natgillin/translations-raw huggingface dataset:
Controllers should ensure that personal data are processed fairly and lawfully.
Upravljavci zagotovijo, da se osebni podatki obdelujejo pošteno in zakonito.
This principle implies, first of all, that the collection and any further processing of personal data should be based on legitimate grounds provided by law [21].
To načelo pomeni, prvič, da morata zbiranje in kakršna koli nadaljnja obdelava osebnih podatkov temeljiti na zakoniti podlagi, ki jo zagotavlja zakonodaja [21].
Secondly, personal data may be collected only for specified, explicit and legitimate purposes and should not be further processed in a way incompatible with those purposes [22].
Drugič, osebni podatki se lahko zbirajo le za določene, izrecne in zakonite namene in se ne smejo dalje obdelovati na način, ki ni združljiv s temi nameni [22].
Principles on data quality
Načela glede kakovosti podatkov
Controllers should ensure that personal data are adequate, relevant and not excessive in relation to the purposes for which they are collected.
Upravljavci zagotovijo, da so osebni podatki primerni, ustrezni in ne pretirani glede na namene, za katere se zbirajo.
Furthermore, data should be accurate and kept up to date [23].
Poleg tega morajo biti točni in posodobljeni [23].
Principles on data retention
Načela glede hrambe podatkov
Controllers should ensure that personal data are kept in a form which permits identification of data subjects for no longer than it is necessary in view of the purposes for which the data were collected, or for which they are further processed [24].
Upravljavci zagotovijo, da so osebni podatki shranjeni v obliki, ki dopušča identifikacijo posameznikov, na katere se nanašajo osebni podatki, le toliko časa, kakor je potrebno za namene, za katere so bili zbrani ali za katere se dalje obdelujejo [24].
Principles on confidentiality and data security
Načela glede zaupnosti in varnosti podatkov
Controllers should ensure that any person having access to personal data and acting under their authority or under the authority of the processor, including the processor himself, do not process these data except on instructions from the controller [25].
Upravljavci zagotovijo, da nobena oseba, ki ima dostop do osebnih podatkov in odgovarja upravljavcu ali obdelovalcu, vključno s samim obdelovalcem, teh podatkov ne sme obdelovati brez navodil upravljavca [25].
Furthermore, controllers are required to implement appropriate technical and organisational measures to protect personal data against accidental, unauthorised or unlawful destruction or loss, alteration, disclosure or access, and against all other unlawful forms of processing [26].
Poleg tega se od upravljavcev zahteva, da izvedejo ustrezne tehnične in organizacijske ukrepe za varstvo osebnih podatkov pred naključnim, nepooblaščenim ali nezakonitim uničenjem oziroma izgubo, spremembo, posredovanjem ali dostopom, ter pred vsemi drugimi nezakonitimi načini obdelave [26].
In view of a correct and effective application of the abovementioned principles in the context of their use of the system, EWRS users are recommended in particular that:
Zaradi pravilne in učinkovite uporabe zgornjih načel v okviru uporabe sistema EWRS se uporabnikom sistema EWRS priporoča zlasti naslednje:
In order to make sure that the processing operation has a legal basis, that data are collected for legitimate and explicit purposes and that they are not further processed in a way incompatible with those purposes, each time they collect or otherwise process personal data through the EWRS, EWRS users should:
Zaradi zagotovitve, da ima postopek obdelave pravno podlago, da se podatki zbirajo za zakonite in izrecne namene ter da se dalje ne obdelujejo na način, ki ni skladen z navedenimi načeli, vsakič ko se zbirajo ali kako drugače obdelujejo prek sistema EWRS, uporabniki sistema EWRS:
assess on a case-by-case basis whether the implementation of coordinated contact tracing measures, and the consequent activation of the EWRS selective channel to exchange related contact tracing and other personal data, is justified in consideration of the nature of the disease and the scientifically proven benefits of contact tracing for preventing or reducing the further spread of the disease, taking into account the risk assessment provided by the health authorities in Member States and by the existing scientific agencies, namely ECDC and WHO,
za vsak primer posebej ocenijo, ali gre za upravičeno uporabo usklajenih ukrepov za sledenje stikov in posledično za aktivacijo izbirnega kanala sistema EWRS za izmenjavo zadevnih podatkov iz sledenja stikov in drugih osebnih podatkov, glede na naravo bolezni in znanstveno dokazanih koristi sledenja stikov za preprečevanje ali zmanjševanje nadaljnjega širjenja te bolezni, ob upoštevanju ocene tveganja, ki so jo pripravili zdravstveni organi v državah članicah in obstoječe znanstvene agencije, tj. center ECDC in Svetovna zdravstvena organizacija,
not use the general messaging channel to exchange contact tracing and other personal data.
ne uporabljajo kanala splošnega sporočanja za izmenjavo podatkov iz sledenja stikov in drugih osebnih podatkov.
They should ensure, in particular, that no such data are included in the body of the general messages they post, in their attachments or in any other form.
Zlasti morajo zagotoviti, da se taki podatki ne vključijo v besedilo splošnih sporočil, ki jih pošiljajo, v njihove priloge ali kakršne koli druge oblike.
The use of the general messaging channel for contact tracing purposes would be illegitimate and disproportionate, since it would result in personal data being disclosed to recipients (including the Commission and the ECDC) not concerned by a given contact tracing procedure and which do not need to have access to those data,
Uporaba kanala splošnega sporočanja za namene sledenja stikov bi bila nezakonita in nesorazmerna, saj bi povzročila razkritje osebnih podatkov prejemnikom (vključno s Komisijo in centrom ECDC), ki jih zadevni postopek sledenja stikov ne zadeva in ki ne potrebujejo dostopa do navedenih podatkov,
when using the selective functionality, adopt a ‘need-to-know’ approach and select as recipients of selective messages containing personal data only the competent authorities in the Member States which need to cooperate on a given contact tracing procedure.
imajo pri uporabi izbirne funkcionalnosti pristop po načelu „treba je vedeti“ in za prejemnike izbirnih sporočil, ki vsebujejo osebne podatke, izberejo le pristojne organe v državah članicah, ki morajo sodelovati v zadevnem postopku sledenja stikov.
EWRS users should be particularly vigilant when exchanging, through the selective messaging channel, sensitive data concerning the health conditions of an identified or identifiable person, e.g. infected or potentially exposed persons whose contact details or other personal information are concomitantly disclosed through the EWRS, so that the person in question may be directly or indirectly identified.
Uporabniki sistema EWRS morajo biti še posebej pozorni, kadar prek kanala izbirnega sporočanja izmenjujejo občutljive podatke o zdravstvenem stanju določene ali določljive fizične osebe, na primer okuženih oseb in oseb, ki so morda bile izpostavljene okužbi in katerih kontaktni podatki ali drugi osebni podatki se hkrati razkrijejo prek sistema EWRS, tako da je mogoče zadevno osebo neposredno ali posredno identificirati.
In this case, all the abovementioned recommendations continue to apply; additionally, EWRS users should remember that the exchange of sensitive data is permitted under Directive 95/46/EC only in very limited circumstances.
V tem primeru se še naprej uporabljajo vsa zgoraj navedena priporočila; poleg tega pa uporabniki sistema EWRS ne smejo pozabiti, da je izmenjava občutljivih podatkov v skladu z Direktivo 95/46/ES dovoljena le v zelo omejenih primerih.
In particular [27]:
Zlasti pa [27]:
the person whose data are being collected has given his or her explicit consent to their processing (Article 8(2)(a) of Directive 95/46/EC).
posameznik, na katerega se nanašajo zbrani podatki, je dal svojo izrecno privolitev k obdelavi teh podatkov (člen 8(2)(a) Direktive 95/46/ES).
However, the need to timely intervene in situations of sanitary emergency may render it impossible to provide data subjects with all the information required for them to be able to signify an informed consent (see Section 8 on the provision of information to data subjects).
Vendar je zaradi potrebe po pravočasnem ukrepanju v nujnih sanitarnih primerih lahko nemogoče posameznikom, na katere se nanašajo osebni podatki, zagotoviti vse informacije, ki jih potrebujejo, da na podlagi vnaprejšnjega obveščanja dajo privolitev (glej razdelek 8 glede določbe o obveščanju posameznikov, na katere se nanašajo osebni podatki).
Furthermore, the possibility that data may be eventually disclosed through the EWRS is not necessarily known at the time when they are collected,
Poleg tega ni nujno, da je med zbiranjem podatkov znana možnost, da bodo podatki morebiti razkriti prek sistema EWRS,
failing data subjects’ consent, processing of health data may be considered legitimate if it is necessary for the ‘purposes of preventive medicine, medical diagnosis, the provision of care or treatment or the management of health-care services’, provided that health data are processed by a health professional subject to the obligation of professional secrecy, or by another person also subject to an equivalent obligation (Article 8(3) of Directive 95/46/EC).
če ni privolitve posameznikov, na katere se nanašajo osebni podatki, lahko obdelava osebnih podatkov velja za zakonito, če je nujna „za potrebe preventivne medicine, zdravstvene diagnoze, zagotovitev oskrbe, zdravljenja, ali vodenje zdravstvenih služb“, kadar te podatke obdeluje zdravstveni delavec, zavezan obveznosti poklicne molčečnosti, ali druga oseba, ki je prav tako zavezana enaki obveznosti molčečnosti (člen 8(3) Direktive 95/46/ES).
In other terms, each time they send a selective message containing sensitive health data to recipients in other Member States, EWRS users should assess whether disclosing such data is strictly necessary to allow competent authorities in the concerned Member States to implement specific measures required for one of the abovementioned purposes.
To pomeni, da morajo uporabniki sistema EWRS, vsakič ko prejemnikom v drugih državah članicah pošljejo izbirno sporočilo, ki vsebuje občutljive zdravstvene podatke, oceniti, ali so ti podatki zares potrebni, da se pristojnim organom v zadevnih državah članicah omogoči izvajanje posebnih ukrepov, potrebnih za enega od zgoraj navedenih namenov.
EWRS users are also reminded that additional grounds for processing health data may be provided by their respective national laws transposing Directive 95/46/EC, or by decision of their national DPA [28].
Uporabniki sistema EWRS tudi ne smejo pozabiti, da so z zadevno nacionalno zakonodajo, ki prenaša Direktivo 95/46/ES, ali odločitvijo organa za varstvo podatkov lahko predpisani dodatni razlogi za obdelavo zdravstvenih podatkov [28].
In order to ensure the quality of personal data they exchange through the system, and in particular, before posting a selective message, EWRS users need to consider whether:
Zaradi zagotovitve kakovosti osebnih podatkov, izmenjanih prek sistema, zlasti pa pred pošiljanjem izbirnega sporočila, morajo uporabniki sistema EWRS premisliti, ali:
the personal data they want to exchange are strictly needed to allow an efficient contact tracing procedure.
so osebni podatki, ki jih želijo izmenjati, nujno potrebni, da se omogoči učinkovit postopek sledenja stikov.
In other terms, the competent authority posting the message should provide the authority(s) in the other concerned Member State(s) only with those personal data which are needed to unambiguously identify the infected or exposed persons.
To pomeni, da pristojni organ, ki pošlje sporočilo, organom v drugih zadevnih državah članicah zagotovi le tiste osebne podatke, ki so potrebni za nedvoumno identifikacijo okuženih ali izpostavljenih oseb.
The indicative list of personal data which may be exchanged for contact tracing purposes, annexed to Decision 2009/547/EC, should not be seen as granting a blanket and unconditional authorisation to process these categories of data.
Okvirni seznam osebnih podatkov, ki se jih sme izmenjati za namene sledenja stikov, priložen k Odločbi 2009/547/ES, ne pomeni odobritve prostega in brezpogojnega pooblastila za obdelavo teh vrst podatkov.
At the same time, precaution must be extreme as regards processing of personal data other than those listed in that Annex, as disclosure is likely to be excessive and unreasonable.
Hkrati je potrebna izredna previdnost glede obdelave osebnih podatkov, ki niso navedeni v zadevni prilogi, saj bi lahko prišlo do pretiranega in nerazumnega posredovanja.
Instead, a case-by-case assessment should be made of whether inclusion of a certain personal data is strictly necessary for the purposes of a given contact tracing procedure.
Namesto tega je treba preučiti vsak primer posebej, da se ugotovi, ali je za namene zadevnega postopka sledenja stikov nujno treba vključiti nekatere osebne podatke.
Further processing and storage of personal data outside the EWRS:
Nadaljnja obdelava in hramba podatkov zunaj sistema EWRS:
It is of the utmost importance to note that national data protection laws transposing Directive 95/46/EC also apply to the storage and further processing, outside the EWRS, of personal data obtained through the system.
Izredno pomembno je navesti, da se nacionalna zakonodaja na področju varstva podatkov, ki prenaša Direktivo 95/46/ES, uporablja tudi za hrambo in nadaljnjo obdelavo osebnih podatkov, pridobljenih prek sistema, ki poteka zunaj sistema EWRS.
This may occur, for instance, when personal data stored centrally by the system are then stored in the local PCs of users or in databases established at national level; or whether these data are transmitted by the competent authority responsible for their processing within the EWRS to other authorities or to any third parties.
Do tega lahko na primer pride, ko se osebni podatki, centralno shranjeni v sistemu, pozneje shranijo na lokalnih osebnih računalnikih uporabnikov ali v zbirkah podatkov, vzpostavljenih na nacionalni ravni; ali ko pristojni organ, odgovoren za njihovo obdelavo v sistemu EWRS, te podatke pošlje drugim organom ali katerim koli tretjim strankam.
In these cases, EWRS users are reminded that:
V teh primerih uporabniki sistema EWRS ne smejo pozabiti, da:
the storage and further processing outside the EWRS must not be incompatible with the original purposes for which data were collected and exchanged within the EWRS,
hramba in nadaljnja obdelava zunaj sistema EWRS ne smeta biti neskladni s prvotnimi nameni, zaradi katerih so bili podatki zbrani in izmenjani v sistemu EWRS,
this further processing must have a legal basis in the relevant national data protection laws; be necessary, adequate, relevant and not excessive in relation to the original purposes of collection in the EWRS,
mora imeti ta nadaljnja obdelava pravno podlago v zadevnih nacionalnih zakonih o varstvu podatkov ter da mora biti potrebna, primerna, ustrezna in ne pretirana glede na prvotne namene zbiranja v sistemu EWRS,
data must be kept up to date and deleted once no longer needed for the purposes for which they were further processed,
je treba podatke posodabljati in jih izbrisati, ko niso več potrebni za namene, za katere so bili dalje obdelani,
when data are extracted from the EWRS and disclosed to third parties, the controller must inform data subjects of this circumstance so as to guarantee fair processing, unless this would be impossible or involve disproportionate effort, or if disclosure is expressly laid down by law (see Article 11(2) of Directive 95/46/EC).
mora upravljavec po pridobitvi podatkov iz sistema EWRS in njihovem razkritju tretjim strankam o teh okoliščinah obvestiti posameznike, na katere se nanašajo osebni podatki, da se zagotovi poštena obdelava, razen če se to izkaže za nemogoče oziroma bi vključevalo nesorazmeren napor, ali pa zakon izrecno določa posredovanje (glej člen 11(2) Direktive 95/46/ES).
Considering that disclosure may be required by the laws of only one of the Member States involved, and therefore may not be widely known elsewhere, efforts should be made to provide information even when the disclosure is expressly laid down by law.
Ker se posredovanje morda zahteva le po zakonodaji ene od vpletenih držav članic, in zato drugod morda ni splošno znano, si je treba prizadevati za zagotovitev informacij tudi takrat, kadar je posredovanje izrecno predpisano z zakonom.
A DATA PROTECTION FRIENDLY ENVIRONMENT
PRIJAZNO OKOLJE ZA VARSTVO PODATKOV
Several features have been already built into the EWRS to enhance compliance with data protection principles outlined in Section 6 and to prompt EWRS users to assess data protection aspects each time they use the system.
V sistem EWRS je bilo vgrajenih že več funkcij, da bi povečali skladnost z načeli varstva podatkov iz razdelka 6 in spodbudili uporabnike sistema EWRS k presoji vidikov varstva podatkov, vsakič ko uporabljajo sistem.
a warning is visibly displayed in the EWRS messages overview page, informing users that the general messaging channel is not designed for accommodating contact tracing and other personal data, since use of this channel may result in these data being unnecessarily disclosed to recipients other than those who need to access them,
na strani za pregled sporočila v sistemu EWRS je dobro vidno opozorilo, ki uporabnike obvešča, da kanal splošnega sporočanja ni namenjen podatkom iz sledenja stikov ali drugim osebnim podatkov, ker lahko uporaba tega kanala pripelje do nepotrebnega posredovanja teh podatkov prejemnikom, ki niso zadolženi za njihovo presojo,
access to the information exchanged within the system has been modulated through the creation of different user profiles and of selective communication channels, which provide for appropriate safeguards to ensure compliance with data protection rules,
dostop do informacij, izmenjanih v sistemu, se modulira z oblikovanjem različnih uporabniških računov in izbirnih komunikacijskih kanalov, ki zagotavljajo ustrezne zaščitne ukrepe za zagotavljanje skladnosti s pravili na področju varstva podatkov,
in particular, the selective messaging channel of the EWRS provides an exclusive communication channel for the exchange of personal information between the concerned Member States only.
kanal izbirnega sporočanja v sistemu EWRS zlasti zagotavlja posebni komunikacijski kanal za izmenjavo osebnih podatkov samo med zadevnimi državami članicami.
A default option has been built into the system which automatically excludes the Commission and the ECDC from the list of possible recipients of selective messages containing personal data [29],
V sistem je bila vgrajena privzeta možnost, ki Komisijo in center ECDC samodejno izloči s seznama morebitnih prejemnikov izbirnih sporočil, ki vsebujejo osebne podatke [29],
the system automatically erases all selective messages containing personal information 12 months after the date of posting of the messages (for more details, see Section 11 on data retention),
sistem dvanajst mesecev po datumu pošiljanja sporočil samodejno izbriše vsa izbirna sporočila, ki vsebujejo osebne podatke (več podrobnosti je na voljo v razdelku 11 o hrambi podatkov),
a feature has been built into the system to allow users to directly rectify or delete, at any time, those selective messages containing personal information which is inaccurate, not up to date, no longer needed or otherwise not compliant with data protection requirements.
v sistem je bila vgrajena funkcija, ki uporabnikom omogoča, da kadar koli neposredno popravijo ali izbrišejo tista izbirna sporočila, ki vsebujejo osebne podatke, ki so netočni, neposodobljeni, nepotrebni ali kako drugače neskladni z zahtevami varstva podatkov.
The system will automatically notify the other EWRS user(s) involved in that specific selective information exchange that the message has been deleted, or its content rectified, to ensure compliance with data protection rules,
Sistem EWRS bo druge uporabnike sistema, vključene v zadevno posebno izmenjavo izbirnih podatkov, samodejno obvestil, da je bilo sporočilo izbrisano oziroma popravljeno, za zagotovitev skladnosti s pravili varstva podatkov,
a specific mechanism has been made available in the selective messaging channel to allow the national authorities concerned by a given information exchange to communicate and cooperate on access, rectification, blocking or deletion requests of data subjects.
v kanalu izbirnega sporočanja je bil omogočen poseben mehanizem, ki nacionalnim organom, vpletenim v zadevno izmenjavo informacij, omogoča komunikacijo in sodelovanje v zvezi z dostopom, popravkom, blokiranjem ali izbrisom zahtevkov posameznikov, na katere se nanašajo osebni podatki.
Furthermore, in the medium term it is envisaged that the training module available from within the EWRS application will be integrated in order to provide EWRS users with extensive explanations on the functioning of the system from the data protection perspective.
Poleg tega je srednjeročno predvideno, da bo vgrajen modul za usposabljanje, ki bo na voljo v aplikaciji EWRS in prek katerega bodo uporabniki sistema EWRS dobili izčrpno razlago o delovanju sistema z vidika varstva podatkov.
The use of the various features and functionalities aimed at enhancing compliance with data protection rules will be illustrated by means of practical examples.
Uporaba različnih funkcij in funkcionalnosti, namenjena povečanju skladnosti s pravili o varstvu podatkov, bo ponazorjena s praktičnimi primeri.
It is the Commission intention to work with the Member States to ensure that the concept of privacy by design will inform these and any other future developments of the EWRS right from the outset [30], and that the principles of necessity, proportionality, purpose limitation and data minimisation will be taken into due account when decisions are made on what information can be exchanged through the EWRS, with whom, and under which conditions.8.
Komisija namerava sodelovati z državami članicami zaradi zagotovitve, da bodo od vsega začetka obveščene o konceptu vgrajene zasebnosti in katerem koli drugem prihodnjem razpletu dogodkov v sistemu EWRS [30] in da bodo ustrezno upoštevana načela potrebnosti, sorazmernosti, omejitve namena in čim manjšega zbiranja podatkov, kadar se odloča o tem, katere informacije se lahko izmenjujejo prek sistema EWRS, s kom in pod katerimi pogoji.8.
THE PROVISION OF INFORMATION TO DATA SUBJECTS
POSREDOVANJE INFORMACIJ POSAMEZNIKOM, NA KATERE SE NANAŠAJO OSEBNI PODATKI
One of the main requirements under the EU data protection legal framework is the obligation for a data controller to provide clear information to data subjects about the processing operations it intends to carry out on their personal data.
Ena glavnih zahtev v skladu s pravnim okvirom EU na področju varstva podatkov je obveznost upravljavca podatkov, da posameznikom, na katere se nanašajo osebni podatki, zagotovi jasne informacije o postopkih obdelave, ki jih namerava izvesti glede njihovih osebnih podatkov.
In line with its coordinating role within the EWRS and in order to fulfil the abovementioned obligation [31], the Commission has made available a clear and comprehensive privacy statement on its webpage dedicated to the EWRS, with regard to the processing operations carried out under the Commission’s own responsibility and to those carried out by competent authorities in particular in the context of contact tracing activities.
Komisija je skladno z usklajevalno vlogo znotraj sistema EWRS in zaradi izpolnjevanja zgoraj navedene obveznosti [31] na svoji spletni strani objavila jasno in celovito izjavo o varstvu podatkov, namenjeno sistemu EWRS, glede postopkov obdelave, za izvajanje katerih je odgovorna sama Komisija, in glede tistih, ki jih izvajajo pristojni organi, zlasti v okviru dejavnosti sledenja stikov.