natgillin/translations-raw huggingface dataset:
Case handlers should only process personal data only when there is a clear purpose for doing so i.e. that legal grounds exist within the CPC Regulation that justifies the transfer.
Vodje primera morajo obdelati osebne podatke samo, kadar za to obstaja jasen namen, npr. pravni razlogi iz Uredbe SVP, ki upravičujejo prenos.
Rights of access
Pravica do dostopa
Data subjects have the right according to the Data Protection Directive [14] to be informed that their personal data are being processed; the purposes for the processing; the recipients of the data and that they have specific rights i.e. the right to information and rectification.
Posamezniki, na katere se nanašajo informacije, imajo v skladu z Direktivo o varstvu podatkov [14] pravico, da so seznanjeni z obdelavo svojih podatkov, nameni obdelave, prejemnikih podatkov in da imajo posebne pravice, tj. pravico do informacij in popravka.
The data subject has the right to access all data processed on him.
Posameznik, na katerega se nanašajo informacije, ima pravico do dostopa do vseh svojih podatkov v obdelavi.
The data subject also has the right to request the rectification, deletion or blocking of data that is incomplete, inaccurate or is not being processed in compliance with the data protection rules [15].
Prav tako ima pravico, da zahteva popravek, izbris ali blokiranje podatkov, ki so nepopolni, nenatančni ali niso bili obdelani v skladu s pravili o varstvu podatkov [15].
Processing of data revealing racial or ethnical origin, political opinions, religious or philosophical beliefs, trade-union membership, health, sex life, offences and criminal convictions is prohibited.
Obdelava podatkov, ki razkrivajo rasno ali etnično pripadnost, politično prepričanje, verska ali filozofska prepričanja, pripadnost sindikatu, zdravstveno stanje, spolno življenje, prekrške in kazenske obsodbe, je prepovedana.
However, the Data Protection Directive [16] does provide for certain exemptions to this rule where sensitive data may be processed under given conditions [17].
Vendar Direktiva o varstvu podatkov [16] določa nekatere izjemne primere, v katerih se občutljivi podatki lahko obdelajo pod določenimi pogoji [17].
Since CPCS users may find themselves in a position where they are handling sensitive data [18], it is advised to approach sensitive data with caution.
Ker se lahko zgodi, da morajo uporabniki sistema SSVP upravljati občutljive podatke [18], se priporoča, da se občutljivi podatki obravnavajo previdno.
CPCS users are recommended to consult their national data protection authority on whether derogations apply to the processing sensitive data.
Priporoča se, da se uporabniki sistema SSVP z nacionalnimi organi za varstvo podatkov posvetujejo, ali se za obdelavo občutljivih podatkov uporabijo odstopanja.
In the context of the prevention, investigation, detection and prosecution of criminal offences some exemptions are allowed by the Data Protection Directive.
Direktiva o varstvu podatkov dovoljuje nekatere izjeme v okviru preprečevanja, preiskave, odkrivanja in pregona kaznivih dejanj.
Case handlers are advised to consult national law to assess whether such exemptions are possible and to what extent [19].
Priporoča se, da vodje primera preverijo nacionalno zakonodajo in tako ocenijo, ali so take izjeme možne in v kakšni meri [19].
Should such exemptions be used, it is recommended that they are clearly indicated in the privacy statements of each competent authority.Applying the data protection principles
Priporoča se, da se v primeru izjem to jasno navede v izjavah o varstvu podatkov vsakega prisojnega organa.Uporaba načel v zvezi z varstvom podatkov
Applying these data protection principles to the functioning of the CPCS leads to the following recommendations:
Na podlagi uporabe teh načel v zvezi z varstvom podatkov pri delovanju sistema SSVP se priporoča naslednje:
The use of the CPCS should be strictly limited to the purposes set out in the CPC Regulation.
Uporaba sistema SSVP mora biti strogo omejena na uporabo za namene iz Uredbe SVP.
Article 13(1) of the CPC Regulation states that information communicated may only be used for the purpose of ensuring compliance with the laws that protect consumers’ interests.
Člen 13(1) Uredbe SVP določa, da se sporočene informacije lahko uporabijo le za zagotavljanje skladnosti z zakonodajo, ki ščiti interese potrošnikov.
These laws are listed in the Annex to the CPC Regulation.
Ta zakonodaja je navedena v Prilogi k Uredbi SVP.
It is recommended that enforcement officials use the information obtained from a mutual assistance request or alert only for the purposes relating to that specific case, in strict compliance with data protection legal requirements, assessing ex ante the necessity of the processing in the context of investigations carried out in the wider public interest.
Priporoča se, da izvršitveni uradniki uporabijo informacije, pridobljene iz zahtevka za vzajemno pomoč, ali pa pošljejo opozorilo samo v zvezi s tem posebnim primerom, v skladu s pravnimi zahtevami za varstvo podatkov, pri čemer morajo predhodno oceniti potrebo po obdelavi v okviru preiskav, ki so bile izvedene v širšem javnem interesu.
When transferring data, enforcement officials make an assessment on a case by case basis of who should be the recipients of the information to be processed.
Pri prenosu podatkov izvršilni uradniki za vsak primer posebej ocenijo, kdo so prejemniki informacij, ki jih je treba obdelati.
The CPCS users should carefully select the questions they ask in the mutual assistance request and not ask for more data than in necessary.
Uporabniki sistema SSVP morajo previdno izbrati vprašanja, ki jih postavljajo v zahtevku za vzajemno pomoč, in ne smejo zahtevati več podatkov, kot je potrebno.
This is not only an issue of respecting data quality principles but also a matter of reducing the administrative burden.
To ni le vprašanje spoštovanja načel v zvezi s kakovostjo podatkov, ampak tudi zmanjšanja upravne obremenitve.
The Data Protection Directive [20] requires that personal data needs to be accurate and kept up to date.
Direktiva o varstvu podatkov [20] določa, da morajo biti osebni podatki natančni in posodobljeni.
It is recommended that it should be for the competent authority which supplied the information to contribute towards the ensuring the accuracy of the data stored in the CPCS.
Priporoča se, da pristojni organ, ki je predložil informacijo, prispeva k zagotavljanju natančnosti podatkov, ki so shranjeni v sistemu SSVP.
Pop up messages have been added as a feature in the CPCS to periodically remind case handlers to check whether personal data is accurate and kept up to date.
V sistem SSVP so bila dodana sporočila, ki se občasno pojavijo in vodjo primera opomnijo, da preveri, ali so osebni podatki natančni in posodobljeni.
A practical way to inform data subjects’ of their rights is through a comprehensive webpage privacy notice.
Praktični način obveščanja posameznikov, na katere se nanašajo informacije, o njihovih pravicah je s splošnim obvestilom o varovanju zasebnosti na spletiščih.
It is recommended that each competent authority should provide a webpage privacy notice on their websites.
Priporoča se, da vsak pristojni organ na svojih spletiščih zagotovi splošno obvestilo o varovanju zasebnosti na spletiščih.
Each privacy notice should conform with all the information obligations as established by the Data Protection Directive, include a link to the Commission’s privacy notice webpage and should give further details including contact details on the competent authority in question as well as any national restrictions on the right of access or information.
Vsako obvestilo o varovanju zasebnosti mora biti v skladu z obveznostmi glede informacij, kakor je določeno v Direktivi o varstvu podatkov, vključevati mora povezavo na obvestilo Komisije o varovanju zasebnosti na spletiščih ter navajati podrobnejše informacije, vključno s kontaktnimi podatki zadevnega pristojnega organa in vsemi nacionalnimi omejitvami o pravici do dostopa ali informacij.
All data controllers involved are responsible for ensuring that privacy notices are published.
Vsi zadevni upravljavci podatkov morajo zagotoviti, da se obvestila o varovanju zasebnosti objavijo.
The data subject may request access, rectification and deletion of their personal data from more than one source.
Posameznik, na katerega se nanašajo informacije, lahko zahteva dostop, popravek in izbris svojih osebnih podatkov iz več kot enega vira.
Although each competent authority is responsible, as the data controller, for its own data processing operations, a coordinated response to requests relating to cross-border cases should be pursued.
Čeprav je vsak pristojni organ kot upravljavec podatkov pristojen za obdelavo podatkov, si je treba prizadevati za usklajen odziv na zahtevke v zvezi s čezmejnimi primeri.
It is recommended that in such cases, competent authorities inform other concerned competent authorities of the receipt of the request.
V teh primerih se priporoča, da pristojni organi o prejemu zahtevka obvestijo druge zadevne pristojne organe.
When a competent authority considers that granting a request may affect the investigation or enforcement procedure being carried out by other competent authorities, the former should request the opinion of the latter before granting the request.
Kadar pristojni organ meni, da odobritev zahtevka lahko vpliva na preiskavo ali postopek izvršitve, ki ga izvaja drugi pristojni organ, lahko pred odobritvijo zahtevka od tega pristojnega organa zahteva mnenje.
The data subject may also turn to the Commission with its request.
Tudi posameznik, na katerega se nanašajo informacije, lahko Komisiji predloži zahtevek.
The Commission may only grant a request for data to which it has access.
Komisija lahko odobri zahtevek le za podatke, do katerih ima dostop.
On receipt of a request, the Commission should consult the competent authority which supplied the information.
Po prejemu zahtevka se mora posvetovati s pristojnim organom, ki je predložil informacije.
If no objections are raised or the competent authority fails to respond within a reasonable period, the Commission may decide whether or not to grant the request on the basis of the Data Protection Regulation.
Če ni bilo predloženih nobenih pripomb ali pristojni organ ne odgovori v razumnem roku, lahko Komisija določi, ali bo odobrila zahtevek na podlagi Uredbe o varstvu podatkov ali ne.
The Commission should also request the opinion of competent authorities whose investigative or enforcement activities may be compromised as a result of granting the request.
Zahtevati mora tudi mnenje pristojnih organov, katerih preiskovalne ali izvršilne dejavnosti so lahko zaradi odobritve zahtevka ogrožene.
The Commission should examine whether incorporating additional technical features into the CPCS would facilitate such exchanges.
Preučiti mora, ali bo vključitev dodatnih tehničnih lastnosti v sistem SSVP olajšala take izmenjave.
The CPC Implementing Decision 2007/76/EC provides the establishment of data fields within the CPCS for the names of company directors.
Odločba 2007/76/ES o izvajanju SVP določa uvedbo podatkovnih polj v sistemu SSVP za imena direktorjev družb.
Enforcement officials need to make an assessment on whether the inclusion of this type of personal data is necessary to solve the case.
Izvršilni uradniki morajo oceniti, ali je vključitev te vrste osebnih podatkov potrebna za rešitev primera.
A case by case assessment of whether it is necessary to include the name of a company director in the designated data field needs to be made before each upload of information in the CPCS and prior to sending an alert or mutual assistance request to another competent authority.
Da se ugotovi, ali je potrebno vključiti ime direktorja družba v opredeljeno podatkovno polje, je treba vsak primer posebej oceniti pred naložitvijo informacij v sistem SSVP in preden se drugemu pristojnemu organu pošlje opozorilo ali zahtevek za vzajemno pomoč.
The CPC Implementing Decision 2007/76/EC requires that the competent authority uploading information or enforcement requests or alerts needs to indicate whether the information is to be treated confidentially.
Odločba 2007/76/ES o izvajanju SVP določa, da mora pristojni organ, ki naloži informacije, zahtevke za izvršitev ali opozorila, navesti, ali je treba te informacije obravnavati zaupno.
This is to be done on a case by case basis.
To se izvede za vsak primer posebej.
Similarly, the requested authority, when supplying information, needs to indicate whether the information is to be treated confidentially.
Podobno mora zaprošeni organi pri predložitvi informacij navesti, ali je treba informacije obravnavati zaupno.
The CPCS includes a default value feature where CPCS users need to explicitly grant access to documents by unclicking the confidential flag.
Sistem SSVP vključuje privzeto vrednost, ki jo uporabniki sistema SSVP uporabijo, če želijo izrecno dovoliti dostop do dokumentov, in sicer tako da odstranijo kljukico pri zastavici, ki označuje zaupnost.
CPCS AND DATA PROTECTION
SSVP IN VARSTVO PODATKOV
Data protection friendly environment
Okolje, prijazno varstvu podatkov
The CPCS has been designed with data protection legislation requirements in mind:
Pri oblikovanju sistema SSVP se je upoštevala zakonodaja o varstvu podatkov:
The s-TESTA network is based on a dedicated private infrastructure completely separated from the Internet.
Mreža s-TESTA temelji na zasebni infrastrukturi, ki je namenoma popolnoma ločena od interneta.
Appropriate security measures are included in the system’s design to ensure the best possible protection for the Network.
Za zagotovitev najboljše zaščite za mrežo so bili v strukturo sistema vključeni ustrezni varnostni ukrepi.
The Network is subject of a security accreditation to make it suitable for transmitting information classified at the level ‘EU Restricted’.
Mreža ima varnostno akreditacijo in je zato primerna za prenos zaupnih informacij vrste „Restreint UE“.
A number of technical features have been introduced: secure and personalised passwords to notified competent officials in designated authorities, use of a secure network s-TESTA), pop-up messages that remind case handlers that they need to consider data protection rules when processing personal data, creation of different user profiles that modulate the access to the information depending on the user role (the competent authority, the single liaison office or the Commission), the possibility to limit access to documents by defining them as confidential and the message on the CPCS homepage pointing to the data protection rules.
Uvedene so bile številne tehnične lastnosti: varna in osebna gesla za prijavljene pristojne uradnike v imenovanih uradih, uporaba varne mreže)s-TESTA), pojavna okna s sporočilom, ki vodje primera opomnijo, da pri obdelavi osebnih podatkov upoštevajo pravila o varstvu podatkov, uporaba različnih uporabniških profilov, ki regulirajo dostop do informacij glede na vlogo (pristojni organ, enotni povezovalni organ ali Komisija), možnost omejitve dostopa do dokumentov, tako da se jih označi kot zaupne, ter sporočilo na domači strani sistema SSVP, ki napotuje na pravila o varstvu podatkov.
Implementing rules [21] that cover key aspects to ensure data protection compliance: clear deletion rules (what information; how and when to delete data); principles that specify the types of access to the information (only directly concerned competent authorities have full access and the others only have general information).
Izvedbena pravila [21], ki zajemajo ključne vidike za zagotavljanje skladnosti z zahtevami o varstvu podatkov: jasna pravila o izbrisu (katere informacije, kako in kdaj izbrisati podatke), načela, ki določajo vrste dostopa do informacij (samo pristojni organi, na katere se te informacije neposredno nanašajo, imajo neomejen dostop, drugi pa imajo dostop le do splošnih informacij).
Operational guidelines [22] that further clarify what to consider when completing the different data fields and integration of these guidelines [23].
Smernice za delovanje [22], ki podrobneje pojasnjujejo, kaj je treba upoštevati pri izpolnjevanju različnih podatkovnih polj, ter vključevanje teh smernic [23].
Annual reviews to ensure that competent authorities verify the accuracy of personal data (tagging is planned but has not yet been implemented) and also that cases are closed and/or deleted as foreseen by the rules to ensure that cases are not forgotten.
Letni pregledi za zagotovitev, da pristojni organi preverijo natančnost osebnih podatkov (načrtovano je označevanje, vendar se še ne izvaja) in tistih primerov, ki so zaključeni in/ali zbrisani, kakor določajo pravila, za zagotovitev, da se navedeni primeri ne pozabijo.
The Commission organises on a regular basis with Member States a systematic review of cases that have been opened for a period substantially longer than the average case-handling period.
Komisija skupaj z državami članicami redno organizira sistematični pregled primerov, ki so bili odprti dlje, kot je povprečno obdobje obravnavanja primera.
Automatic deletion of mutual assistance cases 5 years after the closing of the case as required by the CPC Regulation.
Avtomatični zbris primerov vzajemne pomoči 5 let po zaključku primera, kakor to zahteva Uredba SVP.
The CPCS is an evolving IT-tool which aims to be data protection friendly.
Sistem SSVP je orodje IT, ki se še razvija in katerega namen je uporaba, prijazna varstvu podatkov.
Many safeguard features have already been built into the system architecture which has been described above.
V ustroj sistema so bile vgrajene številne zgoraj opisane zaščitne lastnosti.
The Commission intends to continue developing further improvements as required.
Komisija namerava nadaljevati razvoj nadaljnjih izboljšav, kakor bo to potrebno.
Some additional guidance
Nekaj dodatnih smernic
How long should a case be stored and when should it be closed and deleted?
Koliko časa je treba primer hraniti in kdaj ga je treba zaključiti in izbrisati?
Only the Commission can delete information from the CPCS [24] and it does so normally at the request of a competent authority.
Samo Komisija lahko izbriše informacije iz sistema SSVP [24] in to lahko stori le na zahtevo pristojnega organa.
When making such a request, the competent authority needs to specify the grounds for the deletion request.
Pri oblikovanju takega zahtevka mora pristojni organ navesti razloge za izbris.
The only exception is enforcement requests.
Edina izjema so zahtevki za izvršitev.
These are automatically deleted by the Commission 5 years from the closure of the case by the applicant authority.
Te Komisija avtomatično izbriše 5 let po tem, ko pristojni organ zaključi primer.
Rules with given time limits have been established to ensure the deletion of data that is no longer required; inaccurate; proves to be unfounded and/or has been retained for maximum storage periods.
Določena so bila pravila z določenimi časovnimi omejitvami, da se zagotovi izbris podatkov, ki niso več potrebni, niso natančni in za katere se je izkazalo, da so neupravičeni in/ali so dosegli najdaljše obdobje hrambe.
Why is the data retention period set at 5 years?
Zakaj je določeno obdobje hrambe 5 let?
The purpose of the retention period is to facilitate cooperation between public authorities responsible for the enforcement of the laws that protect consumers’ interests in dealing with intra-Community infringements, to contribute to the smooth functioning of the internal market, the quality and consistency of enforcement of the laws that protect the consumers’ interest, the monitoring of the protection of consumers economic interests and to contribute to raising the standard and consistency of enforcement.
Namen obdobja hrambe je, da se pri obravnavi kršitev znotraj Skupnosti olajša sodelovanje med javnimi organi, pristojnimi za izvrševanje zakonodaje o varstvu interesov potrošnikov, da se prispeva k nemotenemu delovanju notranjega trga, kakovosti in doslednosti izvrševanja zakonodaje o varstvu interesov potrošnikov, spremljanju varstva ekonomskih interesov potrošnikov ter da se prispeva k zviševanju standarda in usklajenosti izvrševanja.
During the retention period authorised enforcement officials working for a competent authority that originally dealt with a case may consult the file in order to establish links with possibly repeated infringements which contributes to a better and more efficient enforcement.
Pooblaščeni izvršitveni uradniki pristojnega organa, ki je prvotno obravnaval primer, lahko med obdobjem hrambe pregledajo dokumentacijo, da ugotovijo povezave za morebitne ponavljajoče se kršitve, kar pripomore k boljšemu in učinkovitejšemu izvrševanju.
What information can be included in the discussion forum?
Katere informacije se lahko vključijo v forum?
The discussion forum is annexed to the CPCS and is a tool intended for the exchange of information with respect to issues such as new enforcement powers and best practice.
Forum, ki je vključen v sistem SSVP, je orodje, namenjeno izmenjavi informacij v zvezi z vprašanji, kot so nova izvršilna pooblastila in najboljše prakse.
Generally, the discussion forum although not frequently used by enforcement officials should not serve to exchange case-related data and should not refer to personal data.
Ne glede na to, da izvršilni uradniki foruma ne uporabljajo pogosto, na splošno velja, da se ne sme uporabljati za izmenjavo podatkov o primeru in ne sme vsebovati osebnih podatkov.
What type of data can be included in the short summaries and attached documents?
Katere vrste podatkov se lahko vključijo v kratke povzetke in priložene dokumente?
The CPC Implementing Decision 2007/76/EC foresees the data field ‘attached documents’ in the case of alerts and information and enforcement requests.
Odločba 2007/76/ES o izvajanju SVP za primere opozoril ter zahtevkov za informacije in zahtevkov za izvršitev določa podatkovno polje „priloženi dokumenti“.
The short summaries are fields where a description of the infringement should be made.
„Kratki povzetki“ so polje, kamor se vpiše opis kršitve.
It is recommended that personal data should not be included in the short summaries as the purpose of this data field is to have a general description of the infringement.
Priporoča se, da se v kratke povzetke ne vključijo osebni podatki, saj je to podatkovno polje namenjeno splošnemu opisu kršitve.
Personal data in attached documents that is not strictly necessary should be blacked out or removed.
Osebne podatke v priloženih dokumentih, ki niso nujno potrebni, je treba zatemniti ali odstraniti.
What is meant by ‘reasonable suspicion’ that an infringement has occurred?
Kaj pomeni „upravičen sum“, da se je zgodila kršitev?
Reasonable suspicion needs to be interpreted in accordance with national law.
Upravičen sum je treba razlagati v skladu z nacionalno zakonodajo.
However, it is recommended that suspected infringements should only be included in the CPCS if there is some evidence to support the case that an infringement has or is likely to have occurred.
Vendar se priporoča, da se domnevne kršitve v sistemu SSVP vključijo le, če obstajajo dokazi, da se je taka kršitev zgodila ali se lahko zgodi.
What about transfers to third countries?
Kako se obravnavajo prenosi v tretje države?
The CPC Regulation [25] provides that information communicated under the CPC Regulation may also be communicated to an authority of a third country by a Member State having a bilateral assistance agreement provided the consent of the competent authority that originally communicated the information has been obtained and that data protection provisions are met.
Uredba SVP [25] določa, da se informacije, ki se sporočajo v skladu z Uredbo SVP, lahko posredujejo tudi organu tretje države, s katero ima država članica dvostranski sporazum o pomoči, če je bila pridobljena privolitev pristojnega organa, ki je prvotno posredoval informacijo, in če so bile upoštevane določbe o varstvu podatkov.