natgillin/translations-raw huggingface dataset:
The controller may restrict, wholly or partly, the data subject’s right of access to the extent that, and for as long as, such a partial or complete restriction constitutes a necessary and proportionate measure in a democratic society with due regard for the fundamental rights and legitimate interests of the natural person concerned, in order to:
Članak 75.
In the cases referred to in paragraph 1, the controller shall inform the data subject, without undue delay, in writing of any refusal or restriction of access and of the reasons for the refusal or the restriction.
Posebni uvjeti obrade
Such information may be omitted where the provision thereof would undermine a purpose under paragraph 1.
Kad se u skladu s mjerodavnim pravom Unije osiguravaju posebni uvjeti obrade, voditelj obrade obavješćuje primatelja takvih operativnih osobnih podataka o tim uvjetima i zahtjevu za poštovanje tih uvjeta.
The controller shall inform the data subject of the possibility of lodging a complaint with the European Data Protection Supervisor or of seeking a judicial remedy before the Court of Justice.
Voditelj obrade poštuje posebne uvjete obrade za obradu koju obavlja nadležno tijelo koje prenosi podatke u skladu s člankom 9. stavcima 3. i 4.
The controller shall document the factual or legal reasons on which the decision is based.
Direktive (EU) 2016/680.
That information shall be made available to the European Data Protection Supervisor on request.
Članak 76.
Article 82
Obrada posebnih kategorija operativnih osobnih podataka
Right to rectification or erasure of operational personal data and restriction of processing
Obrada operativnih osobnih podataka koji otkrivaju rasno ili etničko podrijetlo, politička mišljenja, religijska ili filozofska vjerovanja ili članstvo u sindikatu te obrada genetskih podataka, biometrijskih podataka u svrhu jedinstvene identifikacije pojedinca, operativnih osobnih podataka koji se odnose na zdravlje ili podataka o spolnom životu ili seksualnoj orijentaciji pojedinca dopuštena je samo ako je to nužno u operativne svrhe, u okviru mandata predmetnog tijela, ureda ili agencije Unije te uz poštovanje odgovarajućih zaštitnih mjera u pogledu prava i sloboda ispitanika.
Any data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate operational personal data relating to him or her.
Zabranjena je diskriminacija pojedinaca na temelju takvih osobnih podataka.
Taking into account the purposes of the processing, the data subject shall have the right to have incomplete operational personal data completed, including by means of providing a supplementary statement.
Službenik za zaštitu podataka bez nepotrebne odgode se obavješćuje o primjeni ovog članka.
The controller shall erase operational personal data without undue delay and the data subject shall have the right to obtain from the controller the erasure of operational personal data concerning him or her without undue delay where processing infringes Articles 71, 72(1) or 76, or where operational personal data must be erased in order to comply with a legal obligation to which the controller is subject.
Članak 77.
Instead of erasure, the controller shall restrict processing where:
Zabranjuje se svaka odluka utemeljena samo na automatiziranoj obradi, među ostalim i na izradi profila, koja proizvodi negativne pravne učinke na ispitanika ili na njega znatno utječe, osim ako je odobrena pravom Unije kojem podliježe voditelj obrade te koje propisuje odgovarajuće zaštitne mjere za prava i slobode ispitanika, barem pravo na osobnu intervenciju voditelja obrade.
the accuracy of the personal data is contested by the data subject and their accuracy or inaccuracy cannot be ascertained; or
Odluke iz stavka 1. ovog članka ne smiju se temeljiti na posebnim kategorijama osobnih podataka iz članka 76., osim ako su uspostavljene odgovarajuće zaštitne mjere u pogledu prava, sloboda te legitimnih interesa ispitanika.
the personal data must be maintained for the purposes of evidence.
Zabranjuje se izrada profila koja dovodi do diskriminacije pojedinaca na temelju posebnih kategorija osobnih podataka iz članka 76., u skladu s pravom Unije.
Where processing is restricted pursuant to point (a) of the first subparagraph, the controller shall inform the data subject before lifting the restriction of processing.
Članak 78.
Restricted data shall be processed only for the purpose that prevented their erasure.
Obavješćivanje i modaliteti ostvarivanja prava ispitanika
The controller shall inform the data subject in writing of any refusal of rectification or erasure of operational personal data or restrict processing and of the reasons for the refusal.
Voditelj obrade poduzima razumne korake kako bi se ispitaniku pružile sve informacije iz članka 79. te daje ispitaniku sve obavijesti u pogledu članaka od 80. do 84. te članka 92. u vezi s obradom u jezgrovitom, razumljivom i lako dostupnom obliku, upotrebljavajući jasan i jednostavan jezik.
The controller may restrict, wholly or partly, the provision of such information to the extent that such a restriction constitutes a necessary and proportionate measure in a democratic society with due regard for the fundamental rights and legitimate interests of the natural person concerned in order to:
Informacije se pružaju bilo kojim odgovarajućim sredstvom, uključujući elektronička sredstva.
avoid prejudicing the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties;
U pravilu voditelj obrade pruža informacije u istom obliku u kojem je zahtjev.
The controller shall inform the data subject of the possibility of lodging a complaint with the European Data Protection Supervisor or seeking a judicial remedy from the Court of Justice.
Voditelj obrade olakšava ostvarivanje prava ispitanika iz članaka od 79. do 84.
The controller shall communicate the rectification of inaccurate operational personal data to the competent authority from which the inaccurate operational personal data originate.
Voditelj obrade u pisanom obliku obavješćuje ispitanika o daljnjem postupanju nakon njegova zahtjeva bez nepotrebne odgode, a u svakom slučaju najkasnije tri mjeseca nakon primanja zahtjeva ispitanika.
The controller shall, where operational personal data has been rectified or erased or processing has been restricted pursuant to paragraphs 1, 2 or 3, notify the recipients and inform them that they have to rectify or erase the operational personal data or restrict processing of the operational personal data under their responsibility.
Voditelj obrade osigurava da se informacije na temelju članka 79. te sve obavijesti pružene ili mjere poduzete na temelju članaka od 80. do 84. i članka 92. pružaju odnosno poduzimaju bez naknade.
Article 83
Ako ima opravdane sumnje u pogledu identiteta pojedinca koji podnosi zahtjev iz članka 80. ili 82., voditelj obrade može tražiti pružanje dodatnih informacija potrebnih za potvrđivanje identiteta ispitanika.
Right of access in criminal investigations and proceedings
Članak 79.
Where operational personal data originates from a competent authority, Union bodies, offices and agencies shall, prior to deciding on a data subject’s right of access, verify with the competent authority concerned whether such personal data are contained in a judicial decision or record or a case file processed in the course of criminal investigations and proceedings in the Member State of that competent authority.
Informacije koje se stavljaju na raspolaganje ili daju ispitaniku
Where this is the case, a decision on the right of access shall be taken in consultation and in close cooperation with the competent authority concerned.
Voditelj obrade ispitaniku stavlja na raspolaganje barem sljedeće informacije:
Article 84
identitet i podatke za kontakt tijela, ureda ili agencije Unije;
Exercise of rights by the data subject and verification by the European Data Protection Supervisor
svrhe obrade za koje su operativni osobni podaci namijenjeni;
In the cases referred to in Articles 79(3), 81 and 82(4), the rights of the data subject may also be exercised through the European Data Protection Supervisor.
pravu na podnošenje pritužbe Europskom nadzorniku za zaštitu podataka i njegovim podacima za kontakt;
The controller shall inform the data subject of the possibility of exercising his or her rights through the European Data Protection Supervisor pursuant to paragraph 1.
postojanje prava da se od voditelja obrade zatraži pristup operativnim osobnim podacima, njihov ispravak ili brisanje te ograničavanje obrade operativnih osobnih podataka koji se odnose na ispitanika.
Where the right referred to in paragraph 1 is exercised, the European Data Protection Supervisor shall at least inform the data subject that all necessary verifications or a review by him or her have taken place.
Uz informacije iz stavka 1., voditelj obrade u posebnim slučajevima predviđenima pravom Unije i kako bi se ispitaniku omogućilo ostvarivanje njegovih prava, ispitaniku daje dodatne informacije o:
The European Data Protection Supervisor shall also inform the data subject of his or her right to seek a judicial remedy before the Court of Justice.
pravnoj osnovi obrade;
Article 85
razdoblju u kojem će se operativni osobni podaci pohranjivati ili, ako to nije moguće, o kriterijima korištenima za utvrđivanje tog razdoblja;
Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for rights and freedoms of natural persons posed by the processing, the controller shall, both at the time of the determination of the means for processing and at the time of the processing itself, implement appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data protection principles, such as data minimisation, in an effective manner and to integrate the necessary safeguards into the processing, in order to meet the requirements of this Regulation and the legal act establishing it, and protect the rights of the data subjects.
ako je to primjenjivo, kategorijama primatelja operativnih osobnih podataka, uključujući treće zemlje ili međunarodne organizacije;
The controller shall implement appropriate technical and organisational measures ensuring that, by default, only operational personal data which are adequate, relevant and not excessive in relation to the purpose of the processing are processed.
po potrebi i dodatne informacije, osobito ako se operativni osobni podaci prikupljaju bez znanja ispitanika.
That obligation applies to the amount of operational personal data collected, the extent of their processing, the period of their storage and their accessibility.
Voditelj obrade može odgoditi, ograničiti ili uskratiti pružanje informacija ispitaniku na temelju stavka 2. u onoj mjeri i u onom trajanju u kojem takva mjera predstavlja potrebnu i razmjernu mjeru u demokratskom društvu uz dužno poštovanje temeljnih prava i legitimnih interesa dotične fizičke osobe, kako bi se:
In particular, such measures shall ensure that by default operational personal data are not made accessible without the individual’s intervention to an indefinite number of natural persons.
izbjeglo ometanje službenih ili pravnih ispitivanja, istraga ili postupaka;
Article 86
izbjeglo dovođenje u pitanje sprečavanja, otkrivanja, istrage ili progona kaznenih djela ili izvršavanja kaznenih sankcija;
They shall in a transparent manner determine their respective responsibilities for compliance with their data protection obligations, in particular as regards the exercise of the rights of the data subject and their respective duties to provide the information referred to in Article 79, by means of an arrangement between them, unless and in so far as the respective responsibilities of the joint controllers are determined by Union or Member State law to which the joint controllers are subject.
zaštitila javna sigurnost država članica;
The arrangement referred to in paragraph 1 shall duly reflect the respective roles and relationships of the joint controllers vis-à-vis the data subject.
zaštitila nacionalna sigurnost država članica;
Article 87
zaštitila prava i slobode drugih, na primjer žrtava i svjedoka.
Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of this Regulation and the legal act establishing the controller and ensure the protection of the rights of the data subject.
Članak 80.
The processor shall not engage another processor without prior specific or general written authorisation by the controller.
Ispitanik ima pravo od voditelja obrade dobiti potvrdu o tome obrađuju li se operativni osobni podaci koji se na njega odnose te ako se obrađuju, ima pravo na pristup operativnim osobnim podacima i informacije o sljedećem:
Processing by a processor shall be governed by a contract or other legal act under Union or Member State law, that is binding on the processor with regard to the controller and that sets out the subject matter and duration of the processing, the nature and purpose of the processing, the type of operational personal data and categories of data subjects and the obligations and rights of the controller.
svrhama obrade i pravnoj osnovi obrade;
acts only on instructions from the controller;
kategorijama operativnih osobnih podataka o kojima je riječ;
ensures that persons authorised to process the operational personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
primateljima ili kategorijama primatelja kojima su osobni podaci otkriveni, osobito primateljima u trećim zemljama ili međunarodnim organizacijama;
assists the controller by any appropriate means to ensure compliance with the provisions on the data subject’s rights;
ako je to moguće, predviđenom razdoblju u kojem će se operativni osobni podaci pohranjivati ili, ako nije moguće, kriterijima korištenima za utvrđivanje tog razdoblja;
at the choice of the controller, deletes or returns all the operational personal data to the controller after the end of the provision of services relating to processing, and deletes existing copies unless Union law or Member State law requires storage of the operational personal data;
postojanju prava da se od voditelja obrade zatraži ispravak ili brisanje operativnih osobnih podataka ili ograničavanje obrade operativnih osobnih podataka koji se odnose na ispitanika;
makes available to the controller all information necessary to demonstrate compliance with the obligations laid down in this Article;
obavješćivanju o operativnim osobnim podacima koji se obrađuju i o svim dostupnim informacijama o njihovu izvoru.
complies with the conditions referred to in paragraph 2 and in this paragraph for engaging another processor.
Članak 81.
The contract or the other legal act referred to in paragraph 3 shall be in writing, including in electronic form.
Ograničenja prava pristupa
If a processor infringes this Regulation or the legal act establishing the controller by determining the purposes and means of processing, the processor shall be considered to be a controller in respect of that processing.
Voditelj obrade može u cijelosti ili djelomično ograničiti pravo pristupa ispitanika u onoj mjeri i u onom trajanju u kojem takvo djelomično ili potpuno ograničavanje čini neophodnu i razmjernu mjeru u demokratskom društvu uz dužno poštovanje temeljnih prava i legitimnih interesa dotičnog pojedinca, kako bi se:
Article 88
U slučajevima iz stavka 1. voditelj obrade bez nepotrebne odgode pisanim putem obavješćuje ispitanika o svakom odbijanju ili ograničavanju pristupa te o razlozima odbijanja ili ograničavanja.
Logging
To se ne primjenjuje ako bi pružanje takvih informacija dovelo u pitanje neku od svrha iz stavka 1.
The controller shall keep logs for any of the following processing operations in automated processing systems: the collection, alteration, access, consultation, disclosure, including transfers, combination and erasure of operational personal data.
Voditelj obrade obavješćuje ispitanika o mogućnosti da Europskom nadzorniku za zaštitu podataka podnese pritužbu ili da zatraži pravni lijek na Sudu.
The logs of consultation and disclosure shall make it possible to establish the justification for, and the date and time of, such operations, the identification of the person who consulted or disclosed operational personal data, and, as far as possible, the identity of the recipients of such operational personal data.
Voditelj obrade bilježi činjenične ili pravne razloge na kojima se odluka temelji.
The logs shall be used solely for verification of the lawfulness of processing, self-monitoring, ensuring the integrity and security of the operational personal data, and for criminal proceedings.
Te se informacije na zahtjev stavljaju na raspolaganje Europskom nadzorniku za zaštitu podataka.
Such logs shall be deleted after three years, unless they are required for ongoing control.
Članak 82.
The controller shall make the logs available to its data protection officer and to the European Data Protection Supervisor on request.
Pravo na ispravak ili brisanje operativnih osobnih podataka i ograničenje obrade
Article 89
Ispitanik ima pravo od voditelja obrade bez nepotrebne odgode ishoditi ispravak netočnih operativnih osobnih podataka koji se na njega odnose.
Where a type of processing, in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall carry out, prior to the processing, an assessment of the impact of the envisaged processing operations on the protection of operational personal data.
Uzimajući u obzir svrhe obrade, ispitanik ima pravo dopuniti nepotpune operativne osobne podatke, među ostalim i davanjem dodatne izjave.
The assessment referred to in paragraph 1 shall contain at least a general description of the envisaged processing operations, an assessment of the risks to the rights and freedoms of data subjects, the measures envisaged to address those risks, safeguards, security measures and mechanisms to ensure the protection of operational personal data and to demonstrate compliance with data protection rules, taking into account the rights and legitimate interests of the data subjects and other persons concerned.
Voditelj obrade briše operativne osobne podatke bez nepotrebne odgode, a ispitanik ima pravo od voditelja obrade ishoditi brisanje operativnih osobnih podataka koji se na njega odnose bez nepotrebne odgode ako se obradom krše odredbe članka 71., članka 72. stavka 1. ili članka 76. ili ako se operativni osobni podaci moraju izbrisati radi poštovanja pravne obveze kojoj voditelj obrade podliježe.
Article 90
Umjesto brisanja voditelj obrade ograničava obradu ako:
Prior consultation of the European Data Protection Supervisor
ispitanik osporava točnost osobnih podataka, a njihova se točnost ili netočnost ne može utvrditi; ili
The controller shall consult the European Data Protection Supervisor prior to processing which will form part of a new filing system to be created, where:
osobni podaci moraju biti sačuvani kao dokaz.
a data protection impact assessment under Article 89 indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk; or
Ako je obrada ograničena na temelju prvog podstavka točke (a), voditelj obrade obavješćuje ispitanika prije uklanjanja ograničenja obrade.
the type of processing, in particular, where using new technologies, mechanisms or procedures, involves a high risk to the rights and freedoms of data subjects.
Podaci obuhvaćeni ograničenjem obrađuju se samo u onu svrhu zbog koje nisu bili izbrisani.
The European Data Protection Supervisor may establish a list of the processing operations which are subject to prior consultation pursuant to paragraph 1.
Voditelj obrade obavješćuje ispitanika u pisanom obliku o svakom odbijanju ispravljanja ili brisanja operativnih osobnih podataka ili ograničavanja obrade te o razlozima odbijanja.
The controller shall provide the European Data Protection Supervisor with the data protection impact assessment referred to Article 89 and, on request, with any other information to allow the European Data Protection Supervisor to make an assessment of the compliance of the processing and in particular of the risks for the protection of operational personal data of the data subject and of the related safeguards.
Voditelj obrade može u cijelosti ili djelomično ograničiti pružanje takvih informacija u onoj mjeri u kojoj takvo ograničavanje čini nužnu i razmjernu mjeru u demokratskom društvu uz dužno poštovanje temeljnih prava i legitimnih interesa dotičnog pojedinca, i kako bi se:
Where the European Data Protection Supervisor is of the opinion that the intended processing referred to in paragraph 1 would infringe this Regulation or the legal act establishing the Union body, office or agency, in particular where the controller has insufficiently identified or mitigated the risk, the European Data Protection Supervisor shall provide written advice to the controller within a period of up to six weeks of receipt of the request for consultation.
izbjeglo dovođenje u pitanje sprečavanja, istrage, otkrivanja ili progona kaznenih djela ili izvršavanja kaznenih sankcija;
That period may be extended by a month, taking into account the complexity of the intended processing.
Voditelj obrade obavješćuje ispitanika o mogućnosti da Europskom nadzorniku za zaštitu podataka podnese pritužbu ili da zatraži pravni lijek na Sudu.
The European Data Protection Supervisor shall inform the controller of any such extension within one month of receipt of the request for consultation, together with the reasons for the delay.
Voditelj obrade o ispravku netočnih operativnih osobnih podataka obavješćuje nadležno tijelo od kojeg potječu netočni operativni osobni podaci.
Article 91
Ako su operativni osobni podaci bili ispravljeni ili izbrisani ili je obrada bila ograničena na temelju stavaka 1., 2. ili 3., voditelj obrade to priopćuje primateljima i obavješćuje ih o tome da moraju ispraviti ili izbrisati operativne osobne podatke ili ograničiti obradu operativnih osobnih podataka za koje su odgovorni.
Security of processing of operational personal data
Članak 83.
The controller and the processor shall, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks, in particular as regards the processing of special categories of operational personal data.
Pravo pristupa u kaznenim istragama i postupcima
In respect of automated processing, the controller and the processor shall, following an evaluation of the risks, implement measures designed to:
Ako operativni osobni podaci potječu od nadležnog tijela, tijela, uredi i agencije Unije prije odlučivanja o pravu pristupa ispitanika provjeravaju s dotičnim nadležnim tijelom nalaze li se takvi osobni podaci u sudskoj odluci ili evidenciji ili u spisu predmeta obrađenom tijekom kaznenih istraga i postupaka u državi članici tog nadležnog tijela.
deny unauthorised persons access to data processing equipment used for processing (‘equipment access control’);
U tom slučaju odluka o pravu pristupa donosi se u dogovoru i u bliskoj suradnji s dotičnim nadležnim tijelom.
prevent the unauthorised reading, copying, modification or removal of data media (‘data media control’);
Članak 84.
prevent the unauthorised input of operational personal data and the unauthorised inspection, modification or deletion of stored operational personal data (‘storage control’);
Ostvarivanje prava ispitanika i provjera koju provodi Europski nadzornik za zaštitu podataka