http___www.usluga.hr_o-poduzecu_zastita-osobnih-podataka__1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 11.2 12.1 13.1 14.1 15.1 16.1 16.2 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1
End User License Agreement DEFINITIONS Data Controller: has the meaning set out in section 1(1) of the Data Protection Act 1998. Data Processor: has the meaning set out in section 1(1) of the Data Protection Act 1998. Data Subject: an individual who is the subject of Personal Data. Personal Data: has the meaning set out in section 1(1) of the Data Protection Act 1998 and relates only to personal data, or any part of such personal data, of which the School is the Data Controller and in relation to which the Service Provider is providing services under this Agreement. Processing and process: have the meaning set out in section 1(1) of the Data Protection Act 1998. CLAUSES OBLIGATIONS OF THE SERVICE PROVIDER 1.1 The School and the Service Provider acknowledge that for the purposes of the Data Protection Act 1998, the School is the Data Controller and the Service Provider is the Data Processor of any Personal Data. 1.2 The Service Provider shall process the Personal Data only to the extent, and in such a manner, as is necessary for the purposes specified in Schedule 1 of this Agreement and in accordance with the School’s instructions from time to time and shall not process the Personal Data for any other purpose. The Service Provider will keep a record of any processing of personal data it carries out on behalf of the School. 1.3 The Service Provider shall promptly comply with any request from the School requiring the Service Provider to amend, transfer or delete the Personal Data. 1.4 If the Service Provider receives any complaint, notice or communication which relates directly or indirectly to the processing of the Personal Data or to either party's compliance with the Data Protection Act 1998 and the data protection principles set out therein, it shall immediately notify the School and it shall provide the School with full co-operation and assistance in relation to any such complaint, notice or communication. 1.5 At the School's request, the Service Provider shall provide to the School a copy of all Personal Data held by it in the format and on the media reasonably specified by the School. 1.6 The Service Provider shall not transfer the Personal Data outside the European Economic Area without the prior written consent of the School. 1.7 The Service Provider shall promptly inform the School if any Personal Data is lost or destroyed or becomes damaged, corrupted, or unusable. The Service Provider will restore such Personal Data at its own expense. SERVICE PROVIDER'S EMPLOYEES 2.1 The Service Provider shall ensure that access to the Personal Data is limited to: (a) those employees who need access to the Personal Data to meet the Service Provider's obligations under this Agreement; and (b) in the case of any access by any employee, such part or parts of the Personal Data as is strictly necessary for performance of that employee's duties. 2.2 The Service Provider shall ensure that all employees: (a) are informed of the confidential nature of the Personal Data; (b) have undertaken training in the laws relating to handling personal data; and (c) are aware both of the Service Provider's duties and their personal duties and obligations under such laws and this Agreement. 2.3 The Service Provider shall take reasonable steps to ensure the reliability of any of the Service Provider's employees who have access to the Personal Data. RIGHTS OF THE DATA SUBJECT 3.1 The Service Provider shall notify the School within three working days if it receives a request from a Data Subject for access to that person's Personal Data. 3.2 The Service Provider shall provide the School with full co-operation and assistance in relation to any request made by a Data Subject to have access to that person's Personal Data. 3.3 The Service Provider shall not disclose the Personal Data to any Data Subject or to a third party other than at the request of the School or as provided for in this Agreement. RIGHTS OF THE SCHOOL 4.1 The School is entitled, on giving at least three days' notice to the Service Provider, to inspect or appoint representatives to inspect all facilities, equipment, documents and electronic data relating to the processing of Personal Data by the Service Provider. 4.2 The requirement under clause 4.1 to give notice will not apply if the School believes that the Service Provider is in breach of any of its obligations under this Agreement. WARRANTIES 5.1 The Service Provider warrants that: (a) it will process the Personal Data in compliance with all applicable laws, enactments, regulations, orders, standards and other similar instruments; and (b) it will take appropriate technical and organisational measures against the unauthorised or unlawful processing of personal data and against the accidental loss or destruction of, or damage to, personal data to ensure the School's compliance with the seventh data protection principle including, but not limited to, the security measures set out in Schedule 2. 5.2 The Service Provider shall notify the School immediately if it becomes aware of: (a) any unauthorised or unlawful processing, loss of, damage to or destruction of the Personal Data; (b) any advance in technology and methods of working which mean that the School should revise the security measures set out in Schedule 2. INDEMNITY 6.1 The Service Provider agrees to indemnify and keep indemnified and defend at its own expense the School against all costs, claims, damages or expenses incurred by the School or for which the School may become liable due to any failure by the Service Provider or its employees or agents to comply with any of its obligations under this Agreement. 6.2 The Service Provider shall take out insurance sufficient to cover any payment that may be required under clause 6.1 and produce the policy and receipt for premium paid, to the School on request. APPOINTMENT OF SUBCONTRACTORS 7.1 The Service Provider will not authorise a third party (sub-contractor) to process the Personal Data. Schedule 1 Purposes for which the Service Provider may process the Personal Data The Service Provider shall process the Personal Data in accordance with requirements set out by the Data Controller: • student performance data will be processed by the Service Provider to produce school based reports made available to the designated school employee(s) to download via a secure platform; • student performance data will be processed to produce a School summary report made available to the designated School employee(s) to download via a secure platform; • reports will be produced according to the contract and schedule agreed by the School and the Service Provider; • a secure record will be kept by the Service Provider of all reports produced. Schedule 2 Security measures The Service Provider will take all necessary and appropriate technical and organisational measures to ensure against the unauthorised or unlawful processing of personal data and against the accidental loss or destruction of, or damage to, personal data: • all Data transferred to the Service Provider will be via a secure encrypted upload platform; • data received by the Service Provider will be held on a secure server outside of the public domain; • access to data to be processed will be limited to those employed by the Service Provider; • access to reports produced by the Service Provider will be via a secure encrypted download platform; • access to the download platform will be provided to the designated school data manager and/or School as agreed within the agreement; • employees of the Service Provider will be made fully aware of the requirements for data security and: (a) will be informed of the confidential nature of the Personal Data; (b) have undertaken training in the laws relating to handling personal data; and (c) will be aware both of the Service Provider's duties and their personal duties and obligations under such laws and this Agreement; • the Data Controller will be notified immediately where any breach of data security occurs; • the Service Provider will work to secure data against any advance in technology and methods of working which compromise the security of data it holds.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 7.2 8.1 9.1 9.2 10.1 11.1 12.1
Sukladno Zakonu o zaštiti osobnih podataka ( Narodne novine broj 103/03, 118/06, 41/08, 130/11 i 106/12 ) društvo Usluga Poreč d.o.o. imenovalo je službenika za zaštitu osobnih podataka. Službenik za zaštitu osobnih podataka vodi brigu o zakonitosti obrade osobnih podataka i ostvarivanju prava na zaštitu osobnih podataka na način da: - vodi brigu o zakonitosti obrade osobnih podataka u smislu poštivanja odredbi Zakona o zaštiti osobnih podataka i ostalih propisa koji uređuju pitanja obrade osobnih podataka; - upozorava voditelja zbirke osobnih podataka na nužnost primjene propisa o zaštiti osobnih podataka u slučajevima planiranja i radnji koje mogu imati utjecaj na pitanje privatnosti i zaštitu osobnih podataka; - upoznaje sve osobe zaposlene u obradi osobnih podataka s njihovim zakonskim obvezama u svrhu zaštite osobnih podataka; - brine o izvrsenju obveza iz clanka 14. i Zakona o zaštiti osobnih podataka; - omogućava ostvarivanje prava ispitanika iz clanka i 20. Zakona o zaštiti osobnih podataka; - surađuje s Agencijom za zastitu osobnih podataka u vezi s provedbom nadzora nad obradom osobnih podataka. Službenik za zaštitu osobnih podataka dužan je čuvati povjerljivost svih informacija i podataka koje sazna u obavljanju svojih dužnosti. Ova obveza traje i nakon prestanka obavljanja dužnosti službenika za zaštitu osobnih podatka. Kontakt podaci službenika za zaštitu osobnih podataka : Usluga Poreč d.o.o., Mlinska 1., Poreč E-mail: lorena.velenik@usluga.hr