http___www.intelekta.eu_hr_gdpr_contract_varovanje-osebnih-podatkov_1.xml
1.1 2.1 3.1 4.1 4.2 4.3 5.1 6.1 7.1 7.2 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 18.2 18.3 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 26.1 27.1 28.1 28.2 29.1 29.2 30.1 31.1 32.1 32.2 33.1 33.2 34.1 35.1 36.1 37.1 37.2 38.1 39.1 40.1 41.1 42.1 43.1 44.1 44.2 45.1 45.2 45.3 46.1 46.2 46.3 47.1 47.2 48.1 48.2 49.1 50.1 51.1 52.1 52.2 53.1 53.2 54.1 55.1 55.2 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1 65.1 66.1 67.1 68.1 68.2 68.3 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 82.2
Privacy policy This policy describes the modalities by which our company, Quadro Vehicles SA, processes the personal data of the users when using the website www.quadrovehicles.com (the “Website”), in order to provide them with the information as to which personal data are collected, how they are used, which third parties might have access to them and how you can exercise your rights as to this processing. The processing fully complies with the Swiss federal law on data protection (“LPD”) and the Regulation UE 2016/679 – “Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data” (the “Regulation”). Please read carefully this policy. By accessing the Website, you hereby declare to accept this policy. Should you do not agree with this statement, please do not browse any other page of the Website. Data Controller, Representative of the Controller and data processors The data controller is Quadro Vehicles SA, with registered office in Vacallo (Svizzera), Via dei Lauri 4, in the person of its pro tempore legal representative, email privacy@quadrovehicles.com (the “Controller” or the “Company”). Pursuant to Article 27 of the Regulation, the Controller has Designated, as its representative in the Union for the purposes of the application of the rules as to data processing, Quadro Vehicles Italia S.r.l., with registered office in Como, Via Alessandro Volta 66, C.F., VAT number and number of enrolment with the Companies Register of Como no. 03434900134. You can contact the representative by sending an email to privacy@quadrovehicles.com. The controller has also designated as data processors certain third parties (natural or legal persons), which provide specific services or perform activities that are linked, or support those of the Company. The complete list of data processors may be consulted by sending a request to the following email: privacy@quadrovehicles.com. Source of the personal data Personal data are collected directly from the data subjects. Categories of data When the user browses the Website, we process certain personal data: - Browsing data When the user browses the Website, the Controller automatically receives and collects the ID of the devices used to browse, the IP (Internet Protocol) address, the operating system being used and the name of the ISP (Internet Service Provider) of the device, the pages which are browsed. These data are only used to obtain anonymous statistical information about use of the Website and to check it is working correctly, and are deleted immediately after processing. The data may be used to ascertain responsibility in the event of computer-related crimes: except for this case, data on web contacts are not kept for more than 7 days. - Geolocation When accessing the Website via a mobile device, the user can authorise the activation of the geolocation service. In this case, device location tracking data may also be processed, including specific geographic locations, for example via GPS, Bluetooth or wi-fi. In the absence of explicit authorisation, no geolocation data may be processed. At any time, the data subject may interrupt or disable the geolocation service by changing the settings on the mobile device, referring to the user manual. The data related to user geolocation may also be used to improve the services offered to the user and for marketing purposes. - Cookie The Website may use certain types of cookies. To see the policy on cookies, please click here - Data provided by data subjects In case of registration to the Website, which allows to access to specific sections, the data subjects will have to provide certain personal data (e.g.: name and surname, email address). Furthermore, any sending of communications to contacts listed on the Website entails the acquisition of the e-mail address and other personal data contained in the communication, which may be used by the Controller to send communications to the data subjects. Purposes and legal basis for processing Personal data are processed for the following purposes: - Functioning of the Website. This processing is based on the legitimate interest of the Company; - Access to specific functions of the Website. This processing is based on the consent of the data subject; - Fulfilment of legal obligations, including the accounting, tax and administrative ones, as well as of orders from authorities and eventually supervisory and control authorities; - With the prior consent of the data subject, for commercial, promotional and marketing purposes, including the promotion and sales of products and services of the Company, performed by means of letters, phone, advertising materials, automatic systems, etc.; sending of information material; - With the prior consent of the data subject, for the purpose of carrying out customer satisfaction surveys on the quality of the services and the activities performed, and market surveys. This activity is performed by means of interviews by person or by phone, by surveys, etc.; - Upon prior request of the data subject, provide the “Newsletter” service, by e-mailing list. This processing is based on the consent of the data subject. Personal data are processed in a lawful, fair and transparent manner, pursuant to the modalities and for the purposes indicated above. Data retention time Personal data will be retained for the following terms: - for the purposes under a) of the previous paragraph, for the term of the browsing session on the Website. After such term, the personal data shall be destroyed, erased or anonymized (if they have not already been collects in anonymous form); - for the purposes under b), for the term necessary to implement the specific function of the Website as requested by the data subject; - for the purposes under c), for the term as provided for by the applicable law; - for the purposes under d) and e), no more than 24 months; - for the purposes under f), for the entire term of the “Newsletter” service, until the data subject will unsubscribe from it. Mandatory or optional nature of data provision The provision of data from data subject may be either mandatory or optional. With reference to the purposes under a) of paragraph “Purposes and legal basis for processing”, the provision of data is mandatory. The relevant processing does not require the consent from the data subject, since it is based on the legitimate interest of the Controller. With reference to the purposes under b), the provision of data is not mandatory, but it is necessary to have access to the specific function of the Website as requested by the data subject. In case of refusal to provide such data, the data subject would not have access to this specific function. The relevant process requires the consent of the data subject. With reference to the purposes under c), the provision of data is mandatory. In case of refusal to provide such data, the data subject would not have access to the Website. The relevant process does not require the consent of the data subject. On the other hand, the provision of data is optional for the purposes under d) and e); any refusal to provide such data has no consequence as to the access to the Website, but it would not allow the Controller to carry out certain statistical and commercial activities. The process of data by the Company for these purposes requires the prior consent of the data subject which, in any case, will have the faculty to cease at any time the process, by sending a request to privacy@quadrovehicles.com. With reference to the purposes under f), the provision of data is always optional; the refusal to supply would not allow to provide the “Newsletter” service. The process of data by the Company for this purpose requires the prior consent of the data subject which, in any case, will have the faculty to cease at any time the process, by using the function “unsubscribe” in any of the newsletter. Processing modalities With reference to the purposes above, the personal data shall be processed by means of using paper, automated and telematic tools, using automated tools, with logics strictly related to the purposes, and in any case so that the safety and confidentiality of data will be preserved. The Controller warrants that the safety and confidentiality of the personal data will be safeguarded by adopting suitable security measures, pursuant to the provisions of LPD and Regulation, in order to reduce the risk of leakage, loss (even accidental) and non-authorised access or unlawful process or process non-consistent with the purposes. The Controller does not take upon any liability as to the data transferred via internet. Likewise, no liability shall be upon the Controller in case of open of link or other web pages linked to the Website. The data shall be processed on the basis of the need-to-know principle. Hence, the process shall be minimized and shall be excluded in case the relevant purposes may be pursue by using anonymous data. Communication and dissemination of data Personal data may be processed by persons which need to know them while performing their tasks, provided that they have been duly appointed as persons authorised to process the personal data by the Controller. Data may also be communicated or transferred to controlling, controlled or affiliated companies of the Controller, also abroad, as well as to the sales and assistance network of the Company. Furthermore, while carrying out its activity, the Company, in order to fulfil contractual obligations or comply with legal obligations or to satisfy specific request from the data subject, may communicate the personal data of the latter to persons whose intervention is strictly necessary to execute the contractual relationship. For carrying out the activities above, the Company may communicate the personal data to the following persons or categories: - banks (when applicable), for the collection and payment management; - persons which carry out activities linked or of support to the execution of the contractual relationship (e.g.: suppliers of services and of technical assistance; delivery of the products; sending, enveloping, transport and sorting of communications to customers or suppliers; storage of documents relating to the previous relationships with customers or suppliers); - public administrations and third parties when required to comply with legal obligations. For this kind of communications, the consent of the data subject is not required, since the process is finalized to fulfil contractual obligations or comply with legal obligations. The persons above act, in some cases, as data processors or external persons delegated to process the data on behalf of the Controller, duly designated by the latter; in other cases, as independent data controller, in which case the will provide their own privacy policies to the data subject. Should the data subject wish to know in details the list of the persons to which data may be communicated, he/she can send a request to the following email: privacy@quadrovehicles.com. In no event the personal shall be disseminated by the Controller. Data transfer abroad Data may be transferred abroad, including to countries outside the European Union, provided that the European Commission has ascertained that these countries outside the European Union guarantee an adequate level of protection for the data being transferred. Social plugin of third parties Website might use social plugin provided and managed by third parties, such as Facebook. As a consequence, the data subject might send to such third parties the information that he/she is viewing on a specific section of the Website. If the data subject has not logged in on the website of the third party, it cannot come to know its identity; otherwise, it can be in a position to link the information relating his/her visit in the Website to his/her account. Likewise, his/her interaction with the social plugin can be registered by the latter. The data subject may consult the privacy policy of such third parties in order to obtain further information as the measures they have adopted as to the process of personal data. Rights of the data subject The data subject shall have the right to obtain from the Controller, in any time: – The confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (v) the existence of automated decision-making, including profiling, the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject (right of access); – The rectification of inaccurate personal or the completion of incomplete personal data (right to rectification); – The erasure of personal data in case of (i) withdrawal of the consent on which the processing is based and where there is no other legal ground for the processing by the Company; (ii) objection to the processing and there are no overriding legitimate grounds for the processing; (iii) unlawful process; (iv) compliance with a legal obligation; unless and to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest in the area of public health, archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, or for the establishment, exercise or defence of legal claims (right to be forgotten); – restriction of processing (right to restriction of processing). Furthermore, the data subject shall have the right to: – receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the Controller to which the personal data have been provided, where the processing is based on consent and carried out by automated means (right to data portability); – object to processing of personal data, even if such data are pertinent to the purpose of the collection, and/or withdraw the consent to the process of personal data, at any time; this would not jeopardize the lawfulness of the process based on the consent given before the withdrawal, for marketing purposes (right to object); – lodge a complaint with a supervisory authority, when he/she deems that the process breaches the applicable privacy regulation. For the exercise of his/her right, as well as for receiving any information, the data subject can send an email to privacy@quadrovehicles.com. Changes to this privacy policy The Controller reserves the right to update to this Privacy Policy. Any change shall be notified to the users on the home page of the Website as soon as adopted, and they shall be binding upon their publication.
1.1 2.1 2.2 2.3 2.4 3.1 3.2 3.3 3.4 3.5 3.6 4.1 4.2 4.3 4.4 5.1 6.1 6.2 7.1 8.1 9.1 10.1 10.2 11.1 11.2 12.1 12.2 13.1 13.2 13.3 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 29.2 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 45.1 45.2 46.1 46.2 47.1 48.1
Obrada na temelju pristanka na obradu osobnih podataka: Obrada podataka može se temeljiti na pristanku kojeg Intelekta prima od pojedinca. Suglasnost se, primjerice, odnosi na informiranje o ponudi i uslugama, pripremi ponude prilagođene individualnim navikama potrošača ili pružanju usluga s dodanom vrijednosti. Komunikacija se provodi putem kanala koji su odabrani od strane suglasnosti pojedinca. Obavijest putem e-pošte može uključivati prijenos adrese e-pošte vanjskom procesoru kako bi se prikazale poruke oglašavanja poduzeća Intelekta tijekom pregledavanja weba. Pojedinac, na kojeg se odnose osobni podaci može u svako doba povući suglasnost ili izmjenu na isti način kao što je to dano ili na drugi način kojeg je odredila Intelekta, uz zadržavanje prava na identifikaciju kupca. Povlačenje ili promjena suglasnosti odnosi se samo na podatke obrađene na temelju pristanka, a ne na podatke čija se obrada provodi na temelju druge legitimne osnove. Zadnja suglasnost pojedinca je ta koja vrijedi. Mogućnost otkazivanja suglasnosti ne predstavlja zadatak u poslovnom odnosu pojedinca s Intelektom. Suglasnost može dati i jedan od roditelja, udomitelja ili skrbnika malodobnog djeteta koje, u skladu s važećim zakonodavstvom suglasnosti, ne može samo dati. Takav pristanak vrijedi sve dok ne dođe do jednog od roditelja, udomitelja ili skrbnika ili djeteta, kada to sukladno važećim zakonima stekne, ne opozove ili ne mijenja. Tamo gdje pristanak uključuje izravni marketing na temelju profila pojedinca, Intelekta može obavljati profiliranje pojedinca na temelju pretplaćenih usluga, usluga koje su stvarno pružene i drugih podataka prikupljenih od strane Intelekte na temelju suglasnosti pojedinca. Profiliranje može rezultirati ponudom ili informacijama o Intelektinoj ponudi koja je prilagođena pojedincu, ali uopće ne stvara pravne obveze za pojedinca. Profiliranje za izravne marketinške svrhe može uključivati i upotrebu datuma rođenja.4. Slanje podataka trećim stranama i prijenos podataka trećim zemljama (zemljama koje nisu članice Europske unije ili Europskog gospodarskog prostora) Intelekta može, ako je u skladu s namjenom obrađivanja osobnih podataka u skladu sa zakonodavstvom EU i slovenskim propisima, pružiti osobne podatke o pojedincima: • fizičke i pravne osobe koje su Intelektini ugovoreni partneri i za Intelektu obavljaju pojedinačne usluge kako bi izvršili ugovorne odnose između Intelekta i pojedinca (npr. Partnerske agencije, hoteli, zrakoplovi, prijevoznici itd.); • nacionalne vlasti trećih zemalja; • fizičke i pravne osobe koje su Intelektini ugovorni partneri i obavljaju poslove obrade za Intelektu, kao što su priprema i slanje faktura ili analiza podataka, održavanje i razvoj mreže i usluga, uključujući softver, gdje ti poslovi uključuju, u mjeri u kojoj je to potrebno, osobni podaci; • fizičke i pravne osobe koje pružaju usluge prodaje i marketinga za Intelektu, uključujući prodaju i marketing na terenu, ili surađuju s Intelektom u marketingu i prodaji vlastitih usluga ili usluga treće osobe. Prijenos podataka u treće zemlje osigurava se u skladu s pravnim osnovama za količinu podataka trećim zemljama propisanim pravom EU i važećim slovenskim propisima.5. Rok za zadržavanje osobnih podataka Intelekta podatke iz ugovora čuva pet godina nakon prestanka, ili do isplate potraživanja. Računi se čuvaju 10 godina nakon isteka godine na koju se račun odnosi u skladu sa zakonom kojim se uređuje porez na dodanu vrijednost. Osobne podatke, koje Intelekta čuva na osnovi suglasnosti pojedinca i obrađuje za marketinške svrhe, zadrži Intelekta sve do otkaza ili zakonskog roka.6. Prava pojedinaca u vezi obrade osobnih podataka Intelekta daje pojedincima ostvarivanje njihovih prava u roku od mjesec dana od primitka zahtjeva. Intelekta može produljiti rok za ostvarivanje pojedinih prava do dva dodatna mjeseca. U slučaju produženja vremenskog roka, za bilo koje takvo produženje Intelekta mora obavijestiti pojedinca u roku od mjesec dana od primitka zahtjeva zajedno s razlozima kašnjenja. Intelekta prihvaća zahtjeve glede prava pojedinca na e-mail adresu info@intelekta.com ili poštom na Intelekta d.o.o., Prežihova ulica 5, 9000 Murska Sobota Ako podnositelj zahtjeva primjenjuje zahtjev elektroničkim putem, podaci se dostavljaju elektroničkim putem. Ako postoji opravdana sumnja u identitet pojedinca koji podnosi zahtjev koji se odnosi na jedno od njegovih prava, Intelekta može zatražiti davanje dodatnih podataka potrebnih za potvrdu identiteta nositelja podataka. Pojedinac, koji ima pravo na jednu (besplatnu) kopiju osobnih podataka u elektroničkom ili tiskanom obliku, za dodatne kopije, Intelekta može naplatiti razumnu naknadu uzimajući u obzir administrativne troškove pripreme. Intelekta omogućuje pojedincima sljedeće u vezi s obradom osobnih podataka:6.1 Pravo na pristup podacima Pojedinac, na kojega se odnose podaci ima pravo dobiti iz Intelekte potvrdu, ili se u vezi s njim obrađuju osobni podaci, gdje je to prikladno, pristup osobnim podacima i dodatne informacije vezane uz obradu osobnih podataka, uključujući: • svrhu obrade; • vrste osobnih podataka; • korisnici ili kategorije korisnika kojima su osobni podaci bili ili će biti otkriveni; • kada je to moguće, planirano razdoblje zadržavanja osobnih podataka ili kriterija koji se koriste za utvrđivanje tog razdoblja; • postojanje prava da od administratora zatraže ispravljanje ili brisanje osobnih podataka ili ograničavanje obrade osobnih podataka u odnosu na nositelja podataka ili postojanje prava na prigovor na takvu obradu; • kada osobni podaci nisu prikupljeni od pojedinca, sve dostupne informacije vezane uz njihov izvor; • postojanje automatiziranog odlučivanja, uključujući profiliranje i značajne informacije o razlozima, kao i o važnosti i predvidljivim posljedicama takve obrade za pojedinca. Na temelju zahtjeva pojedinca Intelekta daje kopiju njegovih osobnih podataka koji se obrađuju. Za dodatne kopije podataka koje zahtijeva subjekt podataka, Intelekta može naplatiti razumnu naknadu, uzimajući u obzir administrativne troškove.6.2 Pravo na popravak Pojedinac, na kojega se odnose osobni podaci ima pravo da Intelekti, bez nepotrebnog kašnjenja, ispravlja netočne osobne podatke koji se odnose na njega.6.3 Pravo brisanja ("pravo na zaborav") Pojedinac, na kojega se odnose osobni podaci ima pravo postići da Intelekta brine o osobnim podacima koji se odnose na njega. Intelekta ima obvezu izbrisati osobne podatke: • kada osobni podaci više nisu potrebni za svrhe za koje su prikupljeni ili na drugi način obrađeni; • kada pojedinac ukine suglasnost koja je osnova za obradu podataka, nema druge pravne osnove za obradu; • kada se pojedinac protivi preradi na osnovi legitimne kamatne stope, nema glavnih legitimnih razloga za njihovu obradu; • kada se pojedinac protivi obradi u svrhu izravnog marketinga; • kada bi se osobni podaci trebali izbrisati kako bi ispunili zakonsku obvezu u skladu s pravom EU ili slovenskim zakonom; • u slučaju pogrešno prikupljenih podataka maloljetnika za korištenje usluga informacijskog društva, koji prema važećim zakonima ne može pružiti takve informacije.6.4 Pravo na ograničenje obrade Pojedinac, na kojega se odnose osobni podaci, ima pravo postići, da Intelekta ograniči obradu, kada: • Pojedinac osporava točnost podataka, za razdoblje koje omogućuje kontroloru da utvrdi točnost osobnih podataka; • obrada je protuzakonita i osoba se protivi uklanjanju osobnih podataka, a umjesto toga zahtijeva ograničenje njihove uporabe; • Intelekti nisu više potrebni osobni podataci više za obradu, već zahtijeva da se podacima primjenjuju, provode ili brani pravne zahtjeve; • Pojedinac je podnio prigovor u vezi s obradom sve dok se ne provjeri da li prevladavaju pravni razlozi kontrolora nad razlozima pojedinca, na kojega se odnose osobni podaci.6.5 Pravo na prijenos podataka Pojedinac, na kojega se odnose osobni podaci ima pravo primati osobne podatke u vezi s njim, koji su bili u vlasništvu Intelekte i pravo prosljeđivanja tih informacija drugom kontroloru.6.6 Pravo na ugovor Pojedinac, na kojega se odnose osobni podaci ima pravo u bilo kojem trenutku prigovoriti obradi osobnih podataka ako se temelji na legitimnim interesima koje Intelekta ili treća stranka provodi. U tom slučaju Intelekta prestaje s obrađivanjem osobnih podataka, osim ako ne dokaže potrebne obradne temelje koji prevladavaju nad interesima, pravima i slobodama pojedinca na kojega se odnose osobni podaci ili za izvršenje, izvršenje ili obranu pravnih zahtjeva. Ako se osobni podaci obrađuju u svrhu izravnog marketinga, pojedinac ima pravo prigovoriti u bilo kojem trenutku za obradu osobnih podataka koji se na njega odnose u svrhu takvog marketinga, uključujući profiliranje, u mjeri u kojoj se odnosi na takav izravni marketing. Ako se izravni marketing temelji na pristanku, pravo na prigovor može biti izvršeno otkazivanjem dane osobne suglasnosti. Pravo na podnošenje pritužbe u vezi s obradom osobnih podataka Svaki pojedinac ima pravo se pritužiti na obradu osobnih podataka. Pojedinac može podnijeti žalbu na sljedeću adresu: info@intelekta.com ili poštom Intelekta d.o.o., Prežihova ulica 5, 9000 Murska Sobota. Slično tome, svaki pojedinac na kojega se odnose osobni podaci ima pravo izravno podnijeti žalbu Povjereniku za informacije. Trajanje Odredbe će stupiti na snagu 25. svibnja 2018. godine.