natgillin/translations-raw huggingface dataset:
These statistics should provide the Commission and the Member States with consistent and comparable statistical data, and should reveal neither the identity of the notifying provider nor of the subscribers or individuals involved.
Ti statistični podatki naj bi Komisiji in državam članicam zagotovili dosledne in primerljive podatke, pri čemer pa se ne sme razkriti niti identitete ponudnika, ki obvešča, niti identitete zadevnih naročnikov ali posameznikov.
The Commission may also hold regular meetings with competent national authorities and other interested stakeholders for this purpose.
Komisija lahko v ta namen tudi organizira redna srečanja s pristojnimi nacionalnimi organi in drugimi zainteresiranimi stranmi.
The measures provided for in this Regulation are in accordance with the opinion of the Communications Committee,
Ukrepi, predvideni s to uredbo, so v skladu z mnenjem Odbora za komunikacije –
This Regulation shall apply to the notification of personal data breaches by providers of publicly available electronic communications services (‘the provider’).
Ta uredba se uporablja za obveščanje ponudnikov javno razpoložljivih elektronskih komunikacijskih storitev (v nadaljnjem besedilu: ponudnik) o kršitvah varnosti osebnih podatkov.
Notification to the competent national authority
Obvestilo pristojnemu nacionalnemu organu
The provider shall notify all personal data breaches to the competent national authority.
Ponudnik obvesti pristojni nacionalni organ o vseh kršitvah varnosti osebnih podatkov.
The provider shall notify the personal data breach to the competent national authority no later than 24 hours after the detection of the personal data breach, where feasible.
Kadar je to mogoče, ponudnik obvesti pristojni nacionalni organ o kršitvi najpozneje 24 ur po odkritju kršitve varnosti osebnih podatkov.
The provider shall include in its notification to the competent national authority the information set out in Annex I.
Ponudnik v obvestilo pristojnemu nacionalnemu organu vključi informacije iz Priloge I.
Detection of a personal data breach shall be deemed to have taken place when the provider has acquired sufficient awareness that a security incident has occurred that led to personal data being compromised, in order to make a meaningful notification as required under this Regulation.
Kršitev varnosti osebnih podatkov bi bilo treba obravnavati kot kršitev, kadar je ponudnik zadostno osveščen o varnostnem incidentu, ki je privedel do ogrožanja osebnih podatkov, da lahko o njem smiselno poroča, kot se zahteva v skladu s to uredbo.
Where all the information set out in Annex I is not available and further investigation of the personal data breach is required, the provider shall be permitted to make an initial notification to the competent national authority no later than 24 hours after the detection of the personal data breach.
Ponudniku se dovoli, da pošlje prvo obvestilo pristojnemu nacionalnemu organu najpozneje 24 ur po odkritju kršitve varnosti osebnih podatkov, kadar niso na voljo vse informacije iz Priloge I in se zahteva nadaljnja preiskava kršitve varnosti osebnih podatkov.
This initial notification to the competent national authority shall include the information set out in Section 1 of Annex I. The provider shall make a second notification to the competent national authority as soon as possible, and at the latest within three days following the initial notification.
Ponudnik v to prvo obvestilo pristojnemu nacionalnemu organu vključi informacije iz oddelka 1 Priloge I. Ponudnik pošlje drugo obvestilo pristojnemu organu v najkrajšem možnem času oziroma najpozneje tri dni po prvem obvestilu.
This second notification shall include the information set out in Section 2 of Annex I and, where necessary, update the information already provided.
Ponudnik v to drugo obvestilo vključi informacije iz oddelka 2 Priloge I in po potrebi posodobi že navedene informacije.
Where the provider, despite its investigations, is unable to provide all information within the three-day period from the initial notification, the provider shall notify as much information as it disposes within that timeframe and shall submit to the competent national authority a reasoned justification for the late notification of the remaining information.
Kadar ponudnik kljub preiskavam ne more zagotoviti vseh informacij v treh dneh po prvem obvestilu, ta ponudnik pristojni organ obvesti o vseh informacijah, ki jih ima na voljo v tem časovnem okviru, in pristojnemu organu predloži utemeljeno obrazložitev o razlogih za pozno obveščanje o preostalih informacijah.
The provider shall notify the remaining information to the competent national authority and, where necessary, update the information already provided, as soon as possible.
Ponudnik pristojni nacionalni organ čim prej obvesti o preostalih informacijah in po potrebi posodobi že navedene informacije.
The competent national authority shall provide to all providers established in the Member State concerned a secure electronic means for notification of personal data breaches and information on the procedures for its access and use.
Pristojni nacionalni organ zagotovi vsem ponudnikom s sedežem v zadevni državi članici varno elektronsko sredstvo za obveščanje o kršitvah varnosti osebnih podatkov ter informacije o postopkih za dostop do tega sredstva za obveščanje in njegovo uporabo.
Where necessary, the Commission shall convene meetings with competent national authorities to facilitate the application of this provision.
Komisija po potrebi skliče srečanja s pristojnimi nacionalnimi organi, da se olajša uporaba te določbe.
Where the personal data breach affects subscribers or individuals from Member States other than that of the competent national authority to which the personal data breach has been notified, the competent national authority shall inform the other national authorities concerned.
Kadar kršitev varnosti osebnih podatkov zadeva naročnike ali posameznike iz držav članic, ki niso država pristojnega organa, ki je bil obveščen o kršitvi varnosti osebnih podatkov, pristojni nacionalni organ obvesti druge zadevne nacionalne organe.
To facilitate the application of this provision, the Commission shall create and maintain a list of the competent national authorities and the appropriate contact points.
Zaradi lažje uporabe te določbe Komisija pripravi in vzdržuje seznam pristojnih nacionalnih organov in ustreznih kontaktnih točk.
Notification to the subscriber or individual
Obvestilo naročniku ali posamezniku
When the personal data breach is likely to adversely affect the personal data or privacy of a subscriber or individual, the provider shall, in addition to the notification referred to in Article 2, also notify the subscriber or individual of the breach.
Kadar je verjetno, da bo kršitev varnosti osebnih podatkov negativno vplivala na osebne podatke ali zasebnost naročnika ali posameznika, ponudnik ne pošlje le obvestila iz člena 2, ampak o kršitvi obvesti tudi naročnika ali posameznika.
Whether a personal data breach is likely to adversely affect the personal data or privacy of a subscriber or individual shall be assessed by taking account of, in particular, the following circumstances:
Verjetnost, da bo kršitev varnosti osebnih podatkov negativno vplivala na osebne podatke ali zasebnost naročnika ali posameznika, se oceni ob upoštevanju zlasti naslednjih okoliščin:
the nature and content of the personal data concerned, in particular where the data concerns financial information, special categories of data referred to in Article 8(1) of Directive 95/46/EC, as well as location data, internet log files, web browsing histories, e-mail data, and itemised call lists;
narava in vsebina zadevnih osebnih podatkov, zlasti kadar podatki zadevajo finančne informacije, posebne vrste podatkov iz člena 8(1) Direktive 95/46/ES in podatke o lokaciji, internetne dnevniške datoteke, zgodovino brskanja po spletu, podatke z elektronske pošte in razčlenjene sezname klicev;
the likely consequences of the personal data breach for the subscriber or individual concerned, in particular where the breach could result in identity theft or fraud, physical harm, psychological distress, humiliation or damage to reputation; and
verjetne posledice kršitve osebnih podatkov za zadevnega naročnika ali posameznika, zlasti kadar bi lahko zaradi kršitve prišlo do kraje ali zlorabe identitete, fizičnih poškodb, psihične stiske, poniževanja ali škodovanja ugledu, in
the circumstances of the personal data breach, in particular where the data has been stolen or when the provider knows that the data are in the possession of an unauthorised third party.
okoliščine kršitve osebnih podatkov, zlasti kadar so podatki ukradeni ali ponudnik ve, da s podatki razpolaga nepooblaščena tretja oseba.
The notification to the subscriber or individual shall be made without undue delay after the detection of the personal data breach, as set out in the third subparagraph of Article 2(2).
Naročnik ali posameznik je o odkritju kršitve varnosti osebnih podatkov obveščen brez nepotrebnega odlašanja, kot je določeno v tretjem pododstavku člena 2(2).
That shall not be dependent on the notification of the personal data breach to the competent national authority, referred to in Article 2.
To ni odvisno od uradnega obvestila pristojnim nacionalnim organom o kršitvi varnosti osebnih podatkov iz člena 2.
The provider shall include in its notification to the subscriber or individual the information set out in Annex II.
Ponudnik v obvestilo naročniku ali posamezniku vključi informacije iz Priloge II.
The notification to the subscriber or individual shall be expressed in a clear and easily understandable language.
Obvestilo naročniku ali posamezniku je napisano v jasnem in razumljivem jeziku.
The provider shall not use the notification as an opportunity to promote or advertise new or additional services.
Ponudnik obvestila ne sme izrabiti kot priložnost za promocijo ali oglaševanje novih ali dodatnih storitev.
In exceptional circumstances, where the notification to the subscriber or individual may put at risk the proper investigation of the personal data breach, the provider shall be permitted, after having obtained the agreement of the competent national authority, to delay the notification to the subscriber or individual until such time as the competent national authority deems it possible to notify the personal data breach in accordance with this Article.
V izjemnih okoliščinah se ponudniku, če bi lahko obvestilo, poslano naročniku ali posamezniku, ogrozilo ustrezno preiskavo o kršitvi varnosti osebnih podatkov, dovoli, da po pridobitvi soglasja pristojnega nacionalnega organa obvestilo naročniku ali posamezniku preloži za toliko časa, dokler pristojni nacionalni organ ne oceni, da je o kršitvi varnosti osebnih podatkov mogoče obvestiti v skladu s tem členom.
The provider shall notify to the subscriber or individual the personal data breach by means of communication that ensure prompt receipt of information and that are appropriately secured according to the state of the art. The information about the breach shall be dedicated to the breach and not associated with information about another topic.
6. Ponudnik naročnika ali posameznika o kršitvi varnosti osebnih podatkov obvesti prek komunikacijskih sredstev, ki zagotavljajo takojšen prejem informacij in ustrezno varnost na podlagi najsodobnejše tehnologije. Informacije o kršitvi se nanašajo na kršitev in niso povezane z informacijami o drugi temi.
Where the provider having a direct contractual relationship with the end user, despite having made reasonable efforts, is unable to identify within the timeframe referred to in paragraph 3 all individuals who are likely to be adversely affected by the personal data breach, the provider may notify those individuals through advertisements in major national or regional media, in the relevant Member States, within that timeframe.
Če ponudnik, ki je v neposrednem pogodbenem razmerju s končnim uporabnikom, v časovnem okviru iz odstavka 3 kljub ustreznim prizadevanjem ne more identificirati vseh posameznikov, na katere bi lahko kršitev varnosti osebnih podatkov negativno vplivala, lahko ponudnik te posameznike v navedenem časovnem okviru obvesti prek oglasov v pomembnejših nacionalnih ali regionalnih sredstvih javnega obveščanja v zadevnih državah članicah.
These advertisements shall contain the information set out in Annex II, where necessary in a condensed form.
Ti oglasi vključujejo informacije iz Priloge II, ki so po potrebi v zgoščeni obliki.
In that case, the provider shall continue to make all reasonable efforts to identify those individuals and to notify to them the information set out in Annex II as soon as possible.
V takem primeru si ponudnik še naprej ustrezno prizadeva za identifikacijo teh posameznikov in čimprejšnje obveščanje teh posameznikov o informacijah iz Priloge II.
Technological protection measures
Ukrepi za tehnološko zaščito
In derogation from Article 3(1), notification of a personal data breach to a subscriber or individual concerned shall not be required if the provider has demonstrated to the satisfaction of the competent national authority that it has implemented appropriate technological protection measures, and that those measures were applied to the data concerned by the security breach.
Z odstopanjem od člena 3(1) zadevnega naročnika ali posameznika ni treba obvestiti o kršitvi varnosti osebnih podatkov, če je ponudnik pristojnemu organu zadovoljivo dokazal, da je izvedel ustrezne ukrepe za tehnološko zaščito in da je te ukrepe izvedel v zvezi s podatki, ki jih zadeva kršitev varnosti.
Such technological protection measures shall render the data unintelligible to any person who is not authorised to access it.
Zaradi takih ukrepov za tehnološko zaščito postanejo podatki nerazumljivi za vse osebe, ki nimajo dovoljenja za dostop do njih.
Data shall be considered unintelligible if:
Podatki se obravnavajo kot nerazumljivi, če:
it has been securely encrypted with a standardised algorithm, the key used to decrypt the data has not been compromised in any security breach, and the key used to decrypt the data has been generated so that it cannot be ascertained by available technological means by any person who is not authorised to access the key; or
so varno šifrirani s standardiziranim algoritmom, če ključ za dešifriranje podatkov ni bil ogrožen zaradi katere koli kršitve varnosti in če je bil ključ za dešifriranje podatkov ustvarjen tako, da ga s tehnološkimi sredstvi, ki so na voljo, ne more ugotoviti nobena oseba, ki nima dovoljenja za dostop do ključa, ali
it has been replaced by its hashed value calculated with a standardised cryptographic keyed hash function, the key used to hash the data has not been compromised in any security breach, and the key used to hash the data has been generated in a way that it cannot be ascertained by available technological means by any person who is not authorised to access the key.
so bili nadomeščeni z zgoščeno vrednostjo, izračunano s standardizirano zgoščevalno funkcijo z uporabo šifrirnega ključa, če ključ za zgoščevanje podatkov ni bil ogrožen zaradi katere koli kršitve varnosti in če je bil ključ za zgoščevanje podatkov ustvarjen tako, da ga s tehnološkimi sredstvi, ki so na voljo, ne more ugotoviti nobena oseba, ki nima dovoljenja za dostop do ključa.
The Commission may, after having consulted the competent national authorities via the Article 29 Working Party, the European Network and Information Security Agency and the European Data Protection Supervisor, publish an indicative list of appropriate technological protection measures, referred to in paragraph 1, according to current practices.
Komisija lahko po posvetovanju s pristojnim nacionalnim organom prek delovne skupine iz člena 29, Evropsko agencijo za varnost omrežij in informacij ter Evropskim nadzornikom za varstvo podatkov v skladu s sedanjo prakso objavi okvirni seznam ustreznih ukrepov za tehnološko zaščito iz odstavka 1.
Use of another provider
Vključitev drugega ponudnika
Where another provider is contracted to deliver part of the electronic communications service without having a direct contractual relationship with subscribers, this other provider shall immediately inform the contracting provider in the case of a personal data breach.
Kadar se za opravljanje dela elektronskih komunikacijskih storitev najame drugega ponudnika, ki ni v neposrednem pogodbenem razmerju z naročniki, navedeni drugi ponudnik v primeru kršitve varnosti osebnih podatkov o tem nemudoma obvesti ponudnika, ki ga je najel.
Within three years from the entry into force of this Regulation, the Commission shall provide a report on the application of this Regulation, its effectiveness and its impact on providers, subscribers and individuals.
Komisija v roku treh let po začetku veljavnosti te uredbe pripravi poročilo o uporabi te uredbe, njeni učinkovitosti ter njenem vplivu na ponudnike, naročnike in posameznike.
On the basis of that report the Commission shall review this Regulation.
Na podlagi ugotovitev iz navedenega poročila Komisija opravi pregled te uredbe.
This Regulation shall enter into force on 25 August 2013.
Ta uredba začne veljati 25. avgusta 2013.
Content of the notification to the competent national authority
Vsebina obvestila pristojnemu nacionalnemu organu
Identification of the provider
Identifikacija ponudnika
Name of the provider
Naziv ponudnika.
Identity and contact details of the data protection officer or other contact point where more information can be obtained
Identiteta in kontaktni podatki uradne osebe za varnost podatkov ali druge kontaktne točke, pri kateri je mogoče pridobiti več informacij.
Whether it concerns a first or second notification
Ali zadeva prvo ali drugo obvestilo.
Initial information on the personal data breach (for completion in later notifications, where applicable)
Osnovne informacije o kršitvi varnosti osebnih podatkov (ki se po potrebi dopolnijo v poznejših obvestilih)
Date and time of incident (if known; where necessary an estimate can be made), and of detection of incident
Datum in čas incidenta (če sta znana; po potrebi se lahko navedeta približna datum in čas) in odkritja incidenta.
Circumstances of the personal data breach (e.g. loss, theft, copying)
Okoliščine kršitve varnosti osebnih podatkov (npr. izguba, kraja, kopiranje).
Nature and content of the personal data concerned
Narava in vsebina zadevnih osebnih podatkov.
Technical and organisational measures applied (or to be applied) by the provider to the affected personal data
Tehnični in organizacijski ukrepi, ki jih je ponudnik izvedel (ali jih bo izvedel) v zvezi z zadevnimi osebnimi podatki.
Relevant use of other providers (where applicable)
Vključitev drugih ponudnikov (če je ustrezno).
Further information on the personal data breach
Dodatne informacije o kršitvi varnosti osebnih podatkov
Summary of the incident that caused the personal data breach (including the physical location of the breach and the storage media involved):
Povzetek incidenta, ki je povzročil kršitev varnosti osebnih podatkov (vključno s fizično lokacijo kršitve in zadevnim pomnilniškim medijem):
Number of subscribers or individuals concerned
Število zadevnih naročnikov ali posameznikov.
Potential consequences and potential adverse effects on subscribers or individuals
Možne posledice in možni negativni učinki za naročnike ali posameznike.
Technical and organisational measures taken by the provider to mitigate potential adverse effects
Tehnični in organizacijski ukrepi ponudnika za ublažitev možnih negativnih učinkov.
Possible additional notification to subscribers or individuals
Morebitna dodatna obvestila naročnikom ali posameznikom
Content of notification
Vsebina obvestila.
Means of communication used
Uporabljena komunikacijska sredstva.
Number of subscribers or individuals notified
Število obveščenih naročnikov ali posameznikov.
Possible cross-border issues
Morebitna čezmejna vprašanja
Personal data breach involving subscribers or individuals in other Member States
Kršitev varnosti osebnih podatkov, ki zadeva naročnike ali posameznike v drugih državah članicah.
Notification of other competent national authorities
Obvestilo drugim pristojnim nacionalnim organom.
Content of the notification to the subscriber or individual
Vsebina obvestila naročniku ali posamezniku
Summary of the incident that caused the personal data breach
Povzetek incidenta, ki je povzročil kršitev varnosti osebnih podatkov.
Estimated date of the incident
Ocenjeni datum incidenta.
Nature and content of the personal data concerned as referred to in Article 3(2)
Narava in vsebina zadevnih osebnih podatkov iz člena 3(2).
Likely consequences of the personal data breach for the subscriber or individual concerned as referred to in Article 3(2)
Verjetne posledice kršitve varnosti osebnih podatkov za zadevnega naročnika ali posameznika iz člena 3(2).
Circumstances of the personal data breach as referred to in Article 3(2)
Okoliščine kršitve varnosti osebnih podatkov iz člena 3(2).
Measures taken by the provider to address the personal data breach
Ukrepi ponudnika za odpravo kršitve varnosti osebnih podatkov.
Commission Implementing Regulation (EU) No 612/2013
Izvedbena uredba Komisije (EU) št. 612/2013
on the operation of the register of economic operators and tax warehouses, related statistics and reporting pursuant to Council Regulation (EU) No 389/2012 on administrative cooperation in the field of excise duties
o delovanju evidence gospodarskih subjektov in trošarinskih skladišč, z njimi povezanih statističnih podatkih in poročanju v skladu z Uredbo Sveta (EU) št. 389/2012 o upravnem sodelovanju na področju trošarin
Having regard to Council Regulation (EU) No 389/2012 of 2 May 2012 on administrative cooperation in the field of excise duties and repealing Regulation (EC) No 2073/2004 [1], and in particular Article 22 and Article 34(5) thereof,
ob upoštevanju Uredbe Sveta (EU) št. 389/2012 z dne 2. maja 2012 o upravnem sodelovanju na področju trošarin in o razveljavitvi Uredbe (ES) št. 2073/2004 [1] ter zlasti členov 22 in 34(5) Uredbe,
Regulation (EU) No 389/2012 establishes a framework for the simplification and the strengthening of administrative cooperation between Member States in the field of excise duties.
Uredba (EU) št. 389/2012 določa okvir za poenostavitev in okrepitev upravnega sodelovanja med državami članicami na področju trošarin.
Article 21 of Council Directive 2008/118/EC of 16 December 2008 concerning the general arrangements for excise duty and repealing Directive 92/12/EEC [2] requires the verification of the details of a draft electronic administrative document by the Member State of dispatch before excise goods may be moved under duty suspension.
Člen 21 Direktive Sveta 2008/118/ES z dne 16. decembra 2008 o splošnem režimu za trošarino in o razveljavitvi Direktive 92/12/EGS [2] zahteva, da odpremna država članica preveri podatke v osnutku elektronskega administrativnega dokumenta, preden se lahko trošarinsko blago giblje pod režimom odloga plačila trošarine.
Commission Regulation (EC) No 684/2009 of 24 July 2009 implementing Council Directive 2008/118/EC as regards the computerised procedures for the movement of excise goods under suspension of excise duty [3] specifies the content of the draft electronic administrative document.
Uredba Komisije (ES) št. 684/2009 z dne 24. julija 2009 o izvajanju Direktive Sveta 2008/118/ES [3] v zvezi z računalniškimi postopki za gibanje trošarinskega blaga pod režimom odloga plačila trošarine opredeljuje vsebino osnutka elektronskega administrativnega dokumenta.
Since the information in that administrative document relating to excise authorisations is subject to verification against the details of the corresponding national registers the details of each national register should be made available to each Member State of dispatch regularly and should be kept up to date.
Ker se informacije v navedenem administrativnem dokumentu v zvezi s trošarinskimi dovoljenji preverjajo in primerjajo s podrobnostmi v ustreznih nacionalnih evidencah, bi morale biti podrobnosti posamezne nacionalne evidence redno na voljo posamezni državi članici pošiljateljici, pri čemer jih je treba sproti dopolnjevati in spreminjati.