http___www.jadranska-banka.hr_ZastitaPrivatnosti.aspx_1.xml
1.1 2.1 3.1 4.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 26.2 26.3 26.4 26.5 26.6 26.7 27.1 28.1 28.2 28.3 28.4 28.5 29.1 30.1 30.2 30.3 30.4 31.1 32.1 32.2 32.3 32.4 33.1 34.1 35.1 35.2 35.3 35.4 35.5 35.6 35.7 35.8 36.1 37.1 37.2 37.3 37.4 37.5 37.6 37.7 37.8 37.9 37.10 37.11 37.12 37.13 37.14 38.1 39.1 39.2 40.1 41.1 41.2 42.1 43.1 44.1 45.1 45.2 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 53.2 53.3 54.1 54.2 55.1 56.1 57.1 58.1 58.2 59.1 60.1 60.2 60.3 60.4 60.5 61.1 61.2 61.3 62.1 63.1 64.1 64.2 65.1 65.2 66.1 67.1 68.1 69.1 69.2 69.3 69.4 69.5 70.1 70.2 70.3 71.1 72.1 73.1 74.1 75.1 76.1 77.1 77.2 78.1 78.2 79.1 80.1 80.2 81.1 82.1 82.2 83.1 83.2 83.3 83.4 83.5 83.6 83.7 84.1 85.1 85.2 85.3 86.1 87.1 87.2 87.3 87.4 88.1 89.1 89.2 90.1 91.1 91.2 92.1 93.1 94.1 95.1 96.1 97.1 98.1 98.2 98.3 98.4 98.5 98.6 99.1 100.1 100.2 100.3 100.4 101.1 101.2 101.3 102.1
Responsible in the sense of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is: OPTIMARE Systems GmbH Fischkai 1 27572 Bremerhaven E-Mail: info(at)optimare.de The data protection officer of Optimare Systems GmbH is: Mr. Ingo Wolff tacticx GmbH Walbecker Straße 53 47608 Geldern E-mail datenschutz(at)optimare.de The distinction between female and male person names has been deliberately omitted for reasons of better readability. General Information about data processing Processing of personal data and their purpose OPTIMARE Systems GmbH (hereinafter referred to as ‘Optimare’ or ‘we’) processes personal data of users only to the extent that this is necessary to provide a functional website and our content and services. When visiting our websites, the following data is processed: · IP address of the user · used browser (type, version, language) · used operating system · Internet service provider of the user · Date and time of access to our website · Files retrieved on our website · Website from which the user came to our website · Website that the user accesses through our website The processing and temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must be stored for the duration of the session. The log files contain IP addresses or other data that enables a mapping of the user. Storage is done in log files to ensure the functionality of the websites. Moreover, the data are used to optimize our website and to ensure the security of our information technology systems. Any processing of personal data is solely done for these purposes and to the extent necessary to achieve these purposes. Any use of this data for purposes of advertising, customer service and market research does not take place. Legal basis for the processing of personal data The processing of personal data of our users is carried out regularly by the user's permission. An exception applies in cases where prior obtaining of consent for factual reasons is not possible and processing of data is permitted by applicable law. The storage of data and logfiles is based on Article 6 para. 1 lit. f GDPR. Data deletion and storage duration The personal data of the individuals concerned will be deleted or blocked as soon as the purpose of storage omitted from us. In case of data processing to provide the websites, deletion occurs when the current session ends. In the case of storage of personal data in log files, the deletion will take place by no later than fourteen days. Any further storage is possible if previously the IP addresses of users are deleted or distorted, so that an assignment of the calling client is no longer possible. Cookies On our websites we use cookies in several places. If a user accesses one of our websites, a cookie can be stored on the user's operating system. A cookie contains a characteristic string that allows a clear identification of the browser when revisiting our web pages. The following data is stored and transmitted in the cookies: • Language settings • log-in information The purpose of using cookies is a user-friendly design of our websites. The processing of personal data using cookies is based on Article 6 para. 1 lit. f GDPR. Cookies are stored on the user's computer and transmitted from there to our websites. Users may disable or restrict the transmission of cookies by changing the settings of their Internet browser. Already saved cookies can be deleted at any time. If cookies are disabled for our websites, it may not be possible to use all functions of our websites to the full extend. E-mail contact Users can contact us via the provided e-mail addresses. In this case, the personal data of the user transmitted by e-mail will be stored by us. The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR. If the establishment of contact aims at concluding a contract, Art. 6 para. 1 lit. b GDPR forms the legal basis. The data will be used exclusively to process the contact and the subsequent communication. In this context, there is no disclosure of the data to third parties. The personal data sent by e-mail will be deleted when the respective communication with the user has ended, i.e. as soon as it can be deduced from the circumstances that the facts are finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of fourteen days. Open Street Maps Our websites use Open Street Maps to visually display geographic information. For more information about, see https://wiki.osmfoundation.org/wiki/Privacy_Policy. Security Measures Optimare uses technical and organizational security measures to protect the personal data of users against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. Rights of the person concerned If Optimare processes your personal data, you are a person affected pursuant to Article 4 No. 1 GDPR with the following rights towards Optimare. Right to information You may request confirmation from us pursuant to Article 15 GDPR if personal data concerning you are processed by us. If we process your personal data, you can request from us information about the following details: • the processing purposes; • the categories of your personal information processed by us; • the recipients or categories of recipients to whom we have disclosed or will disclose your personal data; • (if possible) the planned duration for which we store your personal information or, if this is not possible, the criteria for determining the duration of storage; • the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing • the existence of a right of appeal to a supervisory authority; • all available information about the origin of the data, if the personal data was not collected from you; • the existence of automated decision-making including profiling (Article 22 para. 1 and para. 4 of the GDPR) and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on you. You have the right to request information about whether your personal information are submitted to a third country or an international organization. In this connection, you can request appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission of information. Right to rectification According to Article 16 GDPR you have the right to demand the correction and / or completion of incorrect personal data concerning you. Right to deletion According to Article 17 GDPR you can demand that your personal data will be deleted immediately. We are obliged to delete your data immediately if one of the following applies: • Your personal information is no longer necessary for the purposes for which it was collected or otherwise processed. • You revoke your consent to the processing in accordance with Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR and there is no other legal basis for processing. • In accordance with Article 21 para. 1 GDPR, you object to the processing and there are no priority legitimate reasons for the processing, or you object to the processing in accordance with Article 21 para. 2 GDPR. • Your personal data has been processed unlawfully. • The deletion of your personal data is required to fulfill a legal obligation under Union or national law to which we are subject. • Your personal data were collected in relation to information society services offered pursuant to Article 8 para. 1 GDPR. If we have made your personal data public and we are obliged to delete them pursuant to Article 17 para. 1 of the GDPR, we shall take appropriate measures, including technical ones taking into account available technology and implementation costs, to inform data controllers, who process the personal data that you as the respective subject have requested from them the deletion of all links to your personal data or of copies or replications of your personal data. The right to deletion does not exist if the processing is necessary • to exercise the right to freedom of expression and information; • to fulfill a legal obligation to which we are subject to or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to us; • for reasons of public interest in the field of public health (Article 9 para. 2 lit. h and lit. i and Article 9 para. 3 of the GDPR); • for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 para. 1 of the GDPR, in so far as that law is likely to render impossible or seriously affect the achievement of the objectives of that processing, or • to assert, exercise or defend legal claims. Right to restriction of processing According to Article 18 GDPR you can request the restriction of the processing of your personal data under the following conditions: • if you deny the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information; • if the processing is unlawful and you refuse to delete the personal data and you request the restricted use of personal data instead; • if we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or • if you have objected to the processing pursuant to Article 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons. If the processing of your personal data has been restricted, your data may be stored only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or important public interest of the Union or a Member State. If the limitation of the processing according to the above stated conditions are restricted, you will be informed by us before the restriction is rescinded. Right to information about recipients If you have asserted the right of rectification, deletion or limitation of the processing against us, we are obliged, according to Article 19 GDPR, to communicate this fact to all recipients to whom your personal data have been disclosed by us, unless this proves is to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients. Right to data portability According to Article 20 GDPR you have the right to receive your personal data provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person responsible without hindrance by us, provided that • processing is based upon consent (Article 6 para. 1 lit. a of the GDPR or Article 9 para. 2 lit. a of the GDPR) or on a contract in accordance with Article 6 para. 1 lit. b GDPR and • the processing is done using automated procedures. In exercising this right, you also have the right to obtain that your personal data be transmitted directly by us to another person responsible, as far as this is technically feasible. Freedom and rights of other persons may not be affected in this respect. The right of data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us. Right of objection In accordance with Article 21 GDPR, you have the right to objet at any time, for reasons arising from your particular situation, against the processing of your personal data, which is based on Article 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will not process your personal data subsequently unless we can demonstrate compelling legitimate reasons for our processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims. Right to revoke the data protection consent declaration You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing, which took place based on the consent until the revocation. Automated decision on an individual case including profiling According to Article 22 GDPR you have the right not to be subject to a decision based solely on automated processing - including profiling - which has a legal effect on you or, in a similar manner, significantly affects you. This does not apply if the decision • is required for the conclusion or performance of a contract between you and us, • is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or • with your express consent. Right to complain to a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data carried out by us violates the GDPR. Responsibility for content and information Our websites contain links to internet offers of external providers. The contents of the Internet offers of external providers were checked when setting the link by us, whether they violate civil or criminal law against applicable law. However, it cannot be ruled out that the respective providers will change this content afterwards. If you believe that linked external sites infringe applicable law or have any other inappropriate content, please let us know. We will review your notice and remove the external link if necessary. Optimare is not responsible for the content and availability of the linked external websites. Inclusion and validity of the Privacy Policy By using our website, you consent to the data processing described above. This Privacy Policy applies only to the content of Optimare. The linked external content is governed by other privacy and data security regulations. If you are responsible for these offers, you will find out in the respective imprint. Due to the further development of our websites or the implementation of new technologies, it may be necessary to change this Privacy Policy. We therefore reserve the right to change the Privacy Policy at any time with future effect. The version available at the time of your website visit is always valid. As of Mai 2018
1.1 1.2 2.1 2.2 2.3 2.4 2.5 3.1 4.1 5.1 6.1 6.2 7.1 7.2 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 37.1 39.1 40.1 42.1 43.1 44.1
Izjava o zaštiti privatnosti za klijente Jadranske banke d.d. Šibenik Jadranska banka d.d. Šibenik, Ante Starčevića 4, OIB: 02899494784 (dalje: Banka) poštuje vašu privatnost i sigurnost vaših osobnih podataka. U prikupljanju i obradi Vaših podataka vodimo se načelom transparentnosti i sigurnosti. Na web stranici Banke i u svakoj poslovnici nalazi se Politika zaštite osobnih podataka kojom se definiraju osnovna načela i pravila zaštite osobnih podataka u skladu s Općom uredbom o zaštiti osobnih podataka1. Ova Izjava o privatnosti primjenjuje se od 25. svibnja 2018. godine. Pažljivo pročitajte ovaj dokument kako biste razumjeli kako Banka koristi i štiti Vaše osobne podatke. Podaci koje Banka prikuplja i obrađuje Ova Izjava o privatnosti odnosi se na sve osobne podatke koje je Banka zaprimila od klijenta ili ovlaštene treće osobe, a to su identifikacijski podatci (ime i prezime, identifikacijski broj, datum rođenja, broj osobne iskaznice i naziv izdavatelja identifikacijske isprave, broj putovnice, broj računa, mrežne adrese računalne opreme koju koristi, državljanstvo, adresa, e-mail adresa, broj telefona/mobitela, video zapis, kopija osobne iskaznice), podatci o zaposlenju (vrsta zaposlenja, vrsta poslodavca, pozicija zaposlenja), ekonomski podatci (primici, prometi i stanja računa, podaci o nalozima, kreditne obveze i upisani tereti, transakcijski podaci, izvori prihoda/novčanih sredstava, broj zaposlenih članova kućanstva, način stanovanja) te ostali podatci. Banka može prikupljati gore navedene osobne podatke izravno od Vas ili od trećih strana. Ukoliko se podaci prikupljaju od treće strane, Banka će iste prikupljati temeljem legitimnog interesa. Banka može poduzimati radnje vezane za obradu osobnih podataka sukladno Općoj uredbi o zaštiti osobnih podataka. Navedeno obuhvaća pravo Banke da koristi, prikuplja, sprema, organizira, umnožava, snima i vrši uvid u osobne podatke u svrhu redovitog poslovanja Banke. Osobne podatke koje Banka obrađuje djelomično automatiziranim postupcima s ciljem procjene određenih osobnih aspekata (izrada profila) i to u slijedećim slučajevima: - procjena rizika pranja novca i financiranja terorizma na temelju regulatornih zahtjeva, - procjena kreditne sposobnosti klijenta kojom se procjenjuje vjerojatnost ispunjavanja ugovornih obveza. Svrha obrade podataka Osobni podaci koje Banka prikuplja od klijenta bit će potrebni za različite vrste obrada koje su nužne zbog - izvršavanja ugovora u kojem je ispitanik klijent ili kako bi se poduzele radnje na zahtjev ispitanika prije sklapanja ugovora (npr. ugovora o otvaranju tekućeg računa), - poštivanja pravnih obveza Banke kao voditelja obrade (Zakon o kreditnim institucijama, Zakon o sprječavanju pranja novca i financiranja terorizma, Zakon o platnom prometu itd.), - izvršavanje zadaće od javnog interesa ili pri izvršavanju službene ovlasti Banke (dostava osobnih podataka Hrvatskoj narodnoj banci, Poreznoj upravi i dr.), - legitimnog interesa Banke ili treće strane (sudski sporovi, osiguravanje informacijske sigurnosti, upravljanje rizicima i sl.). Mjere zaštite osobnih podataka Banka provodi odgovarajuće tehničke i organizacijske mjere za omogućavanje učinkovite primjene načela zaštite podataka kao što je smanjenje količine podataka, te primjene tehničkih i organizacijskih mjera zaštite informacijskog sustava da bi se osigurala zaštita podataka od slučajnog gubitka ili uništenja, od nedopuštenog pristupa ili nedopuštene promjene, nedopuštenog objavljivanja i svake druge zloupotrebe. Prava pristupa vašim osobnih podacima Pristup Vašim osobnim podacima imaju samo ovlašteni zaposlenici Banke i to prema propisanom poslovnom procesu, te društva s kojima Banka ima potpisan ugovor o poslovnoj suradnji vezano izdavanje bankovne kartice, procesiranje kartičnih transakcija, pružanja platnih usluga itd. Razdoblje čuvanja osobnih podataka klijenata Banka osobne podatke klijenta koristiti u redovnim obradama, a čuva ih dok su potrebni za izvršenje ugovornih i zakonskih obveza sukladno Pravilniku o čuvanju i zaštiti arhivskog i registraturnog gradiva. Primatelji ili kategorije primatelja osobnih podataka klijenata Banka osobne podatke klijenata dostavlja javnim tijelima i to Hrvatskoj narodnoj banci, Ministarstvu financija, ostalim primateljima određenih osobnih podataka (ovisno o poslovnom procesu) koji su registrirani za obavljanje djelatnosti ispunjenja svrhe obrade i koji ispunjavaju odgovarajuću razinu zaštite osobnih podataka FINA, opunomoćeni odvjetnički uredi i druga društva s kojima Banka ima potpisan ugovor o poslovnoj suradnji vezano za izvršavanje poslovnih procesa, kao i novom vlasniku u procesu preuzimanja Banke. Osobni podaci klijenta-platitelja i primatelja dostavljaju se trećim zemljama ovisno o zemlji primatelja plaćanja. Prava ispitanika U svrhu ostvarenja svojih prava na osobne podatke od Banke kao voditelja obrade imate pravo zatražiti: - Pravo pristupa podacima - u bilo kojem trenutku klijent može pristupiti svojim osobnim podacima kako bi bio upoznat i mogao provjeriti zakonitost obrade, a informacije će mu se dostaviti bez odlaganja i najkasnije u roku od mjesec dana od primitka zahtjeva. - Pravo na ispravak – klijent ima pravo na ispravljanje osobnih podataka ako su netočni ili nepotpuni. - Pravo na brisanje – klijent može zatražiti brisanje ili uklanjanje osobnih podataka ako ne postoji opravdan razlog za njihovu daljnju obradu odnosno ako su ispunjene pretpostavke iz čl. 17. Opće uredbe o zaštiti osobnih podataka, a ne postoji zakonska osnova ili legitimni interes koji bi omogućio Banci obradu takvih osobnih podataka. - Pravo na ograničavanje obrade – klijent ima pravo tražiti ograničenje obrade ukoliko osporava točnost osobnih podataka ili smatra da je obrada nezakonita, te se protivi brisanju osobnih podataka i umjesto toga traži ograničenje njihove uporabe. - Pravo na prijenos podataka – klijent ima pravo zaprimiti osobne podatke koji se odnose na njega, te ih ima pravo prenijeti drugom voditelju obrade ako su ispunjeni uvjeti iz čl. 20. Opće uredbe o zaštiti osobnih podataka. - Pravo na prigovor – klijent ima pravo uložiti prigovor na obradu osobnih podataka voditelju obrade ili/i Nadzornom tijelu. Svoja prava možete ostvariti u bilo kojem trenutku i zatražiti dodatne informacije o obradi vaših osobnih podataka šaljući e-mail na szop@jaba.hr. Kontakt Voditelj obrade Jadranska banka d.d. Šibenik, Ante Starčevića 4, 22000 Šibenik, Službenik za zaštitu osobnih podataka szop@jaba.hr Nadzorno tijelo Agencija za zaštitu osobnih podataka Martićeva ulica 14, 10000 Zagreb