http___www.uredba.com_pojmovi-vezani-uz-uredbu_1.xml
1.1 2.1 3.1 3.2 3.3 4.1 5.1 6.1 7.1 8.1 8.2 8.3 9.1 9.2 9.3 10.1 11.1 11.2 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 22.2 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 30.2 30.3 31.1 31.2 32.1 33.1 34.1 36.1 37.1 38.1 38.2 39.1 40.1 41.1 41.2 41.3 41.4 41.5 42.1 42.2 43.1 44.1
The company BROLEX d.o.o., established at Buje, Momjanska Ulica 2, VAT No.: 99214387010 (BROLEX in further text), in running its business needs to collect and use certain personal data. This policy has been written and implemented to assure that BROLEX operates in accordance with its legal, organizational and technical obligations regarding the protection of personal data. All BROLEX's employees are fully informed of the contents of this Policy. They assure its application when handling and processing personal data. The employees whose tasks include handling and processing personal data have been properly trained on their duties regarding protection of personal data. This Policy applies to all personal data stored by BROLEX, relating to any natural person, regardless of her relation to the business, whether she is, she was or she might become a client, a supplier or a contact-person. This Policy has been implemented to prevent potential damages to BROLEX and its employees and subjects as well as to assure that processing of personal data be fully aligned with the applicable laws and other regulations. ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction as well as any application of logical, mathematical and other operations on such data. BROLEX collects and processes personal data mostly for providing services within the scope of its business. That is why BROLEX needs to collect and process certain categories of data about persons whom it has contact with (subjects). BROLEX handles these personal information in appropriate manner, regardless of whether the data are obtained, recorded, stored and used in a paper copy, on a computer or any other media. When giving her data to BROLEX, the subject consents that BROLEX process her personal data in accordance with the declared purpose. Subject’s data privacy is permanently protected. At any moment, subject can exercise her rights, as listed and explained below. BROLEX gathers and processes subject's personal data in accordance with the Law on the Protection of Personal Data (OJ 103/03, 118/06, 41/08, 130/11, 106/12), other applicable Croatian regulations, the European Directive 95/46/EC and the General Data Protection Regulation (GDPR), (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016). BROLEX stores the collected data appropriately and assures their confidentiality. BROLEX shall not forward collected data to third parties without a subject’s consent, except when it may be needed to fulfill BROLEX’s legal obligations, when it is necessary to fulfill tasks of public interests or when the subject herself has made these data publicly available and/or in other cases when it is imposed by applicable regulations. Regarding her personal data processed by BROLEX, subjects have the following rights. At any moment, data subject have right to demand information whether her personal data are being processed and for what purposes, who is the data controller, the contact-data of the Data protection officer, which categories of personal data are being processed, who or what is the source of her personal data, who are receivers of her personal data and the right to information about her other rights listed in this Policy (right to access, right to rectification, right to deletion, right to restriction and other). Every data subject has right to ask and obtain from BROLEX a confirmation if personal data related to her are being processed, obtain access to these data and to the information on: - the purposes of the processing; - the categories of personal data being processed; - the recipients or the categories of recipients to whom the personal data have been or will be disclosed; - where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from BROLEX rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; - the right to lodge a complaint with a supervisory authority; - where the personal data are not collected from the data subject, any available information as to their source; - existence of an automated decision-making, including profiling and its consequences. The data subject shall have the right to obtain from BROLEX without undue delay the rectification of inaccurate personal data concerning him or her. The data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. Data subject have the right to have his or her personal data erased and no longer processed where the personal data are no longer necessary in relation to the purposes for which they are collected or otherwise processed, where a data subject has withdrawn his or her consent and there is no other legal basis for processing of these data, if the data have been unlawfully processed, if the data need to be erased to comply with the applicable Union law or national regulation of the member state having jurisdiction over BROLEX, if the data have been collected in relation to the information society services. This is not applied if the data processing is necessary (and to the necessary extent) in order to exercise the right of freedom of expression and information, for compliance with a legal obligation which requires processing by Union or Member State law to which the BROLEX is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in BROLEX, for reasons of public interest in the area of public health, for archiving purposes in the public interest, scientific or historical research purposes, for the establishment, exercise or defense of legal claims. The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him including profiling where the processing of the personal data is necessary for the performance of a task carried out in the public interest or in the exercise of legitimate BROLEX's or third parties interest. BROLEX shall no longer process the personal data unless BROLEX demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. The data subject has the right to receive the personal data concerning him or her, which he or she has provided to BROLEX, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from BROLEX if data processing is based on his or her consent and the data are being automatically processed. Where technically feasible and when it does not impair other people's rights and freedoms, the data subject has the right to have the personal data transmitted directly from BROLEX to another. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her except if it is necessary for entering into, or performance of, a contract between the data subject and BROLEX, when expressly authorized by Union or Member State law to which the BROLEX is subject or it is based on the subject’s express consent. The subject's consent is one of legal basis for processing the data concerning a data subject. The data subject has the right to withdraw his or her consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Data subject has the right to demand restriction of processing of his or her personal data if he or she contests the accuracy of the personal data, for a period enabling BROLEX to verify the accuracy of the personal data; if his or her data have been unlawfully processed and he or she does not demand deletion, but only restriction of processing; if BROLEX does not need his or her data any more, but it needs they exist to exercise or execute its legal claims. If he or she objected to processing of his or her personal data, the subject has the right to demand restriction of processing for the period needed to establish whether the BROLEX's legitimate grounds of the controller override his or her rights from his or her objection. To exercise his or her rights, the data subject should contact the Data Protection Officer, by sending a written notice or a request to the BROLEX's Data Protection Officer, by e-mail, using the e-mail address he or she obtained from BROLEX, or by street mail to the address: Momjanska ulica 2, Buje, i.e. to the physical address of BROLEX LLC under condition that I request the exercise of my rights by an e-mail to the above mentioned address or submitting a written personal notice personally announced before by phone to the number +385 91 4772410, and identifying myself with a valid personal ID. BROLEX has designated its Data Protection Officer: Luka Perhat e-mail adresa: pivnica@brolex.com All inquiries regarding the protection of personal data should be addressed to the Data Protection Officer BROLEX acknowledges the importance of lawful and proper handling of personal data, so it makes its best efforts to assure that personal data are treated lawfully and properly. With this in mind, BROLEX fully accepts and complies with the principles of Data Protection. The general data protection principles require that data: BROLEX does: BROLEX can publish, on their web site, the contents of the cookies used to advertise and produce statistics of web traffic based on interests and information from the web page visitors from social networks. If a data subject uses a BROLEX’s social network or application content, a cookie from these sites or application could be stored on a subject’s device used to access the BROLEX’s web page. Visitors have right to disable the cookies. Web browsers are usually set so that they accept cookies by default, but the data subjects can easily change this setting in their browsers. If a data subject wants to limit or block all cookies including BROLEX 's web sites and applications (which can be prevent the use of some parts of these web sites) or other web sites or applications, the subject can do it in his or her web browser settings. When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, BROLEX shall communicate the personal data breach to the data subject without undue delay unless BROLEX has implemented appropriate technical and organizational protection measures, and those measures were applied to the personal data affected by the personal data breach, in particular those that render the personal data unintelligible to any person who is not authorized to access it, or unless BROLEX has taken subsequent measures which ensure that the high risk to the rights and freedoms of data subjects is no longer likely to materialize or if it would involve disproportionate effort. In this, latest case, BROLEX will use public communication or a similar measure to assure that the data subjects be informed in an equally efficient way. BROLEX reserves its right to update this Policy as deemed necessary to maintain the best practices and to assure its compliance to any changes or amendments regarding the protection of personal data. Download consent
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1
Pojmovi vezani uz Uredbu EU Opća uredba o zaštiti podataka Definicije GDPR (General Data Protection Regulation) Opća uredba o zaštiti podataka DPO (Data Protection Officer) Službenik za zaštitu podataka OSOBNI PODACI svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi ("ispitanik"); pojedinac čiji se identitet može utvrditi je osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca; OBRADA svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje; OGRANIČAVANJE OBRADE znači označavanje pohranjenih osobnih podataka s ciljem ograničavanja njihove obrade u budućnosti; IZRADA PROFILA svaki oblik automatizirane obrade osobnih podataka koji se sastoji od uporabe osobnih podataka za ocjenu određenih osobnih aspekata povezanih s pojedincem, posebno za analizu ili predviđanje aspekata u vezi s radnim učinkom, ekonomskim stanjem, zdravljem, osobnim sklonostima, interesima, pouzdanošću, ponašanjem, lokacijom ili kretanjem tog pojedinca; PSEUDONIMIZACIJA obrada osobnih podataka na način da se osobni podaci više ne mogu pripisati određenom ispitaniku bez uporabe dodatnih informacija, pod uvjetom da se takve dodatne informacije drže odvojeno te da podliježu tehničkim i organizacijskim mjerama kako bi se osiguralo da se osobni podaci ne mogu pripisati pojedincu čiji je identitet utvrđen ili se može utvrditi; SUSTAV POHRANE svaki strukturirani skup osobnih podataka dostupnih prema posebnim kriterijima, bilo da su centralizirani, decentralizirani ili raspršeni na funkcionalnoj ili zemljopisnoj osnovi; VODITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje samo ili zajedno s drugima određuje svrhe i sredstva obrade osobnih podataka; kada su svrhe i sredstva takve obrade utvrđeni pravom Unije ili pravom države članice, voditelj obrade ili posebni kriteriji za njegovo imenovanje mogu se predvidjeti pravom Unije ili pravom države članice; IZVRŠITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje obrađuje osobne podatke u ime voditelja obrade; PRIMATELJ fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo kojem se otkrivaju osobni podaci, neovisno o tome je li on treća strana. Međutim, tijela javne vlasti koja mogu primiti osobne podatke u okviru određene istrage u skladu s pravom Unije ili države članice ne smatraju se primateljima; obrada tih podataka koju obavljaju ta tijela javne vlasti mora biti u skladu s primjenjivim pravilima o zaštiti podataka prema svrhama obrade; TREĆA STRANA znači fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje nije ispitanik, voditelj obrade, izvršitelj obrade ni osobe koje su ovlaštene za obradu osobnih podataka pod izravnom nadležnošću voditelja obrade ili izvršitelja obrade; PRIVOLA ISPITANIKA svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose; POVREDA OSOBNIH PODATAKA kršenje sigurnosti koje dovodi do slučajnog ili nezakonitog uništenja, gubitka, izmjene, neovlaštenog otkrivanja ili pristupa osobnim podacima koji su preneseni, pohranjeni ili na drugi način obrađivani; GENETSKI PODACI osobni podaci koji se odnose na naslijeđena ili stečena genetska obilježja pojedinca koja daju jedinstvenu informaciju o fiziologiji ili zdravlju tog pojedinca, i koji su dobiveni osobito analizom biološkog uzorka dotičnog pojedinca; BIOMETRIJSKI PODACI osobni podaci dobiveni posebnom tehničkom obradom u vezi s fizičkim obilježjima, fiziološkim obilježjima ili obilježjima ponašanja pojedinca koja omogućuju ili potvrđuju jedinstvenu identifikaciju tog pojedinca, kao što su fotografije lica ili daktiloskopski podaci; PODACI KOJI SE ODNOSE NA ZDRAVLJE osobni podaci povezani s fizičkim ili mentalnim zdravljem pojedinca, uključujući pružanje zdravstvenih usluga, kojima se daju informacije o njegovu zdravstvenom statusu; GLAVNI POSLOVNI NASTAN (a) što se tiče voditelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, osim ako se odluke o svrhama i sredstvima obrade osobnih podataka donose u drugom poslovnom nastanu voditelja obrade u Uniji te je potonji poslovni nastan ovlašten provoditi takve odluke, u kojem se slučaju poslovni nastan u okviru kojeg se donose takve odluke treba smatrati glavnim poslovnim nastanom; (b) što se tiče izvršitelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, ili, ako izvršitelj obrade nema središnju upravu u Uniji, poslovni nastan izvršitelja obrade u Uniji u kojem se odvijaju glavne aktivnosti obrade u kontekstu aktivnosti poslovnog nastana izvršitelja obrade u mjeri u kojoj izvršitelj obrade podliježe posebnim obvezama u skladu s ovom Uredbom; PREDSTAVNIK fizička ili pravna osoba s poslovnim nastanom u Uniji koju je voditelj obrade ili izvršitelj obrade imenovao pisanim putem u skladu s Članak 27., a koja predstavlja voditelja obrade ili izvršitelja obrade u pogledu njihovih obveza na temelju ove Uredbe; PODUZEĆE fizička ili pravna osoba koja se bavi gospodarskom djelatnošću, bez obzira na pravni oblik te djelatnosti, uključujući partnerstva ili udruženja koja se redovno bave gospodarskom djelatnošću; GRUPA PODUZETNIKA poduzetnik u vladajućem položaju te njemu podređeni poduzetnici; OBVEZUJUĆA KORPORATIVNA PRAVILA politike zaštite osobnih podataka kojih se voditelj obrade ili izvršitelj obrade s poslovnim nastanom na državnom području države članice pridržava za prijenose ili skupove prijenosa osobnih podataka voditelju obrade ili izvršitelju obrade u jednoj ili više trećih zemalja unutar grupe poduzetnika ili grupe poduzeća koja se bave zajedničkom gospodarskom djelatnošću; , NADZORNO TIJELO neovisno tijelo javne vlasti koje je osnovala država članica u skladu s Članak 51.; PREDMETNO NADZORNO TIJELO nadzorno tijelo koje je povezano s obradom osobnih podataka zato što: (a) voditelj obrade ili izvršitelj obrade ima poslovni nastan na državnom području države članice tog nadzornog tijela; (b) obrada bitno utječe ili je izgledno da će bitno utjecati na ispitanike koji borave u državi članici tog nadzornog tijela; (c) podnesena je pritužba tom nadzornom tijelu. PREKOGRANIČNA OBRADA (a) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti poslovnih nastana u više od jedne države članice voditelja obrade ili izvršitelja obrade, a voditelj obrade ili izvršitelj obrade ima poslovni nastan u više od jedne države članice; (b) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti jedinog poslovnog nastana voditelja obrade ili izvršitelja obrade, ali koja bitno utječe ili je izgledno da će bitno utjecati na ispitanike u više od jedne države članice. RELEVANTNI I OBRAZLOŽENI PRIGOVOR prigovor na nacrt odluke kao i na to je li došlo do kršenja ove Uredbe, ili je li djelovanje predviđeno u vezi s voditeljem obrade ili izvršiteljem obrade u skladu s ovom Uredbom, koji jasno pokazuje važnost rizika koje predstavlja nacrt odluke u pogledu temeljnih prava i sloboda ispitanika i, ako je primjenjivo, slobodnog protoka osobnih podataka unutar Unije; USLUGA INFORMACIJSKOG DRUŠTVA usluga kako je definirana člankom 1. stavkom 1. točkom 2. Direktive 2015/1535 Europskog parlamenta i Vijeća (19); MEĐUNARODNA ORGANIZACIJA organizacija i njezina podređena tijela uređena međunarodnim javnim pravom ili bilo koje drugo tijelo koje su sporazumom ili na osnovi sporazuma osnovale dvije ili više zemalja.