natgillin/translations-raw huggingface dataset:
In fact, the protection goes so far as to prevent the addressee of a request from seeing the personal information on the service provider until the addressee has formally accepted it;
Varstvo podatkov je celo tako strogo, da si naslovnik zahtevka ne more ogledati osebnih podatkov ponudnika storitev, dokler prejema zahtevka uradno ne potrdi.
Example of the view of a request before acceptance by the recipient
Primer zahtevka, preden prejemnik potrdi njegov prejem
All personal data relating to requests are automatically deleted from the system six months after the closure of a request or even before if requested by the competent authorities involved (for more details, see chapter 12 on retention period).
Vsi osebni podatki v zvezi z zahtevki se samodejno izbrišejo iz sistema šest mesecev po zaključku zahtevka ali celo prej, če to zahtevajo pristojni organi, ki so vključeni v izmenjavo (za več informacij glej poglavje 12 o obdobju hrambe).
WHO IS WHO IN IMI?
KDO JE KDO V SISTEMU IMI?
THE ISSUE OF JOINT CONTROLLERSHIP
VPRAŠANJE SKUPNEGA UPRAVLJANJA
IMI is a clear example of joint processing operations and joint controllership.
Sistem IMI je jasen primer postopkov skupne obdelave in skupnega upravljanja.
For example, whilst only the competent authorities in the Member States exchange personal data, the storage of these data on its servers is the responsibility of the European Commission.
Medtem ko si na primer osebne podatke izmenjujejo le pristojni organi v državah članicah, je za hrambo teh podatkov na svojih strežnikih odgovorna Evropska komisija.
Whilst the European Commission is not allowed to see this personal data it is the operator of the system who physically processes the deletion and rectification of the data.
Medtem ko Evropska komisija nima dostopa do teh osebnih podatkov, je upravljavka sistema, ki fizično izbriše in popravi podatke.
In other words and as a result of the allocation of different responsibilities between the Commission and the Member States:
To pomeni, da zaradi razdelitve različnih odgovornosti med Komisijo in državami članicami velja naslednje:
Each competent authority and each IMI coordinator is a controller with respect to its own data processing activities;
Vsak pristojni organ in koordinator IMI je odgovoren za svoje dejavnosti obdelave podatkov.
The Commission is not a user, but the operator of the system, responsible, primarily, for maintenance and security of the system [4];
Komisija ni uporabnica, temveč upravljavka sistema, ter je odgovorna predvsem za vzdrževanje in varnost sistema [4].
The IMI actors share responsibility with respect to notice provisions and rights of access, objection and rectification.
Udeleženci IMI si delijo odgovornosti glede obveščanja ter zagotavljanja pravic do dostopa, ugovora in popravka.
In complex scenarios of joint controllership like IMI, it seems most efficient from the perspective of compliance to embed data protection in the system from the beginning (see section: ‘Work in Progress’ under chapter 13: ‘Cooperation with data protection authorities and the EDPS’) and to define a compliance framework as provided in these guidelines.
V zapletenih primerih skupnega upravljanja sistemov, kot je sistem IMI, se z vidika skladnosti zdi najučinkovitejše, da se varstvo podatkov vključi v sistem že na samem začetku (glej oddelek „Delo v teku“ v poglavju 13 „Sodelovanje z organi za varstvo podatkov in ENVP“) in da se opredeli okvir za skladnost z zakonodajo, kot je določeno v teh smernicah.
Compliance with the framework is the responsibility of all IMI actors and users.
Za skladnost z zakonodajo so odgovorni vsi udeleženci in uporabniki IMI.
ACTORS AND USERS IN IMI
UDELEŽENCI IN UPORABNIKI V SISTEMU IMI
All actors which use IMI are validated by IMI coordinators.
Vse udeležence, ki uporabljajo sistem IMI, potrdijo koordinatorji IMI.
It is important to understand that IMI is a very flexible system whereby Member States may allocate responsibilities and functions to competent authorities and coordinators in many different ways in order to fit their particular administrative structure and the legislative areas to be covered by administrative cooperation.
Poudariti je treba, da je sistem IMI zelo prilagodljiv, pri čemer lahko države članice dodelijo odgovornosti in funkcije pristojnim organom in koordinatorjem na več različnih načinov, tako da ustrezajo njihovi posebni upravni strukturi in zakonodajnim področjem, zajetim v upravno sodelovanje.
It is also important to bear in mind that IMI users in the Member States are responsible for many other processing operations.
Poleg tega je treba upoštevati, da so uporabniki IMI v državah članicah odgovorni za številne druge postopke obdelave.
Data protection compliance in IMI does not need to be unduly complicated or pose an excessive administrative burden.
Skladnost z zahtevami varstva podatkov v sistemu IMI ne sme biti neupravičeno zapletena ali povzročati čezmerne upravne obremenitve.
Neither does it have to be a one-size fits all system.
Poleg tega ni treba, da temelji na enotnem pristopu.
In most cases competent authorities simply need to carry out the processing operations inside IMI under the same rules and good practices that they normally have in place as data controllers according to their own particular needs and the data protection laws of their Member States.
V večini primerov morajo pristojni organi izvesti postopke obdelave v sistemu IMI v skladu z istimi pravili in dobrimi praksami, ki jih morajo običajno izvajati kot upravljavci podatkov, pri čemer upoštevajo svoje posebne potrebe in zakonodajo o varstvu podatkov v svojih državah članicah.
They should also take advantage of the data protection-friendly environment offered within IMI.
Poleg tega morajo izkoristiti okolje, ki je prijazno varstvu podatkov in ki ga omogoča sistem IMI.
For example, they are encouraged to request that the personal data exchanged will be deleted from IMI even before the six months retention period lapses, if they no longer need to keep the information exchange in IMI.
Pristojne organe se na primer spodbuja, da zahtevajo izbris osebnih podatkov, ki so se izmenjevali, iz sistema IMI še pred iztekom šestmesečnega obdobja hrambe, če izmenjave informacij več ni treba hraniti v sistemu IMI.
LEGAL GROUNDS FOR THE EXCHANGES OF PERSONAL INFORMATION IN IMI
PRAVNA PODLAGA ZA IZMENJAVE OSEBNIH PODATKOV V SISTEMU IMI
The Commission has adopted Decision 2008/49/EC which sets out the functions, rights and obligations of IMI actors and users concerning the implementation of IMI as regards the protection of personal data.
Komisija je sprejela Odločbo 2008/49/ES, ki določa funkcije, pravice in obveznosti udeležencev in uporabnikov IMI glede izvajanja informacijskega sistema za notranji trg (IMI) v zvezi z varstvom osebnih podatkov.
Not all information exchanged in IMI is personal data.
Vse informacije, ki se izmenjujejo v sistemu IMI, niso osebni podatki.
For example, the information exchanged may concern legal persons [5] or the question and answer may not relate to any given individual (e.g. a general question as to whether a profession is regulated in a given Member State).
Informacije, ki se izmenjujejo, lahko na primer zadevajo pravne osebe [5] ali pa vprašanje in odgovor nista povezana z nobenim določenim posameznikom (npr. splošno vprašanje v zvezi s tem, ali je poklic v zadevni državi članici reguliran).
In many cases, however, the exchanges of information do concern individuals and therefore there must be legal grounds for the processing of personal data.
Vendar v številnih primerih izmenjave informacij dejansko zadevajo posameznike, zato je za obdelavo osebnih podatkov potrebna pravna podlaga.
The use of IMI is often in the interest of the data subject.
Uporaba sistema IMI je pogosto v interesu posameznika, na katerega se podatki nanašajo.
Nevertheless, even if the exchange of information is not necessarily in the interest of the data subject, it may be exchanged using IMI by competent authorities, provided that such exchange is required by a specific legal basis.
Čeprav ni nujno, da je izmenjava informacij v interesu posameznika, na katerega se podatki nanašajo, lahko pristojni organi kljub temu izmenjujejo informacije v sistemu IMI, če takšno izmenjavo določa posebna pravna podlaga.
Article 7 of Directive 95/46/EC lists the legal grounds for the processing of personal data.
Člen 7 Direktive 95/46/ES določa pravno podlago za obdelavo osebnih podatkov.
Of these, Article 7 (c) and Article 7 (e) are the most relevant for exchanges of data within IMI.
Za izmenjave podatkov v okviru sistema IMI sta najpomembnejša odstavka (c) in (e) tega člena.
Compliance with a legal obligation (Article 7 (c))
I Skladnost z zakonsko obveznostjo (člen 7(c))
As a general principle, EU Member States have the duty to cooperate with each other and with the Community Institutions.
Na splošno velja, da morajo države članice EU obvezno sodelovati med seboj in z institucijami Skupnosti.
The duty of administrative cooperation is explicit and specific in Directive 2005/36/EC (Recognition of Professional Qualifications) and Directive 2006/123/EC (Services Directive).
Obveznost upravnega sodelovanja je izrecno in podrobno določena v Direktivi 2005/36/ES (o priznavanju poklicnih kvalifikacij) in Direktivi 2006/123/ES (Direktiva o storitvah).
Article 56 (1) and (2) of the Professional Qualifications Directive provides as follows:
Člen 56(1) in (2) Direktive o poklicnih kvalifikacijah določa naslednje:
The competent authorities of the host and home Member States shall exchange information regarding disciplinary action or criminal sanctions taken or any other serious, specific circumstances which are likely to have consequences for the pursuit of activities under this Directive, respecting personal data protection legislation provided for in Directives 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (…) and 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) [OJ L 201, 31.7.2002, p. 37].’
Pristojni organi države članice gostiteljice in države članice izvora si izmenjujejo podatke o sprejetih disciplinskih ukrepih ali kazenskih sankcijah ali o kakršnih koli drugih resnih in posebnih okoliščinah, ki bi lahko vplivale na opravljanje dejavnosti po tej direktivi, ob spoštovanju zakonodaje o varovanju osebnih podatkov, predvidene v direktivah Evropskega parlamenta in Sveta 95/46/ES z dne 24. oktobra 1995 o varstvu posameznikov pri obdelavi osebnih podatkov in o prostem pretoku takih podatkov […] in 2002/58/ES z dne 12. julija 2002 o obdelavi osebnih podatkov in varstvu zasebnosti na področju elektronskih komunikacij (Direktiva o zasebnosti in elektronskih komunikacijah (UL L 201, 31.7.2002, str. 37)).“
Article 28 (1) and (6) of the Services Directive provides as follows:
Člen 28(1) in (6) Direktive o storitvah določa naslednje:
Member States shall give each other mutual assistance, and shall put in place measures for effective cooperation with one another, in order to ensure the supervision of providers and the services they provide (…)
Države članice si medsebojno pomagajo in sprejmejo ukrepe, ki so potrebni za učinkovito medsebojno sodelovanje pri nadzoru ponudnikov in njihovih storitev […]
Member States shall supply the information requested by other Member States or the Commission by electronic means and within the shortest possible period of time.’
Države članice informacije, ki jih zahteva druga država članica ali Komisija, predložijo v najkrajšem možnem času po elektronski poti.“
Article 34 (1) of the Services Directive provides as follows:
Člen 34(1) Direktive o storitvah določa naslednje:
The Commission, in cooperation with Member States, shall establish an electronic system for the exchange of information between Member States, taking into account existing information systems’.
Komisija v sodelovanju z državami članicami vzpostavi elektronski sistem za izmenjavo informacij med državami članicami, pri čemer upošteva obstoječe informacijske sisteme.“
The performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 7 (e)).
II Izvajanje naloge, ki se opravlja v javnem interesu ali pri izvrševanju javne oblasti, dodeljene upravljavcu (člen 7(e))
IMI actors and users carry out tasks in the public interest or in the exercise of official authority vested in them.
Udeleženci in uporabniki IMI izvajajo naloge v javnem interesu ali izvršujejo javno oblast, ki jim je dodeljena.
All registrations in IMI are validated by the IMI Coordinator after making sure that the competent authority in question does carry out tasks either in the public interest (for example doctors or veterinary bodies ensuring that their members conform to ethical or sanitary rules) or in the exercise of official authority vested in them (e.g. Ministries of Education ensuring that secondary education teachers have the correct qualifications).
Vse registracije v sistemu IMI potrdi koordinator IMI, potem ko se prepriča, da zadevni pristojni organ dejansko izvaja naloge v javnem interesu (npr. ali zdravniki ali veterinarski organi zagotavljajo, da njihovi člani delujejo v skladu z etičnimi ali sanitarnimi pravili) ali izvršuje javno oblast, ki mu je dodeljena (npr. ali ministrstva za šolstvo zagotavljajo, da imajo srednješolski učitelji ustrezne kvalifikacije).
Based on the foregoing, you may use IMI to exchange personal data under the Professional Qualifications and Services Directives for the purposes set out in their provisions.
Na podlagi navedenega se lahko sistem IMI uporablja za izmenjavo osebnih podatkov v skladu z Direktivo o poklicnih kvalifikacijah in Direktivo o storitvah ter za namene, ki so opredeljeni v njunih določbah.
Information in relation to other internal market legislation cannot be exchanged in IMI.
V sistemu IMI ni mogoče izmenjavati informacij, povezanih z drugo zakonodajo glede notranjega trga.
If the scope of IMI is at any stage widened to include additional legislation, appropriate reference to the relevant Community acts will be added to the annex of Decision 2008/49/EC.
Če bo področje uporabe sistema IMI kadar koli razširjeno in bo vključevalo dodatno zakonodajo, bo ustrezno sklicevanje na zadevne akte Skupnosti dodano v prilogo k Odločbi 2008/49/ES.
THE ISSUE OF THE APPLICABLE LAW AND THE APPROPRIATE SUPERVISION
VPRAŠANJE ZAKONODAJE, KI SE UPORABLJA, IN USTREZNEGA NADZORA
The applicable data protection law depends on who the IMI actor or user is.
Zakonodaja o varstvu podatkov, ki se uporablja, je odvisna od tega, kdo je udeleženec ali uporabnik IMI.
For the European Commission, for example, the Data Protection Regulation (EC) No 45/2001 applies.
Za Evropsko komisijo se na primer uporablja Uredba (ES) št. 45/2001 o varstvu podatkov.
For a national user (e.g. a competent authority) the applicable law is its national data protection law which must be in conformity with Directive 95/46/EC (Data Protection Directive).
Za nacionalnega uporabnika (npr. pristojni organ) se uporablja njegova nacionalna zakonodaja o varstvu podatkov, ki mora biti v skladu z Direktivo 95/46/ES (Direktiva o varstvu podatkov).
IMI national coordinators are therefore advised to discuss these guidelines with their data protection authorities, for example as regards the details of information to be provided to individuals (see chapter 9 on this matter) or the duty to notify certain data processing operations to data protection authorities.
Zato je priporočljivo, da nacionalni koordinatorji IMI o teh smernicah razpravljajo s svojimi organi za varstvo podatkov, na primer v zvezi s posameznimi informacijami, ki se zagotovijo posameznikom (glej poglavje 9 na to temo), ali obveznim obveščanjem organov za varstvo podatkov o nekaterih postopkih obdelave podatkov.
Directive 95/46/EC is an Internal Market Directive which has a dual purpose.
Direktiva 95/46/ES zadeva notranji trg in ima dvojni namen.
The harmonisation of national data protection legislation is intended both to ensure a high level of data protection and to safeguard the fundamental rights of individuals and thus to allow the free flow of personal data between Member States.
Namen usklajevanja nacionalne zakonodaje o varstvu podatkov je zagotoviti visoko stopnjo varstva podatkov in varovati temeljne pravice posameznikov ter s tem omogočiti prosti pretok osebnih podatkov med državami članicami.
Therefore, national specificities should not have any practical or significant impact on the use of IMI and the exchange of information required by other Community acts.
Zato nacionalne posebnosti ne smejo imeti nobenega praktičnega ali znatnega vpliva na uporabo sistema IMI in izmenjavo informacij, ki jih zahtevajo drugi akti Skupnosti.
One of the most significant features of the EU data protection legal framework is its supervision by public independent data protection authorities.
Ena od najpomembnejših značilnosti pravnega okvira EU za varstvo podatkov je nadzor, ki ga izvajajo javni neodvisni organi za varstvo podatkov.
As a result, citizens may lodge complaints before these authorities to get their data protection problems dealt with promptly and outside the courts.
Zato lahko državljani pri teh organih vložijo pritožbe, da bi se njihove težave v zvezi z varstvom podatkov razrešile čim prej in brez posredovanja sodišč.
The processing of personal data at national level is supervised by the national data protection authorities and the processing of personal data by the European Institutions is supervised by the European Data Protection Supervisor (EDPS).
Obdelavo osebnih podatkov na nacionalni ravni nadzorujejo nacionalni organi za varstvo podatkov, medtem ko obdelavo osebnih podatkov, ki jo izvajajo evropske institucije, nadzoruje Evropski nadzornik za varstvo podatkov (ENVP).
Consequently, the European Commission is subject to the supervision of the EDPS and other users of IMI, to the supervision of the national data protection authorities involved.
Zato je Evropska komisija pod nadzorom ENVP, medtem ko so drugi uporabniki IMI pod nadzorom zadevnih nacionalnih organov za varstvo podatkov.
For more details on how to deal with complaints or data subjects’ requests, see chapter 10 on the rights of access and rectification and chapter 13 on the issue of cooperation with data protection authorities and the EDPS.
Za več informacij v zvezi z obravnavo pritožb ali zahtevkov posameznikov, na katere se podatki nanašajo, glej poglavje 10 o pravicah do dostopa in popravka ter poglavje 13 o vprašanju sodelovanja z organi za varstvo podatkov in ENVP.
DATA PROTECTION PRINCIPLES APPLICABLE TO EXCHANGES OF INFORMATION
NAČELA VARSTVA PODATKOV, KI VELJAJO ZA IZMENJAVE INFORMACIJ
The processing of personal data under EC Law may only take place under certain conditions (see chapter 6: ‘Legal grounds for the exchanges of personal information in IMI’) and in accordance with some principles that the Data Protection Directive calls ‘principles relating to data quality’ (see Article 6 thereof).
Obdelava osebnih podatkov v skladu z zakonodajo ES lahko poteka le v določenih pogojih (glej poglavje 6 „Pravna podlaga za izmenjave osebnih podatkov v sistemu IMI“) in v skladu z nekaterimi načeli, ki se v Direktivi o varstvu podatkov imenujejo „načela v zvezi s kakovostjo podatkov“ (glej člen 6 te direktive).
Data controllers should only collect personal data for legitimate and specific purposes and not process it for other purposes incompatible with those stated at the time of the collection.
Upravljavci podatkov lahko zbirajo osebne podatke le za zakonite in posebne namene ter jih ne smejo obdelovati za druge namene, ki niso združljivi z nameni, določenimi ob zbiranju podatkov.
A classical example of incompatible purposes would be a competent authority selling on to private companies for marketing purposes the address data that it collected for purposes of handling the case of migrant professionals under the Services Directive.
Klasičen primer nezdružljivih namenov bi bil, če bi pristojni organ podatke o naslovih, ki jih je zbiral za obravnavo primera strokovnjakov migrantov v skladu z Direktivo o storitvah, prodajal zasebnim družbam za namene trženja.
Furthermore, processing of personal data needs to be proportionate (adequate, relevant and not excessive) to the purposes of the collection and the controller must also take reasonable steps to ensure that the data is kept up to date and that it is destroyed or rendered anonymous once the identification of the data subject is no longer necessary.
Poleg tega mora biti obdelava osebnih podatkov sorazmerna (primerna, ustrezna in ne pretirana) z nameni zbiranja podatkov, pri čemer mora upravljavec sprejeti tudi primerne ukrepe, da zagotovi, da se podatki posodobijo in uničijo ali spremenijo v anonimne, potem ko identifikacija posameznika, na katerega se podatki nanašajo, ni več potrebna.
Data quality principles are good information management principles because a good information system is not one that keeps gigabytes of data for no particular reason and that soon becomes out of date and unreliable.
Načela v zvezi s kakovostjo podatkov so načela dobrega upravljanja informacij, ker dober informacijski sistem ni tisti sistem, ki brez posebnega razloga hrani veliko količino podatkov ter kmalu postane zastarel in nezanesljiv.
A good electronic information system should collect only the data that is necessary for the purposes set out in advance and these data should be kept up to date so that they can be relied on fully.
Dober elektronski informacijski sistem mora zbirati le podatke, ki so potrebni za vnaprej določene namene, pri čemer je treba te podatke posodabljati, tako da so popolnoma zanesljivi.
Applying these data quality principles to the functioning of IMI, leads to the following recommendations:
Na podlagi uporabe teh načel v zvezi s kakovostjo podatkov pri delovanju sistema IMI se priporoči naslednje.
The use of IMI should be strictly limited to the purposes set out in the applicable legislation (e.g. in case of justified doubt or for any other reasons set out in the applicable legislation).
Uporaba sistema IMI mora biti strogo omejena na namene, ki so določeni v veljavni zakonodaji (npr. v primeru upravičenega dvoma ali iz kakršnega koli drugega razloga, določenega v veljavni zakonodaji).
Therefore, while it is expected that IMI will become the routine way to exchange information between competent authorities, it must be absolutely clear that IMI should not be used systematically to carry out background checks on migrant professionals or service providers.
Ker se pričakuje, da bo sistem IMI postal standarden način izmenjave informacij med pristojnimi organi, mora biti popolnoma jasno, da se sistem IMI ne sme sistematično uporabljati za preverjanje preteklosti strokovnjakov migrantov ali migrantov ponudnikov storitev.
The requesting competent authority should provide only the personal data that the responding competent authority needs to be able to unambiguously identify the person in question or to answer the questions.
Pristojni organ prosilec mora zagotoviti le tiste osebne podatke, ki jih pristojni organ prejemnik potrebuje, da nedvoumno identificira zadevno osebo ali odgovori na vprašanja.
For example, if a migrant professional can be identified by his name and registration number in a professional registry, there should be no need to also provide his personal identification number.
Če je na primer strokovnjaka migranta mogoče identificirati po njegovem imenu in registracijski številki v strokovnem registru, ni treba zagotoviti tudi njegove osebne identifikacijske številke.
IMI users should carefully select the questions and not ask more than is absolutely necessary.
Uporabniki IMI morajo previdno izbrati vprašanja in ne smejo postavljati vprašanj, ki niso popolnoma nujna.
This is not only a matter of respecting data quality principles, but also a matter of reducing administrative burden.
To ni le vprašanje spoštovanja načel v zvezi s kakovostjo podatkov, ampak tudi zmanjšanja upravne obremenitve.