http___www.komedija.hr_www_izjava-o-zastiti-podataka__2.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 11.1 12.1 13.1 14.1 15.1 15.2 15.3 16.1 17.1 17.2 17.3 17.4 17.5 17.6 17.7 18.1 18.2 18.3 19.1 19.2 19.3 20.1 20.2 20.3 21.1 22.1 22.2 22.3 23.1 24.1 25.1 25.2 25.3 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 35.2 36.1 37.1 37.2 37.3 38.1 39.1 39.2 39.3 39.4 39.5 39.6 40.1 41.1 41.2 41.3 41.4 41.5 42.1 43.1 43.2 44.1 45.1 46.1 46.2 46.3 46.4 46.5 46.6 46.7 47.1 48.1 48.2 48.3 49.1 50.1 50.2 51.1 52.1 52.2 52.3 52.4 52.5 52.6 53.1 54.1 54.2 54.3 54.4 54.5 54.6 54.7 55.1 55.2 56.1 56.2 56.3 57.1 58.1 59.1 59.2 59.3 59.4 59.5 59.6 59.7 59.8 59.9 59.10 60.1 61.1 61.2 61.3 61.4 61.5 61.6 61.7 61.8 61.9 62.1 63.1 63.2 63.3 63.4 63.5 64.1 65.1 65.2 65.3 65.4 65.5 66.1 67.1 67.2 67.3 67.4 67.5 67.6 67.7 67.8 67.9 68.1 69.1 69.2 69.3 69.4 70.1 71.1 72.1 72.2 73.1 74.1 75.1 76.1 77.1 78.1 79.1 79.2 79.3 80.1 81.1 82.1 83.1 84.1 85.1 85.2 85.3 86.1 87.1 88.1 88.2 88.3 88.4 89.1 90.1 91.1 92.1 93.1 94.1 95.1 95.2 95.3 95.4 95.5 95.6 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 104.2 104.3 105.1 106.1 107.1 107.2 108.1 109.1 110.1 111.1 112.1 113.1 114.1 114.2 114.3 114.4 114.5 115.1 116.1 116.2 116.3 117.1 117.2 117.3 117.4 117.5 117.6 118.1 119.1 119.2 120.1 121.1 122.1 122.2 122.3 123.1 124.1 125.1 125.2 125.3 126.1 126.2 127.1 128.1 128.2 129.1 130.1 131.1 131.2 131.3 132.1 133.1 133.2 133.3 134.1 135.1 135.2 135.3 135.4 136.1 137.1 138.1 138.2 138.3 139.1 140.1 141.1 142.1 143.1 144.1 145.1 146.1 146.2 146.3 147.1 147.2 148.1 149.1 150.1 151.1 151.2 152.1 153.1 153.2 154.1 155.1 156.1 157.1 158.1 159.1 159.2 159.3 160.1 161.1 162.1 163.1 164.1 165.1 166.1 166.2 166.3 166.4 166.5 167.1 167.2 167.3 167.4 167.5 168.1 169.1 170.1 170.2 170.3 171.1 172.1 172.2 173.1 174.1 174.2 174.3 174.4 174.5 174.6 174.7 174.8 175.1 176.1 176.2 177.1 178.1 179.1 179.2 179.3 179.4 180.1 181.1 181.2 181.3 182.1 183.1 183.2 183.3 184.1 185.1 185.2 186.1
Data privacy statement according to the GDPR Welcome to the website of Hotel Gutsgasthof Stangl, which provides you with information about our company as well as the option to make an online reservation. Name and address of the data controller The data controller in the sense of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is: HOTEL-GUTSGASTHOF STANGL Owner Bärbel Fauth-Stangl Münchener Straße 1 85646 Neufarn/Vaterstetten Germany Email: info@hotel-stangl.de Website: www.hotel-stangl.de General information on data processing Scope of the processing of personal data We process personal data only insofar as is necessary for the provision of a functional website as well as of our contents and services. The processing of personal data occurs only with your consent. An exception shall apply in cases where it is not possible to obtain prior consent due to practical reasons and where the processing of the data is permitted by statutory regulations. Legal basis for the processing of personal data Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 Para. 1 Item a EU General Data Protection Regulation (GDPR) serves as the legal basis. For the processing of personal data required for the performance of a contract to which the data subject is party, Art. 6 Para. 1 Item b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the execution of pre-contractual measures. Insofar as the processing of personal data is required for the fulfillment of a legal obligation to which our company is subject, Art. 6 Para. 1 Item c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 Item d GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the previously mentioned interest, thus Art. 6 Para. 1 Item f GDPR serves as the legal basis for the processing. Deletion of data and storage duration Personal data are deleted or blocked as soon as the purpose of the storage ceases to apply. Beyond this, storage may occur if stipulated by the European or national legislation in regulations, laws or other ordinances pertaining to Union law to which the data controller is subject. Blocking or deletion of the data also occurs if a retention period stipulated by the specified norms expires, unless there is a necessity for the continued storage of the data for the conclusion of a contract or the fulfillment of a contract. Provision of the website and creation of log files Description and scope of the data processing As a rule, no personal data are collected during a visit to our web pages. Each time our website is called up, our system automatically records data and information from the computer system of the computer accessing the page. The following data are collected in this process: - Complete IP address of the requesting computer - Date and time of the request - The page from which the visitor has accessed the current website or file (referrer) - Name of URL of the file or page that has been requested - The web browser and operating system used by the visitor - Access status (page/file transferred, page/file not found etc.) - Protocol version - Access type (e.g. GET/HEAD/POST) - Data volume transferred The data are stored in our system’s log files. Storage of these data together with other personal data of the user does not take place. Legal basis for the data processing The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 Item f GDPR. Purpose of the data processing The temporary storage of the IP address by the system is necessary to ensure the functionality of the website. For this purpose, the IP address of the user needs to remain stored for the duration of the session. The storage takes place in log files. There is a legitimate interest in the data processing in accordance with Art. 6 Para. 1 Item f GDPR. Duration of the storage The data are deleted as soon as they are no longer required for the fulfillment of the purpose of their collection. In the event of collection of the data for the provision of the website, this is the case once the respective session is ended. In the event of storage of the data in log files, this is the case at the latest after seven days. Storage beyond this is not possible. In this case, the IP addresses of the users are deleted or masked, meaning that attribution to the requesting client is no longer possible. Possibility of objection or elimination The recording of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, the user has no possibility of objection. Use of cookies Description and scope of data processing Our website uses cookies. Cookies are text files that are stored on your computer system by the internet browser. This cookie contains a distinctive sequence of characters that enables unequivocal identification of the browser when the website is called up again. No personal data are recorded. The data are not stored together with other personal data of the user. When you call up our website, an info banner informs you of the use of cookies and refers you to this data privacy statement. The cookie is only stored once you grant your consent. Legal basis for the data processing The legal basis for the processing of personal data with the use of cookies is Art. 6 Para. 1 Item f GDPR. Purpose of the data processing The purpose of the use of technically necessary cookies is to simplify the use of websites. Several functions of our website cannot be offered without the use of cookies. Duration of the storage, possibility of objection or elimination Cookies are stored on your computer, which then transmits them to our page. Thus you have complete control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored may be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of our website to their full extent. Google Analytics This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. As a rule, the information generated by the cookie about your use of this website is transmitted to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, within Member States of the European Union or in other States Parties to the Agreement on the European Economic Area your IP address is previously truncated by Google. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and truncated there. On the behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to perform further services for the website operator associated with the use of the website and the use of the internet. The IP address transmitted by your browser as part of Google Analytics is not associated with other Google data. Anonymization of the IP addresses: We use “anonymizeIP”. This means that the last three digits of your recorded IP address are removed, meaning that an association is no longer possible. Prevention of Google Analytics with a browser-plugin: You may prevent the storage of the cookies by making an appropriate setting in your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. In addition, you may also prevent the recording of the data generated by the cookies regarding your use of the website (incl. your IP address) by Google as well as the processing of these data by Google by downloading and installing the browser plugin available under the following link. The current link is https://tools.google.com/dlpage/gaoptout/. Plugins and modules from third-party providers Google Web Fonts In order to display fonts in a uniform manner, this website uses so-called web fonts, which are provided by Google. When you call up a page, your browser loads the required Web Fonts in your browser cache in order to display texts and fonts correctly. For this purpose, the browser used by you needs to establish a connection to Google’s servers. As a consequence, Google is made aware that your IP address was used to call up our website. The use of Google Web Fonts occurs in the interest of a uniform, appealing presentation of our online offerings. This represents a legitimate interest in the sense of Art. 6 Para. 1 Item f GDPR. If your browser does not support Web Fonts, a standard font from your computer is used. Further information on Google Web Fonts is available under https://developers.google.com/fonts/faq and in Google’s data privacy statement: https://www.google.com/policies/privacy/. Google Maps This website uses Google Maps API to provide graphic depictions of maps. When using Google Maps, Google also records, processes and uses data on the use of the maps function by visitors to the website. More detailed information on the data processing by Google is available in the Google data privacy policy. There you can also make changes to the settings in the data protection center, where you may protect and manage your data. Here you will find further instructions for managing your own data in connection with Google products. The use of Google Maps occurs in the interest of the proper display of maps. This represents a legitimate interest in the sense of Art. 6 Para. 1 Item f GDPR. jQuery libraries jQuery is necessary for the proper functioning of this website and all its functions. The jQuery libraries are called up by so-called CDN servers, whereby your IP address is transmitted; however, no personal data whatsoever are transmitted. This represents a legitimate interest in the sense of Art. 6 Para. 1 Item f GDPR. Bootstrap Bootstrap is used to ensure the proper functioning of this website and all its functions. The Bootstrap libraries are called up by so-called CDN servers, whereby your IP address is transmitted; however, no personal data whatsoever are transmitted. This represents a legitimate interest in the sense of Art. 6 Para. 1 Item f GDPR. Additional web fonts such as Font Awesome, Simple Icons, Simple Line Icons For the graphic display of symbols, this website uses so-called web fonts that are provided by various creators. When you call up a page, your browser loads the required Web Fonts in your browser cache in order to display texts and fonts correctly. For this purpose, the browser used by you needs to establish a connection to the servers of the font provider. As a consequence, this provider is made aware that your IP address was used to call up our website. The use of web fonts occurs in the interest of a uniform, appealing presentation of our online offerings. This represents a legitimate interest in the sense of Art. 6 Para. 1 Item f GDPR. If your browser does not support web fonts, a standard font from your computer is used. Links to other websites Our offer contains links to external websites of third parties over whose content we have no control. Thus we cannot assume any liability for these external contents. The respective provider or operator of the web pages is always responsible for the contents of the linked pages. The linked pages were inspected for possible legal violations at the time of linking. Newsletter Description and scope of the data processing Our website provides the option to subscribe to a free newsletter. When you register, the following data are transmitted to us. - Email address - First name and last name - Your IP address - Date and time of the registration For the processing of the data, your consent is obtained in the context of the registration process. Legal basis for the data processing The legal basis for the processing of the data following the registration to the newsletter and confirmation via registration email is Art. 6 Para. 1 Item a GDPR. Purpose of the data processing The recording of the email address of the user serves the purpose of delivery of the newsletter. Duration of the storage The data are deleted as soon as the subscription to the newsletter is terminated. Possibility of objection or elimination The subscription to the newsletter may be terminated at any time. Each newsletter contains a corresponding link for this purpose. In addition, you will also find another link on our website that you can click on to unsubscribe from our newsletter list. Registration / login Description and scope of the data processing This website offers the option of registering by providing personal data. In this process, the data are entered into an input mask, then transmitted to us and stored by us. Disclosure of the data to third parties does not take place. The following data are recorded as part of the registration process: - Your IP address - Your email address - Your user name - Your access password (necessary to ensure the registration; you may change the password at any time) - Date and time of the registration Legal basis for the data processing The legal basis for the processing of the data is the registration by the user Art. 6 Para. 1 Item a GDPR. If the registration serves the fulfillment of a contract or the execution of pre-contractual measures, thus the additional legal basis for the processing of the data is Art. 6 Para. 1 Item b GDPR. Purpose of the data processing Registration is necessary in order to keep certain contents and services ready for use on our website. - Access to the back-end of the website - Access to administration tools of the website - Access to password-protected areas of the website Duration of the storage The data are deleted as soon as they are no longer required for the fulfillment of the purpose of their collection. Possibility of objection or elimination You have the option of canceling your registration at any time. You may have the data stored on you modified at any time. For this, please use the above-mentioned address of the data controller. Contact form and email contact Description and scope of the data processing Our website includes a contact form that can be used for getting in contact electronically. If you use this option, all data that you enter into the input mask is transmitted to us and stored by us. At the time of sending the message, the following data are also stored: - Your IP address - Your name - Your email address - Your user name - Date and time of the registration For the processing of the data, clicking on the Send button in the context of the sending procedure grants your consent and refers you to this data privacy statement. Alternatively, you may also get in contact using the provided email address. In this case, the personal data of the user that are transmitted with the email are stored. In this context, no disclosure of the data to third parties takes place. The data are used exclusively for the processing of the conversation. Legal basis for the data processing If the user has granted his or her consent, the legal basis for the processing of the data is Art. 6 Para. 1 Item a GDPR. The legal basis for the processing of the data that are transmitted in the course of sending an email is Art. 6 Para. 1 Item f GDPR. If the email contact is made with the intention of concluding a contract, an additional legal basis for the processing is Art. 6 Para. 1 Item b GDPR. Purpose of the data processing The processing of the personal data from the input mask is solely so that we may process the establishment of contact. In the event that contact is established via email, this purpose also represents the required legitimate interest in the processing of the data. The other personal data processed during the sending procedure serve to prevent misuse of the contact form and to ensure the security of our information technology systems. Duration of the storage The data are deleted as soon as they are no longer required for the fulfillment of the purpose of their collection. For the personal data from the input mask of the contact form and the data that were sent via email, this is the case once the respective conversation with the user is ended. The conversation is ended when the circumstances make it apparent that the issue concerned has been conclusively resolved. The personal data that are additionally recorded during the sending procedure are deleted at the latest after a period of seven days. Possibility of objection or elimination You have the option of revoking your consent to the processing of the personal data at any time. If you get in contact with us via email, you may object to the storage of your personal data at any time. In such a case, it is not possible to continue the conversation. You may object to the storage of the data by getting in touch at the above-mentioned address of the data controller. In this case, all data stored in the course of the establishment of contact are deleted. Security We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation and unauthorized access. Our employees have been instructed with regard to the applicable aspects of data protection, and are obliged to maintain data secrecy according to the Federal Data Protection Act as well as to properly handle personal data in a confidential manner according to the provisions of the EU General Data Protection Regulation. Data protection online room reservations Description and scope of the data processing For reasons of unequivocal identification and establishment of contact with the guest, personal data are requested in the course of online room reservation. The mandatory details include address, first name, last name, telephone number and email address. In addition, a credit card is also required as a warranty i.e. for payment. Legal basis for the data processing The legal basis for the processing of these data is Art. 6 Para. 1 Item b GDPR, since these data are necessary according to § 29 f BMG [Federal Registration Act] in order for us to be able to fulfill our contractual obligations toward you. Purpose of the data processing We require the processing of the personal data from the input mask in order to ensure unambiguous allocation during the reservation of rooms. After completing the reservation, you will receive your booking confirmation at the email address you provided. We require your telephone number for any further inquiries or to otherwise reach you (e.g. guests arriving late). Your credit card serves, depending on the rate, guarantee or payment purposes. Duration of the storage Unless specifically indicated, we store personal data only as long as is necessary for the fulfillment of the pursued purposes. In certain cases, the legislation stipulates the retention of personal data, e.g. in tax or commercial law. In these cases, we only continue to store the data for these legal purposes, but do not process them in any other way. The data are deleted after expiry of the legal retention period. Personal data provided during booking are stored for a duration of maximum 10 years. Disclosure of the data to third parties As a rule, we only use your personal data within our company. If and insofar as we involve third parties in the scope of the fulfillment of contracts (e.g. logistics service providers), these third parties receive personal data only to the extent to which the transmission thereof is necessary for the corresponding service. In the event that we outsource certain parts of the data processing (“contract processing”), we contractually oblige processors to use personal data only in accordance with the requirements of the data protection laws and to guarantee the protection of the rights of the data subjects. Data security We do our utmost to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities. With us, your personal data are encrypted before being transmitted. We use the encoding system SSL (Secure Socket Layer); however, we would like to point out that data transmission on the internet (e.g. during communication via email) may involve gaps in security. Complete protection of the data from access by third parties is not possible. To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we continually update to the latest state of the art. Your rights If personal data of yours are processed, you are a data subject in the sense of the GDPR and you may exercise the following rights against the data controller: Right to information You may demand confirmation of whether and in what manner personal data concerning you are processed by us. For this, please get in touch via the above-mentioned address of the data controller. Right to rectification You have a right to rectification and/or completion by the data controller if the processed personal data concerning you are incorrect or incomplete. The data controller must carry out the rectification immediately. Right to restriction of the processing. Under the following conditions, you may demand the restriction of the processing of the personal data concerning you: - if you dispute the accuracy of the personal data concerning you for a duration of time that enables the data controller to verify the accuracy of the personal data; - if the processing is unlawful and you reject the deletion of the personal data and instead demand the restriction of the use of the personal data; - if the data controller no longer requires the personal data for the purposes of processing, but you, however, require these data for the assertion, exercise or defense of legal claims; - if you have filed an objection to the processing pursuant to Art. 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons. If the processing of the personal data concerning you has been restricted, then these data – aside from the storage thereof – may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State. If the restriction of the processing has been limited in accordance with the above-mentioned conditions, you will be informed by the data controller before the limitation is removed. Right to deletion Obligation of deletion You may demand of the data controller that the personal data concerning you be deleted immediately, and the data controller is obliged to delete these data immediately insofar as one of the following reasons applies: - The personal data concerning you are no longer required for the purposes for which they were collected or processed in any other way. - You revoke your consent on which the processing in accordance with Art. 6 Para. 1 Item a or Art. 9 Para. 2 Item a GDPR was based, and there is no other legal basis for the processing. - You file an objection to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection to the processing in accordance with Art. 21 Para. 2 GDPR. - The personal data concerning you have been unlawfully processed. Notification to third parties If the data controller has published the personal data concerning you and if he is obliged to delete it in accordance with Art. 17 Para. 1 GDPR, then he shall take appropriate measures, including of a technical kind, under consideration of the available technology and the costs of implementation, in order to inform the responsible data controllers who are processing the personal data that you, as the data subject, have demanded that they delete all links to these personal data as well as all copies or replications of these personal data. Right to instruction If you have asserted your right to rectification, deletion or restriction of the processing against the data controller, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of the processing, unless this proves to be impossible or would involve a disproportionate effort. You have the right to be informed by the data controller of these recipients. Right to data portability You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. In addition, you also have the right to transmit these data to another data controller without hindrance by the data controller to whom the personal data were provided, insofar as the processing is based on consent in accordance with Art. 6 Para 1. Item a GDPR or Art. 9 Para. 2 Item a GDPR or on a contract in accordance with Art. 6 Para. 1 Item b GDPR and the processing occurs with the help of automated procedures. In exercising this right you furthermore have also the right to have the personal data concerning you transmitted from one data controller directly to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons may not be impaired in the process. The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Right of objection You have the right to file an objection against the processing of the personal data concerning you that is based on Art. 6 Para. 1 Item e or f GDPR at any time for reasons arising from your particular situation. For this, please get in touch via the address of the above-mentioned data controller. Right to revocation of the declaration of consent under data protection law You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the legality of the processing that has taken place on the basis of the consent up until the revocation. For this, please get in touch via the address of the above-mentioned data controller. Right to lodge a complaint with a supervisory authority Irrespective of any other administrative or judicial appeal, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your abode, your workplace or place of the suspected infringement, if you are of the opinion that the processing of the personal data concerning you is in violation of the GDPR. The supervisory authority with whom the complaint was lodged shall inform the complainant of the status and the results of the complaint including the possibility of a judicial appeal pursuant to Art. 78 GDPR. Prohibition on the use of contact details published here We forbid the use of all contact details published on this website, such as postal addresses, telephone and fax numbers as well as email addresses, for advertising purposes and for evaluation for market and opinion research. Legal steps against the senders of so-called spam mails in case of violation of this prohibition are expressly reserved. We reserve the right to make changes to these data protection guidelines at any time insofar as is legally necessary.
1.1 1.2 2.1 3.1 4.1 5.1 6.1 6.2 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 18.2 18.3 18.4 19.1 20.1 21.1 22.1 23.1 23.2 23.3 23.4 23.5 24.1 24.2 25.1 25.2 26.1 26.2 27.1 27.2 27.3 27.4 27.5 27.6 27.7 28.1 28.2 28.3 28.4 28.5 29.1 29.2 29.3 29.4 30.1 30.2 31.1 32.1 32.2 32.3 33.1 34.1 34.2 34.3 34.4 34.5 35.1 35.2 35.3 35.4 35.5 36.1 37.1 38.1 38.2 39.1 39.2 39.3 39.4 39.5 40.1 40.2 40.3 40.4 40.5 41.1 41.2 42.1 42.2 42.3 43.1 44.1 44.2 44.3 44.4 45.1 45.2 46.1 46.2 47.1 48.1 49.1 50.1 50.2 50.3 50.4 50.5 50.6 51.1 52.1 52.2 53.1 53.2 54.1 54.2 55.1 55.2 56.1 57.1 57.2 57.3 57.4 58.1 59.1 59.2 59.3 60.1 60.2 61.1 61.2 62.1 63.1 63.2 63.3 63.4 64.1 65.1 66.1 67.1 67.2 67.3 68.1 69.1 70.1 71.1 71.2 72.1 72.2 73.1 73.2 74.1 75.1 77.1 78.1 80.1 81.1 81.2 83.1 84.1 84.2 86.1 87.1 89.1 90.1 92.1 93.1 95.1 96.1 96.2 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 119.2 120.1 121.1
U sljedećim Vas točkama želimo obavijestiti o obradi osobnih podataka prilikom posjete i korištenja naše web stranice. Osobni podaci su svi oni koji Vas identificiraju, npr. ime, adresa, adresa e-pošte, ponašanje korisnika. Službena osoba za kontrolu i zaštitu podataka Pravna osoba odgovorna za prikupljanje, obradu i korištenje Vaših osobnih podataka u skladu s GDPR-om je: Zagrebačko gradsko kazalište Komedija, Kaptol 9, 10000 Zagreb. Možete kontaktirati osobu odgovornu za zaštitu podataka putem e-mail adrese: propaganda@komedija.hr ili na našu poštansku adresu uz napomenu “osoba odgovorna za zaštitu podataka”. Prikupljanje podataka tijekom posjete web stranici (1) Kada posjećujete stranicu samo radi informiranja, npr. ako se ne želite registrirati ili na neki drugi način pružiti informacije o sebi, mi u tom slučaju prikupljamo samo osobne podatke koje Vaš pretraživač prenosi na naš poslužitelj. Ako želite posjetiti našu web stranicu, imajte na umu da prikupljamo sljedeće podatke koji su, u tehničkom smislu, nama potrebni kako bismo Vam mogli prikazati našu web stranicu i kako bismo mogli osigurati njenu stabilnost: - IP adresa - Datum i vrijeme pristupa - Razlika vremenske zone u usporedbi s Greenwich Srednjim Vremenom (GMT) - Sadržaj zahtjeva (posebna stranica) - Status pristupa/HTTP kod statusa - Količina prenesenih podataka - URL podaci o prethodno posjećenoj stranici - Vrsta pretraživača - Operativni sustav i njegovo sučelje - Jezik i verzija softvera pretraživača Pravna osnova za obradu pseudonimnih podataka opisanu pod točkom 1 je čl. 6. st. 1 f) Opće uredbe je legitimni interes (poboljšanje web stranice i korisničkog iskustva za korisnike te zaštita podataka). (2) Kao dodatak spomenutim podacima, kolačići se pohranjuju na Vaše računalo kada posjećujete našu web stranicu. Kolačići su male tekstualne datoteke koje se pohranjuju na Vaš tvrdi disk putem pretraživača kojeg koristite, te putem kojih određene informacije putuju do izvora koji postavlja kolačiće. Kolačići ne mogu pokretati programe niti prenositi viruse na Vaše računalo. Oni služe tomu da Internet pruža jednostavnost i učinkovitost korisniku. (3) Korištenje kolačića: a) Ova web stranica koristi sljedeće vrste kolačića, obujam i njihovo funkcioniranje koji su objašnjeni ispod: Privremeni kolačići (vidjeti b) Trajni kolačići (vidjeti c). b) Privremeni kolačići se automatski brišu kada zatvorite svoj pretraživač. Oni se uglavnom odnose na kolačiće sesije. Oni pohranjuju takozvane identifikatore sesije, koji se mogu dodijeliti običnoj sesiji ovisno o zahtjevu Vašeg pretraživača. To omogućava prepoznavanje Vašeg računala kada ponovno posjetite našu web stranicu. Kolačići sesije se brišu kada se odjavite ili kada zatvorite svoj pretraživač. c) Trajni kolačići se automatski brišu nakon određenog razdoblja koje ovisi o kolačiću. Kolačiće možete sami izbrisati u bilo kojem trenutku u sigurnosnim postavkama Vašeg pretraživača. d) Postavke pretraživača možete konfigurirati prema vlastitim željama i možete, primjerice, odbiti prihvaćanje kolačića trećih strana ili sve kolačiće. Molimo da uzmete u obzir da tada možda nećete moći koristiti sve funkcije web stranice. e) Kolačiće koristimo kako bismo Vas identificirali tijekom narednih posjeta, u slučaju da ste se registrirali na našoj stranici. Ako niste, morate se prijaviti prilikom svake posjete našoj stranici. f) Flash kolačići koji se koriste ne prikuplja Vaš pretraživač, već Vaš Flash priključak. Također koristimo HTML5 predmete za pohranu koji su pohranjeni na Vašem mobilnom uređaju. Ti predmeti pohranjuju potrebne podatke neovisno o Vašem pretraživaču te nemaju automatski datum isteka. Ako ne želite obradu Flash kolačića, morate instalirati odgovarajući dodatak, npr. “Better Privacy” za pretraživač Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) ili Adobe Flash odstranjivač kolačića za Google Chrome. Možete spriječiti korištenje HTML5 predmeta za pohranu na način da koristite privatan način rada prilikom korištenja svog pretraživača. Također preporučujemo da redovito ručno brišete svoje kolačiće i svoju povijest pretraživanja. (4) Naravno da možete i pregledavati našu web stranicu bez korištenja kolačića. Internet pretraživači su podešeni za prihvaćanje kolačića. Općenito možete deaktivirati korištenje kolačića u bilo kojem trenutku putem postavki Vašeg pretraživača. Molimo da koristite funkcije pomoći na pretraživaču kako biste saznali kako možete promijeniti te postavke. Molimo da uzmete u obzir da neke značajke naše web stranice nekada djelomično ili u potpunosti ne funkcioniraju ako onemogućite korištenje kolačića. (5) Pravni temelj za obradu podataka u skladu s gore navedenim je Članak 6. (1) toč. f) GDPR-a. Naši interesi pri obradi podataka uglavnom proizlaze iz želje da omogućimo korištenje web stranice na način da osiguramo njenu operativnu stabilnost i sigurnost. Mi pohranjujemo osobne podatke, osim ako je drukčije navedeno, samo onoliko koliko je potrebno za ostvarenje željenih funkcija. (6) Ako ćemo koristiti ugovorene pružatelje usluga za individualne funkcije naših ponuda ili ako ćemo koristiti Vaše podatke radi oglašavanja, o tome ćemo Vas detaljno informirati. Također ćemo specificirati određene kriterije za razdoblje pohranjivanja. Kontakt e-pošte Ako nas kontaktirate (npr. putem obrasca za kontakt ili e-pošte), pohraniti ćemo detalje o Vama radi obrade zahtjeva i radi eventualnih dodatnih pitanja. Spomenute podatke ćemo izbrisati nakon što nam više nisu potrebni u pohrani ili ćemo ograničiti obradu ako postoje statutarne obveze o njihovom zadržavanju. Mi pohranjujemo i koristimo ostale osobne podatke samo ako dobijemo Vaše odobrenje ili ako je po zakonu moguće to učiniti bez posebnog odobrenja. Korištenje našeg portala (1) Ako želite koristiti naš web shop, morate se registrirati tako da unesete svoju adresu e-pošte i Vaše korisničko ime. Ne postoji obveza davanja pravog imena, već je moguće korištenje pseudonima. Za registraciju koristimo takozvani ‘double opt-in’ postupak za registraciju, što znači da Vaša registracija neće biti potpuna dok ne potvrdite prethodno registraciju putem Vaše e-pošte, u čijem sandučiću biste trebali dobiti mail za potvrdu u kojemu se nalazi odgovarajuća poveznica. Ako u sandučiću e-pošte ne primite nikakvu poštu unutar 24 sata, Vaša će se registracija automatski izbrisati iz naše baze podataka. Obavezno je dati spomenute podatke, a sve ostale podatke možete dati svojevoljno prilikom korištenja našeg portala. (2) Ako koristite naš web shop, potrebne podatke o Vama ćemo pohraniti radi osnovnih funkcija, a one uključuju podatke o načinu plaćanja, do trenutka u kojem ukidate vlastiti pristup web shopu. Nadalje, podatke koje ste svojevoljno pružili koristit ćemo kroz razdoblje tijekom kojeg ste pristali na korištenje web shopa, osim ako ćete ga prije isteka izbrisati. Možete upravljati i mijenjati sve podatke koji se nalaze u zaštićenom prostoru klijenata. Pravni temelj je Članak 6. (1) toč. b i f GDPR-a. (3) Kako bi se spriječio neovlašteni pristup Vašim osobnim podacima, posebice financijskim podacima, veza se šifrira pomoću TLS tehnologije. Novosti (1) Nakon davanja svoje suglasnosti možete se pretplatiti na naše novosti, kojima Vas informiramo o našim trenutnim zanimljivim ponudama i uslugama. Oglašavana dobra i usluge su navedeni u izjavi o suglasnosti. (2) Koristimo ‘double opt-in’ postupak prilikom pretplaćivanja na naše novosti. To znači da ćemo, nakon što se registrirate, Vam poslati poštu u sandučić na adresu e-pošte koju ste naveli, u kojoj ćemo Vas zatražiti da potvrdite da želite primati naše novosti. Ako ne potvrdite registraciju unutar 24 sata, Vaši podaci će biti blokirani i automatski će se izbrisati nakon mjesec dana. Dodatno tome ćemo pohraniti Vašu IP adresu i vrijeme registracije i potvrde. Svrha ovog postupka je dati Vam mogućnost da dokažete svoju registraciju i da, ako je potrebno, razjasnimo sve okolnosti u slučaju da dođe do zloupotrebe Vaših osobnih podataka. (3) Jedini obavezan podatak, koji nam trebate dati prilikom pretplate na novosti, je adresa Vaše e-pošte. Davanje ostalih podataka je dobrovoljno, te se ti podaci koriste kako bi Vam se mogli osobno obratiti. Nakon Vaše potvrde ćemo pohraniti adresu Vaše e-pošte sa svrhom slanja novosti. Pravni temelj je Čl. 6. (1) toč. a GDPR-a. (4) Svoju suglasnost za slanje novosti možete povući u bilo kojem trenutku, te na taj način otkazati slanje novosti. Možete potvrditi povlačenje suglasnosti tako da kliknete na poveznicu koja se nalazi u svakoj poslanoj pošti s novostima, slanjem pošte na propaganda@komedija.hr (5) Ističemo da slanjem naših novosti procjenjujemo ponašanje korisnika. U svrhu te analize se u poslanim porukama e-pošte nalaze takozvane web pratilice ili pikseli za praćenje, koji predstavljaju datoteke slika s jednim pikselom koje su pohranjene na našoj web stranici. Prilikom procjene vezujemo spomenute podatke u § 3 i web pratilice s Vašom adresom e-pošte i posebnom identifikacijom (6) Dodatne funkcije i ponude na našoj web stranici (a) Osim primarno informativnog načina korištenja naše web stranice, nudimo i razne usluge koje se mogu realizirati na teret vlasnika, a koje možete koristiti ako ste zainteresirani. Inače morate pružiti dodatne osobne podatke koje koristimo kako bismo pružili uslugu i na koje se primjenjuju spomenuti principi obrade podataka. Mi tražimo dodatne podatke sa svrhom naplate usluga, a to mogu biti podaci o plaćanju, kako bismo mogli provesti Vašu narudžbu. Ove podatke pohranjujemo u naš sustav dok ne istekne zakonski rok za zadržavanje podataka. (b) U nekim slučajevima koristimo vanjske pružatelje/ugovaratelje usluga radi obrade Vaših podataka. Pružatelji/ugovaratelji se pažljivo biraju i sami ih odobravamo i redovito kontroliramo u skladu s našim uputama. (c) Nadalje, Vaše osobne podatke možemo proslijediti trećim osobama u slučaju da nudimo sudjelovanje u promocijama, natjecanjima, zaključivanju ugovora ili sličnim uslugama s partnerima. Detaljnije informacije možete dobiti kada nam pružite svoje osobne podatke. (d) Ako naši pružatelji usluga ili partneri imaju sjedište u zemlji izvan Europskog Ekonomskog Područja (EEA), obavijestiti ćemo Vas o posljedicama ovih okolnosti u opisu ponude. 6 Priključci Google Analytics a) Web stranica koristi Google Analytics, a usluge web analitike pruža Google LLC. (“Google”). Google Analytics također koristi kolačiće, odnosno tekstualne datoteke koje se pohranjuju na Vaše računalo i omogućavaju analizu Vašeg korištenja web stranice. Informacije koje generira kolačić, a koje se odnose na Vaše korištenje ove web stranice, prenose se na Google poslužitelj u SAD-u i tamo se pohranjuju. Putem aktivacije IP anonimizacije web stranice, Google će skratiti Vašu IP adresu unutar zemlja članica Europske unije ili ostalih stranaka uključenih u Ugovor o Europskom ekonomskom području. Samo će se u iznimnim slučajevima potpuna IP adresa prenositi na Google poslužitelj u SAD-u i tamo će se skratiti. b) Google će, u naše ime, koristiti ove podatke u svrhu analiziranja Vašeg korištenja web stranice, te će izrađivati izvještaje o aktivnostima na web stranici i pružati nama informacije o drugim uslugama vezanim uz aktivnost na web stranici i korištenje Interneta. c) Google ne smije vezati IP adresu dobivenu s Vašeg pretraživača s niti jednim drugim podacima koje Google pohranjuje. Google također može prenositi ove podatke trećim stranama u slučaju da je tako zakonom određeno ili u slučaju da te treće strane obrađuju te podatke u ime tvrtke Google. d) U bilo kojem trenutku možete izbrisati kolačiće na Vašem računalu putem odgovarajućeg izbornika na Vašem pretraživaču ili na način da ih izbrišete sa svog tvrdog diska. Za više informacije odaberite izbornik Pomoć na Vašem pretraživaču. e) Možete odbiti korištenje kolačića na način da odaberete odgovarajuće postavke Vašeg pretraživača; međutim, preporučujemo da u ovom slučaju možda nećete imati pristupa potpunoj funkcionalnosti ove web stranice. Također možete spriječiti slanje podataka o Vašem korištenju web stranice (uključujući vašu IP adresu), koje generira kolačić, tvrtki Google i možete spriječiti obradu podataka od strane tvrtke Google i to na način da preuzmete i instalirate priključak pretraživača dostupnog na sljedećoj poveznici: http://tools.google.com/dlpage/gaoptout?hl=en f) Daljnje su informacije dostupne na http://tools.google.com/dlpage/gaoptout?hl=en. Želimo naglasiti da je kod “_anonymizeIp();” dodan na Google Analytics na web stranici kako bi se mogla garantirati anonimnost kod prikupljanja IP adresa (takozvano maskiranje IP adresa). Google Karte Ova web stranica koristi Google Karte API za vizualni prikaz geografskih informacija. Prilikom korištenja Google Karti, Google također prikuplja, obrađuje i koristi podatke o korištenju funkcija karte od strane posjetitelja. Više informacija o obradi Google-ovih podataka možete pronaći u Polici privatnosti tvrtke Google. Također možete promijeniti svoje postavke o zaštiti osobnih podataka u Centru za zaštitu podataka. Google Web Fontovi Google Fontovi se koriste za poboljšavanje vizualne prezentacije raznih podataka na ovoj web stranici. Web fontovi se prenose u tajnu memoriju pretraživača prilikom otvaranja stranice, kako bi ih se moglo koristiti na prikazima. Ako Vaš pretraživač ne podržava Google Web Fontove ili ne omogućava pristup, tekst će se prikazati u predodređenom fontu. Pruženi podaci prilikom spajanja na stranicu šalju se domenama specifičnih izvora kao što je fonts.googleapis.com ili fonts.gstatic.com. Ti podaci nisu vezani uz podatke koji se mogu prikupljati ili koristiti prilikom istovremene upotrebe Google usluga. Na pretraživaču možete podesiti da se fontovi ne preuzimaju s Google poslužitelja (npr. instaliranjem dodataka kao što je NoScript ili Ghostery za Firefox.). Ako Vaš pretraživač ne podržava Google Fontove ili ako zabranite pristup Google poslužiteljima, tekst će se prikazati u predodređenom fontu. Vimeo Ova web stranica koristi priključke američke kompanije Vimeo, LLC, 555 West 18th Street, New York, New York 10011, SAD. Posljedično tomu može doći do prijenosa zapisanih podataka s naše web stranice na Vimeo. Vimeo poslužitelj u Sjedinjenim državama u tom slučaju automatski pohranjuje podatke (“zapisane podatke”), kao što su podaci koje Vaš pretraživač šalje web stranici kada ju posjećujete ili podaci koje Vaša mobilna aplikacija šalje kada ju koristite. Ovi zapisani podaci mogu sadržavati Vašu IP adresu, adresu web stranice koju ste posjetili i koja koristi Vimeo značajke, vrstu pretraživača i postavke, datum i vrijeme Vašeg zahtjeva, podatke o Vašem korištenju Vimea i kolačiće. Više informacija o prikupljanju podataka, načinu procjene podataka, obradi podataka od strane Vimea i Vašim pravima vezanih uz Policu privatnosti Vimea možete dobiti na sljedećoj poveznici: http://vimeo.com/privacy. Društveni priključci Naše društvene priključke (“priključci”) koriste društvene mreže. Kako bi se podigla razina zaštite Vaših podataka prilikom posjete našoj web stranici, priključci nisu zabranjeni, već su samo integrirani u stranicu putem HTML poveznice (takozvano “Shariff rješenje”). Ova integracija osigurava da se ne uspostavlja poveznica s poslužiteljima pružatelja određene društvene mreže kada se otvara naša stranica koja sadrži takve priključke. Klikom na jednu od tipki otvara se novi prozor na Vašem pretraživaču te otvara stranicu određenog pružatelja usluge, te na njemu možete (ako je potrebno nakon unosa podataka za prijavu) npr. pritisnuti tipku za Dijeljenje. Svrha i obujam prikupljenih podataka i daljnja obrada i korištenje podataka od strane pružatelja na njihovim stranicama, kao i Vaša prava i postavke za zaštitu Vaše privatnosti, mogu se pronaći u informacijama o zaštiti podataka sljedećih pružatelja: XING AG (Dammtorstr. 30 – 20354 Hamburg – Germany) LinkedIn Corporation (2029 Stierlin Court – Mountain View – CA 94043 – USA) facebook Inc. California Ave, Palo Alto, CA 94304, USA) Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA) Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA) Vaša prava na privatnost podataka: Drago nam je da Vas možemo informirati o Vašim pravima vezanim uz opću odredbu o zaštiti podataka: Pravo na pristup Imate pravo zahtijevati potvrdu o tome obrađuju li se podaci o Vama i informacije o tim podacima prema Čl. 15. GDPR-a. Pravo na ispravak U skladu s Člankom 16. GDPR-a, imate pravo zahtijevati dovršavanje ili korekciju netočnih podataka koji se tiču Vas. Pravo na brisanje U skladu s Člankom 17. GDPR-a, imate pravo zahtijevati brisanje relevantnih podataka u slučaju da ih u brisanju ne sprječavaju nikakve zakonske obveze. Pravo na ograničavanje obrade Imate pravo zahtijevati ograničenje pri obradi podataka u skladu s Čl. 18. Pravo na prenosivost podataka Imate pravo zahtijevati dobivanje podataka koje ste nam pružili u skladu s Čl. 20. GDPR-a i da dodatno tražite prenošenje na druge procesore Pravo na žalbu Imate se pravo žaliti na buduću obradu u skladu s Čl. 21. GDPR-a u bilo kojem trenutku. Pravo na opoziv Imate pravo opozvati svoju suglasnost u bilo kojem trenutku u skladu s Čl. 7., St. 3 GDPR-a, a koja se odnosi na buduće vrijeme. Pravo na obavještavanje nadzornih službi U skladu s Čl. 77. GDPR-a, imate pravo uložiti prigovor nadležnim nadzornim službama. Za ostvarenje obrazloženih prava sukladno propisima o zaštiti podataka možete nam se obratiti na sljedeći način: pismeno na adresu: Zagrebačko gradsko kazalište Komedija, Kaptol 9, 10000 Zagreb putem e-maila: propaganda@komedija.hr Kada trebam prijaviti neki događaj? Zagrebačko gradsko kazalište Komedija ima obvezu obavijestiti nadležne službe u roku od 72 sata od prijave događaja, stoga je potrebno prijaviti sve događaje bez odgađanja i to putem alata za prijavljivanje na webu. Koji se događaji trebaju prijaviti i na koji način? Svi događaji vezani uz povredu osobnih podataka moraju se prijaviti. Kakav je to događaj vezan uz zaštitu podataka? Događaji vezani uz zaštitu podataka su oni koji su ili koji mogu rezultirati nehotičnim ili namjernim gubitkom osobnih podataka (elektronskih ili na papiru) ili uništenjem podataka ili neovlaštenim pristupom podacima (npr. gubitak ili krađa laptopa, pametnog telefona, dokumenata, pretplata). Što se dogodi nakon što izvršim prijavu? Tim za zaštitu podataka će pregledati izvještaj o događaju te će Vas kontaktirati radi daljnjih informacija ili, ako je potrebno, primiti ćete odgovarajuću pomoć pri radnjama potrebnim nakon prijave događaja. Opće informacije SADRŽAJ, SOFTVER, USLUGE I APLIKACIJE INTERNETSKOG SERVISA Sav sadržaj koji se prikazuje ili nalazi na stranicama www.komedija.hr uključujući ali ne i ograničavajući se na objavljeni tekst, grafike, ilustracije, fotografije, audiovizualna djela, zvuk, dokumente, podatke i informacije, ne smiju se reproducirati, distribuirati ili na bilo koji način koristiti na način koji je protivan ovim Uvjetima. Posebno je izričito zabranjeno mijenjati, objavljivati, prenositi, prodavati, prikazivati, prerađivati, kopirati ili na bilo koji drugi način iskorištavati sadržaj, vizualni identitet, aplikacije i softver stranice www.komedija.hr. Pohrana ili kopiranje sadržaja za bilo koju svrhu i na bilo koji način i korištenje na način koji je protivan ovim Uvjetima izričito je zabranjeno. U slučaju neovlaštenog, nedopuštenog i/ili protuzakonitog korištenja bilo kojeg sadržaja (tekst, fotografije, aplikacije, softver, audiovizualna djela), Zagrebačko gradsko kazalište Komedija pridržava pravo potraživati naknadu cjelokupne štete te pokrenuti građanski i kazneni postupak pred nadležnim sudovima protiv pravne i/ili fizičke osobe koja je na opisani način koristila navedeni sadržaj. Korisnik potvrđuje i jamči da će ove stranice koristiti u skladu s ovim Uvjetima i svim primjenjivim zakonima i pravilima, uključujući, bez ograničenja, sve one koje se odnose na internet, e-mail (poruke elektroničke pošte), podatke i privatnost. Kraj Zadržavamo pravo na promjenu Uvjeta korištenja naše web stranice. To može biti potrebno radi tehničkog razvoja. Ako imate bilo kakvih dodatnih pitanja vezanih uz Vaše osobne podatke, molimo da kontaktirate službenu osobu za zaštitu podataka slanjem upita na adresu propaganda@komedija.hr Datum zadnjeg pregleda i promjene: Rujan 2018.