http___www.junkers.ba_upute-o-zastiti-podataka__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 20.3 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 31.2 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 45.2 45.3 45.4 46.1 46.2 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 68.2 69.1 69.2 69.3 69.4 70.1 71.1 71.2 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 85.2 86.1 87.1 87.2 88.1 88.2 88.3 89.1 89.2 90.1 91.1 92.1 92.2 93.1 93.2 94.1 94.2 94.3 95.1 95.2 96.1 97.1 98.1 98.2 98.3 99.1 100.1 101.1 102.1 102.2 102.3 103.1 103.2 104.1 104.2 105.1 105.2 106.1 106.2 107.1 107.2 108.1 108.2 108.3 109.1 110.1 110.2 111.1 112.1 113.1 113.2 113.3 113.4 114.1 114.2 115.1 115.2 115.3 115.4 115.5 116.1 117.1 117.2 117.3 117.4 118.1 119.1 120.1 121.1 122.1 123.1 124.1 125.1 125.2 125.3 126.1 127.1 128.1 129.1 129.2 129.3 130.1 131.1 131.2 131.3 132.1 132.2 132.3 133.1 134.1 134.2 135.1 135.2 136.1 137.1 137.2 138.1 139.1 140.1 140.2 141.1 141.2 141.3 141.4 141.5 141.6 142.1 143.1 143.2 143.3 144.1 145.1 146.1 146.2 146.3 146.4 147.1 148.1 148.2 149.1 149.2 150.1 150.2 150.3 151.1 151.2 151.3 152.1 153.1 154.1 155.1 156.1 157.1 157.2 157.3 157.4 157.5 157.6 157.7 157.8 157.9 157.10 157.11 158.1 158.2 158.3 158.4 158.5 159.1 160.1 161.1 162.1 163.1 163.2 163.3 164.1 165.1 165.2 165.3 165.4 166.1 166.2 166.3 166.4 166.5 167.1 168.1 168.2 168.3 169.1 170.1 170.2 171.1 171.2 171.3 172.1 172.2 172.3 172.4 172.5 173.1 173.2 174.1 174.2 175.1 175.2 175.3 175.4 175.5 175.6 175.7 176.1 176.2 177.1 177.2 178.1 178.2 178.3 179.1 180.1 181.1 181.2 181.3 182.1 182.2 183.1 184.1 185.1 186.1 186.2 187.1 188.1 189.1 189.2 189.3 189.4 190.1 190.2 190.3 190.4 190.5 190.6 190.7 190.8 191.1 192.1 192.2 193.1 194.1 195.1 195.2 195.3 196.1 197.1 198.1 198.2 198.3 199.1 200.1 201.1 202.1 202.2 202.3 202.4 202.5 202.6 202.7 202.8 202.9 203.1 204.1 204.2 204.3 205.1 205.2 206.1 206.2 207.1 207.2 208.1 208.2 208.3 208.4 208.5 208.6 209.1 209.2 209.3 209.4 209.5 209.6 209.7 209.8 209.9 210.1 210.2 210.3 210.4 211.1 211.2 211.3 211.4 211.5 211.6 212.1 213.1
Part 1 INFORMATION ON DATA PROTECTION RELATED TO OUR PROCESSING UNDER ARTICLES 13, 14 AND 21 GENERAL DATA PROTECTION REGULA-TION (GDPR) We take data protection very seriously and inform you herein how we process your data and what claims and rights you are entitled to under data protection regulations. Further Information - Data Protection Information for Applicants - Archive of Data Protection Information Data Controller and contact details Data Controller: AQUAN Rechtsanwälte Partner GmbB, Breitsprecher, Schott Data Protection Officer Frau Dr. Jana Schott Bleichstr. D-40211 Düsseldorf, Germany Contact details of our Data Protection Officer (also Data Protection Officer of all notaries working in the law firm): AQUAN Rechtsanwälte Partner GmbB, Breitsprecher, Schott Data Protection Officer Frau Dr. Jana Schott Bleichstr. D-40211 Düsseldorf, Germany Email: schott@aquan.com Purposes and legal basis upon which we process your data We process personal data in accordance with the stipulations of the General Data Protection Regula-tion (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and other applicable data protection provisions (details are provided below). The details on which data are processed and how they are used largely depend on the services requested or agreed in each case. If you retain our law firm, we will collect the following information in particular: - contact person (title, first name, last name), - email address(es), - street address, - phone number (landline and/or mobile), - user data (websites accessed, interest in contents, access times) - meta/communication data (e.g., device information, IP addresses) - information necessary for asserting and defending your rights as part of retaining our law firm. Further details or additions to the purposes of data processing can be found in the respective contract documents, in forms, in a declaration of consent and/or other information provided to you (e.g., in the context of the use of our website or in our terms and conditions). This Data Protection Information may be updated from time to time and is available on our website https://www.aquan.com/en/data-protection-provisions.html. 2.1 Purposes necessary for performance of a contract or precontractual measures (Art. The processing of personal data is performed at your request for the performance of our contracts with you and for the performance of your orders, as well as for the performance of measures and activities within the scope of precontractual relationships, e.g., with interested parties. The collection of these data is performed mainly - in order to be able to identify you as a client, - in order to be able to provide you with legal advice and represent you in an appropriate manner, - for correspondence with you, - for accounting purposes, - for processing of any liability claims that exist, as well as the assertion of any claims against you, - for measures for the control and optimization of business processes, - for the traceability of transactions, orders, and other agreements, - to guarantee IT security (including system or plausibility tests), - for emergency management, - to fulfill the general duties of care, - to safeguard and enforce domestic authority (e.g., by means of access controls), - for cost recording and controlling, as well as for reporting. 2.2 Purposes within the framework of your consent (Art. Your personal data may also be processed for certain purposes (e.g., use of company communication systems for private purposes; photographs/videos of you for publication in the Intranet/Internet) including as a result of your consent. As a rule, you may revoke this consent at any time. This also applies to the revoking of declarations of consent that were issued to us before the GDPR went into effect, i.e., prior to May 25, 2018. You will be informed separately about the consequences of revocation or refusal to provide consent in the respective text of the consent. Generally, revocation of consent only applies to the future. Processing carried out prior to consent be-ing issued is not affected and remains lawful. 2.3 Purposes within the framework of a legitimate interest on our part or of third parties (Art. Beyond the actual fulfilment of the (pre-)agreement, we process your data whenever this is necessary to protect legitimate interests of our own or of third parties, in particular for the following purposes: - advertising or market and opinion research, unless you have objected to the use of your data; - sending newsletters with information on current legal topics and events organized by the law firm; - obtaining information and exchanging data with credit agencies where this goes beyond our economic risk; - the checking and optimization of processes for requirements analysis; - the further development of services and products as well as existing systems and processes; - the disclosure of personal data within the framework of due diligence in the course of company sale negotiations; - for comparison with European and international anti-terror lists, insofar as this goes beyond the legal obligations; - the enrichment of our data, e.g., by using or researching publicly accessible data; - statistical evaluations or market analysis; - benchmarking; - the assertion of legal claims and defense in legal disputes which are not directly attributable to the contractual relationship; - the restricted processing of data, if erasure is not possible or only possible with disproportionately high effort due to the particular type of storage; - the development of scoring systems or automated decision-making processes; - the prevention and investigation of criminal offences, if not exclusively for the fulfilment of legal requirements; - building and plant security (e.g., by means of access control and video surveillance), insofar as this goes beyond the general duties of care; - internal and external investigations, safety reviews; - any monitoring or recording of telephone conversations for quality control and training purposes; - obtaining and maintenance of certifications of a private-law or official government nature; - the safeguarding and exercise of domestic authority by means of appropriate measures as well as video surveillance for the protection of our customers and employees as well as for securing evidence in the event of criminal offences and their prevention. 2.4 Purposes necessary for compliance with a legal obligation (Art. 6(1)(c) GDPR) or for the performance of a task carried out in the public interest (Art. Like all players in business life, we are also subject to a large number of legal obligations. These are primarily statutory requirements (e.g., commercial and tax laws), but also if applicable supervisory law or other requirements set out by government authorities. The purposes of processing may also include identity and age checks, prevention of fraud and money laundering (e.g., comparisons with European and international anti-terror lists), compliance with control and notification obligations under tax law as well as the archiving of data for the purposes of data protection and data security as well as for purposes of audits by tax advisors/auditors, fiscal and other government authorities. In addition, it may be necessary to disclose personal data within the framework of official government/court measures for the purposes of collecting evidence, law enforcement and criminal prosecution or the satisfaction of civil law claims. The categories of data that we process if we do not receive data directly from you, and their origin If necessary for the contractual relationship with you and the activities performed by you, we may process data which we lawfully receive from other offices or other third parties (e.g., credit agencies, publishers of address databases, journalist databases). In addition, we process personal data that we have lawfully collected, received or acquired from publicly accessible sources (such as commercial registers and association registers, civil registers, the press, Internet and other media) if such is necessary and we are allowed to process these data in accordance with statutory provisions. Relevant personal data categories may be, in particular: - personal data (name, date of birth, place of birth, nationality, marital status, occupation/trade and comparable data), - contact data (address, e-mail address, telephone number and similar data) - address data (population register data and comparable data) - payment confirmation/confirmation of cover for bank and credit cards - information about your financial situation (creditworthiness data including scoring, i.e., data for assessing the economic risk) - customer history - data on your use of the telemedia offered by us (e.g., time of access to our websites, apps or newsletters, clicked pages/links of us or entries and comparable data) - metadata/communication data (e.g., device information, IP addresses), - video data Recipients or categories of recipients of your data Your personal data will only be transferred to third parties if - you have given us consent to transmit data to third parties, - this is necessary in accordance with Art. 6(1)(b) GDPR for the processing of client relationships with you (this includes in particular passing it on to the opposing party in proceedings and their representatives, in particular their attorneys, as well as courts and other public authorities for the purposes of correspondence, marketing measures, as well as for the asserting and defending of their rights), - for purposes where we are obligated or entitled to give information, notification or to forward data, - to the extent that external service providers commissioned by us process data as order processors or parties that assume certain functions (e.g., external data centers, support and maintenance of IT applications, archiving, document processing, call center services, compliance services, controlling, data screening for anti-money laundering purposes, data validation and data protection. plausibility check, data destruction, purchasing/procurement, customer administration, letter shops, marketing, media technology, research, risk controlling, billing, telephony, website management, auditing services, banks, printing plants or companies for data disposal, courier services, logistics, press relations work). We will moreover refrain from transmitting your data to third parties if we have not informed you of such separately. If we commission service providers within the framework of processing an order, your data will be subject there to the security standards stipulated by us in order to adequately protect your data. In all other cases, recipients may only use the data for purposes for which the data have been sent to them. Attorney-client privilege will remain unaffected. With regard to data that are subject to attorney-client privilege, the information will only be passed on with your agreement. Within our firm, the internal departments and organizational units who need your data in order to fulfill our contractual and legal obligations, or within the framework of processing and implementation of our justified interest, will receive your data. Duration of data storage We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (precontractual legal relationship) and the execution of a contract. The personal data that we record for the clients will be stored until the end of the legal storage period for lawyers (6 years after the end of the calendar year in which you ceased being a client) and erased, unless we are obligated to store the data for longer in accordance with Art. 6(1)(c) GDPR as a result of storage and documentation obligations under tax and commercial law (under the German Commercial Code, Penal Code, or Tax Code), or if you have given your consent to longer storage in accordance with Art. Furthermore, special statutory provisions may require longer retention such as the preservation of evidence in connection with statutory time-barring provisions (statute of limitations). Under Sections 195 et seq. German Civil Code (BGB), the regular time-barring period is three years, but time-barring periods of up to 30 years may also be applicable. If the data are no longer required to meet contractual or statutory obligations and rights, data will be routinely erased unless its further processing – for a limited period – is necessary to fulfil the purposes listed under item no. 2.2 due to an overriding legitimate interest. Such an overriding legitimate interest is deemed to be the case, for example, if it is not possible to erase the data as a result of the particular type of storage, if such is only possible at a disproportionately great expense, and processing for other purposes is excluded by appropriate technical and organizational measures. Processing of your data in a third country or through an international organization Data are transmitted to offices in countries outside the European Economic Area EU/EEA (third countries) whenever such is necessary to meet a contractual obligation towards you (e.g., if you are posted to another country), if such is required by law (e.g., notification obligations under tax law), if such is in the legitimate interest of us or a third party, or you have issued us with your consent to such. At the same time, your data may be processed in a third country, including in connection with the involvement of service providers within the framework of the processing of the order. If no decision has been issued by the EU Commission regarding the presence of an appropriate level of data protection for the respective country, we warrant that your rights and freedoms will be reasonably protected and guarantied in accordance with EU data protection requirements through contractual agreements to this effect. We will provide you with detailed information on request. You can request information on the suitable or appropriate guarantees and on the possibility of receiving a copy of these from the company data protection officer or the human resources department responsible for you. Your data protection rights / rights of data subjects If certain conditions are met, you can assert the following data protection rights against us: 7.1 Under Art. 7(3) GDPR, you may revoke the consent that you have issued to us at any time. The result of this is that we may no longer perform the data processing covered by this consent in future. 7.2 Under Art. 15 GDPR, you have the right to obtain information on your personal data processed by us (where applicable, with limitations in accordance with Section 34 Federal Data Protection Act). 7.3 Upon request, we will rectify or complete data stored on you in accordance with Art. 16 GDPR if such data are inaccurate or incorrect. 7.4 Upon your request, we will erase your data in accordance with the principles of Art. 17 GDPR, unless we are prohibited from doing so by other statutory provisions (e.g., statutory retention obligations or the restrictions laid down in Section 35 Federal Data Protection Act) or an overriding interest on our part (for example, to defend our rights and claims). 7.5 Taking into account the preconditions laid down in Art. 18 GDPR, you may request us to restrict the processing of your data. 7.6 In accordance with the provisions of Art. 20 GDPR, you also have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to transmit such data to a third party. 7.7 Furthermore, you may file an objection to the processing of your data in accordance with Art. 21 GDPR, as a result of which we are obliged to stop processing your data. This right of objection only applies, however, if very special circumstances characterize your personal situation, whereby the rights of our firm may stand in the way of your right of objection. 7.8 You also have the right to revoke consent, issued to us to process personal data, at any time with effect for the future. 7.9 In addition, you have the right to complain to a data protection supervisory authority (Art. We recommend, however, that complaints should always initially be sent to our Data Protection Officer. Your applications regarding the exercising of your rights should, if possible, be addressed in writing to the abovementioned address or directly to our Data Protection Officer. Scope of your obligation to provide us with your data You only need to provide data that are necessary for the commencement and performance of the business relationship, for a precontractual relationship with us, or if we are obliged to collect the data by law. Without these data, we are generally not able to conclude the agreement or continue to perform it. This may also relate to data that are required later within the framework of the contractual relationship. If we request data from you above and beyond this, you will be informed about the voluntary nature of the information separately. Information on your right of objection under Art. 21 GDPR You have the right to file an objection at any time against processing of your data carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a weighing-up of interests) or Art. 6(1)(e) GDPR (data processing in the public interest). The precondition for this is, however, that there are grounds for your objection emanating from your special personal situation. This also applies to profiling based on this provision within the meaning of Art. If you file an objection, we will no longer process your personal data unless we can demonstrate compelling reasons warranting protection for the processing that outweigh your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. We also process your personal data in order to perform direct advertising. If you do not want to receive any advertising, you have the right to file an objection against this at any time. This also applies to the profiling to the extent that it is connected with such direct advertising. We will respect this objection with effect for the future. We will no longer process your data for the purpose of direct advertising if you object to processing for this purpose. The objection may be filed without adhering to any formal requirements and should be sent to AQUAN Rechtsanwälte Partner GmbB, Breitsprecher, Schott Data Protection Officer Frau Dr. Jana Schott Bleichstr. D-40211 Düsseldorf, Germany Email: schott@aquan.com Our Privacy Policy and the information on data protection related to our data processing in accordance with Articles 13, 14 and 21 GDPR may change from time to time. All changes will be published on this site. Older versions can be viewed in an archive. Data Protection Information last updated: May 30, 2018 Part 2 SUPPLEMENTARY DATA PROTECTION STATEMENT FOR OUR WEBSITE Thank you very much for your interest in our online presence. The protection of your personal data is very important to us. We would like to inform you of the use of cookies, analysis tools, and the possible effects on personal data on our website. Cookies and opt-out right in direct advertising We use temporary and permanent cookies, i.e., small files that are stored on the devices of users (for clarification of the term and the function, see the last section of this data protection information). The cookies serve the purpose of security and are necessary for the operation of our website (e.g., for the presentation of the website) or to save the user’s decision when confirming the cookie banner. In addition, either we or our technology partner use cookies for reach measurement and marketing purposes, of which our users are informed in the Data Protection Statement. You may generally opt out of the use of the cookies, used for the purposes of online marketing, for many services, above all with respect to tracking, via the US-based website http://www.aboutads.info/choices/ or via the EU-based website www.youronlinechoices.com. In addition, the storage of cookies may be achieved by deactivating them in the browser settings. Please note that it may not be possible to use all of the functions of this website in this case. Recording of access data and log files We record data on each access to our server on which the service is located (server log files) on the basis of our justified interest in accordance with Art. The access data include the name of the website accessed, file, date, and time of the access, quantity of data transferred, reporting of successful access, browser type and version, the user’s operating system, referrer URL (the page visited previously), IP address, and the enquiring provider. Log file information will be stored for security reasons (e.g., to clarify misuse or fraud actions) for a maximum period of seven days and then erased. Data that have to be stored for the purposes of evidence are excluded from erasure until the final clarification of the matter in question. Online presence in social media We maintain an online presence within social networks and platforms in order to communicate with the clients, interested parties, and users who are active there and to be able to inform them there about our services. When accessing the relevant networks and platforms, the terms and conditions of business and the data processing guidelines of their operators apply. Unless otherwise stated in our Data Protection Statement, we process user data if they communicate with us within the social networks and platforms, e.g., contributions to our online presence or sending messages. Cookies & reach measurement Cookies are information transferred from our web server or third-party web servers to the web browser of the users and are stored there to be accessed later. Cookies may be small files or other kinds of information storage. We use session cookies that are only stored for the duration of the current visit to our website (e.g., in order to enable the storage of your login status or the shopping cart function and therefore actually make it possible for you to use our website at all). A randomly generated clear identification number will be stored in a session cookie. This is known as a session ID. In addition, a cookie contains information on its origin and the duration of storage. These cookies cannot store any other data. Session cookies are deleted when you end the use of our website and log out or close the browser. Users will be informed of the use of cookies as part of pseudonymous reach measurement in this data protection information. If users do not wish cookies to be stored on their computer, they are requested to deactivate the appropriate option in the system settings for their browsers. Stored cookies can be deleted in the system settings of the browser. Excluding cookies from your computer can result in restricted functioning of this online content. You may opt out from the use of cookies that serve the purpose of reach measurement and advertising via the deactivation site of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US-based website (http://www.aboutads.info/choices) or the European-based website (http://www.youronlinechoices.com/uk/your-ad-choices/). Google Analytics On the basis of our justified interests (i.e., an interest in the analysis, optimization, and economic operation of our website as defined under Art. 6(1)(f) GDPR), we use Google Analytics, a web analysis service provided by Google LLC (Google). Google uses cookies. The information created by the cookie about the use of the website by the user is generally transferred to one of Google’s servers in the USA and is stored there. Google is certified under the Privacy Shield framework and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to analyze the use of our online content by the users and to compile reports on activities within the online content in order to perform further services associated with the use of this online content for us. As part of this process, pseudonymous user profiles for the users can be created from the processed data. We use Google Analytics to ensure that we only display the advertisements provided as part of the advertising services provided by Google and its partners to users who have shown an interest in our website or who display certain features (e.g., interest in certain topics or products, which is determined on the basis of the websites that are visited), which we send to Google (this is known as remarketing, or Google Analytics audiences). We use remarketing audiences to ensure that our advertisements are in line with the potential interest of the user, rather than being an irritation. We only use Google Analytics with IP anonymization activated. This means that Google abbreviates the IP address of the user in the member states of the European Union, or in other signatory countries of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then abbreviated there. The IP address transmitted from the user’s browser is not combined with other data by Google. Users can prevent the storage of cookies by configuring their browser settings appropriately; users can also prevent the recording of the data generated by the cookie and the data collected as a result of their use of the online content to Google, as well as its processing by Google. This can be done by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plugin or in browsers on mobile devices, please click on the following link in order to set up an opt-out cookie, which prevents recording by Google Analytics on this website in future (this opt-out cookie only functions in this browser and only for this domain, delete your cookies in this browser, then click on this link again): You can find further information on the use of data by Google, as well as options for settings and opt-out on Google’s website: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses information from sites or apps that use our services”), https://policies.google.com/technologies/ads (“How Google uses cookies in advertising”), https://adssettings.google.com/authenticated (“Make the ads you see more useful to you”). Google-Re/Marketing Services We use the marketing and remarketing services (abbreviated to “Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”) on the basis of our justified interests (i.e., interest in the analysis, optimization, and economic operation of our online content as defined under Art. Google is certified under the Privacy Shield framework and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google Marketing Services allow us to show advertisements for and on websites in a more targeted way, in order only to present users with advertisements that may be of interest to them. If, for example, users are shown advertisements for products that they have shown an interest in on other websites, this is known as “remarketing.” For these purposes, when our website and other websites on which Google Marketing Services are active are accessed, a code is executed by Google and (re)marketing tags (invisible graphics or codes, which are also known as “web beacons”) are incorporated into the website. These are used to save an individual cookie on the user’s device, i.e., a small file (comparable technologies can also be used instead of cookies). The cookies can be created by various different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which websites users look at, what content they show an interest in, and which offerings they click on. The file also contains technical information about the browser and operating system, referring websites, duration of the visit, as well as other information about the use of the online content. The IP addresses of users are also recorded, although we state within Google Analytics that the IP addresses are abbreviated within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area, and only in exceptional cases sent in full to a Google server in the USA and abbreviated there. The IP address is not combined with the users’ data within other offers from Google. Google can also combine the aforementioned information with information from other sources. If users then visit other websites, they can be shown advertisements tailored to their interests. The users’ data is processed in a pseudonymous manner within Google Marketing Services. This means that Google does not process the name or email addresses of the users, but rather processes the relevant data based on cookies within pseudonymized user profiles. This means that from the point of view of Google, the information is not managed and viewed for a concrete, identified person, but rather for the cookie owner, irrespective of who this cookie owner is. This does not apply if a user has expressly given Google permission to process the data without this pseudonymization. The information collected by Google Marketing Services about the users is transmitted to Google and stored on Google’s servers in the USA. In addition, we may use the “Google Tag Manager” in order to incorporate the Google analysis and marketing services into our website and to manage them. Additional information on data use for marketing purposes by Google is available at https://policies.google.com/technologies/ads, the Google Data Protection Statement is available at https://policies.google.com/privacy. If you want to opt-out of interest-based advertising by Google Marketing Services, you can make use of the settings and opt-out options provided by Google: https://adssettings.google.com/authenticated. Facebook Social Plugins We use social plugins (“plugins”) provided by the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on the basis of our justified interests (i.e., interest in the analysis, optimization, and economic operation of our website as defined in Art. The plugins can be interaction elements or contents (e.g., videos, graphics, or text contributions) and can be identified by the Facebook logo (white “f” on a blue square, the term “like,” or the thumbs up sign) or are marked with the addition of “Facebook Social Plugin.” The list and design of the Facebook Social Plugins are available at https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield framework and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). If a user accesses a function of this online content that contains a plugin of this kind, its device creates a direct connection with Facebook’s servers. The content of the plugins is sent directly from Facebook to the user’s device and incorporated into the website by Facebook. In this process, user profiles may be created for users based on the processed data. We therefore have no influence on the scope of the data that Facebook records using these plugins and we therefore inform users based on the knowledge we have. Facebook receives information that a user has accessed the corresponding page of the website by means of the incorporation of the plugins. If the user is logged in to Facebook, Facebook can allocate the visit to its Facebook account. If users interact with the plugins, for example by clicking the like button or submitting a comment, the corresponding information will be sent directly from your device to Facebook and saved there. If a user is not a member of Facebook, it is still possible for Facebook to determine and save the user’s IP address. According to Facebook, in Germany only an anonymized IP address is stored. The purpose and scope of the recording of data and the further processing and use of the data by Facebook, as well as the rights and setting options for the protection of users’ privacy can be found in Facebook’s data protection information at: https://www.facebook.com/about/privacy/. If users are Facebook members and do not want Facebook to collect information about them and link it to their data stored with Facebook, they need to log out of Facebook and delete the cookies. Other settings and opt-outs regarding the use of data for advertising purposes are possible within Facebook’s profile settings: https://www.facebook.com/settings?tab=ads or via the US-based website http://www.aboutads.info/choices/ or via the EU-based website http://www.youronlinechoices.com/. The settings are implemented irrespective of the platform, i.e., they are applied to all devices, from desktop computer to mobile devices. Newsletters Below, we inform you about content of our newsletters, as well as the processes for registration, distribution, and statistical evaluation, as well as your right to opt out. By subscribing to our newsletter, you state that you agree to receive it and to the processes described. Content of the newsletters: we send newsletters, emails, and other electronic notifications with promotional information (hereinafter: “Newsletter”) only with the consent of the recipient or with legal permission. If the content of a registration to receive a newsletter is outlined in concrete terms within the registration, that content will be decisive with regard to the consent of the user. In addition, our newsletters contain information about our events, offers, campaigns, and our company. Double opt-in and logging: registering to receive our newsletter takes place in a “double opt-in procedure,” i.e., after registration you will receive an email in which you will be asked to confirm your registration. This confirmation is necessary so that no one can register with someone else’s email address. A log is kept of registrations for the Newsletter in order to be able to prove that the registration process took place in accordance with the legal requirements. This includes the saving of the time of registration and confirmation, as well as the IP address. A record will be kept of changes in your data and stored by the distribution provider. In addition, the distribution provider may use these data in a pseudonymized form based on its own information, i.e., without allocation to a user, in order to optimize or improve its own services, e.g., for technical optimization of the distribution and the presentation of the newsletter or for statistical purposes in order to determine which country the recipients come from. The distribution provider will not, however, use the data of our newsletter recipients to write to them itself, nor will it pass on the data to third parties. Registration data: to register for the Newsletter, it is sufficient to enter your email address. As an option, please enter a name so that we can address you personally in the Newsletter. Performance measurement: the newsletters contain a “web beacon,” i.e., a pixel-sized file that is accessed by the server of the distribution provider when the Newsletter is opened. During this access, initially technical information, such as information about the browser and your system, as well as your IP address and the time of access, will be collected. This information will be used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on the locations of access (which can be determined with the aid of the IP address) or the access times. The statistical records will also include the determination of whether the Newsletters are opened, when they are opened, and what links are clicked on. For technical reasons, it is possible to allocate this information to the individual Newsletter recipients. It is, however, not our aim, or that of the Distribution Provider, to monitor individual users. Rather, the analysis serves the purpose of recognizing the reading habits of our users and adjusting our content to suit them or to send different information in line with the interests of our users. Germany: the distribution of the Newsletter and performance measurement take place on the basis of consent from the recipient in accordance with Art. 7 in conjunction with Section 7(2)(3) German Act Against Unfair Competition or on the basis of legal permission in accordance with Section 7(3) Act Against Unfair Competition. The recording of the registration procedure is performed on the basis of our justified interests in accordance with Art. 6(1)(f) GDPR and serves as proof of consent to receipt of the newsletter. Termination/cancellation: you can terminate your agreement to receipt of our newsletter at any time, i.e., revoke your consent. You will find a link to the termination option for the newsletter at the end of each newsletter. If the user has only registered for the newsletter, his/her personal data will be erased. Contact form and e-mail contact Description and extent of the data processing On our website you can find a contact form which can be used for electronic contact. If you take this opportunity, the data entered will be transmitted to us and saved. This data consists of: First and last name of the person as well as the e-mail address. At the time of sending the message, the following data is also stored: - (1) The user’s IP address - (2) Date and time of the registration - (3) Content of the message Alternatively, you can contact us via the provided e-mail address. In this case, the user’s personal data, that has been transmitted with the e-mail, will be saved. In this context there will be no disclosure of the data to third parties Legal basis for the data processing Legal basis for the data processing is Art. 6 para. 1 lit. a GDPR, if the user consented beforehand. Legal basis for the processing of data that has been transmitted via e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO Purpose of the data processing The processing of the personal data derived from the input mask serves us only to establish contact with you. In case of contact via e-mail, this also includes the required legitimate interest regarding the processing of the data. Other personal data processed during the sending process serves to prevent any kind of misuse of the contact form and to ensure the security of our information technology systems. Duration of the data storage The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data collected from the contact form and those sent via e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the relevant facts of the case have been conclusively clarified. Additional personal data collected during the sending process will be deleted after seven days and not later. Opposition and possibility of removal The user has the possibility to revoke his consent to the processing of personal data at any given time. If the user contacts us via e-mail, he or she may object to the storage of the personal data at any given time. In this case, the conversation cannot continue. All personal data stored in the course of the contact will be deleted in this case. More information regarding your rights of revocation and objection can be found under “Your privacy rights / rights of data subjects” in our privacy policy. Incorporation of third-party services and content On the basis of our justified interest (i.e., an interest in the analysis, optimization, and economic operation of our website in accordance with Art. 6(1)(f) GDPR), our website offers content and services from third party providers in order to incorporate their content and services, such as videos and fonts (hereinafter referred to collectively as “Content”). The prerequisite for this is that the third-party providers of this Content have to use the IP address of the user because, without the IP address, they cannot send the Content to the browser. The IP address is therefore necessary for the provision of this Content. We make every effort only to use Content if the providers only use the IP address for the provision of the Content. Third-party suppliers can also use “pixel tags” (invisible graphics also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information on the user traffic to the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and, among other things, includes technical information about the browser and operating system, referring websites, visit times, and also other information on the use of our online content. This information can also be connected with information of this kind from other sources. The following description offers an overview of third-party providers, as well as their content, and also links to their data protection statements, which contain further details on the processing of data and opt-out options, some of which have already been mentioned: - External fonts by Google, LLC., https://www.google.com/fonts (“Google Fonts”). The incorporation of the Google fonts is performed by means of server access at Google (generally in the USA). Data protection statement: https://policies.google.co/privacy, Opt-out: https://adssettings.google.com/authenticated. - Maps of the “Google Maps” service by third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA,. Data protection statement: https://www.google.com/policies/privacy/, Opt-out: https://www.google.com/settings/ads/. - We incorporate the function for recognizing bots, e.g., when completing online forms (“ReCaptcha”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection statement: https://www.google.com/policies/privacy/, Opt-out: https://adssettings.google.com/authenticated. - Videos of the “YouTube” service by third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection statement: https://policies.google.com/privacy, Opt-out: https://adssettings.google.com/authenticated . - Our website includes Google+ services. These functions are provided by third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link your Google+ profile to the content of our pages by clicking the Google+ button. This means that Google can allocate the visit to our pages to your user account. Please note that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how the data are used by Google+. Data protection statement: https://policies.google.com/privacy , Opt-out: https://adssettings.google.com/authenticated. - As part of our online offering, we use the marketing functions (“LinkedIn Insight Tag”) of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection is made with LinkedIn’s servers. LinkedIn is informed that you have visited our website with your IP address. We can use the LinkedIn Insight Tag in particular to analyze the success of our campaigns in LinkedIn or determine target groups for these on the basis of the interaction of the users with our website. If you are registered with LinkedIn, LinkedIn is able to allocate your interactions with our website to your user account. Also, if you click on the LinkedIn “recommend button” and are logged in to your LinkedIn account, it is possible for LinkedIn to allocate your visit to our website to you and to your user account. LinkedIn is certified under the Privacy Shield framework and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Data protection statement: https://www.linkedin.com/legal/privacy-policy, Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. - The functions of the Twitter service or platform may be incorporated into our website (hereinafter referred to as “Twitter”). Twitter is offered by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The functions include the presentation of our contributions in Twitter within our website, links to our profile at Twitter, and the option of interacting with contributions and functions of Twitter, as well as measuring whether users access our online content via our advertisements on Twitter (“conversion measurement”). Twitter is certified under the Privacy Shield agreement and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active) Data protection statement: https://twitter.com/de/privacy, Opt-out: https://twitter.com/personalization. - We use functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Each time our web pages containing the Xing functions are accessed, a connection is made to the Xing servers. As far as we are aware, personal data are not saved in this process. In particular, no IP addresses are saved and the usage behavior is not analyzed. Privacy Policy: https://www.xing.com/app/share?op=data_protection. - External code of the JavaScript framework “jQuery,” provided by third-party provider jQuery Foundation, https://jquery.org. Data Protection Information last updated: May 30, 2018
1.1 2.1 3.1 3.2 4.1 5.1 5.2 5.3 6.1 7.1 8.1 9.1 9.2 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 26.1 26.2 26.3 26.4 27.1 28.1 28.2 28.3 28.4 29.1 30.1 30.2 31.1 31.2 32.1 33.1 33.2 34.1 35.1 36.1 36.2 37.1 38.1 38.2 39.1 40.1 41.1 42.1 42.2 43.1 43.2 44.1 45.1 46.1 47.1 47.2 48.1 49.1 49.2 50.1 51.1 51.2 52.1 53.1 53.2 54.1 55.1 56.1 57.1 57.2 57.3 58.1 59.1 62.1 63.1 64.1 65.1 65.2 65.3 66.1 66.2 66.3 67.1 68.1 69.1 70.1 71.1 72.1 73.1 73.2 74.1 74.2 75.1 76.1 77.1 77.2 77.3 78.1 79.1 80.1 80.2 80.3 80.4 80.5 81.1 82.1 82.2 82.3 83.1 84.1 85.1 86.1 87.1 88.1 89.1 89.2 90.1 91.1 92.1 93.1 94.1 95.1 96.1 97.1 98.1 99.1 99.2 100.1 101.1 102.1 102.2 103.1 104.1 105.1 106.1 106.2 106.3 106.4 106.5 106.6 107.1 108.1 108.2 108.3 109.1 110.1 110.2 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 121.1
Upute o zaštiti podataka Obavijest o zaštiti podataka Društvu Robert Bosch d.o.o. (dalje u tekstu „BOSCH” ili „mi”) drago je što ste posjetili naše internetske stranice (https://www.bosch-climate.com.hr/) i mobilne aplikacije (na koje se odnosi zajednički naziv „internetske ponude”) i što ste iskazali zainteresiranost za naše društvo i naše proizvode. BOSCH poštuje vašu privatnost Zaštita vaše privatnosti za vrijeme obrade osobnih podataka, kao i sigurnost svih poslovnih podataka, od velike su nam važnosti. Osobne podatke koji su prikupljeni tijekom vašeg posjeta našim internetskim ponudama, obrađujemo povjerljivo i isključivo u skladu sa zakonskim propisima. Zaštita podataka i informacijska sigurnost dio su politike naše tvrtke. Djeca Ova internetska ponuda nije namijenjena djeci mlađoj od 16 godina. Voditelj obrade BOSCH je voditelj obrade odgovoran za obradu vaših podataka; iznimke su opisane u ovoj obavijesti o zaštiti podataka. U nastavku su naši podaci za kontakt: Robert Bosch d.o.o.,10040 Zagreb, Kneza Branimira 22, 10040 Zagreb, info_toplinskatehnika@hr.bosch.com Prikupljanje, obrada i uporaba osobnih podataka Obrađene kategorije podataka Obrađuju se sljedeće kategorije podataka: • podaci za komunikaciju (npr. ime i prezime, broj telefona, e-pošta, adresa, IP adresa, željeni kontakt) • ugovorni matični podaci (npr. ugovorni odnosi, ugovorni interes ili interes za proizvod, status kupnje kupca, povijest kupnje)• matični podaci za kvalifikaciju (npr. povijest učenja i vještine) • matični podaci o partnerima (npr. status partnera, status servisnog partnera, bodovi, registracije proizvoda) • podaci o poslovanju (prihod i slično, iz javno dostupnih izvora ili agencija za kreditne analize) Svrhe i pravne osnove obrade Vaši osobni podaci obrađuju se u sljedeće svrhe: U slučaju da ste se prijavili na newsletter listu, Vaši osobni podaci obrađuju se za potrebe slanja newslettera o našim proizvodima i uslugama, akcijama i popustima kao i nagradnim igrama i to e-poštom ili SMS om/MMS-om (Pravna osnova: Vaša suglasnost). U slučaju da ste postavili zahtjev elektronskim putem, Vaši osobni podaci obrađuju se kako bi Vam odgovorili na upit te kako bismo provjerili Vaše zadovoljstvo s našom uslugom odnosno podrškom (Pravna osnova: Izvršenje ugovora odnosno Vašeg zahtjeva). U slučaju da ste dali Vašu suglasnost, telefonskim ili pisanim putem, Vaši osobni podaci obrađuju se za potrebe (1) analize tržišta i prodajnih rezultata kao i/ili (2)slanja newslettera o našim proizvodima i uslugama, akcijama i popustima kao i nagradnim igrama i to e-poštom ili SMS om/MMS-om i/ili ankete o proizvodima ili anketiranje kupaca putem telefona, SMS ili drugi način, te putem e-pošte (Pravna osnova: Vaša suglasnost). U slučaju da sudjelujete u jednom od naših nagradnih izvlačenja ili akcija s popustima, upotrijebit ćemo Vaše podatke kako bismo Vas obavijestili o bilo kakvoj osvojenoj nagradi i radi oglašavanja naših proizvoda u zakonom dozvoljenoj mjeri (Pravna osnova: Izvršenje ugovora – sudjelovanje u nagradnoj igri, kao i legitiman interes). Informacije o pojedinačnim nagradnim izvlačenjima ili akcijama s popustima dostupne su u odgovarajućim uvjetima sudjelovanja. U svim gore navedenim slučajevima, Vaši osobni podaci mogu se dodatno obrađivati za potrebe (1) utvrđivanje ometanja/smetnji i iz sigurnosnih razloga (Pravne osnove: izvršavanje naših zakonskih obaveza u okviru sigurnosti podataka i opravdani interes za rješavanje ometanja/smetnji te za sigurnost naših proizvoda) te (2) zaštite i obrane naših prava (Pravna osnova: naš opravdani interes za zaštitu i obranu naših prava). Prijenos podataka Prijenos podataka drugim voditeljima obrade Vaši osobni podaci prije svega se prosljeđuju drugim voditeljima obrade samo kad je to potrebno za izvršavanje ugovora, ako mi ili treća strana imamo opravdani interes za prijenos ili ako ste dali svoju suglasnost. Pojedinosti o pravnim osnovama dostupne su u odjeljku Svrhe i pravne osnove obrade. Treće strane mogu biti i druga društva Grupe Bosch. Usto, podaci se mogu prenijeti drugim voditeljima obrade kad smo obavezni to učiniti zbog zakonskih propisa ili izvršnih upravnih ili sudskih naloga. Pružatelji usluga Angažirali smo vanjske pružatelje usluga da izvrše zadatke kao što su usluge prodaje i marketinga, upravljanje ugovorima, rukovanje isplatama, programiranje, hostiranje podataka i usluge dežurne servisne linije. Te pružatelje usluga odabrali smo pažljivo i redovito ih provjeravamo, posebice kad je riječ o njihovu pažljivom rukovanju podacima i zaštitom podataka koje su spremili. Svi pružatelji usluga dužni su održavati povjerljivost i poštivati zakonske odredbe. Pružatelji usluga mogu biti i druga društva Grupe Bosch. Prijenos primateljima izvan EGP-a Osobne podatke možemo prenijeti i primateljima koji se nalaze izvan EGP-a u takozvanim trećim zemljama. U tim slučajevima prije prijenosa pobrinut ćemo se da primatelj podataka pruža primjerenu razinu zaštite podataka (npr. prema odluci o primjerenosti Europske komisije za dotičnu zemlju ili prema sporazumu sklopljenom s primateljem na temelju takozvanih modela klauzula za EU) ili da ste dali svoju privolu za prijenos. Imate pravo na primanje pregleda primatelja trećih zemalja i primjerka posebno dogovorenih odredbi koje osiguravaju primjerenu razinu zaštite podataka. Molimo da u tu svrhu upotrijebite izjave iz odjeljka Kontakt. Trajanje pohrane; razdoblja zadržavanja Vaše podatke ponajprije pohranjujemo onoliko koliko je potrebno za pružanje naših internetskih ponuda i usluga povezanih s njima ili dok god imamo opravdani interes za pohranu podataka (npr. i nakon izvršavanja ugovora možemo i dalje imati opravdani interes za marketing putem obične pošte), a u slučaju podataka koji se obrađuju temeljem suglasnosti, dok ne povučete suglasnosti. U svim drugim slučajevima brišemo vaše osobne podatke, a iznimka su podaci koje moramo pohraniti radi ispunjenja zakonskih obaveza (npr. zbog razdoblja zadržavanja prema poreznom i trgovinskom zakoniku obavezni smo imati dokumente kao što su ugovori i fakture dostupne tijekom određenog razdoblja). Sigurnost Naši zaposlenici i društva koja pružaju usluge u naše ime obvezani su na povjerljivost i na suglasnost s mjerodavnim zakonima o zaštiti podataka. Poduzimamo sve potrebne tehničke i organizacijske mjere kako bismo osigurali prikladnu razinu sigurnosti i kako bismo zaštitili vaše podatke kojima mi upravljamo posebice od rizika od nehotičnog ili protuzakonitog uništavanja, manipulacije, gubitka, izmjene, neovlaštenog otkrivanja ili neovlaštenog pristupa. Naše sigurnosne mjere stalno se unaprjeđuju u skladu s tehnološkim napretkom. Korisnička prava Kako biste ostvarili svoja prava, upotrijebite informacije koji se nalaze u odjeljku Kontakt. Molimo vas da pri tome omogućite svoju jednoznačnu identifikaciju. Pravo na informacije i pristup Imate pravo od nas ishoditi potvrdu o tome obrađuju li se vaši osobni podaci ili ne i, ako se obrađuju, na pristup svojim osobnim podacima. Pravo na ispravak i brisanje: Imate pravo od nas ishoditi ispravak netočnih osobnih podataka koji se odnose na vas bez odgode. S obzirom na svrhe obrade podataka, imate pravo na dopunu nepotpunih osobnih podataka, među ostalim, davanjem dopunske izjave. To se ne odnosi na podatke koji su potrebni u svrhe naplate ili računovodstva ili koji su podložni zakonskom razdoblju zadržavanja. Međutim, ako pristup takvim podacima nije potreban, njihova je obrada ograničena (pročitajte nastavak). Ograničavanje obrade: Imate pravo zahtijevati – dok god su zakonski zahtjevi ispunjeni – ograničavanje obrade svojih podataka. Prigovor na obradu podataka: Imate pravo bilo kada uložiti prigovor na našu obradu podataka. Tada više nećemo obrađivati vaše osobne podatke osim ako dokažemo sukladnost sa zakonskim zahtjevima za pružanje dokazivih razloga za daljnju obradu koji nadilaze vaše interese, prava i slobode ili za uspostavu, provođenje ili obranu pravnih zahtjeva. Prigovor na izravni marketing: Nadalje, bilo kada možete uložiti prigovor na obradu vaših osobnih podataka u svrhe izravnog marketinga. Molimo vas da uzmete u obzir da, iz organizacijskih razloga, može doći do preklapanja između vašeg prigovora i uporabe vaših podataka u okviru kampanje koja je u već u tijeku. Prigovor na obradu podataka na temelju pravne osnove „opravdanog interesa”: Osim toga, bilo kada imate pravo uložiti prigovor na obradu vaših osobnih podataka ako se on temelji na pravnoj osnovi opravdanog interesa. U tom slučaju obustavit ćemo obradu vaših podataka, osim ako dokažemo uvjerljive i valjane razloge u skladu s pravnim zahtjevima za obradu koji nadilaze vaša prava. Povlačenje suglasnosti: Ako ste dali suglasnost za obradu vaših podataka, imate pravo povući svoju suglasnost s trenutnim učinkom. Zakonitost obrade podataka izvršene prije vašeg povlačenja privole ostaje nepromijenjena. Prenosivost podataka: Imate pravo na dobivanje podataka koje ste nam pružili u strukturiranom, često korištenom, strojno čitljivom formatu ili – ako je tehnički izvedivo – zahtijevati da te podatke prenesemo trećoj strani. Pravo na pritužbu nadzornom tijelu: Imate pravo uložiti pritužbu nadzornom tijelu. Možete uložiti pritužbu nadzornom tijelu koje je odgovorno za vaše mjesto prebivališta ili vašu državu ili nadzornom tijelu koje je odgovorno za nas. Ono je: Agencija za zaštitu osobnih podataka Martićeva ulica 14, HR - 10000 Zagreb E-mail: azop@azop.hr Web: www.azop.hr Za posjetitelje naših Internet stranica (Datoteke zapisnika) Svaki put kad se služite internetom, vaš preglednik odašilje određene informacije koje pohranjujemo u takozvane datoteke zapisnika. Mi nakratko čuvamo datoteke zapisnika isključivo kako bismo utvrdili smetnje te iz sigurnosnih razloga (npr. radi razjašnjenja pokušaja napada), a zatim ih brišemo. Datoteke zapisnika koje moramo zadržati u dokazne svrhe izuzete su od brisanja dok se određeni incident u potpunosti ne riješi te se mogu, u pojedinom slučaju, prenijeti istražnim tijelima. Datoteke zapisnika upotrebljavaju se i za analizu (bez potpune IP adrese ili s njom). Stoga pogledajte modul Internetska analiza. U datotekama zapisnika naročito se spremaju informacije navedene u nastavku: – IP adresa (adresa internetskog protokola) terminalnog uređaja koji se upotrebljava za pristup internetskim ponudama, – adresa internetske stranice na kojoj se pristupilo internetskoj ponudi (takozvani URL izvora ili URL preporučitelja), – naziv pružatelja usluge preko kojega se pristupilo internetskim ponudama, – naziv datoteka ili informacija kojima se pristupilo, – datum, vrijeme i trajanje dohvaćanja, – količina prenesenih podataka, – operativni sustav i informacije o internetskom pregledniku koji se upotrijebio, uključujući instalirane dodatke (npr. Flash Player), – kôd statusa http-a (npr. „uspješan zahtjev” ili „tražena datoteka nije pronađena”). Uporaba kolačića Općenito Kolačići su male tekstualne datoteke koje se spremaju na vaše računalo pri posjetu internetskoj ponudi. Ako ponovno pristupite internetskoj ponudi u neko drugo vrijeme, vaš preglednik poslat će sadržaj kolačića natrag njezinu ponuđaču i time omogućiti ponovnu identifikaciju terminalnog uređaja. Čitanje kolačića omogućuje nam da svoju internetsku ponudu izradimo tako da bude optimalna za vas i da vam olakšamo njezinu uporabu. Deaktivacija i brisanje kolačića Kad posjetite naše internetske stranice, skočni prozor kolačića pitat će vas želite li dopustiti kolačiće koji se nalaze na našoj stranici ili ih želite deaktivirati u postavkama. Ako odlučite blokirati kolačiće, u vaš preglednik postavlja se kolačić za odbijanje. Taj kolačić služi isključivo za izvršavanje vašeg prigovora. Deaktivacijom kolačića mogu se onemogućiti pojedinačne funkcije naših internetskih stranica. Imajte na umu da se kolačić za odbijanje iz tehničkih razloga može postaviti samo za preglednik koji se upotrijebio za prvotno postavljanje kolačića. Ako obrišete kolačiće ili upotrijebite drugi preglednik ili drugi terminalni uređaj, morate ponovo odbiti kolačiće. Prilagođavanje postavki ne odnosi se na kolačiće koji su postavljeni za vrijeme vaših posjeta internetskim stranicama drugih pružatelja. Vaš preglednik dopušta vam da bilo kada obrišete sve kolačiće. Kako biste to učinili, proučite funkcije pomoći svojeg preglednika. Međutim, to može dovesti do nedostupnosti pojedinačnih funkcija. Osim toga, možete upravljati uporabom kolačića trećih strana i deaktivirati ih na sljedećoj internetskoj stranici: http://www.youronlinechoices.com/uk/your-ad-choices. Budući da mi ne upravljamo tom internetskom stranicom, nismo odgovorni za nju niti možemo utjecati na njezin sadržaj i dostupnost. Pregled kolačića kojima se služimo U ovome odjeljku možete pronaći pregled kolačića kojima se služimo. Potpuno nužni kolačići Određeni kolačići nužni su kako bismo sigurno pružili svoje internetske usluge. Ova kategorija uključuje, npr.: – kolačiće koji identificiraju i autoriziraju naše korisnike, – kolačiće koji privremeno spremaju određene unose korisnika (npr. sadržaj košarice za kupnju ili internetskog obrasca), – kolačiće koji pohranjuju određene postavke korisnika (npr. postavke pretrage ili jezika), – kolačiće koji pohranjuju podatke kako bi se osigurala neometana reprodukcija video ili zvučnog sadržaja. Analitički kolačići Upotrebljavamo analitičke kolačiće za evidenciju ponašanja pri uporabi (npr. reklamni natpisi na koje je korisnik kliknuo, uneseni upiti za pretragu) naših korisnika i za njihovu statističku procjenu Internetska analiza Potrebni su nam statistički podaci o uporabi naših internetskih ponuda kako bismo ih izradili tako da budu bolje prilagođeni korisniku te kako bismo izvodili mjerenja raspona i provodili istraživanja tržišta. Za tu svrhu služimo se alatima za internetsku analizu koji su opisani u ovome odjeljku. Profili uporabe koje ti alati izrađuju s pomoću kolačića za analizu ili procjenom da datoteke zapisnika ne sadržavaju osobne podatke. Alati uopće ne upotrebljavaju IP adrese ili ih skraćuju odmah nakon što ih prikupe. Ponuditelji alata obrađuju podatke samo kao izvršitelji obrade podložno našim uputama, a ne za vlastite svrhe. U nastavku možete pronaći informacije o svakom ponuditelju alata i o tome kako možete uložiti prigovor na prikupljanje i obradu podataka s pomoću alata. Imajte na umu da, kad je riječ o alatima koji upotrebljavaju kolačiće za odbijanje, funkcija odbijanja povezana je s uređajem ili preglednikom te je stoga valjana za terminalni uređaj ili preglednik koji se upotrebljava u tom trenutku. U slučaju da upotrebljavate nekoliko terminalnih uređaja ili preglednika, morate odbiti kolačiće na svakom uređaju i u svakom upotrijebljenom pregledniku. Osim toga, općenito možete izbjeći izradu profila uporabe općom deaktivacijom uporabe kolačića; više informacija o tome nalazi se u odjeljku Deaktivacija i brisanje kolačića. Newsletter Newsletter uz pristanak; pravo na povlačenje U okviru naših internetskih ponuda možete se prijaviti na newsletter. Pritom se služimo takozvanim postupkom dvostrukog pristanka, što znači da vam newsletter šaljemo putem e-pošte, mobilne aplikacije za dopisivanje (kao što je, npr., WhatsApp), SMS-a ili automatske obavijesti isključivo nakon što nam izričito potvrdite aktivaciju usluge slanja newslettera klikom na poveznicu u obavijesti. Ako u budućnosti više ne budete željeli primati newsletter, možete prekinuti pretplatu bilo kada povlačenjem svoje privole. Svoju privolu za primanje newslettera možete povući e-poštom na način da kliknete na poveznicu koja je poslana u odgovarajućoj poruci e-pošte internetske ponude, ovisno o slučaju. To se odvija u administrativnim postavkama. U suprotnom nas kontaktirajte s pomoću kontaktnih podataka koji se nalaze u odjeljku Kontakt Vanjske poveznice Naše internetske poveznice mogu sadržavati poveznice na internetske stranice trećih strana – pružatelja koji nisu povezani s nama. Nakon što kliknete na takvu poveznicu, mi ne utječemo na prikupljanje, obradu i uporabu osobnih podataka koje se klikom na poveznicu mogu prenijeti trećoj strani (kao što je IP adresa ili URL stranice na kojoj se nalazi poveznica) jer su postupci trećih strana, dakako, izvan našeg nadzora. Ne preuzimamo odgovornost za obradu takvih osobnih podataka koju izvršavaju treće strane. Izmjene Obavijesti o zaštiti podataka Zadržavamo pravo da promijenimo svoje mjere sigurnosti i zaštite podataka ako je to potrebno zbog tehničkog razvoja. U takvim slučajevima izmijenit ćemo i dopuniti svoje obavijesti o zaštiti podataka u skladu s time. Molimo vas da povremeno pročitate Obavijest o zaštiti podataka, posebice prije davanja bilo kakvih novih osobnih podataka. Kontakt Ako nas želite kontaktirati, dostupni smo na adresi koja je navedena u odjeljku „Voditelj obrade”. Kako biste ostvarili svoja prava te za prijedloge i pritužbe povezane s obradom vaših osobnih podataka, preporučujemo da se obratite našem odgovornom službeniku za zaštitu podataka: Matthias Goebel Službenik za zaštitu podataka Informacijska sigurnost i privatnost Bosch Grupe (C / ISP) Robert Bosch GmbH Kronenstrasse 20 Stuttgart E-pošta:Abteilungsbriefkasten.cisp@de.bosch.com