http___www.inpharma.hr_index.php_zastita-osobnih-podataka_1.xml
1.1 2.1 3.1 3.2 4.1 5.1 6.1 6.2 7.1 7.2 7.3 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 16.2 16.3 17.1 18.1 19.1 19.2 20.1 21.1 22.1 22.2 23.1 24.1 25.1 25.2 26.1 26.2 27.1 28.1 29.1 29.2 29.3 30.1 31.1 32.1 33.1 34.1 35.1 35.2 35.3 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 44.2 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 52.2 53.1 54.1
PRIVACY POLICY This privacy policy concerns the Controller's processing (defined below) of personal data, which will be made available to the Controller by you as the other party to the agreement (hereinafter referred to as " Supplier") in connection with the negotiation, conclusion and performance of the agreement concluded with the Controller in connection with its business (hereinafter referred to as "Agreement", and the Supplier and the Controller as the " Parties"). Personal data pertain to individuals who are employees or associates of any of the Parties (or entities co-operating with any of the Parties), as well as of the Party itself (where that Party is a natural person). The Parties undertake to respect each other's obligations in relation to the protection of personal data. The Supplier undertakes to provide Natural Persons (as defined below) with the following information. PERSONAL DATA CONTROLLER The Controller of personal data is Wood spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Złota 59, 00-120 Warsaw, holding NIP 5252531018 and REGON 146116258, entered into the Register of Entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, 12 th Commercial Division of the National Court Register, under number KRS 0000424741, with the share capital of PLN 5 000,00 (hereinafter referred to as the "Controller"). Contact details of the Controller: Wood spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw - Centrum Handlowe Wroclavia, ul. Sucha 1, 50-086 Wrocław, e-mail address: recepcja.WROCLAVIA@urw.com. The Controller has not appointed a Data Protection Officer. SCOPE OF PERSONAL DATA PROCESSING In view of the need to comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR"), the Controller hereby informs: (i) the Supplier (if is a natural person); (ii) natural persons who are employees (associates) of the Supplier and whose personal data has been provided to the Controller (by the Supplier or directly by such persons) in connection with the negotiation, conclusion or performance of the Agreement (the "Natural Persons"). about the rules of processing of their personal data and their rights. The Controller processes personal data including: name, surname, company, position, telephone number, e-mail address, other information related to employment, if it is necessary for the performance of the Agreement, as well as other related data resulting from the Agreement (hereinafter referred to as the "Personal Data"). In order to ensure that only actual and current data are processed, the Controller may regularly update the data also from public sources (mainly the Central Registration and Information on Business, the National Court Register, the Supplier's website). PURPOSE, SCOPE AND LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA The Controller processes the Supplier's personal data in order to take actions aimed at concluding the Agreement with the Supplier and to perform the Agreement (Article 6(1)(b) of the GDPR). On the other hand, in the case of Natural Persons, the Controller processes the personal data of such persons in order to conclude the Agreement with the Supplier and to execute it, i.e. in the Controller's legitimate interest (Article 6(1)(f) of the GDPR). Additionally, the Controller processes the above-mentioned personal data due to the pursuit of other legitimate interests of the Controller as indicated below, in particular: - to contact the Supplier or a Natural Person; - where it is done for purposes related to the conduct of litigation, as well as proceedings before public authorities; - for reporting within the Controller’s group (i.e. Unibail-Rodamco-Westfield); - in order to optimise the terms of Controller's co-operation with third parties. In other cases, the Controller may process personal data of the Supplier and the Natural Persons on the basis of previously granted consents, within the scope and for the purpose specified in the content of such consent. To the extent that the Supplier's or the Natural Persons' personal data are obtained directly from them, providing personal data may be a condition of performance of the Agreement between the Controller and Supplier or is necessary for the attaining objectives resulting from the Controller's legitimate interests. The Supplier's or the Natural Person's failure to provide the required personal data may constitute an obstacle or impediment to the conclusion or performance of the Agreement. The personal data of the Supplier and the Natural Persons will not be used for profiling or automated decision making. CATEGORIES OF RECIPIENTS OF PERSONAL DATA Personal data of the Supplier and Natural Persons may be disclosed to the following categories of recipients: (i) public authorities and entities performing public tasks or acting on behalf of public authorities within the scope of their statutory competence; (ii) entities co-operating with the Controller in the performance of the Agreement; (iii) entities of the Unibail-Rodamco-Westfield group, in particular: Unibail-Rodamco Polska spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Złota 59, 00-120 Warszawa, holding NIP 526262678510 and REGON 015337972, entered in the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000153593, with the share capital in the amount of PLN 3,066,047,000.00. The Controller does not intend to transfer Personal Data outside the territory of the European Union, however, in justified cases, it may transfer personal data of the Supplier and the Natural Persons to entities located outside the European Economic Area (the "EEA"). In the event of such transfers outside the EEA, the Controller shall include model clauses adopted by the European Commission to ensure an adequate level of protection of personal data when accessing and processing data, or use other authorised methods of processing personal data outside the EEA, such as binding corporate rules or the EU-US Privacy Shield agreement. The Controller has concluded appropriate agreements with the recipients mentioned above regulating the rules of personal data processing, ensuring the same level of protection of the processed Personal Data as provided under this privacy policy. DATA SECURITY We have adopted and follow necessary and appropriate technical and organisational measures, internal control measures and data security processes in accordance with best market practice, adequate to the potential risks for you as the data subject. At the same time, we take into account the state of technological development in order to protect your Personal Data against accidental loss, destruction, modification, unauthorized disclosure or access. These measures may include taking appropriate steps to ensure the liability of employees who have access to Personal Data, training of employees, making regular back-up copies, data recovery and accident management processes, software protection of the equipment in which Personal Data are stored, etc. DURATION OF THE PROCESSING OF PERSONAL DATA Personal data of the Supplier and the Natural Persons shall be processed for the period necessary for the performance of the Agreement, i.e. for the duration of its term, and thereafter for the period necessary to secure the possibility of asserting potential claims, i.e. not longer than 3 years, and to the extent required by law or to fulfil the Controller's legitimate interest. RIGHTS OF THE DATA SUBJECTS You have the right to demand that the Controller rectify inaccurate Personal Data or supplement incomplete Personal Data, the right to request processing restrictions, the right to object or lodge a complaint against the processing of Personal Data, the right to transfer Personal Data, the right to request access to Personal Data, the right to information about breaches of the protection of Personal Data, the right to request the removal of Personal Data and other rights granted under the applicable laws. Data subjects can exercise their rights by contacting us by e-mail at the address: recepcja.WROCLAVIA@urw.com. If you exercise your rights, we may ask you to provide additional personal data that you have already given to us. The provision of such data is necessary to verify that the request was actually made by a person authorised to do so. The Controller shall reply within one month from the date of receipt of the request but reserves the right to extend this period by an additional two months in particularly complex cases. Your rights: a) Rectification of Personal Data Pursuant to applicable law, you have the right to obtain rectification of factually inaccurate or completion of incomplete Personal Data that have been provided to us. The Controller takes appropriate measures to enable you to ensure that your Personal Data is up to date and that it is in accordance with the facts. b) Deletion of personal data You can request the deletion of your Personal Data at any time. In case of receiving such a request from you, the Controller will immediately delete all of your Personal Data in its possession, unless there is a need for further storage of your Personal Data in order to perform contractual or statutory obligations or to ensure the protection of the Controller's legitimate interests to the extent indicated above. c) Access to and portability of personal data You have the right to receive information about whether or not your Personal Data are processed by the Controller and to what extent their processing takes place. At the same time, you have the right to request access to your Personal Data, which has been made available to the Controller by you, as well as other personal data concerning you. If you request the transfer of your Personal Data processed in connection with the performance of the Agreement, you may request its transfer directly to a third party (another data controller) indicated in your request, provided that such request does not adversely affect the rights and freedoms of other persons and is technically feasible. d) Right to object Where your Personal Data is processed on the basis of a legitimate interest, you have the right at any time to object to such processing on grounds relating to your specific situation. If, in such case, the Controller does not prove serious and legitimate grounds for processing, overriding your interests, rights or freedoms, or if the Controller does not prove that these data are necessary to determine, exercise or defend your rights, we will no longer process such data and delete them. e) Restriction of processing If you demand that the processing of your personal data be restricted, e.g. if the correctness or lawfulness of the processing of your personal data is questioned, the Controller will limit the processing of your personal data to the necessary minimum (storage), and will process them only to assert, exercise or defend the rights, or to ensure the protection of the rights of another natural person or legal entity, or for other reasons expressly provided for in the applicable legal regulations. f) Complaints to the data protection authority You have the right to lodge a complaint concerning the processing of Personal Data by the Controller with the President of the Personal Data Protection Office at the address: ul. Stawki 2, 00-193 Warszawa, or via electronic inbox available on the website: https://uodo.gov.pl/pl/p/kontakt This document may be reviewed or updated from time to time. Last amended on 30 November 2018.
1.1 2.1 3.1 4.1 4.2 5.1 6.1 6.2 6.3 7.1 8.1 8.2 9.1 10.1 10.2 10.3 11.1 11.2 12.1 13.1 14.1 14.2 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1
ZAŠTITA OSOBNIH PODATAKA Ova Izjava o zaštiti osobnih podataka za društvo Kreativna kancelarija d.o.o., Bartolići 19, 10000 Zagreb, OIB: 66474227215, napravljena je u skladu s Općom Uredbom (EU) broj 2016/679 Europskog parlamenta i vijeća od 27.04. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka, te o stavljanju izvan snage Direktive 95/46/EZ (Opća uredba o zaštiti podataka) koja se primjenjuje od 25. svibnja 2018. godine kao i Zakonom o provedbi Opće uredbe o zaštiti podataka (NN 42/2018). Opći podaci Za obradu podataka odgovorna je Kreativna kancelarija d.o.o., Bartolići 19, 10000 Zagreb, OIB: 66474227215. Sve informacije u vezi obrade i korištenja osobnih podataka mogu se dobiti putem: telefona 01/38 32 681, e-maila: info@inpharma.hr, te adrese: Bartolići 19, 10000 Zagreb. Vrste osobnih podataka koji se obrađuju Kreativna kancelarija d.o.o. razumije da vam je Vaša privatnost važna. Poštujemo ju i zato štitimo Vaše osobne podatke. To može uključivati svaku informaciju koja može dovesti do vas kao pojedinca. Obrađujemo Vaše osobne podatke koje ste nam povjerili putem prijava sudjelovanja na stručnim skupovima, tijekom sudjelovanja na stručnim skupovima, newslettera, nagradnih natječaja i igara, postavljanjem upita o našim proizvodima i uslugama te vaših privola. Osobni podaci koji se prikupljaju temeljem prijava sudjelovanja ili sudjelovanjem na stručnim skupovima, temeljem prijave na newsletter su npr. ime i prezime, zvanje, naziv ljekarne/tvrtke u kojoj ste zaposleni, adresa, e-mail adresa, broj mobitela/ telefona i dr. sukladno Prijavnici i Općim uvjetima sudjelovanja. Osobni podaci koji se mogu prikupljati u svrhu kontaktiranja radi pružanja informacija o novim proizvodima i uslugama, ovisno o vašoj privoli su: ime i prezime, zvanje, naziv ljekarne/tvrtke u kojoj ste zaposleni, adresa, grad i poštanski broj, e-mail, broj telefona, broj mobitela. Svrha, način obrade i čuvanje osobnih podataka Svi osobni podaci koriste se isključivo u svrhe radi koje su prikupljeni i za koje je dana privola. Prikupljeni podaci neće se ni na koji način učiniti dostupnim trećim osobama, osim u zakonom propisanu svrhu. Svi podaci brišu se prestankom svrhe u koju su prikupljeni, odnosno prestankom ugovornog odnosa, a najkasnije po isteku svih zakonskih obveza povezanih s čuvanjem osobnih podataka, osim u slučaju ako je uložen prigovor na uslugu u roku sve do konačnog dovršetka postupaka po prigovoru u skladu s važećim propisima. Moguće je da se umjesto brisanja podaci anonimiziraju. U tom se slučaju trajno miču svi podaci povezani s osobom. U slučaju vašeg odobrenja, a radi pružanja informacija o novim uslugama u kontakt s vama stupamo elektroničkom poštom. Upravljanje privolama za obradu osobnih podataka Privolu za korištenje vaših osobnih podataka radi pružanja informacija o novim proizvodima i uslugama te prijavu na newsletter možete opozvati u bilo kojem trenutku. Ako ponovno želite dati svoju privolu, to možete učiniti na isti način kao i kod opoziva. Promjenu privole (potpuni ili djelomični opoziv, odnosno ponovno davanje privole) možete izvršiti tako da nam se obratite e-mailom na: info@inpharma.hr ili poštom na adresu: Kreativna kancelarija d.o.o., Bartolići 19, 10000 Zagreb. Ako opozovete dane privole, vaše podatke više nećemo upotrebljavati u navedene svrhe. Prava korisnika Korisnik u svako doba ima slijedeća prava: - pravo na informaciju o obradi osobnih podataka; - pravo na povlačenje privole na obradu osobnih podataka, čime će prestati obrada osobnih podataka; - pravo na ispravak u slučaju da se obrađuju osobni podaci koji su nepotpuni ili netočni; - pravo na brisanje u slučajevima kao što su prestanak svrhe obrade, povlačenje privole u slučaju podnošenja prigovora na obradu podataka, odnosno u slučajevima obrade osobnih podataka protivno propisima o zaštiti osobnih podataka; - pravo na ograničenje obrade u slučajevima kada je osporena točnost podataka tijekom razdoblja provjere točnosti tih podataka, ako je obrada podataka bila protupravna, ali je odbijeno brisanje i umjesto toga zatraženo ograničenje korištenja podacima, ako podaci više nisu potrebni za predviđene svrhe, ali su još potrebni radi ostvarenja pravnih zahtjeva ili ako je podnesen prigovor zbog distribucije tih podataka; - pravo na prijenos podataka drugom voditelju obrade podataka kada je to tehnički izvedivo; - pravo na podnošenje prigovora u vezi obrade osobnih podataka društvu Kreativna kancelarija d.o.o. ili Agenciji za zaštitu osobnih podataka ako se obrada vrši radi izvršenja zadaća od javnog interesa, radi izvršavanja javnih ovlasti ili se društvo Kreativna kancelarija d.o.o. prilikom obrade podataka poziva na svoje legitimne interese. Ako želite ostvariti neko od navedenih prava, možete nas kontaktirati na gore navedene podatke za kontakt. Pravo na prigovor Agenciji za zaštitu osobnih podataka Ako imate prigovor glede načina na koji koristimo Vaše podatke, možete kontaktirati Agenciju za zaštitu osobnih podataka putem internetske stranice agencije www.azop.hr ili pisanim putem na adresu: Agencija za zaštitu osobnih podataka, Martićeva ulica 14, 10000 Zagreb. Datum posljednjeg ažuriranja ove Izjave: 23.5.2018.