http___www.uredba.com_pojmovi-vezani-uz-uredbu_1.xml
1.1 1.2 2.1 2.2 3.1 4.1 5.1 6.1 7.1 8.1 8.2 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 19.2 20.1 21.1 22.1 23.1 24.1 25.1 26.1 27.1 27.2 27.3 28.1 28.2 28.3 28.4 28.5 28.6 29.1 29.2 30.1 30.2 30.3 30.4 31.1 31.2 32.1 33.1 34.1 35.1 36.1 36.2 37.1 37.2 38.1 39.1 40.1 40.2 40.3 41.1 41.2 42.1 43.1 43.2 43.3 44.1 44.2 44.3 45.1 45.2 45.3 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 57.2 57.3 58.1 59.1 60.1 60.2 61.1 62.1 62.2 62.3 63.1 63.2 64.1 65.1 65.2 65.3 66.1 67.1 68.1 69.1 70.1
UAB Syno International and its subsidiaries (hereinafter – “SynoInt”) your and other data subjects personal data protection is important. Therefore, we are committed to respecting and protecting the privacy of each data subject. Data subjects trust us with their personal information and we are responsible for ensuring that we work every day to justify that trust. This Privacy Policy contains essential information about the processing of personal data by SynoInt, the storage of these data and the rights of the data subjects. Key terms Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing; Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data; Data subject means a person whose personal data is processed; Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her; The group of companies means a controlling company, UAB Syno International and its controlled subsidiaries. Special categories of personal data means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation SynoInt systems and platforms means all SynoInt systems and platforms which belong to SynoInt, such as Syno Panel, Syno Tool, Syno Score, Syno Answers, Syno Media Panel, Syno Rewards, Syno Library, Surveyo24 etc. in which data subjects must register and provide personal data that is managed by the group of companies. Personal data Lawfulness of personal data processing SynoInt collects and processes your personal data only on the basis of legal bases defined by legal acts regulating personal data protection: • With your consent; • In order to conclude and (or) execute an agreement with you. Purposes of personal data processing SynoInt processes personal data for purposes of market and public opinion research and consumer insights. Furthermore, SynoInt processes personal data for purposes of loyalty programs when data subjects use Syno Rewards as one of SynoInt systems and platforms. Personal data processing SynoInt processes the following data: • with your consent, the personal data you submit when registering in the SynoInt systems and platforms (this is basic information such as name, surname, email address, postal code, gender and etc.); • with your consent, personal data and special personal data that you submit in response to questionnaires (for example: country, region where you work, religion, racial origin, health (medicines, illness, disease intensity etc.); • personal data obtained when entering into a business (cooperation) agreement (name, surname, personal code, address etc.); • personal data from third parties, with the consent of the data subject for such data provision (for example: country, gender, travels and travels dates, type of work, shopping habits, political views etc.); • other data that are collected on your permission and are defined in detail at the time when you are asked for permission; • other data obtained in order to conclude and / or execute an agreement with you. Cookies Cookies are small text files that are stored by the browser (for example, Internet Explorer or Google Chrome) on your computer or mobile phone. They allow websites to store things like user preferences. You can think of cookies as providing a ‘memory’ for the website, so that it can recognize you when you come back and respond appropriately. This site, like many others, uses small files called cookies to help us customize your experience. We use cookies to learn more about the way you interact with our content and help us to improve your experience when visiting our website. Cookies remember the type of browser you use and which additional browser software you have installed. They also remember your preferences, such as language and region, which remain as your default settings when you revisit the website. Cookies also allow you to rate pages and fill in comment forms. Some of the cookies we use are session cookies and only last until you close your browser, others are persistent cookies which are stored on your computer for longer. We will not use cookies to collect personally identifiable information about you. However, should you wish to do so, you can choose to reject or block the cookies set by SynoInt or the websites of any third party suppliers by changing your browser settings. You can also visit www.allaboutcookies.org or www.google.com/privacy_ads.html for details on how to delete or reject cookies and for further information on cookies generally. For information on the use of cookies in mobile phone browsers and for details on how to reject or delete such cookies, please refer to your handset manual. Note, however, that if you reject the use of cookies you will still be able to visit our websites but some of the functions may not work correctly. If you need more information about cookies, please contact with us. The term of protection of personal data We store your personal data for no longer than the it is required by the data processing goals or is stated in legal regulations if there is a longer data storage duration provisioned. We aim not to store outdated or irrelevant information and ensure that personal data and other information about the clients would be updated consistently and correctly. Personal data sharing SynoInt can provide your data if: • your consent (permission) has been granted to defined data recipients; • your consent (permission) has been granted, UAB Syno International may provide data to subsidiary companies and viceversa, subsidiary companies may provide data to UAB Syno International; • your permission has been granted, UAB Syno International may provide data to other third parties in specific cases. Children SynoInt is committed to protecting the privacy of children. This website and SynoInt systems and platforms services are not intended for minors. No information should be submitted to our website by users under the age of 13, and we do not collect information from any user we have reason to believe is a child under the age of 13. If there are any cases when children want and must participate in surveys or in other SynoInt activities, they have to submit consents and permissions from their parents. Measures to protect personal data SynoInt activities on the internet meet the appropriate internet activity-related requirements of international regulations, European Union regulations and the Republic of Lithuania regulations. The EU General Data Protection Regulation 2016/679 (GDPR) When processing data subjects’ personal data, SynoInt adheres to GDPR provisions and has implemented appropriate organizational and technical personal data security measures which help to protect personal data from coincidental or unlawful data destruction, editing, revealing as well as from any other unlawful processing. In addition, UAB Syno International is officially registered in Lithuanian State Register of Personal Data Controllers as Personal Data Controller. UAB Syno International identification number is P8178. Personal data controller – UAB Syno International, a private limited civil liability company incorporated and operating pursuant to the legal acts of the Republic of Lithuania under legal entity code 302748928, with the registered office address at Vilniaus str. 35, LT-01119, Vilnius, the Republic of Lithuania. Personal data processors, recipients and other personal data controllers – UAB Syno International subsidiaries (Offices in London, South Korea, Tokyo, Singapore and etc. Data protection officers (DPO) We would like to inform that in adherence to the General Data Protection Regulation, UAB Syno International has been assigned the following data protection officers: UAB Syno International, lawyer, Liudvikas Augutis. Contact information: phone numbers: +3706 28 44 662 and +3706 44 311 44, e-mail: liudvikas.augutis@synoint.com and UAB Syno International, Senior IT Systems Developer, Mindaugas Liubinas. Contact information: phone number: +3706 44 311 44, e-mail: mindaugas.liubinas@synoint.com. We would like to explain that data protection officers assist in ensuring that the requirements of the General Data Protection Regulations are met. They also take part in all personal data security related questions and consult in the field of personal data security. If you have any questions or issues regarding data security assurance, please use the contacts listed above or write us an e-mail to info@syno-int.com. Measures SynoInt is implemented technical and organisational measures to safeguard the security of the personal data and information and SynoInt is responsible that the security requirements constitute appropriate measures to protect the personal data as required by applicable legislation. SynoInt ensures that systems, applications, network components, and other computing devices are protected from malicious activity by implementing the appropriate controls such as anti-virus, firewalls, and intrusion prevention systems. Synoint ensures passwords protection: • All passwords are classified as confidential information; • Passwords are not transferred or shared with others; • If the customer / client / data subject / third party suspects their password has been compromised, the incident should be reported to info@syno-int.com and the password is changed immediately. Implementation procedure of data subject rights You have the right to: • Contact SynoInt with a request to provide information regarding your personal data which is processed by SynoInt (“the right to know” and “the right of access”); • Contact SynoInt with a request to correct or destroy your personal data when you determine that the data is incorrect or incomprehensive (“the right to correct and destroy”); • Contact SynoInt with a request to terminate your personal data processing if you determine that personal data is being processed unlawfully or unfairly (“the right to terminate”); • Contact SynoInt with a request to disagree that your personal data would continue to be processed (“the right to disagree”); • Contact SynoInt with a request to limit your personal data processing if personal data processing is unlawful (“The right to limit”); • Contact SynoInt with a request to delete your data when your personal data is being processed unlawfully or personal data is no longer required by the collection or other processing goals (“The right to be forgotten”); • Contact SynoInt with a request to receive information about personal data processed by SynoInt and to receive data in a normally used format which the computer can recognize (“The right to data transferability”). In the process of these rights implementation, you may contact SynoInt in your preferred method: In writing – Vilniaus street 35, Vilnius, 01119, Lithuania. E-mail: info@syno-int.com; liudvikas.augutis@synoint.com; mindaugas.lubinas@synoint.com; Verbally by phone: +3706 44 31 144. If you are unable to resolve the issues with SynoInt and if SynoInt engagement or a lack thereof worries you that this privacy report or legal regulations requirements are not being adhered to, you have the right to contact State Data Protection Inspectorate or other institutions which are responsible for the supervision and control of legal acts which regulate personal data protection. Other important information Copyright laws All information provided in the SynoInt web page, texts and other content is protected by the Copyright laws. No one has the right to copy information on the SynoInt webpage without the consent of SynoInt, except cases when the information is used for personal reasons. Links SynoInt web page contains links to other individual, company or organization webpages, however SynoInt is not responsible for the content of these web pages or their privacy and security assurance methods. Mobile Most mobile devices provide users with the ability to disable location services. Most likely, these controls are located in the device’s settings menu. If you have questions about how to disable your device’s location services, we recommend you contact your mobile service carrier or your device manufacturer. Servers All SynoInt data and information is stored on servers and systems located in the EU. All servers and systems are licensed. Web page usage By using the services of Syno International, the client agrees that he or she has read the Privacy Policy of SynoInt and does not disagree. Privacy report news As our activities and services expand, we may need to update this Privacy report. Due to this reason we recommend that you periodically visit our web page in which you will always find an up-to-date version of this Privacy report. This Privacy Policy is also used by the following sites: • www.synoscore.com; • www.synoanswers.com; • www.synopanel.com; • www.synorewards.com; • www.syno-int.com.
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1
Pojmovi vezani uz Uredbu EU Opća uredba o zaštiti podataka Definicije GDPR (General Data Protection Regulation) Opća uredba o zaštiti podataka DPO (Data Protection Officer) Službenik za zaštitu podataka OSOBNI PODACI svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi ("ispitanik"); pojedinac čiji se identitet može utvrditi je osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca; OBRADA svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje; OGRANIČAVANJE OBRADE znači označavanje pohranjenih osobnih podataka s ciljem ograničavanja njihove obrade u budućnosti; IZRADA PROFILA svaki oblik automatizirane obrade osobnih podataka koji se sastoji od uporabe osobnih podataka za ocjenu određenih osobnih aspekata povezanih s pojedincem, posebno za analizu ili predviđanje aspekata u vezi s radnim učinkom, ekonomskim stanjem, zdravljem, osobnim sklonostima, interesima, pouzdanošću, ponašanjem, lokacijom ili kretanjem tog pojedinca; PSEUDONIMIZACIJA obrada osobnih podataka na način da se osobni podaci više ne mogu pripisati određenom ispitaniku bez uporabe dodatnih informacija, pod uvjetom da se takve dodatne informacije drže odvojeno te da podliježu tehničkim i organizacijskim mjerama kako bi se osiguralo da se osobni podaci ne mogu pripisati pojedincu čiji je identitet utvrđen ili se može utvrditi; SUSTAV POHRANE svaki strukturirani skup osobnih podataka dostupnih prema posebnim kriterijima, bilo da su centralizirani, decentralizirani ili raspršeni na funkcionalnoj ili zemljopisnoj osnovi; VODITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje samo ili zajedno s drugima određuje svrhe i sredstva obrade osobnih podataka; kada su svrhe i sredstva takve obrade utvrđeni pravom Unije ili pravom države članice, voditelj obrade ili posebni kriteriji za njegovo imenovanje mogu se predvidjeti pravom Unije ili pravom države članice; IZVRŠITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje obrađuje osobne podatke u ime voditelja obrade; PRIMATELJ fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo kojem se otkrivaju osobni podaci, neovisno o tome je li on treća strana. Međutim, tijela javne vlasti koja mogu primiti osobne podatke u okviru određene istrage u skladu s pravom Unije ili države članice ne smatraju se primateljima; obrada tih podataka koju obavljaju ta tijela javne vlasti mora biti u skladu s primjenjivim pravilima o zaštiti podataka prema svrhama obrade; TREĆA STRANA znači fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje nije ispitanik, voditelj obrade, izvršitelj obrade ni osobe koje su ovlaštene za obradu osobnih podataka pod izravnom nadležnošću voditelja obrade ili izvršitelja obrade; PRIVOLA ISPITANIKA svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose; POVREDA OSOBNIH PODATAKA kršenje sigurnosti koje dovodi do slučajnog ili nezakonitog uništenja, gubitka, izmjene, neovlaštenog otkrivanja ili pristupa osobnim podacima koji su preneseni, pohranjeni ili na drugi način obrađivani; GENETSKI PODACI osobni podaci koji se odnose na naslijeđena ili stečena genetska obilježja pojedinca koja daju jedinstvenu informaciju o fiziologiji ili zdravlju tog pojedinca, i koji su dobiveni osobito analizom biološkog uzorka dotičnog pojedinca; BIOMETRIJSKI PODACI osobni podaci dobiveni posebnom tehničkom obradom u vezi s fizičkim obilježjima, fiziološkim obilježjima ili obilježjima ponašanja pojedinca koja omogućuju ili potvrđuju jedinstvenu identifikaciju tog pojedinca, kao što su fotografije lica ili daktiloskopski podaci; PODACI KOJI SE ODNOSE NA ZDRAVLJE osobni podaci povezani s fizičkim ili mentalnim zdravljem pojedinca, uključujući pružanje zdravstvenih usluga, kojima se daju informacije o njegovu zdravstvenom statusu; GLAVNI POSLOVNI NASTAN (a) što se tiče voditelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, osim ako se odluke o svrhama i sredstvima obrade osobnih podataka donose u drugom poslovnom nastanu voditelja obrade u Uniji te je potonji poslovni nastan ovlašten provoditi takve odluke, u kojem se slučaju poslovni nastan u okviru kojeg se donose takve odluke treba smatrati glavnim poslovnim nastanom; (b) što se tiče izvršitelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, ili, ako izvršitelj obrade nema središnju upravu u Uniji, poslovni nastan izvršitelja obrade u Uniji u kojem se odvijaju glavne aktivnosti obrade u kontekstu aktivnosti poslovnog nastana izvršitelja obrade u mjeri u kojoj izvršitelj obrade podliježe posebnim obvezama u skladu s ovom Uredbom; PREDSTAVNIK fizička ili pravna osoba s poslovnim nastanom u Uniji koju je voditelj obrade ili izvršitelj obrade imenovao pisanim putem u skladu s Članak 27., a koja predstavlja voditelja obrade ili izvršitelja obrade u pogledu njihovih obveza na temelju ove Uredbe; PODUZEĆE fizička ili pravna osoba koja se bavi gospodarskom djelatnošću, bez obzira na pravni oblik te djelatnosti, uključujući partnerstva ili udruženja koja se redovno bave gospodarskom djelatnošću; GRUPA PODUZETNIKA poduzetnik u vladajućem položaju te njemu podređeni poduzetnici; OBVEZUJUĆA KORPORATIVNA PRAVILA politike zaštite osobnih podataka kojih se voditelj obrade ili izvršitelj obrade s poslovnim nastanom na državnom području države članice pridržava za prijenose ili skupove prijenosa osobnih podataka voditelju obrade ili izvršitelju obrade u jednoj ili više trećih zemalja unutar grupe poduzetnika ili grupe poduzeća koja se bave zajedničkom gospodarskom djelatnošću; , NADZORNO TIJELO neovisno tijelo javne vlasti koje je osnovala država članica u skladu s Članak 51.; PREDMETNO NADZORNO TIJELO nadzorno tijelo koje je povezano s obradom osobnih podataka zato što: (a) voditelj obrade ili izvršitelj obrade ima poslovni nastan na državnom području države članice tog nadzornog tijela; (b) obrada bitno utječe ili je izgledno da će bitno utjecati na ispitanike koji borave u državi članici tog nadzornog tijela; (c) podnesena je pritužba tom nadzornom tijelu. PREKOGRANIČNA OBRADA (a) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti poslovnih nastana u više od jedne države članice voditelja obrade ili izvršitelja obrade, a voditelj obrade ili izvršitelj obrade ima poslovni nastan u više od jedne države članice; (b) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti jedinog poslovnog nastana voditelja obrade ili izvršitelja obrade, ali koja bitno utječe ili je izgledno da će bitno utjecati na ispitanike u više od jedne države članice. RELEVANTNI I OBRAZLOŽENI PRIGOVOR prigovor na nacrt odluke kao i na to je li došlo do kršenja ove Uredbe, ili je li djelovanje predviđeno u vezi s voditeljem obrade ili izvršiteljem obrade u skladu s ovom Uredbom, koji jasno pokazuje važnost rizika koje predstavlja nacrt odluke u pogledu temeljnih prava i sloboda ispitanika i, ako je primjenjivo, slobodnog protoka osobnih podataka unutar Unije; USLUGA INFORMACIJSKOG DRUŠTVA usluga kako je definirana člankom 1. stavkom 1. točkom 2. Direktive 2015/1535 Europskog parlamenta i Vijeća (19); MEĐUNARODNA ORGANIZACIJA organizacija i njezina podređena tijela uređena međunarodnim javnim pravom ili bilo koje drugo tijelo koje su sporazumom ili na osnovi sporazuma osnovale dvije ili više zemalja.