http___www.interijer-mva.hr_politika-privatnosti__1.xml
1.1 2.1 3.1 3.2 3.3 3.4 4.1 4.2 5.1 5.2 6.1 7.1 8.1 8.2 9.1 10.1 11.1 11.2 12.1 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 24.3 24.4 25.1 25.2 26.1 26.2 27.1 27.2 28.1 28.2 29.1 30.1 30.2 30.3 31.1 32.1 32.2 32.3 33.1 34.1 34.2 35.1 36.1 37.1 38.1 38.2 38.3 38.4 39.1 39.2 39.3 40.1 40.2 41.1 41.2 42.1 43.1 43.2 43.3 43.4 43.5 44.1 45.1 46.1 46.2 46.3 46.4 47.1 47.2 47.3 48.1 48.2 49.1 49.2 49.3 49.4 50.1 50.2 51.1 51.2 51.3 51.4 51.5 51.6 51.7 52.1 52.2 52.3 52.4 53.1 53.2 53.3 54.1 55.1 56.1 57.1 58.1 58.2 58.3 58.4 58.5 58.6 58.7 59.1 60.1 60.2 60.3 61.1 62.1 63.1 63.2 64.1 64.2 64.3 64.4 65.1 65.2 65.3 65.4 66.1 66.2 67.1 67.2 67.3 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 75.2 75.3 75.4 75.5 75.6 75.7 76.1 76.2 77.1 77.2 77.3 77.4 77.5 77.6 77.7 78.1 78.2 78.3 78.4 79.1 79.2 80.1 81.1 81.2 82.1 83.1 83.2 84.1 85.1 85.2 85.3 85.4 85.5 85.6 85.7 85.8 85.9 86.1 86.2 87.1 88.1 88.2 89.1 90.1 90.2 91.1 92.1 93.1 94.1 95.1 95.2 96.1 97.1 98.1 99.1 100.1 101.1 101.2 102.1 102.2 103.1 103.2 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 113.2 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1 121.2 122.1 123.1 124.1 125.1 126.1 127.1 128.1 129.1 129.2 130.1 131.1 132.1 132.2 133.1 134.1 135.1 136.1 136.2 137.1 138.1 139.1 139.2 140.1 140.2 141.1 142.1 142.2 143.1 143.2 144.1 144.2 145.1 146.1 147.1 148.1 149.1 149.2 149.3 150.1 150.2 151.1 151.2 151.3 151.4 152.1 152.2 153.1 154.1 154.2 154.3 154.4 155.1 156.1 156.2 156.3 157.1 158.1 159.1 159.2 160.1 160.2 160.3
Data privacy Data Protection Declaration of Zentis GmbH & Co KG (as of May 2018) Thank you for your interest in our website www.zentis.de, in our company and our products and services. We at Zentis are aware that the protection of your privacy when using this website is an important issue. For this reason, compliance with the statutory regulations for data protection is a matter of course for us. In addition, it is one of our key concerns that you as a customer always know when and how we collect, store and use your personal data across. In the following we will inform you about the collection and further processing (e.g., storage, requests, modifications, forwarding) of personal data related to the use of our website. Personal data is defined as all data which relate to you personally, e.g., your name, address, email address and user behaviour. Where we process personal data within the scope of visits to our website, where we use the services of service providers in connection with the processing of such data for the provision of individual functions or services on our website or where we intend to use such data for advertising purposes, we will inform you about the relevant procedures in detail, i.e., in particular which data is processed. In doing so, we will also disclose the intended storage duration or at least the defined criteria for the storage duration as well as the relevant legal basis for the processing of the data. Name and address of the controller The controller in terms of the General Data Protection Regulations (GDPR), other national data protection laws of the Members States or any further data protection provisions is: Zentis GmbH & Co. KG, Jülicher Straße 177, 52070 Aachen, Tel. No.: +49 241 4760-0, Email: info@zentis.de, Website: www.zentis.de Contact details of the data protection officer You can contact our data protection officer at datenschutz@zentis.de or by sending a letter to our postal address set out above under Section I. to the attention of the "Data Protection Officer": III. Collection and storage of personal data as well as the nature, purpose, legal basis and duration of use § 1 Visits to our website When visiting our website for the sole purpose of obtaining information, i.e. if you do not register or transfer information to us in any other way, we will only collect your personal access data in so-called server logfiles which your browser transfers to our server. These server logfiles collect the following data: - IP address - Date and time of the query - Time zone difference to Greenwich Mean Time (GMT) - Contents of the request (concrete page) - Access status/HTTP status code - Transferred data volume - Website, from which we receive the request - Browser - Operating system and its interface - Language and version of the browser software This data is analysed solely for the purpose of ensuring a smooth operation of the website with regard to stability and security and for the improvement of our services and subsequently deleted. The legal basis for the processing of the data is Art. f GDPR. Our legitimate interest is based on the above specified purposes for the processing of the data. The data are also saved in the logfiles of our system. A storage of this data together with additional personal data of the user does not occur. The collection of the data required for the publishing of the website and the storage of data in logfiles is mandatory for the operation of the website. For this reason, the user cannot object to the collection of such data. The data is deleted as soon as it is no longer required to attain the purpose of its collection. Where data is collected to enable the publishing of the website, the data will be deleted as soon as the session is closed. In addition, we use cookies and analytics services on our website. Further information on this is available in Sections IV and V of this data protection declaration. § 2 Use of additional services and functions on our website Apart from using our website solely for the purpose of obtaining information, you can also use the various services and functions on our website. In general, you will need to disclose further personal data which we use for the provision of the relevant services; such data is also subject to the above specified principles for data processing. The services and functions are described in further detail below. (1) Contact form When contacting us using our contact form (praise & enquiries), the complaints form regarding spreads / sweets or general issues, the data entered by you on a voluntary basis (your email address, first name, surname and where applicable your phone number, place of residence and postal code) will be saved by us for the purpose of answering your query. The entry of your email address and your first name and surname is mandatory, all additional information is voluntary. For complaints, further information may be required for issuing return slips or providing compensation. We will reply by email or, where applicable, by phone. In this case, the legal basis for the processing of the data is Art. a and b) GDPR on the basis of your voluntarily granted consent for the processing of your enquiry. We will delete the data collected in this context after completion of your enquiry or restrict the processing of the data, where subject to statutory retention periods. (2) Newsletter By giving your consent, you can subscribe to our newsletter in which we inform you about our current interesting offers. We use the so-called double-opt-in procedure for subscriptions to our newsletter. This means that after you have subscribed to our newsletter, we will send you an email to your specified email address in which we request you to confirm that you would like to receive our newsletter. In addition, we will save your used IP addresses and the times of your subscription and confirmation. The purpose of this procedure is to create a proof for your subscription, so that a possible misuse of your personal data can be uncovered, where necessary. The only mandatory data required for receiving our newsletter is your email address. [The entry of the additional, specially marked data is voluntary and is used to be able to address you personally.] After receiving your confirmation, we will save your email address for the purpose of forwarding our newsletter. The legal basis for this is Art. a GDPR on the basis of your voluntarily provided consent. You can withdraw your consent to the receipt of the newsletter at any time and unsubscribe. You can unsubscribe by clicking on the link provided in every newsletter email or by sending an email to datenschutz@zentis.de or by sending a letter to the contact details set out in the imprint. (3) Online job applications If you want to apply for a job at Zenits GmbH & Co. KG (see Section I) directly on this website, your personal data will be collected in our application portal. The data entered in our application portal is used solely for the purpose of recruiting an employee for the vacant position and for the review and handling of your application for the relevant position. After completion of the application procedure for the specific position, your data will be blocked for further processing and deleted after expiry of any applicable statutory retention periods. The legal basis for the processing is Art. 88 GDPR in conjunction with Section 26 (1) of the German Federal Data protection Act (BDSG). Use of cookies § 1 Scope of data processing In order to make your visit to our website as user-friendly and effective as possible and to enable the use of certain functions, we work with so-called cookies on some of our pages. Cookies are small text files which are stored on your device and which save certain settings and data via your browser for the exchange with our system. With these cookies, the party putting the cookies on your computer (in this case zentis) will be provided with specific information. Cookies cannot execute any programs or transmit viruses to your computer. Cookies contain no personal data and can therefore not be directly allocated to a user. Please note that certain cookies are already put on your computer as soon as you access our website. This website uses the following types of cookies: - Mandatory / functional cookies: These cookies are mandatory to ensure the operation of the website. For instance, this may be cookies which enable you to sign in to the customer area or place items into your shopping cart. - Transient cookies: These are automatically deleted when you close your browser. The most common of these cookies are session cookies which save a so-called session ID with which various requests of your browser can be allocated to your visit to our website. This enables our website to identify your computer when you return. The session cookies are deleted when you sign out or close the browser. - Persistent cookies: These are automatically deleted after a defined period which may vary from cookie to cookie. You can delete the cookies in the security settings of your browser any time. - Third party cookies: These cookies of some of our advertising parties help to make our services and our website a more interesting experience for you. For this reason, we also save cookies of our partner companies on your hard drive when you visit our website. These are temporary cookies which delete themselves automatically after a set period. In general, the cookies of partner companies are deleted after a few days or 24 months, or in individual cases after a few years. The cookies of our partner companies do not contain any personal data. Only pseudonymised data under a user ID are collected. The pseudonymised data are at no time linked to your personal data. You can configure your browser settings to meet your own needs and requirements, e.g. reject the acceptance of third-party cookies or other cookies. Also, your browser can be configured so that you will be notified when a cookie is put on your computer. For this, please consult the your browser operator. We would like to point out that the rejection of cookies may mean that you cannot use all functions of the website. The legal basis for the use of cookies is Art. f GDPR. Our legitimate interest is based on the above specified purposes, i.e. to make our website more user-friendly and efficient. Further information on analytics cookies is listed under Section V. Use of analytics tools We use web analytics services on our website for the purpose of targeted advertising. New Relic This website uses the web analytics service New Relic for the statistical analysis of visitor access, operated by New Relic, Inc., 188 Spear St, San Francisco, CA 94105, USA. New Relic collects and stores data on the basis of which user profiles are created under a pseudonym for analysing visitor behaviour, improving the services on this website as well as for optimisation and marketing purposes. New Relic works with so-called "cookies"; these are small text files which are saved locally in the cache of the Internet browser of the person visiting the website. These cookies are designed to identify the browser when you return to the website and enable a more accurate determination of the statistical data. New Relic will use this information to evaluate your use of our website, to prepare reports on website activities and to provide further services in connection with your use of the website and the Internet. Under no circumstances will New Relic link your IP address to other New Relic data. If you want to object to the analysis of the user behaviour via cookies, you can adapt your browser settings accordingly so that you are informed when cookies are put on your computer and you can decide on grounds relating to your particular situation whether you want to accept cookies for specific purposes or generally reject their acceptance. Alternatively, you can check on the EU deactivation site for consumers at http://www.youronlinechoices.com/uk/your-ad-choices/, whether New Relic advertising cookies are put on your browser and then deactivate them if you want to. The legal basis for the processing of your data is Art. f GDPR. Our legitimate interest is based on the above specified purposes. The data protection regulations of New Relic are available at: https://newrelic.com/termsandconditions/cookie-policy Odoscope In order to optimise our website and adapt it to the changing behaviour and technical requirements of our users, we use the web analytics services of odoscope (odoscope GmbH, Lichtstrasse 25, 50825 Cologne). This analytics tool is neither able nor has it been developed to evaluate visitor activities on the basis of personal data. For example, odoscope measures which pages are accessed by the users and whether the sought-after information can be easily found, etc. The information can only then be interpreted and only then becomes conclusive where a larger group of users is monitored. For this, the collected data are aggregated, i.e. merged together to larger units. This way, we can adapt the design of pages or optimise contents, for instance if we determine that a relevant part of the visistors is using new technologies or has problems finding or cannot find available information. Zentis and odoscope do not generate visitor profiles. The data is not misused, for example in order to provide previous visitors to our website with targeted advertising. Neither are we interested in the behaviour of individual users, nor in the identity of a user. Structural measures (splitting of databases and responsibilties) ensure that statistical data which is collected and processed for web analytics purposes never contains personal data and can at no time be linked to such data. We use Odoscope to analyse and continuously improve the use of our website. With the obtained statistics, we are able to improve our services and make our website even more interesting for users. The legal basis for the processing of your data is Art. f GDPR. Our legitimate interest is based on the above specified purposes. If you want to object to the analysis of the user behaviour via cookies, you can adapt your browser settings accordingly so that you are informed when cookies are put on your computer and you can decide on grounds relating to your particular situation whether you want to accept cookies for specific purposes or generally reject their acceptance. Alternatively, you can check on the EU deactivation site for consumers at http://www.youronlinechoices.com/uk/your-ad-choices/, whether Odoscope advertising cookies are put on your browser and then deactivate them if you want to. The data protection regulations of Odoscope are available at: https://www.odoscope.com/datenschutz. Links to social media sites Our website contains links to the social media sites: Facebook Youtube When visiting our website, generally no personal data will be forwarded to the operators of these social networks. Only if you click on the link to access our page on the relevant social network, the operator of the social network will receive the information that you have accessed the relevant website of our online services. In addition, the data set out in Section III. §1 hereunder will be transferred. According to the relevant operators in Germany, your IP address will be anonymised directly after collection for Facebook applications. This means that by clicking on the link, your personal data will be transferred to the relevant provider of the social network and stored there (i.e. at US-American operators in the USA). As the operator primarily uses cookies to collect this data, we recommend to delete all cookies before clicking on the link in the security settings of your browser. We can neither influence the collected data and data collection processes nor are the full scope of the data collection, the purpose of the processing and the retention periods known to us. Also, we have no information on the deletion of the collected data by the operator of the social network. The operator of the social network stores the data collected on you in the form of user profiles and uses it for advertising, market research purposes and/or the targeted design of its website. This evaluation is primarily conducted (also for users who are not signed in) to display targeted advertising and to inform other users in the social network about your activities on our website. You have the right to object to this generation of user profiles, whereby you must address your objection to the relevant operator of the social network as the responsible controller. With these links we give you the opportunity to interact with the social networks and other users so that we can improve our services and make our website even more interesting for users. The legal basis for this is Art. f GDPR. Our legitimate interest in this case is based on the above specified purposes. The data is transferred regardless of whether you have an account with the operator of the social network or are signed in. If you are signed in, the data collected on our website will be directly allocated to your account with the relevant operators of the social network. When you click on the link and for example create a link to the page, the plug-in provider will save this information in your user account and share it publicly among your contacts. We recommend, to always signed out after using a social network and in particular before clicking on the link as you can then avoid an allocation to your profile at the operator of the social network. More information on the purpose and scope of the collection and processing of the data by the operator of the social network, is available in the data protection declarations of the operators set out below. Here you will also receive further information with regard to your relevant rights and setting options for the protection of your privacy. Adresses of the relvant plug-in providers and URLs with their data protection declarations: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; and for further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/ your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info# everyoneinfo. Facebook complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (Google subsidiary); https://www.google.de/intl/de/policies/privacy. VII. Embedding of YouTube videos We have embedded YouTube videos on our web pages, which are stored at http://www.YouTube.com and can be directly called up on our website. By visiting the website, YouTube will be notified that you have accessed the relevant page of our website. In addition, the data set out in Section III. §1 hereunder will be transferred. This occurs regardless of whether you have a YouTube user account to which you are signed in or whether you have no such account. If you are signed in to Google, your data will be directly allocated to your account. However, if you do not wish your actions to be allocated to your YouTube profile, you must sign out before activating the button. YouTube stores your data in the form of user profiles and uses this data for advertising and market research purposes and/or the targeted design of its website. The data is in particular analysed (even when the user is not signed in) for the purpose of providing targeted advertising and in order to inform other users of the social network about your activities on our website. You have the right to object against the generation of these user profiles, whereby you must address your objection to YouTube. Further information on the purpose and scope of collection and processing of the data by YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; subsidiary of Google) is available in the data protection declaration. Here, you will also receive additonal information on your rights and setting options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework VIII. Your rights Whenever your personal data is processed, you have rights vis-á-vis us with regard to your own personal data: Right of access by the data subject, Art. 15 GDPR You have the right to request a confirmation from the controller on whether your personal data is processed by the controller. In the event that the data is processed, you can request the controller to disclose the following information: - the purposes for which the personal data is processed; - the categories of personal data concerned; - the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; In the latter cases, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR relating to the transfer of the data; - the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; - the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; - the right to lodge a complaint with a supervisory authority; - where the personal data are not collected from the data subject, any available information as to their source; - the existence of automated decision-making, including profiling, referred to in ⦁ Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Right to rectification, Art. 16 GDPR You have the right to the rectification and/or completion of the data towards the controller, where the processed personal data concerning you is inaccurate or incomplete. The controller must rectify the data immediately. Right to erasure, Art. 17 GDPR a) Right to erasure You can request the controller to delete all personal data immediately and the controller is obligated to delete this data immediately, where one of the following grounds applies: - the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; - the data subject withdraws consent on which the processing is based according to point (a) of ⦁ Article 6(1), or point (a) of ⦁ Article 9(2), and where there is no other legal ground for the processing; - the data subject objects to the processing pursuant to ⦁ Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to ⦁ Article 21(2); - the personal data have been unlawfully processed; - the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; - the personal data have been collected in relation to the offer of information society services referred to in ⦁ Article 8(1). b) Information to third-parties Where the controller has publicly disclosed the personal data concerning you and is obligated to delete such data in accordance with Art. 17 (1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data. c) Exceptions No right to erasure will exist, where the processing of the data is required - for exercising the right of freedom of expression and information; - for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; - for reasons of public interest in the area of public health in accordance with points (h) and (i) of ⦁ Article 9(2) as well as ⦁ Article 9(3); - for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with ⦁ Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or - for the establishment, exercise or defence of legal claims. Right to restriction of processing, Art. 18 GDPR Under the condition listed below, you may request the processing of your personal data to be restricted: - the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; - the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; - the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; - the data subject has objected to processing pursuant to ⦁ Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject. Where the processing of the personal data concerning you has been restricted, this data – with the exception of storage – shall only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Once you have obtained a restriction on the processing in accordance with the above terms, you shall be informed by the controller before the restriction of processing is lifted. Right to information, Art. 19 GDPR Once you have asserted your right to the rectification, erasure or restriction of processing of the personal data towards the controller, the controller is obligated to notify all recipients to whom the personal data concerning you has been disclosed about the rectification or erasure of the data or the processing restrictions unless this is not possible or requires an unreasonable expense or effort. You have the right to be notified about the recipients by the controller. Right to data portability, Art. 20 GDPR You have the right to receive the personal data concerning you which you have provided to the controller in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: - the processing is based on consent pursuant to point (a) of ⦁ Article 6(1) or point (a) of ⦁ Article 9(2) or on a contract pursuant to point (b) of ⦁ Article 6(1); and - the processing is carried out by automated means. In exercising this right, you also have the right to demand that the personal data concerning you is transferred directly to one controller to another, where technically feasible. This may however not restrict the freedoms and rights of others. Your right to erasure shall remain unaffected of this. To right to data portability shall not apply for a processing of personal data required for the performance of a tasks in the public interest or for the exercise of public authority vested to the controller. Right to object, Art. 21 GDPR You have the right to object on grounds relating to your particular situation and the right to object to the processing of data for advertising purposes. Further information on this is available in Section IX of this data protection declaration. Right to withdraw declaration of consent in under data protection law You can withdraw a declaration of consent on the processing of your personal data granted by you to the controller at any time. Please note that this withdrawal shall however take effect in the future; it shall not affect the lawfulness any processing of the data previously carried out on the basis of your declaration of consent. Automated individual decision-making including profiling, Art. 22 GDPR You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effect on you or which affects you significantly in a similar way. This shall not apply if the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller; (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or (3) is based on the data subject’s explicit consent. In the cases (1) and (3) as set out above, the controller will take reasonable measures to protect your rights, freedoms and legitimate interests, which at least includes the right to enforce a natural person to become involved on part of the controller, to present the own view and to contest a decision. Decisions generated solely on the basis of an automated processing may also not be based on certain categories of personal data in accordance with Art. 9 (1) GDPR, to the extent that Art. a or g GDPR does not apply and adequate measures for the protection of the rights, freedoms and legitimate interests are taken. Right to lodge complaint with a supervisory authority, Art. 77 GDPR You have the right to lodge a complaint about the processing of your personal data at a supervisory body for data protection. You can lodge your complaint to the supervisory body in the Member State of your place of residence, your place of work or the place of the alleged infringement. The supervisory body where the complaint is lodged, will inform you as the complainant on the progress and the results of the complaint as well as on the option of a judicial remedy before court in accordance with Art. 78 GDPR. Right to object in accordance with Art. 21 GDPR Right to object on grounds relating to your particular situation: You have the right to object to the processing of your personal data conducted on the basis of Art. e GDPR (processing of data in the public interest) and Art. f GDPR (data processing for the protection of the legitimate interests of the controller or a third party) at any time for grounds relating to your personal situation; this also applies for a profiling based on these provisions. After receiving your objection, we will cease to process your personal data unless we can provide compelling legitimate grounds for the processing, which take priory of your interests, rights and freedoms, or where the processing serves to establish, exercise and defend legal claims. Right to object to the processing of data for advertising purposes In individual cases, we may process your personal data for the purpose of direct advertising. You have the right to object to the processing of the personal data concerning you for the purpose of such advertising at any time; this also applies for profiling where it relates to such direct advertising activities. Once you object to a processing of your personal data for the purpose of direct advertising, your personal data will then no longer be processed for this purpose. In the above specified cases, you can object informally, preferably by sending an email with "Objection" in the header to datenschutz@zentis.de or to the postal address set out under Section I. to the attention of the "Data Protection Officer". Data security We strive take all technical and organisational measures to store your personal data in a way so that it cannot be accessed by third parties. When communicating by email, we can however not guarantee complete data security, so that we recommend you to send any confidential information by post. For reasons of security and to protect the transfer of confidential contents, this website works with SSL encryption, for example for any enquires you send to us as the operator. You can recognise an encrypted connection when the "http://" in the address bar of your bowser changes to "https://" and by the padlock symbol in your browser bar. When the SSL encryption is activated, the data you transfer to us cannot be read by third parties.
1.1 1.2 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 14.2 15.1 16.1 17.1 18.1 19.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 45.2 45.3 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1 65.1 66.1 67.1 68.1 69.1 69.2 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 89.1 90.1 91.1 92.1 93.1 94.1 94.2 94.3 95.1 96.1 96.2 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 124.2 125.1 126.1 127.1 128.1 129.1 129.2 130.1 130.2 130.3 131.1 132.1 133.1 134.1 135.1 136.1 137.1 138.1 139.1 140.1 141.1 142.1 143.1 144.1 144.2 145.1 146.1 147.1 148.1 149.1 150.1 151.1 152.1 153.1 154.1 155.1 156.1 157.1 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 165.2 166.1 167.1 168.1 169.1 170.1 171.1 172.1 173.1 174.1 175.1 176.1 177.1 178.1 179.1 180.1 180.2 180.3 181.1 182.1 183.1 184.1 185.1 186.1 187.1 188.1 189.1 190.1 190.2 191.1 192.1 192.2 193.1 194.1 195.1 196.1 197.1 198.1 199.1 200.1 201.1 202.1 203.1 204.1 205.1 206.1 207.1 208.1 209.1 210.1 211.1 212.1 213.1 214.1 215.1 216.1 217.1 217.2 218.1 219.1 220.1 220.2 221.1 221.2 222.1 222.2 223.1 223.2 224.1 225.1 226.1 226.2 227.1 228.1 229.1 230.1 231.1 232.1 233.1 234.1 235.1 236.1 237.1 238.1 239.1 240.1 241.1 242.1 243.1 243.2 243.3 244.1 245.1 246.1 247.1 248.1 249.1 250.1 251.1 252.1 252.2 253.1 254.1 255.1 255.2 256.1 257.1 258.1 258.2 259.1 260.1 261.1 262.1 262.2 263.1 264.1 265.1 266.1 269.1 270.1 271.1 272.1 272.2 273.1 274.1 274.2 275.1 276.1 279.1 280.1 281.1 282.1 283.1 284.1 285.1 286.1 287.1 288.1 289.1 289.2 290.1 291.1 292.1 293.1 294.1
INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c POLITIKA PRIVATNOSTI INTERIJER MVA d.o.o. kao voditelj obrade osobnih podataka brine se za zaštitu Vaših osobnih podataka u skladu sa svim važećim zakonima koji reguliraju zaštitu podataka, osobito u skladu s Općom uredbom o zaštiti osobnih podataka (EU) 2016/679 (”GDPR”), te Zakonom o provedbi Opće uredbe o zaštiti podataka, a Vaše osobne podatke obrađuje samo na temelju pravnih osnova ili ako ste dali svoju suglasnost. U ovoj politici privatnosti objašnjavamo koje podatke (uključujući osobne podatke) obrađujemo, s kime ih dijelimo, koliko ih dugo čuvamo, te koja su Vaša prava vezano uz zaštitu osobnih podataka. Ova politika se odnosi na obradu Vaših osobnih podataka bilo da ste u radnom odnosu sa nama, kupac naših usluga, naš poslovni partner, posjećujete našu web stranicu ili nam šaljete upite o našim uslugama. TKO OBRAĐUJE VAŠE PODATKE INTERIJER MVA d.o.o. (u daljnjem tekstu: mi, Voditelj obrade) kao voditelj obrade Vaših podataka sa sjedištem u: Vrbice 15 c 10 250 Zagreb-Lučko Društvo zastupano po Direktorici Antoneli Bilobrk. Možete nas kontaktirati na slijedeće načine: E-mail: interijer-mva@zg.htnet.hr KOJE PODATKE OBRAĐUJEMO Ako ste naš zaposlenik obrađujemo Vaše osobne podatke: Neophodne podatke vezane za radni odnos koje prikupljamo od Vas prilikom zaposlenja, kao što su npr. spol, ime, prezime, adresa, broj telefona, datum rođenja, državljanstvo, osobni identifikacijski broj, broj osiguranika, podatke o Vašem obrazovanju i prijašnjem zaposlenju, te ostalo. Također tijekom radnog odnosa prikupljamo od Vas i podatke za ostvarivanje prava, samoinicijativno od Vas, na naš zahtjev ili zahtjev treće strane (državna tijela), i to podatke kao što su podaci o bolovanjima, promjeni prebivališta, trudnoćama, rođenju djeteta, rodiljskom i roditeljskom dopustu, invaliditetu, braku ili usporedivim promjenama osobnih statusa. Također tijekom radnog odnosa prikupljamo informacije o Vašem korištenju naše informatičke infrastrukture, npr. određene podatke o Vašem poslovnom e-mailu, pristupu internetu, korištenju fiksne i mobilne usluge ili pristup i korištenje drugih aplikacija, programa i uređaja koji Vam dajemo na raspolaganje. Dužni ste nam dati točne, gore navedene neophodne podatke, jer bez tih podataka nismo u mogućnosti ostvariti, odnosno održavati radni odnos, niti ispuniti ugovorne obveze prema Vama, pa ste tako sami odgovorni za pretrpljenu štetu nastalu zbog neispunjavanja ugovornih obveza sa naše strane, koje se dogodilo jer ste nam uskratili ili dali netočne neophodne osobne podatke. Ako od Vas dobijemo dodatne podatke, naznačiti ćemo je li pružanje takvih podataka utemeljeno na pravnoj osnovi ili pravnoj obvezi ili je neophodno za izvršavanje ugovora (osobito Vašeg ugovora o radnom odnosu). Ako ste naš kupac/poslovni partner obrađujemo Vaše osobne podatke: Naši poslovni odnosi zahtijevaju obradu podataka koji se odnose na naše kupace, a ako se ti podaci odnose na fizičku osobu, oni se smatraju osobnim podacima (ako ste npr. privatna osoba ili obrtnik i INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c i stupite u poslovni odnos s nama). Bez obzira na pravni oblik naših ugovornih partnera, obrađujemo podatke o kontakt osobama koje rade za našeg kupca. Obrađujemo opće podatke o našim kupcima i kontakt osobama, te podatke o poslovnom odnosu koji imaju s nama, a to su svi podaci koji su nam dani na raspolaganje pri uspostavljanju poslovnog odnosa ili koje smo zatražili od naših kupaca, odnosno kontakt osoba, npr. ime, adresa i kontakt podaci i sve podatke koje prikupljamo i obrađujemo u vezi s uspostavljanjem poslovnog odnosa kao što su pojedinosti u sklopljenim ugovorima. Obrađujemo osobne podatke prikupljenje tijekom poslovnog odnosa i to ne samo ažuriranjem osnovnih podataka, a to su podaci o izvršavanju ugovornih obveza naših kupaca na temelju sklopljenih ugovora, podatke koje nam priopći kupac ili kontakt osoba tijekom tijekom našeg poslovnog odnosa, samoinicijativno ili na naš zahtjev i osobne podatke koje nam je dao kupac, kontakt osoba ili treća strana tijekom našeg poslovnog odnosa. U mjeri dopuštenoj zakonom, osobne podatke kupca dobivene od treće strane, kao što su podaci o poslovnom položaju/rejtingu naših kupaca, obrađujemo ako je to potrebno za procjenu financijskih rizika (npr. kašnjenja plaćanja). Ako ste posjetitelj naše Internet (web) stranice obrađujemo Vaše osobne podatke: Našoj Internetskoj stranici možete pristupiti bez unošenja osobnih podataka (kao što su Vaše ime i prezime, poštanska adresa ili e-mail adresa). U tom slučaju također moramo obrađivati određene podatke kako bismo Vam omogućili pristup našoj Internetskoj stranici, te funkcioniranje stranice i to putem kolačića (cookies). Naša web stranica koristi samo kolačiće nužne za funkcioniranje. Na našoj web stranici možemo prikupljati podatke koji nam ne omogućuju donošenje izravnih zaključaka o Vašem identitetu, ali u određenim slučajevima, osobito u kombinaciji s drugim podacima, ti se podaci u skladu s primjenjivim zakonima o zaštiti osobnih podataka, ipak mogu smatrati osobnim podacima. Na našoj web stranici možemo prikupljati i podatke koji nam ne omogućuju da Vas, izravno ili neizravno identificiramo; to je slučaj primjerice s prikupljanjem podataka o svim korisnicima ove Internetske stranice, te se takvi statistički/skupni podaci ne smatraju osobnim podacima. Ako ste kandidat za posao obrađujemo Vaše osobne podatke: Ako ste se javili na naš oglas za posao, te nam poslali životopis, tražimo od Vas za obradu sljedeće osobne podatke: spol, ime, prezime, prebivalište, broj telefona, e-mail, datum rođenja, državljanstvo, podatke o Vašem obrazovanju i prijašnjem zaposlenju. Molimo da nam ne šaljete Vaše podatke koje nismo tražili i koji nisu potrebni za natječaj za posao, jer takve podatke odmah trajno brišemo, kao i podatke neuspješnih kandidata za posao. Ako želite da Vaš životopis zadržimo za buduće natječaje za posao, molimo navedite to u životopisu, kao i na koji rok želite da čuvamo Vaš životopis, što će se smatrati Vašom privolom za obradom Vaših podataka. Privola za obradu daje se dobrovoljno, te može biti povučena u bilo kojem trenutku što ne utječe na obradu do trenutka povlačenja. ZA KOJE SVRHE I NA KOJOJ PRAVNOJ OSNOVI OBRAĐUJEMO VAŠE OSOBNE PODATKE Obrađujemo nužne osobne podatke u svrhu radnog odnosa ili primanja u dani odnos. Pravna osnova takve obrade nalazi se u Zakonu o radu, Zakonu o isplati plaće, Zakonu o porezu na dohodak, Pravilniku o radu i ostalim važećim zakonskim propisima, kao i legitimnom interesu za ispunjavanje ugovornih obveza. Obrađujemo osobne podatke u svrhu poštivanja zakonskih obveza kojima smo podvrgnuti, a zakonske obveze mogu uključivati obvezno otkrivanje osobnih podataka tijelima socijalnog, mirovinskog i zdravstvenog osiguranja, te poreznim službama. Podatke proslijeđujemo na njihov zahtjev ili postupamo prema zakonskim odredbama. U najmanjoj mogućoj mjeri koja je potrebna, obrađujemo osobne podatke u svrhu radnog odnosa, radnog procesa, te u svrhu naših ostalih legitimnih interesa ili legitimnih interesa treće strane. INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c Legitimni interes je pravna osnova za obradu sve dok nisu jače od slobode i prava pojedinca kod pojedine obrade. Legitimni interes može uključivati: – administracija podataka o kupcima; – ostvarivanje pravnih zahtjeva ili obranu od pravnih zahtjeva; – sprečavanje, istraga, otkrivanje ili progon kaznenih djela; – održavanje sigurnosti naših sustava informacijskih tehnologija; – održavanje sigurnosti naših prostora i infrastrukture; – troškove i kontrolu broja zaposlenih u okviru odjela financija i računovodstva; – popunjavanje slobodnih radnih mjesta, promicanje zaposlenika; – dobivanje subvencija i subvencioniranog financiranja iz raspoloživih javnih izvora; – procese za zapošljavanje i razvoj karijera; – promoviranje/provedba zaštite na radu. Posebne kategorije osobnih podataka (npr. zdravstvene podatke, podatke o članstvu u sindikatu, podatke maloljetnika), obrađujemo za izvršavanje obveza i ostvarivanja Vaših prava u području radnog prava i prava o socijalnoj sigurnosti, te socijalnoj zaštiti, osim ako se obrada odnosi na osobne podatke za koje je očito da ste ih Vi javno izjavili ili je obrada nužna za uspostavu, ostvarivanje ili obranu pravnih zahtjeva ili kad god sudovi djeluju u sudbenom svojstvu. Ako nam prilikom procesa zapošljavanja ili tijekom radnog odnosa date privolu za obradu osobnih podataka, obrađujemo one osobne podatke koji su obuhvaćeni privolom i to samo i izričito u svrhe navedene u toj suglasnosti. Ne zaboravite da danu privolu možete povući u svakom trenutku kontaktiranjem voditelja obrade (nas), na bilo koji kontakt naveden u ovoj Politici, a preporučamo da nas kontaktirate na e-mail: interijer-mva@zg.htnet.hr KOLIKO DUGO ČUVAMO VAŠE PODATKE Vaše osobne podatke uglavnom čuvamo (pohranjujemo) sve dok postoji legitiman interes za zadržavanje takvih podataka (istek svrhe obrade) i dok ne prevladava Vaš interes za suzdržavanje od daljnje obrade. Ako više i ne postoji legitiman interes, podatke možemo i dalje pohranjivati ako za to postoji zakonska obveza (npr. pridržavanje zakonskih obveza o čuvanju). Osobne ćemo podatke obrisati, čak i ako ispitanik ne poduzme nikakvu akciju, čim daljnje zadržavanje više nije potrebno za potrebe za koje su podaci prikupljeni ili na drugi način obrađeni ili ako daljnje zadržavanje na neki drugi način nije dopušteno zakonom. Općenito podatke prikupljenje u tijeku radnog ili poslovnog odnosa zadržati ćemo barem do kraja radnog, odnosno poslovnog odnosa. Podaci se u svakom slučaju brišu ako su postignute svrhe prikupljanja ili obrade. To može biti tek nakon završetka poslovnog odnosa s nama. Ako se osobni podaci trebaju pohraniti zbog zakonske obveze čuvanja, oni se čuvaju do kraja odgovarajućeg razdoblja čuvanja. Ako se osobni podaci obrađuju samo u skladu sa zakonskom obvezom čuvanja, pristup takvim podacima uglavnom je ograničen, stoga su podaci dostupni samo ako je to potrebno u svrhu obveze čuvanja. ZAŠTITA PODATAKA Uzimajući u obzir troškove provedbe, te prirodu, opseg, kontekst i svrhe obrade, kao i rizik različitih razina vjerojatnosti i ozbiljnosti za prava i slobode pojedinaca, poduzimamo sve moguće, razumne, tehničke i organizacijske mjere kako bi zaštitili Vaše osobne podatke od gubitka, uništavanja, neovlaštenog pristupa i dijeljenja i to na način: – pristup Vašim osobnim podacima imaju samo naši zaposlenici kojima su te informacije potrebne da bi izvršili naše poslovne aktivnosti ili Vaše zahtjeve; – svi naši zaposlenici koji imaju pristup osobnim podacima potpisali su Izjavu o povjerljivosti; INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c – podatke spremamo u posebno odvojene foldere (posebne foldere na osobnim računalima, zasebna mjesta u zaključane ormare), sa jasno definiranim pravima pristupa; – implementirali smo odgovarajuće tehničke i organizacijske mjere kako bismo spriječili gubitak Vaših podataka, izmjenu, krađu ili pristup neovlaštene treće strane, te također koristimo backup sustav na vanjske memorije; – osigurali smo odgovarajuće fizičke, elektroničke i upravljačke sustave kojima štitimo i čuvamo podatke koje prikupljamo, koristimo kontrolu pristupa ureda i svakog zasebnog odjela, kao i kontrolu pristupa pojedinom računalu. – sa svim našim izvršiteljima obrade podataka potpisali smo Ugovor o povjerljivosti; – naša elektronička pošta automatski se briše nakon 30 dana; – pri obradi podataka koristi se podjela uloga, a osobni podaci se obrađuju samo na ograničenom broju računala unutar odjela knjigovodstva; – redovito se preispituju svrhe obrade osobnih podataka, te se provjeravaju rokovi čuvanja osobnih podataka. TKO PRIMA VAŠE PODATKE / TKO IMA PRISTUP Vaši se osobni podaci uglavnom obrađuju unutar našeg društva, u odjelu knjigovodstva, a proslijeđuju se po potrebi odjelu financija i marketinga. Na temelju koncepta upravljanja ulogama/pravima, pristup osobnim podacima ograničen je na funkcije i opseg potreban za odgovarajuću svrhu obrade. Ako je potrebno i u mjeri dopuštenoj zakonom, Vaše osobne podatke možemo proslijediti i primateljima izvan našeg društva. Takvi vanjski primatelji mogu biti: – pružatelji usluga koji nam na temelju posebnih ugovora pružaju određene usluge, uključujući i obradu osobnih podataka, kao i odobreni kooperanti naših pružatelja usluga (podizvršitelji), primjerice za usluge kao što su prikupljanje podataka, računovodstvenih usluga, pravnih usluga, usluga zaštite zdravlja i sigurnosti na radu, upravljanja ljudskim potencijalima; – privatna ili javna tijela, u mjeri u kojoj smo dužni prenositi Vaše osobne podatke na temelju zakonske obveze kojoj podliježemo; – poslovni partneri i kupci, u mjeri u kojoj je prijenos osobnih podataka (primjerice pojedinosti o Vašem poslovnom kontaktu ili osposobljenosti za određen posao) nužan za izvršavanje poslovnog odnosa i Vašeg radnog odnosa. PRIJENOS PODATAKA U ZEMLJE IZVAN EU / EGP Vaši osobni podaci obrađuju se samo unutar Europske unije ili Europskog gospodarskog prostora, a osobne podatke nemamo namjeru proslijeđivati u druge zemlje (”treće zemlje”). AUTOMATIZIRANO DONOŠENJE ODLUKA U tijeku procesa zapošljavanja i tijekom radnog odnosa ne koristimo automatsko donošenje odluka (uključujući profiliranje) u smislu članka 22. GDPR-a. Ako takve postupke primjenimo u budućnosti, obavijestiti ćemo Vas zasebno u skladu s primjenjivim zakonskim propisima. PRAVA ISPITANIKA Na temelju Opće Uredbe o zaštiti podataka (GDPR), na raspolaganju imate slijedeća prava: Pravo na prigovor Ovo pravo omogućuje Vam da prigovorite obradi Vaših osobnih podataka, u onim slučajevima kada obradu Vaših osobnih podataka vršimo na jednoj od slijedećih pravnih osnova: – zato što je obrada osobnih podataka u našem legitimnom interesu; – kako bismo izvršili ugovornu obvezu; – u znanstvene, istraživačke, marketinške ili statističke svrhe. INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c U ovim okolnostima najčešće će biti primjenjiv slučaj obrade Vaših osobnih podataka na temelju legitimnog interesa. Ako nismo u mogućnosti pokazati da imamo uvjerljivu i legitimnu osnovu za obradu Vaših osobnih podataka, a koja nadilazi Vaša prava i interese, prestat ćemo s obradom Vaših osobnih podataka. Pravo na povlačenje privole U slučajevima u kojima smo pribavili Vašu privolu za određene radnje, ovlašteni ste povući danu privolu u bilo kojem trenutku i mi ćemo prestati s korištenjem Vaših osobnih podataka u tu svrhu, osim ako smatramo da postoji alternativna pravna osnova kojom bismo opravdali daljnju obradu Vaših osobnih podataka u tu svrhu, u kojem slučaju ćemo Vas o tome obavijestiti. Pravo na pristup Ispitanik ima pravo dobiti od voditelja obrade potvrdu obrađuju li se osobni podaci koji se odnose na njega, te ako se takvi osobni podaci obrađuju, pristup osobnim podacima i sljedećim informacijama: – svrsi obrade; – kategorijama osobnih podataka o kojima je riječ; – primateljima ili kategorijama primatelja kojima su osobni podaci otkriveni ili će im biti otkriveni, osobito primateljima u trećim zemljama ili međunarodnim organizacijama; – ako je moguće, predviđenom razdoblju u kojem će osobni podaci biti pohranjeni ili ako je moguće, kriterijima korištenima za utvrđivanje tog razdoblja; – postojanju prava da se od voditelja obrade zatraži ispravak ili brisanje osobnih podataka ili ograničavanje obrade osobnih podataka koji se odnose na ispitanika ili prava na prigovor na takvu obradu; – pravo na podnošenje pritužbe nadzornom tijelu; – ako se osobni podaci ne prikupljaju od ispitanika, svakoj dostupnoj informaciji o njihovu izvoru; – postojanju automatiziranog donošenja odluka, što uključuje izradu profila; – ako se osobni podaci prenose u treću zemlju ili međunarodnu organizaciju, ispitanik ima pravo biti informiran o odgovarajućim zaštitnim mjerama u skladu s člankom 46. GDPR-a, koje se odnose na prijenos. Zato ste ovlašteni u bilo kojem trenutku zatražiti nas presliku informacija koje imamo o Vama, kao i zatražiti nas da izmijenimo, ažuriramo ili izbrišemo te podatke. Možda ćemo od Vas tražiti dodatne podatke o Vašem zahtjevu. Ako Vam omogućimo uvid u podatke koje o Vama imamo, to ćemo učiniti bez naknade, osim ako obrada zahtjeva nije ”očito neosnovana ili pretjerana”. U slučaju da zatražite dodatne preslike ovih podataka od nas, moguća je naplata razmjernog administrativnog troška. Vaš zahtjev može biti odbijen u slučajevima u kojima je to pravno i zakonski dopušteno. Pravo na brisanje (pravo na zaborav) U određenim okolnostima, ovlašteni ste zatražiti da ”izbrišemo” Vaše osobne podatke. Primjerice, ovo pravo imate u slijedećim slučajevima: – Vaši podaci nam više nisu potrebni u svrhu za koju su prikupljeni; – povukli ste privolu koju ste nam dali za obradu Vaših osobnih podataka, te nema druge pravne osnove da nastavimo s obradom Vaših osobnih podataka (u slučajevima kada je pravni temelj za obradu osobnih podataka privola); – podaci su obrađeni bez valjanje pravne osnove; – potrebno je brisanje podataka kako bismo se uskladili s našim obvezama koje proizlaze na temelju zakona; – prigovorili ste obradi osobnih podataka, a mi nismo u mogućnosti dokazati postojanje legitimne pravne osnove koja nadilazi Vaša prava i interese na temelju koje bismo bili ovlašteni nastaviti obrađivati Vaše osobne podatke. Ovlašteni smo odbiti Vaš zahtjev za brisanje podataka samo u ograničenom broju slučajeva, te ćemo Vam u takvim slučajevima detaljno obrazložiti razloge odbijanja. Pravo na ograničenje obrade U određenim okolnostima imate pravo zatražiti da ograničimo obradu Vaših osobnih podataka, primjerice, u slučaju da osporite točnost osobnih podataka koje imamo o Vama ili ako prigovorite obradi Vaših osobnih podataka na temelju našeg legitimnog interesa. Ako smo podijelili Vaše osobne INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c podatke s trećim osobama, obavijestiti ćemo ih o ograničenju obrade, osim ako to nije moguće ili bi izazvalo nerazmjerne teškoće. Obavijestiti ćemo Vas o bilo kakvom prestanku ograničenja u obradi Vaših osobnih podataka. Pravo na ispravak Imate pravo zatražiti ispravak bilo koje netočne ili nepotpune informacije koje imamo o Vama. slučaju da smo podatke o Vama podijelili s trećim osobama, obavijestiti ćemo ih o ispravku, osim ako to nije moguće ili bi izazvalo nerazmjerne teškoće. Ovlašteni ste i zatražiti podatke o trećim osobama kojima smo ustupili netočne ili nepotpune osobne podatke. U slučaju da smatramo da nije razumno moguće postupiti po Vašem zahtjevu, o tome ćemo Vas obavijestiti, te ćemo obrazložiti razloge takve odluke. Pravo na prijenos Imate pravo zatražiti prijenos Vaših osobnih podataka drugom voditelju obrade. Ovo pravo zapravo znači da je moguće tražiti da Vaši osobni podaci budu ustupljeni, odnosno preneseni trećoj osobi. Kako bismo Vam to omogućili ustupiti ćemo Vam podatke o Vama u uobičajenom, strojno čitljivom obliku, tako da osobne podatke možete prenjeti trećoj osobi. Takav prijenos je moguć ako se obrada temelji na privoli ili na ugovoru, te se obrada provodi automatiziranim putem. Pravo na pritužbu U svakom trenutku možete podnjeti pritužbu nadzornom tijelu za zaštitu osobnih podataka, ako mislite da su povrijeđena Vaša prava ili niste dobili od nas informacije o obradi Vaših podataka. U Hrvatskoj je to Agencija za zaštitu osobnih podataka (AZOP), koju je moguće kontaktirati na slijedeći način: Agencija za zaštitu osobnih podataka Martićeva ulica 14 10 000 Zagreb E-mail: azop@azop.hr Kako nas kontaktirati U slučaju da želite iskoristiti neko od navedenih prava ili povući privolu koju ste dali za obradu Vaših osobnih podataka, možete nas kontaktirati na kontakt podatke navedene u ovoj Politici. Molimo Vas da primite na znanje da ćemo čuvati zapis o našoj komunikaciji u svrhu ostvarivanja Vaših prava ili davanja Vam informacija o obradi Vaših podataka. Odgovor na Vaš upit dali ćemo najkasnije u roku 30 dana. Možete nas u svako doba kontaktirati na slijedeći način: E-mail: interijer-mva@zg.htnet.hr ZAVRŠNE ODREDBE – U slučaju pritužbi vezanih uz pridržavanje odredbi ove Politike i drugih zakonskih propisa iz područja zaštite osobnih podataka, istražiti ćemo u potpunosti sve elemente pritužbe, te ćemo ih pokušati rješiti u najkraćem mogućem roku. – Ova Politika privatnosti podložna je promjenama zbog uvođenja novih tehnologija i novih obrada podataka, te će aktualna verzija biti na našoj Internet stranici, a ako će promjene ove Politike utjecati na Vaša prava i slobode, biti ćete pravovremeno obaviješteni. – Ova Politika je obavezujuća za sve zaposlenike društva INTERIJER MVA d.o.o. kao i izvršitelje obrade koje angažira INTERIJER MVA d.o.o, te izvršitelje izvršitelja (podizvršitelji). INTERIJER MVA d.o.o. / OIB: 19652126492 / 10250 Zagreb-Lučko, Vrbice 15 c – Svako nepridržavanje ove Politike privatnosti od strane zaposlenika, smatrati će se povredom radne obveze. – Svako nepridržavanje ove Politike privatnosti od strane izvršitelja obrade, rezultirati će raskidom poslovne suradnje. Ova Politika privatnosti stupa na snagu 25.05.2018. godine.