http___www.kuhinje.info_izjava-privatnosti__1.xml
1.1 2.1 3.1 4.1 4.2 5.1 5.2 6.1 6.2 6.3 7.1 8.1 9.1 9.2 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 17.3 18.1 19.1 20.1 21.1 21.2 21.3 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 37.2 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 65.1 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 88.2 89.1 90.1 90.2 91.1 92.1 92.2 93.1 94.1 95.1 95.2 96.1 97.1 97.2 97.3 98.1 99.1 100.1 100.2 101.1 102.1 102.2 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1 114.2 115.1 116.1 117.1 118.1 119.1 120.1 121.1 122.1 123.1 124.1 124.2 125.1 126.1 127.1 128.1 129.1 130.1 131.1 132.1 133.1 134.1 135.1 136.1 137.1 137.2 138.1 139.1 140.1 140.2 141.1 142.1 142.2 143.1 144.1 144.2 145.1 146.1 146.2 147.1 148.1 149.1 149.2 149.3 150.1 150.2 150.3 151.1 152.1 153.1 154.1 155.1 156.1 157.1 158.1 159.1 160.1 161.1 162.1 163.1 164.1 165.1 166.1 167.1 168.1 169.1 170.1 171.1 172.1 173.1 173.2 174.1 175.1 175.2 175.3 175.4 176.1 176.2 176.3 177.1 178.1 178.2 178.3 179.1 179.2 180.1 180.2 180.3 180.4 181.1 182.1 182.2 183.1 184.1 185.1 186.1 187.1 188.1 189.1 189.2 190.1 191.1 192.1 192.2 192.3 192.4 193.1 194.1 195.1 195.2 195.3 195.4 195.5 195.6 195.7 195.8 195.9 195.10 195.11 195.12 195.13 195.14 195.15 196.1 197.1 197.2 197.3 197.4 198.1 199.1 199.2 199.3 200.1 201.1 202.1 203.1 204.1 204.2 205.1 206.1 207.1 208.1 209.1 210.1 211.1 212.1 213.1 215.1 216.1
DG Organic Basics ApS Date: 28 October 2022 1 Privacy Policy 1.1 We process all personal data securely and confidentially. Organic Basics has internal procedures for e.g. deletion, data minimization, storage, collection, updating and disclosure of personal data to ensure the integrity, confidentiality and security of the personal data. 1.2 Organic Basics’ processing of your personal data only takes place for explicitly stated and legitimate purposes. We do not process your personal data in a way that is incompatible with these purposes. 1.3 We carry out and update risk assessments in relation to Organic Basics’ processing of personal data, including personal data about employees. Organic Basics’ initiatives in data protection and compliance with the General Data Protection Regulation (GDPR) are based on these risk assessments. In cases where it is necessary, we also carry out consequence analyses (DPIA) on individual treatment activities. 1.4 We have therefore adopted this personal data policy (hereinafter "Personal data policy"), which tells you how we process your personal data when you use our website. 1.5 The Personal data policy has been drawn up with reference to the rules in the data protection regulation (Regulation on the protection of natural persons in connection with the processing of personal data and on the free exchange of such information and on the repeal of Directive 95/46/EC (general regulation on data protection) (EU) 2016/679 (also known as “GDPR”)) and the Danish Data Protection Act (Act No. 502 of 23/05/2018 with any subsequent amendments) (“Data Protection Act”). 1.6 You will receive this Personal data policy via email when you are employed by Organic Basics. The Personal data policy can also be found on Organic Basics’ website www.organicbasics.com. 2 Who are we (we are the data controller) 2.1 We are the company responsible for the processing of your personal data in accordance with this policy which means that we are the data controller. 2.2 Our contact information: DG Organic Basics ApS, Værnedamsvej 12A, 1., 1619 DK-Copenhagen V, Denmark. Company registration number: 43 42 06 23 Email: hello@organicbasics.com Telephone: +45 78 73 72 70 2.3 To make the policy more user friendly we use “we”, “us”, “our” etc. to describe our company. When we talk about our “website” we mean www.organicbasics.com. When we refer to “you” we mean you as a user of our website or customer of our online services or products. 3 When does the policy apply? 3.1 The policy is related to the information we collect and process about you when you visit and sign up to our services/purchase goods via our website or when you are in contact with us. 4 The categories of data we process are: As mentioned above, we are a company that provides underwear, activewear and everyday essentials (garments). We process your data to deliver these services and products to you. This includes: 4.1 Registering and identifying you as a customer/user, 4.1.1 Purpose • Creating your account, • Logging and saving the actions you take when you use our website, • Delivering the services and/or products as mentioned above, • Handling payment transactions, • Shipping details • Responding to your questions and providing you with customer service and support, including sending service-related messages to you, and • Providing you with other services that can be ordered through the website. 4.1.2 Ordinary personal data: • Your contact details, e.g., name, title, email, telephone number, • Your purchase history, interest areas and use of our services, • User requests, e.g., sign-up and use of our product, • Login details and verification, • Customer support, account and product setup, user interviews, UX research, customer feedback etc., • Payment information, incl. billing address, credit or debit card details, and payment and purchase history, we do not store the card details, but use our business partners to complete payments. The payment information is stored and therefore processed by an independent data controller. • Information required to comply with requirements of public or governmental authorities. • Information you provide when creating a user account • IP address 4.1.3 Sensitive personal data: • We do not process sensitive personal data. 4.2 Marketing: We process your data for marketing-related purposes, including: • sending you newsletters and email marketing (if you have consented), • providing you with offers, sending you guides, • tailoring our communication with you to accommodate your areas of interests and focus, • sending you relevant promotions, • If you sign up for an event etc., we will process your data in that regard. 4.2.1 Ordinary personal data: • Your contact details, e.g., name, title, email, telephone number, • Purchase history, interest areas and use of our services, • User requests, e.g., sign-up and use of our product, • What newsletters you signed up for, when you asked to receive email marketing and guides, • Events or other arrangements you signed for, when, about what and if you provide feedback. • Information about your use of the website • Interests, including which products and services you have shown interest in 4.2.2 Sensitive personal data: • We do not process sensitive personal data. 4.3 Suppliers: 4.3.1 This section describes Organic Basics’ policy for processing personal data collected from contact persons for Organic Basics’ B2B customers, suppliers and other business partners who work with Organic Basics. 4.3.2 We process personal data for the following purposes: • When your company or the company you are employed by enters into an agreement with Organic Basics, including the purchase of products or services offered by Organic Basics • When you have shown interest in Organic Basics' products or services, e.g., by giving Organic Basics your business card • When you agree to receive Organic Basics’ newsletter • When you collaborate or communicate with Organic Basics 4.3.3 Ordinary personal data: • Names, email addresses, telephone numbers and similar identifying information • Individual information, e.g., preferred language • Organizational information such as company name, business address, position, business area, primary place of work and country • Contractual information such as purchase orders, invoices, contracts, and similar agreements between your company (or employer) and Organic Basics, which may include your contact information • Financial information such as payment terms, bank account details and creditworthiness • Such information may be provided directly by you (primarily through emails and other correspondence) or by third parties such as your employer. 4.3.4 Sensitive personal data: • We do not process sensitive personal data. 4.3.5 We collect your data directly from you and we will keep such data for as long as the relevant activity is ongoing and for the period after that as outlined in our data retention policy. 4.4 Business and product development: We process your data for the purpose of data analysis, audits, developing new products and services, identifying usage trends, determining the effectiveness of our campaigns, and operating and expanding our business activities. 4.4.1 Ordinary personal data: • Your contact details, incl. your name, email, address, and country, • How you are using our products and services, • Purchase history, interest areas and use of our digital services, • Customer support, account and product setup, user interviews, UX research, customer feedback etc. 4.4.2 Sensitive personal data: • We do not process sensitive personal data. 4.4.3 We collect your data directly from you and we will keep such data for as long as the relevant activity is ongoing and for the period after that as outlined in our data retention policy. 4.5 Statistics: We process your data to compile statistics and analytics for the use of our website and to monitor and analyse usage and trends. The data we process about you in that regard is: 4.5.1 Ordinary personal data: • When you visit our website, our servers may automatically log the standard data provided by your web browser. It includes your computer’s Internet Protocol (IP) address, your browser type and version, your user agent, the pages you visit, the time and date of your visit, the time spent on each page, and other details. • Cookie information: We use cookies and similar technologies to collect additional website usage data and to operate our services. • We receive information when you interact with our website, e.g., when you visit our website, log into your account and receive emails from us. This includes information such as your IP address, browser type, browser language, operating system, the referring web page, pages visited, location, device information etc. 4.5.2 Sensitive personal data: • We do not process sensitive data in this regard. 4.5.3 Please read our cookie policy for more information about the data processors we use, the duration of the different cookies and the purposes of the processing of your data related to statistics. You can find our cookie policy here. 4.6 Improve, optimize, or modify the experience on our website and online services: We process your data collected by your use of our website and online services and products to improve the user experience on our website and the services we offer. We use the data to operate our website, enhance the security of our website and services and its reliability and performance. We will also use the data to improve the content we show you, incl. determining what content is most helpful and how we can make the experience when visiting our website better. You can read about the cookies we use on our website here. 4.6.1 Ordinary personal data: • When you visit our website, our servers may automatically log the standard data provided by your web browser. It includes your computer’s Internet Protocol (IP) address, your browser type and version, your user agent, the pages you visit, the time and date of your visit, the time spent on each page, and other details. • Cookie information: We use cookies and similar technologies to collect additional website usage data and to operate our services. • We receive information when you interact with our services, e.g. when you visit our websites, when you sign into your account, or when you interact with email subscriptions. This includes information such as your IP address, browser type, browser language, operating system, the referring web page, pages visited, location, device information etc. 4.6.2 Sensitive data: • We do not process sensitive data. 4.6.3 We keep this data for as long as described in our cookie policy. 4.6.4 We collect your data from you and your use of cookies, our website and products. 4.7 Legal basis We process your personal data according to the following authority: • Processing is necessary for the fulfilment of a contract to which you are a party, or for the implementation of measures taken at your request prior to entering into a contract, cf. GDPR, Article 6 (1) (b). • Processing is necessary so that legal claims can be established, enforced, or defended, cf. GDPR, Article 9 (2) f. • Processing is necessary to comply with a legal obligation incumbent on Organic Basics, cf. GDPR, Article 6 (1) (c) and GDPR, Article 9 (2), (b), cf. Section 7 of the Data Protection Act. • Processing is necessary for us or a third party to pursue a legitimate interest, unless your interests or fundamental rights and freedoms precede this, cf. GDPR, Article 6 (1) (f). In these situations, the legitimate interests will often be Organic Basics’ interest in being able to take care of general administration of the (employment) relationship and document the history of the (employment) relationship. • You have given your consent to the processing of your personal data for one or more specific purposes, cf. GDPR, Article 6, (1), (a), Article 9, (2), (a), Section 8, subsection of the Data Protection Act. 3 and § 11, subsection 2, No. 2 of the Data Protection Act. 4.8 If you would like more information about our legal basis for processing your data, please feel free to contact us. 4.9 Please note that special circumstances or legal requirements may mean that such periods may be shorter or longer, depending on the purpose of complying with legal requirements for the erasure or keeping of information. 5 General data processing principles 5.1 We want to protect your personal data, and we process it in a reasonable, transparent, and secure manner. 5.2 We observe the following principles in connection with the processing of personal data: • Lawfulness: We always process your personal data lawfully, fairly and in a transparent manner in relation to you as a data subject. • Data minimisation: We limit the processing of your personal data to what is necessary and relevant in relation to the purposes for which it is processed. • Limitation of purpose: We collect your personal data only for specific, explicit, and legitimate purposes, and we do not further process it in a manner that is incompatible with these purposes. • Accuracy: We make sure that your personal data is accurate and – if necessary – updated. • Integrity and confidentiality: We use technical and organizational measures to ensure appropriate data protection, taking into account, among other things, the nature of the personal data concerned. Such measures protect against unauthorised disclosure and access, accidental or unlawful destruction, accidental loss, or alteration and against other forms of unlawful processing. • Access and rectification: We respect your rights in connection with the processing of your personal data. • Storage limitation: We store your personal data in accordance with applicable law and regulations and no longer than is necessary for the purposes for which the personal data is processed. • Protection of international transfers: We ensure adequate protection of your personal data in connection with transfers outside the EEA. • Protection in relation to third parties: We ensure that third parties are only allowed access to (and are only allowed to transfer) personal data in accordance with applicable data protection law and with adequate contractual protection. 6 Lawful use of direct marketing and cookies: 6.1 We only send advertising material to you or place cookies on your computer in accordance with applicable data protection law and other relevant legislation. 7 Risk analysis 7.1 During our case process, we must carry out the technical and organisational measures to ensure a level of security that fits the risks specifically associated with our processing of personal data. 7.2 We have carried out a risk analysis which underlies this Privacy Policy. 8 Data protection impact assessments (DPIA) 8.1 The GDPR Article 35 requires that if processing, particularly by using new technologies and considering the nature, scope, context, and pur-poses of the processing, is likely to result in a high risk to the rights and freedoms of individuals, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. 8.2 The obligation to carry out an impact assessment applies only in exceptional cases where there is a high risk involved regarding the rights and freedoms of individuals. 8.3 It is our assessment that we will rarely carry out processing that meet one of the above criteria. It must therefore be assumed that the rules on impact assessment will have a relatively limited scope in relation to our processing of your personal data. 8.4 If an impact assessment is carried out anyway, the results of the assessment will be considered when taking appropriate measures. 9 Data Protection Officer (DPO) 9.1 It is our assessment that Organic Basics does not process personal data to the above extent. We have therefore chosen not to appoint a data protection officer. 10 Data Controller 10.1 Regarding personal data about you, we will work independently, including independently assess whether there are grounds for collecting/processing personal data, what personal data is relevant and necessary, and how long personal data should be stored. In this situation, Organic Basics will therefore act as a data controller. 11 Data processors 11.1 In some cases, we use external companies to carry out the technical operation of Organic Basics’ IT systems etc. In some cases, these companies act as data processor for Organic Basics. 11.2 The data processor acts solely on our instructions and the data processor has taken the necessary technical and organizational security measures against the accidental or unlawful destruction, loss, or deterioration of personal data and against the disclosure of unauthorized persons, misrepresentations or otherwise being processed in breach of the GDPR. 11.3 In certain cases, our data processors use other data processors to process personal data for which Organic Basics is the data controller. Other data processors may be established inside and outside the EU/EEA. 12 Data Processing Agreements 12.1 If we are data controllers and have considered that a data-trading structure is available with one of our suppliers, a data processing agreement must be drawn up. 12.2 The data processing agreement shall be entered between us (the controller) and the other party (the data processor) and shall comply with the applicable requirements for data process agreements as referred to in Article 28 (3) of the GDPR. This implies drawing up a contract or other legal document binding on the data processor. It is also a requirement that the data processing agreement be in writing, including electronically. 12.3 In addition, the GDPR sets several specific requirements for the content of the data processing agreement. The agreement must include information on the status and duration of the processing, the nature and objectives of the processing, the type of personal data, categorization of data subjects and our obligations and rights as controller, as well as the duties of the data processor in relation to performing the task. The requirements are specifically described in GDPR Article 28 (3), (a)-(h). 13 Transfer of personal data to third countries 13.1 Organic Basics’ processing of personal data will predominantly take place within the EU. 13.2 If your personal data is transferred to countries outside the European Economic Area (“EEA”), we make sure that the required guarantees are provided, including: • That the transfer is within the scope of a decision on required guarantees made by the EU Commission in accordance with GDPR, Article 45. • That standard contract regulations for data protection, as approved by the EU Commission or a data protection authority in accordance with GDPR, Article 46, subsection 2 (c) or (d), are met • That the requirements for binding corporate rules as approved by a data protection authority in accordance with GDPR, Article 46, subsection 2 (b), are met. 13.3 Please see the following link: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en for further information on how the transfer of personal data outside the EEA is regulated. 13.4 For further information on how we have provided the necessary guarantees, you may contact us through the Point of Contact for Data Protection (see Section 3 “Where to address questions and enquiries”). 14 Other disclosure of personal data 14.1 Personal data may also be disclosed to: • Insurance companies • Bank payment services • Banks • Credit institutions • Accountants • External law firms • Influencers/ambassadors • Other suppliers 15 Profiling 15.1 We do not use your personal data for profiling. 16 Security measures 16.1 We have taken the necessary technical and organizational security measures to protect your personal data from accidental or unlawful destruction, loss or change as well as from unauthorized public disclo-sure, misuse or other conduct in violation of applicable law. 16.2 Access to personal data is limited to persons who have a need for access. Employees who process personal data are instructed and trained to know what to do with the personal data and how to protect it. 16.3 When documents (papers, filing data, etc.) containing personal data are thrown out, shredding or other measures are used to prevent unauthorized persons from accessing the personal data. 16.4 Passwords are used to access PCs and other electronic devices containing personal data. Only the persons who need access will have a code and then only for the systems that he or she needs to use. Persons with access codes must not leave the code to others or leave it for others to see. Check-ups on assigned codes will be carried out at least once every six months. 16.5 If personal data is stored on a USB-stick, the personal data must be protected, for example by a password and encryption. Otherwise, the USB-stick must be stored in a locked drawer or cabinet. The same applies when storing personal data on other portable data media. 16.6 PCs connected to the Internet have an updated firewall and virus control installed. 16.7 If sensitive personal data or Social Security number is sent by email over the Internet, such emails must be encrypted. If you send personal data to us by email, please be aware that this is not secure if your emails are not encrypted. We advise you to not send us confidential or sensitive personal data by email unless this is specifically agreed in advance so that we can ensure the necessary level of security. 16.8 In connection with the repair and service of data equipment containing personal data and when data media is to be sold or discarded, we take the necessary measures to ensure that the personal data cannot come to the attention of unauthorised persons. For example, by using declarations of confidence. 16.9 When using an external data processer to process personal data, a written agreement is signed between us and the data processor. This applies, for example, when an external document is used or if cloud systems are used in the processing of personal data – including communication with you. Similarly, a written agreement is always made between us and you if we act as data processors. The data processing agreements are also available electronically. 17 Backup 17.1 Organic Basics takes backup of all data bases and files on shared drives. Backup is stored on an external server. 17.2 All backup data and files are overwritten (deleted) in intervals of 30 days. 18 Retention periods and deletion 18.1 Deletion – When 18.1.1 Personal data collected in connection with your purchases is generally stored for 3 years from the last purchase. 18.1.2 Personal data included in accounting material is stored for 5 years from the end of the financial year, after which the information is deleted. 18.1.3 Documentation of your marketing authorization is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. 18.1.4 However, we may store the personal data for a longer period if required by law, or if it is necessary for a legal claim to be settled, asserted, or defended. The information can also be processed and stored longer in anonymized form 18.2 Deletion – How 18.2.1 Deletion of personal data means that personal data is irrevocably removed from all storage media on which it has been stored and that personal data cannot be restored in any way. 18.2.2 Alternatively, personal data can be completely anonymized with the effect that it can no longer be assigned to a person. In that case, the regulation of personal data does not apply at all and complete anonymization is therefore an alternative to deletion. However, it is important to bear in mind that anonymization – as an alternative to deletion – presupposes the deletion of all traces that may lead to the person to which the information relates. It is usually a very difficult practice. 18.2.3 After deletion/anonymization, we will carry out appropriate cross-checks in the form of searches by name, email address, and the specific case, etc., to ensure that nothing appears. 19 Cookies 19.1 Cookies: A cookie is a small text file that is stored on a user's computer for recordkeeping purposes. We use cookies on this site. Cookies are typically categorised as "session" cookies or "persistent" cookies. Session cookies help you navigate through the website efficiently, keeping track of your progression from page to page so that you are not asked for information you have already provided during the current visit. Session cookies are stored in temporary memory and erased when the web browser is closed. Persistent cookies, on the other hand, store user preferences for current and successive visits. They are written on your device's hard disk and are still valid when you restart your browser. We use session ID cookies; these cookies are temporary and expire once you close your browser (or once your session ends). We use preferences cookies when you are a registered user and login, these cookies allow a website to remember choices you have made in the past, like what language or currency you prefer, or your username and password so you can automatically log in. If you reject cookies, you may still use our site, but your ability to use some areas of our site, such as contests or surveys, will be limited. Some of our business partners may use cookies on their sites. We have no access to or control over these cookies. This Privacy Policy covers the use of cookies by Organic Basics only; it does not cover the use of cookies by any advertisers. You can change your choice by amending your browser settings at any time. If you disable cookies that we use, this may impact your user experience. 20 Links to Other Sites 20.1 Our website may contain links to other sites that are not owned or controlled by Organic Basics. Please be aware that Organic Basics is not responsible for the privacy practices of such sites. We encourage you to be aware when you leave our site and to read the privacy statements of each website that collects personal data. This Privacy Policy applies only to personal data collected by this website. 21 Changes to this Privacy Policy 21.1 Organic Basics may change this Privacy Policy at any time and without notice and with future effect. In the event of such changes, our users are informed on www.organicbasics.com. Our new Privacy Policy will apply hereafter when using Organic Basics’ website and with respect to Organic Basics’ services in general. 22 Contact information 22.1 If you have any questions about this Privacy Policy, our processing of personal data, rectification of your relationship with us in any other way, you may contact us at the following email address: hello@organicbasics.com and via our website www.organicbasics.com. 23 Your rights 23.1 To allow you to make informed choices about how you want us to use your personal data, we would like to ensure the greatest possible transparency. • Your personal data: You may contact us at any time through the Point of Contact for Data Protection to ascertain what personal data we have about you and where we obtained it. In some cases, you are entitled to receive the personal data we have collected about you, in a commonly used, structured and machine-readable format and disclose your personal data to a third party of your own choice. • Right to correction of errors: If you notice that your personal data is erroneous or incomplete, you may request that we correct it. • Right to limitation of processing: You have the right to request that the processing of your personal data be limited while the correctness of your personal data is being checked. • Right to objection: You also have the right to object to your personal data being used for direct marketing purposes (or, if you prefer, you may inform us how often you want to hear from us) or being disclosed to third parties for the same purpose. • Consent: You may withdraw your consent to the processing of personal data at any time by contacting the mentioned Point of Contact for Data Protection. • Deletion: You may ask us to delete your personal data (except in certain cases, e.g. for documentation of a transaction or to comply with legal requirements). • Complain: You can complain to the Danish Data Protection Agency (in Danish: “Datatilsynet”) regarding Organic Basics’ processing of your personal data: Datatilsynet Carl Jacobsens Vej 35 DK-2500 Valby E-mail: dt@datatilsynet.dk www.datatilsynet.dk
1.1 2.1 3.1 3.2 3.3 3.4 4.1 4.2 5.1 5.2 5.3 5.4 5.5 6.1 6.2 6.3 6.4 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 23.2 24.1 25.1 25.2 25.3 25.4 26.1 27.1 27.2 27.3 27.4 27.5 28.1 29.1 30.1 30.2 30.3 31.1 31.2 32.1 33.1 34.1 35.1 36.1 36.2 37.1 38.1 39.1 40.1 41.1 41.2 42.1 42.2 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 64.2 65.1 66.1 67.1 68.1 68.2 69.1 70.1 70.2 71.1 72.1 73.1 74.1 75.1 77.1 78.1 79.1 80.1 81.1 84.1 85.1
Izjava privatnosti IZJAVA O KORIŠTENJU COOKIE DATOTEKA ZA KORISNIKE Kako bi Vam osigurali što bolju korisničku uslugu, ova web stranica koristi cookie datoteke u svom radu. Cookie su male tekstualne datoteke koju naš web poslužitelj smješta na web preglednik Vašeg računala. Ponovnim dolaskom na našu web stranicu Vaš web preglednik šalje nam cookie natrag, tako da ih naš web server može prepoznati i podesiti postavke web stranice za Vaše bolje korištenje. Posjetite www.aboutcookies.org za više podataka o cookie datotekama i tome kako one utječu na doživljaj pregledavanja stranica. Posjetom našim web stranicama informacije se mogu prikupljati korištenjem cookija i upotrebom drugih tehnologija. Korištenjem ovih web stranica pristajete na upotrebu cookija uvjetima opisanim u ovoj obavijesti. Cookies koje ova web stranica koristi neophodni su za navigaciju kroz stranicu i korištenje svih njenih sadržaja. Bez cookies nije moguć pristup sadržajima kao što je prijava i pregled korisničke zone i kreiranje individualiziranog sadržaja za korisnike. Pojedini cookies prikupljaju informaciju o tome kako posjetitelji koriste stranicu, na primjer koje stranice su najposjećenije. Sve informacije koje se nalaze u cookie datotekama su anonimne i koriste se isključivo za poboljšanje funkcioniranja stranice. Cookies također pohranjuju informaciju o vašim izborima (na primjer ime, preferirani jezik ili valutu) i omogućuju pružanje sadržaja prema izboru. Na našim stranicama također koristimo aktivnosti i poveznice za djeljenje i prikazivanje sadržaja putem različitih vanjskih servisa i mreža. Ovdje se može raditi o dijeljenju sadržaja na društvenim mrežema, ili o korištenju web usluga za prikaz sadržaja unutar naše stranice, npr. prikaz slika, videa, ili anketa, te korištenje servisa za analitiku kao što je Google Analytics. Kao treća strana, ti servisi mogu doći do nekih Vaših podataka te pratiti Vašu aktivnost na Internetu. Molimo Vas da pogledate na tim stranicama uvjete korištenja te pravila o privatnosti. POLITIKA PRIVATNOSTI Vaša privatnost i sigurnost vaših osobnih podataka su nam važni, zato postupamo u skladu sa zakonskim propisima o zaštiti osobnih podataka. Opća odredba o zaštiti osobnih podataka koja je u primjeni od 25.5.2018. globalno je utjecala na osvještavanje važnosti i vođenja brige o osobnim podacima te na koji način se s njima postupa, a nama je dala povoda da svoje standarde i njihovu interpretaciju stavimo na višu razinu i predočimo ju korisniku na jednostavan i direktan način. U nastavku vas informiramo o tome u koje svrhe prikupljamo i koristimo vaše osobne podatke te kako te postupke možete nadzirati i ostvarivati svoja prava. Obradu osobnih podataka vodi: Final Forma d.o.o. Ul Fra Andrije Kačića Miošića br 7, 10360 Sesvete, Popovec e-mail: adrijan.bljakaj@zg.t-com.hr Kao korisnik naše web stranice imate pravo dobiti informacije o postupanju s vašim osobnim podacima i uputiti zahtjeve za ostvarenje vaših prava. Koje podatke o vama posjedujemo? Osobni podaci ili osobne informacije označavaju sve informacije o pojedincima prema kojima se osoba može identificirati. Možemo prikupljati različite vrste osobnih podataka o vama, uključujući: vaše opće identifikacijske podatke (ime i prezime, spol); vaše kontakt podatke (e-mail); podatke o aktivnostima/interakcijama s nama, uključujući i potencijalne buduće interakcije; demografske i interesne podatke. U koju svrhu koristimo vaše osobne podatke i zašto je to opravdano? Mi nećemo obrađivati vaše osobne podatke ukoliko nemamo odgovarajuću osnovu koju zakon u tu svrhu predviđa. Mi ćemo obrađivati vaše osobne podatke ukoliko smo od vas zaprimili prethodnu suglasnost za kontaktiranje putem e-maila ili telefona, za sastavljanje ponude te za marketinške kampanje. Kontakt obrazac i e-mail Koristimo Google Inbox kako bi obrađivali sve interne e-mailove i komunikaciju s klijentima. Kada zaprimimo vaš e-mail dobit ćemo vašu e-mail adresu, IP adresu i podatke koje ste nam naveli u kontakt formi ili poruci. Naši e-mailovi pohranjeni su na serveru na kojem su svi podaci zaštićeni ISO 27001 sustavom upravljanja. E-mail komunikaciju čuvamo u našoj bazi na neodređeni rok kako bi mogli unaprijediti naše usluge i vama pružiti odgovarajuću uslugu. Analiza posjećenosti web stranice Koristimo Google Analytics kako bi pratili posjetitelje i generirali informacije o prometu na našoj web stranici. Prilikom osnovnog prikupljanja informacija ne prikupljamo nikakve osobne podatke o vama. Ukoliko nam date pristanak za demografsko i interesno praćenje te remarketing, podaci koje Google ima o vama bit će proslijeđeni nama unutar zbirnog izvještaja o našoj stranici. Odabirom remarketinga dozvoljavate Googleu da poslužuje oglase prema vašim interesima. Više o tome možete pročitati ovdje: https://adsettings.google.com Marketinške kampanje Prilikom provođenja kampanje na društvenim mrežama ili drugim online oglasnim kampanjama, moguće je da će davatelji usluga koristiti kolačiće ili pixele na našoj stranici kako bi pratili i posluživali naše oglase na različitim platformama. Ugrađujemo dodatak za Facebook komentare kako bismo vam omogućili da komentirate našu web stranicu koristeći vaš Facebook račun. Ovaj dodatak može prikupiti vašu IP adresu, korisnički agent web preglednika, pohraniti i dohvatiti kolačiće u vašem pregledniku, ugraditi dodatno praćenje i pratiti vašu interakciju s sučeljem za komentiranje, uključujući povezivanje vašeg Facebook računa s bilo kojom radnjom koju poduzimate unutar sučelja (takav kao “LIKE” nečiji komentar, odgovaranje na druge komentare), ako ste prijavljeni na Facebook. Više informacija o tome kako se ti podaci mogu koristiti potražite na Facebookovim pravilima o privatnosti podataka: https://www.facebook.com/about/privacy/update Mi koristimo widget GooglePlus Comments na našoj web stranici kako bismo mogli komentirati na našim web stranicama pomoću vašeg GooglePlus računa. Iz ove interakcije Google automatski prikuplja i pohranjuje određene podatke u dnevnicima poslužitelja kao što su IP adresa, informacije o događajima uređaja kao što su padovi, aktivnost sustava, postavke hardvera, vrsta preglednika, jezik preglednika, datum i vrijeme vašeg zahtjeva, sukladno njihovoj privatnosti pravila: https://policies.google.com/privacy Google AdSense i Double Click Privacy Policy Facebook Privacy Policy Privacy Policy Kolačići Kolačići su nizovi informacija koje web stranice u trenutku posjeta ili prihvaćanja pohranjuju na vašem pregledniku, te koje taj preglednik dostavlja web stranici prilikom slijedećeg posjeta. Mi koristimo kolačiće kako bi pratili svoje posjetitelje, ali i servisi koji su ugrađeni u našu stranicu također koriste kolačiće. Kako bi mogli koristiti te servise potrebno je omogućiti prihvaćanje navedenih kolačića. U nastavku smo pobrojali te kolačiće uz objašnjenje za što služe: Analiza posjećenosti web stranice – Google Analytics; Marketinški kolačići za targetiranje i oglašavanje – DoubleClick by Google. S kime dijelimo vaše osobne podatke? U našem poslovanju koristimo usluge drugih fizičkih i pravnih osoba (trećih strana) – izvršitelja obrade. Razina dijeljenja vaših podataka sa svakim pojedinačno ovisi o konkretnoj svrsi obrade i vašem korištenju naše web stranice. Svi naši izvršitelji obrade posjeduju iste ili više sigurnosne norme kao i mi. Tamo gdje je to bilo potrebno te kako bi dodatno povećali razinu zaštite vaših osobnih podataka sa izvršiteljima obrade potpisali smo Sporazum o obradi podataka. Tijekom obavljanja naših aktivnosti, vašim osobnim podacima mogu pristupiti ili se mogu proslijediti slijedećim kategorijama primatelja prema načelu samo oni koji to trebaju znati: naši zaposlenici; naši ugovorni partneri; povezane organizacije. Neki od tih zaposlenika, partnera i povezanih organizacija mogu biti smještene i izvan Hrvatske ili EU, te vašim prihvaćanjem pravila privatnosti dajete suglasnost da se ti podaci prenose u te zemlje. Gore navedene treće strane su ugovorno obvezne čuvati povjerljivost i sigurnost vaših osobnih podataka, u skladu s važećim zakonom. Vašim osobnim podacima se također može pristupiti ili ih se može proslijediti bilo kojem nacionalnom i/ili međunarodnom regulatornom, izvršnom ili javnom tijelu ili sudu, gdje smo to dužni učiniti prema zakonu ili propisu ili na njihov zahtjev. Ukoliko bi se u bilo kojem trenutku stvorila potreba da vaši osobni podaci prenose na treće osobe iz razloga za koji nije prikupljen na prvom mjestu, ili naknadno dobiven vaš pristanak, omogućit ćemo vam da se izjasnite o svom izboru. Kako štitimo vaše osobne podatke? Implementirali smo odgovarajuće tehničke i organizacijske mjere kako bi pružili razinu sigurnosti i povjerljivosti vaših osobnih podataka. Naši informatički sustavi i sustavi trećih strana su tehničkim i organizacijskim mjerama zaštićeni od neovlaštenog pristupa, izmjene ili širenja vaših podataka, kao i od gubljenja ili brisanja. Naši zaposlenici su educirani za pravilno postupanje i čuvanje osobnih podataka. Koliko dugo čuvamo vaše osobne podatke? Vaši osobni podaci koje imamo pohranjene u našim evidencijama pohranit će se na period od 10 godina nakon vaše posljednje interakcije s nama, ukoliko nije drugačije naznačeno. Koja su vaša prava i kako ih možete izvršavati? Osiguravamo vam slijedeća prava: Pravo na pristup (informiranje o opsegu i vrsti) vašim podacima Prvo na ispravak (odnosi se na podatke koje ste dali) Pravo na zaborav Pravo na prigovor oko upotrebe osobnih podataka Pravo na pristup Imate pravo na informaciju o svojim osobnim podacima koje vodimo i držimo u memoriji. Ako ste zakonski skrbnik korisnika također imate pravo na informaciju o osobnim podacima osobe kojoj ste zakonski skrbnik. Pravo na ispravak Imate pravo na ispravak netočnih osobnih podataka koji se na vas odnose, što ćemo mi provesti u razumnom roku. Pravo na brisanje (pravo na zaborav) Imate pravo ishoditi anonimizaciju svojih osobnih podataka, bez nepotrebnog odgađanja, ako ne postoji zakonit razlog za daljnju obradu tih podataka s naše strane (npr. ako podaci više nisu nužni u odnosu na svrhe za koje su obrađivani). Ako takav zakonit razlog ipak postoji, o tome ćemo vas detaljno informirati u sklopu odgovora na vaš zahtjev za brisanjem. Pravo na prigovor oko upotrebe osobnih podataka Ako se obrada vaših osobnih podataka zasniva na ostvarenju naših legitimnih interesa, imate pravo u svakom trenutku uložiti prigovor na takvu obradu osobnih podataka u mjeri u kojoj se obrada odnosi na vaše podatke. U slučaju da dokažemo da postoje uvjerljivi legitimni i zakoniti razlozi za obradu koji nadilaze vaše interese, prava i slobode ili ako je to potrebno radi postavljanja, ostvarivanja ili obrane naših pravnih zahtjeva, vaš prigovor neće biti uvažen. Kako ćete biti obaviješteni o izmjenama naše Obavijesti o obradi osobnih podataka? Bilo koje buduće izmjene u obradi vaših osobnih podataka priopćit će vam se unaprijed putem zasebne obavijesti na ovoj web stranici. Ukoliko imate daljnjih pitanja u vezi obrade vaših osobnih podataka, pozivamo vas da nas kontaktirate: Final Forma d.o.o. Ul Fra Andrije Kačića Miošića br 7, Sesvete, Popovec e-mail: adrijan.bljakaj@zg.t-com.hr s naznakom: N/r Službenika za zaštitu osobnih podataka POŠALJITE UPIT PROIZVOĐAČU: KONTAKT PROIZVOĐAČA KUHINJA: Milimetar Stolarija j.d.o.o Email: info@milimetarstolarija.hr Web: www.milimetarstolarija.hr