natgillin/translations-raw huggingface dataset:
On the basis of the information available through the Network, Member States will consult each other in liaison with the Commission with a view to coordinating their efforts for the prevention and control of those diseases, including with regard to the measures they have adopted or intend to adopt at national level [7].
Države članice se bodo na podlagi informacij, ki so na voljo prek mreže, med seboj in v povezavi s Komisijo posvetovale glede uskladitve svojih prizadevanj za preprečevanje in obvladovanje teh bolezni, vključno z ukrepi, ki so jih sprejele ali jih nameravajo sprejeti na nacionalni ravni [7].
However, in some cases, the information exchanged through the system does actually concern individuals and can be considered personal data.
Vendar v nekaterih primerih informacije, izmenjane prek sistema, dejansko zadevajo posameznike in se lahko štejejo za osebne podatke.
First of all, the processing of a limited amount of personal data of EWRS authorised users is inherent in the system management and operation.
Prvič, obdelava omejene količine osebnih podatkov pooblaščenih uporabnikov sistema EWRS je sestavni del njegovega upravljanja in delovanja.
Indeed, processing of the users’ contact details (name, organisation, e-mail address, telephone number, etc.) is essential in order to set up and run the system.
Dejansko je obdelava kontaktnih podatkov uporabnikov (ime, organizacija, elektronski naslov, telefonska številka itd.) bistvena za vzpostavitev in delovanje sistema.
These personal data are collected by the Member States, and further processed under the Commission’s responsibility, solely for the purposes of cooperating effectively on the management of the EWRS and the underlying Network.
Te osebne podatke zbirajo države članice, dalje pa se jih obdeluje v skladu z odgovornostjo Komisije, izključno za namene učinkovitega sodelovanja glede upravljanja sistema EWRS in zadevne mreže.
More importantly, the occurrence of an event related to communicable diseases with a potential EU dimension may require the implementation of particular control measures, the so called ‘contact tracing’ measures, by the affected Member States in collaboration with each other, in order to identify infected persons and persons potentially in danger and to prevent the transmission of serious communicable diseases.
Pomembneje je, da se zaradi dogodka, povezanega z nalezljivimi boleznimi, z možno razsežnostjo na ravni EU, morda zahteva, da države članice v medsebojnem sodelovanju izvajajo posebne ukrepe za obvladovanje, tako imenovane ukrepe za „sledenje stikov“, zaradi določitve okuženih oseb in možnih ogroženih posameznikov ter preprečitve prenosa hudih nalezljivih bolezni.
Such collaboration may involve the exchange through the EWRS of personal data, including sensitive health data, of confirmed or suspected human cases between the Member States directly concerned by the contact tracing measures [8].
Tako sodelovanje lahko obsega izmenjavo osebnih podatkov prek sistema EWRS, vključno z občutljivimi zdravstvenimi podatki, o potrjenih ali sumljivih primerih pri ljudeh med državami članicami, ki jih ukrepi za sledenje stikov neposredno zadevajo [8].
What is ‘processing of personal data’?
Kaj je „obdelava osebnih podatkov“?
For the purposes of Directive 95/46/EC and Regulation (EC) No 45/2001, processing of personal data shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction [9].
V Direktivi 95/46/ES in Uredbi (ES) št. 45/2001 „obdelava osebnih podatkov pomeni kakršen koli postopek ali niz postopkov, ki se izvajajo v zvezi z osebnimi podatki z avtomatskimi sredstvi ali brez njih, kakršno je zbiranje, beleženje, urejanje, shranjevanje, prilagajanje ali predelava, iskanje, posvetovanje, uporaba, posredovanje s prenosom, širjenje ali drugo razpolaganje, prilagajanje ali kombiniranje, blokiranje, izbris ali uničenje“ [9].
In the abovementioned cases, the processing of personal data within the EWRS must be justified on the basis of specific legal grounds.
V zgoraj navedenih primerih mora biti obdelava osebnih podatkov v sistemu EWRS utemeljena s posebnimi pravnimi podlagami.
In this regard, Article 7 of Directive 95/46/EC, and the corresponding provisions of Article 5 of Regulation (EC) No 45/2001, set out the criteria for making data processing legitimate.
V zvezi s tem člen 7 Direktive 95/46/ES in ustrezne določbe člena 5 Uredbe (ES) št. 45/2001 določajo merila za zakonitost obdelave podatkov.
With regard to the contact details of EWRS users, processing of these data is based on:
Obdelava kontaktnih podatkov uporabnikov sistema EWRS temelji na:
Article 5(d) of Regulation (EC) No 45/2001: ‘the data subject has unambiguously given his or her consent’.
in členu 5(d) Uredbe (ES) št. 45/2001: „posameznik, na katerega se nanašajo osebni podatki, je nedvoumno dal svojo privolitev“.
Contact details of users are obtained from the data subjects themselves, after having put them in the conditions to signify an informed agreement to their personal data being processed within the EWRS (see Section 8 on the provision of information to data subjects).
Kontaktni podatki uporabnikov so bili pridobljeni od posameznikov, na katere se nanašajo osebni podatki, potem ko jim je bilo omogočeno, da na podlagi vnaprejšnjega obveščanja dajo privolitev k obdelavi svojih osebnih podatkov v sistemu EWRS (glej razdelek 8 o zagotavljanju informacij posameznikom, na katere se nanašajo osebni podatki).
The criteria laid down in Article 7(c), (d), and (e) of Directive 95/46/EC are the most relevant for the exchange of contact tracing data (e.g. contact details of the infected person, conveyance and other data related to the person’s travel itinerary and places of stay, information on visited persons and persons potentially exposed to contamination) of individuals within the EWRS [11]:
Merila iz člena 7(c), (d) in (e) Direktive 95/46/ES so najbolj pomembna za izmenjavo podatkov iz sledenja stikov (na primer kontaktnih podatkov okužene osebe, podatkov o prevoznem sredstvu in drugih podatkov, povezanih z načrtom potovanja zadevne osebe in kraji bivanja, informacijami o obiskanih osebah in osebah, ki so morda bile izpostavljene okužbi) posameznikov v sistemu EWRS [11]:
Article 7(c) of Directive 95/46/EC: ‘processing is necessary for compliance with a legal obligation to which the controller is subject’.
člen 7(c) Direktive 95/46/ES: „obdelava je potrebna za skladnost z zakonsko obveznostjo, ki velja za upravljavca“.
The establishment of an early warning and response system for the prevention and control of communicable diseases in the EU is required by Decision No 2119/98/EC.
Odločba št. 2119/98/ES zahteva uvedbo sistema zgodnjega obveščanja in odzivanja zaradi preprečevanja in obvladovanja nalezljivih bolezni v EU.
This Decision poses an obligation on the Member States to report through the EWRS certain events caused by communicable diseases which are, or have the potential to become, public health threats [12].
Ta odločba nalaga obveznost državam članicam, da prek sistema EWRS poročajo o nekaterih dogodkih, ki so jih povzročile nalezljive bolezni, ki ogrožajo ali lahko ogrožajo javno zdravje [12].
The reporting obligation covers also the measures taken by the competent authorities in the concerned Member States to prevent and halt the spread of those diseases, including the contact tracing measures implemented to trace infected persons or those who are potentially in danger of being infected [13],
Obveznost poročanja zajema tudi ukrepe, ki jih sprejmejo pristojni organi v zadevnih državah članicah, za preprečevanje in zaustavitev širjenja navedenih bolezni, vključno z ukrepi za sledenje stikov, ki se izvedejo zaradi izsleditve okuženih oseb ali tistih, ki bi se morda lahko okužile [13];
Article 7(d) of Directive 95/46/EC: ‘processing is necessary in order to protect the vital interests of the data subject’.
člen 7(d) Direktive 95/46/ES: „obdelava je potrebna za varstvo življenjskih interesov posameznikov, na katere se nanašajo osebni podatki“.
In principle, the exchange between the concerned Member States of personal data of infected individuals, and of individuals who are in imminent danger of being infected, is necessary to provide them with the appropriate care or treatment, as well as to permit tracing and identification for isolation and quarantine purposes, with the aim of protecting the health of the concerned individuals and, ultimately, that of EU citizens at large,
Načeloma je izmenjava osebnih podatkov okuženih posameznikov in posameznikov, ki so v neposredni nevarnosti, da se okužijo, med državami članicami potrebna, da se tem posameznikom zagotovi ustrezna oskrba ali zdravljenje ter da se omogočita sledenje in identifikacija zaradi izolacije in karantene, s čimer se varuje zdravje zadevnih posameznikov in navsezadnje državljanov EU na splošno;
and Article 7(e) of Directive 95/46/EC: ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in a third party to whom the data are disclosed’.
člen 7(e) Direktive 95/46/ES: „obdelava je potrebna za izvajanje naloge, ki se opravlja v javnem interesu ali pri izvrševanju javne oblasti, dodeljene upravljavcu ali tretji stranki, ki so ji posredovani podatki“.
The EWRS is a tool designed to help Member States to coordinate their efforts for the prevention and control of serious communicable diseases within the EU.
Sistem EWRS je orodje, namenjeno v pomoč državam članicam pri usklajevanju njihovih prizadevanj za preprečevanje in obvladovanje hudih nalezljivih bolezni v EU.
Therefore, the system is conceived to serve the performance of a public interest task vested in the Member States to protect public health.
Zato je sistem načrtovan tako, da podpira izvajanje naloge v javnem interesu, zaupane državam članicam za varovanje javnega zdravja.
The same reasons of public interest may justify the processing by Member States of sensitive health data (e.g. information on the event posing a health threat, data related to the health conditions of the infected persons and of persons potentially exposed to contamination) within the EWRS.
Zaradi enakih razlogov javnega interesa je lahko upravičena obdelava občutljivih zdravstvenih podatkov s strani držav članic (na primer informacij o dogodku, ki pomeni nevarnost za zdravje, podatkov o zdravstvenem stanju okuženih oseb in oseb, ki so morda bile izpostavljene okužbi) v sistemu EWRS.
Although the processing of data concerning health is prohibited in principle by Article 8(1) of Directive 95/46/EC, the processing of this special category of data within the EWRS is covered by the exemption granted under Article 8(3) of the same Directive in so far as the processing is ‘required for the purposes of preventive medicine, medical diagnosis, the provision of care or treatment or the management of health-care services, and where those data are processed by a health professional subject under national law or rules established by national competent bodies to the obligation of professional secrecy or by another person also subject to an equivalent obligation of secrecy’.
Čeprav je obdelava podatkov o zdravju načeloma prepovedana s členom 8(1) Direktive 95/46/ES, je obdelava te posebne vrste podatkov v sistemu EWRS zajeta v izjemi iz člena 8(3) Direktive, kadar se podatki obdelujejo „za potrebe preventivne medicine, zdravstvene diagnoze, za zagotovitev oskrbe, ali zdravljenja, ali vodenje zdravstvenih služb in kadar te podatke obdeluje zdravstveni delavec na podlagi nacionalne zakonodaje ali pravil, ki jih sprejmejo pristojni nacionalni organi glede dolžnosti poklicne molčečnosti, ali druga oseba, ki je prav tako zavezana enaki dolžnosti molčečnosti“.
Additional exemptions to the prohibition to process personal health data may be provided, for reasons of substantial public interest and subject to the provision of suitable safeguards, by the national laws of the Member States, or by decision of the national DPAs in the Member States [14].
Z nacionalno zakonodajo držav članic ali odločitvijo nacionalnega organa za varstvo podatkov se lahko zaradi javnega interesa bistvenega pomena in ob upoštevanju ustreznih zaščitnih ukrepov določijo dodatne izjeme glede prepovedi obdelave osebnih podatkov [14].
WHO IS WHO IN THE EWRS?
KDO JE KDO V SISTEMU EWRS?
The EWRS has been conceived as a multiple user system connecting, through appropriate technical means including different structured communication channels, the designated contact persons from the competent public health authorities in EEA Member States (hereinafter, the ‘national EWRS focal points’), the Commission, the ECDC and, to a limited extent, also the WHO.
Sistem EWRS je bil načrtovan kot sistem za več uporabnikov, ki prek ustreznih tehničnih sredstev, vključno z različnimi strukturiranimi komunikacijskimi kanali, povezuje imenovane kontaktne osebe iz pristojnih javnozdravstvenih organov v državah članicah Evropskega gospodarskega prostora (v nadaljnjem besedilu: nacionalne kontaktne točke za sistem EWRS), Komisijo, center ECDC, v omejenem obsegu pa tudi Svetovno zdravstveno organizacijo.
Each of these EWRS actors is a separate user of the system, although access to the information exchanged within the system has been modulated through the creation of different user profiles and of ‘selective’ communication channels, which provide for appropriate safeguards to ensure compliance with applicable data protection rules.
Vsak od teh akterjev je ločen uporabnik sistema EWRS, čeprav se dostop do informacij, izmenjanih v sistemu, modulira z oblikovanjem različnih uporabniških računov in „izbirnih“ komunikacijskih kanalov, ki zagotavljajo ustrezne zaščitne ukrepe za zagotavljanje skladnosti z veljavnimi pravili na področju varstva podatkov.
In particular, the system consists of two main communication channels.
Sistem zlasti zajema dva glavna komunikacijska kanala.
A first channel, the so called ‘general messaging’ channel, allows the competent health authority in a given Member State to notify all national EWRS focal points, the Commission, the ECDC and the WHO of information concerning events caused by communicable diseases having a potential EU dimension which are covered by the reporting obligations laid down in Decision No 2119/98/EC [15].
Prvi kanal, tako imenovani kanal „splošnega sporočanja“, omogoča pristojnemu zdravstvenemu organu v zadevni državi članici, da vsem nacionalnim kontaktnim točkam za sistem EWRS, Komisiji, centru ECDC in Svetovni zdravstveni organizaciji sporoči informacije o dogodkih, ki so jih povzročile nalezljive bolezni z možno razsežnostjo na ravni EU, zajete v obveznostih poročanja, opredeljenih v Odločbi št. 2119/98/ES [15].
In general, no health-related or other personal data of identified or identifiable natural persons is communicated through the general messaging channel.
Na splošno se z zdravjem povezani podatki in drugi osebni podatki določenih ali določljivih fizičnih oseb ne sporočajo prek kanala splošnega sporočanja.
Specific safeguards have been introduced into the system to prevent unlawful data processing within this channel (see Section 7).
V sistem so bila vgrajena posebna varovala, da bi preprečili nezakonito obdelavo podatkov znotraj tega kanala (glej razdelek 7).
However, in the occurrence of events caused by communicable diseases with a potential EU dimension, it may be necessary for the affected Member States, in collaboration with each other, to implement particular contact tracing measures with a view to tracing infected persons, and other individuals exposed to contamination, so as to prevent the spread of those serious diseases.
Če pa pride do dogodkov, ki so jih povzročile nalezljive bolezni z možno razsežnostjo na ravni EU, je za prizadete države članice morda potrebno, da v medsebojnem sodelovanju izvedejo nekatere ukrepe za sledenje stikov zaradi izsleditve okuženih oseb in drugih posameznikov, ki so bili izpostavljeni okužbi, da se prepreči širjenje navedenih hudih bolezni.
In order to ensure compliance with data protection rules, appropriate safeguards have been introduced to limit the exchange of contact tracing and health data of individuals only to the Member States directly concerned by a given contact tracing procedure, and to exclude the other Member States of the Network, the Commission and the ECDC from accessing these data [16].
Zaradi zagotovitve skladnosti s pravili na področju varstva podatkov so bili uvedeni ustrezni zaščitni ukrepi, da bi izmenjavo podatkov iz sledenja stikov in zdravstvenih podatkov posameznikov omejili le na države članice, ki jih postopek sledenja stikov neposredno zadeva, in da bi drugim državam članicam v mreži, Komisiji in centru ECDC onemogočili dostop do teh podatkov [16].
To this end, the so called ‘selective messaging’ channel has been built into the EWRS to guarantee an exclusive communication channel between the Member States concerned by a given contact tracing measure.
V ta namen je bil v sistem EWRS vgrajen tako imenovani kanal „izbirnega sporočanja“, da bi zagotovili izključni komunikacijski kanal med državami članicami, ki jih zadeva posamezen ukrep za sledenje stikov.
By exchanging personal information through the selective messaging channel, competent authorities take the role of ‘controller’ with respect to the processing of these personal data and therefore assume responsibility for the lawfulness of their processing activities and for ensuring compliance with data protection obligations set out in the applicable national laws transposing Directive 95/46/EC.
Z izmenjavo osebnih podatkov prek kanala izbirnega sporočanja pristojni organi prevzamejo vlogo „upravljavca“ glede obdelave teh osebnih podatkov in s tem odgovornost za zakonitost njihove obdelave in za zagotavljanje skladnosti z obveznostmi varstva podatkov, opredeljenimi v veljavnih nacionalnih zakonodajah, ki prenašajo Direktivo 95/46/ES.
Who is the ‘controller’?
Kdo je „upravljavec“?
For the purposes of Directive 95/46/EC, ‘ “controller” shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data’ [17].
V Direktivi 95/46/ES „upravljavec pomeni fizično ali pravno osebo, javni organ, agencijo ali kateri koli drug organ, ki sam ali skupaj z drugimi določa namene in sredstva obdelave osebnih podatkov“ [17].
In principle, users at the Commission and the ECDC do not have access to personal data exchanged through the selective messaging channel [18].
Uporabniki pri Komisiji in centru ECDC načeloma nimajo dostopa do osebnih podatkov, izmenjanih prek kanala izbirnega sporočanja [18].
However, for technical reasons, the central storage of data in the EWRS is the ultimate responsibility of the Commission as the system administrator and coordinator.
Vendar je iz tehničnih razlogov za osrednjo hrambo podatkov v sistemu EWRS na koncu odgovorna Komisija kot upravljavec in koordinator sistema.
In this capacity, the Commission is also responsible for the registration, storage and further processing of personal data of the EWRS authorised users necessary to run the system.
Komisija je v tej vlogi odgovorna tudi za evidentiranje, shranjevanje in nadaljnjo obdelavo osebnih podatkov pooblaščenih uporabnikov sistema EWRS, potrebnih za delovanje sistema.
The EWRS is therefore a clear example of joint controllership, where the responsibility for ensuring data protection is allocated, at different levels, between the Commission and the Member States.
Zato je sistem EWRS očiten primer skupnega upravljanja, kjer je odgovornost za zagotavljanje varstva podatkov na različnih ravneh razdeljena med Komisijo in državami članicami.
Moreover, since 2005 the Commission and the Member States in their capacity as co-controllers have decided to delegate the daily operation of the EWRS informatics application to the ECDC, which performs this task on behalf of the Commission.
Poleg tega so se Komisija in države članice v vlogi soupravljavk z letom 2005 odločile, da bodo odgovornost za vsakodnevno delovanje informacijskih aplikacij EWRS zaupale centru ECDC, ki izvaja to nalogo v imenu Komisije.
Further to this delegation, the agency has assumed the responsibility to ensure, as ‘processor’, the confidentiality and security of the processing operations carried out within the system, in accordance with the obligations laid down in Articles 21 and 22 of Regulation (EC) No 45/2001.
S tem je agencija prevzela odgovornost, da kot „obdelovalec“ zagotovi zaupnost in varnost postopkov obdelave, izvedenih v okviru sistema, v skladu z obveznostmi iz členov 21 in 22 Uredbe (ES) št. 45/2001.
Who is the ‘processor’ and what are its obligations?
Kdo je „obdelovalec“ in katere so njegove obveznosti?
For the purposes of Regulation (EC) No 45/2001, ‘ “processor” shall mean a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller’ [19].
V Uredbi (ES) št. 45/2001 „obdelovalec pomeni fizično ali pravno osebo, javni organ, agencijo ali kateri koli drugi organ, ki obdeluje osebne podatke v imenu upravljavca“ [19].
The Regulation foresees that, where a processing operation is carried out on its behalf, the controller shall choose a processor providing sufficient guarantees in respect of the technical and organisational measures required for data security purposes.
Uredba določa, da upravljavec izbere obdelovalca, ki zagotovi zadostna jamstva v zvezi s tehničnimi in organizacijskimi ukrepi za varnost podatkov, kadar se postopek obdelave izvaja v imenu upravljavca.
The controller shall be ultimately responsible for ensuring compliance with those measures.
Na koncu je upravljavec odgovoren za zagotavljanje skladnosti z navedenimi ukrepi.
Nevertheless, the obligations set out in Articles 21 and 22 of the Regulation with regard to the confidentiality and security of processing are also incumbent on the processor [20].
Vendar obveznosti iz členov 21 in 22 glede zaupnosti in varnosti obdelave veljajo tudi za obdelovalca [20].
APPLICABLE DATA PROTECTION PRINCIPLES
VELJAVNA NAČELA VARSTVA PODATKOV
The processing of personal data within the EWRS must comply with a set of data protection principles set out in Regulation (EC) No 45/2001 and Directive 95/46/EC.
Obdelava osebnih podatkov v sistemu EWRS mora biti skladna s sklopom načel varstva podatkov iz Uredbe (ES) št. 45/2001 in Direktive 95/46/ES.
In their capacity as controllers, the Commission and the competent authorities in the Member States are responsible for ensuring compliance with these principles each time they process personal data through the EWRS.
Komisija in pristojni organi v državah članicah so v vlogi upravljavcev odgovorni za zagotavljanje skladnosti s temi načeli, vsakič ko obdelujejo osebne podatke prek sistema EWRS.
A selection of core data protection principles is provided hereafter.
V nadaljevanju je predstavljen izbor ključnih načel varstva podatkov.
This is without prejudice to other applicable data protection requirements set out in the relevant legal instruments, for which guidance is given under different sections of the present guidelines.
To je brez poseganja v druge veljavne zahteve za varstvo podatkov opredeljeno v ustreznih pravnih instrumentih, za katere so smernice navedene v različnih razdelkih sedanjih smernic.
In particular, EWRS users are invited to read carefully Section 8 on the provision of information to data subjects and Section 9 on access and other rights of data subjects.
Uporabniki sistema EWRS so zlasti vabljeni, da pozorno preberejo razdelek 8 o zagotavljanju informacij posameznikom, na katere se nanašajo osebni podatki, ter razdelek 9 o dostopu in drugih pravicah posameznikov, na katere se nanašajo osebni podatki.
Principles relating to the lawfulness of processing and to purpose limitation
Načela v zvezi z zakonitostjo obdelave in namenom omejevanja