to obtain from the operator the restriction of the processing in the cases below: - the data subject contests the accuracy of the data, for this period the operator will verify the accuracy of the data; - the processing is illegal, also the data subject is opposing the deletion of the personal data, requesting instead the restriction of the utilization; - the operator does not need anymore the personal data for processing, also the data subject requests the establishment, accuracy or protection of a right in the court; - the data subject opposed the processing for the time in which is verified if the legitimate rights of the operator prevail above the data subject. - Right of the portability of the data The data subject has the right to get the personal data that is theirs and refused provide from the operator in structured form, in current form and can be read automatically and has the right to transfer the data to another operator, without any obstacle from the operator to whom the data was provided. - Right to oppose In any moment the data subject has the right to oppose, for reasons regarding the particular situation in which they are, processing the personal data, including profiling based on the dispositions. - Right to oppose in case of direct marketing When the purpose of the processing of the personal data is direct marketing, the data subject has the right to oppose at any time the processing of the personal data, including profiling related to direct marketing. - Automated individual decision making, including creating a profile The data subject has the right not to be subject to a decision based on automatic processing, including profiling, which produces legal effects concerning the data subject or similarly affects to a significant extent. This provision does not apply to the next decisions: - is necessary for concluding and executing a contract between the data subject and data operator; - is authorized by the law of the Union or by the internal law that applies to the operator and that provides corespondent measures for protecting rights, liberties and interests legitimated for the data subject; - has at the base the explicit consent of the data subject. Deadline of measure taking The operator provides the data subject with information on action taken following a request based on the rights of the data subject mentioned above, without unjustified delay and in any case within a month of the receiving the request. This period can be extended by two months when necessary, taking into account the complexity and number of requests. The operator informs the data subject of extension within one month of receipt of the request, stating the reasons for the delay. If the data operator does not take action against the data subject, the operator informs the data subject, without delay and no later than one month after receipt of the request, of the reasons for not taking action and of the possibility to make a complaint in the front of a supervisory authority and to introduce a judicial remedy. Security of processing Given the current state of development, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risk with different degrees of probability and gravity for the rights and liberties of individuals, the operator and his authorized personnel implements technical and organizational measures appropriate to ensure a level of security appropriate to that risk, including, as appropriate: - pseudomynisasion and encryption of personal data; - capicity of securing confidentiality, integrity, disponibility and the continuous resistance of the systems and services processed; - capacity to restore the disponibility of personal data and timely access to this in case of a natural or technical incident; - a process for testing, evaluating and periodic assessment of the effectiveness of technical and organizational measures to ensure the security of processing. Informing the data subject regarding the violation of the security of the personal data If the violation of the security of personal data is likely to pose a high risk to the rights and liberties of individuals, the operator informs the data subject without unjustified delay about such violation. The information provided to the data subject includes a clear description in plain language of the nature of the personal data violation, the name and contact details of the data protection officer or another contact point from which more information can be obtained; describe the likely consequences of the violation of personal data security; describe the measures taken or proposed to be taken by the operator to remedy the violation of the security of personal data, including, where appropriate, measures to mitigate any possible negative effects. Information of the data subject is not required if any of the following conditions are met: - the operator has implemented appropriate technical and organizational protection measures, and these measures have been applied to personal data affected by personal data violation, in particular measures to ensure that personal data become unintelligible to anyone who is not authorized to access them, such as encryption; - the operator took measures to secure the high risk for rights and liberties of the data subject is not likely to materialize; - can necessitate a disproportionate effort. In this situation, is carried out public informing or a similar measure in which the data subjects are informed in an effective manner. If the operator has not already communicated the personal data violation to the data subject, the supervisory authority, after taking into account the likelihood that the personal data violation would pose a high risk, may ask the data subject to this thing. Right to make a complaint Every data subject has the right to make a complaint with a supervisory authority, in particular in the Member State in which they have their residence, place of employment or the violation took place that the processing of personal data concerning this Regulation. The competent authority in Romania is: National Authority for Surveillance of the Processing of Personal Data Web: https://www.dataprotection.ro/ B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucuresti, Romania Email: anspdcp@dataprotection.ro , dpo@dataprotection.ro Here you can download the (EU) 2016/679 REGULATION OF THE EUROPEAN PARLIAMENT AND COUNCIL from 27th of april 2016 regarding the protection of the natural person in accordance with the protection of the personal data and regarding the free circulation of the data and repeal of the Decision 95/46/CE (General regulation regarding data protection) Date updated: 27.04.2021
1.1 2.1 3.1 4.1 5.1 6.1 8.1 10.1 12.1 14.1 15.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 27.1 28.1 29.1 30.1 31.1 32.1 32.2 33.1 34.1 34.2 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 45.1 45.2 46.1 46.2 47.1 48.1 49.1 50.1 51.1 51.2 52.1 53.1 54.1 55.1 56.1 56.2
Ured Adresa Putnička agencija Mihael d.o.o. Pavlinska 5, 42000 Varaždin, Hrvatska Voditelj poslova: Valentina Šimić Radno vrijeme: pon – pet 08.00 – 16.00 sati OIB Telefoni Fax info@mihael-putovanja.hr Podaci za uplatu SWIFT: PBZGHR2X (za inozemne uplate) Model: 00 Poziv na broj: datum puta Svrha uplate: putovanje i Vaše prezime Dokumenti za preuzimanje: Pošaljite upit MIHAEL putnička agencija,d.o.o. SJEDIŠTE: Varaždin, Pavlinska 5 Radno vrijeme: ponedjeljak – petak 08.00 – 16.00 sati Voditelj poslova: Valentina Šimić Nastupa u svojstvu stalno i u punom radnom vremenu zaposlenog voditelja poslova. Ovlaštena je za praćenje poslovanja turističke agencije sukladno odredbama Zakona o pružanju usluga u turizmu. Djelatnost turističke agencije podliježe nadzoru Ministarstva turizma – Samostalni sektor turističke inspekcije, Trg Republike Hrvatske 8/1, 10000 Zagreb, e-mail: turisticka.inspekcija@ Porezni obveznik upisan je u sudski registar: Trgovački sud u Varaždinu pod matičnim brojem MBS: 070077587, temeljem rješenja navedenog suda Tt-07/262-2 od 26.02.2007. Temeljni kapital: 20.000,00 kn uplaćen u cijelosti. Direktor: Milan Kruljac ZAŠTITA PRIVATNOSTI Naziv voditelja obrade: MIHAEL Putnička agencija d.o.o. Adresa: Pavlinska 5, Varaždin OIB: 20054015482 Sukladno Uredbi (EU) 2016/679 Europskog parlamenta i vijeća od 27.travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka (u daljnjem tekstu Opća uredba o zaštiti podataka), koja je u punoj primjeni od dana 25. svibnja 2018. godine u Republici Hrvatskoj i svim zemljama članicama Europske unije, kao i Zakonu o provedbi Opće uredbe o zaštiti podataka (Narodne novine broj 42/18), odnosno sukladno pravnom okviru zaštite osobnih podataka u Republici Hrvatskoj i Europskoj uniji, Mihael putnička agencija d.o.o. kao voditelj obrade osobnih podataka korisnika svojih usluga, zaposlenika i kupaca, izradilo je Politiku o zaštiti privatnosti osobnih podataka te se u skladu s tim traži Ova privola predstavlja pravnu osnovu za prikupljanje i obradu podataka ispitanika te se smatra dobrovoljnim, informiranim i nedvosmislenim izražavanjem želja ispitanika kojom on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose. Vrste podataka koji se prikupljaju i obrađuju: Podaci koji se prikupljanju i obrađuju su sljedeći: ime i prezime, adresa, osobni identifikacijski broj (OIB), datum rođenja, spol, kontakt broj telefona i/ili mobitela, kontakt podatke elektroničke pošte (e-mail adresa), podaci iz osobne iskaznice i putovnice, podaci o bankovnom računu i broju kartice, podaci iza isplatu odštetnog zahtjeva za osiguravajuću kuću kao I prateća zdravstvena dokumentacija. Svrha prikupljanja i obrade podataka: Navedeni osobni podaci ispitanika, sukladno pravima i obvezama Zakona o pružanju usluga u turizmu te ugovornim obvezama koje proizlaze iz turističke djelatnosti, koriste se isključivo za potrebe pojedinog projekta (putovanja) baziranog na međusobnim ugovorima. Trajanje čuvanja i obrade osobnih podataka: Ovisno o svrsi i pravnoj osnovi temeljem koje se prikupljaju osobni podaci ispitanika, voditelj obrade je u pojedinim slučajevima obvezan čuvati osobne podatke u vremenskom trajanju (razdoblju) koje za pojedinu svrhu propisuju mjerodavni propisi ili prestankom svrhe u koju su prikupljeni. Obveze voditelja obrade prema ispitaniku: Voditelj obrade podataka obvezan je na temelju podnesenog pisanog zahtjeva ispitanika na gore naznačenu adresu voditelja obrade podataka istom omogućiti pristup osobnim podacima koje obrađuje o njemu, ispravak netočnih osobnih podataka, brisanje osobnih podataka ili ograničenje obrade osobnih podataka, kao i upoznati ga s mogućnošću prigovora na obradu osobnih podataka te pravom na prenosivost podataka. Prosljeđivanje podataka trećim osobama: Osobni podaci ispitanika proslijeđuju se trećim osobama (osiguravajućim kućama, hotelima, avio kompanijama, turističkim agencijama i ostalim trećim osobama ovisno o potrebi, odnosno tipu putovanja) koje sudjeluju u organizaciji putovanja te u tu svrhu koriste osobne podatke ispitanika. Prava ispitanika: Ispitanik ima pravo na pristup osobnim podacima. Voditelj obrade dužan je na temelju pisanog zahtjeva ispitanika informirati ispitanika o osobnim podacima koje obrađuje o njima. Ispitanik ima pravo na ispravak netočnih podataka. Voditelj obrade podataka dužan je ispitaniku omogućiti ispravak netočnih osobnih podataka kada je utvrđeno da prikupljeni osobni podaci nisu ispravni ili je došlo do promjene osobnih podataka. Ispitanik ima pravo na brisanje osobnih podataka kada osobni podaci ispitanika više nisu nužni za ispunjenje svrhe obrade, kada ispitanik povuče privolu kao pravni temelj za obradu osobnih podataka, kada ispitanik uloži prigovor na obradu podataka, kada su osobni podaci nezakonito obrađeni, kada se osobni podaci moraju brisati radi ispunjenja pravnih obveza iz prava Europske unije ili prava države članice kojem podliježe voditelj obrade podataka. Ispitanik ima pravo na ograničenje obrade podataka. Voditelj obrade podataka dužan je osigurati ograničenje obrade podataka u slučajevima kada ispitanik osporava točnost podataka, kada je obrada nezakonita, kada voditelj obrade više ne treba osobne podatke za potrebe obrade ili kada ispitanik uloži prigovor na obradu osobnih podataka. Povlačenje privole: Ispitanik ima pravo u bilo kojem trenutku povući ovu privolu. U tom slučaju, voditelj obrade podataka dužan je odmah prestati s obradom podataka, odnosno obrisati ili anonimizirati osobne podatke, osim ako postoji neka druga pravna osnova obrade osobnih podataka. Potpisom ove privole ispitanik izjavljuje da je upoznat sa svrhom prikupljanja osobnih podataka koji se na njega odnose, da je upoznat s identitetom voditelja obrade osobnih podataka, da dobrovoljno stavlja na raspolaganje svoje osobne podatke, da preuzima obvezu obavijestiti voditelja obrade podataka o svakoj promjeni osobnih podataka. Potpisom i pečatom ove privole voditelj obrade podataka obvezuje se čuvati osobne podatke ispitanika i raspolagati njima u skladu sa zakonskim propisima o zaštiti osobnih podataka i određenjima iz ove privole. Ova privola biti će poslana svakom putniku sa ugovorom o putovanju. PRIGOVORI Sukladno Čl. 10. st. 3. NN 41/14 Zakona o zaštiti potrošača obavještavamo potrošače da nezadovoljstvo na kvalitetu naših usluga te pruženu uslugu mogu iskazati prigovorom u pisanoj formi na slijedeći način i to u roku od 8 dana od pružene usluge ili putovanja.: Adresa: Mihael putnička agencija, do.o.o Pavlinska 5, 42000 Varaždin, Hrvatska ili Telefax broj: 00 385 42 302 045 ili putem e-maila: info@mihael-putovanja Odgovor na Vaš prigovor dobit ćete u pisanom obliku najkasnije 15 dana od primitka prigovora. Kako bi se dobio odgovor, molimo podnositelja prigovora da navede: ime i prezime te adresu ili e-mail za dostavu odgovora.