http___www.uredba.com_pojmovi-vezani-uz-uredbu_1.xml
1.1 2.1 2.2 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 38.2 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 47.1 48.1 49.1 49.2 49.3 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 64.1 64.2 64.3 64.4 64.5 65.1 66.1 67.1 68.1 68.2 68.3 68.4 68.5 69.1 70.1 71.1 72.1 72.2 73.1 74.1 75.1 76.1 77.1 78.1 78.2 79.1 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 87.2 88.1 88.2 88.3 89.1 89.2 89.3 89.4 90.1 91.1 92.1 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 105.1 106.1 107.1 108.1 109.1 110.1 111.1 112.1 113.1 114.1
The protection and security of your personal data, sensitive (special categories) personal data and non- personal data are important to SynoInt. Therefore, SynoInt is committed to respecting and protecting the privacy of each data subject. Data subjects trust us with their personal information and we are responsible for ensuring that we work every day to justify that trust. Below is information how SynoInt works in the area of privacy, how complies with the General data protection regulation and other applicable international and local legal acts, what essential information data subjects must know using SynoInt platforms, solutions, systems, services and websites. Definitions No. 1 “SynoInt group of companies” / “SynoInt” means and consists of: “SynoInt systems and platforms” means all the SynoInt systems and platforms and services which are provided by the SynoInt, such as SynoPanel, SynoTool, SynoScore, SynoAnswers, SynoAudience, SynoRewards, SynoLibrary, SynoManager, Surveyo24, SynoIndustry, etc. to data subjects such as clients, customers, purchasers, users, respondents, panellists, websites visitors, other parties and third-parties. “Services” means services of SynoInt systems and platforms which are provided by the SynoInt to data subjects. “Day” means any business day, which is not Saturday or Sunday or national holiday. Definitions No. 2 “Personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. “Special categories of personal data” means sensitive personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. “Non-personal data” means any information and data which not personal data is, and from which can not identify data subject. “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Data subject” means individual person whose personal data and special categories of personal data was processed / is processed / will be processed by data controller and / or data processor. “Data controller” means: “Data processor” means: Amazon (AWS) https://aws.amazon.com/ (server provider) Interneto vizija https://klientams.iv.lt/ (server provider) Cint https://www.cint.com/ (service provider) Google https://www.google.com/ (service provider) Microsoft https://www.microsoft.com/ (service provider) “Consent of the data subject” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. “Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. “General data protection regulation” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”). Information we collect Purposes for which we process information SynoInt processes personal data, sensitive (special categories) personal data and non-personal data for purposes of: Market and public opinion research; Costumers and consumers insights; Loyalty and rewards programs; Provide statistical information; Provide data collection, processing and reporting solutions; Submitting the best deals and get acquainted with SynoInt services; Administer and manage agreements, contracts, projects, other documents, services, etc.; Implementation the requirements and provisions of the legislation. Period of storage of information SynoInt stores your personal data, sensitive (special categories) personal data and non-personal data for no longer than it is required by the data processing goals or is stated in legal regulations if there is a longer data duration provisioned. We aim not to store outdated or irrelevant information and ensure that personal data and other information would be updated consistently and correctly. The term of data storage may be from 1 (one) to 10 (ten) years, unless the law specifies and / or is agreed otherwise. For example: SynoInt periodically reviews all stored data and makes sure that inaccurate or out-of-date data is not processed. Using children`s personal data SynoInt websites, services of SynoInt systems and platform and other services, are not untended for minors. SynoInt complies with General data protection regulation and also with Law on the legal protection of personal data of the Republic of Lithuania where indicated that persons under the age of 14 (fourteen) are considered to be minors. In view of this, SynoInt takes the position, that minors can not visiting in SynoInt websites and using SynoInt Services. SynoInt confirms that we do not collect information and data from / about data subjects who are minors. If there are any cases when children want to visit in SynoInt websites and use SynoInt services or other SynoInt activities, they have to submit consents and permissions from their parents and implement other requirements specified in the General data protection regulation and on the Law of the legal protection of personal data of the Republic of Lithuania. If we learn that a child under age 14 (fourteen) has improperly provided us with information, we will notify the child’s parent or legal guardian and thereafter delete the child’s personal information from our records. Legal grounds for using your personal data SynoInt will only use your personal data where we have a legal ground to do so. We determine the legal grounds based on the purposes for which we have collected and used your personal data. In every case, the legal ground will be one of the following: Principles of data processing SynoInt ensures that personal data, sensitive (special categories) personal data and non-personal data shall be: Implementation procedure of data subject rights SynoInt ensures that according to the General data protection regulation would be implemented all rights of data subjects: Right to be informed (General data protection regulation Art. Right to access (General data protection regulation Art. Right to rectification (General data protection regulation Art. Right to erasure (Right to be forgotten) (General data protection regulation Art. Right to restriction of processing (General data protection regulation Art. Notification obligation (General data protection regulation Art. Right to data portability (General data protection regulation Art. Right to object (General data protection regulation Art. Automated decision – making (General data protection regulation Art. If you would like to implement any of these rights, or if you think that we process incorrect personal data about you, or you have any other questions regarding your rights, please contact by e-mail data.protection@synoint.com. We will deal with your request within 30 days. If your request is complicated or if you have a large number of requests, it may take us longer. We will let you know if we need longer than 30 days to respond. If you ask us to delete your personal data or restrict how it is used, there may be exceptions to the right to erasure for specific legal reasons which, if applicable, we will set out for you in response to your request. We also have to inform, that we need specific information from you to help us confirm your identity, so please fill in all required information about you and submit your request as clear and understandable as possible. If you are unable to resolve the issues with SynoInt and if SynoInt engagement or a lack there of worries you that this privacy report or legal regulations requirements are not being adhered to, you have the right to contact State data protection inspectorate of the Republic of Lithuania (supervisory authority) or other institutions which are responsible for the supervision and control of legal acts which regulate personal data protection and implementation of data subjects rights. Security of your personal data SynoInt has implemented appropriate technical and organisational controls to protect your personal data against unauthorised processing and against accidental loss, damage or destruction. But we must inform, that you are responsible for choosing a secure password when we ask you to set up a password to access parts of our sites, SynoInt systems and platforms. You should keep this password confidential and you should choose a password that you do not use on any other site. You should not share your password with anyone else, including anyone who works for us. Unfortunately, sending information via the internet is not completely secure. Although we will do our best to protect your personal data once with us. If you suspect that passwords has been compromised, please inform about this immediately by e-mail info@synoint.com and / or data.protection@synoint.com. We also ask you to read more about the SynoInt security in Security policy on https://www.synoint.com/security-policy/. International data transfers Data we collect may be transferred to, stored and processed in any country or territory where any of SynoInt company exist or or service / servres providers (data processors) are based or have facilities. While other countries or territories may not have the same standards of data protection, SynoInt will continue to protect personal data that we transfer in line with this privacy policy and other procedures by SynoInt. Whenever we transfer your personal data out of the European Economic Area (EEA), we ensure similar protection and put in place at least one of these safeguards: However, SynoInt informs you, that regardless of the fact that each SynoInt company is located in another country, your personal data can only be accessed by the SynoInt companies with which you have contracted, given permissions and consents, etc. Typically, such personal data transfers from one country to another are usually just in exceptional cases. In most cases, SynoInt only provide non-personal data to other countries. Who we share your personal data with Depending on where you live, we may share your personal data but just in exceptional cases. We do not share your personal data with other people or organisations that are not directly linked to us except under the following circumstances: Concepts and meanings of your consents In SynoInt systems and platforms and services, you can see the consents and permissions which we ask you to mark. In below we provide a broader and more detailed explanation of these consents and permissions: “I agree to the Privacy Policy, Security Policy, Cookies Policy, DPO, Quality documentation and Terms of Use” and “By clicking “Send” I agree to the Privacy Policy, Cookies Policy, DPO and Terms of Use and I confirm that before sending message with my personal data I have read all these documents“ means that you have read all these documents and you agree with that documents. “I agree to participate in surveys and other market research activities” means that you freely and indecently agree to provide your opinion, personal data, answers to various questions which we ask in surveys and questionnaires and you can get a reward for it. “I agree to the use of cookies for market research purposes” means you agree to get more special targeted and relevant surveys which should be more interesting for you. “I agree to the collection and / or sharing my mobile advertising identifiers or other identifiers” means you agree to help us analysing your information better, more detailed, clear understand your answers and provide better services. “I agree to the use of third-party cookies for market research purposes” means you agree to get more special targeted and relevant surveys which should be more interesting for you. “I agree to share my profile information with third-parties for market research purposes” means you agree to get more surveys from our partners, from other parties, and also it means that you will get more rewards for this. High probability because the profile data can be shared, then the surveys should be more relevant to you. “I agree to share my sensitive data for market research purposes” means you agree that in surveys could be questions about your special categories of personal data. In this case, also surveys would be more adapted for you and more informative for us. It is likely that you will receive more surveys that are relevant to you. “I agree to receive rewards for participation in surveys and other market research activities” means you agree that you can earn points by completing surveys or other easy tasks through our partners. Each survey or task earns you points for completing it, so you can decide how much you want to do and earn. The points earned can then be exchanged for different attractive rewards available from our partners. Chosen rewards will be sent to your registration e-mail. “I agree to get news and notifications about market research and other market research activities” means you agree to get information from us about our services, offers, suggestions, news and changes. Most of your consents can easily be revoked at any time by writing an email to data.protection@synoint.com (if it is related to the processing of your personal data) or info@synoint.com (if it is related to other goals), or you can easily revoke most of your consents in SynoInt systems and platforms by yourself. Data protection officers (DPO) We would like to inform that in adherence to the General Data protection regulation, SynoInt has been assigned the following Data protection officers: More you can read in Data protection officers on www.synoint.com/dpo. If you would like to contact SynoInt Data protection officers, you have questions related to the processing of your personal data, the protection of personal data, or other matters related to personal data, please contact by e-mail data.protection@synoint.com. Actual and useful links under this Privacy policy: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=LT https://www.e-tar.lt/portal/lt/legalAct/TAR.5368B592234C/VCRurdZydD https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en https://aws.amazon.com/privacy/ https://sutartys.iv.lt/preview/privatumo_politika.php https://www.cint.com/privacy-notice/ Applicable law and changes This Privacy policy is governed by the law of the Republic of Lithuania. Any dispute, controversy, disagreement or claim arising out of or in connection with the Privacy policy, as well as issues of the violation, termination or validity / invalidity hereof shall be settled by mutual negotiations. The main and always updated version of this Privacy policy is posted in English on www.synoint.com/legal. This Privacy policy might be used by the following sites: www.synoscore.com, www.synoanswers.com , www.synopanel.com, www.synorewards.com, www.surveyo24.com, www.synokorea.com, www.synojapan.com.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1
Pojmovi vezani uz Uredbu EU Opća uredba o zaštiti podataka Definicije GDPR (General Data Protection Regulation) Opća uredba o zaštiti podataka DPO (Data Protection Officer) Službenik za zaštitu podataka OSOBNI PODACI svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi ("ispitanik"); pojedinac čiji se identitet može utvrditi je osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca; OBRADA svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje; OGRANIČAVANJE OBRADE znači označavanje pohranjenih osobnih podataka s ciljem ograničavanja njihove obrade u budućnosti; IZRADA PROFILA svaki oblik automatizirane obrade osobnih podataka koji se sastoji od uporabe osobnih podataka za ocjenu određenih osobnih aspekata povezanih s pojedincem, posebno za analizu ili predviđanje aspekata u vezi s radnim učinkom, ekonomskim stanjem, zdravljem, osobnim sklonostima, interesima, pouzdanošću, ponašanjem, lokacijom ili kretanjem tog pojedinca; PSEUDONIMIZACIJA obrada osobnih podataka na način da se osobni podaci više ne mogu pripisati određenom ispitaniku bez uporabe dodatnih informacija, pod uvjetom da se takve dodatne informacije drže odvojeno te da podliježu tehničkim i organizacijskim mjerama kako bi se osiguralo da se osobni podaci ne mogu pripisati pojedincu čiji je identitet utvrđen ili se može utvrditi; SUSTAV POHRANE svaki strukturirani skup osobnih podataka dostupnih prema posebnim kriterijima, bilo da su centralizirani, decentralizirani ili raspršeni na funkcionalnoj ili zemljopisnoj osnovi; VODITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje samo ili zajedno s drugima određuje svrhe i sredstva obrade osobnih podataka; kada su svrhe i sredstva takve obrade utvrđeni pravom Unije ili pravom države članice, voditelj obrade ili posebni kriteriji za njegovo imenovanje mogu se predvidjeti pravom Unije ili pravom države članice; IZVRŠITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje obrađuje osobne podatke u ime voditelja obrade; PRIMATELJ fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo kojem se otkrivaju osobni podaci, neovisno o tome je li on treća strana. Međutim, tijela javne vlasti koja mogu primiti osobne podatke u okviru određene istrage u skladu s pravom Unije ili države članice ne smatraju se primateljima; obrada tih podataka koju obavljaju ta tijela javne vlasti mora biti u skladu s primjenjivim pravilima o zaštiti podataka prema svrhama obrade; TREĆA STRANA znači fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje nije ispitanik, voditelj obrade, izvršitelj obrade ni osobe koje su ovlaštene za obradu osobnih podataka pod izravnom nadležnošću voditelja obrade ili izvršitelja obrade; PRIVOLA ISPITANIKA svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose; POVREDA OSOBNIH PODATAKA kršenje sigurnosti koje dovodi do slučajnog ili nezakonitog uništenja, gubitka, izmjene, neovlaštenog otkrivanja ili pristupa osobnim podacima koji su preneseni, pohranjeni ili na drugi način obrađivani; GENETSKI PODACI osobni podaci koji se odnose na naslijeđena ili stečena genetska obilježja pojedinca koja daju jedinstvenu informaciju o fiziologiji ili zdravlju tog pojedinca, i koji su dobiveni osobito analizom biološkog uzorka dotičnog pojedinca; BIOMETRIJSKI PODACI osobni podaci dobiveni posebnom tehničkom obradom u vezi s fizičkim obilježjima, fiziološkim obilježjima ili obilježjima ponašanja pojedinca koja omogućuju ili potvrđuju jedinstvenu identifikaciju tog pojedinca, kao što su fotografije lica ili daktiloskopski podaci; PODACI KOJI SE ODNOSE NA ZDRAVLJE osobni podaci povezani s fizičkim ili mentalnim zdravljem pojedinca, uključujući pružanje zdravstvenih usluga, kojima se daju informacije o njegovu zdravstvenom statusu; GLAVNI POSLOVNI NASTAN (a) što se tiče voditelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, osim ako se odluke o svrhama i sredstvima obrade osobnih podataka donose u drugom poslovnom nastanu voditelja obrade u Uniji te je potonji poslovni nastan ovlašten provoditi takve odluke, u kojem se slučaju poslovni nastan u okviru kojeg se donose takve odluke treba smatrati glavnim poslovnim nastanom; (b) što se tiče izvršitelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, ili, ako izvršitelj obrade nema središnju upravu u Uniji, poslovni nastan izvršitelja obrade u Uniji u kojem se odvijaju glavne aktivnosti obrade u kontekstu aktivnosti poslovnog nastana izvršitelja obrade u mjeri u kojoj izvršitelj obrade podliježe posebnim obvezama u skladu s ovom Uredbom; PREDSTAVNIK fizička ili pravna osoba s poslovnim nastanom u Uniji koju je voditelj obrade ili izvršitelj obrade imenovao pisanim putem u skladu s Članak 27., a koja predstavlja voditelja obrade ili izvršitelja obrade u pogledu njihovih obveza na temelju ove Uredbe; PODUZEĆE fizička ili pravna osoba koja se bavi gospodarskom djelatnošću, bez obzira na pravni oblik te djelatnosti, uključujući partnerstva ili udruženja koja se redovno bave gospodarskom djelatnošću; GRUPA PODUZETNIKA poduzetnik u vladajućem položaju te njemu podređeni poduzetnici; OBVEZUJUĆA KORPORATIVNA PRAVILA politike zaštite osobnih podataka kojih se voditelj obrade ili izvršitelj obrade s poslovnim nastanom na državnom području države članice pridržava za prijenose ili skupove prijenosa osobnih podataka voditelju obrade ili izvršitelju obrade u jednoj ili više trećih zemalja unutar grupe poduzetnika ili grupe poduzeća koja se bave zajedničkom gospodarskom djelatnošću; , NADZORNO TIJELO neovisno tijelo javne vlasti koje je osnovala država članica u skladu s Članak 51.; PREDMETNO NADZORNO TIJELO nadzorno tijelo koje je povezano s obradom osobnih podataka zato što: (a) voditelj obrade ili izvršitelj obrade ima poslovni nastan na državnom području države članice tog nadzornog tijela; (b) obrada bitno utječe ili je izgledno da će bitno utjecati na ispitanike koji borave u državi članici tog nadzornog tijela; (c) podnesena je pritužba tom nadzornom tijelu. PREKOGRANIČNA OBRADA (a) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti poslovnih nastana u više od jedne države članice voditelja obrade ili izvršitelja obrade, a voditelj obrade ili izvršitelj obrade ima poslovni nastan u više od jedne države članice; (b) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti jedinog poslovnog nastana voditelja obrade ili izvršitelja obrade, ali koja bitno utječe ili je izgledno da će bitno utjecati na ispitanike u više od jedne države članice. RELEVANTNI I OBRAZLOŽENI PRIGOVOR prigovor na nacrt odluke kao i na to je li došlo do kršenja ove Uredbe, ili je li djelovanje predviđeno u vezi s voditeljem obrade ili izvršiteljem obrade u skladu s ovom Uredbom, koji jasno pokazuje važnost rizika koje predstavlja nacrt odluke u pogledu temeljnih prava i sloboda ispitanika i, ako je primjenjivo, slobodnog protoka osobnih podataka unutar Unije; USLUGA INFORMACIJSKOG DRUŠTVA usluga kako je definirana člankom 1. stavkom 1. točkom 2. Direktive 2015/1535 Europskog parlamenta i Vijeća (19); MEĐUNARODNA ORGANIZACIJA organizacija i njezina podređena tijela uređena međunarodnim javnim pravom ili bilo koje drugo tijelo koje su sporazumom ili na osnovi sporazuma osnovale dvije ili više zemalja.