http___www.kbz.hr_kreditna-banka-zagreb_gdpr-kbz_1.xml
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 12.2 12.3 12.4 12.5 13.1 13.2 13.3 14.1 14.2 14.3 14.4 15.1 15.2 15.3 16.1 16.2 16.3 17.1 17.2 18.1 18.2 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 30.2 31.1 32.1 32.2 32.3 32.4 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 40.2 40.3 41.1 41.2 42.1 43.1 43.2 43.3 43.4 44.1 44.2 44.3 44.4 45.1 45.2 46.1 46.2 47.1 47.2 47.3 48.1 49.1 49.2 49.3 49.4 49.5 50.1 50.2 50.3 51.1 52.1 52.2 53.1 53.2 54.1 55.1 56.1
Privacy Policy Introduction We are committed to safeguarding the privacy of our website visitors and customers. This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and customers; in other words, where we determine the purposes and means of the processing of that personal data. “(1) ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”. Credit This document was created using a template from SEQ Legal (https://seqlegal.com). How we use your personal data In this section we have set out: - the general categories of personal data that we may process; - the purposes for which we may process personal data; and - the legal bases of the processing. We may process your personal data that are provided in the course of the use of our services (“service data“). The service data may include name, email address and telephone number. The source of the service data is you, as provided by you via website entry forms. The service data may be processed for the purposes of operating our website, providing our services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is consent; our legitimate interests, namely the proper administration of our business or the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. We may process information contained in any Online Enquiry you submit to us regarding our services (“enquiry data“). The enquiry data may be processed for the purposes of offering, marketing and selling relevant services to you. The legal basis for this processing is consent; our legitimate interests, namely the proper administration of our business or the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. We may process information relating to transactions, including purchases of goods and services, that you enter into with us (“transaction data“). The transaction data may include your contact details, your email address, your telephone number, job title, bank account details, and the transaction details. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our business. We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (“notification data“). The notification data may be processed for the purposes of sending you the relevant newsletters. The legal basis for this processing is consent. We may process information contained in or relating to any communication that you send to us (“correspondence data“). The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our business or the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others. We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks. In addition to the specific purposes for which we may process your personal data set out in this section, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. Providing your personal data to others We may disclose your personal data to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. Retaining and deleting personal data This section sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data. Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. We will retain your personal data as follows: (a) Service data, Enquiry data and Notification data will be retained for a minimum period of 12 months following submission via our website, and for a maximum period of 5 years following submission via our website. (b) Transaction data and Correspondence data will be retained for a minimum period of 12 years following the completion of contractual obligations. Notwithstanding the other provisions of this section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. Amendments We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy. Your rights In this section, we have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights. Your principal rights under data protection law are: (a) the right to access; (b) the right to rectification; (c) the right to erasure; (d) the right to restrict processing; (e) the right to object to processing; (f) the right to data portability; (g) the right to withdraw consent. You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data subject to: (a) the supply of appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport certified by a solicitor or bank plus an original copy of a utility bill showing your current address). These data sources will not be retained once identification has been confirmed. You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed. In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; and you withdraw consent to consent-based processing. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims. In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest. You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal. You may exercise any of your rights in relation to your personal data by written notice to us at the contact details included below. Cookies used by our service providers We may process data about your use of our website (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of the website. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available at: https://www.google.com/policies/privacy/. Our details This website is owned and operated by Coombs (Canterbury) Ltd. We are registered in England and Wales under registration number 2040829, and our registered office is at Rodney House, 10/16 Wincheap, Canterbury, Kent CT1 3BE. Our principal place of business is at Rodney House, 10/16 Wincheap, Canterbury, Kent CT1 3BE. You can contact us: (a) by post, to the postal address given above; (b) using our website Enquire Online form; (c) by email, using inmail@coombs-canterbury.co.uk
1.1 2.1 3.1 4.1 4.2 4.3 4.4 5.1 6.1 7.1 7.2 7.3 7.4 8.1 9.1 9.2 9.3 10.1 10.2 10.3 10.4 11.1 12.1 13.1 13.2 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1
Odabirom poveznice s desne strane (Izjava) pristupit ćete Izjavi o zaštiti privatnosti na internetskim stranicama Kreditne banke Zagreb d.d. OPĆA UREDBA O ZAŠTITI PODATAKA Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka (dalje u nastavku: Uredba), primjenjivat će se u Republici Hrvatskoj od 25. svibnja 2018. godine. Uredba predstavlja bitan napredak u području zaštite osobnih podataka kojom se osigurava zaštita prava i temeljnih sloboda pojedinaca u vezi s obradom njihovih osobnih podataka. Isto tako, utvrđuju se pravila povezana u pogledu obrade osobnih podataka i pravila povezana sa slobodnim kretanjem osobnih podataka. Nadalje, općom Uredbom se osigurava ujednačeno i jednoobrazno postupanje nadzornih tijela za zaštitu osobnih podataka, što će imati za posljedicu jednostavniju i jednaku zaštitu prava svih pojedinaca u Europskoj uniji. Uredba propisuje prava pojedinca, obveze Banke koja obrađuju osobne podatke kao voditelja obrade, odnosno izvršitelja. Uredba se primjenjuje na sve državne institucije koje su dužne obrađivati osobne podatke u okviru njenih odredaba, osim u slučajevima obrade osobnih podataka koju obavljaju nadležna tijela u svrhu sprečavanja, istrage, otkrivanja ili progona kaznenih djela ili izvršavanja kaznenih sankcija, uključujući zaštitu od prijetnji javnoj sigurnosti i njihova sprečavanja. OSOBNI PODACI U SMISLU OPĆE UREDBE Osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi. Pojedinac čiji se identitet može utvrditi jest osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca. Jako je širok spektar što su osobni podaci, jednostavnije rečeno to su: ime i prezime, email adresa, slika, bankovni podaci, identifikacijski broj, glas, adresa, broj telefona, IP adresa, objava na društvenim mrežama, povijest bolesti, popis najdraže literature ili pjesme, ako takvi podaci mogu fizičku osobu čiji se identitet može utvrditi, dovesti do izravnog ili neizravnog identificiranja uz pomoć pojedinog identifikatora. Neposredno prije prikupljanja osobnih podataka subjekt koji ih prikuplja ima obvezu pružanja informacija u koju svrhu se podaci prikupljaju, na temelju koje pravne osnove, komu se podaci otkrivaju te o pravu pojedinca da svojim podacima pristupi, da zahtijeva njihov ispravak ili eventualno brisanje. OBRADA OSOBNIH PODATAKA Obrada osobnih podataka trebala bi biti osmišljena tako da bude u službi čovječanstva. Pravo na zaštitu osobnih podataka nije apsolutno pravo, mora ga se razmatrati u vezi s njegovom funkcijom u društvu te ga treba ujednačiti s drugim temeljnim pravima u skladu s načelom proporcionalnosti. Ovom se Uredbom poštuju sva temeljna prava i uvažavaju slobode i načela priznata Poveljom koja su sadržana u ugovorima, osobito poštovanje privatnog i obiteljskog života, doma i komuniciranja, zaštita osobnih podataka, sloboda mišljenja, savjesti i vjeroispovijedi, sloboda izražavanja i informiranja, sloboda poduzetništva, pravo na učinkoviti pravni lijek i pošteno suđenje te pravo na kulturnu, vjersku i jezičnu raznolikost. Obrada obuhvaća radnje poput prikupljanja, bilježenja, čuvanja, uvida, otkrivanja, prenošenja ili uništavanja. Svaka obrada osobnih podataka trebala bi biti zakonita i poštena. Za pojedince bi trebalo biti transparentno kako se osobni podaci koji se odnose na njih prikupljaju, upotrebljavaju, daju na uvid ili na drugi način obrađuju, kao i do koje se mjere ti osobni podaci obrađuju ili će se obrađivati. Načelom transparentnosti traži se da svaka informacija i komunikacija u vezi s obradom tih osobnih podataka bude lako dostupna i razumljiva te da se upotrebljava jasan i jednostavan jezik. PRAVNI TEMELJ OBRADE Za zakonitu obradu osobnih podataka potrebno je ispuniti barem jedan od narednih pravnih temelja: - (a) ispitanik je dao privolu za obradu svojih osobnih podataka u jednu ili više posebnih svrha - privola je dobrovoljan, poseban, informiran i nedvosmislen pristanak ispitanika na obradu osobnih podataka koji se odnose na njega, poput pisane izjave, uključujući elektroničku, ili usmenu izjavu. Uredbom se među ostalim utvrđuje da uvjet dobrovoljnosti nije ispunjen ako ispitanik nema istinski ili slobodan izbor ili ako nije u mogućnosti odbiti ili povući privolu bez posljedica - (b) obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka ili kako bi se poduzele radnje na zahtjev ispitanika prije sklapanja ugovora (npr. obrada podataka klijenta radi izvršenja ugovora o kreditu ili obrada podataka klijenta radi sklapanja neke usluge) - (c) obrada je nužna radi poštovanja pravnih obveza voditelja obrade (npr. slanje podataka o radnicima HZZO-u ili HZMO-u ili slanje podataka stranaka od strane javnog bilježnika Poreznoj upravi sukladno posebnim propisima) - (d) obrada je nužna da bi se zaštitili ključni interesi ispitanika ili druge fizičke osobe (npr. otkrivanje od strane nadležnih tijela podataka jednog roditelja drugomu radi uzdržavanja djeteta) - (e) obrada je nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade (npr. zbog službene ovlasti Državnog zavoda za statistiku pojedini voditelji obrade su dužni tom zavodu dostavljati određene osobne podatke) - (f) obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane, osim kada su od tih interesa jači interesi ili temeljna prava i slobode ispitanika koji zahtijevaju zaštitu osobnih podataka, osobito ako je ispitanik dijete, s time da se ova točka ne odnosi na obradu koju provode tijela javne vlasti pri izvršavanju svojih zadaća (npr. legitimni interes vlasnika nekretnine da postavi sustav video nazora da bi spriječio realan rizik po njegovoj imovini) PRAVA POTROŠAČA/ISPITANIKA U sklopu Opće uredbe definirana su i karakteristična prava: - Transparentnost - pružanje informacija prilikom prikupljanja osobnih podatak kada voditelj obrade mora među ostalim informacijama obavijestiti ispitanika i o svojem identitetu i kontakt podacima, svrhama obrade i pravnoj osnovi za obradu podataka, primateljima, iznošenju u treće zemlje, razdoblju pohrane, mogućnosti povlačenja privole itd. - Pristup podacima - dobiti od voditelja obrade potvrdu obrađuju li se osobni podaci koji se odnose na njega te ako se takvi osobni podaci obrađuju, pristup osobnim podacima i informacije, među ostalim, o obrađenim osobnim podacima, o svrsi obrade, roku pohrane, iznošenju u treće zemlje itd. - Pravo na ispravak - ispitanik ima pravo zahtijevati ispravak netočnih osobnih podataka koji se na njega odnose, a uzimajući u obzir svrhe obrade, ispitanik ima pravo dopuniti nepotpune osobne podatke, među ostalim i davanjem dodatne izjave - Brisanje („pravo na zaborav“) - ispitanik ima pravo od voditelja obrade ishoditi brisanje osobnih podataka koji se na njega odnose bez nepotrebnog odgađanja te voditelj obrade ima obvezu obrisati osobne podatke bez nepotrebnog odgađanja ako, među ostalim, osobni podaci više nisu nužni u odnosu na svrhu obrade, ili je ispitanik povukao privolu za obradu, ili su osobni podaci nezakonito obrađeni - Pravo na ograničenje obrade - u pojedinim situacijama (npr. kada je točnost podataka osporavana ili kada pravom na brisanje ispitanik želi da voditelj obrade zadrži njegove podatke) ispitanik ima pravo zahtijevati da se obrada ograniči uz iznimku pohrane i nekih drugih vrsta obrade - Pravo na prenosivost - ispitanik ima pravo zaprimiti svoje osobne podatke, a koje je pružio voditelju obrade, uobičajeno upotrebljavanom i strojno čitljivom formatu te ima pravo prenijeti te podatke drugom voditelju obrade bez ometanja od strane voditelja obrade kojem su osobni podaci pruženi, ako se obrada temelji na privoli ili ugovoru i provodi automatiziranim putem - Pravo na prigovor - ispitanik ima pravo uložiti prigovor na obradu osobnih podataka ako se ista temelji na zadaće od javnog interesa, na izvršavanje službenih ovlasti voditelja obrade ili na legitimne interesa voditelja obrade (uključujući i profiliranje), tada voditelj obrade ne može više obrađivati osobne podatke ispitanika osim ako dokaže da njegovi legitimni razlozi za obradu nadilaze interese ispitanika te radi zaštite pravnih zahtjeva, također ako se ispitanik protivi obradi za potrebe izravnog marketinga, osobni podaci više se ne smiju obrađivati - Pravo usprotiviti se na automatizirano pojedinačno donošenje odluka, uključujući izradu profila (profiliranje) - pravo usprotiviti se donošenju automatiziranih pojedinačnih odluka (profiliranje) - ispitanik ima pravo da se na njega ne odnosi odluka koja se temelji isključivo na automatiziranoj obradi, uključujući izradu profila, koja proizvodi pravne učinke koji se na njega odnose ili na sličan način značajno na njega utječu, osim ako je takva odluka potrebna za sklapanje ili izvršenje ugovora između ispitanika i voditelja obrade podataka, ako je dopuštena pravom Unije ili pravom države članice koji se propisuju odgovarajuće mjere zaštite prava i sloboda te legitimnih interesa ispitanika ili temeljena na izričitoj privoli ispitanika DOKUMENTACIJA I KORISNE POVEZNICE