http___www.intrabilis.hr_general-data-protection-regulation-gdpr__1.xml
1.1 1.2 1.3 2.1 3.1 3.2 4.1 4.2 5.1 6.1 7.1 8.1 8.2 9.1 10.1 11.1 12.1 13.1 13.2 13.3 14.1 15.1 15.2 16.1 17.1 17.2 18.1 19.1 19.2 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 30.2 31.1 32.1 33.1 33.2
1.1 The administrator of the personal data of the website at https://www.compact-tractor-ireland.eu/ is IMPACTECH, based in Westside Business Park, Unit 3C, Old Kilmeaden Road, Waterford, Ireland. tel. +353 892 20 50 88, e-mail: info@compact-tractor-ireland.eu 1.2 The purpose of collecting and processing personal data is to process them in the website’s IT system, specifically for the purpose of financial reporting. 1.3 The provision of information on the collection and processing of personal data of a customer of the website takes place immediately after such a person requests it from the data controller, but not longer than 24 hours. Communication with the personal data controller is free of charge. 1.4 The customer of the website provides his personal data voluntarily, and their provision is required in order to establish a contract between the owner and the customer. Providing personal data involves accepting their processing by the controller for the purposes mentioned above. 1.5 Only the personal data of the customer of the website, who is a natural person, shall be processed. 1.6 The Administrator processes personal data of the Customer for as long as it is necessary for the proper performance of the contract and offering services after its performance. 2.1 The legal basis for requiring the customer to provide personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, known as the ‘RODO’. 3.1 The term ‘personal data’ means information necessary to identify an individual, in particular his or her name and location. The data are only used for the purposes mentioned in this document. 3.2 A dataset is any structured set of data of a personal nature, accessible according to specific criteria. 3.3 Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 3.4 A personal data controller is a natural or legal person, a public authority, an individual or another entity, which independently or jointly with others determines the purposes and methods of the processing of personal data. 3.5 Data security in an IT system – means the implementation and operation of appropriate technical and organizational measures to protect data against unauthorized processing. 3.6 A person’s consent to the processing of his/her personal data – this is a declaration of will, the content of which is consistent with the processing of personal data of the person making the declaration. Such consent may not be implicit or implicit in a statement of intent with a different content. Such consent may be revoked at any time. 4.1 The processing of personal data of the Customer of the website is necessary for the performance of the contract to which the Customer wishes to be a party or, if it is necessary already before the conclusion of the contract, in accordance with the Ordinance of the RODO, Article 6(1)(2). 4.2 Before entering into a contract, the owner of the website shall provide the customer with the conditions for the provision of services and familiarize him with the provisions of the contract and the protection of his personal data. The Client, after getting acquainted with the above mentioned, agrees to the processing of his personal data in the appropriate field of the form. 4.3 Consent given by the customer becomes the basis for the processing of his personal data. 4.4 The consent referred to in point 4.2 may be given in accordance with Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016. (RODO) – Article 7, paragraph 3 – revoke at any time and in any form, and such declaration of will of the customer is binding on the controller. 4.5 The consent given prior to the conclusion of the contract with the website also covers the processing of personal data in the future, if the purpose of the processing has not changed and the owner of the online shop is obliged under the contract to update or repair the subject matter of the contract. 5.1 The controller of personal data undertakes to take special care in order to protect the interests of data subjects. In particular, these data are to be processed only for specified and legitimate purposes. 5.2 Any processing of data which is incompatible with the purpose of the contract shall be inadmissible. 5.3 The Administrator undertakes to never request from the Client information related to his/her racial or ethnic origin, political opinions, religious or philosophical beliefs, religious, party or trade union membership, as well as data on his/her health condition, genetic code, addictions or sexual life and data concerning convictions, convictions and fines, or other decisions issued in court or administrative proceedings. 6.1 Every person has the right to control the processing of data concerning him/her contained in data filing systems, in particular the right to obtain information on the purpose, scope and manner of data processing contained in such systems, to demand supplementing, updating, correcting personal data, temporarily or permanently withholding their processing or removing them, if they are incomplete, outdated, false or were collected in breach of the Act or are no longer necessary for the purpose for which they were collected and other information listed in the Ordinance of the Chief Inspector of Environmental Protection. 7.1 If the data subject proves that the personal data are incomplete, outdated, untrue or have been collected in breach of the Act or are unnecessary for the purpose for which they were collected, the controller shall be obliged, without undue delay, to complete, update, correct the data, temporarily or permanently withhold the processing of the questioned data or remove them from the filing system, unless it concerns personal data for which the procedure for supplementing, updating or correcting them is laid down in separate Acts. 7.2 The data subject shall have the right to request the controller to rectify without delay inaccurate personal data relating to him which are inaccurate. Taking into account the purposes of the processing, the data subject shall have the right to request that incomplete personal data be completed, including by way of an additional statement. 7.3 The controller shall inform about the rectification or erasure of personal data or the limitation of the processing, which the controller performed, within a period not exceeding 24 hours. 8.1 The Administrator undertakes to apply security measures ensuring the security of the personal data being processed, appropriate to the threats and categories of data being protected. 8.2 In particular, the controller shall protect the Customer’s data from being made available to unauthorized persons and from being processed in a manner that is inconsistent with the law and the agreement. 9.1 Personal data provided by the customer is not sent to any third country. 10.1 The Customer who provides the personal data has the right to contact the Office of Personal Data Protection if he suspects that his data are being used for purposes that are not in accordance with the contract or the law, or if he feels in any other way that his data are at risk. 11.1 The data subject has the right to request the controller to delete his personal data without delay and the controller is obliged to delete his personal data without undue delay if the customer has terminated the contract with the owner of the online store, has withdrawn his consent to the use of his personal data or it follows from other possibilities set out in Article 17(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. (RODO) 11.2 The Administrator undertakes not to publish personal data made available to him by the Customer. 11.3 The data subject shall have the right to request the controller to restrict the processing of those data. 11.4 The data subject shall have the right to object at any time, on grounds relating to his particular situation, to the processing of personal data relating to him. The controller shall no longer process such personal data unless he demonstrates that there are compelling legitimate grounds for processing overriding the interests, rights and freedoms of the data subject or for establishing, pursuing or defending a claim.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 7.3 8.1 8.2 9.1 10.1 11.1 11.2 11.3 11.4 12.1 13.1 14.1 15.1 16.1 16.2 17.1 17.2 17.3 17.4 17.5 17.6 18.1 18.2 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1
Politika zaštite privatnosti podataka – Intrabilis Politika zaštite privatnosti podataka Intrabilis d.o.o. u potpunosti je usklađena sa Europskom regulativom o zaštiti osobnih podataka L 119/1 (GDPR - General Data Protection Regulation). - Područje primjene - Načela obrade osobnih podataka - Prava klijenata (ispravak, brisanje, prigovor, pristup, ograničenje obrade, prenosivost) - Područje primjene Politika se primjenjuje na sve osobne podatke klijenata Intrabilisa koje Intrabilis prikuplja, upotrebljava ili na drugi način obrađuje, izravno ili putem svojih partnera. Osobni podatak jest svaki podatak koji se odnosi na fizičku osobu čiji je identitet utvrđen ili se može utvrditi, izravno ili neizravno (dalje u tekstu: podatak ili osobni podatak). Obrada podataka jest bilo koja radnja izvršena na osobnim podacima, primjerice prikupljanje, snimanje, spremanje, upotreba, prijenos osobnih podataka i uvid u osobne podatke. Politika se ne primjenjuje na anonimne podatke. Anonimni podatak jest podatak koji je izmijenjen na način da se ne može povezati s određenom fizičkom osobom ili se ne može povezati bez nerazmjernog truda pa se stoga, u skladu s važećim propisima, i ne smatra osobnim podatkom. Intrabilis je u voditelj obrade u odnosu na osobne podatke svojih klijenata u smislu važećih propisa o zaštiti osobnih podataka. - Načela obrade osobnih podataka Želimo biti pouzdan partner klijentima u zaštiti njihove privatnosti i opravdati povjerenje koje su nam ukazali. Također želimo biti potpuno transparentni i jasni u pogledu obrade osobnih podataka klijenata. To je, među ostalim, i svrha ove politike, a osobito kroz aktivnu ulogu klijenata u upravljanju podatcima. Klijenti nam se uvijek mogu obratiti sa zahtjevom za izmjenu osobnih podataka koji se na njih odnose ili s očitovanjem volje o tome u koje svrhe žele, odnosno ne žele da se njihovi podatci obrađuju. Pri obradi osobnih podataka postupamo u skladu sa zakonom, ali usto uvijek nastojimo primjenjivati više standarde i najbolju europsku praksu. Osobne podatke prikupljamo i obrađujemo samo u određenu i zakonitu svrhu te ih dalje ne obrađujemo na način koji nije u skladu sa svrhom u koju su prikupljeni, osim ako nije drugačije propisano zakonom ili na temelju privole klijenta. Uvijek upotrebljavamo samo one podatke klijenata koji su primjereni i nužni za postizanje određene zakonite svrhe, a ne i više podataka od toga. Osobne podatke obrađujemo na siguran način, uključujući zaštitu od neovlaštene ili nezakonite obrade te od slučajnog gubitka, uništenja ili oštećenja (npr. pristup osobnim podacima klijenata imaju samo ovlaštene osobe kojima je to nužno za obavljanje njihova posla, a ne i drugi zaposlenici). Podatke klijenata pohranjujemo i obrađujemo samo onoliko dugo koliko je potrebno za izvršenje određene legitimne svrhe, osim ako važećim propisima nije za pojedinu svrhu predviđeno duže ili kraće vrijeme čuvanja ili u drugim slučajevima izričito propisanim zakonom. Nakon toga, podatci se trajno brišu ili čine anonimnima. Kako bismo klijentima i posjetiteljima www.intrabilis.hr pružili što bolje funkcionalnosti i što interesantniji sadržaj kad posjećuju naše internetske stranice upotrebljavamo kolačiće i/ili druge uobičajene tehnike koje prikupljaju određene podatke klijenata (npr. IP adresa s koje se pristupa internetskoj stranici, vrijeme spajanja itd.). Detaljne informacije o kolačićima koje upotrebljava pojedina internetska stranica klijent dobiva odmah pri prvom posjetu internetskoj stranici. Na temelju tih informacija klijent pri posjetu internetskoj stranici daje ili uskraćuje svoju privolu za upotrebu kolačića. Postavke kolačića uvijek se mogu podesiti u internetskom pregledniku. Informacije o klijentima dobivene kolačićima povezivat ćemo s drugim podatcima o klijentima radi boljeg upoznavanja klijenata, samo na temelju privole. Upotrebljavamo razne tehničke i organizacijske mjere zaštite podataka klijenata od neovlaštenog uvida osoba unutar i izvan Intrabilis-a, izmjene, gubitka, krađe i bilo koje druge povrede i zloupotrebe podataka u skladu s europskom praksom. Ove mjere, među ostalim, uključuju sljedeće: - sklapanje ugovora o zaštiti osobnih podataka klijenata sa svim tzv. podizvođačima; - implementaciju svih mjera zaštite na sustavima na kojima se nalaze podatci klijenata; - provođenje redovitih kontrola sigurnosnih mjera i mjera zaštite osobnih podataka; - stalnu edukaciju djelatnika; - Prava klijenata (ispravak, brisanje, prigovor, pristup, ograničenje obrade, prenosivost) Uz aktivnu ulogu klijenata u vezi s upravljanjem privolama, tj. pravom klijenta da u svakom trenutku da i povuče privolu, klijent ima i sljedeće aktivne uloge, sve u skladu sa važećim propisima: - pravo na prigovor: klijent ima pravo u svakom trenutku zatražiti prestanak primanja eventualnih promidžbenih obavijesti o uslugama Intrabilisa - pravo na pristup: klijent ima pravo dobiti potvrdu obrađuju li se osobni podatci klijent te, ako se takvi osobni podatci obrađuju, pristup tim podatcima i informacije o svrsi obrade, kategorijama osobnih podataka, primateljima ili kategorijama primatelja, o predviđenom razdoblju u kojemu će podatci biti pohranjeni ili o kriterijima upotrijebljenima za utvrđivanje tog razdoblja, postojanju prava klijenata, postojanju automatiziranog donošenja odluka, uključujući izradu profila, te o informacijama o logici obrade, važnosti i predviđenim posljedicama obrade, zaštitnim mjerama ako se podatci prenose u tzv. treće zemlje. - pravo na brisanje: klijent ima pravo ishoditi brisanje osobnih podataka koji se odnose na njega bez nepotrebnog odgađanja i pod uvjetima navedenima u važećim propisima o zaštiti podataka. - pravo na ispravak: klijent ima pravo ishoditi ispravak netočnih osobnih podataka koji se odnose na klijenta. Svoja prava klijent može ostvariti obraćanjem, odnosno podnošenjem odgovarajućeg zahtjeva direktno na Intrabilis d.o.o - telefonski broj +385 1 2917135, te na e-adresu mail@intrabilis.hr