http___www.unizg.hr_o-sveucilistu_dokumenti-i-javnost-informacija_sluzbenici-za-zastitu-osobnih-podataka__1.xml
1.1 2.1 3.1 3.2 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 43.2 43.3 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 59.2 60.1 61.1 62.1 63.1 63.2 64.1 65.1 65.2 65.3 66.1 67.1 68.1 69.1 70.1 71.1 72.1 73.1 73.2 74.1 75.1 76.1 76.2 76.3 77.1 78.1 79.1 79.2 79.3 80.1 81.1 82.1 83.1 84.1 85.1 86.1 87.1 88.1 89.1 89.2 90.1 91.1 91.2 92.1 92.2 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 100.2 101.1
Privacy Policy Introduction In connection with its administration and operation, LTP Group (“we”, “us”, “our”) collects and processes, in the role as data controller, personal data about (i) job applicants, (ii) website visitors, (iii) when you submit an inquiry to us by email and website and Social Media (eg. LinkedIn, Instagram etc.) and (iv) when you sign up to a newsletter. This privacy policy (the “Privacy Policy”) provides information which we are required by law to give about our processing of personal data. When visiting the LTP Group website or contacting LTP Group we will: • Respect your privacy and confidentiality, • Only record your personal details in the manner and for the purposes set out in this Privacy Policy; • Keep your personal details secure from unauthorized access, use or disclosure; • Not sell, rent, trade or otherwise knowingly share or provide your personal data to any third party except insofar as legally obliged to do so; and • Only use your information in accordance with the terms of the General Data Protection Regulation (EU) 2016/679 ("GDPR"). The purpose of collecting personal data The personal data that you submit to us through our website will be used for the purposes specified within this policy or on the relevant web pages of the website. We use your personal data to: • Administer and personalise our website and business for you • Enable you to use the services available on our website • Send you non-marketing communications • Send you emails that you have requested or that are automatically sent by an action you undertook on our website • Send any email marketing or newsletter, only if you have consented to it (you can either unsubscribe from this or contact us at any time if you do not want to be sent these communications) • Send you normal or marketing communications relating to our business, that may be of interest to you, this can be via post or any other technology that you the user has consented to (you can contact us at any time if you do not want to be sent these communications) • We can provide third parties with analytical or statistical information about our website use or users (these third parties will not be able to identify any individual from that data) • Prevent fraud and keep our website secure at all times • Be part of the job recruitment to the vacant/unsolicited position which you have applied to • Respond to any inquires you may submit to us Categories and types of personal data (i) Job applicants: The LTP Group will process the following personal data if you apply to a vacant/unsolicited position: • name, • contact details, • CV, • Application, • letter of recommendation(s) (if applicable), • references (contact details), • educational papers, Our legal basis for processing this data is GDPR Article 6(1)(f) as we have a legitimate interest in processing personal data about you for recruiting purposes. (ii) Website visitors: The LTP Group will process the following personal data if you consent to our cookies: • browser type, • operating system, • access times, • information about your computer and your visits to our website, • information about your name, business phone number, business e-mail, business address, and company, • information you provide to us when signing up/subscribing to our newsletter or specific contact forms, • information you provide to us when using any of our services on our website The LTP Group website uses cookies to customize web page content. Cookies are small electronic files which a website can transfer to a user’s hard drive to identify a user and personalise their use of that website. Please refer to our Cookie Policy for more information about how we use cookies. Any information that is collected indirectly is used by LTP Group only to monitor the volume, type and pattern of traffic towards, and usage of the LTP Group websites and to develop the design and layout of the website. Our legal basis for processing this data is GDPR Article 6(1)(f) as we have a legitimate interest in optimizing our website, customize the experience for you and securing the website. (iii) Inquiries: The LTP Group will process the following personal data if you submit an inquiry to us: • full name, • email and other contact details, • information you would send to us as part of using our website or services, • information you send to us through our website relating to any communication with us. Our legal basis for processing this data is GDPR Article 6(1)(f) as we have a legitimate interest in responding to your inquiry. (iv) Newsletters: The LTP Group will process the following personal data if you sign up to a newsletter on our website: • full name, • role (job position), • company, • email address Our legal basis for processing this data is GDPR Article 6(1)(a) as we obtain your consent prior to submitting a newsletter to you. Read more about your rights related to consent under “Controlling your personal data”. Sources The personal data are collected directly from you (job applicant/newsletter sign up/inquires) and/or your device though cookies when using our website. Controlling your personal data When we collect personal data directly from you, you either provide us with the personal data on a voluntary basis or in order for us to comply with the law. Whether or not you are under an obligation to provide us with such personal data will depend on the specific circumstances. The consequence of not providing us with the personal data mentioned above will be that we cannot pursue the specific purposes set out above, which for example means that we cannot fulfill the specific purpose – to which we would have processed your personal data - as set out above. You have the right to withdraw your consent without any consequences for you. It is voluntary whether you provide us with your consent. However, if you withdraw your consent, the withdrawal will not affect any processing based on your consent given before the withdrawal. We will not sell, distribute or lease your personal data to third parties unless we have your permission or are required by law to do so. Storage period As to other personal data, we store them for as long as it is necessary to fulfil the purposes set out in this Privacy Policy and: • With the extent we are required to do so by law; • If we believe that the documents may be relevant to any ongoing or prospective legal proceedings; or • In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk); or • To be able to document our right to process the personal data and compliance with data protection legislation and any other relevant legislation. For job applicants, we store the data you have submitted for six (6) months. If we wish to storage the data for a longer period of time, we will obtain your consent prior hereto. Disclosure of personal data If you are a job applicant we will - in some instances - disclose your name, address and mobile number to our recruitment partner who assists us with the recruitment. If you are a contact person to one of our customers we will – in some instances – disclose your name, email address, mobile number and work position to our subsidiary in Vietnam. The purpose of the disclosure is solely for the company in Vietnam to be able to contact you regarding your potential or placed orders. Our legal basis for transfer of personal data to Vietnam is the European Standard Contractual Clauses and the required supplementary measures. We may also disclose your name and email address to a consultant company when we use consultants for e.g. customer surveys and insurance companies, Further, we use data processors to e.g. data hosting and it-support. The data that we collect from you is stored within the EU or European Economic Area (“EEA”). However, it may also be transferred to and processed in countries outside of the EU/EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws, which entails that we will ensure a legal transfer basis and an adequate level of protection, for example, by entering into the EU Standard Contractual Clauses and potential supplementary measures. Security of your personal data We will take reasonable technical and organizational precautions to prevent the loss, misuse or alteration of your personal data. Your rights Subject to the applicable restrictions in the Danish Data Protection Act and General Data Protection Regulation, you have the following rights: - The right of access to personal data - The right to rectification of inaccurate and inadequate personal data - The right to erasure of personal data - The right to restriction of processing of personal data - The right to data portability You also have a right to submit a complaint to the competent supervisory authority, including the Danish Data Protection Agency. Please find their contact details here. The right to object You have the right to object – on grounds relating to your particular situation – to processing of personal data where the legal basis for our processing is legitimate interests, as stated above. If you exercise your right to object, LTP Group may no longer process your personal data unless LTP Group demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. You also have the right at any time to object to the processing of your personal data for marketing purposes, which includes the right to object to profiling in so far as it relates to direct marketing. If you object to LTP Group processing for the purpose of direct marketing, your personal data may no longer be processed for this purpose. You can contact us to update any personal data we hold about you that would need updating. Details Please contact us if you have any questions about the processing of your personal data or how to exercise your rights: LTP Group A/S Registration Number: DK17974246 Registered Address: Bryghuspladsen 8C, 1473 København K, Denmark Privacy Policy Updates LTP Group reserves the right to periodically update or modify this Privacy Policy. Any changes to this Privacy Policy will be posted on the LTP Group website. This policy is effective from 20/01/2021
1.1 2.1 2.2 3.1 3.2 3.3 4.1 5.1 6.1 6.2 7.1 8.1 8.2 8.3 8.4 9.1 10.1 10.2 10.3 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 20.2 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 28.1 29.1 29.2 30.1 31.1
Obavijest o obradi osobnih podataka Zaštita osobnih podatka pojedinca utvrđena je člankom 37. Ustava Republike Hrvatske (NN 85/10 – pročišćeni tekst), Općom uredbom o zaštiti podataka (EU, 2016/679) i Zakonom o provedbi Opće uredbe o zaštiti podataka (NN, 42/2018). Sveučilište u Zagrebu brine za sigurnost Vaših osobnih podataka i zaštitu osobnih podataka svih ispitanika shvaća vrlo ozbiljno. Osobni podaci su svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi („ispitanik“). Ovom obaviješću želimo Vas upoznati s našim sigurnosnim mjerama kako biste znali koje podatke pohranjujemo i kako ih koristimo. Temeljna načela i prakse zaštite podataka Zakonitost, poštenost i transparentnost Osobne podatke naših studenata, zaposlenika, vanjskih suradnika i drugih osoba s kojima smo povezani u obavljanju svoje djelatnosti obrađivat ćemo samo na temelju zakonske obveze, Vaše privole ili druge legitimne osnove. Podaci koji se odnose na Vas na transparentan će se način prikupljati, upotrebljavati, dati na uvid ili na neki drugi način obrađivati, te su javno objavljeni rokovi i svrhe obrade podataka, podaci o identitetu voditelja obrade, informacija o načinu na koji možete pristupiti svojim podacima, procesu za podnošenje pritužbi i zahtjeva za ažuriranje podataka. Ograničavanje svrhe Vaši osobni podaci prikupljat će se u posebne, izričite i zakonite svrhe i neće se dalje obrađivati na način koji nije u skladu s tim svrhama. Vaše osobne podatke prikupljati ćemo i pohranjivati u svrhu izvršenja zakonskih obveza, ispunjenja obveza od javnog interesa, izvršavanja javnih ovlasti i ugovora. Podaci koji su prikupljeni za jednu svrhu neće se koristiti ni za jednu drugu svrhu ili na način koji nije u skladu s odobrenom svrhom. Za svrhu obrade koja se ne provodi temeljem zakonske osnove ili ugovora tražit ćemo od Vas posebnu privolu. Smanjenje količine podataka Osobni podaci koje prikupljamo su primjereni, bitni i ograničeni na svrhu obrade. Sveučilište prikuplja i obrađuje osobne podatke u mjeri u kojoj je to potrebno za ispunjenje Zakonom i drugim propisima utvrđenih obveza redovite djelatnosti Sveučilišta, te sukladno Zakonu o znanstvenoj djelatnosti i visokom obrazovanju i drugim propisima koje primjenjujemo u svom radu. Voditelj obrade i izvršitelj obrade neće prikupljati osobne podatke koji mu nisu potrebni za svrhu obrade. Točnost i integritet podataka Nužno je da osobni podaci koje prikupljamo i spremamo budu točni i ažurni i zato ćemo poduzeti svaku razumnu mjeru kako bismo osigurali da se osobni podaci koji nisu točni, uzimajući u obzir svrhe u koje se obrađuju, bez odlaganja izbrišu ili isprave. Ograničenje pohrane Rokovi čuvanja Vaših osobnih podataka određeni su pozitivnim zakonskim propisima i internim aktima Sveučilišta u Zagrebu ili Vašom suglasnošću za prikupljanje i obradu osobnih podataka. Cjelovitost i povjerljivost Kako bi zaštitila osobne podatke ispitanika, Sveučilište u Zagrebu poduzima sve odgovarajuće mjere zaštite koje su u skladu s primjenjivim propisima o zaštiti privatnosti i osobnih podataka te su osigurane sve razumne tehničke, fizičke i organizacijske mjere za zaštitu osobnih podataka ispitanika od neovlaštene ili nezakonite obrade, uništenja, slučajnog gubitka, štete, izmjene, neovlaštenog odavanja ili pristupa te od svih ostalih oblika nezakonite i/ili pretjerane obrade Vodit ćemo nadzor nad pristupom, korištenjem i održavanjem osobnih podataka, te ćemo kontinuirano unapređivati naše sigurnosne mjere sukladno tehnološkim mogućnostima. Postupanje u slučaju povrede osobnih podataka U slučaju povrede osobnih podataka, Sveučilište u Zagrebu će kao voditelj obrade osobnih podataka, bez nepotrebnog odgađanja i ukoliko je izvedivo, u roku od 72 sata nakon saznanja o povredi osobnih podataka ispitanika izvijestiti Agenciju za zaštitu osobnih podataka. Ostvarivanje prava ispitanika Svaki ispitanik ima pravo u svakom trenutku od voditelja obrade zatražiti pristup svojim osobnim podacima, njihov ispravak, brisanje ili ograničavanje njihove obrade kao i pravo na prigovor Agenciji za zaštitu osobnih podataka te pravo na prenosivost podataka. Navedena prava ostvaruju se podnošenjem zahtjeva na e-mail adresu Službenika za zaštitu osobnih podataka Sveučilišta u Zagrebu. e-mail: gdpr@ unizg.hr Dokumenti i obrasci: Obrazac za pristup, promjenu, dopunu, prigovor, ograničenje prikupljanja osobnih podatka Obrazac za brisanje osobnih podataka Službenici za zaštitu osobnih podataka Uredba (EU) 2016/679 Europskog parlamenta i Vijeća od 27. travnja 2016. o zaštiti pojedinaca u vezi s obradom osobnih podataka i o slobodnom kretanju takvih podataka – Opća uredba o zaštiti podataka – GDPR (General Data Protection Regulation) izravno se primjenjuje u Republici Hrvatskoj od 25. svibnja 2018. godine. Uredba određuje koja su prava pojedinaca, a u skladu s tim i koje su obveze subjekata koji obrađuju osobne podatke poput voditelja obrade odnosno izvršitelja obrade. Neke od obveza subjekata su obrada osobnih podataka ako je građanin dao privolu ili radi izvršavanja zadaći temeljem drugih zakonskih propisa, obrada podataka prema načelima obrade navedenih u Uredbi, zatim informacije koje subjekt daje građaninu prije same obrade njegovih osobnih podataka te uspostava evidencija o vođenju obrade osobnih podataka. Općom uredbom o zaštiti osobnih podataka definiraju se i obveze službenika za zaštitu osobnih podataka, koje imenuje voditelj obrade, koji o imenovanju službenika pisano obavještava Agenciju za zaštitu osobnih podataka. Temeljem članka 38. Opće uredbe o zaštiti podataka, rektor Sveučilišta u Zagrebu, kao voditelj obrade osobnih podataka, imenovao je sljedeće službenike za zaštitu osobnih podataka: Imenovane službenice možete kontaktirati putem e-adrese: gdpr@ unizg.hr Navedeni tekst u obliku zasebnog dokumenta možete preuzeti ovdje.