http___www.istria-bike.com_en_general_privacy_6021-ch-0__l_over_1_1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 15.1 16.1 17.1 17.2 18.1 18.2 19.1 20.1 21.1 22.1 22.2 22.3 23.1 24.1 24.2 24.3 25.1 25.2 26.1 26.2 26.3 27.1 27.2 27.3 27.4 27.5 28.1 28.2 28.3 28.4 28.5 29.1 29.2 30.1 31.1 32.1 33.1 33.2 34.1 34.2 35.1 35.2 35.3 35.4 35.5 36.1 36.2 36.3 37.1 38.1 38.2 39.1 39.2 39.3 39.4 40.1 41.1 42.1 43.1 44.1 44.2 44.3 45.1 45.2 46.1 46.2 47.1 48.1 48.2 49.1 49.2 50.1 51.1 51.2 52.1 52.2 53.1 53.2 53.3 54.1 54.2 54.3 54.4 54.5 54.6 54.7 55.1 56.1 57.1 57.2 58.1 58.2 59.1 60.1 60.2 61.1 61.2 61.3 61.4 61.5 62.1 63.1 64.1
To directly navigate to the different notices and policies please use these links for your convenience: Data Protection Notice Privacy Policy Additional contact information for data protection and privacy can be found here: Data protection officer: Peter Jack E-Mail: dpo@codewrights.de Reponsible supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg Postfach 10 29 32 70025 Stuttgart Königstraße 10a 70173 Stuttgart E-Mail: Poststelle@lfdi.bwl.de Internet: https://www.baden-wuerttemberg.datenschutz.de The CodeWrights GmbH (“CodeWrights”, “we” or “us”) attaches great importance to the protection of your personal data. We therefore conduct our business in compliance with applicable laws on personal data protection and data security. This Data Protection Notice applies to all affiliated companies of CodeWrights in the EU/EEA. It also applies in addition to the General Data Protection Policy, which has global validity and takes precedence in case of conflict. Details of the responsible CodeWrights company within the meaning of the GDPR and further infor-mation about the competent supervisory authority can be found on our website. The relevant company’s internal Data Protection Responsible, or Data Protection Officer if it has one, can be contacted by post at the address indicated on the website, adding the title “Data Protection Responsi-ble”, or via email if an email address is given. We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and national data protection regulations: For fulfilment of contractual obligations (Art. 6 para. 1 b GDPR) particularly in connection with customer orders, suppliers, service partners and employees To safeguard legitimate interests within the context of a balance of interests (Art. 6 para. 1 f GDPR) To the extent necessary, we process your data beyond the actual fulfilment of the contract in order to safeguard our legitimate interests or those of third parties. This concerns in particular: Based on your consent (Art. 6 para. 1 a GDPR) Where you have granted us consent to process your personal data for certain purposes (e.g. filming and photographs, newsletters), such processing is lawful on the basis of your consent. Consent given can be withdrawn at any time. This also applies to the withdrawal of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the withdrawal is only valid for the future. Data processed prior to the withdrawal is not affected. Based on legal requirements (Art. 6 para. 1 c GDPR) or in the public interest (Art. 6 para. 1e GDPR) We are also subject to various legal obligations, that is to say, statutory requirements (e.g. checks against anti-terrorism lists, anti-money laundering legislation). Purposes of processing include identity checking, fulfilment of verification and reporting obligations in relation to tax and social security, fraud and money laundering prevention and measurement and management of risks. Within CodeWrights, those units that require your data to fulfil our contractual and legal obligations or to safeguard legitimate interests will have access to it. Affiliated companies of CodeWrights, our service providers and vicarious agents appointed by us, public authorities or third parties may also receive data for such purposes. In particular, the following recipients or recipients which offer the following activities and services may receive data: Data will only be transferred to countries outside the EU or EEA (“third countries”) where necessary to execute your orders (e.g. production, logistics), where legally required (e.g. to meet tax reporting obligations), where you have given us your consent, or for the purposes of contract data processing. Data may also be exchanged with affiliated companies of CodeWrights in third countries, including Switzerland in particular. Where use is made of service providers in third countries, besides written instructions they will also be bound by EU standard contract clauses on compliance with the data protection levels applicable in the EU. Appropriate contractual agreements have been concluded with affiliated companies of CodeWrights. We process and store your personal data for as long as necessary to fulfil our contractual and legal obligations. We will delete your personal data once it is no longer needed for the above purposes. It is possible that personal data may be stored for the period in which claims can be asserted against our companies (statutory limitation periods range from three to thirty years). We will also store your personal data for as long as we are legally obliged to do so. Commercial and tax legislation imposes corresponding documentation and retention obligations. Every data subject has the right of access to information pursuant to Article 15 GDPR. Subject to certain conditions, every data subject has the right to rectification pursuant to Article 16 GDPR, the right to restrict processing pursuant to Article 18 GDPR and the right to deletion pursuant to Article 17 GDPR. Furthermore, every data subject has the right to receive the personal data which they have provided in a structured, commonly used and machine-readable format (data portability) pursuant to Article 20 GDPR, provided the processing is carried out by automated means and is based on consent. Concerning the right to information and the right of deletion, for responsible companies of CodeWrights with registered office in Germany, the limitations set out in Sections 34 and 35 of the German Federal Data Protection Act (BDSG) are applicable. Every data subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of his or her habitual residence, place of work or place of the alleged breach of data protection (Article 77 GDPR). Further information about the competent supervisory authority can be found on our website. You may revoke your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the withdrawal is only valid for the future. Data processed prior to the withdrawal is not affected. In addition to the rights referred to above, you also have a right of objection as follows. Information about your right of objection pursuant to Article 21 of the EU General Data Protection Regulation (GDPR) The objection may be submitted, without any requirements as to form, to the person indicated in Section 1. You have the right to lodge a complaint with the person indicated in Section 1 or with a supervisory authority, particularly in the Member State of your habitual residence, place of work or place of the alleged breach of data protection (Article 77 GDPR). In establishing and maintaining business relations, we generally refrain from fully automated decision-making pursuant to Art. 22 DSGVO. If we use such methods in individual cases, we will inform you separately insofar as we are legally required to do so. We process some of your data automatically, with the aim of assessing certain personal aspects (profiling). For example, we use profiling in the following cases: Protecting the security and privacy of your personal data is important to CodeWrights; therefore, we con- duct our business in compliance with applicable laws on data privacy protection and data security. We hope the policy outlined below will help you understand what data CodeWrights may collect, how CodeWrights will use and safeguard that data and with whom we may share it. Through our Web sites, CodeWrights will not collect any personal data about you (e.g. your name, address, telephone number or e-mail address), unless you voluntarily choose to provide us with it (e.g. by registration, survey), respectively, provide your consent, or unless otherwise permitted by applicable laws and regulations for the protection of your personal data. When you do provide us with personal data, we usually use it to respond to your inquiry, to process your order or to provide you access to specific information or offers. Also, to support our customer relationship with you: If you choose not to have your personal data used to support our customer relationship (especially direct marketing or market research), we will respect your choice. We do not sell or otherwise market your personal data to third parties. CodeWrights will collect, use or disclose personal data supplied by you online only for the purposes dis- closed to you, unless the disclosure: Through your use of telecommunications services to access our Web site, your communications data (e.g. Internet protocol address) or utilization data (e.g. information on the beginning, end and extent of each access, and information on the telecommunications services you accessed) are technically generated and could conceivably relate to personal data. To the extent that there is a compelling necessity, the collection, processing and use of your communications or utilization data will occur and will be performed in accordance with the applicable data privacy protection legal framework. When you access our Web sites, we may automatically (i.e., not by registration) collect non-personal data (e.g. type of Internet browser and operating system used, domain name of the Web site from which you came, number of visits, average time spent on the site, pages viewed). We may use this data to monitor the attractiveness of our Web sites and improve their performance or content. When you view one of our Web sites, we may store some data on your computer in the form of a “cookie” to automatically recognize your PC next time you visit. Cookies can help us in many ways, for example, by allowing us to tailor a Web site to better match your interests or to store your password to save you having to re-enter it each time. If you do not wish to receive cookies, please configure your Internet browser to erase all cookies from your computer’s hard drive, block all cookies or to receive a warning before a cookie is stored. Furthermore our Web sites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies” to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymization, Google will truncate / anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the web- site, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google. You can prevent Google’s collection and use of data (cookies and IP address) by downloading and in- stalling the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en-GB and by subsequently clicking the link “Disable Google Analytics”. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website. Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies. Please note that on this website, Google Analytics code is supplemented by “gat._anonymizeIp();” to ensure an anonymized collection of IP addresses (so called IP-masking). CodeWrights will not knowingly collect personal data from children. The definition of “child” or “children” should take into account applicable laws as well as national and regional cultural customs. To protect your personal data against accidental or unlawful destruction, loss or alteration and against unauthorized disclosure or access, CodeWrights uses technical and organizational security measures. CodeWrights Web sites contain links to other Web sites. CodeWrights is not responsible for the privacy practices or the content of other Web sites but expect them to apply the same rules. CodeWrights will respond to reasonable requests to re-view your personal data and to correct, amend or delete any inaccuracies. If you have any questions or comments about the CodeWrights Data Privacy Protection Policy (e.g. to review and update your personal data), please use the listed “Contact” details on our Web sites. As the Internet matures, so will our Data Privacy Protection Policy. We will post changes to our Data Privacy Protection Policy on this page. Please check this page regularly to keep up-to- date. CodeWrights GmbH Am Stadtgarten 1 76137 Karlsruhe - Germany
1.1 2.1 2.2 3.1 4.1 5.1 5.2 5.3 5.4 5.5 5.6 5.7 6.1 7.1 7.2 7.3 8.1 8.2 8.3 9.1 10.1 11.1 12.1 12.2 13.1 14.1 14.2 15.1 16.1 17.1 18.1 18.2 18.3 18.4 19.1 19.2 20.1 21.1 22.1 23.1 23.2 23.3 23.4 23.5 23.6 24.1 24.2 25.1 26.1 27.1 27.2 27.3 28.1 29.1 29.2 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2
IZJAVA O PRIVATNOSTI Sukladno Uredbi (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (dalje: Opća uredba o zaštiti podataka), IRTA – Istarska razvojna turistička agencija d.o.o. Poreč (u daljnjem tekstu: IRTA) u svom radu obvezuje se postupati u skladu sa poštivanjem i zaštitom osobnih podataka i privatnosti korisnika ovih mrežnih stranica, sve dok se oni koriste u okviru dozvoljenih uvjeta korištenja. Prikupljanje podataka Osobnim podacima smatraju se svi podaci kojima se utvrđuje identitet te podaci potrebni za komunikaciju (npr. prezime i ime, adresa stanovanja, adresa e-pošte, kontakt brojevi telefona, mobilnih i faks uređaja i sl). Našu Internet stranicu možete koristiti bez otkrivanja Vaših osobnih podataka. Niste obvezni pružiti nam Vaše osobne podatke kao uvjet korištenja stranice, osim ukoliko je to potrebno da bi Vam pružili uslugu ili omogućili korištenje našeg proizvoda u skladu s Vašim zahtjevom. Kada koristite našu Internet stranicu mi možemo pohraniti podatke iz različitih sigurnosnih razloga. Takvi podaci mogu uključivati naziv Vašeg davatelja internetskih usluga, Internet stranicu preko koje ste se povezali na našu stranicu, internetske stranice koje ste posjetili s naše stranice te Vašu IP adresu. Ti podaci bi mogli voditi k Vašoj identifikaciji, no mi ih za to ne koristimo. S vremena na vrijeme podatke koristimo u statističke svrhe, no istovremeno zadržavamo anonimnost svakog korisnika pa se ta osoba ne može identificirati. U slučajevima kada poslove u svezi s obradom podataka povjeravamo trećim osobama, kako bi Vam iste omogućile proizvod ili pružile usluge koje ste zatražili, ili u druge svrhe na koje ste dopustili, vodimo računa o tome da je ta treća osoba registrirana za obavljanje takve djelatnosti, da pruža dovoljno jamstava u pogledu ostvarivanja zaštite i povjerljivosti podataka te se pouzdajemo u tehnička i organizacijska sredstva kako bi osigurali poštivanje propisa o zaštiti osobnih podataka. Prikupljanje i obrada osobnih podataka Osobne podatke prikupljamo samo kada nam ih Vi sami stavite na raspolaganje npr. u okviru registracije, putem ispunjavanja obrazaca ili slanjem elektroničke pošte, u okviru narudžbe proizvoda ili usluga, slanja upita ili zahtjeva vezanih uz naše proizvode ili usluge te u sličnim situacijama u kojim ste odabrali pružiti nam podatke. Baza podataka i njen sadržaj ostaju u našoj kompaniji te pri izvršiteljima obrade i serverima koji djeluju u naše ime te su nam odgovorni. Vaše osobne podatke u bilo kojem obliku nećemo proslijediti trećim stranama (ni izravno niti preko zastupnika), osim ako nismo pribavili Vašu privolu ili ako postoji zakonska osnova za isto. Zadržat ćemo kontrolu i odgovornost za korištenje svih osobnih podataka koje ste s nama podijelili. Može se dogoditi da se ti podaci u potpunosti ili djelomično pohranjuju ili obrađuju u drugim zemljama (npr. u Americi) te u tim zemljama mogu vrijediti drugačija pravila o zaštiti podataka nego u zemlji u kojoj Vi živite. U takvim ćemo slučajevima osigurati da su uspostavljene odgovarajuće sigurnosne mjere koje zahtijevaju od izvršitelja obrade iz te zemlje da primjenjuje zaštitu podataka ekvivalentnu onoj u Vašoj zemlji. Svrha korištenja Podaci koje prikupljamo koristit će se samo u svrhe pružanja naših proizvoda i usluga ili pak u druge svrhe za koje ste dali svoju privolu, osim u slučajevima gdje zakon propisuje drugačije. Pravo uvida i ispravka U odnosu na sve Vaše osobne podatke koji su kod nas pohranjeni, Vi imate pravo uvida, te prava ispravka, dopune i brisanja istih kada su nepotpuni, netočni i neažurni. Za navedeno je dovoljno poslati e-mail na adresu iz impresuma ili kontaktirajte službenika za zaštitu podataka. Pravo odustajanja Vi imate pravo u svakom trenutku odustati od dane privole za obradu osobnih podataka te zatražiti prestanak njihove daljnje obrade, osim ako se radi o obradi podataka u statističke svrhe kada Vaši osobni podaci više ne omogućuju Vašu identifikaciju. Za navedeno je dovoljno poslati e-mail na adresu iz impresuma ili kontaktirajte službenika za zaštitu podataka. Čuvanje podataka Osobne podatke čuvamo toliko dugo koliko je potrebno da tražena usluga ili usluga za koju ste dali privolu bude pružena, osim ako zakon ne propisuje drugačije (npr. u vezi sa sudskim postupkom koji je u tijeku). Upotreba kolačića (Cookies) Naša mrežna stranica koristi se cookie datotekama da bi vaše korištenje interneta prilagodila vašim potrebama. Cookie je tekstualna datoteka koju poslužitelj web stranice snima na vaš tvrdi disk. Cookie datoteke ne mogu se koristiti da bi se pokretali programi ili unosili virusi u vaše računalo. Cookie datoteke dodjeljuju se pojedinačno i može ih čitati samo poslužitelj web stranice u domeni koja je takvu datoteku snimila. Ako niste suglasni s njihovom upotrebom, kolačiće možete lako izbrisati (ili spriječiti) na svojem računalu ili mobilnom uređaju s pomoću postavki preglednika kojim se koristite. Više informacija o upravljanju kolačićima potražite na stranicama preglednika kojim se koristite. Budući da je svrha kolačića poboljšanje i omogućivanje upotrebe naših internetskih stranica i njihovih procesa, imajte na umu da sprječavanjem ili brisanjem kolačića možete onemogućiti funkcioniranje tih značajki ili prouzročiti njihov drugačiji rad i izgled u vašem pregledniku. Web-analiza Na ovoj Internet stranici koristimo Google Analytics, djelatnost web-analize Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States („Google“). Sukladno Vašoj privoli, Google u naše ime analizira Vaše korištenje ove stranice. Između ostalog, za tu svrhu koristimo gore spomenute kolačiće. Informacije koje Google prikupi u vezi s Vašim korištenjem ove Internet stranice (npr. polazni URL, kod nas posjećene stranice, web-pretraživač koji ste koristili, Vaše postavke jezika, Vaš računalni sustav koji ste koristili ili razlučivost prikaza) se prenose na Googleov server u Americi, tamo se pohranjuju, analiziraju, a nama se stavlja na raspolaganje rezultat u anonimnom obliku. Podaci o Vašem korištenju pritom nisu povezani s Vašom punom IP-adresom. Na ovoj smo Internet stranici aktivirali od Googlea ponuđenu funkciju IP-anonimizacije, tako da se zadnjih 8 brojaka(tip Ipv4) odnosno zadnjih 80 bitova (tip Ipv6) Vaše IP-adrese briše. Google je certificiran u vezi s EU-US Privacy Shield tako da se na obradu podataka od strane Googlea u Americi primjenjuje odgovarajuća razina zaštite podataka. Vašu privolu za web-analizu možete povući u svako doba time što ćete preuzeti i instalirati Googleov Browser-Plugin ili možete spriječiti odnosno izbrisati kolačiće na svojem računalu ili mobilnom uređaju. Obje mogućnosti sprečavaju web-analizu tako dugo dok koristite pretraživač na kojem je instaliran Plugin dodatak odnosno sve dok ne ugasite Opt-Out-Cookie. Za daljnje informacije o Google Analytics molimo pogledajte Uvjete korištenja Google Analytics, u Osnove sigurnosti i zaštite podataka od Google Analytics kao i Googleovu Izjavu o zaštiti podataka. Sigurnost IRTA koristi tehničke i organizacijske sigurnosne mjere kako bi zaštitio Vaše podatke od manipulacija, gubitaka, prijetnji ili pristupa od strane neovlaštenih osoba. Bilo koji osobni podatak koji ste nam stavili na raspolaganje, u prijenosu će biti enkriptiran kako bi se izbjegla zlouporaba podataka od strane trećih osoba. Naše se sigurnosne mjere kontinuirano unapređuju sukladno tehnološkom razvoju. Djeca Vodeći računa o važnosti zaštite privatnosti djece na našoj Internet stranici ne prikupljamo, ne obrađujemo i ne koristimo informacije o osobama za koje nam je poznato da su mlađe od 16 godina bez prethodne i vjerodostojne privole zakonskog zastupnika. Zakonski zastupnik ima pravo i može zahtijevati uvid u informacije koje je dalo dijete te može zahtijevati da se one obrišu. Kontakt Ukoliko imate bilo kakav problem, pitanja ili sugestije, molimo obratite se sljedećoj osobi: Službenik za zaštitu podataka u društvu je Jelena Latin. e-mail: jelena@irta.hr Stalni razvoj Interneta zahtijeva povremene prilagodbe naše izjave o privatnosti pa pridržavamo pravo izmjena iste kada je to potrebno. Na pristup i korištenje ovih mrežnih stranica te Izjavu o privatnosti primjenjuje se pravo Republike Hrvatske, a u slučaju spora nadležni su isključivo hrvatski sudovi. Ova izjava o privatnosti primjenjuje se od 25. svibnja 2018. godine. IRTA – ISTARSKA RAZVOJNA TURISTIČKA AGENCIJA D.O.O. POREČ