http___www.uredba.com_pojmovi-vezani-uz-uredbu_1.xml
1.1 2.1 3.1 4.1 5.1 6.1 7.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 19.2 19.3 20.1 21.1 22.1 23.1 24.1 24.2 25.1 26.1 27.1 28.1 29.1 30.1 31.1 31.2 32.1 33.1 34.1 35.1 36.1 37.1 37.2 37.3 37.4 37.5 38.1 39.1 39.2 40.1 41.1 42.1 43.1 44.1 44.2 45.1 46.1 46.2 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 58.2 58.3 58.4 58.5 58.6 58.7 58.8 58.9 58.10 58.11 59.1 59.2 60.1 60.2 60.3 61.1 61.2 62.1 63.1 64.1 65.1 66.1 67.1 67.2 67.3 67.4 67.5 67.6 67.7 67.8 67.9 67.10 67.11 68.1 68.2 69.1 69.2 69.3 70.1 70.2 71.1 72.1 72.2 73.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 81.1 82.1 83.1 83.2 83.3 83.4 84.1 85.1 85.2 85.3 85.4 85.5 86.1 87.1 88.1 88.2 89.1 90.1 90.2 90.3 91.1 92.1 93.1 94.1 94.2 94.3 95.1 96.1 96.2 97.1 98.1 98.2 99.1 100.1 100.2 101.1 101.2 102.1 102.2 102.3 102.4 103.1 104.1 105.1 106.1 106.2 107.1 108.1 109.1 109.2 110.1 110.2 111.1 112.1 112.2 113.1 113.2 114.1 115.1 116.1 117.1 118.1 119.1 120.1
Data protection regulations in the version valid as of 25.05.18 Data protection declaration Responsible person: Attorney Dominik Fischer Lise-Meitner-Straße 1-3 42219 Wuppertal Germany Contact e-mail: info@direktkanzlei.de Data Protection Officer: Data Protection Officer E-Mail: datenschutz@direktkanzlei.de (hereinafter referred to as provider) Scope of application to the users of the direktkanzlei.de.website. With the following declaration we inform you about the nature, the extent and the purposes of the collection, processing and use of your data in connection with the visit of our website. Overview The provider stores and processes your personal data in compliance with the relevant data protection regulations, in particular the Basic Data Protection Ordinance (GDPR), Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). The provider observes the principle of data minimization. This means that data will be processed only to the extent necessary for the purposes of processing, as is appropriate and necessary to provide a functional website and with regard to the content and services offered. The processing is carried out either on the basis of prior consent or if this is permitted by legal regulations. When you access the provider's website, the provider processes certain usage data in order to enable you to use his offer. All processed personal data will be deleted by the provider after expiry of the storage period. You have a right of access to your data or to correction, deletion and restriction of the processing of your data, a right of objection to the processing, a right of data transferability and a right of appeal to a supervisory authority. Further information can be found below. Data protection information according to Art. 13, 14 GDPR and §§ 32 ff. 1 Definitions Personal Information Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Inventory data Inventory data means personal data of a user which are necessary for the establishment, content design or change of a contractual relationship between the service provider and the user about the use of telemedia. usage data Usage data are personal data of a user, which are necessary to enable and invoice the use of telemedia. This includes in particular features to identify the user, information about the beginning and end as well as the extent of the respective use and information about the telemedia used by the user. Processing Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the collection, recording, organisation, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, alignment or combination, restriction, erasure or destruction. Pseudonymisation Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not assigned to an identified or identifiable natural person; Cookies Cookies are small text files that are stored on your computer. Cookies always have a validity period, which can be limited to the end of the user session (so-called session cookies) or also exist for a longer period of time (so-called permanent cookies). These permanent cookies remain on your computer and enable the provider or his partner companies (so-called third party cookies) to recognize your computer during your next visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or refuse the setting of cookies in certain cases or in general. If cookies are not accepted, the functionality of the website may be restricted. Website A website, also a web presence, is the presence of a private or corporate provider of telemedia on the worldwide web (World Wide Web) - summarized under a certain Internet address. The website includes websites and/or sub-pages and optionally available downloadable documents as well as other downloadable audiovisual media services. description and scope of the processing of your data In this section we inform you about the purposes for which the personal data are to be processed and the legal basis for the processing. The provider publishes information about his association, the association services such as his offers for child day care, the events and informs about his educational and advisory concepts via the websites. Processing affecting the entire website The provider processes the data provided by you in order to enable you to use this website. More detailed explanations can be found in the following remarks. Processing in case of sending e-mails You can contact the provider via the e-mail addresses provided on the website. The provider processes the data provided by you to answer your contact request. Data collection (inventory data) - First and last name - Company - Street - ZIP - City - Country - Phone - Telefax - E-Mail In the case of sending an e-mail, only the aforementioned inventory data will be processed if you inform the provider of this. The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR, if you have given your consent to the provider, and also Art. 6 para. 1 lit. f GDPR. If the purpose of the establishment of contact is the initiation of a contract, Art. 6 para. 1 lit. b GDPR is also a legal basis for data processing. Data provided by you will be deleted immediately after your request has been dealt with, in the event that it has not been dealt with within 12 months of the last contact at the latest. The request is settled when the circumstances indicate that the facts in question have been finally clarified. You have the possibility at any time to revoke your consent to the processing of personal data or to object to the processing of data which is not based on a consent. The exercise of the revocation or objection can take place in particular by e-mail to the above-mentioned contact e-mail address. All personal data that the provider has stored in the course of contacting you will be deleted in this case. Your right of revocation does not refer in principle to such data, which the supplier needs in the context of the fulfilment of a contract or of pre-contractual measures. However, you may have additional rights. Processing in case of use of the contact form The provider has a contact form ready for you to send an electronic message to the provider. Data collection (inventory data) - Name - E-Mail The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR, if you have given your consent to the provider, and also Art. 6 para. 1 lit. f GDPR. If the purpose of the establishment of contact is the initiation of a contract, Art. 6 para. 1 lit. b GDPR is also a legal basis for data processing. Data provided by you will be deleted immediately after your request has been dealt with, in the event that it has not been dealt with within 12 months of the last contact at the latest. The request is settled when the circumstances indicate that the facts in question have been finally clarified. You have the possibility at any time to revoke your consent to the processing of personal data or to object to the processing of data which is not based on a consent. The exercise of the revocation or objection can take place in particular by e-mail to the above-mentioned contact e-mail address. All personal data that the provider has stored in the course of contacting you will be deleted in this case. Your right of revocation does not refer in principle to such data, which the supplier needs in the context of the fulfilment of a contract or of pre-contractual measures. You may, however, have further rights which entitle you to the deletion of your data. Log data processing When accessing the provider's website, your Internet browser automatically transmits certain data to the provider's server for technical reasons. The following data is collected separately from other data that you may transmit to the provider and used by the provider for the aforementioned purposes: Data collection (usage data) - Name of the accessed website or the url - date and time of retrieval - Access status / Http status code - the amount of data transferred in each case - Website through which the request is sent - Browser software and software version - Operating system and version - IP address (anonymized, shortened by the last 3 digits) - randomly generated key number of the cookie or session. The legal basis for the storage of data and log files is Art. 6 para. 1 lit. f GDPR. If the data is stored in log files, the usage data will be deleted after 7 days at the latest. Further storage is possible in accordance with the provisions of data protection law. In this case, the IP addresses are deleted or alienated so that it is no longer possible to assign the Internet page access to your computer. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. However, you can exercise your right of objection by means of automated procedures in which technical specifications are used, e.g. in the case of anonymization of your IP address by VPN providers. Existence of appropriate safeguards Pseudonymisation If the provider collects usage data, he always stores these under pseudonyms (in the case of cookies, e.g. using a unique session key). The provider does not combine pseudonymous data with data about the bearer of the pseudonym (e.g. inventory data). Use of encryption technologies When transferring data between your computer or mobile device and the provider's server, the provider uses the SSL security system (Secure Socket Layer). This technology is designed to protect your data from being read by unauthorized third parties and offers a very high security standard. You can tell that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser. Further processing for other purposes Unless otherwise stated above, your data will not be passed on to third parties and will not be processed for purposes other than those mentioned. rights of the persons concerned You have a right of access to the personal data concerning you, as well as to correction or deletion or to limitation of the processing or to a right of objection against the processing, the right to data transferability and the right of appeal to a supervisory authority in accordance with the following description. In the cases of §§ 32 ff. BDSG 2018, however, these claims only exist to the extent provided for under BDSG 2018. Your right to information You have the right to ask the provider to confirm whether personal data concerning you will be processed. If this is the case, you have a right to information about these personal data and to the following information: the processing purposes; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations; where possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration; the existence of a right to have the personal data concerning them rectified or erased or to have their processing restricted by the controller or a right of opposition to such processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from the data subject, all available information on the origin of the data; the existence of automated decision-making including profiling (in accordance with Article 22(1) and (4) GDPR) and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing for the data subject. Right to correction You have the right to request the provider to correct any incorrect personal data concerning you without delay. You have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - if this is compatible with the above-mentioned purposes of processing or if there is a factual reason for this. Right to cancellation You have the right to request the provider to delete personal data concerning you immediately. We are obliged to delete personal data immediately if one of the following reasons applies: The personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws his consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing; the data subject objects to the processing in accordance with Article 21(1) GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing in accordance with Article 21(2) GDPR; the personal data have been processed unlawfully; the deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject; the personal data have been collected in relation to information society services provided in accordance with Article 8(1) GDPR (consent of a child in relation to information society services). If we have made the personal data public and we are obliged to delete them, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data processors who process the personal data that a data subject has requested us to delete all links to this personal data or copies or replications of this personal data. You have a claim for cancellation in accordance with Art. 17 para. 3 GDPR. You do not have a claim for cancellation to the extent that the processing is necessary for the exercise of the right to freedom of expression and information; for the performance of a legal obligation required for processing under the law of the Union or the Member States to which the controller is subject, or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller; on grounds of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR; for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, where the law referred to in paragraph 1 is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing, or for the enforcement, pursuit or defence of claims. Right to restriction of processing You have the right to request us to restrict processing if one of the following conditions is met: the accuracy of the personal data is disputed by the data subject for a period which allows the controller to verify the accuracy of the personal data; the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted; the data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the purpose of asserting, exercising or defending rights, or the data subject has lodged an objection to the processing referred to in Article 21(1) until it has been established whether the data controller's legitimate reasons outweigh those of the data subject. Where processing has been restricted, such personal data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. If you have obtained a restriction on processing, you will be informed by us before the restriction is lifted. Right to data portability You have the right to receive the personal data concerning you which you have provided to a controller in a structured, current and machine-readable format and you have the right to transmit this data to another controller without hindrance by us or the controller to whom the personal data have been provided, provided that the processing is based on a consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out using automated procedures. In exercising your right to data transferability under paragraph 1, you have the right to have the personal data transferred directly from one controller to another controller, where technically feasible. This right must not prejudice the rights and freedoms of others. The exercise of the right to data transferability is without prejudice to Article 17 GDPR (Right to erasure (“right to be forgotten”). This right shall not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller. Right of opposition against the processing They have the right to object at any time to the processing of personal data concerning them on the basis of Article 6(1)(e) (performance of a task necessary in the public interest) or (f) (protection of the legitimate interests of the controller or a third party) GDPR for reasons arising from their particular situation, including profiling based on these provisions. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. At the latest at the time of the first communication with you, we must expressly point out your right of objection to the processing described above; this information must be provided in an understandable form separate from other information. In connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, you may exercise your right of opposition by means of automated procedures (e.g. by pressing "no-tracing" functions on the telephone, by changing browser settings) using technical specifications. You have the right to object on grounds arising from your particular situation to the processing of personal data concerning you, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, unless such processing is necessary for the performance of a task in the public interest. Right of appeal to a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed this Regulation, if you believe that the processing of personal data concerning you is contrary to it. The supervisory authority to which the complaint has been lodged shall inform you, as the complainant, of the status and the results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. --- End of privacy policy ---
1.1 2.1 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 26.1 27.1 28.1 29.1 30.1 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 54.1 55.1 56.1 57.1 58.1 59.1 60.1 61.1 62.1 62.2 63.1 64.1
Pojmovi vezani uz Uredbu EU Opća uredba o zaštiti podataka Definicije GDPR (General Data Protection Regulation) Opća uredba o zaštiti podataka DPO (Data Protection Officer) Službenik za zaštitu podataka OSOBNI PODACI svi podaci koji se odnose na pojedinca čiji je identitet utvrđen ili se može utvrditi ("ispitanik"); pojedinac čiji se identitet može utvrditi je osoba koja se može identificirati izravno ili neizravno, osobito uz pomoć identifikatora kao što su ime, identifikacijski broj, podaci o lokaciji, mrežni identifikator ili uz pomoć jednog ili više čimbenika svojstvenih za fizički, fiziološki, genetski, mentalni, ekonomski, kulturni ili socijalni identitet tog pojedinca; OBRADA svaki postupak ili skup postupaka koji se obavljaju na osobnim podacima ili na skupovima osobnih podataka, bilo automatiziranim bilo neautomatiziranim sredstvima kao što su prikupljanje, bilježenje, organizacija, strukturiranje, pohrana, prilagodba ili izmjena, pronalaženje, obavljanje uvida, uporaba, otkrivanje prijenosom, širenjem ili stavljanjem na raspolaganje na drugi način, usklađivanje ili kombiniranje, ograničavanje, brisanje ili uništavanje; OGRANIČAVANJE OBRADE znači označavanje pohranjenih osobnih podataka s ciljem ograničavanja njihove obrade u budućnosti; IZRADA PROFILA svaki oblik automatizirane obrade osobnih podataka koji se sastoji od uporabe osobnih podataka za ocjenu određenih osobnih aspekata povezanih s pojedincem, posebno za analizu ili predviđanje aspekata u vezi s radnim učinkom, ekonomskim stanjem, zdravljem, osobnim sklonostima, interesima, pouzdanošću, ponašanjem, lokacijom ili kretanjem tog pojedinca; PSEUDONIMIZACIJA obrada osobnih podataka na način da se osobni podaci više ne mogu pripisati određenom ispitaniku bez uporabe dodatnih informacija, pod uvjetom da se takve dodatne informacije drže odvojeno te da podliježu tehničkim i organizacijskim mjerama kako bi se osiguralo da se osobni podaci ne mogu pripisati pojedincu čiji je identitet utvrđen ili se može utvrditi; SUSTAV POHRANE svaki strukturirani skup osobnih podataka dostupnih prema posebnim kriterijima, bilo da su centralizirani, decentralizirani ili raspršeni na funkcionalnoj ili zemljopisnoj osnovi; VODITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje samo ili zajedno s drugima određuje svrhe i sredstva obrade osobnih podataka; kada su svrhe i sredstva takve obrade utvrđeni pravom Unije ili pravom države članice, voditelj obrade ili posebni kriteriji za njegovo imenovanje mogu se predvidjeti pravom Unije ili pravom države članice; IZVRŠITELJ OBRADE fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje obrađuje osobne podatke u ime voditelja obrade; PRIMATELJ fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo kojem se otkrivaju osobni podaci, neovisno o tome je li on treća strana. Međutim, tijela javne vlasti koja mogu primiti osobne podatke u okviru određene istrage u skladu s pravom Unije ili države članice ne smatraju se primateljima; obrada tih podataka koju obavljaju ta tijela javne vlasti mora biti u skladu s primjenjivim pravilima o zaštiti podataka prema svrhama obrade; TREĆA STRANA znači fizička ili pravna osoba, tijelo javne vlasti, agencija ili drugo tijelo koje nije ispitanik, voditelj obrade, izvršitelj obrade ni osobe koje su ovlaštene za obradu osobnih podataka pod izravnom nadležnošću voditelja obrade ili izvršitelja obrade; PRIVOLA ISPITANIKA svako dobrovoljno, posebno, informirano i nedvosmisleno izražavanje želja ispitanika kojim on izjavom ili jasnom potvrdnom radnjom daje pristanak za obradu osobnih podataka koji se na njega odnose; POVREDA OSOBNIH PODATAKA kršenje sigurnosti koje dovodi do slučajnog ili nezakonitog uništenja, gubitka, izmjene, neovlaštenog otkrivanja ili pristupa osobnim podacima koji su preneseni, pohranjeni ili na drugi način obrađivani; GENETSKI PODACI osobni podaci koji se odnose na naslijeđena ili stečena genetska obilježja pojedinca koja daju jedinstvenu informaciju o fiziologiji ili zdravlju tog pojedinca, i koji su dobiveni osobito analizom biološkog uzorka dotičnog pojedinca; BIOMETRIJSKI PODACI osobni podaci dobiveni posebnom tehničkom obradom u vezi s fizičkim obilježjima, fiziološkim obilježjima ili obilježjima ponašanja pojedinca koja omogućuju ili potvrđuju jedinstvenu identifikaciju tog pojedinca, kao što su fotografije lica ili daktiloskopski podaci; PODACI KOJI SE ODNOSE NA ZDRAVLJE osobni podaci povezani s fizičkim ili mentalnim zdravljem pojedinca, uključujući pružanje zdravstvenih usluga, kojima se daju informacije o njegovu zdravstvenom statusu; GLAVNI POSLOVNI NASTAN (a) što se tiče voditelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, osim ako se odluke o svrhama i sredstvima obrade osobnih podataka donose u drugom poslovnom nastanu voditelja obrade u Uniji te je potonji poslovni nastan ovlašten provoditi takve odluke, u kojem se slučaju poslovni nastan u okviru kojeg se donose takve odluke treba smatrati glavnim poslovnim nastanom; (b) što se tiče izvršitelja obrade s poslovnim nastanima u više od jedne države članice, mjesto njegove središnje uprave u Uniji, ili, ako izvršitelj obrade nema središnju upravu u Uniji, poslovni nastan izvršitelja obrade u Uniji u kojem se odvijaju glavne aktivnosti obrade u kontekstu aktivnosti poslovnog nastana izvršitelja obrade u mjeri u kojoj izvršitelj obrade podliježe posebnim obvezama u skladu s ovom Uredbom; PREDSTAVNIK fizička ili pravna osoba s poslovnim nastanom u Uniji koju je voditelj obrade ili izvršitelj obrade imenovao pisanim putem u skladu s Članak 27., a koja predstavlja voditelja obrade ili izvršitelja obrade u pogledu njihovih obveza na temelju ove Uredbe; PODUZEĆE fizička ili pravna osoba koja se bavi gospodarskom djelatnošću, bez obzira na pravni oblik te djelatnosti, uključujući partnerstva ili udruženja koja se redovno bave gospodarskom djelatnošću; GRUPA PODUZETNIKA poduzetnik u vladajućem položaju te njemu podređeni poduzetnici; OBVEZUJUĆA KORPORATIVNA PRAVILA politike zaštite osobnih podataka kojih se voditelj obrade ili izvršitelj obrade s poslovnim nastanom na državnom području države članice pridržava za prijenose ili skupove prijenosa osobnih podataka voditelju obrade ili izvršitelju obrade u jednoj ili više trećih zemalja unutar grupe poduzetnika ili grupe poduzeća koja se bave zajedničkom gospodarskom djelatnošću; , NADZORNO TIJELO neovisno tijelo javne vlasti koje je osnovala država članica u skladu s Članak 51.; PREDMETNO NADZORNO TIJELO nadzorno tijelo koje je povezano s obradom osobnih podataka zato što: (a) voditelj obrade ili izvršitelj obrade ima poslovni nastan na državnom području države članice tog nadzornog tijela; (b) obrada bitno utječe ili je izgledno da će bitno utjecati na ispitanike koji borave u državi članici tog nadzornog tijela; (c) podnesena je pritužba tom nadzornom tijelu. PREKOGRANIČNA OBRADA (a) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti poslovnih nastana u više od jedne države članice voditelja obrade ili izvršitelja obrade, a voditelj obrade ili izvršitelj obrade ima poslovni nastan u više od jedne države članice; (b) obrada osobnih podataka koja se odvija u Uniji u kontekstu aktivnosti jedinog poslovnog nastana voditelja obrade ili izvršitelja obrade, ali koja bitno utječe ili je izgledno da će bitno utjecati na ispitanike u više od jedne države članice. RELEVANTNI I OBRAZLOŽENI PRIGOVOR prigovor na nacrt odluke kao i na to je li došlo do kršenja ove Uredbe, ili je li djelovanje predviđeno u vezi s voditeljem obrade ili izvršiteljem obrade u skladu s ovom Uredbom, koji jasno pokazuje važnost rizika koje predstavlja nacrt odluke u pogledu temeljnih prava i sloboda ispitanika i, ako je primjenjivo, slobodnog protoka osobnih podataka unutar Unije; USLUGA INFORMACIJSKOG DRUŠTVA usluga kako je definirana člankom 1. stavkom 1. točkom 2. Direktive 2015/1535 Europskog parlamenta i Vijeća (19); MEĐUNARODNA ORGANIZACIJA organizacija i njezina podređena tijela uređena međunarodnim javnim pravom ili bilo koje drugo tijelo koje su sporazumom ili na osnovi sporazuma osnovale dvije ili više zemalja.