2. Protection of personal data GDPR

Categories

Protection of personal data GDPR


Protection of personal data

Ljekarna Barišić undertakes to provide protection of personal data of customers, by collecting only the necessary, basic data on customers / users that are necessary to meet our obligations; informs customers about how to use the collected data, regularly gives customers a choice about the use of their data, including the ability to decide whether or not they want their name removed from the lists used for marketing campaigns. All user data is strictly kept and is available only to employees who need this data to do their job. All employees of Ljekarna Barišić and business partners are responsible for respecting the principles of privacy protection.


Ljekarna Barišić takes technical and organizational security measures to protect your personal data from accidental or illegal destruction, loss or alteration, and from unauthorized disclosure or access. User data is only available to employees who need this data to do the job.

The user can access personal information on our Website using a password and e-mail address. The user is advised not to disclose the password to third parties. The user is aware of the fact that no data transmission over the Internet, or any wireless network can be 100% secure. Although Ljekarna Barišić implements data protection safeguards, it cannot guarantee the protection of any information transmitted to, or from our Website, and is not responsible for the actions of any third party that receives such information.

Web privacy policy

Ljekarna Barišić recognizes and values your right to confidentiality of data and undertakes to preserve the security of data collected through the website.

Your personal data is collected and used only on the basis of data you have voluntarily provided, either by registration (personal data such as name, address, city, e-mail, telephone number will be used during registration) or by using the website.

The collected personal data is stored in electronic form, and all appropriate technical and organizational measures are applied to prevent personal data breaches. The Company will use the received e-mails with your personal data only for the purpose of fulfilling your requests.

cookies

Cookies enable the collection of statistics on user behavior on Internet pages (eg, which parts of the Internet site users spend the longest and where the shortest), which Internet browser (eg Internet Explorer, Opera, Safari, Google Chrome , Firefox) uses and the like.

A cookie is a small packet of data sent from a server to a user's computer and serves as an anonymous identifier. The purpose of cookies is to improve the user experience when using the website. Cookies on the Company's website are anonymized and are not used for the purpose of accessing user data or to monitor user activities after leaving.

The Company's website monitors the statistical traffic of its pages exclusively in order to obtain the necessary information on the attractiveness and success of its pages.

Search engine owners inform you about how to manage cookies. Read more at the linked links.



PRIVACY POLICY

 

1. Introduction

Ljekarna Barišić with its registered office in Kutina, Kolodvorska 5, OIB: 46867406091 (hereinafter: Ljekarna Barišić) must collect and use certain data on individuals in its operations.

The purpose of this policy is to ensure that Ljekarna Barišić fully complies with legal, organizational and technical obligations in relation to the protection of personal data.

All employees of Ljekarna Barišić are fully acquainted with the content of this policy and ensure its application when handling personal data or processing personal data. Employees whose tasks include the handling of personal data are adequately educated regarding their tasks in relation to personal data protection.

This policy applies to all personal data held by Ljekarna Barišić in relation to any person, regardless of whether they have been, currently are or will be a customer, supplier or contact.

This policy is designed to prevent potential harm to Ljekarna Barišić and its employees and respondents and to ensure that the processing of personal data by Ljekarna Barišić is fully in accordance with the law and other regulations.

2. Definition and application

Personal data are all data relating to an identified or identifiable individual, ie an individual who can be identified directly or indirectly, in particular by means of identifiers such as name, identification number, location data, network identifier or by means of one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

Processing of personal data means any procedure or set of procedures performed on personal data or on sets of personal data, whether automated or non-automated means such as collection, recording, organization, structuring, storage, adaptation or modification, withdrawal, retrieval, inspection , use or utilization, disclosure by transmission, dissemination, publication or otherwise making available, harmonization or combination, restriction, deletion or destruction, and the performance of logical, mathematical and other operations with that data.

Ljekarna Barišić collects and processes personal data primarily for the purpose of providing services in its business. Therefore, Ljekarna Barišić has a need to collect and process certain types of data on individuals who come into contact with Ljekarna Barišić (partners and respondents). Ljekarna Barišić handles this personal information adequately, regardless of how this data was collected, recorded, stored and used - on paper, computer or other material.

At the time of submitting the partner's data to Ljekarna Barišić, the partner agrees that Ljekarna Barišić processes his personal data, in accordance with the indicated purpose. The protection of the privacy of the partner's data is permanent, and at any time the respondent can use his rights, which are listed and explained below.

Ljekarna Barišić collects and processes personal data of respondents in accordance with the Personal Data Protection Act (OG 103/03, 118/06, 41/08, 130/11, 106/12), other Croatian regulations, Directive 95/46 / EC and General Regulation and Personal Data Protection (GDPR) (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016).

The Barišić Pharmacy keeps the collected data in an appropriate manner and ensures their confidentiality. Ljekarna Barišić will not pass on the collected data to third parties without the partner's permission, except in cases when it is necessary to perform legal obligations, in cases when it is necessary to fulfill tasks performed in the public interest or in cases when the partner published the data himself, as well as in other cases determined by the competent regulation.

The partner, in terms of personal data processed for him by Ljekarna Barišić, has the following rights:

Partner rights:

Explanation

The right to information

The partner has the right at any time to request information on whether his personal data are processed and for what purpose, who is the controller, contact details of the data protection officer, which categories of personal data are processed, for what period they are processed or stored, who is the source for obtaining his personal data, who are all recipients of his personal data, as well as the right to be informed of his other rights stated in this policy (right of access, right of rectification, right of deletion, right of restriction of processing, etc.).

Right of access

The partner has the right to receive confirmation from Ljekarna Barišić whether personal data related to him are processed, then to gain access to this data and information on:

- purpose of processing,

- categories of personal data processed;

- recipients or categories of recipients to whom the data have been disclosed or will be disclosed;

- if possible, the period for which the data are stored or the criteria by which it is possible to determine that period;

- to request from Ljekarna Barišić the correction or deletion of personal data or the restriction of the processing of personal data relating to the Partner or the right to object to such processing;

- the right to lodge a complaint with the supervisory authority;

- if personal data is not collected from the Partner, any available information about their source;

- the existence of automated decision-making, which includes the development of profiles, with consequences.

Right to correction

The partner has the right without undue delay to obtain from Ljekarna Barišić the correction of inaccurate personal data relating to him. The partner has the right to supplement incomplete personal data, including by giving an additional statement.

Right to erase / right to be forgotten

The partner has the right to Ljekarna Barišić without delay delete personal data relating to him if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the partner withdraws consent on which the processing is based and there is no other legal basis of processing, if the partner objects to the processing, if the personal data have been unlawfully processed, if the personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which Ljekarna Barišić is subject, if personal data have been collected. society to the child.

This shall not apply if the processing is necessary (and to the extent necessary) to exercise the right to freedom of expression and information, to comply with a legal obligation requiring processing under Union law or the law of a Member State to which Ljekarna Barišić is subject. interest or in the exercise of official authority Ljekarna Barišić, due to the public interest in the field of public health, for the purposes of archiving in the public interest, for the purposes of scientific or historical research, to set, realize or defend legal claims.

The right to lodge a complaint with the supervisory authority

Based on his special situation, the Partner has the right to object at any time to the processing of personal data relating to him, including the creation of profiles, in cases where processing is necessary to perform a task of public interest or in the exercise of official authority Ljekarna Barišić necessary for the needs of the legitimate interests of Ljekarna Barišić or a third party. Ljekarna Barišić may no longer process personal data unless Ljekarna Barišić proves that there are compelling legitimate reasons for the processing that go beyond the interests, rights and freedoms of the partner or to set, exercise or defend legal claims.

If personal data is processed for the purposes of direct marketing, the partner has the right to object at any time to the processing of personal data relating to him for the purposes of such marketing, which includes the creation of profiles to the extent associated with such direct marketing.

The right to data portability

The partner has the right to receive personal data related to him, which was provided to Ljekarna Barišić in a structured, commonly used and machine format, and has the right, without interference by Ljekarna Barišić, to transfer this data to another controller if the processing is based on his consent. and if processing is carried out automatically.

The partner has the right to a direct transfer from Ljekarna Barišić to another processing manager if it is technically feasible, and this right must not negatively affect the rights and freedoms of others.

Rights related to automatic decision making and profiling

The partner has the right not to be subject to a decision based solely on automated processing, including the creation of a profile, which produces legal effects that affect him or in a similar way significantly affect him, unless that decision is necessary for the conclusion or execution contract between the respondent and Ljekarna Barišić, if permitted by Union law or the law of the Member State to which Ljekarna Barišić is subject or based on the express consent of the partner.

The right to withdraw consent

The consent of the partner is one of the legal bases for the processing of data relating to the partner. The partner has the right to withdraw the consent he has given at any time. Withdrawal of consent does not affect the lawfulness of the data processing that was done before the withdrawal of consent.

The right to restrict processing

The partner must request a restriction on the processing of his personal data: if he disputes the accuracy of his personal data - for a period necessary for Ljekarna Barišić to check the accuracy, if the processing of his personal data is illegal and does not request deletion but only restriction of processing, if Ljekarna Barišić no longer needs his personal data , but he needs their existence in order to fulfill his legal requirements, if he has filed an objection to processing, he has the right to request a restriction of processing for the period until it is determined whether the legitimate reasons of Ljekarna Barišić for processing his reasons from the objection.

In order to exercise their rights, the respondent should contact the Personal Data Protection Officer by sending a written notice or request to the Personal Data Protection Officer Ljekarna Barišić, by e-mail using their e-mail address provided by Ljekarna Barišić or by e-mail to: Kutina, Kolodvorska 5 , 44320 Kutina or by submitting a personal statement directly in the business premises of Ljekarna Barišić, with prior notice on the phone number +385 44 681-822 with identification with a valid personal document.

3. Head of personal data processing:

Data processing manager: Health Institution Ljekarna Barišić, Kolodvorska 5, 44320 Kutina.

Barišić Pharmacy has appointed a Personal Data Protection Officer.

Regarding all questions concerning the processing of your personal data and the exercise of the rights provided by the General Data Protection Regulation, you can contact the Personal Data Protection Officer in the following ways:

In writing to the address:
Pharmacy Barišić, Kolodvorska 5, 44320 Kutina, n / r Personal data protection officer

by e-mail to the address: zastitapodataka@ljekarna.hr

Telephone: +385 44 681 822

All questions regarding personal data protection should be addressed to the personal data protection officer.

4. Principles of personal data protection:

Pharmacy Barišić believes that legal and proper handling of personal data is very important and therefore ensures that personal data is treated legally and correctly. For this purpose, Ljekarna Barišić fully supports and adheres to the Principles of Data Protection.

Data protection principles require that personal data:

  • they must be treated fairly and lawfully and in particular that they must not be processed if the conditions laid down in the regulations are not met;
  • they are collected only for one or more specific and lawful purposes and may not be further processed in any way incompatible with those purposes;
  • the processing must be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed, and the data must be accurate and up-to-date;
  • they must not be kept longer than necessary for the applicable purpose;
  • they must be processed in accordance with the rights of the respondents in accordance with the applicable regulations:
  • appropriate technical and organizational measures must be taken against the unauthorized or unlawful processing of personal data and against the accidental loss, destruction or damage of personal data;
  • it may not be transferred to a country or territory outside the EU, unless that country or territory ensures an adequate level of protection of the rights and freedoms of respondents with regard to the processing of personal data.

5. Activities of the Barišić Pharmacy regarding data processing

Pharmacy Barišić undertakes the following:

  • fully respects the conditions of fair collection and processing of personal data;
  • fulfills the obligation to specify the purpose for which personal data are processed;
  • collects and processes adequate personal data and only to the extent necessary to meet operational needs or in accordance with all legal requirements;
  • submits all necessary data to the Agency for Personal Data Protection;
  • performs a strict check of the length of storage of personal data;
  • ensures that the rights of the persons whose data are processed can be fully exercised in accordance with the protection of personal data;
  • takes appropriate technical and organizational security measures for the protection of personal data;
  • ensures that personal data are not transferred abroad without insurance protection;
  • treats all persons fairly and equitably, regardless of their age, religion, disability, gender, sexual orientation or ethnicity, when acting on their information requests;
  • establishes clear procedures for responding to requests for information.

Ljekarna Barišić may publish on its website the content of cookies for advertising and monitoring traffic statistics based on the interests and information of visitors to the website of Ljekarna Barišić from social networks. If the respondent uses the content on the social networks of Ljekarna Barišić or in applications, the cookie from the listed networks and applications could be stored on the respondent's device from which he accesses the website of Ljekarna Barišić. Visitors have the right to exclude cookies. Internet browsers are usually programmed to accept cookies by default, but respondents can easily adjust this by changing their browser settings. If the respondent wishes to restrict or block all cookies that include Ljekarna Barišić websites / applications (which may prevent the use of certain parts of the website) or other websites / applications, the respondent may do so in the browser settings.

In the event of a personal data breach that is likely to pose a high risk to the rights and freedoms of the respondent, Ljekarna Barišić notifies the respondent without undue delay of the personal data breach, unless Ljekarna Barišić has taken appropriate technical and organizational protection measures. personal data breaches, in particular those which make personal data incomprehensible to any person not authorized to access them, or if he has taken subsequent measures to ensure that there is no longer a high risk to the rights and freedoms of respondents or if this would require disproportionate effort, in which case Barišić Pharmacy will apply public information or a similar measure by which respondents are informed in an equally effective manner.

6. Inspection and verification:

Pharmacy Barišić has the right to update this policy if necessary to reflect best practice and to ensure compliance with any changes or modifications regarding the protection of personal data.

In Kutina on May 14, 2018.