Temeljem članka 3. i članka 7. Zakona o zaštiti osobnih podataka (NN 103/03, 118/06, 41/08,130/11, 106/12),  Ars Alta d.o.o., Praputnjak 35, Bakar, OIB 01635094442 zastupa brandove “Studio Maraton” "Alilo" i  “Yamaha Music School” koji djeluju u okviru navedene tvrtke (zajednički u daljnjem tekstu: YMS) skrbi o zaštiti svih osobnih podataka koje prikupljaju u svrhu izvršavanja poslovnih obaveza. YMS je usklađen sa općom uredbom o zaštiti osobnih podataka GDPR.  

_____

Privacy and Personal Data Protection Policy

Pursuant to Articles 3 and 7 of the Croatian Personal Data Protection Act (Official Gazette Nos. 103/03, 118/06, 41/08, 130/11 and 106/12), Ars Alta d.o.o., Praputnjak 35, Bakar, Croatia, OIB: 01635094442, representing the Studio Maraton, Alilo, and Yamaha Music School brands operating within the company (hereinafter collectively referred to as YMS), is committed to protecting all personal data collected for the purpose of fulfilling its business activities. YMS processes personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

Osobnim podatkom smatra se svaki podatak koji može nedvojbeno odrediti osobu, tj. utvrditi njezin identitet (kao što su ime i prezime, adresa, OIB, JMBG, broj osobne iskaznice, broj putovnice, broj bankovne kartice i sl.) kao i svaki drugi podatak, čije neovlašteno korištenje može nanijeti materijalnu i moralnu štetu toj osobi. Obradom osobnih podataka smatra se svaka radnja ili skup radnji izvršenih nad osobnim podacima, kao što je prikupljanje, pohranjivanje, organiziranje, ažuriranje, prilagodba, povlačenje, uvid, otkrivanje putem prijenosa, objavljivanje (ili na drugi način učinjenih dostupnim), svrstavanje ili kombiniranje, blokiranje, brisanje ili uništavanje, te provedba logičkih, matematičkih i drugih operacija s tim podacima. 

YMS u svrhu obavljanja redovnog poslovanja prikuplja slijedeće podatke:

• osnovne matične podatke osobe: ime i prezime, OIB, datum rođenja, spol, adresa i mjesto prebivališta. Osnovni matični podaci prikupljaju se u svrhu osnovnih operacija obavljanja redovne djelatnosti kao što su upis u nastavne dnevnike rada, izdavanje ugovora, izdavanje svjedodžbi, izdavanje računa, obavljanje neophodne poslovne korespodencije i sl.
• dodatne kontakt podatke osobe: broj ili brojevi telefona/mobitela, e-mail adresa, dodatne adrese (boravište i sl). Podaci se koriste za obavljanje poslovne korespodencije, te za komunikaciju u promotivne svrhe (slanje „newslettera“, informacija o novim uslugama/proizvodima, slanje promotivnih materijala i sl.) isključivo uz dopuštenje osobe
• dodatne matične podatke: ime i prezime roditelja, mjesto rođenja, državljanstvo. Dodatni matični podaci koriste se za vođenje obaveznih matičnih knjiga u obrazovnim programima, te prilikom ispisa poslovnih dokumenata (primjerice svjedodžba o završenom tečaju)
• podatke o bankovnom računu. Podaci se koriste u svrhe izvršavanja financijskih operacija (primjerice povrat novca)
• podatke o skrbnicima maloljetnih osoba: ime i prezime skrbnika, spol, OIB, datum rođenja, adresa prebivališta, kontakt brojevi telefona/mobitela, kontakt e-mail adresa. Podaci se koriste u svrhu obavljanja redovnog poslovanja s maloljetnim osobama za koje su zakonsko odgovorne druge pravne ili fizičke osobe.YMS podatke prikuplja na nekoliko načina:
• izravno u prostorijama u kojima obavlja djelatnost
• putem telefona
• putem e-mail korespodencije
• putem online formulara koristeći siguran servis Google Suite (obrasci) 
• putem Chatbota 

• Ovi podaci se koriste za prodajne i marketinške svrhe – uz dodatak opcije za brisanje podataka na zahtjev. 

YMS poštuje privatnost svih osoba čiji se podaci prikupljaju na bilo koji od gore navedenih načina, te se prikupljeni osobni podaci obrađuju sa velikom savjesnošću. Svi prikupljeni podaci se strogo čuvaju i dostupni su samo djelatnicima kojima su ti podaci nužni za obavljanje posla. Svi djelatnici YMS i poslovni partneri odgovorni su za poštivanje načela zaštite privatnosti. YMS prikupljene podatke ne smije neovlašteno upotrebljavati niti učiniti dostupnim trećim osobama, osim u slučajevima kada to poseban zakon dozvoljava ili je pak potrebno u svrhu realizacije ugovornih obveza.

Personal Data

A personal data means any information relating to an identified or identifiable natural person, i.e. any information that can directly or indirectly establish a person’s identity (such as first and last name, address, Personal Identification Number (OIB), national identification number, identity card number, passport number, bank card number, etc.), as well as any other information whose unauthorized use could cause material or non-material harm to that person.

Processing of personal data means any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, storage, organization, updating, adaptation, retrieval, consultation, disclosure by transmission, publication or otherwise making available, alignment or combination, restriction, erasure or destruction, as well as the application of logical, mathematical, or other operations to such data.

For the purpose of conducting its regular business activities, YMS collects the following categories of personal data:

• Basic personal identification data: first and last name, Personal Identification Number (OIB), date of birth, gender, residential address, and place of residence. These data are collected for the performance of core business activities, including student enrolment records, preparation of contracts, issuance of certificates, invoicing, and other necessary business correspondence.
• Contact information: telephone/mobile phone number(s), email address, and additional addresses (such as temporary residence). These data are used for business communication and, where the individual has given explicit consent, for marketing purposes, including newsletters, information about new services or products, and promotional materials.
• Additional personal data: parents’ names, place of birth, and nationality. These data are collected where required for maintaining mandatory educational records and for issuing official documents, such as certificates of course completion.
• Bank account details: These data are processed solely for carrying out financial transactions, such as refunds.
• Data relating to legal guardians of minors: first and last name, gender, Personal Identification Number (OIB), date of birth, residential address, telephone/mobile number(s), and email address. These data are processed for the purpose of conducting business with minors whose legal representatives are responsible for acting on their behalf.

YMS collects personal data through the following channels:

• directly at its business premises;
• by telephone;
• via email correspondence;
• through online forms using the secure Google Workspace (Google Forms) service;
• through the chatbot.

Personal data collected through these channels may also be used for sales and marketing purposes, provided that the individual has given the necessary consent. Individuals may request the deletion of their personal data at any time in accordance with applicable legal requirements.

YMS respects the privacy of every individual whose personal data is collected by any of the above means and processes such data with the utmost care and responsibility. All collected personal data are kept confidential and are accessible only to employees whose duties require access to such information. All YMS employees and business partners are required to comply with the principles of personal data protection and confidentiality.

YMS will not use or disclose personal data to unauthorized third parties, except where such disclosure is required or permitted by applicable law or is necessary for the performance of contractual obligations.

Osobni podaci mogu se čuvati u:

• fizičkom obliku
• elektroničkom obliku

Podaci u fizičkom obliku čuvaju se u za to posebno predviđenim mjestima sa ograničenim pristupom, te su dostupni isključivo ovlaštenim osobama obučenima za zaštitu podataka.

Podaci u elektroničkom obliku čuvaju se u posebnom informatičkom sustavu predviđenom za pohranu i obradu podataka sukladno poslovnim djelatnostima YMS. Pristup podacima od strane djelatnika YMS ograničen je putem korisničkih ovlaštenja za svakog pojedinog djelatnika, te pristup podacima imaju samo one osobe kojima su podaci neophodni za obavljanje redovnog poslovanja.

Storage and Retention of Personal Data

Personal data may be stored in:

• Physical form
• Electronic form

Personal data in physical form are stored in designated secure locations with restricted access and are available only to authorized personnel who have been trained in personal data protection procedures.

Personal data in electronic form are stored in dedicated information systems designed for the storage and processing of personal data in accordance with YMS’s business activities. Access to electronic data is controlled through individual user permissions assigned to each employee. Personal data are accessible only to those employees whose duties require such access for the performance of their regular business responsibilities.

YMS pridaje veliku važnost zaštiti prikupljenih osobnih podataka, te preuzima sve moguće korake u svrhu zaštite podataka od neovlaštenog uvida ili korištenja istih od strane neovlaštene osobe.

Svi djelatnici YMS dužni su poštovati načela zaštite osobnih podataka, proći adekvatnu obuku o načinu prikupljanja, obrade i zaštite osobnih podataka, te pismenim putem predati izjavu o obvezi čuvanja osobnih podataka.

Sve mjere koje YMS poduzima u svrhu zaštite osobnih podataka usklađene su sa:

• Zakonom o zaštiti osobnih podataka
• Općom uredbom o zaštiti podataka EU (GDPR)
• Direktivom EU o zaštiti podataka (DPD)

Protection of Personal Data

YMS places great importance on the protection of the personal data it collects and takes all reasonable technical and organizational measures to safeguard such data against unauthorized access, disclosure, misuse, alteration, or destruction.

All YMS employees are required to comply with the principles of personal data protection, complete appropriate training on the collection, processing, and protection of personal data, and sign a written confidentiality statement regarding the handling of personal data.

All measures implemented by YMS to protect personal data are carried out in accordance with:

• the applicable Croatian Personal Data Protection legislation;
• the General Data Protection Regulation (GDPR) (EU) 2016/679;
• other applicable European Union and national data protection laws and regulations.

Svaka osoba ima pravo podnijeti zahtjev ovlaštenoj osobi YMS radi ostvarivanja prava na uvid u svoje osobne podatke, te na njihovu dopunu, izmjenu, brisanje i slično. Ukoliko se utvrdi da je bilo koji od osobnih podataka netočan, YMS će izvršiti ažuriranje podataka prema zahtjevu korisnika.

U slučaju da pojedina osoba zahtjeva obustavu obrade ili brisanje osobnih podataka, o tome može obavijestiti djelatnike YMS i to pisanim putem:

• elektroničkom poštom na adresu info@arsalta.eu
• poštom na adresu Ars Alta d.o.o., Praputnjak 35, 51226 Hreljin
• uručenjem pisanog zahtjeva osobno na adresi ureda, YMS, P. Zrinskog 4, 51000 RIJEKA

U slučaju navedenog zahtjeva YMS će iz evidencije brisati kontakt brojeve telefona i mobitela, kontakt e-mail adresu, te IBAN. Svi ostali podaci neophodni su za izvršavanje poslovnih obaveza (primjerice: izdavanje prijepisa svjedodžbe na zahtjev korisnika, izdavanje potvrda o završetku tečaja i sl.), te se u određenim situacijama moraju čuvati u arhivi zbog zakonskih obveza. Preostali osobni podaci čuvati će se isključivo za navedene svrhe, dok će YMS do danjega obustaviti obradu osobnih podataka.

Right of Access to Personal Data

Every individual has the right to submit a request to the authorized representative of YMS to exercise their rights regarding their personal data, including the right to access, rectify, supplement, erase, restrict processing, or otherwise exercise the rights granted under the applicable data protection legislation.

If any personal data are found to be inaccurate or incomplete, YMS will update or correct such data upon the data subject’s request.

An individual may request the restriction of processing or the deletion of their personal data by submitting a written request to YMS through one of the following channels:

• By email: info@arsalta.eu
• By post: Ars Alta d.o.o., Praputnjak 35, 51226 Hreljin, Croatia
• In person: by delivering a written request to the YMS office at P. Zrinskog 4, 51000 Rijeka, Croatia

Upon receiving such a request, YMS will delete, where legally permissible, the individual’s contact telephone and mobile numbers, email address, and bank account (IBAN) details.

Certain personal data must, however, be retained where required for the fulfillment of contractual obligations or compliance with applicable legal requirements. This includes, for example, maintaining records necessary for issuing duplicate certificates, confirmations of course completion, accounting records, or other documents that YMS is legally required to preserve.

In such cases, the remaining personal data will be retained solely for these legal and contractual purposes, while any further processing for other purposes will cease in accordance with applicable data protection legislation.

Svaka osoba koja smatra da im je povrijeđeno neko od prava zajamčenih Zakonom o zaštiti osobnih podataka ima pravo podnijeti zahtjev za utvrđivanje povrede prava Agenciji za zaštitu osobnih podataka.

U slučaju eventualnog kršenja privatnosti podataka iz naših sustava ili sustava bilo kojeg od naših partnera, YMS će obavijestiti sve relevantne osobe i nadležna tijela u roku od 72 sata od prekršaja, ako je očigledno da su zbog prekršaja ukradeni i/ili spremljeni osobni podaci iz kojih se može utvrditi identitet vlasnika podataka.

 Email Communications

Any individual who believes that their rights under the applicable personal data protection legislation have been violated has the right to lodge a complaint with the competent supervisory authority responsible for personal data protection.

In the event of a personal data breach affecting YMS’s systems or the systems of any of its service providers or business partners, YMS will, where required by applicable law, notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to the rights and freedoms of affected individuals, YMS will also notify those individuals without undue delay, in accordance with the requirements of the General Data Protection Regulation (GDPR).

YMS koristi prikupljene e-mail adrese kao redovni oblik komunikacije s klijentima i polaznicima. Komunikacija putem elektroničke pošte odvija se putem Simple Main Transfer Protokola (SMTP). Naši SMTP poslužitelji zaštićeni su TLS-om (ponekad pozantim kao SSL), što osigrava da je sadržaj elektroničke pošte šifriran pomoću SHA-2, 256-bitne kriptografije prije slanja putem Interneta. YMS se obvezuje da komunikacija putem elektroničke pošte neće biti prenesen bilo kojoj od trećih strana, osim u slučajevima kada to poseban zakon dozvoljava ili je pak potrebno u svrhu realizacije ugovornih obveza.

Sva komunikacija putem elektroničke pošte koja služi u svrhu redovnog obavljanja poslovanja (komunikacija vezana uz odvijanje tečajeva, komunikacija o financijskim obvezama, informacije o bitnim promjenama i nadogradnjama, generiranje korisničkih računa za pristup YMS informacijskim sustavima, i sl.) smatra se neophodnom za izvršenje poslovnih obveza YMS, Praputnjak 35,  Hreljin, te je kao takva sastavni dio komunikacije između djelatnika YMS, i osoba čije podatke YMS prikuplja u svrhu redovnog poslovanja.

YMS  može koristiti prikupljene e-mail adrese i u promotivne svrhe kao što su primjerice slanje „newslettera“, slanje obavijesti o novim uslugama i proizvodima, slanje informacija o događajima i promocijama, i sl. YMS se obvezuje da će korištenje e-mail adrese za komunikaciju u promotivne svrhe izvršavati samo u slučajevima kada je osoba dala eksplicitno dopuštenje za ovakav način korištenja e-mail adrese.

YMS uses the email addresses it collects as a standard means of communication with its clients and students.

Email communications are transmitted using the Simple Mail Transfer Protocol (SMTP). Our SMTP servers are protected using Transport Layer Security (TLS) (formerly referred to as SSL), helping to ensure that email communications are encrypted during transmission over the Internet using industry-standard encryption protocols.

YMS will not disclose email communications or email addresses to unauthorized third parties except where such disclosure is required or permitted by law or is necessary for the performance of contractual obligations.

Email communications that are necessary for the provision of YMS services—including, but not limited to, course-related information, notices regarding financial obligations, important service updates, the creation of user accounts for access to YMS information systems, and other operational communications—are considered essential for the performance of the contractual relationship between YMS (Ars Alta d.o.o., Praputnjak 35, 51226 Hreljin, Croatia) and the individuals whose personal data YMS processes.

YMS may also use collected email addresses for marketing purposes, such as sending newsletters, information about new services or products, invitations to events, promotional offers, and similar communications. Such marketing communications will only be sent where the individual has provided their explicit consent, or where otherwise permitted under applicable law. Individuals may withdraw their consent and unsubscribe from marketing communications at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Kao i većina web stranica, naše web stranice upotrebljavaju Google Analytics (GA) alat za analizu ponašanja posjetitelja našim web stranicama. Prikupljeni podaci se koriste kako bismo utvrdili trendove i interese posjetitelja i što bolje razumijeli zahtjeve naših klijenta. Iako GA bilježi podatke kao što su vaša geografska lokacija, vaš uređaj, internetski preglednik i operativni sustav, nijedan od tih podataka ne može vas osobno identificirati. GA također bilježi IP adresu računala koja bi se mogla koristiti za osobnu identifikaciju, ali YMS nema pristup tom podatku.

Kako bi posjet našim web stranicama bio što funkcionalniji i praktičniji, GA upotrebljava određenu količinu informacija, takozvanih cookies (kolačići). Oni služe da bi web stranica radila optimalno i kako bi se poboljšalo iskustvo pregledavanja i korištenja od strane posjetitelja, a detalje o njima mogu se pronaći na Googleovim vodičima za razvojne programere. Posjetom i korištenjem bilo koje od naših web stranica svaki posjetitelj pristaje na upotrebu kolačića koje je moguće i blokirati. Onemogućavanje kolačića na vašem web pregledniku zaustavit će GA da prati bilo koji dio vašeg posjeta u bilo kojem dijelu web stranice. U tom slučaju posjetitelji i dalje mogu pregledavati web stranicu, uz napomenu da u tom slučaju neke mogućnosti neće biti dostupne.

Za više podataka o pravilima privatnosti platforme Google Analytics, možete se informirati putem sljedećeg poveznice https://policies.google.com/privacy?hl=hr

Like most websites, our websites use Google Analytics to help us understand how visitors use our website and to improve its functionality and user experience.

The information collected is used to analyze visitor behavior, identify trends and areas of interest, and better understand the needs of our clients. Google Analytics may collect information such as your approximate geographic location, device type, web browser, operating system, and interactions with the website. This information is used in an aggregated and statistical form and is not intended to identify individual visitors.

Google Analytics may also process your IP address as part of providing its analytics services. Where applicable, YMS uses available privacy features, such as IP anonymization or equivalent privacy protections provided by Google. YMS does not use Google Analytics data to personally identify individual visitors.

To provide a functional and user-friendly browsing experience, our website uses cookies and similar technologies. Cookies help the website function properly, remember user preferences, and enable website analytics.

By accepting cookies through our cookie consent banner, you consent to the use of analytics cookies as described in this Privacy Policy. You may withdraw your consent at any time or configure your browser to block or delete cookies. Please note that disabling certain cookies may affect the functionality of some parts of the website.

For more information about how Google processes personal data through Google Analytics, please refer to Google’s Privacy Policy:

https://policies.google.com/privacy

 Ova izjava može se s vremena na vrijeme mijenjati u skladu sa zakonodavnim okvirom i/ili razvojem industrije. YMS nije dužan osobno obavijestititi svakog klijenta o izmjenama ove Izjave, ali će sama Izjava u takvom slučaju biti ažurirana na ovoj web stranici.  Preporučujemo da svi klijenti povremeno provjeravaju navedenu web stranicu kako bi se informirali o eventualnim izmjenama Izjave o privatnosti i zaštiti osobnih podataka.  

YMS reserves the right to amend or update this Privacy and Personal Data Protection Policy at any time in order to reflect changes in applicable legislation, regulatory requirements, business operations, or the methods by which personal data are processed.

Any updated version of this Policy will be published on the YMS website and will become effective upon publication, unless otherwise stated. Where required by applicable law, YMS will notify data subjects of material changes through appropriate communication channels.

We encourage users to review this Policy periodically to remain informed about how YMS protects and processes personal data.