http___www.ireks-aroma.hr_zastita-podataka.htm_3.xml
1.1 2.1 2.2 2.3 2.4 3.1 4.1 5.1 5.2 6.1 7.1 7.2 8.1 9.1 11.1 12.1 13.1 14.1 15.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 24.3 25.1 26.1 26.2 27.1 28.1 29.1 30.1 31.1 32.1 32.2 32.3 33.1 33.2 34.1 35.1 36.1 36.2 36.3 37.1 38.1 39.1 40.1 41.1 42.1 43.1 43.2 43.3 43.4 44.1 45.1 46.1 47.1 48.1 49.1 49.2 50.1 50.2 51.1 51.2 51.3 51.4 51.5 51.6 51.7 51.8 51.9 52.1 52.2 52.3 52.4 53.1 53.2 54.1 54.2 54.3 55.1 56.1 56.2 56.3 57.1 58.1 58.2 58.3 58.4 58.5 58.6 58.7 58.8 58.9 58.10 58.11 59.1 59.2 59.3 59.4 59.5 59.6 59.7 59.8 60.1 61.1 61.2 61.3 61.4 61.5 61.6 61.7 61.8 62.1 63.1 64.1 65.1 66.1 66.2 66.3 66.4 66.5 66.6 66.7 66.8 67.1 68.1 69.1 70.1 71.1 72.1 73.1 73.2 74.1 75.1 75.2 75.3 75.4 75.5 76.1 76.2 77.1 77.2 78.1 79.1 80.1 80.2 81.1 81.2 82.1 82.2 83.1 83.2 84.1 84.2 85.1 85.2 86.1 86.2 87.1 87.2 88.1 88.2 89.1 90.1 90.2 91.1 92.1 93.1 93.2 94.1 95.1 95.2
Our notice regarding data protection The Fritz Thyssen Stiftung takes the protection of your personal data very seriously. We would therefore like to inform you about whether and which data we process. Our obligation to do this emanates from the German Telemedia Act (Telemediengesetz – TMG) and the General Data Protection Regulation (GDPR). We provide our information at www.fritz-thyssen-stiftung.de. Personal data Personal data means all information that relates to an identified or identifiable natural person (referred to in the following as data subject); an identifiable persons is deemed to mean a natural person who can be identified directly or indirectly, in particular by means of association with a form of identification such as a name, an identification number, location-related data, an online identification or one or more special features that manifest the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. Our personal data therefore includes, for example, your name, the address where you reside, your gender, your date of birth, your age, your telephone number, your e-mail address or your IP address. This list is not complete and is merely intended to show you what the term personal data may designate. Name and contact data of the instance in charge The Fritz Thyssen Foundation is the instance in charge of processing your personal data. You can contact us at this address: Fritz Thyssen Stiftung Apostelnkloster 13-15 Data protection officer This is where to contact the Fritz Thyssen Foundation’s Data Protection Officer: Dr. Thomas Suermann Fritz Thyssen Stiftung Apostelnkloster 13-15 E-Mail: datenschutz@fritz-thyssen-stiftung.de What data from you that we collect, process or use In the following we inform you whether and what data we collect, process or use when you use one of our information services: a) General principle We do not collect, process or use any personal data on you in principle when you use our information services. b) Enquiries by e-mail If you contact us by e-mail, it may be the case that we require personal data from you. We only collect, process or use your personal data to the extent and as long as we need such in order to render our information services to you. We delete your personal data after we have rendered our information services to you unless a statutory retention obligation requires us to store your personal data for a longer period. c) Data collection for technical reasons Each time you visit www.fritz-thyssen-stiftung.de, we automatically collect and store your data that your browser sends to our server. This involves the following information: - Type and version of the browser used by you - What operating system you are using - The URL of the site being requested - Date and time of day when the site is called up - Your IP address We do not have any possibility to assign this data to you individually, nor do we place this data together with other data sources. Error logs which record incorrect page call-ups are stored for 7 days. In addition to error messages, these include the IP address that accesses the site and, depending on the error, the website accessed. If we obtain knowledge of your IP address when you call up our site, we shall store the aforementioned data for a period of 60 days and delete it after the expiry of this period of time unless statutory retention obligations require us to store your data for a longer period of time. We shall only assess data which has been recorded in a protocol on your visit to our website or have such assessed if we are obligated to do such by law or a court decision or we need the protocolled data in order to be able to take legal action under penal and/or civil law against attacks on our infrastructure. d) Downloading of files On our website we offer you the possibility to download files. In order to make this possible, we automatically collect data which your browser transmits to our server. This involves the following information: - Type and version of the browser used by you - What operating system you are using - The URL of the site being requested - Date and time of day when the site is called up - Your IP address To the extent that we acquire knowledge of your IP address through your download, we shall store the aforementioned data for a period of 60 days and delete it after the expiry of this period of time unless statutory retention obligations require us to store your data for a longer period of time. In order to foster reasonably transparent actions in the interest of the public weal, the Fritz Thyssen Foundation publishes annual reports in printed form, within the framework of which we report on the names of recipients of support, their institutions and their research projects. You can download these annual reports from our website. The Foundation reserves the right to also report on its website about projects for which support has been approved. These forms of publication are not associated with any assessments or evaluations. e) No use of cookies We do not use any “cookies” (text files that are saved on the web browser on your computer that make it possible to analyse use of the website). f) No use of data traffic analysis services We do not use any data traffic analysis services such as, for example, Google Analytics, the web analysis service of Google Inc. (“Google”), on our website. g) Newsletter by e-mail The Fritz Thyssen Foundation’s head office is located in Cologne centre city near Neumarkt. With several event rooms, the building serves as a venue for scholarly dialogue and cultural events. We would be glad to inform you about the Foundation’s public events by e-mail. To subscribe from the newsletter, please click on the “Newsletter subscription” button at the bottom left-hand side of our website. Please note that for your and our security, we use the double opt-in procedure in registering for our newsletter. In accordance with Art. 6 para. 1 p. 1 lit. a) of the GDPR, you will only be registered for our newsletter when you confirm your registration by clicking a link contained in an e-mail sent by us to you. If you do not confirm your registration within seven days, your information will be blocked and automatically deleted. In the event of a registration, we will store your respective IP address used, the time of registration and confirmation for as long as you receive our newsletter. The purpose of this procedure is to have a record of your registration and/or to clarify any possible abuse of your personal data. If you do not want us to process your e-mail address and do not enter it, we cannot send you our newsletter. We will use your e-mail address solely for the purpose of informing you by e-mail about public events of the Fritz Thyssen Stiftung. We use a service provided by CleverReach GmbH & Co KG to send our email newsletter. We have concluded an order processing agreement with this company in accordance with Art. 28 of the GDPR. Your e-mail address and any data voluntarily provided by you as part of your newsletter subscription will be stored for as long as you receive our newsletter. After you have unsubscribed from our newsletter, this personal data will be deleted. To unsubscribe from the newsletter, please click on the “Unsubscribe from Newsletter” button at the bottom left-hand side of our website. You will not be unsubscribed until you confirm your unsubscription by clicking a link we send to you in an e-mail, however. Alternatively, you can write an e-mail to the event management of the Fritz Thyssen Stiftung, c/o Ms Lene Schwerdtfeger (lene.schwerdtfeger@fritz-thyssen-stiftung.de) or unsubscribe from the newsletter in another way (e.g. by telephone or post). h) Data processing when registering for an event On our website https://www.fritz-thyssen-stiftung.de/veranstaltungen/liste-veranstaltungen/ you can register for events organised by the Fritz Thyssen Stiftung. If third-party events are taking place on our premises, you will be redirected to the website of the relevant organiser by clicking on the “registration” button. With this eventuality in mind, we describe in the following how you can register for an event organised by the Fritz Thyssen Stiftung and what personal data we require from you. In the first step, please select the desired event. In the next step, you have to in any case enter your first and last name as well as your e-mail address. We need your first and last name in accordance with Art. 6 para. 1 p. 1 lit. b) of the GDPR in order to include you on our list of participants. We need your e-mail address to confirm your registration for the event. Please note that we use the double opt-in procedure for your and our security. You will only be registered for the desired event when you confirm your registration by clicking a link which we send to you in an e-mail. If you do not confirm your registration within seven days, your information will be blocked and automatically deleted. In the case of registration, we will store your IP address used, time of registration and confirmation in each case. The purpose of the procedure is to have a record of your registration and/or to clarify any possible abuse of your personal data. If applicable, you can click on whether you will be accompanied by another person at the event. In this case, please enter the first and last name of your companion. We also ask you to confirm that the person accompanying you has authorised you to register them for this event and to transmit their personal data for this purpose. You can provide this confirmation by ticking the relevant check box. We require the details of your companion in accordance with Art. 6 para. 1 p. 1 lit. b) of the GDPR in order to also include them on our list of participants. aa) Storage period of your personal data We only store your personal data for as long as we need it in order to provide you with our information services or as we are legally obliged to do so. If the purpose of the storage no longer applies or a legal storage period expires, we will delete your personal data. We process the personal data you enter using cobra CRM software. This enables us to include you and, if applicable, your companion on our list of participants. We will delete your personal data and, if applicable, that of your companion 30 days after the end of the event in order to review any claims against the Foundation or third parties (the legal basis for this is Art. 6 para. 1 p. 1 lit. f) of the GDPR). bb) Possible consequences of not providing data If you do not want us to process your personal data, we cannot present our website or render information services to you. i) Online meetings and video conferences We use the BigBlueButton video conferencing service to conduct online meetings and video conferences (hereinafter referred to as online meetings). We do not operate BigBlueButton ourselves, but use a corresponding service offered by invokable GmbH, which is based in Germany, for this purpose (the legal basis for this is Art. 6 para. 1 p. 1 lit. f) of the GDPR). The servers of invokable GmbH are located within a country of the European Union or the European Economic Area. We have concluded an order processing agreement with invokable GmbH in accordance with Art. 28 of the GDPR. You can find more information on data processing by invokable GmbH at https://bbbserver.de/datenschutz. When participating in an online meeting, your following personal data will be processed: - Name (if you provide it) - Audio data (spoken word) - Video data (webcam image and screenshare) - Chat messages - IP address We do not record online meetings. We do not record your attendance, either. Insofar as personal data of employees of the Fritz Thyssen Stiftung is processed during online meetings, § 26 of the GDPR serves as the legal basis. Furthermore, Art. 6 para. 1 p. 1 lit. f) of the GDPR serves as the legal basis. Our legitimate interest lies in logical measures to combat the pandemic, in the efficient utilisation of our space capacities and in taking into account users’ increased desires for modern means of communication, including video conferencing, in recent years. Your personal data will only be transmitted to our service provider, invokable GmbH, for the technical implementation of online meetings. Other than this, we do not and will not transmit your personal data to third parties. Your personal data will be automatically deleted when you leave the conference, but no later than five minutes after the end of the conference. After 48 hours at the latest, invokable GmbH will delete the server used to execute the conference, so that your personal data will also deleted in this manner in the event that the automatic deletion routine described above should fail. Your rights as a data subject As a data subject, you have the following rights towards us: - Right to withdraw data protection-related consent in accordance with Art. 7, section 3 of the General Data Protection Regulation - Right of access in accordance with Art. 15 of the General Data Protection Regulation - Right to rectification in accordance with Art. 16 of the General Data Protection Regulation - Right to erasure (“right to be forgotten”) in accordance with Art. 17 of the General Data Protection Regulation - Right to restriction of processing in accordance with Art. 18 of the General Data Protection Regulation - Notification obligation in accordance with Art. 19 of the General Data Protection Regulation - Right to data portability in accordance with Art. 20 of the General Data Protection Regulation - Right to object in accordance with Art. 21 of the General Data Protection Regulation - Right to lodge a complaint with a supervisory authority in accordance with Art. 77 of the General Data Protection Regulation Legal foundations for processing; statutory or contractual provi-sions pursuant to the provision of personal data; requirement that a contractual agreement be concluded; obligation of the data sub-ject to provide personal data; possible consequences of not providing data Under Art. 6, section 1, subsection 1, letter b) of the General Data Protection Regulation, we require some of your personal data in order to present the content of our website to you or to render information services to you. If you do not want us to process your personal data, we cannot present our website or render information services to you. Data security We have taken technical and organisational security precautions in order to protect your data, in particular against loss, manipulation or unauthorised access. We modify our security precautions on a regular basis in order to stay abreast of ongoing technological developments. Regular updating of this data protection note The underlying legal conditions for us in our capacity as providers of information services are of course subject to change and modification. These changes and modifications make it necessary to update this data protection notice from time to time.
1.1 2.1 2.2 3.1 3.2 4.1 4.2 5.1 6.1 7.1 8.1 9.1 12.1 13.1 14.1 14.2 15.1 16.1 16.2 16.3 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 26.1 26.2 26.3 27.1 27.2 27.3 28.1 29.1 30.1 31.1 32.1 33.1 35.1 36.1 37.1 37.2 38.1 39.1 40.1 40.2 41.1 42.1 43.1 43.2 43.3 44.1 45.1 46.1 46.2 46.3 46.4 46.5 46.6 47.1 48.1 50.1 52.1 53.1 54.1 54.2 54.3 55.1 56.1 57.1 57.2 58.1 59.1 59.2 59.3 59.4 59.5 59.6 60.1 61.1 62.1 62.2 62.3 63.1 64.1 65.1 66.1 67.1 68.1 68.2 68.3 69.1 70.1 70.2 70.3 70.4 70.5 70.6 71.1 72.1 73.1 74.1 74.2 75.1 76.1 77.1 80.1 81.1 82.1
Zaštita Vaših podataka je naša briga Zaštitu Vaših osobnih podataka shvaćamo vrlo ozbiljno. Za nas je poštivanje zakona o zaštiti podataka samo po sebi razumljivo. Želimo da znate kada i koje podatke uzimamo i obrađujemo, te kako ih koristimo. Poduzeli smo tehničke i organizacijske mjere koje osiguravaju da se propisi o zaštiti podataka poštuju s naše strane, kao i od strane vanjskih pružatelja usluge. Poslovni partneri će pod sljedećim linkom naći informacije prema članku 13. i 14. Opće uredbe o zaštiti podataka (GDPR). Odgovorna služba IREKS GmbH Lichtenfelser Str. 20 Kulmbach Njemačka E-mail: ireks@ireks.com Osobni podaci Osobni podaci su informacije o Vašem identitetu. To su npr. podaci kao što su ime, adresa, telefonski broj ili e-mail-adresa. Za korištenje naše internet stranice načelno nije potrebno davati osobne podatke. U nekim slučajevima potrebno nam je Vaše ime i adresa kao i daljnji podaci kako bismo Vam mogli pružiti željenu uslugu. Na odgovarajući način ćemo Vas upozoriti na to, kada to bude potrebno. To vrijedi i za slanje informacija ili odgovaranje na pojedina pitanja. Nadalje, prikupljamo, obrađujemo i koristimo samo one podatke koje nam dajete na raspolaganje dobrovoljno ili automatski putem korištenja web stranice (npr. kolačići, informacije preglednika). Ukoliko koristite naše servisne usluge, prikupljati, obrađivati i koristiti će se samo oni podaci koji su nam potrebni za pružanje usluge. Ukoliko Vas molimo za daljnje podatke, radi se o dobrovoljnim informacijama. Prikupljanje, obrada i korištenje osobnih podataka koristi se isključivo za pružanje traženih usluga ili podrške, te za očuvanje vlastitih opravdanih poslovnih interesa. Namjensko korištenje Osobni podaci koje ste nam dali na raspolaganje online, prikupljaju se, obrađuju i koriste samo u svrhu koju ste Vi naveli. Vaši osobni podaci neće biti proslijeđeni trećim osobama bez Vašeg pristanka. Također može biti potrebno da mi ili naše uslužno poduzeće u svrhu održavanja odnosa s kupcima prikupimo, obradimo ili koristimo Vaše osobne podatke kako bismo Vas obavijestili o ponudama proizvoda koji mogu biti korisni za Vašu djelatnost ili kako bi se provela online anketa, te da bismo na taj način mogli što učinkovitije zadovoljiti potrebe i zahtjeve naših kupaca. Prikupljanje, obrada i korištenje osobnih podataka kao i prosljeđivanje istih ovlaštenim državnim institucijama i ustanovama uslijedit će samo u okviru važećih zakona, odnosno ukoliko smo to dužni učiniti na temelju sudske odluke. Newsletter Ukoliko mi nudimo a Vi se prijavite na Newsletter, Vaše osobne podatke i sve dobrovoljno upisane informacije ćemo prikupiti, obraditi i koristiti. Prijavom na Newsletter dajete Vašu suglasnost. U svakom se trenutku možete odjaviti od Newsletter-a, na način da koristite za to predviđen link na kraju svakog Newsletter-a. Ukoliko ste se prijavili za Newsletter, dobiti ćete e-mail s potvrdom. U tom mailu se nalazi link za potvrdu prijave. Tek nakon što kliknete na taj link, Vaši podaci će se u potrebnom opsegu koristiti za oglašavanje i u marketinške svrhe našeg Newsletter-a. Obrazac za kontakt / stupanje u kontakt Ukoliko nam se obratite putem obrasca za kontakt direktno stupate u kontakt s našom kćerinskom tvrtkom IREKS AROMA d.o.o. Trešnjevka 24 Jastrebarsko Hrvatska E-mail: ireks@ireks-aroma.hr Isto vrijedi i kada direktno putem e-maila stupite u kontakt sa kćerinskom tvrtkom. Ukoliko se javite našoj kćerinskoj tvrtki putem obrasca za kontakt, ista će obraditi podatke koje ste unijeli na zaslonu za prijavu. Naša kćerinska tvrtka ih koristi za pružanje željenih informacija ili za pružanje traženih usluga, npr. za podršku i savjetovanje vezane uz naš portfelj proizvoda. Isto vrijedi i za kontaktiranje putem e-maila i podatke poslane vašim zahtjevom ako ste se obratili izravno nama ili našoj kćerinskoj tvrtki. Rok čuvanja Osobni podaci koji su nam dostavljeni putem naše internet stranice biti će pohranjeni tako dugo dok ne ispune svrhu u koju su nam povjereni. Kada je riječ o poslovnim i poreznim propisima o rokovima čuvanja, rok čuvanja za određene podatke može biti i do 10 godina. Neosobni podaci koji se automatski prikupljaju Zbog organizacijskih i tehničkih razloga prilikom korištenja naše internet stranice memoriraju se sljedeći podaci: imena stranica koje ste posjetili, naziv internet preglednika koji koristite i ime Vašeg operacijskog sustava, datum i vrijeme Vašeg pristupa, tražilica koju koristite, ime preuzetih datoteka te Vaša IP-adresa. Te tehničke podatke ocjenjujemo anonimno i isključivo u statističke svrhe, kako bismo našu internet stranicu stalno optimizirali, te učinili našu internet ponudu još atraktivnijom. Ovi anonimni podaci pohranjuju se odvojeno od osobnih podataka na osiguranim sustavima i ne dozvoljavaju povezivanje s pojedinom osobom. Vaši osobni podaci i privatnost su zaštićeni u svakom trenutku. Kolačići a) Što su točno kolačići? Kolačići su male informacije koje se za vrijeme posjete Internet stranici pohranjuju u Vašem računalu, tabletu ili mobitelu i služe efektivnom oblikovanju internetskih stranica. Neki kolačići (Session Cookies) se nakon zatvaranja preglednika automatski brišu. Drugi pak (Persistent Cookies ili Tracking Codes) se arhiviraju do određenog datuma isteka ili do pražnjenja međuspremnika Vašeg internet preglednika na dotičnom uređaju i omogućuju nam da Vas identificiramo kao ponovnog posjetitelja naše internet stranice. Većina internet preglednika automatski prihvaćaju kolačiće. Ukoliko to ne želite, možete jednostavnim klikom promijeniti postavke Vašeg preglednika. Više informacija o temi kolačići naći ćete na aboutcookies ➚. b) Za što mi koristimo kolačiće? Kolačiće koristimo za: garantiranu sigurnu internet okolinu provjeru performanse naše internet stranice i poboljšanje jednostavnosti uporabe kao i online doživljaja naših kupca Ne koristimo kolačiće za praćenje Vaših aktivnosti na internetu izvan naših internet stranica. Dolje navedene tipove kolačića koristimo kako bi naši kupci bolje ocijenili način korištenja naših online usluga i kako bismo bolje oblikovali naše usluge. Na primjer, tako možemo prepoznati kada je neki proces prezahtjevan i da ga korisnici zbog toga prekidaju. S tim se znanjem koraci procesa mogu pojednostaviti i oblikovati tako da budu više usmjereni na kupce. c) Koje vrste kolačića postoje? d) Pravna osnova Pravna osnova za korištenje kolačića je članak 6 odlomak 1 slovo f GDPR-a (Opća uredba o zaštiti podataka). Jedino se Internet protokol adresa pri tome pohranjuje - nikakvi drugi osobni podaci. e) Brisanje kolačića Nudimo Vam neke online značajke koje će Vaš posjet našim internet stranicama učiniti što ugodnijim. One funkcioniraju samo uz pomoć kolačića. Kolačiće koji su postavljeni za naše internet stranice možete izbrisati. U tom slučaju će se Vaši individualni podaci i sadržaji kao i Vaše postavke za kolačiće izgubiti, te pri sljedećem otvaranju naših internet stranica nećete biti prepoznati kao već poznati posjetitelj. Imajte pri tome na umu, da je za nesmetano surfanje našim internet stranicama prijeko potrebno nekoliko „bitnih" kolačića. Osim toga, te kolačiće koristimo samo za provjeru učinkovitosti internet stranice i praćenje broja posjetitelja. Uključivanje usluga i sadržaja trećih strana Može se dogoditi da se unutar ove online ponude uključuju i sadržaji trećih strana, kao npr. videa s YouTubea, karte iz Google Mapsa, RSS ili grafika drugih internet stranica. To uvijek pretpostavlja da ponuđači tih sadržaja (u nastavku „ponuđač treće strane") primijete IP-adresu korisnika. Ponuđači treće strane ne mogu poslati sadržaje na internet preglednik korisnika bez IP-adrese. Stoga je za prikaz sadržaja potrebna IP-adresa. Informacije vezane uz poziciju web servera Obrada podatka koje zaprimimo preko naših internet stranica odvija se na serverima u Njemačkoj. Sigurnost Poduzeli smo tehničke i organizacijske sigurnosne mjere kako bismo Vaše osobne podatke zaštitili od gubitka, uništenja, manipulacije i neovlaštenog pristupa. Promjena ove izjave o zaštiti podataka Pridržavamo pravo na promjenu naše izjave o zaštiti podataka ukoliko je to potrebno zbog nove tehnologije. Obratite pažnju da uvijek koristite najaktualniju verziju. Ukoliko će se provesti osnovne promjene u ovoj izjavi, iste ćemo objavit na našoj Internet stranici. Pogođeno pravo Obratite nam se u svakom trenutku i informirajte se koje osobne podatke o Vama pohranjujemo ili ukoliko iste želite ispraviti ili izbrisati. Nadalje imate pravo na ograničenje obrade (članak 18. GDPR), pravo na prigovor protiv obrade (članak 21. GDPR) kao i pravo na prenosivost podataka (članak 20. GDPR). U takvim slučajevima se direktno obratite našem službeniku za zaštitu osobnih podataka, čije ćete kontakt podatke naći pod „Službenik za zaštitu osobnih podataka". Službenik za zaštitu osobnih podataka Naš službenik za zaštitu podataka je dostupan pod: Gospodin Christian Volkmer Projekt 29 GmbH & Co. KG Ostengasse 14 Regensburg Njemačka E-Mail: privacy@ireks.com Internet: www.projekt29.de Ukoliko naš službenik za zaštitu podataka ne odgovori na Vaš zahtjev na zadovoljavajući način, ostaje Vam Vaše pravo na pritužbu kod nadležnog tijela za zaštitu osobnih podataka.