http___www.ivsustav.hr_objava_zastita-podataka_1.xml
1.1 2.1 2.2 2.3 2.4 2.5 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 15.1 16.1 17.1 18.1 19.1 19.2 20.1 21.1 22.1 23.1 23.2 23.3 23.4 23.5 24.1 25.1 25.2 25.3 26.1 26.2 26.3 26.4 27.1 27.2 27.3 28.1 28.2 28.3 29.1 29.2 29.3 30.1 31.1 31.2 31.3 32.1 32.2 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 45.2 45.3 45.4 45.5 45.6 46.1 47.1 47.2 47.3 48.1 49.1 49.2 50.1 50.2 50.3 51.1 51.2 51.3 52.1 53.1 53.2 54.1 54.2 55.1 56.1 56.2 57.1 58.1 59.1 59.2 59.3 59.4 60.1 60.2 60.3 61.1 62.1 63.1 64.1 65.1 66.1 67.1 67.2 67.3 68.1 68.2 69.1 69.2 70.1 71.1 71.2 71.3 72.1 73.1 73.2 73.3 74.1 75.1 75.2 76.1 77.1 78.1 78.2 78.3 78.4 78.5 78.6 78.7 78.8 78.9 78.10 79.1 80.1 80.2 80.3 81.1 82.1 83.1 83.2 83.3 84.1 85.1 86.1 87.1 87.2 87.3 88.1 89.1 90.1 91.1 92.1 92.2 92.3 92.4 92.5 93.1 94.1 94.2 94.3 94.4 95.1 95.2 95.3 95.4 95.5 95.6 96.1 97.1 97.2 97.3 98.1 99.1 100.1 100.2 100.3 100.4 101.1 101.2 102.1 102.2 103.1 104.1 105.1 106.1 107.1 108.1 108.2 109.1 110.1 111.1 112.1 113.1 114.1 115.1 116.1 117.1 118.1 119.1 120.1 120.2 120.3 121.1 121.2 121.3 122.1 123.1 123.2 124.1 125.1 126.1 127.1 128.1 129.1 129.2 129.3 130.1 131.1 132.1 133.1 134.1 135.1 136.1 136.2 136.3 136.4 136.5 137.1 137.2 137.3 137.4 137.5 138.1 139.1 140.1 140.2 140.3 141.1 142.1 142.2 142.3 143.1 144.1 145.1 146.1 147.1 147.2 147.3 147.4 147.5 148.1 148.2 148.3 149.1 150.1 151.1 152.1 153.1 154.1 154.2 155.1 155.2 155.3 155.4 155.5 155.6 155.7 156.1 157.1 157.2 158.1 159.1 160.1 160.2 161.1 162.1 163.1 164.1 165.1 166.1 166.2 167.1 168.1 168.2 169.1 170.1 171.1 172.1 172.2 172.3 173.1 174.1 175.1 176.1 176.2
Política de Privacidad (en inglés) Thank you for your interest in our homepage, our activities and the information we provide. We do of course take the protection of the personal data we collect, process and use whenever you visit our websites very seriously. This Data Privacy Statement applies to the websites of the Normensand GmbH which can be accessed through the internet address www.normensand.de/es. Each of our other websites contains a Data Privacy Statement applicable to the site concerned. The following statement fulfils our legal obligation to provide information and informs you about the processing of data, the nature of this data, its purpose, the legal bases for processing, your rights with regard to the processing of personal data and our identity. Name and address of data controllers The data controllers as defined by the General Data Protection Regulation (GDPR), national data privacy laws of the member states and the provisions of other data privacy laws are: Normensand GmbH D-59247 Beckum Postfach 17 12 Hans-Boeckler-Straße 20 59269 Beckum Germany Factory entrance: Neubeckumer Straße No.17 E-mail: normensand@zemnet.de VAT-ID-No. Commercial registration number: HR B Nr. 7674 Court of Registration: Muenster Responsible for the content as per § 55 Abs. 2 RStV: Guido Schulte, Dr. Peter Boos General information on data processing Scope of processing of personal data We only ever collect and use the personal data of our users to the extent necessary to provide a functioning website and to present the content and our services. The foundation for the collection and use of the personal data of our users is always provided by one of the legal bases explained in the following section. The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties. Legal basis for the processing of personal data Art. 6 Para. 1 Point a of the EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data insofar as we obtain the consent of the data subject for the processing of personal data. Art. 6 Para. 1 Point b of the GDPR serves as legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This also applies to processing necessary in order to take steps prior to entering into a contract. Art. 6 Para. 1 Point c of the GDPR serves as legal basis insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject. Art. 6 Para. 1 Point d of the GDPR serves as legal basis in cases where processing is made necessary by the vital interests of the data subject or of another natural person. Art. 6 Para. 1 Point f of the GDPR serves as legal basis for processing if processing is necessary for the purposes of the legitimate interest pursued by our organisations or by a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the first-mentioned interest. Erasure of data and retention period The personal data of the data subject will be erased or blocked as soon as the purpose of retention no longer applies. Retention above and beyond this is also possible if such retention is provided for by European or national legislation in European Union directives, laws or other regulations to which the data controllers are subject. The data will also be erased or blocked at the end of a storage limitation period specified by the above-mentioned standards, unless further retention of the data is necessary for the conclusion of a contract or for the performance of a contract. III. Provision of website and creation of log files Description and scope of data processing Each time our website is accessed, our system automatically collects data and information from the computer system accessing the website. The following data is collected in this process: - Your IP address (in partially anonymised form, i.e. without the last number block (e.g. 192.168.100.xxx)) - URL of the websites visited - The type of browser used - The user's operating system - Date and time of access - Search engines used - Names of files downloaded - Websites from which the user's system accesses our website - Websites accessed by the user's system via our website The data are also stored in the log files of our system. This does not apply to the IP addresses of the user or other items of data permitting assignment of the data to a user. Such data is not stored together with other personal data of the user. The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties. Legal basis for data processing Art. 6 Para. 1 Point f of the GDPR serves as legal basis for the temporary storage of data. Purpose of data processing Temporary storage of the IP address by the system is necessary to allow delivery of the website to the user's computer. For this purpose, the IP address of the user has to be retained for the duration of the session. The purpose of storage in log files is to ensure the functionality of the website. We also use the data to optimise the website and to guarantee the security of our IT systems. Evaluation of the data for other purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 Para. 1 Point f of the GDPR. Period of retention The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. With regard to the collection of data for provision of the website, this is the case at the end of each particular session. With regard to the storage of data in log files, this will be the case after 14 days at the latest to permit subsequent tracing of misuse of the website. Storage above and beyond this is also possible in this connection. Objection and removal option The collection of data for provision of the website and storage of the data in log files are absolutely essential for operation of the website. To this extent, no objection option is consequently available to the user. Use of cookies and web analytics by Matomo (formerly PIWIK) Description and scope of data processing Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored in the user's operating system. With the exception of the information stated below, the cookies we place do not contain any information permitting the identification of a user. Our website uses the open-source software tool Matomo (formerly PIWIK) for statistical evaluation of visits to a website. The software places a cookie on the user's computer. The following data is stored on visits to individual pages of our website: - Your IP address (in partially anonymised form, i.e. without the last two number blocks (e.g. 192.168.xxx.xxx)) - URL of the website visited - Websites from which the user has accessed the website visited - Subpages accessed from the website visited - Duration of visit to the website - Frequency of visits to the website The information generated by the cookie concerning your use of this website is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties. The software is set such that your IP address is partially anonymised on collection. It is thus not possible to trace back your visit to our website (e.g.: 192.168.100.xxx). You can agree to the use of cookies by actively giving your consent on visiting the website. Please note that without the use of cookies it may not be possible to utilise all the functions of this website in full. Legal basis for the processing of personal data Art. 6 Para. 1 Point a of the GDPR serves as legal basis for the processing of users' personal data. Purpose of data processing The processing of users' personal data enables us to analyse the browsing behaviour of our users. Evaluation of the data acquired allows us to compile information on usage of the individual components of our website. This helps us to constantly improve our website and make it more user-friendly. Period of retention The data is erased as soon as it is no longer required for our recording purposes. In our case, this means at the end of the particular month under review (however at the latest after 31 days). Use of Google Maps and OpenStreetMap Description and scope of data processing On this website we make use of the services of Google Maps and OpenStreetMap. This enables us to show you interactive maps directly on the website and offer you easy use of the map function. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, Google processes the data listed in section IV. of this statement. This takes place regardless of whether you are logged in via a user account provided by Google or whether no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not wish assignment to your profile at Google, you must accordingly log out first before using the service. Google stores your data in the form of usage profiles and employs these for the purposes of advertising, market research and/or interest-based configuration of its website. In particular, such evaluation is used (even for users who are not logged in) for the placement of interest-based advertising and to inform other social media users about your activities on our website. You have the right to object to the creation of such user profiles, but you must contact Google to exercise this right. Legal basis for the processing of personal data Art. 6 Para. 1 Point f of the GDPR serves as legal basis for the processing of users' personal data. Purpose of data processing and period of retention Within the context of our event and seminar management activities we use Google Maps and OpenStreetMap to provide directions on how to get to the event and seminar locations concerned. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of the provider. You can also find more information about your corresponding rights and setting options to protect your private sphere here: https://policies.google.com/privacy?hl=en&gl=en. Google also processes your personal data in the USA and is committed to compliance with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US- Framework. Information on the purpose and scope of data collection by OpenStreetMap can be found at the addresses wiki.osmfoundation.org/wiki/Privacy_Policy and https://wiki.openstreetmap.org/wiki/Acceptable_Use_Polic y. Contact form and e-mail contact Description and scope of data processing A contact form is provided on our website for the purpose of electronic communication. If use is made of this option, the data entered in the input mask will be transmitted to us and stored. This data includes: - Name - E-mail address - Message - Voluntary information: Telephone and company Alternatively, the e-mail address provided can be used to make contact. In this case, the user's personal data transmitted with the e-mail will be stored. The information processed is stored on our server at a data centre in Germany. This is the only place where the personal data of users is stored. Data is not passed on to third parties. Purpose of and legal basis for data processing The processing of personal data in the context of the contact options serves the purpose of implementing the communication initiated by the user and/or providing the information requested by the user. Art. 6 Para. 1 Point b of the GDPR serves as legal basis for the processing of the user's data. Art. 6 Para. 1 Point f of the GDPR serves as legal basis for the processing of the data transmitted in the course of sending an e-mail. Art. 6 Para. 1 Point b of the GDPR serves as additional legal basis for processing if the aim of the e-mail contact is to conclude a contract. Period of retention The data is erased as soon as it is no longer required for the fulfilment of the purpose of its collection. With regard to the personal data from the input mask of the contact form and the data sent by e-mail, this is the case when the particular correspondence with the user is ended. The correspondence is deemed to have ended when it is apparent from the circumstances that the matter concerned has been conclusively settled. The personal data additionally collected during the sending process will be erased at the latest after a period of seven days. Objection and removal option Users can withdraw their consent to the processing of personal data at any time. Users who contact us by e-mail can object to the storage of their personal data at any time. The correspondence cannot be continued in such cases. All personal data stored in the course of communication will be erased in this case. VII. Passing-on of data for contract completion Your personal data will only be passed on or otherwise transmitted to third parties if passing-on is necessary for the purpose of contract completion (for the sending of publications ordered, for invoicing purposes or for the collection of payments) or if you have given your express consent. The service providers appointed for the above purposes will only receive the information necessary to perform their respective tasks. Appointed service providers and thus possible recipients of the data are: - Logistics and shipping service providers - Payment service providers - Financial and invoicing service providers - External warehousing service providers VIII. Rights of the data subject If your personal data is processed, you are deemed to be the data subject as defined by the GDPR and you have the following rights vis-à-vis the data controllers: Right of access You have the right to demand information from the data controllers about whether we process personal data affecting you. If this is the case, you have the right to demand information on the following items from the data Controllers: - The purposes for which the personal data is being processed; - The categories of personal data being processed; - The recipients or categories of recipient to whom your personal data has been or is still being disclosed; - The envisaged period of retention of your personal data or, if no concrete information is possible, the criteria used to determine the period of storage; - The existence of a right to rectification or erasure of your personal data, of a right to restriction of processing by the data controllers or of a right to object to such processing; - The existence of a right to lodge a complaint with a supervisory authority; - All available information on the origin of the data if the personal data is not collected from the data subject; - The existence of automated decision-making, including profiling in accordance with Art. 22 Para. 1 and 4 of the GDPR and – at least in such cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to demand information on whether your personal data is being transmitted to a third country or to an international organisation. In this context you can demand to be informed of the appropriate safeguards in accordance with Art. 46 of the GDPR relating to transmission. Right to rectification Insofar as your processed personal data is inaccurate or incomplete, you have a right to rectification and/or completion vis-à-vis the data controllers. The data controllers are obliged to perform rectification without delay. Right to restriction of processing Given the following prerequisites, you have the right to demand restriction of the processing of your personal data: - If you contest the accuracy of your personal data for a period enabling the data controller to check the accuracy of the personal data; - If processing is unlawful and you decline erasure of the personal data and demand restriction of use of the personal data instead; - If the data controller no longer requires the personal data for the purposes of processing, but you require this data to assert, exercise or defend legal claims, or - If you have objected to processing in accordance with Art. 21 Para. 1 of the GDPR and it has not yet been established whether the legitimate grounds of the data controllers override your grounds. Where processing of your personal data has been restricted, such data shall – with the exception of storage – only be processed with your consent or to assert, exercise or defend legal claims, or for the protection of the rights of some other natural or legal person, or for reasons of important public interest of the European Union or of a member state. If processing has been restricted on the basis of the above-mentioned prerequisites, you will be informed by the data controllers before the restriction is lifted. Right to erasure a) Erasure obligation You have the right to demand that the data controllers erase your personal data without delay, and the data controllers are obliged to erase this data without delay insofar as one of the following grounds applies: - Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed; - You withdraw your consent on which processing in accordance with Art. 6 Para. 1 Point a or Art. 9 Para. 2 Point a of the GDPR was based, and there is no other legal basis for processing; - You object to processing in accordance with Art. 21 Para. 1 of the GDPR and there are no overriding legitimate grounds for processing, or you object to processing in accordance with Art. 21 Para. 2 of the GDPR; - Your personal data has been unlawfully processed; - Erasure of your personal data is necessary for compliance with a legal obligation in accordance with European Union or member state law to which the data controller is subject; - Your personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 of the GDPR. b) Information to third parties Where the data controllers have made your personal data public and are obliged, in accordance with Art. 17 Para. 1 of the GDPR, to erase this data, they shall, taking into account the technology available and the costs of implementation, take reasonable action, also of a technical nature, to inform data controllers who process the personal data that you as data subject have demanded that they erase all links to this personal data as well as copies or replications of this personal data. c) Exceptions The right to erasure shall not apply insofar as processing is necessary - For exercising the right to freedom of expression and information; - To comply with a legal obligation which requires processing in accordance with European Union or member state law to which the data controller is subject, or for the performance of a task which is in the public interest or is performed in the exercising of official authority conferred on the data controller; - For reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 Point h and i as well as Art. 9 Para. 3 of the GDPR; - For archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 of the GDPR, insofar as the right referred to in clause a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or - To assert, exercise or defend legal claims. Right to notification If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the data controllers, they shall be obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves to be impossible or is associated with disproportionate effort. You have the right to be notified of these recipients by the data controller. Right to data portability You have the right to receive the personal data you have supplied to the data controllers in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another data controller without hindrance by the data controllers to whom the personal data has been supplied, insofar as - Processing is based on consent in accordance with Art. 6 Para. 1 Point a of the GDPR or Art. 9 Para. 2 Point a of the GDPR or on a contract in accordance with Art. 6 Para. 1 Point b of the GDPR and - Processing is carried out by automated means. In exercising this right, you additionally have the right to have your personal data transmitted directly from one data controller to another data controller, where this is technically feasible. This must not adversely affect the freedoms and rights of others. The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task which is in the public interest or is performed in the exercising of official authority conferred on the data controllers. Right to object You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data performed on the basis of Art. 6 Para 1 Point e or f of the GDPR. Following your objection, the data controllers shall no longer process your personal data, unless they can furnish proof of compelling legitimate grounds for processing which override your interests, rights and freedoms, or processing serves the purposes of asserting, exercising or defending legal claims. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling, insofar as this is in connection with such direct marketing. If you object to processing for the purposes of direct advertising, your personal data will no longer be processed for such purposes. In the context of the use of information society services – and notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by automated means using technical specifications. Right to withdraw data protection declaration of consent You have the right to withdraw your data protection declaration of consent at any time. Withdrawal of consent does not affect the lawfulness of the processing performed by reason of the consent prior to withdrawal. Automated individual decision-making, including profiling You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces a legal effect for you or has a similar significant adverse effect on you. This does not apply if the decision - Is necessary for the conclusion or performance of a contract between you and the data Controllers; - Is permissible on the basis of European Union or member state law, to which the data controllers are subject, and such legal provisions contain appropriate measures for safeguarding your rights and freedoms as well as your legitimate interests, or - Is taken with your express consent. These decisions must however not be based on special categories of personal data in accordance with Art. 9 Para 1 of the GDPR, insofar as neither Art. 9 Para 2 Point a nor g applies and appropriate measures have been taken to safeguard rights and freedoms as well as your legitimate interests. With regard to the cases referred to in (1) and (3), the data controllers shall take appropriate action to safeguard rights and freedoms as well as your legitimate interests, which at least include the right to obtain human intervention on the part of the data controllers, to express your point of view and to contest the decision. Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the presumed infringement, if you are of the opinion that the processing of your personal data contravenes the GDPR. The supervisory authority with which the complaint was lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 21.2 22.1 23.1 24.1 24.2 24.3 24.4 24.5 24.6 25.1 26.1 27.1 28.1 29.1 29.2 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 36.3 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 47.2 47.3 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 58.2 58.3 58.4 58.5 58.6 58.7 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 67.2 68.1 69.1 70.1 71.1 72.1 73.1 74.1 74.2 74.3 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 83.2 84.1 85.1 86.1 86.2 87.1 88.1 88.2 89.1 90.1 90.2 90.3 91.1 92.1 93.1 93.2 93.3 94.1 95.1 96.1 97.1 98.1 99.1 99.2 100.1 101.1 101.2 102.1 103.1 103.2 103.3 103.4 104.1 105.1 106.1 106.2 106.3 107.1 108.1 108.2 109.1 110.1 110.2 111.1 112.1 113.1 113.2 114.1 115.1 116.1 117.1
ZAŠTITA PODATAKA Svrha ovih Pravila zaštite privatnosti je da bismo Vam pružili informacije o tome koje Vaše osobne podatke obrađujemo, kako iste obrađujemo i s kojom svrhom, te koja su Vaša prava u vezi s time. IVS - ISTARSKI VODOZAŠTITNI SUSTAV d.o.o., Buzet (dalje u tekstu: IVS ili Društvo ili Voditelj obrade) vodi niz evidencija koje su neophodne za obavljanje osnovne djelatnosti koja je Zakonom proglašena javnom službom. Osobni podaci se prikupljaju za slijedeće kategorije osoba: - korisnici IVS usluga odnosno potrošači - vlasnici nekretnina glede kojih su ostvareni preduvjeti za priključenje istih na infrastrukturu sustava odvodnje - ugovorne strane u postupku rješavanja imovinsko-pravnih odnosa (prodavatelji nekretnina, izvlaštenici, ustupatelji prava služnosti i drugih stvarnih prava) - odgovornih osoba i kontakt osoba kod poslovnih partnera (kupci, dobavljači, sudionici postupaka javne nabave, druga komunalna društva itd.) - radnici Društva - članovi organa Društva Kategorije osobnih podataka: - Ime i prezime - OIB - Adresa prebivališta - Broj tel/mob - Oznaka k.č. koja se priključuje, zk.ul., k.o. i adresa nekretnine koja se priključuje - Za pravnu osobu/ustanovu - ime i prezime zastupnika - Račun-ako je vidljiv nakon uplate - Podaci o potrošnji - Evidencija ispostavljenih računa - Podaci o radnicima sukladno obvezi evidentiranja podataka radnika u smislu članka 5. Zakona o radu, a što je detaljno razrađeno Pravilnikom o sadržaju i načinu vođenja evidencije o radnicima SVRHE I PRAVNE OSNOVE: OBRADA PODATAKA O KUPCIMA (a) IVS obrađuje Vaše podatke radi toga što su isti nužni za obavljanje osnovne djelatnosti Društva odnosno za pružanje usluge, te bez istih pružanje usluge ne bi bilo tehnički izvedivo. IVS pruža usluge odvodnje i pročišćavanja otpadnih voda odnosno usluge „Javne odvodnje“ u smislu Zakona o vodama (članak 3. točka 28.). Djelatnosti javne vodoopskrbe i javne odvodnje obavljaju se kao javna služba temeljem odredbe članka 196. stavak 1. Zakona o vodama te predstavljaju djelatnosti od interesa za jedinice lokalne samouprave (stavak 2.). Jedinice lokalne samouprave dužne su na svome području osigurati obavljanje djelatnosti javne vodoopskrbe i javne odvodnje (stavak 3.). Slijedom navedenoga, usluge koje IVS isporučuje svojim korisnicima odnosno potrošačima javne su usluge. Podaci koji se obrađuju o okviru ovih obrada prikupljeni su neposredno od samih ispitanika s kojima je sklopljen ugovor ili iz javnih evidencija odnosno iz isprava koje su dostavili sami. Podaci o lokacijama priključenih nekretnina nužni su radi tehničkog održavanja komunalnih vodnih građevina do priključka, ali istodobno i radi očitanja potrošnje na vodomjeru, kao i radi ispunjenja obveza priključenja na sustav odvodnje. Podaci o osobi korisnika nužni su radi izdavanja računa, vođenja poslovnih evidencija, slijedom čega su neophodni za izvršenje obveza voditelja obrade. Kontakt podaci korisnika vode se isključivo radi potrebe kontaktiranja u interventnim situacijama do kojih može doći uslijed kvara na instalacijama, vremenskih nepogoda, prirodnih katastrofa i sl. Broj računa (IBAN) s kojega se plaćaju računi prikuplja se radi vrlo učestalih uplata s pogrešnim navođenjem svrhe i poziva na broj, uslijed čega bi bila nemoguća identifikacija svrhe uplate kada ne bi bili dostupni podaci o vlasniku računa. IVS zaprima više tisuća pojedinačnih uplata svaki mjesec te kod pogrešnih podataka na uplatnicama podatak o vlasniku računa znatno olakšava identifikaciju osnove koja je plaćena. (b) Slijedom navedenoga, pravna osnova za obradu osobnih podataka u okviru ove obrade su: - obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka (članak 6. alineja (b) Uredbe) - obrada je nužna radi poštovanja pravnih obveza voditelja obrade (članak 6. alineja (c) Uredbe) - obrada je nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade (članak 6. alineja (e) Uredbe) - obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane (članak 6. alineja (f) Uredbe) OBRADA PODATAKA O VLASNICIMA NEKRETNINA (a) U okviru ove obrade prikupljaju se podaci vlasnika/korisnika nekretnina glede kojih se provodi postupak izgradnje komunalnih vodnih građevina putem kojih bi se iste spojile na sustav odvodnje. Naime, Zakonom o vodama je u članku 212. propisno da je vlasnik građevine, odnosno vlasnik druge nekretnine dužan je priključiti svoju građevinu, odnosno drugu nekretninu na komunalne vodne građevine sukladno odluci o priključenju, a najkasnije u roku od 1 godine od dana obavijesti isporučitelja vodne usluge o mogućnosti priključenja. Osim navedenoga, Voditelju su predmetni podaci potrebni kako bi uopće mogao raditi planove i projekcije projekata izgradnje pojedinih komunalnih vodnih građevina ili elemenata sustava. Podaci koji se obrađuju o okviru ovih obrada prikupljeni su iz javnih evidencija te od ispitanika samih. Podaci o lokacijama nekretnina nužni su radi tehničkog dimenzioniranja projekata kao i planiranja provedbe te priključenja. Podaci o osobi korisnika nužni su radi identifikacije osobe ovlaštene za poduzimanje pravnih poslova u vezi nekretnine, a kada postane korisnik i radi izdavanja računa, vođenja poslovnih evidencija, slijedom čega su neophodni za izvršenje obveza voditelja obrade. Kontakt podaci korisnika vode se isključivo radi potrebe kontaktiranja radi upućivanja obavijesti o ostvarenju uvjeta priključenja kao i radi samog sklapanja ugovora o priključenju. (b) Slijedom navedenoga, pravna osnova za obradu osobnih podataka u okviru ove obrade su: - obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka (članak 6. alineja (b) Uredbe) - obrada je nužna radi poštovanja pravnih obveza voditelja obrade (članak 6. alineja (c) Uredbe) - obrada je nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade (članak 6. alineja (e) Uredbe) - obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane (članak 6. alineja (f) Uredbe) OBRADA PODATAKA O UGOVORNIM STRANAMA IMOVINSKO-PRAVNIH POSLOVA (a) U okviru ove obrade prikupljaju se podaci vlasnika/korisnika nekretnina preko kojih je planirana izgradnja komunalnih vodnih građevina. Izgradnja vodnih građevina je od interesa za Republiku Hrvatsku temeljem članka 22. stavak 2. i 3. Zakona o vodama. Podaci koji se obrađuju o okviru ovih obrada prikupljeni su iz javnih evidencija. Podaci o lokacijama nekretnina nužni su radi tehničkog dimenzioniranja projekata kao i planiranja provedbe te priključenja. Podaci o osobi korisnika nužni su radi identifikacije osobe ovlaštene za poduzimanje pravnih poslova u vezi nekretnine, kao i za potrebe provođenja postupka izvlaštenja ako se odnos ne riješi putem ugovora. Kontakt podaci korisnika vode se isključivo radi potrebe komunikacije u postupku sklapanja ugovora odnosno provedbe izvlaštenja. (b) Slijedom navedenoga, pravna osnova za obradu osobnih podataka u okviru ove obrade su: - obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka (članak 6. alineja (b) Uredbe) - obrada je nužna radi poštovanja pravnih obveza voditelja obrade (članak 6. alineja (c) Uredbe) - obrada je nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade (članak 6. alineja (e) Uredbe) - obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane (članak 6. alineja (f) Uredbe) OBRADA PODATAKA O ODGOVORNIH OSOBA POSLOVNIH PARTNERA (a) U okviru ove obrade vode se podaci o fizičkim osobama koje su ujedno i članovi organa trgovačkih društava, obrtnici te osobe koje obavljaju samostalnu djelatnost i to glede subjekata s kojima Voditelj obrade ostvaruje neposredne poslovne odnose. Poslovni odnos i poslovna komunikacija bez tih podataka ne bi bili mogući ili bi bili skopčani s iznimnim teškoćama. Općom uredbom o zaštiti podataka je u recitalu (14) određeno da zaštita koja se pruža ne obuhvaća obrade osobnih podataka koji se tiču pravnih osoba, a osobito poduzetnika koji su ustanovljeni kao pravne osobe, uključujući ime i oblik pravne osobe i kontaktne podatke pravne osobe. Ostvarenje prava i interesa šire zajednice nije moguće postići bez cjelovitog prikaza poduzetničkih podataka, s time da treba istaći da su osobni podaci članova organa trgovačkih društava istodobno osobni podaci ali su to također i podaci tih trgovačkih društava, glede kojih je izrijekom propisan pravni režim pune javnosti. Zakonom o sudskom registru je u članku 2. propisano da je Registar javna knjiga koja sadrži podatke i isprave o subjektima upisa za koje je upis u registar propisan zakonom. Registar je javna knjiga koja sadrži podatke i isprave o subjektima upisa za koje je upis u registar propisan zakonom, a da je Internetska stranica registra je dio sustava registra putem koje je omogućeno pretraživanje i uvid u javne podatke iz glavne knjige, kao i javno objavljene podatke o sadržaju provedenih upisa u registar, odnosno javno objavljene odluke za koje je zakonom ili odlukama registarskog suda određeno da će se objaviti na način na koji se objavljuju upisi u registar. Nadalje, u članku 4. propisano je da je Registar javan te da svatko, bez dokazivanja pravnog interesa, ima pravo uvida u podatke upisane u glavnoj knjizi, u isprave na temelju kojih je obavljen upis i u druge isprave i podatke pohranjene u zbirci isprava. Podaci o osobama koje zastupaju pravne osobe nužni su radi vođenja poslovne korespondencije. Kontakt podaci vode se isključivo radi potrebe poslovnog komuniciranja u okviru ugovornih odnosa ili u neposrednoj vezi s istima. (b) Slijedom navedenoga, pravna osnova za obradu osobnih podataka u okviru ove obrade su: - obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka (članak 6. alineja (b) Uredbe) - obrada je nužna radi poštovanja pravnih obveza voditelja obrade (članak 6. alineja (c) Uredbe) - obrada je nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade (članak 6. alineja (e) Uredbe) - obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane (članak 6. alineja (f) Uredbe) OBRADA PODATAKA O RADNICIMA (a) U okviru ove obrade vode se podaci koji su predviđeni propisima koji uređuju radne odnose, mirovinsko i zdravstveno osiguranje, poreznim propisima i propisima koji uređuju računovodstvo. Zakonom o radu propisana obveza evidentiranja podataka radnika u članku 5. što je i detaljno razrađeno Pravilnikom o sadržaju i načinu vođenja evidencije o radnicima. (b) Slijedom navedenoga, pravna osnova za obradu osobnih podataka u okviru ove obrade su: - obrada je nužna za izvršavanje ugovora u kojem je ispitanik stranka (članak 6. alineja (b) Uredbe) - obrada je nužna radi poštovanja pravnih obveza voditelja obrade (članak 6. alineja (c) Uredbe) - obrada je nužna za izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti voditelja obrade (članak 6. alineja (e) Uredbe) - obrada je nužna za potrebe legitimnih interesa voditelja obrade ili treće strane (članak 6. alineja (f) Uredbe) Drugi pružatelji usluga: IVS se služi uslugama vanjskih suradnika glede usluga odražavanja IT sustava te održavanja programskih rješenja kroz koja se vodi materijalno-financijsko poslovanje društva. U okviru tih usluga moguće je da ovlaštene osobe dođu u kontakt s Vašim osobnim podacima. Sa svim osobama na takvoj ili sličnoj osnovi sklopljeni su sporazumi o povjerljivosti kojima se jamči da te osobe kao niti njihovi djelatnici neće poduzimati nikakve radnje kojima bi se naručio integritet podataka ili privatnost korisnika. Izvan navedenoga Vaše osobne podatke možemo razotkriti drugim stranama: (a) ako imamo Vaše valjano dopuštenje za to (privola); (b) radi odazivanja pozivu na sud ili drugog tijela javne vlasti, radi izvršenja pravnog naloga, sudskog naloga, ili poštovanja druge zakonske obveze; (c) u sklopu provođenja naših općih i tehničkih uvjeta ili drugih općih akata; (d) kako bismo mogli koristiti dopuštene pravne lijekove ili braniti opravdane pravne interese. Vaše osobne podatke također možemo učiniti dostupnim trećoj strani u slučaju statusne promjene, reorganizacije, udruživanja, prodaje, zajedničkog ulaganja, prijenosa, transfera ili drugog djelomičnog ustupanja ili ustupanja u cijelosti poslova, imovine ili infrastrukturnih objekata IVS-a, što se, bez ograničenja, odnosi i na slučajeve vezane uz stečaj, predstečaj i druge slične postupke, uz uvjet da takav subjekt kojem prenesemo osobne podatke neće smjeti obrađivati vaše osobne podatke osim onako kako je opisano u ovim Pravilima zaštite privatnosti bez da vas obavijesti i, ako je to potrebno zbog važećih zakona, dobivanja vašeg pristanka. Prijenos i čuvanje osobnih podataka IVS ne prenosi osobne podatke izvan granica Republike Hrvatske. Vaše podatke čuvamo u našim podatkovnim sustavima u skladu s važećom politikom čuvanja. Vrijeme čuvanja ovisi o zakonskih zahtjevima i poslovnim potrebama i to je definirano u internim aktima tvrtke. Kad podatak više nije potreban odnosno kada se više ne koristi aktivno, isti se pohranjuje u arhivu te se trajno briše odnosno uklanja iz svih baza podataka nakon što protekne 5 godina. Tehničke i organizacijske mjere zaštite podataka Tehničke i organizacijske mjere zaštite podataka detaljno su uređene posebnim aktom u kojemu su prikazane tehničke i organizacijske mjere koje smo usvojili u svrhu osiguravanja odgovarajuće razine zaštite vaših podataka. Iz sigurnosnih razloga taj se akt ne objavljuje javno. Djeca IVS ne prikuplja podatke o osobama mlađima od 16 godina, osim iznimno ako su takve osobe vlasnici priključenih nekretnina u kom slučaju podatke prikupljamo od zakonskog zastupnika odnosno skrbnika te osobe. Ako doznamo da smo prikupili osobne podatke djeteta mlađeg od 16 godina, poduzet ćemo korake da te informacije izbrišemo što je prije moguće ukoliko je to moguće, a ukoliko nije o tome ćemo odmah izvijestiti zakonskog zastupnika odnosno skrbnika te osobe. Ažuriranja Pravila o zaštiti privatnosti IVS može s vremena na vrijeme ažurirati ova Pravila zaštite privatnosti u sklopu promjena poslovanja ili poboljšavanja naše usluge, te kako se tehnologija i zakoni budu mijenjaju. Ažurnu verziju Pravila zaštite privatnosti možete pronaći na web stranicama IVS-a www.ivs.hr/zastita_privatnosti. Izmjene i dopune stupaju na snagu nakon što budu objavljena na web stranicama. Ako je riječ o značajnim izmjenama koje utječu na Vaše pravo privatnosti ili mogu biti od utjecaja na Vaša prava i obveze, obavijestit ćemo vas o tome i pisanim putem. Zadržavanje osobnih podataka Vaše ćemo osobne podatke držati u sklopu aktivne obrade sve dok ste registrirani aktivni korisnik usluga IVS-a. Nakon eventualnog prestanka Vašeg statusa aktivnog korisnika/potrošača Vaše ćemo podatke čuvati još daljnjih 6 godina, obzirom na opći zastarni rok od 5 godina u okviru kojega je moguće da dođe do sudskih sporova u vezi isporučene usluge. Nakon isteka roka od 6 godina svi se Vaši podaci i isprave trajno brišu odnosno uništavaju, osim podataka glede kojih postoji obveza duljeg čuvanja temeljem posebnog propisa. Vaša prava u svezi s osobnim podacima Općom uredbom o zaštiti podataka zajamčeno Vam je pravo na pristup i ispravak ili brisanje svojih osobnih podataka, prenosivost podataka, ograničenje obrade svojih osobnih podataka, pravo na prigovor zbog obrade svojih osobnih podataka i pravo na prigovor kod nadzornog tijela. Da biste koristili bilo koje od gore navedenih prava možete podnijeti zahtjev Osobi zaduženoj za zaštitu podataka na obrascu koji je objavljen na web stranicama IVS-a. Niže u nastavku opisana su prava glede kojih možete podnijeti zahtjev: Pravo na pristup Omogućujemo vam da imate pristup svojim podacima koje obrađujemo. To znači da nas možete kontaktirati, a mi ćemo vam dati kopiju informacija o tomu koje vaše osobne podatke obrađujemo i u koju svrhu. Pravo na ispravak Pojedinac na kojeg se odnose osobni podaci ima pravo zatražiti da bez nepotrebnog odgađanja ispravimo pogrešne ili nepotpune podatke koje o njemu obrađujemo. U slučaju da osobne podatke dobivamo iz javno dostupnih registara, molimo vas da se najprije neposredno obratite dotičnom tijelu i ispravite svoje podatke. Pravo na brisanje Ukazujemo na okolnost da bez određenih osobnih podataka usluga koju pružamo neće biti moguće pružati te bi zahtjev za brisanjem tih podataka nužno doveo do prestanka pružanja usluge, odnosno isključenja iz sustava. Budući da je na području na kojemu IVS pruža usluge priključenje na komunalne vodne građevine (tamo gdje su dostupne) obavezno sukladno odredbi članaka 209., 210. i 212. Zakona o vodama, to takvim zahtjevima neće moguće neće biti udovoljeno. Konačno, udovoljit ćemo Vašem zahtjevu, osim ako utvrdimo da imamo pravnu podlogu za obradu vaših osobnih podataka. Pravo na prigovor Imate pravo prigovarati na određene vrste obrade osobnih podataka. Možete se suprotstaviti određenim korištenjima osobnih podataka, ako se ti podaci obrađuju u svrhe koje nisu potrebne za obavljanje naših usluga ili za ispunjavanje zakonske obaveze. Možete se usprotiviti daljnjoj obradi osobnih podataka nakon prethodne suglasnosti. Ako se usprotivite daljnjoj obradi osobnih podataka, to može smanjiti mogućnost korištenja naših usluga. Pravo na ograničenje obrade Imate pravo zahtijevati da više ne obrađujemo vaše osobne podatke u određene svrhe. U tom slučaju vaše osobne podatke ubuduće nećemo koristiti u svrhe na koje se odnosi vaša zabrana. Pravo na prenosivost podataka Imate pravo da vam podatke koji se odnose na vas pošaljemo u strukturiranom, opće korištenom i strojno čitljivom obliku, a vi ih možete poslati drugom upravitelju. Napominjemo da se to odnosi samo na podatke koje smo dobili neposredno od vas. Komunikacija i ostvarivanje prava Prava možete ostvariti na način da nam na dolje navedene adrese pošaljete običnu poštu ili elektroničku poštu sa sljedećim podacima: ime i prezime, adresa, elektronička adresa ili telefonski broj i bilo koji dodatni identifikacijski kriterij koji će nam omogućiti vašu nedvosmislenu identifikaciju. Možemo zahtijevati i dodatne informacije potrebne za potvrdu vašeg identiteta. Možemo odbiti zahtjeve koji se nerazumno ponavljaju, pretjerani su ili vidljivo neutemeljeni. Ako mislite da podatke ne obrađujemo u skladu s važećim zakonima o zaštiti osobnih podataka, možete podnijeti žalbu nadležnom nadzornom tijelu. Osoba zadužena za zaštitu podataka Za sva pitanja možete se obratiti našoj osobi zaduženoj za zaštitu osobnih podataka: Ana Šćulac, na adresi poslovnog sjedišta IVS-a, a moguće ju je kontaktirati i e-poštom na ana.sculac@ivsustav.hr VEZANI DOKUMENTI