http___www.juso-sibenik.hr_zastita-osobnih-podataka_1.xml
1.1 2.1 3.1 4.1 4.2 4.3 4.4 4.5 5.1 6.1 6.2 7.1 8.1 9.1 10.1 11.1 12.1 12.2 13.1 14.1 15.1 15.2 15.3 15.4 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 28.2 28.3
By Christie Ogubere General Data Protection Regulation (GDPR) What it’s all about? The countdown has begun here a brief overview. The new GDPR is meant to protect all EU citizens their privacy and data. The new General Data Protection Regulation (GDPR) will come into force on 25th May 2018. In the data driven world that organisations operate this has been a crucial change superseding the UK Data Protection Act 1998. The major changes are how they affect organisations and their operations. When the GDPR takes effect it will replace the data protection directive (officially Directive 95/46/EC) General Data Protection Regulation (“GDPR”), the Article 29 Working Party (“A29WP”) Who does the GDPR apply to? The GDPR applies to ‘controllers’ and ‘processors’ in all types of organisations. The definitions are broadly the same as under the DPA – the controller states how and why personal data is processed and the processor acts on the controller’s behalf When does the right to data portability apply? The right to data portability only applies: - Personal data an individual has provided to a controller; - Where the processing is based on the individual’s consent or for the performance of a contract; and when processing is carried out by automated means. Consent Valid consent must be explicit for data collected and purposes data used (Article 7; defined in Article 4). Consent for children must be given by child’s parent or custodian, and verifiable (Article 8). Data controllers must be able to prove “consent” (opt-in) and consent may be withdrawn Data Controller Majority of the change applies to data controllers. Organisations enforced by the data controller must designate a Data Protection Officer. The data controller has the responsibilities of processing and monitoring of data subjects. We are talking about automated data here. Who is the data controller? A data controller is the individual or the legal person who controls and is responsible for the keeping and use of personal information on computer or in structured manual files Data Subject Article 10 Member States shall provide that the controller or his representative must provide a data subject from whom data relating to himself are collected with at least the following information, except where he already has it: (a) The identity of the controller and of his representative, if any, (b) the purposes of the processing for which the data are intended, (c) any further information such as - the recipients or categories of recipients of the data; - whether replies to the questions are obligatory or voluntary, as well as the possible consequences of failure to reply; - the existence of the right of access to and the right to rectify the data concerning him insofar as such further information is necessary, having regard to the specific circumstances in which the data are collected, to guarantee fair processing in respect of the data subject. Penalties The new GDPR penalties states that organisations that are breached can be fined can be fined up to 4% of annual global turnover or €20 Million (whichever is greater). The GDPR will apply in the UK from 25 May 2018. The government has confirmed that the UK’s decision to leave the EU will not affect the commencement of the GDPR.
1.1 1.2 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 12.2 13.1
Javna ustanova "Športski objekti Šibenik" je voditelj ili izvršitelj obrade osobnih podataka ispitanika kako je definirano Općom uredbom o zaštiti podataka (tzv. GDPR) te je uskladila svoje poslovanje sa zahtjevima koje propisuje Opća uredba o zaštiti podataka i Zakon o provedbi Opće uredbe o zaštiti podataka (Nar. novine, br. 42/18). Kako bismo zaštitili prava osoba čije podatke obrađujemo (ispitanici), provodimo odgovarajuće mjere zaštite osobnih podataka s ciljem osiguranja sigurnosti i povjerljivosti obrade osobnih podataka odnosno sprječavanja neovlaštenog pristupa ili neovlaštenog raspolaganja osobnim podacima kao i tehničkoj opremi kojom se koristimo, a obrađujemo samo one osobne podatke koji su nužni za svrhu obrade. Prava ispitanika: - pravo na informiranost (ispitanik ima pravo primati jasne, transparentne i lako razumljive informacije o tome kako se upotrebljavaju njegovi osobni podaci) - pravo pristupa (ispitanik ima pravo dobiti potvrdu obrađuje li voditelj obrade njegove osobne podatke te ima pravo na pristup tim podacima) - pravo na ispravak (ispitanik ima pravo zatražiti ispravljanje osobnih podataka ako su neispravni ili nevažeći i/ili njihovo dopunjavanje ako su nepotpuni) - pravo na brisanje / pravo na zaborav (ispitanik u određenim slučajevima ima pravo zatražiti brisanje ili uklanjanje osobnih podataka s time da se ne radi o apsolutnom pravu jer voditelj obrade može imati pravne ili legitimne osnove za zadržavanje i daljnju obradu osobnih podataka) - pravo na prigovor (prigovor se može podnijeti izravno ustanovi ili Agenciji za zaštitu osobnih podataka) - pravo na povlačenje suglasnosti (privole) na obradu podataka temeljenu na suglasnosti (privolu) u bilo kojem trenutku - pravo ograničenja obrade osobnih podataka - pravo na prenosivost podataka (ispitanik ima pravo zaprimiti, kopirati ili prenositi podatke iz baze Ustanove u bazu podataka drugog Voditelja obrade, ali samo pod uvjetom da se radi o podacima koji se obrađuju temeljem privole ili ugovora i ako se obrada provodi automatiziranim putem.) Ispitanici čije osobne podatke obrađujemo mogu se zahtjevom (obrazac) obratiti službeniku za zaštitu podataka ustanove Upravljanje sportskim objektima radi ostvarivanja prethodno navedenih prava putem e-mail adrese Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite. ili na adresu Javna ustanova "Športski objekti Šibenik" Miminac 15, 22000 Šibenik