http___www.kssmz.hr_pravila-privatnosti__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 37.1 37.2 38.1 38.2 39.1 39.2 40.1 41.1 42.1 43.1 43.2 43.3 43.4 43.5 43.6 43.7 43.8 43.9 43.10 43.11 43.12 43.13 44.1 45.1 46.1 47.1 47.2 47.3 48.1 49.1 49.2 49.3 50.1 51.1 52.1 52.2 52.3 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1 64.2 64.3 64.4 64.5 64.6 64.7 64.8 64.9 65.1 66.1 66.2 66.3 67.1 67.2 67.3 67.4 68.1 68.2 68.3 68.4 68.5 68.6 68.7 68.8 68.9 69.1 70.1 70.2 71.1 71.2 71.3 72.1 73.1 73.2 73.3 74.1 75.1 75.2 76.1 77.1 78.1 79.1 79.2 79.3 80.1 80.2 80.3 81.1 82.1 83.1 83.2 83.3 83.4 83.5 84.1 85.1 85.2 86.1 87.1 87.2 88.1 88.2 88.3 89.1 89.2 90.1 91.1 91.2 92.1 92.2 93.1 94.1 94.2 95.1 96.1 96.2 96.3 96.4 96.5 96.6 97.1 97.2 97.3 98.1 99.1 99.2 99.3 99.4 99.5 99.6 99.7 99.8 100.1 100.2 101.1 101.2 101.3 101.4 102.1 102.2 102.3 102.4 103.1 103.2 104.1 105.1 105.2 105.3 105.4 105.5 106.1 106.2 106.3 106.4 106.5 107.1 108.1 108.2 109.1 109.2 109.3 110.1 110.2 110.3 110.4 110.5 110.6 111.1 111.2 111.3 112.1 113.1 113.2 114.1 114.2 114.3 114.4 114.5 115.1 116.1 116.2 116.3 116.4 116.5 116.6 116.7 117.1 117.2 118.1 119.1 119.2 119.3 120.1 120.2 120.3 120.4 121.1 121.2 122.1 123.1 123.2 124.1 125.1 126.1 127.1 127.2 128.1 128.2 129.1 130.1 130.2 130.3 130.4 131.1 132.1 132.2 132.3 133.1 134.1 134.2 135.1 135.2 135.3 136.1 136.2 136.3 137.1 137.2 137.3 137.4 137.5 137.6 137.7 137.8 138.1 139.1 140.1 141.1 141.2 142.1 143.1 143.2 143.3 143.4 143.5 143.6 143.7 144.1 144.2 144.3 144.4 145.1 145.2 145.3 145.4 145.5 146.1 146.2 146.3 146.4 146.5 146.6 147.1 148.1 149.1 150.1 150.2 150.3 151.1 151.2 151.3 151.4 151.5 152.1 152.2 153.1 154.1 154.2 154.3 155.1 156.1 157.1 158.1 159.1 160.1 161.1 162.1 163.1 163.2 163.3 163.4 163.5 163.6 163.7 164.1 164.2 164.3 164.4 164.5 164.6 165.1 166.1 166.2 166.3 166.4 166.5 167.1 167.2 168.1 168.2 168.3 168.4 169.1 169.2 169.3 169.4
Privacy Policy This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) in the context of the provision of our services, as well as within the framework of our online offer and the websites linked to it, mobile applications, functions and content as well as external online presences, such as our social media profile (collectively referred to as the “online offer”). Person responsible CEO: Harald Grabner 123CONSULTING e.U. A RESULT DRIVEN DIGITAL MARKETING AGENCY. Ogugasse 3/3/11 1220 Vienna – Austria Branch office in Germany: 123CONSULTING e.U. Alexanderufer 3-7 10117 Berlin Privacy policy coordinator E-Mail: datenschutz@123consulting.at Types of data processed: - User data (e.g. customer master data, names, addresses). - Contact details (e.g. e-mail addresses, telephone numbers). - Content data (e.g. text input, photographs, videos). - Contractual data (e.g. subject matter of the contract, duration, category of customer). - Payment data (e.g. bank account details, transactions history). - Usage data (e.g. websites visited, content of interest, time of access). - Meta- and communication data (e.g. device information, IP addresses). Categories of persons concerned - Customers/interested parties/business partners. - Visitors and users of the online offer. (hereinafter the persons concerned are collectively referred to as “users”). Purpose of data processing - providing the online offer, its features and content; - providing contractually agreed services and customer care; - replying to contact requests and communicating with users; - security measures; - marketing, advertising and market research. Last update: July 2018 - Terms used - “Personal data” refers to any information relating to an identified or identifiable natural person (hereinafter the “concerned person”). A natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of correlation with an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person. - “Processing” refers to any process performed with or without the aid of automated procedures or any such process related to personal data. The term is broad and includes virtually any sort of data handling. - “Pseudonymisation” refers to the processing of personal data so that the latter can no longer be correlated to a specific person without additional information being provided. This applies provided that such additional information is stored separately and is subject to technical and organisational measures to ensure that the personal data are not connected to an identified or identifiable natural person. - “Profiling” refers to any kind of automated processing of personal data involving the use of such personal data to evaluate given personal aspects relating to a natural person for the purpose of analysis and prediction. In particular, these include aspects relating to work productivity, economic status, health, personal preferences, interests, reliability, behaviour, usual place of residence or change of location of that natural person. - “Responsible party” refers to the natural or legal person, public authority, institution or other body that decides, alone or in concert with others, on the purposes and means of personal data processing. - “Processor” refers to a natural or legal person, public authority, institution or other body that processes personal data on behalf of the responsible person. - Relevant legislative basis In accordance with Art. 13 GDPR, we inform you about the legislative basis of our data processing. For users within the domain of the General Data Protection Regulation (GDPR), i.e. in the EU and the EEC, the following applies: unless the legislative basis in the data protection declaration is mentioned, the following applies: the legal basis for obtaining consent is Article 6 paragraph 1 lit. a and Art. 7 GDPR, the legal basis for the processing for the purpose of performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 paragraph 1 lit. b GDPR, the legal basis for processing in order to fulfil our legal obligations is Art. 6 paragraph 1 lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 paragraph 1 lit. f GDPR. Should the processing of personal data be required due to vital interests of the person concerned or another natural person, Art. 6 paragraph 1 lit. d GDPR will be regarded as legal basis. Furthermore, the provisions of the Austrian Data Protection Act 2018 and the competition regulations for commercial communications in the Austrian Telecommunications Act (in particular in § 107) apply. - Security measures - With the purpose of ensuring a suitable level of protection from risks, we will take appropriate technical and organisational measures in accordance with legal requirements, considering the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risks for the rights and freedoms of individuals. - In particular, measures include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. For these reasons, we have set up procedures to ensure the protection of the rights concerned, data deletion and reaction to data vulnerability. Furthermore, we consider the protection of personal data already in the development and/or selection of hardware, software and procedures, according to the principle of data protection through technology design and privacy-friendly default settings. - Cooperation with other processors, responsible parties and third parties - In the course of our processing, we may disclose data to other persons and companies (other processors, responsible parties or third parties), transmit data to them or otherwise grant them access to them. This shall take place exclusively on the basis of legal permission (e.g. if a transmission of the data to third parties, as to payment service providers, is required in order to fulfil the contract). Consent to a legal obligation shall be granted by users on the basis of our legitimate interests (e.g. in case of use of agents, hosting providers, etc.). - If we disclose, transmit or otherwise grant access to data to other companies in our group, this is done in particular for administrative purposes as a legitimate interest and based on a legal basis. - Transfers to third countries - Provided that we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or, due to the use of third party services, we disclose or transfer data to another person or company, this shall be done only if needed in order to fulfil our (pre-) contractual obligations, on the basis of your consent, because of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of statutory conditions. This means that the processing occurs e.g. on the basis of specific guarantees, such as the officially recognised level of data protection of the EU (e.g. for the USA through the “privacy shield”) or in compliance with officially recognised special contractual obligations. - Rights of the persons concerned - In accordance with legal specifications, you have the right to request a confirmation as to whether personal data concerning you are being processed as well as the right to information about these data and to further information and a copy of it. - In accordance with the legal specifications, you have the right to demand the completion or the correction of incorrect data concerning you. In accordance with the legal specifications, you have the right to demand that the data in question be deleted immediately, or – alternatively – in accordance with the legal specifications, to demand to restrict the processing of the data. - In accordance with the legal specifications, you have the right to request the data concerning you, which you have provided to us, and to request their transmission to other responsible parties. - In accordance with the legal specifications, you have the right to file a complaint with the competent supervisory authority. - Right of withdrawal You have the right to withdraw your consent to process your data with effect for the future. - Right of objection In accordance with the legal specifications, you can object to future processing of your data at any time. The objection may in particular be made against processing for direct marketing purposes. - Cookies and right of objection for direct marketing - “Cookies” are small files stored on the computer of the user. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his/her visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes the browser. Such a cookie can, for example, store the content of a shopping cart in an online shop or a login status. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. Thus, the login status, for instance, will be saved if users visit the website after several days. Similarly, such a cookie can store the interests of the users, which are used for reach measurement or marketing purposes. A “third-party cookie” refers to cookies that are offered by providers other than the party managing the online offer (otherwise, if the cookies are used by the party managing the online offer, these are called “first-party cookies”). We can use temporary and permanent cookies and clarify this in the context of our privacy policy. - If users do not want cookies to be saved on their computer, they can avoid this by disabling the relevant option in the settings of their browser. Already existing cookies can be deleted in the settings of the browser. If you do not accept cookies, you may not be able to access all the functions of the online offer. - A general objection to the use of cookies used for online marketing purposes can be found in a variety of services, especially in the case of tracking. Further details and clarification on this matter can be found on the US website http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be switched off in the settings of the browser. Please note that not all features of this online offer may be used. - “Cookies” are small files stored on the computer of the user. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his/her visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes the browser. Such a cookie can, for example, store the content of a shopping cart in an online shop or a login status. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. Thus, the login status, for instance, will be saved if users visit the website after several days. Similarly, such a cookie can store the interests of the users, which are used for reach measurement or marketing purposes. A “third-party cookie” refers to cookies that are offered by providers other than the party managing the online offer (otherwise, if the cookies are used by the party managing the online offer, these are called “first-party cookies”). - Data deletion - The data processed by us will be deleted or their processing restricted in accordance with legal requirements. Unless explicitly stated in this privacy policy, the data stored by us are deleted as soon as they are no longer required for their purpose and the deletion does not conflict with any legal obligation of storage. - Insofar as the data are not deleted because required for other legitimate purposes, their processing will be restricted. This means that the data are blocked and not processed for other purposes. This applies, for example, for data that must be stored for commercial or tax reasons. - Changes and updates to the privacy policy We ask you to inform yourself regularly about the content of our privacy policy. We will adapt the privacy policy every time the changes to the data processing we execute require it. We will notify you as soon as the changes require your participation (e.g. consent) or other individual notification. - Agency services - We process the data of our contractual partners and prospective customers (uniformly referred to as “contractual partners”) in the context of our contractual services. Such services include: conceptual and strategic consulting, campaign planning, software and design development/consulting or maintenance, implementation of campaigns and processes/handling, server administration, data analysis/consulting services and training services. - The data processed, the nature, scope and purpose as well as the necessity to process them are determined by the underlying contractual relationship. - The processed data include the master data of our contractual partners (e.g. names and addresses), contact data (e.g. e-mail addresses and telephone numbers) as well as contract data (e.g. services requested, contract content, contractual communication, names of contact persons) and payment data (e.g. bank details, payment history). - In principle, we do not process special categories of personal data, unless they are part of processing requested or contractually agreed. - We process data required in order to establish and perform the contractual services and point to the necessity of their indication, provided that this is not evident for the contractual partners. Disclosure to external persons or companies will only occur if required by a contract. When processing the data provided to us within the framework of an order, we act in accordance with the instructions of the customer as well as the legal requirements. - As part of the use of our online services, we can save the IP address and the time of action of each user. The storage is based on our legitimate interests, as well as the interests of the user in the protection against misuse and other unauthorised use. A transfer of these data to third parties does not occur, unless it is necessary to exercise our rights or there is a legal obligation to do so. - The data will be deleted if they are no longer required for the fulfilment of contractual or statutory duties of care as well as for the handling of any warranty and comparable obligations, whereby the necessity of keeping the data is reviewed every three years; otherwise the statutory storage obligations apply. - Administration, accounting, office organisation, management of contacts - We process data in the context of administrative tasks as well as for the organisation of our business, accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process for the execution of our contractual services. The processing affects customers, potential customers, business partners and website visitors. The purpose and our legitimate interest in processing lies in administration, accounting, office organisation, data archiving, i.e. tasks that serve to maintain our business, perform our duties and provide our services. The deletion of the data in view of contractual performance and contractual communication corresponds to the information provided in these processing activities. - We disclose or transmit data to the financial administration, consultants, such as tax consultants or auditors, and other tax authorities and payment service providers. - Furthermore, based on our economic interests, we store information about suppliers, event organisers and other business partners, e.g. for later contact. We generally store this majority of company-related data permanently. - Economic analyses and market research - In order to operate our business economically, to recognise market trends as well as wishes of the contractors and users, we analyse the data available to us for business transactions, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, metadata based on our legitimate interests, whereby the persons concerned include contractual partners, potential customers, customers, visitors and users of our online offer as well as our trade fairs and events. - In this context, we can take into consideration the profiles of registered users and the related specifications, e.g. the services they may be interested in. The analyses serve the purpose of improving the user-friendliness, the optimisation of our offer, our events and the business economics. The analyses are for us alone and will not be disclosed externally, unless they are anonymous analyses reporting aggregated values. - If these analyses or profiles are personal, they will be deleted or anonymised when the user terminates the contract, otherwise after three years from the conclusion of the contract. Incidentally, the overall business analyses and general determinations of trends are created anonymously if possible. - Establishment of contact - When contacting us (e.g. via contact form, e-mail, telephone or social media) the information of the user is processed for the purpose of fulfilling the demands of the contact request and its development in the context of contractual/pre-contractual relationships in the case of customers or, in the case of non-customers, based on our legitimate interests, for the purpose of responding to inquiries. The information of the users can be stored in a Customer Relationship Management System (“CRM system”) or similar software. - For the purpose of efficient processing of inquiries, your data will be processed by WeAreDevelopers GmbH, Doblhoffgasse 9/15, 1010 Vienna, Austria in a German computer centre and made available to us by means of notification. Please note the privacy policy of the responsible company WeAreDevelopers: https://www.wearedevelopers.com/terms-conditions#privacy-tos-link. - The following data are provided by the user when the contact form is filled in: first name, last name, e-mail address and the specific request. - We delete the requests as long as they are no longer required and the legal archiving requirements do not require storage. We review the requests needed every two years. - Privacy policy for application processes - We process the applicant data only for the purpose and in the context of the application process and in accordance with the legal requirements. The processing of the applicant data occurs in order to fulfil our (pre-) contractual obligations in the context of the application process within the meaning of Art. 6 paragraph 1 lit. GDPR and Art. 6 paragraph 1 lit. GDPR if the data processing is required, e.g. in legal procedures. - The application process requires applicants to provide us with the applicant data. The applicant data required are marked in the online form, provided that we offer one, otherwise, these result from the job descriptions and usually include personal details, postal and contact addresses and the relevant application documents, such as cover letter, CV and certificates. In addition, applicants can voluntarily provide us with additional information. - By submitting the application to us, the applicants agree to the processing of their data for the purposes of the application process and in accordance with the nature and scope described in this privacy policy. - Insofar as, within the framework of the application procedure, special categories of personal data within the meaning of Art. 9 paragraph 1 GDPR are voluntarily provided, these are additionally processed in accordance with Art. 9 paragraph 2 lit. b GDPR (e.g. health information such as disability or ethnic origin). Insofar as, in the context of the application procedure, special categories of personal data within the meaning of Art. 9 paragraph 1 GDPR are requested from applicants, these are additionally processed in accordance with Art. 9 paragraph 2 lit. a GDPR (e.g. health data, if these are a requirement for the profession). - If provided, applicants can submit their applications to us via an online form on our website. The data will be encrypted and transmitted to us in accordance with the state of the art. Furthermore, applicants can send us their applications via e-mail. However, please note that e-mails are generally not sent in encrypted form and that encryption shall be executed by the applicant. We can therefore take no responsibility for the transmission process of the application occurring between the moment of sending and the reception on our server; therefore, we recommend rather to use an online form or the postal delivery. Instead of applying via the online form and e-mail, applicants still have the opportunity to send us the application by post. - In the event of a successful application, the data provided by the applicants may be further processed by us for employment purposes. Otherwise, if the application for a position is not successful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn. Applicants are entitled to withdraw their application at any time. - Subject to a legitimate withdrawal of the candidate, the deletion occurs after the expiration of a period of six months, so that we can answer any follow-up questions to the application and meet our obligations under the Equal Treatment Act (Gleichbehandlungsgesetz). Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations. - Applicant pool - During the application process, we offer the opportunity to applicants to be part of our “applicant pool” for a period of two years. For this purpose, applicants need to give their consent in accordance with Art. 6 paragraph 1 lit. a and Art. 7 GDPR. - Application documents in the applicant pool will only be processed within the scope of future job openings and the search of employees. In addition, these documents will be deleted at expiration of the two years deadline at the latest. Applicants will be instructed that the consent for inclusion in the applicant pool is on a voluntary basis and does not affect the current application process. In addition, applicants can declare the withdrawal as objection to their consent at any time in accordance with Art. 21 GDPR. - Newsletter - With the following indications, we inform you on the content of our newsletter as well as the registration, distribution and evaluation processes related to it and your rights of cancellation. By subscribing to our newsletter, you give your consent to receive the newsletter and the related process described. - We send newsletters, e-mails and other electronic messages with marketing content (hereinafter “newsletter”) only with the consent or other legal permission of the recipient. Awareness of the content of newsletters is essential for the user in order to provide his/her consent, provided that the content is concretely outlined during the subscription process. Incidentally, our newsletters contain information about our services and our company. - The registration to our newsletter is based on a double opt-in procedure. I.e. immediately after registration, you will receive an e-mail requesting you to confirm your registration separately. This confirmation is necessary so that nobody can register with external e-mail addresses. The registration for the newsletter will be recorded in order to be able to prove the registration process according to the legal requirements. This implies that, in the course of the registration process, the login, registration and confirmation times as well as the IP address of the user are saved. Likewise, changes to your data stored with the delivery service provider will be recorded. - In order to subscribe to the newsletter, it is enough to enter your e-mail address. Optionally, you may enter your name. This allows us to personally address the newsletter to you. - The transmission of our newsletter and the related performance measurement occur on the basis of a consent from the recipient or, if consent is not required, on the basis of our legitimate interests in direct marketing. - Record of the registration process is based on our legitimate interests. It is in our interest to use a user-friendly and secure newsletter system, which serves both our business interests and the expectations of the user and also allows us to keep record of the consent granted. - Users can cancel the subscription to our newsletter at any time, i.e. withdraw your consent. At the bottom of every newsletter, you can find a link to cancel the subscription. On the basis of our legitimate interests, in order to be able to show evidence of prior consent, we can keep stored the cancelled e-mail addresses up to three years before deleting them. The processing of this data is limited to the purpose of a potential defence against claims. An individual request for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed. - Newsletter delivery service provider - The newsletter is distributed by means of the delivery service “MailChimp”, a mailing list platform of the American provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. The data protection regulations of the delivery service provider can be viewed online on: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC t/a MailChimp is certified under the Privacy Shield Agreement, which guarantees that the European data protection standards are respected (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The delivery service provider is appointed based on our legitimate interests in accordance with Art. 6 paragraph 1 lit. f GDPR, as well as on the basis of a contract processing agreement in accordance with Art. 28 paragraph 3 GDPR. - The delivery service provider may use the data of the recipients in pseudonymous form – i.e. without connecting it to a specific user – to optimise or improve its own services, e.g. for the technical optimisation of delivery and the presentation of newsletters or for statistical purposes. However, the delivery service provider does not use the data of our newsletter recipients to contact them for its own scopes or to pass on this data to third parties. - Newsletter performance measurement - Newsletters contain a “web-beacon”, i.e. a pixel-size file. This is retrieved when the newsletter is opened by our server or from that of the delivery service provider, provided that we use one. During this process, technical information, such as information about the browser and your system, as well as your IP address and time of access will be collected. - This information is used to improve the technical performance of services based on the technical data or the target audience and their reading behaviour, based on the access times and locations (which can be determined with the help of the IP address). Statistical surveys also include determining whether the newsletter has been opened, when it has been opened and which links have been clicked. For technical reasons, this information can be connected to individual newsletter subscribers/recipients, but it is neither our endeavour nor that of the delivery service provider to monitor individual users. Rather, the evaluations are used to identify the reading habits of our users and to adapt our content to them or to send and personalise different content according to their interests. - Unfortunately, it is not possible to withdraw consent only for performance measurement. The only way to do so is to cancel the entire subscription to the newsletter. - Hosting and e-mail delivery - The website domain is provided and managed by BRSA GmbH and Host Europe GmbH (hereinafter “hosting provider”). All online offers on our website as well as information arising from its use are stored and saved by our service providers BRSA GmbH, Auerspergstraße 4/9, 1010 Vienna, ATU71368236 and Host Europe GmbH, Hansestrasse 111, 51149 Cologne. - The hosting services we use to operate this online offer are the following: infrastructure and platform services, processing capacity, storage space and database services, e-mail distribution, security services as well as maintenance services. - In doing so, we – or our hosting provider – process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests and of an efficient and secure provision of our online offer. - Collection of access data and log files - On the basis of our legitimate interests, we – or our hosting provider – collect data on every access to the server on which this service is located (so-called server log files). The access data include name of the webpage accessed, files accessed, date and time of access, amount of data transferred, message of successful retrieval, browser type and version, operating system of the user, referrer URL (the previously visited page), IP address and the requesting provider. - Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted or anonymised. Data needed as evidence shall be exempted from the cancellation until final clarification of the incident. - Google Tag Manager Google Tag Manager is a solution with which we can manage the so-called website tags via an interface (and integrate, for example, Google Analytics as well as other Google marketing tools in our online offer). The Tag Manager itself (which implements tags) does not process any personal data of the user. With regard to the processing of personal data of the user, please refer to the following specifications on Google services. Acceptable use policy: https://www.google.com/intl/de/tagmanager/use-policy.html. - Google Analytics - We use Google Analytics, a web analytics service provided by Google LLC. (“Google”). Google uses cookies, whereby the information generated by the cookie about the use of the online offer by the users is usually transmitted to a server of Google in the USA and stored there. - Google is certified under the Privacy Shield Agreement, which guarantees that the European data protection law will be observed (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). - Google will use the information gathered on our behalf to evaluate the use made of our online offer, to compile reports on the activities on our website and to provide us with further services related to the use of this online offer and Internet more in general. In doing so, the processed data may serve to create pseudonymous usage profiles of the user. - We only use Google Analytics with activated IP anonymisation. This means that, within states member of the European Union or in other states belonging to the European Economic Area, Google will shorten the IP address of the user. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. - The IP address transmitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by changing their browser settings accordingly. Users may also prevent Google from collecting the data generated by the cookie and related to their use of the online offer as well as the processing of this data by Google by visiting the following link, downloading and installing the browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de. - If we request users to give their consent to the use of cookies, the legal basis of the processing consent is in accordance with. Art. 6 paragraph 1 lit. a GDPR. Otherwise, based on our legitimate interest and in accordance with. Art. 6 paragraph 1 lit. f GDPR, the processing occurs on a user-oriented and economically efficient operation of our online offer. - For further information on Google’s data usage, settings and opt-out options, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) as well as to Google’s settings to display pop-ups (https://adssettings.google.com/authenticated). - Personal data of the user will be deleted or anonymised after 14 months. - Identification of target audience segments with Google Analytics We use Google Analytics to identify – through advertisements placed within Google’s advertising services and its affiliates – only those users who have shown an interest in our online offer or who have given features (e.g. interests in specific topics or products, which are determined by the websites they visited) and then send this information to Google (known as “remarketing” or “Google Analytics Audiences”). By using Google remarketing service, we also wish to ensure that our advertisements match the potential interests of users. - Google AdWords and conversion measurement - We use the online marketing system Google “AdWords” to place advertisements in Google’s advertising network (e.g. in the search results, in videos, on websites, etc.). In this way, advertisements are shown to users who are presumably interested in the adverts. This allows us to target the advertisements for and within our online offer to a suitable audience and present to users only advertisements that potentially match their interests. It is a form of “remarketing”, for example, if advertisements for products the user showed interest in by visiting different online offers appear to him/her. For these purposes, by retrieving our website – or other websites on which the Google advertising network is active – a Google code will be run immediately through Google and the so-called (re-) marketing tags (invisible graphics or codes, also known as “web beacon”) integrated into the website. With the help of these, an individual cookie, i.e. a small data, will be saved (instead of cookies, other comparable technologies can be used). Within such data the following information is noted: websites accessed by the user, type of content in which he/she showed interest or offers the user clicked, further information on the browser and operating system, referrer websites, times of access as well as other information related to the use of the online offer. - Furthermore, we receive an individual “conversion-cookie”. The information retrieved by means of the cookies is then used by Google to create conversion statistics for us. However, we receive information only on the anonymous overall number of users who clicked on our advert and were forwarded to a page provided with a conversion tracking tag. We do not receive any information that personally identifies users. - User data are processed within the framework of Google’s advertising network with a pseudonym. This means that Google does not store and process, for example, the name and e-mail address of the user, but rather processes the relevant data obtained through the cookie in connection to a pseudonymous user profile. I.e. from the perspective of Google, the advertisements are not managed and displayed for a concretely identifiable person, but rather for the cookie owner, regardless of who the cookie owner is. This does not apply whenever a user has expressly given his/her consent to Google to process these data without this pseudonymisation. The information collected about the user is then transmitted to Google and stored on Google’s servers in the USA. - Insofar as we require the consent of users to the use of cookies, the legal basis for processing data is a consent in accordance with Art. 6 paragraph 1 lit. a GDPR. Otherwise, data processing occurs – on the basis of our legitimate interest in accordance with Art. 6 paragraph 1 lit. f GDPR – in a user-oriented and economically efficient operation of our online offer. - For further information on Google’s data usage, settings and opt-out options, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) as well as to Google’s settings to display pop-ups (https://adssettings.google.com/authenticated). - Online presences and advertising measures in social media - We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties and users and inform them on our services. - Please note that users’ data may be processed beyond the territories of the European Union and Switzerland. This might pose risks for users because in this way, for example, the enforcement of the rights of the user may be impeded. With regard to US providers certified under the Privacy Shield, they undertake to follow data protection standards of the EU and EEC. - Furthermore, as a rule, users’ data are processed for market research and advertising purposes. It follows that, for example, usage profiles can be constructed from data on use behaviours and the related interests of users. Usage profiles can in turn be used to place advertisements that presumably match the interests of the user within and beyond the platforms. For these purposes, cookies are usually saved on the computer of the user and information on usage behaviour and interests of the users are stored. Furthermore, in usage profiles it is also possible to store data regardless of the appliance used by the user (in particular when the user is a member of the relevant platform and he/she is logged in). - The processing of personal data of the user occurs on the basis of our legitimate interest in an effective information of users and communication with them. Should users be asked to give theirs consent to data processing from the relevant provider (i.e. their agreement by, for example, ticking a box or clicking on a confirmation button), processing is based on legal consent. - For a detailed description of the relevant type of processing and opt-out options, please refer to the links of providers below. - In the event of information requests and enforcement of user rights, please note that these can be claimed most effectively from the providers. Only providers have access to user data and can intervene directly with the appropriate measure and provide information. Should you require further help, feel free to contact us. - Facebook (Facebook Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – privacy policy: https://www.facebook.com/about/privacy/, opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, privacy shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. - – Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – privacy policy/opt-out: http://instagram.com/about/legal/privacy/. - Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated, privacy shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. - Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – privacy policy: https://twitter.com/de/privacy, opt-out: https://twitter.com/personalization, privacy shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active. - LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – privacy policy: https://www.linkedin.com/legal/privacy-policy , opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, privacy shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active. - Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – privacy policy/ opt-out: https://privacy.xing.com/de/datenschutzerklaerung. - Inclusion of services and content of third parties - We include in our online offer content and services provided by third parties in order to integrate their content and services such as e.g. videos or fonts (hereinafter referred to as “content”). - This always presupposes that the third-party providing this content can detect the IP address of the user, given that they would not be able to send the content to the user’s browser without the IP address. The IP address is therefore required in order to display this content. We endeavour to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The web beacons can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include, but is not limited to, technical information about the browser and operating system, referrer websites, access time, and other information regarding the use of our online offer. In addition, they can also be linked to information from other sources. - Insofar as we request users to give their consent to the use of cookies, the processing of data is based on the legal basis of given consent in accordance with Art. 6 paragraph 1 lit. a GDPR. Otherwise, the processing occurs on the basis of our legitimate interest – in accordance with Art. 6 paragraph 1 lit. f GDPR – in a user-oriented and economically efficient operation of our online offer. - We use services and content from the following third parties: - We use the communication services by Intercom, provided through Intercom, Inc. 55 2nd Street, 4th Floor San Francisco, California 94105, USA. Intercom offers the opportunity to – according to the expectations of the users – get in contact with them faster and in a more direct way as well as to process their requests. With Intercom, it is possible to send messages to users via live chat, e-mail, SMS or push-messages. For this to be possible, contact information about the users must be synchronised with Intercom via an interface. Privacy policy of Intercom: https://www.intercom.com/privacy (Intercom is certified within the framework of the EU-US-Privacy-Shields, https://www.intercom.com/privacy#addendum). - We include videos of the platform “YouTube” owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated. - We include the fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When retrieving a page, your browser loads the necessary web fonts in your browser cache so that texts and fonts can be displayed correctly. Further information on Google Web Fonts can be found at https://fonts.google.com. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated. - We include maps by the service “Google Maps” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, users’ IP addresses and location data, but these are not collected without their consent (usually as part of the settings of their mobile devices). The data can be processed in the USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
1.1 2.1 2.2 3.1 3.2 3.3 4.1 4.2 4.3 5.1 6.1 6.2 6.3 7.1 8.1 9.1 9.2 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 35.1 36.1 37.1 38.1 38.2 39.1 39.2 39.3 39.4 39.5 39.6 40.1 41.1 41.2 41.3 41.4 41.5 41.6 42.1 42.2 42.3 43.1 44.1 44.2 44.3 45.1 45.2 45.3 45.4 46.1 47.1 47.2 47.3 47.4 47.5 48.1 48.2 48.3 49.1 50.1 50.2 51.1 52.1 53.1 54.1 55.1 56.1 57.1 57.2 58.1 59.1 59.2 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 67.2 67.3 68.1 69.1 70.1 70.2 71.1 72.1 73.1 73.2 74.1 75.1 76.1 77.1 78.1 79.1 79.2 79.3 80.1 80.2 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 88.1 89.1 89.2 90.1 91.1 92.1 93.1 93.2 94.1 95.1 95.2 95.3 96.1 97.1 97.2 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 106.2 107.1 107.2 107.3 108.1 108.2 109.1 109.2 109.3 110.1 110.2 110.3 111.1 111.2 111.3 112.1 112.2 112.3 112.4 113.1 114.1 114.2 114.3 114.4 115.1 116.1 116.2 116.3 116.4 116.5 117.1 117.2 117.3 118.1 118.2 118.3 118.4 119.1 119.2 119.3 120.1 121.1 122.1 122.2 122.3 122.4 123.1 124.1 125.1 125.2 126.1 126.2 126.3 126.4 126.5 127.1 127.2 127.3 128.1 128.2 128.3 129.1 129.2 129.3 129.4 129.5 129.6 130.1 130.2 131.1 132.1 132.2 132.3 132.4 132.5 132.6 132.7 132.8 132.9 132.10 132.11 133.1 134.1 135.1 136.1 136.2 137.1 138.1 138.2 138.3 138.4 138.5 138.6 139.1 140.1 141.1 142.1 143.1 144.1
Pravila Privatnosti Korištenje mrežnog mjesta Kuglačkog saveza SMŽ moguće je i bez pružanja osobnih podataka, međutim, ako posjetitelj želi koristiti neke od usluga ovog mrežnog mjesta, obrada osobnih podataka može biti nužna. Ako je obrada podataka nužna, no međutim za nju ne postoji zakonska obveza, za pristanak će se uvijek pitati posjetitelja/korisnika. Obrada osobnih podataka kao što je ime, prezime, adresa, email adresa ili broj telefona ispitanika uvijek će biti u skladu sa Općom Uredbom o zaštiti osobnih podataka i zakonskom regulativom Republike Hrvatske koja je primjenjiva na mrežno mjesto Kuglačkog saveza SMŽ. Putem ovih Pravila o Privatnosti želimo Vas obavijestiti o prirodi, opsegu i svrsi osobnih podataka koje prikupljamo i obrađujemo. Nadalje, ovim putem želimo informirati ispitanike o njihovim pravima. Kao voditelj obrade podataka, Kuglačkog saveza SMŽ je ugradila niz tehničkih i organizacijskih mjera kako bi osigurala zaštićenost osobnih podataka koji se obrađuju. Međutim, prijenos podataka putem Interneta u teoriji može imati sigurnosne propuste, tako da stopostotna zaštićenost ne može biti uvijek zagarantirana. Zbog ovog razloga svaki ispitanik može dostaviti osobne podatke alternativnim metodama, primjerice putem telefonskog poziva. DEFINICIJE Pravila privatnosti mrežnog mjesta Kuglačkog saveza SMŽ temelje se na pojmovima koje je koristilo Zakonodavstvo EU pri izradi i prihvaćanju Opće Uredbe o zaštiti osobnih podataka. Pravila Privatnosti su čitka i razumljiva široj javnosti, kao i našim korisnicima i posjetiteljima. Kako bi to osigurali, prvo ćemo objasniti korištenu terminologiju. U ovim Pravilima Privatnosti, među ostalim, koristimo sljedeće pojmove: a) Osobni podaci Osobni podaci su bilo koji podaci koji se odnose na bilo koju identificiranu fizičku osobu („ispitanik“, „korisnik“, „posjetitelj“). Identificirana fizička osoba je ona koju se može identificirati, direktno ili indirektno, po imenu i prezimenu, identifikacijskom broju, podacima o lokaciji, online identifikatorima kao što su fizički, psihički, genetski, mentalni, ekonomski, kulturni ili društveni identitet fizičke osobe. b) Ispitanik Ispitanik je svaka fizička osoba čiji je identitet utvrđen ili se može utvrditi, a čiji osobni podaci su podložni obradi od strane voditelja obrade zaduženog za obradu osobnih podataka. c) Obrada Obrada je bilo koji postupak ili set postupaka primjenjiv na osobne podatke, bilo da se radi o automatiziranim procesima kao što su prikupljanje, snimanje, organizacija, strukturiranje, spremanje, prilagodba ili izmjena, vađenje, pregled, korištenje, otkrivanje putem prijenosa, širenje ili stavljanje na raspolaganje, poravnavanje, ograničavanje, brisanje ili uništenje. d) Ograničenje obrade Ograničenje obrade je označavanje spremljenih osobnih podataka s ciljem da se ograniči njihova obrada u budućnosti. e) Profiliranje Profiliranje je bilo koji način automatizirane obrade osobnih podataka koji se sastoji od korištenja osobnih podataka kako bi se utvrdile osobne preference fizičke osobe, točnije kako bi se analizirali i previdjeli aspekti uspješnosti na poslu, ekonomske situacije, zdravlja, osobnih preferencija, interesa, pouzdanosti, ponašanja, lociranja i kretanja svake pojedine fizičke osobe. f) Pseudonimizacija Pseudonimizacija je obrada osobnih podataka na način da se ispitaniku više ne mogu dodijeliti osobine bez korištenja dodatnih podataka koji se prikupljaju na način da su odvojeni, i na njima se mogu primijeniti mjere tehničke i organizacijske prirode koje osiguravaju da se podaci ne mogu primijeniti na bilo koju fizičku osobu čiji je identitet utvrđen ili se može utvrditi. g) Voditelj obrade osobnih podataka ili osoba zadužena kao voditelj obrade osobnih podataka Voditelj obrade osobnih podataka ili osoba zadužena kao voditelj obrade osobnih podataka je svaka fizička ili pravna osoba, javna ustanova, agencija ili drugo tijelo koje samo ili u suradnji s drugima određuje svrhu i način obrade osobnih podataka; na mjestima gdje je svrha i način obrade osobnih podataka uređen zakonodavstvom države članice EU-e, kriterij za izbor voditelja obrade bit će pod ingerencijom zakonodavstva države članice EU-e. h) Izvršitelj obrade osobnih podataka Izvršitelj obrade osobnih podataka je fizička ili pravna osoba, javna ustanova, agencija ili drugo tijelo koje vrši obradu osobnih podataka u ime voditelja obrade osobnih podataka. i) Primatelj Primatelj je fizička ili pravna osoba, javna ustanova, agencija ili drugo tijelo kojem su pruženi osobni podaci, radilo se tu o trećoj strani ili ne. Međutim, državna tijela koja prime osobne podatke putem određenog upita koji je u skladu s EU ili zakonom države članice neće se smatrati primateljima; obrada osobnih podataka od strane tih državnih tijela će biti u skladu s primjenjivim propisima vezanim uz svrhu obrade podataka. j) Treća strana Treća strana je fizička ili pravna osoba javna ustanova, agencija ili drugo tijelo, a koji nisu ispitanik, voditelj obrade ili izvršitelj obrade, a koji su po izravnom dopuštenju voditelja obrade ili izvršitelja obrade ovlašteni da obrađuju osobne podatke ispitanika. k) Privola Privola ispitanika je svaka točno određena, informirana i nedvosmislena indikacija ispitanikove želje po kojoj on ili ona putem izjave ili jasne potvrdne radnje izražava pristanak na obradu osobnih podataka koji su vezani za njega ili nju. NAZIV I ADRESA VODITELJA OBRADE PODATAKA Voditelj obrade osobnih podataka po Općoj Uredbi o zaštiti osobnih podataka ili drugih zakona koji se tiču zaštite osobnih podataka primjenjivih u državama članicama EU je: Kuglački savez Sisačko-moslavačke županije (KSSMŽ) Stjepana i Antuna Radića 8a, 44 000 SISAK Email: kuglacki.savez.smz@gmail.com Mrežno mjesto: https://kssmz.hr KOLAČIĆI Mrežno mjesto Kuglačkog saveza SMŽ koristi kolačiće. Kolačići su tekstualne datoteke koje preglednik sprema na računalni sustav. Mnoge mrežne stranice i poslužitelji koriste kolačiće. Mnogi kolačići u sebi sadrže tzv cookie ID. Cookie ID je jedinstveni identifikator kolačića. Sadrži se od niza znakova koje web stranice i serveri mogu dodijeliti specifičnom pregledniku u kojem je kolačić pohranjen. To daje mogućnost posjećenim mrežnim stranicama i serverima da razlikuju pojedine preglednike od ostalih preglednika na kojima su drugačiji kolačići. Pojedini preglednik može se identificirati putem jedinstvenog cookie ID. Kroz korištenje kolačića mrežna stranica Kuglačkog saveza SMŽ posjetiteljima pruža pristupačnije usluge koje ne bi bile moguće bez korištenja kolačića. Informacije i ponude mrežne stranice mogu se putem kolačića optimizirati tako da je na prvom mjestu korisnik i njegovo korisničko iskustvo. Kao što je prethodno rečeno, kolačići omogućuju da prepoznamo korisnike mrežne stranice. Svrha toga je u tome da korisnik lakše koristi mrežnu stranicu. Npr, korisnik koji koristi kolačiće ne mora pri svakom pristupanju mrežnoj stranici unositi pristupne podatke jer taj postupak preuzima mrežna stranica koja smješta kolačić na računalni sustav. Još jedan primjer korištenja kolačića je košarica u web dućanu. Web dućan pamti artikle koje je korisnik smjestio u košaricu putem kolačića. Ispitanik može u bilo koje doba spriječiti smještanje kolačića putem editiranja postavki preglednika kojeg koristi, i tako može trajno onemogućiti smještanje kolačića. Nadalje, već postavljeni kolačići mogu se ukloniti u bilo koje doba putem bilo kojeg preglednika. No, ako ispitanik deaktivira postavljanje kolačića u svom pregledniku, neće moći koristiti sve funkcije mrežne stranice. PRIKUPLJANJE OPĆIH PODATAKA I INFORMACIJA Mrežno mjesto Kuglačkog saveza SMŽ prikuplja opće podatke i informacije kad ispitanik ili automatizirani sustav pristupi web stranici. Ti opći podaci i informacije se potom spremaju na server u vidu log datoteka. Prikuplja se (1) tip preglednika i njegova verzija, (2) operacijski sustav (3) mrežna stranica s koje se pristupa našoj mrežnoj stranici (tzv preporučitelji), (4) podstranica, (5) datum i vrijeme pristupanja mrežnoj stranici, (6) IP adresa, (/) pružatelj internetske usluge i (8) drugi slični podaci i informacije koje se mogu koristiti u slučaju napada na informacijski sustav. Pri korištenju tih općih podataka i informacija Kuglačkog saveza SMŽ ne izvlači zaključke o ispitaniku. Suprotno tome, ove informacije su potrebne kako bi se (1) sadržaj mrežne stranice ispravno dostavio, (2) optimizirao sadržaj mrežne stranice i njen marketing, (3) osigurala dugotrajna sposobnost sustava i mrežne stranice, (4) pružila potrebna pomoć državnim tijelima u slučaju kaznenog progona zbog cyber-napada. Stoga, mrežna stranica Kuglačkog saveza SMŽ analizira anonimno prikupljene podatke i informacije statistički s ciljem povećanja zaštite i sigurnosti podataka, te kako bi osigurala optimalnu razinu zaštite svih prikupljenih osobnih podataka koje obrađuje. Anonimni podaci serverskih log datoteka spremaju se odvojeno od osobnih podataka ispitanika. OSTAVLJANJE KOMENTARA NA MREŽNOM MJESTU Kada posjetitelji (ispitanik) napišu komentar na mrežnom mjestu Kuglačkog saveza SMŽ voditelj obrade podataka mrežnog mjesta Kuglačkog saveza SMŽ prikuplja podatke prikazane u formi komentara, i također IP adresu posjetitelja kao i string korisničkog agenta preglednika kako lakše detektirali spam. Ovo pohranjivanje IP adrese odvija se iz sigurnosnih razloga, a u slučaju da ispitanik krši prava trećih strana ili objavljuje nezakonit sadržaj putem danog komentara. Pohrana tih osobnih podataka je, dakle, u vlastitom interesu voditelja obrade osobnih podataka mrežnog mjesta Kuglačkog saveza SMŽ tako da se u slučaju povrede može opravdati. Prikupljeni osobni podaci neće biti proslijeđeni trećim osobama, osim ako takav prijenos nije zakonom propisan ili služi za obranu voditelja obrade osobnih podataka mrežnog mjesta Kuglačkog saveza SMŽ. Voditelj obrade osobnih podataka na mrežnom mjestu Kuglačkog saveza SMŽ također zadržava pravo da komentare ne objavi i(li) ih obriše. Moguće je da je anonimiziran string kreiran iz vaše adrese e-pošte (koji se također zove hash) dostavljen Gravatar servisu kako bi provjerili da li ga koristite. Pravila privatnosti Gravatar servisa dostupna su ovdje: https://automattic.com/privacy/. Nakon odobrenja vašeg komentara, vaša profilna slika je javno vidljiva u kontekstu vašeg komentara. UGRAĐENI SADRŽAJ S DRUGIH MREŽNIH MJESTA Sadržaj na mrežnom mjestu Kuglačkog saveza SMŽ može sadržavati ugrađeni sadržaj (npr. video, slike, članke, itd.) s drugih mrežnih mjesta. Ugrađeni sadržaj sa drugih mrežnih mjesta ponaša se istovjetno kao da je ispitanik posjetio to drugo mrežno-mjesto. Ova mrežna mjesta možda prikupljaju podatke o vama, koriste kolačiće, imaju ugrađeno dodatno praćenje od trećih strana, i nadgledaju vašu interakciju s tim ugrađenim sadržajem, uključujući praćenje vaše interakcije s ugrađenim sadržajem ako imate račun i prijavljeni ste na mrežnom-mjestu. RUTINSKO BRISANJE I BLOKIRANJE OSOBNIH PODATAKA Voditelj obrade osobnih podataka će obrađivati i držati osobne podatke ispitanika jedino u vremenu koje je potrebno kako bi se ostvarili ciljevi držanja osobnih podataka, ili do roka koji dopušta Zakonodavstvo EU ili drugi zakonodavci pod čijom je nadležnosti voditelj obrade osobnih podataka. Ako se razlog spremanja osobnih podataka ne može ispuniti ili period čuvanja određen od strane europskog zakonodavstva ili drugih nadležnih zakonodavaca istekne, osobni podaci ispitanika će se rutinski blokirati ili izbrisati u skladu sa zakonskim preduvjetima. PRAVA ISPITANIKA a) Pravo na potvrdu osobnih podataka Svaki ispitanik ima pravo garantirano od strane europskog zakonodavstva da od voditelja obrade osobnih podataka dobije potvrdu koriste li se ili obrađuju njegovi ili njeni osobni podaci. Ako ispitanik želi iskoristiti ovo pravo na potvrdu, on ili ona u svakom trenutku može kontaktirati voditelja obrade osobnih podataka. b) Pravo na pristup osobnim podacima Svaki ispitanik ima pravo garantirano od strane europskog zakonodavstva da u svakom trenutku od voditelja obrade osobnih podataka dobije besplatnu informaciju o svojim osobnim podacima koji su pohranjeni, kao i kopiju traženih osobnih podataka. Nadalje, Europske odredbe i direktive omogućuju ispitaniku pristup sljedećim informacijama: - svrha obrade osobnih podataka; - vrsta traženih osobnih podataka; - primatelj ili vrsta primatelja s kojima su podijeljeni osobni podaci, posebno primatelji iz zemalja trećeg svijeta ili međunarodnih organizacija; - gdje je moguće, predviđeni period čuvanja osobnih podataka, ili u slučaju nemogućnosti kriterij koji određuje taj period; - postojanje prava ispitanika da od voditelja obrade osobnih podataka zatraži ispravak ili brisanje osobnih podataka, ograničenje obrade osobnih podataka ispitanika ili pravo ispitanika na prigovor protiv obrade osobnih podataka; - postojanje prava podnošenja žalbe nadzornom tijelu; - ako osobni podaci nisu prikupljeni direktno od ispitanika, dostupne informacije o izvoru osobnih podataka; - postojanje automatiziranog procesa donošenja odluka na koje se odnosi Članak 22, stavci 1 i 4 Opće Uredbe o zaštiti osobnih podataka, i u navedenom slučaju dostupne informacije o logici automatizma, kao i važnost i predviđene posljedice po ispitanika. Nadalje, ispitanik ima pravo na informaciju ako se njegovi ili njeni osobni podaci prenose na treće zemlje ili međunarodne organizacije. U tom slučaju ispitanik ima pravo na informaciju o sigurnosnim mjerama provedenim u prijenosu podataka Ako ispitanik želi iskoristiti ovo pravo na pristup, u svakom trenutku može kontaktirati voditelja obrade osobnih podatak. c) Pravo na ispravak osobnih podataka Svaki ispitanik ima pravo garantirano od strane europskog zakonodavstva da u svakom trenutku od voditelja obrade osobnih podataka dobije ispravak netočnih osobnih podataka. Imajući u vidu svrhu obrade osobnih podataka, ispitanik ima pravo da mu/joj se nepotpuni osobni podaci upotpune, uz ostalo i putem upotpunjujuće izjave. Ako ispitanik želi iskoristiti ovo pravo na ispravak, u svakom trenutku može kontaktirati voditelja obrade osobnih podataka. d) Pravo na brisanje osobnih podataka (Pravo na zaborav) Svaki ispitanik ima pravo garantirano od strane europskog zakonodavstva da u svakom trenutku od voditelja obrade osobnih podataka traži brisanje osobnih podataka vezanih uz ispitanika bez odgode. Voditelj obrade osobnih podataka ima obvezu bez odgode obrisati osobne podatke gdje je primjenjiv barem jedan od uvjeta, sve dok obrada nije nužna: · Osobni podaci više nisu potrebni u smislu svrhe za koju su prikupljeni ili obrađeni. · Ispitanik je povukao privolu za obradu osobnih podataka koja se temelji na Članku 6, Stavku 1 ili Članku 9, Stavku 2 Opće Uredbe o zaštiti osobnih podataka, i gdje više ne postoji zakonska osnova za obradu podataka. · Ispitanik se protivi obradi podataka prema Članku 21, Stavku 1 Opće Uredbe o zaštiti osobnih podataka, a ne postoji zakonska osnova za obradu podataka, ili se ispitanik protivi obradi podataka prema Članku 21, Stavku 2 Opće Uredbe o zaštiti osobnih podataka. · Osobni podaci su protuzakonito obrađeni. · Osobni podaci se moraju izbrisati prema zakonskoj obavezi po EU ili zakonima države članice čije je voditelj obrade osobnih podataka državljanin. · Osobni podaci su prikupljeni u svezi s ponudom usluge informacijskog društva prema Članku 8, Stavku 1 Opće Uredbe o zaštiti osobnih podataka. Ukoliko je barem jedan od gore navedenih razloga primjenjiv, a ispitanik zatraži brisanje osobnih podataka koje prikuplja Mrežno mjesto Kuglačkog saveza SMŽ, on ili ona mogu kontaktirati voditelja obrade osobnih podataka. Voditelj obrade osobnih podataka će osigurati da se brisanje osobnih podataka izvrši odmah. Na mjestima gdje je voditelj obrade osobnih podataka dopustio objavu osobnih podataka, a po Članku 17, Stavku 1 je obavezno brisanje navedenih osobnih podataka, voditelj obrade osobnih podataka će vodeći obzira o tehničkom izvedivosti i troškovima primjene poduzeti razumne korake, uključujući tehničke mjere, kako bi obavijestio druge voditelje obrade osobnih podataka da je ispitanik zatražio brisanje svih poveznica, kopija ili replika osobnih podataka, sve dok njihova obrada više nije potrebna. Voditelj obrade osobnih podataka na mrežnom mjestu Kuglačkog saveza SMŽ će osigurati provedbu navedenih mjera u svakom pojedinačnom slučaju. e) Pravo na ograničenje obrade osobnih podataka Svaki ispitanik po Zakonodavstvu EU ima zajamčeno pravo da od voditelja obrade osobnih podataka pribavi pravo na ograničenje obrade osobnih podataka u slučajevima gdje je sljedeće primjenjivo: · Točnost osobnih podataka je osporena od strane ispitanika što omogućuje voditelju obrade osobnih podataka da provjeri točnost osobnih podataka. · Obrada osobnih podataka je protuzakonita, a ispitanik se protivi brisanju osobnih podataka i umjesto toga traži ograničenje uporabe navedenih osobnih podataka. · Voditelj obrade osobnih podataka osobni podaci više nisu potrebni za obradu, međutim ispitaniku su potrebni za uspostavu, provedbu ili obranu pravnih zahtjeva. · Ispitanik se usprotivio obradi osobnih podataka prema Članku 21, Stavku 1 Opće Uredbe o zaštiti osobnih podataka čekajući provjeru nadjačavaju li zakonski temelji voditelja obrade osobnih podataka one ispitanika. Ukoliko je barem jedan od gore navedenih razloga primjenjiv, a ispitanik zatraži ograničenje obrade osobnih podataka koje prikuplja Mrežno mjesto Kuglačkog saveza SMŽ, on ili ona mogu kontaktirati voditelja obrade osobnih podataka. Voditelj obrade osobnih podataka će osigurati ograničenje obrade osobnih podataka. f) Pravo na prenosivost osobnih podataka Svaki ispitanik po Zakonodavstvu EU ima zajamčeno pravo da primi osobne podatke koji se odnose na njega ili nju od strane voditelja obrade osobnih podataka, u strukturiranom, većinski korištenom i čitkom formatu. Ispitanik ima pravo prenijeti navedene osobne podatke nekom drugom voditelju obrade osobnih podataka od trenutnog voditelja obrade osobnih podataka bez ikakvih smetnji, sve dok je obrada osobnih podataka temeljena na privoli po točki A, Članka 6, Stavka 1 ili točki A, Članka 9, Stavka 2 Opće Uredbe o zaštiti osobnih podataka, ili po ugovoru prema točki B, Članka 6, Stavka 1 Opće uredbe o zaštiti podataka, a obrada podataka se vrši automatski, sve dok obrada podataka nije nužna za zadatke od javnog interesa ili za obavljanje službene dužnosti voditelja obrade osobnih podataka. Nadalje, po postojećem pravu na prenosivost osobnih podataka iz Članka 20, Stavka 1 Opće Uredbe o zaštiti osobnih podataka, ispitanik ima pravo da se njegovi ili njeni osobni podaci prenesu direktno između voditelja obrade osobnih podataka gdje je to tehnički izvedivo gdje taj postupak ne ugrožava prava i slobode drugih ispitanika. Kako bi iskoristio svoje pravo na prenosivost osobnih podataka, ispitanik u svakom trenutku može kontaktirati voditelja obrade osobnih podataka mrežnog mjesta Kuglačkog saveza SMŽ. g) Pravo na prigovor Svaki ispitanik po Zakonodavstvu EU ima zajamčeno pravo na prigovor temeljen na vlastitoj situaciji, u svakom trenutku, na obradu osobnih podataka koji se odnose na ispitanika, a temelji se na točkama E i F Članka 6, Stavka 1 Opće Uredbe o zaštiti osobnih podataka. Također se može primijeniti na profiliranje temeljeno na ovoj Uredbi. Mrežno mjesto Kuglačkog saveza SMŽ u slučaju prigovora neće nastaviti obradu osobnih podataka, osim u slučaju kad postoji ozbiljan zakonski temelj za obradu osobnih podataka, a koji može premostiti interese, prava i slobode ispitanika, ili za uspostavu, provedbu ili obranu pravnih zahtjeva. Ukoliko Mrežno mjesto Kuglačkog saveza SMŽ vrši obradu osobnih podataka u marketinške svrhe, ispitanik ima pravo na prigovor u bilo kojem trenutku protiv obrade osobnih podataka koji se koriste u te svrhe. Ovo se primjenjuje i za profiliranje koje je usko povezano za svrhe takvog direktnog marketinga. Ako ispitanik izrazi prigovor protiv obrade osobnih podataka u svrhe direktnog marketinga, Mrežno mjesto Kuglačkog saveza SMŽ više neće vršiti obradu osobnih podataka ispitanika za svrhu direktnog marketinga. Dodatno, ispitanik ima pravo na osnovu vlastite situacije pravo na prigovor protiv obrade osobnih podataka od strane mrežnog mjesta Kuglačkog saveza SMŽ, a koji se koriste u znanstveno-istraživačke ili statističke svrhe prema Članku 89, Stavak 1 Opće Uredbe o zaštiti osobnih podataka, osim ako je obrada podataka potrebna u svrhu javnog interesa. Kako bi iskoristio pravo na prigovor, ispitanik u svakom trenutku može kontaktirati voditelja obrade osobnih podataka mrežnog mjesta Kuglačkog saveza SMŽ. Uz to, ispitanik u kontekstu korištenja usluga informacijskog društva, usprkos Uredbi 2002/58/EC, može iskoristiti svoje pravo na prigovor automatiziranim sredstvima koristeći se tehničkim specifikacijama. h) Automatizirano donošenje odluka, uključujući profiliranje Svaki ispitanik po Zakonodavstvu EU ima zajamčeno pravo da ne bude predmet donošenja odluka koje se temelje isključivo na automatiziranoj obradi osobnih podataka, uključujući profiliranje, a koje mogu stvoriti pravne ili slične posljedice po njega ili nju, sve dok odluka (1) nije dio dogovora između ispitanika i voditelja obrade osobnih podataka, ili (2) nije dopuštena po zakonima EU ili pojedine države članice koji donose primjerene mjere koji će čuvati prava, slobode i interese ispitanika, ili (3) nije temeljena na izričitoj privoli ispitanika. Ako je odluka (1) potrebna za ugovor između ispitanika i voditelja obrade osobnih podataka, ili (2) se temelji na izričitoj privoli ispitanika, Mrežno mjesto Kuglačkog saveza SMŽ će provesti mjere koje će čuvati ispitanikova prava, slobode i interese, minimalno pravo na ljudsku intervenciju od strane voditelja osobnih podataka kojem će izraziti svoj stavi i osporavanje odluke. Ako ispitanik želi iskoristiti prava u vezi automatiziranog individualnog donošenja odluka, u svakom trenutku može kontaktirati voditelja obrade osobnih podataka mrežnog mjesta Knjiužnice i čitaonice Kutina. i) Pravo na povlačenje i ukidanje privole Svaki ispitanik po Zakonodavstvu EU ima zajamčeno pravo da povuče i/ili ukine svoju privolu za obradu osobnih podataka u svakom trenutku. Ako ispitanik želi iskoristiti pravo da povuče i/ili ukine svoju privolu, u svakom trenutku može kontaktirati voditelja obrade osobnih podataka mrežnog mjesta Kuglačkog saveza SMŽ. ODREDBE ZAŠTITE OSOBNIH PODATAKA VEZANE ZA FACEBOOK Na mrežnom mjestu Kuglačkog saveza SMŽ voditelj obrade osobnih podataka ugradio je komponente tvrtke Facebook. Facebook je društvena mreža. Društvena mreža je mjesto društvenog povezivanja na internetu, online zajednica koja obično dopušta korisnicima da međusobno komuniciraju u virtualnom prostoru. Društvena mreža služi kao platforma za razmjenu mišljenja i iskustava, ili kako bi Internet zajednici pružila osobne ili informacije vezane za posao. Facebook svojim korisnicima dopušta izradu privatnih profila, upload slika i povezivanje putem zahtjeva za prijateljstvo. Facebook je vlasništvo tvrtke Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, SAD. Ako osoba koja se koristi Facebookom živi izvan SAD-a ili Kanade, voditelj obrade osobnih podataka je Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irska. Otvaranjem bilo koje stranice mrežnog mjesta Kuglačkog saveza SMŽ, a kojom upravlja voditelj obrade osobnih podataka, a na kojoj je ugrađena Facebook komponenta (Facebook plugin), ispitanikov preglednik će prikazati odgovarajuću Facebook komponentu. Pregled svih Facebook plugina može se naći na https://developers.facebook.com/docs/plugins/. Za vrijeme ove tehničke procedure Facebooku je pružena informacija o specifičnoj podstranici koju je posjetio ispitanik. Ako je ispitanik prijavljen na Facebook, u isto vrijeme Facebook može detektirati svaki njegov pregled mrežnog mjesta Kuglačkog saveza SMŽ, a tokom boravka na web stranici koje je specifične podstranice posjetio. Ova informacija prikuplja se putem Facebook komponente i doznačuje se Facebook računu ispitanika. Ako ispitanik klikne na bilo koji Facebook gumb integriran na mrežnom mjestu Kuglačkog saveza SMŽ, npr „Like“ gumb, ili ako ispitanik pošalje komentar, tada Facebook doznačuje navedenu informaciju osobnom Facebook računu ispitanika i time sprema osobne podatke. Svaki put kad je ispitanik prijavljen na Facebook, a u isto vrijeme pristupa mrežnom mjestu Kuglačkog saveza SMŽ, Facebook će putem Facebook komponente primiti informaciju o tome. Ovo će se dogoditi bez obzira klikne li ispitanik na Facebook komponentu ili ne. Ukoliko ispitanik ne želi prijenos ove vrste informacije, isto može spriječiti tako da se odjavi s Facebook računa prije pristupa mrežnom mjestu Kuglačkog saveza SMŽ. Smjernice o zaštiti osobnih podataka koje je Facebook objavio na https://facebook.com/about/privacy/ pružaju informacije o prikupljanju, obradi i korištenju osobnih podataka od strane Facebooka. Također, objašnjeno je koje postavke Facebook pruža kako bi se zaštitili osobni podaci ispitanika. Isto tako, na raspolaganju su razne konfiguracijske opcije kako bi se onemogućio prijenos osobnih podataka prema Facebooku. Ispitanik može koristiti navedene opcije u svrhu onemogućavanja slanja osobnih podataka. ODREDBA ZAŠTITE OSOBNIH PODATAKA VEZANE ZA GOOGLE ADSENSE Na mrežnm mjestu Kuglačkog saveza SMŽ voditelj obrade osobnih podataka ugradio je komponente Google AdSense. Google AdSense je mrežni servis koji omogućuje smještaj oglasa (reklama) na mrežnim stranicama trećih strana. Google AdSense se temelji na algoritmu koji odabire oglase prikazane na stranicama treće strane da podudaraju sadržaju mrežnog mjesta treće strane. Google AdSense dopušta ciljanje korisnika na temelju interesa koji se provodi pomoću generiranja pojedinačnih korisničkih profila. Operativna tvrtka Googleove AdSense komponente je Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States. Svrha Google AdSense komponente je integracija oglasa na mrežnom mjestu Kuglačkog saveza SMŽ. Google AdSense postavlja kolačić na računalo posjetitelja / ispitanika. Postavkama kolačića, Alphabet Inc. ima mogućnost analiziranja korištenja našeg mrežnog mjesta. Svakim pozivom na jednu od pojedinačnih stranica našeg mrežnog mjesta, kojima upravlja voditelj obrade osobnih podataka i u koju je integrirana komponenta Google AdSense, internetski preglednik na računalu ispitanika automatski će slati podatke putem Google AdSense komponenta u svrhu oglašavanja na mreži i izračunom zareda prema Alphabet Inc. Tijekom ovog tehničkog postupka, tvrtka Alphabet Inc. stječe znanje o osobnim podacima, kao što je IP adresa ispitanika, koji služi tvrtci Alphabet Inc., između ostalog, kako bi razumijeli podrijetlo posjetitelja i klikova i potom stvorili provizije. Ispitanik može, kao što je prije navedeno, u bilo kojem trenutku spriječiti postavljanje kolačića putem naše web stranice odgovarajućom prilagodbom korištenog web preglednika i time trajno uskraćivati postavljanje kolačića. Takvo prilagođavanje korištenim internetskim preglednikom također bi spriječilo Alphabet Inc da postavlja kolačić na računalo ispitanika. Osim toga, kolačići koji su već upotrebljavani od strane alata Alphabet Inc. mogu se izbrisati u bilo kojem trenutku putem web preglednika ili drugih softverskih programa. Nadalje, Google AdSense također koristi takozvane prateće pixele. Prateći pixel je minijaturni grafički element ugrađen na mrežnim stranicama kako bi omogučio snimanje dnevnika i analizu dnevnika pomoću koje se može provesti statistička analiza. Na osnovu ugrađenih piksela za praćenje, Alphabet Inc. može odrediti je li i kada je mrežnu stranicu otvorio ispitanik i koje su veze na njega kliknuli. Pikseli za praćenje služe, između ostalog, za analiziranje tijeka posjetitelja na mrežnoj stranici. Kroz Google AdSense osobni podaci i informacije – koji također uključuju IP adresu i koji su potrebni za prikupljanje i obračun prikazanih oglasa – prenose se u Alphabet Inc. u Sjedinjenim Američkim Državama. Ti će osobni podaci biti pohranjeni i obrađeni u Sjedinjenim Američkim Državama. Alphabet Inc. može otkriti prikupljene osobne podatke putem ove tehničke procedure trećim stranama. Google AdSense dodatno je objašnjen pod sljedećom vezom https://www.google.com/intl/en/adsense/start/. ODREDBA ZAŠTITE OSOBNIH PODATAKA VEZANE ZA GOOGLE ANALYTICS (S ANONIMIZACIJSKOM FUNKCIJOM) Na mrežnom jestu Kuglačkog saveza SMŽ voditelj obrade osobnih podataka ugradio je komponente Google Analytics (s anonimizacijskom funkcijom). Google Analytics je Internet usluga; prikupljanje i analiza podataka o ponašanju posjetitelja na web stranici. Usluga web analitike među ostalim prikuplja podatke o mrežnoj stranici s koje je ispitanik došao, koje je podstranice posjetio ili kako često i koliko dugo pregledava određenu podstranicu. Web analitika se koristi za optimizaciju mrežne stranice i kako bi se provela analiza oglašavanja na internetu. Vlasnik servisa Google Analytics je Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, SAD. Za potrebe web analitike putem Google Analyticsa, voditelj obrade osobnih podataka koristi aplikaciju „_gat._anonymizelp“ putem koje je IP adresa ispitanika skraćena od strane Googlea i anonimizirana kada mrežnom mjestu Kuglačkog saveza SMŽ pristupa ispitanik iz države članice EU ili neke druge države pod nadležnosti Europskog gospodarskog prostora. Svrha Google Analytics komponente je da analizira promet na mrežnom mjestu Kuglačkog saveza SMŽ. Google koristi prikupljene podatke i informacije, među ostalim, kako bi procijenio korištenje mrežne stranice i kako bi pružio izvještavanje koje prikazuje aktivnost na mrežnoj stranici, te kako bi pružio druge usluge vezane uz korištenje mrežne stranice. Google Analytics smješta kolačić na računalni sustav ispitanika. Definicija kolačića je već objašnjena u ovom dokumentu. Postavljanjem kolačića Googleu se omogućuje analiza korištenja mrežne stranice. Svakim pregledom pojedine podstranice mrežnog mjesta Kuglačkog saveza SMŽ kojom upravlja voditelj obrade osobnih podataka, a na kojoj je ugrađena Google Analytics komponenta, ispitanikov preglednik će automatski pružiti Google Analytics komponenti informacije potrebne za svrhu Internet oglašavanja i izračun provizije koja pripada Googleu. Za vrijeme ove tehničke procedure tvrtka Google dobit će osobne informacije poput IP adrese ispitanika (služi za razumijevanje otkud posjete i klikovi dolaze, a na osnovu toga stvara izračun provizije). Kolačić služi kako bi se pohranile osobne informacije poput vremena pristupanja mrežnoj stranici, lokaciji s koje se pristupa i učestalost pristupanja mrežnoj stranici od strane ispitanika. Sa svakim posjetom mrežnog mjesta Kuglačkog saveza SMŽ takvi osobni podaci, uključujući IP adresu ispitanika, će se proslijediti Googleu i bit će smješteni tamo. Google može proslijediti navedene osobne podatke putem tehničke procedure trećoj strani. Kako je već navedeno, ispitanik može spriječiti postavljanje kolačića odgovarajućim preinakama na pregledniku u svakom trenutku. Takve preinake bi također spriječile i Google Analytics da postavi kolačić na računalnom sustavu ispitanika. Također je moguće izbrisati kolačiće koji su već postavljeni putem preglednika ili nekog drugog programskog rješenja. Dodatno, ispitanik se može usprotiviti prikupljanju i obradi osobnih podataka koje je generirao Google Analytics, a koji su vezani uz korištenje mrežnog mjesta Kuglačkog saveza SMŽ. Kako bi to ostvario, ispitanik mora skinuti dodatak pregledniku koji se nalazi na https://tools.google.com/dlpage/gaoptout i instalirati ga. Ovaj dodatak putem JavaScripta daje Google Analyticsu do znanja da se informacije o posjeti web stranice od strane ispitanika ne smiju prikupljati i obrađivati. Google instalaciju navedenog dodatka pregledniku smatra valjanim prigovorom protiv prikupljanja osobnih podataka. Ako u bilo kojem daljnjem trenutku dođe do brisanja, formatiranja ili ponovnog instaliranja računalnog sustava ispitanika, ispitanik će morati ponovno instalirati dodatak pregledniku kako bi onesposobio Google Analytics. Ukoliko je iz nekog razloga ispitanik ili ovlaštena osoba uklonila dodatak pregledniku, ili je dodatak pregledniku onesposobljen, uvijek ga je moguće ponovno instalirati ili aktivirati. Dodatne informacije i Googleove smjernice vezane uz zaštitu osobnih podataka mogu se naći na https://www.google.com/intl/en/policies/privacy/ i http://www.google.com/analytics/terms/us.html. Dodatne informacije vezane uz Google Analytics mogu se pronaći na https://www.google.com/analytics/. PRAVNA OSNOVA ZA OBRADU OSOBNIH PODATAKA Članak 6, Stavak 1, Podstavak A Opće Uredbe o zaštiti osobnih podataka je pravna osnova za postupke obrade osobnih podataka za koje smo dobili privolu. Ako je obrada osobnih podataka nužna za provedbu ugovora kojeg je ispitanik dio, kao npr kad je obrada osobnih podataka nužna za isporuku roba ili usluga, obrada osobnih podataka temelji se na Članku 6, Stavku 1, Podstavku B Opće Uredbe o zaštiti osobnih podataka. Isto se primjenjuje prilikom obrada osobnih podataka koje su potrebne kako bi se provele predugovorne mjere, npr pri upitima vezanim za proizvode ili usluge. Ako je pravna ili fizička osoba predmet pravne obveze kod koje je obrada osobnih podataka nužna, kao npr ispunjavanje poreznih obveza, obrada osobnih podataka temelji se na Članku 6, Stavku 1, Podstavku C Opće Uredbe o zaštiti osobnih podataka. U rijetkim slučajevima obrada osobnih podataka je neophodna kako bi se zaštitili interesi ispitanika ili neke druge fizičke osobe. Npr, u slučaju da se ispitanik ozlijedi prilikom posjeta prostoru vlasnika ove mrežne stranice, osobni podaci poput imena, dobi, podataka o zdravstvenom osiguranju ili neka druga vitalna informacija će se morati proslijediti liječniku, bolnici ili nekoj trećoj osobi. Takva obrada podataka temelji se na Članku 6, Stavku 1, Podstavku D Opće Uredbe o zaštiti osobnih podataka. Na kraju, obrada osobnih podataka može se temeljiti i na Članku 6, Stavku 1, Podstavku F Opće Uredbe o zaštiti osobnih podataka. Ova pravna osnova koristi se u postupcima obrade osobnih podataka kada nije primjenjiva niti jedna prijašnja pravna osnova, ako je obrada osobnih podataka nužna za legitimne interese vlasnika mrežnog mjesta Kuglačkog saveza SMŽ ili neke treće strane, osim u situacijama gdje navedeni interesi ugrožavaju osnovna prava i slobode ispitanika, a koji zahtijevaju zaštitu osobnih podataka. Ovakva obrada osobnih podataka je naročito dozvoljena budući je posebno napomenuta od Zakonodavstva EU. Predviđeno je da je moguće pozvati se na legitimni interes ako je ispitanik klijent voditelja obrade osobnih podataka. LEGITIMNI INTERESI VODITELJA OBRADE OSOBNIH PODATAKA ILI TREĆE STRANE Na mjestima gdje se obrada osobnih podataka temelji na Članku 6, Stavku 1, Podstavku F Opće Uredbe o zaštiti osobnih podataka, legitimni interes predstavlja poslovanje u korist dobrobiti zaposlenika, članova i/ili dioničara ako navedeni postoje. RAZDOBLJE POHARNE OSOBNIH PODATAKA Kriterij pri određivanju razdoblja pohrane osobnih podataka je zakonom određeno maksimalno razdoblje pohrane. Nakon isteka tog razdoblja, osobni podaci su rutinski izbrisani, sve dok više nisu potrebni kako bi se ispunio ugovor ili njegovo sklapanje. PRUŽANJE OSOBNIH PODATAKA KAO ZAKONSKI ILI UGOVORNI PREDUVJET; PREDUVJET ZA SKLAPANJE UGOVORA; OBVEZA ISPITANIKA DA PRUŽI OSOBNE PODATKE; MOGUĆE POSLJEDICE AKO SE OSOBNI PODACI NE PRUŽE Moramo razjasniti da je pružanje osobnih podataka djelomično propisano zakonom (npr porezne odredbe) ili može biti rezultat ugovorne obveze (npr informacija o ugovornom partneru). Ponekad je potrebno zaključiti ugovor tako da ispitanik pruži osobne podatke koji se potom obrađuju. Ispitanik je, na primjer, nužan pružiti osobne podatke kad sa vlasnikom mrežnog mjesta Kuglačkog saveza SMŽ sklapa ugovor. Odbijanje pružanja osobnih podataka za posljedicu će imati nemogućnost sklapanja ugovora. Prije nego ispitanik pruži osobne podatke morat će kontaktirati vlasnika mrežnog mjesta Kuglačkog saveza SMŽ. On će mu potom naznačiti je li pružanje osobnih podataka zakonski ili ugovorno nužno, odnosno je li nužno za sklapanje ugovora, postoji li obveza pružanja osobnih podataka i na kraju posljedice ako odbije pružiti osobne podatke. POSTOJANJE AUTOMATIZIRANOG PROCESA DONOŠENJA ODLUKA Kao odgovoran poslovni partner, Mrežno mjesto Kuglačkog saveza SMŽ ne koristi automatizirani proces donošenja odluka, odnosno profiliranje. Korisne poveznice: Zakon o provedbi Opće uredbe o zaštiti podataka Opća uredba Europskog parlamenta i vijeća (GDPR) Agencija za zaštitu osobnih podataka