natgillin/translations-raw huggingface dataset:
The Danish consumer authority needs information in connection with the website.
Danski potrošniški organ potrebuje informacije o tej spletni strani.
It may therefore use the CPCS to make a request for information to the Swedish consumer authority which has an obligation to supply the information.
Zato lahko uporabi sistem SSVP, da pošlje zahtevek za informacije švedskemu potrošniškemu organu, ki mu mora te informacije predložiti.
Information is uploaded by Member States, stored in the CPCS, accessed by the Member States to whom the information was addressed and deleted by the Commission [3].
Informacije, ki se shranijo v sistem SSVP, naložijo države članice, do njih dostopajo države članice, na katere se te informacije nanašajo, izbriše pa jih Komisija [3].
The CPCS is used as a repository for information and as a means to exchange information through an efficient and secure communication system.
Sistem SSVP se uporablja kot podatkovna baza in sredstvo za izmenjavo informacij z učinkovitim in varnim komunikacijskim sistemom.
From a data protection perspective, the establishment of such a database always creates certain risks to the fundamental right of personal data protection: sharing more data than is strictly necessary for the purposes of efficient cooperation; retaining data that should have been deleted and holding data that is no longer accurate or is incorrect; and failing to ensure that the rights of data subjects and obligations of data controllers are respected.
Z vidika varstva podatkov je oblikovanje take podatkovne baze vedno nekoliko tvegano za temeljno pravico o varstvu osebnih podatkov: izmenjava več podatkov, kot je nujno potrebno za namene učinkovitega sodelovanja, hranjenje podatkov, ki bi morali biti izbrisani, in hranjenje podatkov, ki niso več točni ali so napačni, ter upoštevanje pravic posameznikov, na katere se nanašajo informacije, in obveznosti upravljavcev podatkov.
It is therefore necessary to address such risks by ensuring that the users of the CPCS are well informed and trained in data protection rules and capable of ensuring compliance with applicable data protection legislation.
Zato je treba taka tveganja obravnavati, tako da se zagotovi, da so uporabniki sistema SSVP dobro seznanjeni in usposobljeni na področju varstva podatkov in lahko zagotovijo skladnost z veljavno zakonodajo o varstvu podatkov.
DATA PROTECTION LEGAL AND SUPERVISORY FRAMEWORK
PRAVNI IN NADZORNI OKVIR VARSTVA PODATKOV
The European Union has an established legal framework on data protection since 1995: the Data Protection Directive [4] which governs the processing of personal data by Member States and by the Data Protection Regulation [5] which governs the processing of personal data by the European Union institutions and bodies.
Evropska unija ima uveljavljen pravni okvir za varstvo podatkov od leta 1995: Direktiva o varstvu podatkov [4], ki ureja obdelavo osebnih podatkov s strani držav članic, in Uredba o varstvu podatkov [5], ki ureja obdelavo podatkov s strani institucij in organov Evropske unije.
The application of the data protection law currently depends on who the CPCS actor or user is.
Uporaba zakonodaje o varstvu podatkov je trenutno odvisna od tega, kdo je udeleženec ali uporabnik sistema SSVP.
Processing acts undertaken by the Commission are governed by Data Protection Regulation and processing acts undertaken by case handlers in the competent national enforcement authorities are governed by the national laws transposing the Data Protection Directive.
Obdelavo podatkov, ki jo izvaja Komisija, ureja Uredba o varstvu podatkov, obdelavo podatkov, ki jo izvajajo vodje primera v nacionalnih izvršnih pristojnih organih, pa ureja nacionalna zakonodaja, ki prenaša Direktivo o varstvu podatkov.
Being the two main actors with specific roles to play in the CPCS, both the Commission and the designated competent authorities, as co-controllers, have an obligation to notify and submit their respective processing operations for prior checking by the relevant supervisory authorities and ensure compliance with data protection rules.
Ker sta Komisija in imenovani pristojni organi glavna udeleženca z določenimi vlogami v sistemu SSVP in zato soupravljavca, morata nujno obvestiti in predložiti svoje postopke obdelave v predhodno preverjanje zadevnim nadzornim organom in zagotoviti skladnost s pravili o varstvu podatkov.
That said national laws transposing the Data Protection Directive may provide exemptions from both the notification and prior checking requirements.
Navedena nacionalna zakonodaja, ki prenaša Direktivo o varstvu podatkov, lahko določa izjeme v obveščanju in zahtevah po predhodnem preverjanju.
The harmonisation of data protection laws was intended to ensure both a high level of data protection and safeguard the fundamental rights of individuals whilst allowing the free flow of personal data between Member States.
Namen usklajevanja zakonodaje o varstvu podatkov je zagotoviti visoko stopnjo varstva podatkov in zaščititi temeljne pravice posameznikov ter s tem omogočiti prosti pretok osebnih podatkov med državami članicami.
Given that national implementation measures may give rise to differing rules, in order to ensure compliance with data protection rules, CPCS users are strongly advised to discuss these guidelines with their national data protection authorities since rules may vary, for example, on the information to be provided to individuals or the duty to notify certain data processing operations to data protection authorities.
Ker se nacionalni izvedbeni ukrepi lahko različno razlagajo za zagotovitev skladnosti s pravili o varstvu podatkov, je zelo priporočljivo, da se uporabniki sistema SSVP o teh smernicah posvetujejo s svojimi nacionalnimi pristojnimi izvršnimi organi, ker se pravila o informacijah, na primer informacijah, ki se zagotovijo posamezniku, ali o obveznem obveščanju organov za varstvo podatkov o nekaterih postopkih obdelave podatkov, lahko razlikujejo.
A significant feature of the EU data protection legal framework is its supervision by independent data protection authorities.
Ena pomembnejših značilnosti pravnega okvira EU na področju varstva podatkov je nadzor, ki ga izvajajo neodvisni organi za varstvo podatkov.
Citizens have the right to lodge complaints before these authorities and promptly resolve their data protection concerns outside the courts.
Državljani imajo pravico, da pri teh organih vložijo pritožbe in so njihove težave v zvezi z varstvom podatkov razrešene čim prej in brez posredovanja sodišč.
The processing of personal data at national level is supervised by the national data protection authorities and the processing of personal data by the European institutions is supervised by the European Data Protection Supervisor (EDPS) [6].
Obdelavo osebnih podatkov na nacionalni ravni nadzorujejo nacionalni organi za varstvo podatkov, medtem ko obdelavo osebnih podatkov, ki jo izvajajo evropske institucije, nadzoruje Evropski nadzornik za varstvo podatkov (ENVP) [6].
Consequently, the Commission is subject to the supervision of the EDPS and other users of the CPCS to the supervision of national data protection authorities.
Zato je Komisija pod nadzorom ENVP, medtem ko so drugi uporabniki sistema SSVP pod nadzorom nacionalnih organov za varstvo podatkov.
The CPCS is a clear example of joint processing operations and joint controllership.
Sistem SSVP je nazoren primer postopkov skupne obdelave in skupnega upravljanja.
Whilst only the competent authorities in the Member States collect, record, disclose and exchange personal data, the storage and deletion of these data on its servers is the responsibility of the Commission.
Osebne podatke zbirajo, beležijo, razkrivajo in jih izmenjujejo le pristojni organi v državah članicah, za hrambo in izbris teh podatkov na svojih strežnikih pa je pristojna Evropska komisija.
The Commission does not have access to these personal data but is considered as the system manager and operator of the system.
Komisija nima dostopa do teh osebnih podatkov, vendar se šteje, da je skrbnica in upravljavka sistema.
Consequently, the allocation of different tasks and responsibilities between the Commission and the Member States can be summarised as follows:
Zato se porazdelitev različnih nalog in odgovornosti med Komisijo in državami članicami lahko povzame na naslednji način:
Each competent authority is a data controller with respect to its own data processing activities.
Vsak pristojni organ je pristojen za obdelavo svojih podatkov.
The Commission is not a user but the operator of the system, responsible primarily for the maintenance and security of the system architecture.
Komisija ni uporabnica, temveč upravljavka sistema, ter je pristojna predvsem za vzdrževanje in varnost ustroja sistema.
The Commission does not however have access to the information contained in mutual assistance and enforcement requests as these are only addressed to the Member States competent authorities dealing with the specific case in question.
Komisija dostopa zato, da spremlja uporabo Uredbe SVP in zakonodajo o varstvu potrošnikov iz Priloge k Uredbi SVP ter zbira statistične podatke v zvezi z izvajanjem teh dolžnosti.
That said the CPC Regulation does provide the possibility for the Commission to assist competent authorities in case of certain disputes [8] and to be invited to participate in a coordinated investigation involving more than two Member States [9].
Komisija nima dostopa do informacij iz zahtevkov za vzajemno pomoč in zahtevkov za izvršitev, ker so ti naslovljeni le na pristojne organe držav članic, ki obravnavajo zadevni posebni primer; Uredba SVP omogoča Komisiji, da pomaga pristojnim organom v primeru nekaterih pritožb [8] in sodeluje v usklajeni preiskavi, ki zajema več kot dve državi članici [9].
The CPCS actors share responsibility with respect to the legitimacy of the processing, information provision and rights of access, objection and rectification.
Udeleženci sistema SSVP si delijo odgovornost glede zakonitosti obdelave, določb glede obveščanja ter zagotavljanja pravic do dostopa, ugovora in popravka.
Both the Commission and the competent authorities in their roles as controllers are individually responsible for ensuring that the rules relating to their data processing operations are compatible with data protection rules.
Komisija in pristojni organi so kot upravljavci odgovorni za zagotovitev, da so pravila o postopkih obdelave podatkov v skladu s pravili o varstvu podatkov.
ACTORS AND USERS IN THE CPCS
UDELEŽENCI IN UPORABNIKI SISTEMA SSVP
Different access profiles exist within the CPCS: access to the database is restricted and allocated to a named competent authority official only (authenticated user) which is not transferable.
V okviru sistema SSVP obstajajo različni dostopni profili: dostop do podatkovne baze je omejen in dodeljen samo imenovanemu uradniku pristojnega organa (pooblaščeni uporabnik), ki ni prenesljiv.
Requests for access to the CPCS can only be granted to the officials notified to the Commission by Member States competent authorities.
Zahtevki za dostop od sistema SSVP se lahko dodelijo le uradnikom, o katerih pristojni organi držav članic obvestijo Komisijo.
A login/password is requested to enter the system which can be obtained by the single liaison office.
Za vstop v sistem sta potrebna uporabniško ime in geslo, ki ga lahko pridobi enotni povezovalni organ.
Only users in the requested and applicant competent authorities have full access to the complete information exchanged for a given case which includes all attachments in the CPCS case file.
Samo uporabniki v zaprošenih pristojnih organih in pristojnih organih prosilcih imajo popoln dostop do vseh izmenjanih informacij za določen primer, kar vključuje tudi vse priloge spisa o zadevi v sistemu SSVP.
Single liaison offices can only read key information on a case to allow them to identify the competent authority to which a request needs to be transferred.
Enotni povezovalni organi lahko o primeru preberejo le tiste ključne informacije, ki jim omogočijo, da lahko identificirajo pristojni organ, ki mu je treba poslati zahtevek.
They cannot read confidential documents attached to a request or an alert.
Zaupnih dokumentov, ki so priloženi zahtevku, ali opozorila ne morejo prebrati.
In enforcement cases, general information is shared between users in all the competent authorities notified as being responsible for the legal acts infringed.
V izvršitvenih primerih se splošne informacije izmenjajo med uporabniki v vseh pristojnih organih, ki so bili obveščeni, da so pristojni za kršene pravne akte.
This is done through the notifications.
To se izvede z obvestili.
These notifications should give a broad description of a case and should avoid including personal data.
Ta obvestila morajo zajemati natančen opis primera in ne smejo vsebovati osebnih podatkov.
Exceptions may exist such as the name of seller or supplier (if a natural person).
Izjemoma se lahko navede na primer ime prodajalca ali dobavitelja (če gre za fizično osebo).
The Commission has no access to information and enforcement requests or confidential documents but does receive notifications and alerts.
Komisija nima dostopa do zahtevkov za informacije in zahtevkov za izvršitev ali zaupnih informacij, vendar prejema obvestila in opozorila.
DATA PROTECTION PRINCIPLES APPLICABLE TO EXCHANGES OF INFORMATION
NAČELA V ZVEZI Z VARSTVOM PODATKOV, KI SE UPORABLJAJO ZA IZMENJAVO INFORMACIJ
Processing of personal data by the CPCS users in the Member States may only take place under conditions and in accordance with the principles that the Data Protection Directive establishes.
Obdelava osebnih podatkov, ki jo izvedejo uporabniki sistema SSVP v državah članicah, lahko poteka le pod določenimi pogoji in v skladu z načeli, ki jih določa Direktiva o varstvu podatkov.
The data controller is responsible for ensuring that the data protection principles are complied with when processing personal data in the CPCS.
Upravljavec podatkov mora zagotoviti, da se pri obdelavi osebnih podatkov v sistemu SSVP upoštevajo načela v zvezi z varstvom podatkov.
It should also be noted that both confidentiality and data protection rules apply to the CPCS.
Treba je tudi opozoriti, da se za sistem SSVP uporabljajo pravila o zaupnosti in pravila o varstvu podatkov.
Confidentiality rules and professional secrecy rules can apply to data in general whereas data protection rules are limited to personal data.
Pravila o zaupnosti in pravila o poklicni skrivnosti se lahko uporabljajo za podatke na splošno, pravila o varstvu podatkov pa so omejena na osebne podatke.
It is important to bear in mind that CPCS users in the Member States are responsible for many other processing operations and may not be data protection experts.
Treba je upoštevati, da so uporabniki sistema SSVP v državah članicah pristojni za številne druge postopke obdelave in da mogoče niso strokovnjaki za varstvo podatkov.
These guidelines are recommendations for the treatment of personal data and it should be recalled that not all the data exchanged within the CPCS is personal data.
Te smernice so priporočila za obdelavo osebnih podatkov, zato je treba opozoriti, da niso vsi podatki, izmenjani v sistemu SSVP, osebni podatki.
Before each upload of information into the CPCS, enforcement officials need to consider whether the personal data to be sent is strictly necessary to achieve the purposes of efficient cooperation and give consideration to whom they are sending the personal data.
Izvršilni uradniki morajo pred vsako naložitvijo informacij v sistem SSVP preveriti, ali je pošiljanje osebnih podatkov njuno potrebno za doseganje učinkovitega sodelovanja, in razmisliti, komu pošiljajo osebne podatke.
The enforcement official needs to ask himself whether the recipient strictly needs to receive this information for the purposes of the alert or mutual assistance request.
Izvršilni uradnik se mora vprašati, ali je nujno, da prejemnik prejme te informacije zaradi opozarjanja ali zahtevka za vzajemno pomoč.
The following list of fundamental data protection principles aims at assisting enforcement officials having access to the CPCS to make a case by case assessment of whether data protection rules related to the processing of personal data are being complied with each time they process personal data within the system.
Namen naslednjega seznama temeljnih načel v zvezi z varstvom podatkov je pomagati izvršilnim uradnikom, ki imajo dostop do sistema SSVP, da analizirajo vsak primer posebej in ugotovijo, ali se pri obdelavi osebnih podatkov v sistemu vsakokrat upoštevajo načela v zvezi z varstvom podatkov, ki se nanašajo na obdelavo osebnih podatkov.
Enforcement officials should also bear in mind that exemptions and restrictions on the application of the data protection principles, listed below, may exist at national level and are advised to consult their national data protection authorities [10].
Izvršilni uradniki morajo tudi upoštevati, da lahko obstajajo izjeme in omejitve pri uporabi spodaj navedenih načel v zvezi z varstvom podatkov na nacionalni ravni, in se jim priporoča, da se posvetujejo z nacionalnimi organi za varstvo podatkov [10].
What are the data protection principles to be observed?
Katera načela v zvezi z varstvom podatkov je treba upoštevati?
The general principles on data protection to be borne in mind before undertaking the processing of any personal data have been taken from the data protection Directive.
Pred obdelavo kakršnih koli osebnih podatkov je treba upoštevati glavna načela v zvezi z varstvom podatkov, ki so vzeta iz Direktive o varstvu podatkov.
Since this Directive has been transposed into national law, case-handlers are reminded to consult their national data protection supervisory authorities regarding the application of the principles listed below and are advised to see whether any exemptions or restrictions exist to the application of these principles.
Ker je bila direktiva prenesena v nacionalno zakonodajo, se vodje primera opozarja, da se z nacionalnimi nadzornimi organi za varstvo podatkov posvetujejo glede uporabe spodaj navedenih načel in se pozanimajo, ali pri uporabi teh načel obstajajo izjeme ali omejitve.
Principle of Transparency
Načelo preglednosti
According to the Data Protection Directive, the data subject has the right to be informed when his personal data is being processed.
V skladu z Direktivo o varstvu podatkov ima posameznik, na katerega se nanašajo informacije, pravico, da je seznanjen s tem, kdaj se njegovi podatki obdelujejo.
The controller is required to provide his name and address, the purpose of processing, the recipients of the data and all other information required to ensure the processing is fair [11].
Upravljavec mora zagotoviti njegovo ime in naslov, namen obdelave, prejemnike podatkov in vse druge informacije, ki se zahtevajo za pošteno obdelavo [11].
Data may be processed only under the following circumstances [12]:
Podatki se lahko obdelajo samo pod naslednjimi pogoji [12]:
when the data subject has given his consent,
kadar je posameznik, na katerega se nanašajo informacije, v to privolil;
when the processing is necessary for the performance of or the entering into a contract,
kadar je obdelava potrebna za izvajanje ali sklenitev pogodbe,
when processing is necessary for compliance with a legal obligation,
kadar je obdelava potrebna za skladnost s pravno obveznostjo,
when processing is necessary in order to protect the vital interests of the data subject,
kadar je obdelava potrebna za zaščito ključnih interesov posameznika, na katerega se nanašajo informacije,
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in a third party to whom the data are disclosed,
kadar je obdelava potrebna za izvajanje naloge, ki se opravlja v javnem interesu, pri izvrševanju javne oblasti, dodeljene upravljavcu, ali za tretjo stran, ki se ji podatki razkrijejo,
processing is necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed.
kadar je obdelava potrebna za zakonite namene, ki jih uresničujejo upravljavec, tretja stran ali strani, ki se jim podatki razkrijejo.
Principle of lawfulness and fairness
Načelo zakonitosti in poštenosti
Personal data cannot be collected or processed in unfair or unlawful ways, nor should it be used for ends not compatible with the purposes laid down in the CPC Regulation.
Osebni podatki se ne smejo nepošteno in nezakonito zbirati ali obdelovati, prav tako se ne smejo uporabljati za namene, ki niso v skladu z nameni iz Uredbe SVP.
For processing to be lawful, case handlers need to ensure that they have clear reasons justifying the processing need.
Za zagotovitev zakonite obdelave podatkov morajo vodje primera jasno upravičiti potrebo po obdelavi.
The processing needs to be conducted for specified, explicit and legitimate purposes and may not be processed further in a way incompatible with those purposes [13].
Obdelavo je treba izvajati za določene, izrecne in zakonite namene, prav tako nadaljnja obravnava ne sme biti nezdružljiva s temi nameni [13].
This can only be provided for in the CPC Regulation.
To se lahko zagotovi le z Uredbo SVP.
For the processing to be fair, the data subjects need to be informed of the purposes for which his/her data is to be processed and of the existence of the right of access, rectification and objection.
Za zagotovitev poštene obdelave podatkov je treba posameznike, na katere se nanašajo podatki, obvestiti o namenih obdelave njegovih podatkov in o obstoju pravic do dostopa, ugovora in popravka.
Principle of proportionality, accuracy and retention periods
Načelo sorazmernosti in natančnosti ter načelo v zvezi z obdobji hrambe
The information needs to be proportionate, adequate, relevant and not excessive in relation to the purposes for which they are collected and/or further processed.
Informacije morajo biti sorazmerne, primerne, ustrezne in ne pretirane glede na namene, za katere se zbirajo in/ali naprej obdelujejo.
The data must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that data which are inaccurate or incomplete, having regard to the purposes for which they were collected or for which they are further processed, are erased or rectified; personal data needs to be kept in a form which permits the identification of data subjects for no longer than is necessary for the purposes for which the data were collected or for which they were processed.
Podatki morajo biti natančni in po potrebi posodobljeni, uporabiti je treba vse razumne ukrepe za zagotovitev, da se netočni ali nepopolni podatki zbrišejo ali popravijo ob upoštevanju namenov, za katere so bili zbrani ali za katere se nadalje obdelujejo. Osebni podatki se morajo hraniti v obliki, ki dopušča identifikacijo posameznikov, na katere se nanašajo, le toliko časa, kolikor je to potrebno za namene, za katere so bili zbrani ali za katere so bili obdelani.
Appropriate safeguards need to be built in for personal data stored for longer periods for historical, statistical or scientific use.
Treba je oblikovati ustrezne zaščitne ukrepe za osebne podatke, shranjene za daljša obdobja za zgodovinsko, statistično ali znanstveno uporabo.
Case handlers need to consider whether the information that they are processing is strictly necessary to the purposes to be achieved.
Vodje primera morajo preučiti, ali se morajo informacije v obdelavi nujno arhivirati.
Principle of purpose limitation
Načelo v zvezi z omejitvijo namena
Personal data needs to be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes and brought to the attention of the data subject.
Osebne podatke je treba zbrati za posebne, izrecne in zakonite namene in se jih ne sme nadalje obdelovati na način, ki ni združljiv s temi nameni, nato pa je o tem treba obvestiti posameznika, na katerega se ti podatki nanašajo.