http___www.unizg.hr_o-sveucilistu_dokumenti-i-javnost-informacija_sluzbenici-za-zastitu-osobnih-podataka__1.xml
1.1 2.1 3.1 4.1 4.2 5.1 5.2 6.1 7.1 8.1 9.1 10.1 10.2 11.1 12.1 12.2 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 21.2 21.3 21.4 22.1 22.2 23.1 24.1 25.1 26.1 27.1 28.1 28.2 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 46.2 46.3 46.4 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1
Personal Data Processing and Protection Policy If you would like to receive information about the personal data we collect about you, please contact the Data Protection Officer: oou@newton.university, or visit us in person at: - NEWTON University, Rašínova 2, Brno - NEWTON University, 5. května 1640/65, Praha At NEWTON University (Vysoká škola NEWTON, a. s.), we treat the protection of personal data with high priority. Here, we provide you with information about what personal data is collected within our university, how it is handled, from what sources it is obtained, for what purposes it is used, to whom it is provided, where it is possible to obtain information about the personal data processed and what measures are taken to secure your personal data. Method and duration of processing of personal data - We process personal data in accordance with the legislation governing the protection of personal data, including Regulation 2016/679 of the European Parliament and of the (EU) Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. - We keep records of all personal data processed and are the controller of such data. - We collect and process personal data for specific, explicitly expressed lawful purposes, where the provision of our services is subject to the processing of personal data, or on the basis of the consent of the natural person, where consent to processing may be refused or withdrawn at any time. - We collect personally identifiable information that enables the identification of the natural person, contact personal data for communication and other specifying information related to the services provided and the activities of the company. Contact data means, in particular, the indicated address, telephone number, e-mail address and other specifying information. - Information on the personal data processed is provided in the consent or information on the processing of personal data. - We process personal data for the period of time specified by law in the case of lawful processing, for the period defined by the legitimate interest or for the period of validity of the consent granted. At the end of the processing period, we will dispose of it by erasure and shredding. Where and how we obtain your personal data - From you on the basis of admission to study and during your studies. - When dealing with you at our events; on our website, where you can fill in your contact details with the informed consent you have provided for the processing of your personal data. For what purposes we process personal data - We process personal data in the context of your studies at our university and to ensure that we carry out all activities required to comply with our legal obligations. - For our internal use, to protect our rights and legally protected interests, to improve the quality and efficiency of the services we provide during your studies. - For other purposes, such as expanding the portfolio of products and services we provide; to inform you about new services, provide you with information about our college, and notify you of news and events. How we protect personal data - Our processing of personal data is governed by our Data Protection Enforcement Methodology. Specific steps and processes for organisational and technical security are set out. The guidelines and procedures for the protection of personal data are regularly updated and their implementation is under constant control. In processing, we use security mechanisms to ensure the protection of personal data at the highest possible level against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or unauthorised access to, personal data transmitted, stored or otherwise processed. - Employees and persons who handle personal data in the course of their work or contractual duties are bound by the confidentiality obligations imposed by legislation or contractual relationship. The confidentiality obligation continues after the end of their employment or contractual relationship with us. To whom we pass on personal data - To public authorities and public authorities in the performance of their legal duties. - To other entities, only on your instruction or with your consent. - We always require recipients to ensure the security and protection of personal data with regard to the rights of the data subject. How we process personal data on the basis of consent - In the case of processing based on informed consent, you are always free to decide whether to grant, restrict or refuse your consent to the extent proposed by us. We are bound by the scope of the consent provided; - You may withdraw the consent you have given at any time; the contacts for withdrawing consent are set out in the following paragraph. - In the event of refusal to grant consent or withdrawal of consent already granted, we will terminate the processing of the personal data concerned without undue delay, subject to technical and organizational feasibility; - Consent to the processing of personal data can be given again at any time. How to request the rights fulfilment and your rights in personal data processing - All contact details, procedures on how to exercise the right of access and make a request are set out below. - You have the opportunity to exercise your rights as follows: - By email: oou@newton.university - In person at the reception desk of our company at the following addresses: NEWTON University, Rašínova 2, Brno, NEWTON University, 5.května 1640/65, Praha - By data box: 6kdfd3p - By mail at the following address: NEWTON University, a.s., Rašínova 2, Brno The right of access - Upon your request, we provide information about the personal data we keep and process about you. - We will prepare and without undue delay provide you with the information in the agreed manner requested, so as to ensure the protection of your rights. Right to data portability - Upon your request, we will prepare the personal data you provide in a structured, commonly used and machine-readable format. - We will transmit this data in a secure manner to you or to another data controller you designate. Correction of personal data held - In order to properly provide our services, it is necessary to have correct and accurate personal information. It is important that you notify us of any changes to your personal information. If we are notified of a change, we will promptly make a correction to our records. If, during processing, we discover through our own activity that the personal data is not true or up-to-date, we will invite you to correct it and, failing confirmation, we will delete the data. Procedure for objection, restriction of processing, withdrawal of consent and other requests - You have the opportunity at any time to object to the processing of personal data, withdraw consent, request a change in the scope of consent, submit a request for restriction of processing or make a query or request in the area of data processing and data protection, as follows: - By email: oou@newton.university - In person at the reception desk of our company at the following addresses: NEWTON University, Rašínova 2, Brno, NEWTON University, 5.května 1640/65, Praha - By data box: 6kdfd3p - By mail at the following address: NEWTON University, a.s., Rašínova 2, Brno - You can contact the Office for Personal Data Protection directly with an objection or complaint. Information about the principles of personal data processing - The Personal Data Processing and Protection Policy is published here on the NEWTON University website in a public form. - You are made aware of the Data Protection Policy when you submit your personal data as part of the admissions process and are actively made aware of it by our staff at our public events. Downloads: Form: Data Subject Rights Request Fulfilment Form: Data Breach Report
1.1 2.1 2.2 3.1 3.2 3.3 4.1 5.1 6.1 6.2 7.1 8.1 8.2 8.3 8.4 9.1 10.1 10.2 10.3 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 29.2 30.1 31.1
Obavijest o obradi osobnih podataka Zaštita osobnih podatka pojedinca utvrđena je člankom 37. Ustava Republike Hrvatske (NN 85/10 – pročišćeni tekst), Općom uredbom o zaštiti podataka (EU, 2016/679) i Zakonom o provedbi Opće uredbe o zaštiti podataka (NN, 42/2018). Sveučilište u Zagrebu brine za sigurnost Vaših osobnih podataka i zaštitu osobnih podataka svih ispitanika shvaća vrlo ozbiljno. Osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi („ispitanik“). Ovom obaviješću želimo Vas upoznati s našim sigurnosnim mjerama kako biste znali koje podatke pohranjujemo i kako ih koristimo. Temeljna načela i prakse zaštite podataka Zakonitost, poštenost i transparentnost Osobne podatke naših studenata, zaposlenika, vanjskih suradnika i drugih osoba s kojima smo povezani u obavljanju svoje djelatnosti obrađivat ćemo samo na temelju zakonske obveze, Vaše privole ili druge legitimne osnove. Podaci koji se odnose na Vas na transparentan će se način prikupljati, upotrebljavati, dati na uvid ili na neki drugi način obrađivati, te su javno objavljeni rokovi i svrhe obrade podataka, podaci o identitetu voditelja obrade, informacija o načinu na koji možete pristupiti svojim podacima, procesu za podnošenje pritužbi i zahtjeva za ažuriranje podataka. Ograničavanje svrhe Vaši osobni podaci prikupljat će se u posebne, izričite i zakonite svrhe i neće se dalje obrađivati na način koji nije u skladu s tim svrhama. Vaše osobne podatke prikupljati ćemo i pohranjivati u svrhu izvršenja zakonskih obveza, ispunjenja obveza od javnog interesa, izvršavanja javnih ovlasti i ugovora. Podaci koji su prikupljeni za jednu svrhu neće se koristiti ni za jednu drugu svrhu ili na način koji nije u skladu s odobrenom svrhom. Za svrhu obrade koja se ne provodi temeljem zakonske osnove ili ugovora tražit ćemo od Vas posebnu privolu. Smanjenje količine podataka Osobni podaci koje prikupljamo su primjereni, bitni i ograničeni na svrhu obrade. Sveučilište prikuplja i obrađuje osobne podatke u mjeri u kojoj je to potrebno za ispunjenje Zakonom i drugim propisima utvrđenih obveza redovite djelatnosti Sveučilišta, te sukladno Zakonu o znanstvenoj djelatnosti i visokom obrazovanju i drugim propisima koje primjenjujemo u svom radu. Voditelj obrade i izvršitelj obrade neće prikupljati osobne podatke koji mu nisu potrebni za svrhu obrade. Točnost i integritet podataka Nužno je da osobni podaci koje prikupljamo i spremamo budu točni i ažurni i zato ćemo poduzeti svaku razumnu mjeru kako bismo osigurali da se osobni podaci koji nisu točni, uzimajući u obzir svrhe u koje se obrađuju, bez odlaganja izbrišu ili isprave. Ograničenje pohrane Rokovi čuvanja Vaših osobnih podataka određeni su pozitivnim zakonskim propisima i internim aktima Sveučilišta u Zagrebu ili Vašom suglasnošću za prikupljanje i obradu osobnih podataka. Cjelovitost i povjerljivost Kako bi zaštitila osobne podatke ispitanika, Sveučilište u Zagrebu poduzima sve odgovarajuće mjere zaštite koje su u skladu s primjenjivim propisima o zaštiti privatnosti i osobnih podataka te su osigurane sve razumne tehničke, fizičke i organizacijske mjere za zaštitu osobnih podataka ispitanika od neovlaštene ili nezakonite obrade, uništenja, slučajnog gubitka, štete, izmjene, neovlaštenog odavanja ili pristupa te od svih ostalih oblika nezakonite i/ili pretjerane obrade Vodit ćemo nadzor nad pristupom, korištenjem i održavanjem osobnih podataka, te ćemo kontinuirano unapređivati naše sigurnosne mjere sukladno tehnološkim mogućnostima. Postupanje u slučaju povrede osobnih podataka U slučaju povrede osobnih podataka, Sveučilište u Zagrebu će kao voditelj obrade osobnih podataka, bez nepotrebnog odgađanja i ukoliko je izvedivo, u roku od 72 sata nakon saznanja o povredi osobnih podataka ispitanika izvijestiti Agenciju za zaštitu osobnih podataka. Ostvarivanje prava ispitanika Svaki ispitanik ima pravo u svakom trenutku od voditelja obrade zatražiti pristup svojim osobnim podacima, njihov ispravak, brisanje ili ograničavanje njihove obrade kao i pravo na prigovor Agenciji za zaštitu osobnih podataka te pravo na prenosivost podataka. Navedena prava ostvaruju se podnošenjem zahtjeva na e-mail adresu Službenika za zaštitu osobnih podataka Sveučilišta u Zagrebu. e-mail: gdpr@ unizg.hr Dokumenti i obrasci: Obrazac za pristup, promjenu, dopunu, prigovor, ograničenje prikupljanja osobnih podatka Obrazac za brisanje osobnih podataka Službenici za zaštitu osobnih podataka Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka – Opća uredba o zaštiti podataka – GDPR (General Data Protection Regulation) izravno se primjenjuje u Republici Hrvatskoj od 25. svibnja 2018. godine. Uredba određuje koja su prava pojedinaca, a u skladu s tim i koje su obveze subjekata koji obrađuju osobne podatke poput voditelja obrade odnosno izvršitelja obrade. Neke od obveza subjekata su obrada osobnih podataka ako je građanin dao privolu ili radi izvršavanja zadaći temeljem drugih zakonskih propisa, obrada podataka prema načelima obrade navedenih u Uredbi, zatim informacije koje subjekt daje građaninu prije same obrade njegovih osobnih podataka te uspostava evidencija o vođenju obrade osobnih podataka. Općom uredbom o zaštiti osobnih podataka definiraju se i obveze službenika za zaštitu osobnih podataka, koje imenuje voditelj obrade, koji o imenovanju službenika pisano obavještava Agenciju za zaštitu osobnih podataka. Temeljem članka 38. Opće uredbe o zaštiti podataka, rektor Sveučilišta u Zagrebu, kao voditelj obrade osobnih podataka, imenovao je sljedeće službenike za zaštitu osobnih podataka: Imenovane službenice možete kontaktirati putem e-adrese: gdpr@ unizg.hr Navedeni tekst u obliku zasebnog dokumenta možete preuzeti ovdje.