http___www.ugo-slavica.hr_stranice_politika-privatnosti_166.html_1.xml
1.1 1.2 1.3 1.4 2.1 3.1 3.2 4.1 5.1 5.2 6.1 6.2 7.1 7.2 7.3 7.4 8.1 8.2 9.1 9.2 10.1 11.1 12.1 13.1 13.2 14.1 14.2 15.1 16.1 17.1 18.1 18.2 19.1 20.1 20.2 20.3 21.1 22.1 23.1 24.1 25.1 25.2 26.1 26.2 26.3 26.4 27.1 28.1 29.1 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 37.2 38.1 38.2 39.1 39.2 40.1 41.1 41.2 42.1 43.1 44.1 45.1 45.2 46.1 46.2 47.1 47.2 47.3 48.1 49.1 50.1 51.1 51.2 52.1 53.1 53.2 54.1 55.1 56.1 56.2 57.1 58.1 58.2 59.1 59.2 60.1 60.2 61.1 62.1 62.2 62.3 63.1 64.1 65.1 66.1 66.2 67.1 68.1 69.1 69.2
IMPORTANT Crisalix provides the Services and, as such, Crisalix controls your personal data when you directly sign up with us either as an end user or as aesthetics professional. However, we will not be the data controller of your personal data if you are invited as an end user to join directly from aesthetics professional. In such a case, we will act as data processor being the relevant aesthetics professional the data controller of your personal information and, therefore, such aesthetics professional will decide the scope and length of the access to the Services that you may enjoy. However, we will implement the same technical or organizational security measures to protect your personal data in both scenarios (i.e., data controller/data processor). Note that, if you decide to use our online community (MyCrisalix), we will be a data controller even if you have been previously invited by aesthetics professional. We are dedicated to protecting the privacy of our users by taking all possible measures to protect their personally identifiable information. This Privacy and Cookies Policy outlines these measures and discloses the privacy practices of Crisalix, which have been adapted to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”). This Privacy and Cookies Policy sets out how Crisalix uses and protects any information that you provide or that is collected when you use Crisalix’s services, websites, platforms, products, and any and all applications, internet- or mobile-based or not, provided by Crisalix, directly or indirectly, (referred to collectively as the “Services” in this document). Crisalix is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using the Services, then you can be assured that it will only be used in accordance with this Privacy and Cookies Policy. Who is the controller? How can I contact the controller? Note that Crisalix collaborates with its subsidiaries to perform the Services (“Crisalix' Affiliates”). Crisalix' Affiliate refers to any entity that owns or controls, is owned or controlled by or is or under common control or ownership with Crisalix, where control is defined as the possession, directly or indirectly, of the power to direct or cause the direction of the management and policies of an entity, whether through ownership of voting securities, by contract or otherwise. If these Crisalix' Affiliates access to your personal data they will act as data (sub) processors. The current Crisalix' Affiliates are the following: Is there a Data Protection Officer in our organisation? How can I contact him/her? So far, we still do not have a Data Protection Officer as such, but we are assessing the convenience of appointing such an officer. However, we do have a team in charge of safeguarding your privacy, who you can contact by sending an email to the following address . For what purpose will we process your data? We wish to inform you that we will process your data for the following purposes: How long will we retain your data? We shall retain your data for as long as our contractual relationship with you is in force in order to manage it correctly and to send you commercial information of interest to you, provided that this is adequate, relevant and limited to what is necessary for the purposes for which the data is processed. The above default rule will apply unless you request the erasure of your data. Once the processing of your data is no longer adequate, relevant and limited to what is necessary for the purposes for which the data is processed, we will retain your data duly blocked and only for the purposes of discharging potential responsibilities as requested by the regulations. Likewise, we may retain your data in a totally anonymous way so as to render your identification impossible, as a result of which such data will no longer be personal data. Finally, we wish to inform you that we will take every reasonable step to ensure that inaccurate data is rectified or deleted. Will we take decisions solely on the basis of automated processing, including profiling, with the data that you provide us? No, we shall not take individual decisions solely on the basis of automated processing which may produce legal effects concerning you or similarly affect you significantly. Note that even during the simulation process there is human intervention. To optimize the Services and guarantee the highest quality results, a manual/visual check of all cases done through photos is done by a specialized and dedicated team. Will we process anonymous/aggregate data for analysis purposes? Yes, we also collect non-personal information − data in a form that does not permit direct or indirect association with any specific data subject. We may collect, use, transfer, and disclose non-personal information for any purpose. Note that aggregated and/or anonymous data is considered non-personal information for the purposes of this Privacy and Cookies Policy. The following are some examples of non-personal information that we collect and how we may use it: In any event, if we do combine non-personal information with personal information the combined information will be processed as personal information for as long as it remains combined. On what basis is the processing of your personal data based? Your personal data will be processed for the above-mentioned purposes and on the basis of the following legitimate reasons for the processing, which are applicable depending on each case: Which data do you need to provide us with? What should happen if you do not provide it? It is necessary that you provide us with all of the personal data marked as mandatory in the registration form of the Services. Mandatory data fields are identified with a (*). Note that, when uploading a picture for a 3D simulation or informing us about any health information, you will be providing us with special categories of data. Please note that we will process such data with specific care. Failure on your side to provide us with the data requested and identified as mandatory, may negatively affect the use of the Services and access to its contents, to the point that you may not be able to access the Services at all. In addition to the data collected through the form, we may collect and process other personal data such as any other data which may be generated during the use of the Services. Besides, you may be asked to provide your personal information anytime you are in contact with Crisalix or a Crisalix' Affiliate. Finally, we may also collect aggregated/anonymous information regarding your activities from our Services. For more information please see section 2.4 in relation to anonymous/aggregate data analysis. Do I need to provide accurate and precise data? Yes, considering how important your data is to us, when you provide us with your data you guarantee its veracity and/or accuracy. Please, be aware that you will be responsible for any false or inaccurate representations made by you, as well as for the damage caused as a result of the same to Crisalix, Crisalix' Affiliates or other third parties. Crisalix and Crisalix' Affiliates shall not be responsible for any incident deriving from the lack of accuracy and/or misrepresentation of the information provided by you. Will we disclose your data to third-parties? Crisalix and Crisalix' Affiliates may share your personal information with each other and use it consistent with this Privacy and Cookies Policy. Besides, Crisalix needs to share personal information with companies which provide services such as information processing, fulfilling customer orders, payment processing, managing and enhancing customer data, providing customer service, assessing your interest in our products and services, and conducting customer research or satisfaction surveys. These third parties will act as our processors, or sub-processors, and will have implemented appropriate safeguards to protect your personal information. Furthermore, Crisalix will disclose your personal data if these is required by law, legal process, litigation, and/or requests from public or governmental authorities within or outside your country of residence. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We may also disclose information about you if we determine that disclosure is reasonably necessary to enforce our terms and conditions or protect our operations or users. Additionally, in the event of a reorganization, merger, or sale we may transfer any and all personal information we collect to the relevant third party. Could you disclose your personal information to third parties through the Services? Yes, please note that, when using our online community (MyCrisalix), you will make public your personal information. Therefore, when you use the Services or post on a Crisalix forum, blog, or social networking service, the personal information you share is visible to other users and can be read, collected, or used by them. Furthermore, you may choose to contact an aesthetics professional from the directory that we provide in the Services and, in such a case, you will allow us to share your personal information with the chosen aesthetics professional. You are responsible for the personal information you choose to submit in these instances. Will your personal data be transferred to third countries or international organisations? Yes, note that we are a Swiss company. However, we have adapted our privacy policy to the EU General Data Protection Regulation. Besides, note that we make certain personal information available to the Crisalix' Affiliate located in Philippines (please see section 1.1 above). This is necessary to allow us to provide you with the Services and, in particular, to optimize the Services and guarantee the highest quality results, a manual/visual check of all cases done through photos is done by a specialized and dedicated team of this Crisalix’ Affiliate located in Philippines. This Crisalix' Affiliate located in Philippines in no event may be data controller. They act as data processors, or sub-processors, to help us to provide the Services. We have put in place the relevant appropriate safeguards and, in particular, an agreement following the standard data protection clauses adopted by the Commission. What rights do you enjoy regarding the processing of your data? As provided for by the General Data Protection Regulation, we wish to inform you about your right to: Do you have the right to withdraw your consent? Yes, you may, at any moment, withdraw your consent regarding the processing of your data for one, several or all of the purposes referred to above. Be aware that, should that happen, our rendering of the Services could be altered or even discontinued totally. Do you have the right to appeal? Yes, you can appeal to the competent supervisory authority in your place of residence. You may obtain information on how to contact the different supervisory authorities by contacting us at the following email . In any event, before starting any appeal, please contact us by email () so that we can settle any discrepancies or disputes in an amicable way. When will we reply to you? We will reply to your requests as soon as possible and, in any event, within one month. Should we not meet this deadline, please, excuse us and contact us again so that we can deal with and rectify any possible technical error, which may have caused our late reply. Where have we obtained your data from? We have obtained your data directly from you. For further information about what data we process, please refer to section 3.2. What categories of data do we process? Will we process sensitive data? For additional information about the data we process, please, refer to section 3.2. For further information, please visit the Secutity statement and the HIPAA Complaint. Despite processing health related data (e.g. 3D simulation), we do not process any other special categories of data that it is not necessary to provide the Services. We are aware of the importance of privacy and data protection regulations. Accordingly, the protection of the security, integrity and confidentiality of our clients and users’ information is very important for us. Therefore, it is our firm intention to act in a responsible way in this regard. In this context, we have adopted sufficient technical and organisational measures to ensure the security of your personal data and to avoid its alteration, loss and unauthorised processing or access, all in conformity with the applicable data protection regulations and the highest market standards. Besides, to make sure your personal information is secure, we communicate our privacy and security guidelines to our employees and strictly enforce privacy safeguards within Crisalix and Crisalix' Affiliates. For further information, please visit the Secutity Statement and the HIPAA Complaint. You acknowledge and agree that you have read and understood this Privacy and Cookies Policy, whose contents constitute the entire agreement between you and Crisalix regarding the use and processing of your personal information in the Services. You expressly accept to be bound by the terms of this Privacy and Cookies Policy, in all its scope and extent, without exception of any of its provisions. Crisalix reserves the right to update and modify the Privacy and Cookies Policy from time to time. Date of the last update: June 1, 2018. Should you wish to send us any suggestion or comment regarding our Privacy and Cookies Policy, please, contact with us. You may find our details in section 1.1.
1.1 2.1 2.2 3.1 4.1 4.2 5.1 6.1 7.1 7.2 7.3 8.1 9.1 9.2 10.1 11.1 11.2 12.1 13.1 14.1 15.1 16.1 16.2 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 27.2 27.3 27.4 28.1 29.1 29.2 30.1 31.1 31.2 31.3 31.4 31.5 31.6 31.7 31.8 31.9 31.10 31.11 32.1 32.2 33.1 34.1 35.1 36.1 36.2 37.1 38.1 39.1 39.2 39.3 40.1 41.1 41.2 42.1 43.1 43.2 44.1 45.1 46.1 46.2 47.1 48.1 48.2 49.1 50.1 51.1 52.1
Zaštita osobnih podataka na mrežnim stranicama Ugo Slavica Zahvaljujemo Vam na posjetu našem mrežnom mjestu. U tvrtki Ugo Slavica d.o.o. nastojimo Vam pružiti vrhunsku uslugu i pritom, što je još važnije, cijenimo Vašu vjernost. Kupcima i korisnicima naših usluga pristupamo s posebnom pažnjom radi stjecanja Vašeg povjerenja i ispunjenja Vaših očekivanja. Svjesni smo činjenice da je privatnost vrlo bitna i zbog toga se tvrtka Ugo Slavica d.o.o. obvezuje na zaštitu Vaših osobnih podataka. Sastavili smo ovaj tekst da bismo Vam objasnili kako postupamo s osobnim podacima koje prikupljamo od Vas ili o Vama na ovom mrežnom mjestu, putem pisane ili usmene komunikacije te prilikom posjeta našem prodajnom mjestu. Molimo Vas da povremeno provjerite Politiku privatnosti s obzirom na moguće promjene. Voditelj obrade osobnih podataka Ugo Slavica d.o.o. (Šibenski most 11, 22000 Šibenik, Hrvatska) je voditelj obrade Vaših osobnih podataka kako je to propisano zakonom i propisima o zaštiti osobnih podataka. Ugo Slavica d.o.o. kao voditelj obrade osobnih podataka određuje svrhu i sredstva obrade osobnih podataka i odgovoran je za čuvanje i korištenje osobnih podataka u papirnatom ili elektronskom obliku. Zaštita osobnih podataka Tvrtka Ugo Slavica d.o.o. štiti Vaše osobne podatke, a svi naši djelatnici obučeni su o načinu postupanja s takvim podacima u skladu s važećim zakonskim propisima. Neovisno o tome, svi naši djelatnici obvezni su držati povjerljivima i štititi sve računalno i na drugi način prikupljene i obrađene podatke. Prikupljamo, upotrebljavamo i obrađujemo Vaše podatke u skladu s ovom Politikom privatnosti, odredbama Zakona o provedbi Opće uredbe o zaštiti podataka i Uredbom (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka te o stavljanju izvan snage Direktive 95/46/EZ (dalje u tekstu: Opća uredba o zaštiti osobnih podataka - GDPR), odnosno drugih važećih propisa primjenjivih u Republici Hrvatskoj koji uređuju zaštitu osobnih podataka. Osobne podatke koje o Vama prikupimo čuvaju se u sigurnom okruženju. Vaši su osobni podaci zaštićeni od neovlaštenog pristupa, otkrivanja, uporabe, izmjene ili uništavanja od strane bilo koje organizacije ili pojedinca. Kupcima i korisnicima naših usluga jamčimo da će se sa svim osobnim podacima postupati kao s povjerljivim informacijama i poslovnom tajnom. Tvrtka Ugo Slavica d.o.o. poduzet će sve potrebne mjere u svrhu zaštite Vaših osobnih podataka od neovlaštenog pristupa, otkrivanja, izmjene ili uništenja, te će održavati osobne podatke preciznima i ažurnima koliko je god to moguće. Ovom Politikom privatnosti uređuje se način postupanja s osobnim podacima kojima tvrtka Ugo Slavica d.o.o. pristupi putem e-mail ili drugog obrasca. Osobne podatke prikupljamo u svrhu što učinkovitijeg odgovora na Vaš upit, radi osiguranja pružanja i plaćanja usluge, radi promidžbe neke od naših usluga, radi statističke obrade podataka, radi mogućnosti slanja publikacija i drugih promidžbenih materijala i brošura. Davanjem svojih osobnih podataka, poput adrese e-pošte, broja telefona i sl., ujedno dajete svoju izričitu suglasnost (privolu) da Vas tvrtka Ugo Slavica d.o.o. može kontaktirati i obavještavati radi ponude svojih usluga te time potvrđujete da ste upoznati s našom Politikom privatnosti. U slučaju da ne želite više primati obavijesti o našim uslugama, dužni ste o tome izričito pisanim putem (e-poštom ili preporučenom poštom) obavijestiti tvrtku Ugo Slavica d.o.o. Osobni podaci koje uređuje i obuhvaća naša Politika privatnosti: Sadržaj politike privatnosti Vaše osobne podatke ne prodajemo, ne iznajmljujemo niti otkrivamo trećim stranama bez Vaše izričite privole, jer se to protivi Politici privatnosti, Zakonu o provedbi Opće uredbe o zaštiti osobnih podataka i Općoj uredbi o zaštiti osobnih podataka - GDPR. Ako Vas budemo htjeli kontaktirati bilo kojim putem glede promotivnih ponuda i usluga, od Vas ćemo za to zatražiti privolu. Tvrtka Ugo Slavica d.o.o. ne odgovara za slučajnu pogrešku ili pogrešku zbog više sile ili drugih objektivnih okolnosti kojima se uzrokuje slučajno kršenje zajamčene zaštite Vaših osobnih podataka, ali Vam jamčimo da ćemo takve pogreške otkloniti što je prije moguće i u onoj mjeri u kojoj je to realno izvedivo. Tvrtka Ugo Slavica d.o.o. prikuplja samo osobne podatke koje ste nam dobrovoljno dostavili te ih upotrebljava za potrebe pružanja gore navedenih usluga. Ne tražimo od Vas da nam pošaljete svoje podatke da biste pristupili našim stranicama, niti tražimo da nam otkrijete više podataka nego što je doista potrebno za upotrebu neke od naših usluga. Podaci koje nam date o svojoj kreditnoj kartici upotrebljavaju se isključivo kao sredstvo osiguranja plaćanja rezerviranih i naručenih usluga i pod jednakom su zaštitom kao i Vaši ostali osobni podaci. Poslije uredno pružene i plaćene usluge ti se podaci više ne upotrebljavaju bez Vaše izričite suglasnosti. Popunjavajući formulare na ovoj stranici jamčite da su informacije koje ste priložili točne, da ste poslovno sposobni, da ste ovlašteni raspolagati danim informacijama te da ste u cijelosti suglasni da Vaše podatke upotrebljavamo i prikupljamo u skladu sa zakonom i uvjetima naše Politike privatnosti. Vrijeme trajanja Politike privatnosti U trenutku kada nam dostavite svoje podatke, pristajete da Vas kontaktiramo i time Vas dodajemo na popis primatelja obavijesti. Trenutak dodavanja predstavlja Vaš izričit pristanak na kontaktiranje. Vaše osobne podatke trajno štitimo, a u svakom trenutku možete zatražiti isključenje s našeg popisa primatelja obavijesti. Nakon toga tvrtka Ugo Slavica d.o.o. više neće upotrebljavati Vaše podatke, osim u svrhu informatičke ili statističke obrade podataka, u kojem slučaju će isti biti pseudominizirani na način da se ne mogu pripisati pojedincu čiji je identitet utvrđen ili se može utvrditi. Tajnost podataka Naglašavamo da Vaši osobni podaci ostaju tajni prilikom posjeta ovoj stranici, kao i pri samom posjetu našem prodajnom mjestu, osim ako ih ne želite dobrovoljno otkriti. Obvezujemo se da trećim stranama nećemo otkrivati Vaše osobne podatke, osim u slučajevima propisanima važećim zakonskim propisima. Upotreba kolačića Da bismo olakšali pregledavanje našeg mrežnog mjesta, koristimo se tzv. „kolačićima" (cookies). Kolačići su male tekstualne datoteke koje na računalo korisnika smješta internetski poslužitelj kojim se korisnik koristi. Prema pravilima Europske unije obavezni smo zatražiti Vaš pristanak. Korištenjem naših stranica pristajete na uporabu kolačića. Kolačići su malene datoteke koje se pospremaju na računalo dok surfate internetom, obično se to događa kada prvi put posjetite našu mrežnu stranicu. Mrežna stranica pomoću kolačića može zapamtiti Vaše aktivnosti ili postavke i sljedeći put kada posjetite našu mrežnu stranicu mogu se automatski primijeniti. Mrežna stranica pamti da ste već bili ovdje i u nekim slučajevima prilagođava ono što vidite na ekranu. Mogu se koristiti za spremanje lozinki ili formi koje ste već ispunili. Generalno gledajući svrha kolačića je dobronamjerna, nisu štetni i ne mogu nositi viruse te omogućuju da korisnik ima bolje iskustvo prilikom pregledavanja interneta. Kolačići ne sadržavaju podatke koji Vas mogu identificirati pa je time osigurana i Vaša privatnost. Kolačići su smješteni na Vašem računalu i ne sadrže Vaše ime, nego IP adresu. Nakon što prekinete rad na poslužitelju, informacije više nisu dostupne tvrtki Ugo Slavica d.o.o. Ako u bilo kojem trenutku želite ukloniti kolačiće na svojem uređaju, ažurirajte postavke svog internetskog preglednika. Neželjene poruke (spam) Spam je naziv za neželjene poruke e-pošte koje sadrže marketinške materijale poslane bez Vašeg pristanka. Tvrtka Ugo Slavica d.o.o. ne šalje neželjene poruke. Koristimo se alatom protiv neželjenih poruka da bismo Vas zaštitili od primanja takvih poruka. Ako zbog određenih razloga smatrate da ste primili neželjenu poruku e-pošte od tvrtke Ugo Slavica d.o.o., molimo Vas da nas obavijestite na sljedeću adresu: info@ugo-slavica.hr. Zaštita osobnih podataka djece Tvrta Ugo Slavica d.o.o. savjetuje roditeljima i skrbnicima da poduče djecu o sigurnom i odgovornom postupanju s osobnim podacima na internetu. Tvrtka Ugo Slavica d.o.o. NE prikuplja, NE upotrebljava i NE otkriva osobne podatke o osobama mlađima od 14 godina pomoću kojih je dotične osobe moguće kontaktirati putem interneta bez izričitog dopuštenja roditelja ili zakonskog zastupnika. Tvrtka Ugo Slavica d.o.o. jamči zaštitu osobnih podataka djece predviđenu posebnim zakonima koji uređuju to pitanje. Posebna kategorija osobnih podataka (tzv. "osjetljivi podaci") Pojam „osjetljivi podaci” odnosi se na podatke koji otkrivaju Vaše rasno ili etničko podrijetlo, politička mišljenja, vjerska ili filozofska uvjerenja, članstvo u sindikatu, te na genetske podatke, biometrijske podatke u svrhu jedinstvene identifikacije, kao i na podatke koji se odnose na zdravlje, podatke o spolnom životu ili seksualnoj orijentaciji. Tvrtka Ugo Slavica d.o.o. ne prikuplja i ne obrađuje osjetljive podatke, osim ako nam ih dobrovoljno ne pružite za jednu ili više određenih svrha, odnosno u slučajevima propisanim odredbom članka 9. stavka 2. Opće uredbe o zaštiti osobnih podataka - GDPR. Tvrtka Ugo Slavica d.o.o. može upotrebljavati zdravstvene podatke koje ste nam svojevoljno dali kako bismo Vas bolje uslužili i zadovoljili Vaše posebne potrebe. Provjera, izmjena ili brisanje osobnih podataka U svakom nam se trenutku možete obratiti radi pregleda, provjere, izmjene, ispravka ili brisanja Vaših osobnih podatke koje ste nam dostavili prilikom posjete našem mrežnom ili prodajnom mjestu (ako se ti podaci i dalje nalaze u našoj bazi podataka). Ako želite ostvariti to pravo, slobodno nam se obratite na adresu info@ugo-slavica.hr. Poveznice Preusmjeravanja s naših stranica upućuju Vas i/ili Vaše dijete na mrežne stranice čiji je sadržaj kvalitetan, odnosno ne potiče negativnost. Međutim, ova Politika privatnosti primjenjuje se samo na ovoj stranici, tako da, kada se povežete na druge stranice, potrebno je pročitati Politiku privatnosti na spomenutim stranicama. Stupanje na snagu i izmjene Politike privatnosti Ova Politika privatnosti stupa na snagu dana 25. svibnja 2018. godine. Politika privatnosti bit će predmet redovnih revizija, a svaku ažuriranu verziju ćemo postaviti na ovu internetsku stranicu. OPŠIRNIJE