http___www.unizg.hr_o-sveucilistu_dokumenti-i-javnost-informacija_sluzbenici-za-zastitu-osobnih-podataka__1.xml
1.1 2.1 2.2 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 20.3 21.1 21.2 22.1 23.1 23.2 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 36.2 36.3 37.1 38.1 39.1 40.1 40.2 41.1 42.1 43.1 44.1 45.1 46.1 47.1 47.2 48.1 49.1 50.1 50.2 51.1 52.1 53.1 54.1 55.1 56.1 56.2 57.1 58.1 59.1 60.1 60.2 61.1 61.2 62.1 63.1 63.2 64.1 64.2 65.1 65.2 65.3 66.1 66.2 66.3 66.4 66.5 67.1 68.1 68.2 68.3 69.1 70.1 70.2 71.1 72.1 73.1 74.1 76.1
Privacy Notice for Customers We, Major Development Estate COMPANY LIMITED, strictly abide by our customers’ privacy. When we use your personal data to run our business and provide service to you, your personal data is protected under the Personal Data Protection Act B.E. 2562. As the data controller, we are obliged by the law to inform you of our privacy policy which explains the way we collect, use or disclosure your personal data as well as your rights to your personal data as the data subject. We reaffirm that we comply with the law to protect your personal data. Definition of Personal Data Personal data means any information related to a person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons in particular. Personal data that we collect from you We collect your information when: - You use our website. - You provide information to us through our website or applications. - You provide information to us when you make enquiry via online or offline channel. We only collect your personal data as necessary to provide the service to you and to correspond to your queries as well as to carry on our business in a way that you would normally anticipate. We may collect, use, store and transfer different types of personal data about you which we have grouped as follows: Sources of Personal Data We receive your personal data directly from you through the following channels: - You register with us by creating an account on our website or application. - You make a query with us relating to your interested property/ project. - You make an appointment with us to visit the project site. - You provide information to us when you visit the project site. - You participate in our marketing activity through an electronic platform, social media, or an offline platform. We receive your personal data from a third party that collects, uses or discloses your personal data as instructed by us or on our behalf. Your personal data will not be used other than the purposes for which we instruct or require such third party to do. We require such third party to protect confidentiality of your personal data and to have measures to protect your personal data as required by the Thai personal data protection law. We receive your personal data from cookies when you visit our website. This data helps us provide you better, faster, safer services and for your own privacy when you use the service and / or enter the platform. Purpose of collection, use and disclose of personal data We may use your personal data to the extent permitted by the personal data protection law. We only collect your personal data as necessary and to the extent that is related to provision of our service to you, where it is necessary: - For our legitimate interests or any other person and your interests, which do not override your fundamental rights. - For the performance of a contract to which you are a party, or in order to take steps at your request to enter into a contract. - For compliance with a law to which we are subjected or for preventing or suppressing a danger to a person’s life, body or health. We explain in the table below about how we use your personal data, and which lawful basis we rely on to do so. We may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Disclosing or sharing your personal data We may have to disclose or share your personal data with selected third parties as follows: - Our affiliated companies. - Online advertising platforms. - Marketing companies or consultants. - Regulator such as the Office of the Personal Data Protection Committee. - Professional advisors and consultants. We require that the third parties above protect confidentiality and protect your personal data in accordance with requirements under the Thai personal data protection law. They may use your personal data only for purposes as instructed by us. Your personal data will not be used other than the purposes for which we instruct or require them to do so. Upon request, we may disclose your personal data to a relevant authority for compliance with a law such as prevention of a danger to a person, legal compliance, setting for an indictment, exercising legal rights, and preventing fraud. Retention policy and retention period of personal data We collect your personal data in our information system and provide standard security to keep our information systems and the use of your personal data secure with following measures: - Restrict access to personal data which may be accessed by employees, agents, contractors and other third parties. They can only access your personal data on our instructions, and they are subject to a duty of confidentiality and protection of personal data. - Provide technological methods to prevent unauthorized access to computer systems. - Destroy your personal data for security purposes when such information is no longer needed for legal and business purposes. - Put in place procedures to deal with any suspected personal data breach and will notify a regulator of a breach where we are legally required to do so. Retention period of personal data - We will keep your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. - To determine the appropriate retention period for personal data, we consider the amount, nature, purpose and sensitivity of the personal data, the potential risk of harm from unauthorized use of your personal data, and the applicable legal requirements. - We collect your personal data obtained from cookies when you use our website. We will keep your personal data for no more than 12 months or as required by relevant laws. Right of Data Subject Data subjects have the right to proceed to the extent permitted by law as follow; The data subject shall have the right to withdraw his or her consent at any time. When processing personal data, you give us consent throughout the duration of your personal data with us (The Right to withdraw). The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, request for a copy of his or her personal data, including request to disclose personal data acquisition that you did not give us consent to (The Right to Access). The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her (The Right to Rectification). The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay (The Right to Erasure). The data subject shall have the right to obtain from the controller restriction of data processing (The Right to Restriction of Processing). The data subject shall have the right to transmit their personal data to another controller without hindrance from the controller to which the personal data have been provided (The Right to Data Portability). The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. (Right to Object) You can contact the DPO or company’s staff in order to proceed with the request to exercise the above rights. Marketing activities and promotion We may conduct marketing activities and promotion or use third parties as instructed by us to do so: - In case that we use your personal data for a purpose of providing a direct marketing to you, we will be able to do so only when you give us explicit consent and we have already informed you the purpose of your personal data’s use on direct marketing. However, you can withdraw your consent on direct marketing with us at any time through our opt-out system. - In the case of your participation in our sale promotional activities such as gaming activities or other activities through various social network channels for promoting our products and services to the public, we will not process your data for direct marketing unless you give us an explicit consent to use your personal data for direct marketing and we have already informed you the purpose of your personal data’s use on direct marketing. However, you can withdraw your consent on direct marketing with us at any time through our opt-out system. Cookies policy Cookies is text files located in your computer to be used to store details of log data on your internet use or your website's visiting behavior. You can learn more about Cookies from https://www.allaboutcookies.org/ We use Cookies to collect your data on visiting to our website to help us provide better, faster and safer services and support your privacy when you use our services through our website. We use Cookies in the following cases: - Cookies for website operations (Functionality Cookies): We use this type of cookies to help us remember your device or browser. Thus, we can quickly create content in consistent with your personal interests as well as provide the service and platform more convenient and beneficial to you. By disabling this cookie, you can set up your device by watching helping methods on your browser or device. - Cookies for analytics (Analytic cookies): We use Analytics Cookies of third parties to collect data of how visitors use our website. We make all website visitor data anonymous (anonymization) and transfer to third parties. Third parties will be able to use or disclose such data to other parties who process the data for them as to the extent permitted by relevant laws. Third parties will not combine the data obtained from our website with the data that they already have. You can choose to disable this type of cookies on our website. Privacy policy of other websites This Privacy Policy is used for our service and our website use only. If you click on a link to another website (although via our website). You will have to study and comply with the privacy policy displayed on that website separate from ours. Change of privacy policy We will review our privacy policy regularly. In case of changing privacy policy, it will be announced on our website or other platforms. Contact Data Controller’s information Name: Data Protection Officer Major Development Public Company Limited Contact Address: 141 Major Tower Thonglor, 18th Fl., Soi Thonglor 10, Sukhumvit 55, Klongton Nua, Wattana, Bangkok 10110 E-mail: dpo@major.co.th
1.1 2.1 2.2 3.1 3.2 3.3 4.1 5.1 6.1 6.2 7.1 8.1 8.2 8.3 8.4 9.1 10.1 10.2 10.3 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 29.2 30.1 31.1
Obavijest o obradi osobnih podataka Zaštita osobnih podatka pojedinca utvrđena je člankom 37. Ustava Republike Hrvatske (NN 85/10 – pročišćeni tekst), Općom uredbom o zaštiti podataka (EU, 2016/679) i Zakonom o provedbi Opće uredbe o zaštiti podataka (NN, 42/2018). Sveučilište u Zagrebu brine za sigurnost Vaših osobnih podataka i zaštitu osobnih podataka svih ispitanika shvaća vrlo ozbiljno. Osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi („ispitanik“). Ovom obaviješću želimo Vas upoznati s našim sigurnosnim mjerama kako biste znali koje podatke pohranjujemo i kako ih koristimo. Temeljna načela i prakse zaštite podataka Zakonitost, poštenost i transparentnost Osobne podatke naših studenata, zaposlenika, vanjskih suradnika i drugih osoba s kojima smo povezani u obavljanju svoje djelatnosti obrađivat ćemo samo na temelju zakonske obveze, Vaše privole ili druge legitimne osnove. Podaci koji se odnose na Vas na transparentan će se način prikupljati, upotrebljavati, dati na uvid ili na neki drugi način obrađivati, te su javno objavljeni rokovi i svrhe obrade podataka, podaci o identitetu voditelja obrade, informacija o načinu na koji možete pristupiti svojim podacima, procesu za podnošenje pritužbi i zahtjeva za ažuriranje podataka. Ograničavanje svrhe Vaši osobni podaci prikupljat će se u posebne, izričite i zakonite svrhe i neće se dalje obrađivati na način koji nije u skladu s tim svrhama. Vaše osobne podatke prikupljati ćemo i pohranjivati u svrhu izvršenja zakonskih obveza, ispunjenja obveza od javnog interesa, izvršavanja javnih ovlasti i ugovora. Podaci koji su prikupljeni za jednu svrhu neće se koristiti ni za jednu drugu svrhu ili na način koji nije u skladu s odobrenom svrhom. Za svrhu obrade koja se ne provodi temeljem zakonske osnove ili ugovora tražit ćemo od Vas posebnu privolu. Smanjenje količine podataka Osobni podaci koje prikupljamo su primjereni, bitni i ograničeni na svrhu obrade. Sveučilište prikuplja i obrađuje osobne podatke u mjeri u kojoj je to potrebno za ispunjenje Zakonom i drugim propisima utvrđenih obveza redovite djelatnosti Sveučilišta, te sukladno Zakonu o znanstvenoj djelatnosti i visokom obrazovanju i drugim propisima koje primjenjujemo u svom radu. Voditelj obrade i izvršitelj obrade neće prikupljati osobne podatke koji mu nisu potrebni za svrhu obrade. Točnost i integritet podataka Nužno je da osobni podaci koje prikupljamo i spremamo budu točni i ažurni i zato ćemo poduzeti svaku razumnu mjeru kako bismo osigurali da se osobni podaci koji nisu točni, uzimajući u obzir svrhe u koje se obrađuju, bez odlaganja izbrišu ili isprave. Ograničenje pohrane Rokovi čuvanja Vaših osobnih podataka određeni su pozitivnim zakonskim propisima i internim aktima Sveučilišta u Zagrebu ili Vašom suglasnošću za prikupljanje i obradu osobnih podataka. Cjelovitost i povjerljivost Kako bi zaštitila osobne podatke ispitanika, Sveučilište u Zagrebu poduzima sve odgovarajuće mjere zaštite koje su u skladu s primjenjivim propisima o zaštiti privatnosti i osobnih podataka te su osigurane sve razumne tehničke, fizičke i organizacijske mjere za zaštitu osobnih podataka ispitanika od neovlaštene ili nezakonite obrade, uništenja, slučajnog gubitka, štete, izmjene, neovlaštenog odavanja ili pristupa te od svih ostalih oblika nezakonite i/ili pretjerane obrade Vodit ćemo nadzor nad pristupom, korištenjem i održavanjem osobnih podataka, te ćemo kontinuirano unapređivati naše sigurnosne mjere sukladno tehnološkim mogućnostima. Postupanje u slučaju povrede osobnih podataka U slučaju povrede osobnih podataka, Sveučilište u Zagrebu će kao voditelj obrade osobnih podataka, bez nepotrebnog odgađanja i ukoliko je izvedivo, u roku od 72 sata nakon saznanja o povredi osobnih podataka ispitanika izvijestiti Agenciju za zaštitu osobnih podataka. Ostvarivanje prava ispitanika Svaki ispitanik ima pravo u svakom trenutku od voditelja obrade zatražiti pristup svojim osobnim podacima, njihov ispravak, brisanje ili ograničavanje njihove obrade kao i pravo na prigovor Agenciji za zaštitu osobnih podataka te pravo na prenosivost podataka. Navedena prava ostvaruju se podnošenjem zahtjeva na e-mail adresu Službenika za zaštitu osobnih podataka Sveučilišta u Zagrebu. e-mail: gdpr@ unizg.hr Dokumenti i obrasci: Obrazac za pristup, promjenu, dopunu, prigovor, ograničenje prikupljanja osobnih podatka Obrazac za brisanje osobnih podataka Službenici za zaštitu osobnih podataka Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka – Opća uredba o zaštiti podataka – GDPR (General Data Protection Regulation) izravno se primjenjuje u Republici Hrvatskoj od 25. svibnja 2018. godine. Uredba određuje koja su prava pojedinaca, a u skladu s tim i koje su obveze subjekata koji obrađuju osobne podatke poput voditelja obrade odnosno izvršitelja obrade. Neke od obveza subjekata su obrada osobnih podataka ako je građanin dao privolu ili radi izvršavanja zadaći temeljem drugih zakonskih propisa, obrada podataka prema načelima obrade navedenih u Uredbi, zatim informacije koje subjekt daje građaninu prije same obrade njegovih osobnih podataka te uspostava evidencija o vođenju obrade osobnih podataka. Općom uredbom o zaštiti osobnih podataka definiraju se i obveze službenika za zaštitu osobnih podataka, koje imenuje voditelj obrade, koji o imenovanju službenika pisano obavještava Agenciju za zaštitu osobnih podataka. Temeljem članka 38. Opće uredbe o zaštiti podataka, rektor Sveučilišta u Zagrebu, kao voditelj obrade osobnih podataka, imenovao je sljedeće službenike za zaštitu osobnih podataka: Imenovane službenice možete kontaktirati putem e-adrese: gdpr@ unizg.hr Navedeni tekst u obliku zasebnog dokumenta možete preuzeti ovdje.