natgillin/translations-raw huggingface dataset:
Where, on the basis of the checks or of any other information available, the Commission concludes that the level of protection offered by the Privacy Shield can no longer be regarded as essentially equivalent to the one in the Union, or where there are clear indications that effective compliance with the Principles in the United States might no longer be ensured, or that the actions of U.S. public authorities responsible for national security or the prevention, investigation, detection or prosecution of criminal offenses do not ensure the required level of protection, it will inform the Department of Commerce thereof and request that appropriate measures are taken to swiftly address any potential non-compliance with the Principles within a specified, reasonable timeframe.
Komisija bo tak osnutek ukrepov predložila tudi, če zaradi nezadostnega sodelovanja organov, vključenih v zagotavljanje delovanja zasebnostnega ščita EU-ZDA v Združenih državah, ne bo mogla ugotoviti, ali obstaja vpliv na ugotovitev iz člena 1(1).
If, after the expiration of the specified timeframe, the U.S. authorities fail to demonstrate satisfactorily that the EU-U.S.
Člen 5
Privacy Shield continues to guarantee effective compliance and an adequate level of protection, the Commission will initiate the procedure leading to the partial or complete suspension or repeal of this decision [207].
Države članice sprejmejo vse potrebne ukrepe za uskladitev s tem sklepom.
Alternatively, the Commission may propose to amend this decision, for instance by limiting the scope of the adequacy finding only to data transfers subject to additional conditions.
Člen 6
In particular, the Commission will initiate the procedure for suspension or repeal in case of:
Ta sklep je naslovljen na države članice.
indications that the U.S. authorities do not comply with the representations and commitments contained in the documents annexed to this decision, including as regards the conditions and limitations for access by U.S. public authorities for law enforcement, national security and other public interest purposes to personal data transferred under the Privacy Shield;
V Bruslju, 12. julija 2016
failure to effectively address complaints by EU data subjects; in this respect, the Commission will take into account all circumstances having an impact on the possibility for EU data subjects to have their rights enforced, including, in particular, the voluntary commitment by self-certified U.S. companies to cooperate with the DPAs and follow their advice; or
Za Komisijo
failure by the Privacy Shield Ombudsperson to provide timely and appropriate responses to requests from EU data subjects.
Članica Komisije
The Commission will also consider initiating the procedure leading to the amendment, suspension, or repeal of this decision if, in the context of the Annual Joint Review of the functioning of the EU-U.S.
UL L 281, 23.11.1995, str. 31.
Privacy Shield or otherwise, the Department of Commerce or other departments or agencies involved in the implementation of the Privacy Shield, or, for matters pertaining to national security, representatives of the U.S. Intelligence Community or the Ombudsperson, fail to provide information or clarifications necessary for the assessment of compliance with the Principles, the effectiveness of complaint handling procedures, or any lowering of the required level of protection as a consequence of actions by U.S. national intelligence authorities, in particular as a consequence of the collection and/or access to personal data that is not limited to what is strictly necessary and proportionate.
Glej Mnenje 4/2016 o osnutku sklepa o ustreznosti zasebnostnega ščita EU-ZDA, objavljeno 30. maja 2016.
In this respect, the Commission will take into account the extent to which the relevant information can be obtained from other sources, including through reports from self-certified U.S. companies as allowed under the USA FREEDOM Act.
Zadeva C-362/14, Maximillian Schrems proti Data Protection Commissioner (v nadaljnjem besedilu: Schrems), EU:C:2015:650, točka 39.
The measures provided for in this Decision are in accordance with the opinion of the Committee established under Article 31(1) of Directive 95/46/EC,
Sporočilo Komisije Evropskemu parlamentu in Svetu Obnovitev zaupanja v pretok podatkov med EU in ZDA, COM(2013) 846 final z dne 27. novembra 2013.
HAS ADOPTED THIS DECISION:
Sporočilo Komisije Evropskemu parlamentu in Svetu o delovanju varnega pristana z vidika državljanov EU in družb, ustanovljenih v EU, COM(2013) 847 final z dne 27. novembra 2013.
Article 1
Glej na primer Svet Evropske unije, končno poročilo kontaktne skupine EU-ZDA na visoki ravni o izmenjavi informacij ter zasebnosti in varstvu osebnih podatkov (Final Report by EU-US High Level Contact Group on information sharing and privacy and personal data protection), Dopis 9831/08, 28. maj 2008, na voljo na spletu na: http://www.europarl.europa.eu/document/activities/cont/201010/20101019ATT88359/20101019ATT88359EN.pdf.
For the purposes of Article 25(2) of Directive 95/46/EC, the United States ensures an adequate level of protection for personal data transferred from the Union to organisations in the United States under the EU-U.S. Privacy Shield.
Poročilo o ugotovitvah predstavnikov EU, ki so sopredsedovali priložnostni delovni skupini EU-ZDA za varstvo podatkov, 27. november 2013, na voljo na spletu na: http://ec.europa.eu/justice/data-protection/files/report-findings-of-the-ad-hoc-eu-us-working-group-on-data-protection.pdf.
The EU-U.S. Privacy Shield is constituted by the Principles issued by the U.S. Department of Commerce on 7 July 2016 as set out in Annex II and the official representations and commitments contained in the documents listed in Annexes I, III to VII.
Glej opombo 3.
For the purpose of paragraph 1, personal data are transferred under the EU-U.S. Privacy Shield where they are transferred from the Union to organisations in the United States that are included in the ‘Privacy Shield List’, maintained and made publicly available by the U.S. Department of Commerce, in accordance with Sections I and III of the Principles set out in Annex II.
Zadeva Schrems, točka 97.
Article 2
Zadeva Schrems, točki 73 in 74.
This Decision does not affect the application of the provisions of Directive 95/46/EC other than Article 25(1) that pertain to the processing of personal data within the Member States, in particular Article 4 thereof.
Zadeva Schrems, točki 88 in 89.
Article 3
Glej Prilogo II, člen III.10.a.
Whenever the competent authorities in Member States exercise their powers pursuant to Article 28(3) of Directive 95/46/EC leading to the suspension or definitive ban of data flows to an organisation in the United States that is included in the Privacy Shield List in accordance with Sections I and III of the Principles set out in Annex II in order to protect individuals with regard to the processing of their personal data, the Member State concerned shall inform the Commission without delay.
V skladu z opredelitvijo iz člena I.8.c upravljavec iz EU določi namen in načine obdelave osebnih podatkov.
Article 4
Poleg tega mora biti v pogodbi s posrednikom jasno določeno, ali so dovoljeni prenosi tretjemu (glej člen III.10a.ii.2).
The Commission will continuously monitor the functioning of the EU-U.S. Privacy Shield with a view to assessing whether the United States continues to ensure an adequate level of protection of personal data transferred thereunder from the Union to organisations in the United States.
To velja tudi v primeru prenašanja podatkov o človeških virih iz Unije v okviru zaposlitvenega razmerja.
The Member States and the Commission shall inform each other of cases where it appears that the government bodies in the United States with the statutory power to enforce compliance with the Principles set out in Annex II fail to provide effective detection and supervision mechanisms enabling infringements of the Principles to be identified and punished in practice.
Čeprav načela poudarjajo „primarno odgovornost“ delodajalca iz EU (glej člen III.9.d.
The Member States and the Commission shall inform each other of any indications that the interferences by U.S. public authorities responsible for national security, law enforcement or other public interests with the right of individuals to the protection of their personal data go beyond what is strictly necessary, and/or that there is no effective legal protection against such interferences.
Priloge II), hkrati jasno navajajo, da bo njegovo ravnanje zajeto v pravilih, ki veljajo v Uniji in/ali zadevni državi članici, ne pa v načelih.
Within one year from the date of the notification of this Decision to the Member States and on a yearly basis thereafter, the Commission will evaluate the finding in Article 1(1) on the basis of all available information, including the information received as part of the Annual Joint Review referred to in Annexes I, II and VI.
Glej Prilogo II, člen III.9.a.i, b.ii, c.i in d.i.
The Commission will report any pertinent findings to the Committee established under Article 31 of Directive 95/46/EC.
To velja tudi za obdelavo, ki se izvaja z uporabo opreme, ki se nahaja v Uniji, ki pa jo uporablja organizacija s sedežem zunaj Unije (glej člen 4(1)(c) Direktive 95/46/ES).
The Commission will present draft measures in accordance with the procedure referred to in Article 31(2) of Directive 95/46/EC with a view to suspending, amending or repealing this Decision or limiting its scope, among others, where there are indications:
Od 25. maja 2018 se bo Splošna uredba o varstvu podatkov (GDPR) uporabljala za obdelavo osebnih podatkov (i) v okviru dejavnosti ustanovitve upravljavca ali obdelovalca v Uniji (tudi če obdelava poteka v ZDA) ali (ii) posameznikov v Uniji, na katere se nanašajo osebni podatki, s strani upravljavca ali obdelovalca, ki nima sedeža v Uniji, pri čemer so dejavnosti obdelave povezane s (a) ponujanjem blaga ali storitev, ne glede na to, ali posameznik, na katerega se nanašajo podatki, zahteva plačilo, takim posameznikom v Uniji, na katere se nanašajo osebni podatki, ali (b) spremljanjem njihovega vedenja v Uniji.
that the U.S. public authorities do not comply with the representations and commitments contained in the documents annexed to this Decision, including as regards the conditions and limitations for access by U.S. public authorities for law enforcement, national security and other public interest purposes to personal data transferred under the EU-U.S. Privacy Shield,
Glej člen 3(1), (2) Uredbe (EU) 2016/679 Evropskega parlamenta in Sveta z dne 27. aprila 2016 o varstvu posameznikov pri obdelavi osebnih podatkov in o prostem pretoku takih podatkov ter o razveljavitvi Direktive 95/46/ES (Splošna uredba o varstvu podatkov) (UL L 119, 4.5.2016, str. 1).
of a systematic failure to effectively address complaints by EU data subjects, or
Ta sklep velja za EGP.
of a systematic failure by the Privacy Shield Ombudsperson to provide timely and appropriate responses to requests from EU data subjects as required by Section 4(e) of Annex III.
Sporazum o Evropskem gospodarskem prostoru (v nadaljnjem besedilu: Sporazum EGP) predvideva razširitev notranjega trga Evropske unije na tri države EGP, tj. Islandijo, Lihtenštajn in Norveško.
The Commission will also present such draft measures if the lack of cooperation of the bodies involved in ensuring the functioning of the EU-U.S.
Zakonodaja Unije na področju varstva podatkov, vključno z Direktivo 95/46/ES, je zajeta v Sporazumu EGP in je bila vključena v Prilogo XI Sporazuma.
Privacy Shield in the United States prevents the Commission from determining whether the finding in Article 1(1) is affected.
Skupni odbor EGP mora sprejeti odločitev glede vključitve tega sklepa v Sporazum EGP.
Article 5
Ko bo ta sklep začel veljati na Islandiji, v Lihtenštajnu in na Norveškem, bo zasebnostni ščit EU–ZDA vključeval tudi te tri države, sklicevanja v svežnju zasebnostnega ščita na EU in njene države članice pa se razumejo tako, da vključujejo Islandijo, Lihtenštajn in Norveško.
Member States shall take all the measures necessary to comply with this Decision.
Glej Prilogo II, člen III.6.e.
Article 6
Za podatke o človeških virih, zbrane v okviru zaposlitve, se uporabljajo posebna pravila, ki zagotavljajo dodatne zaščitne ukrepe, kot je določeno v dodatnem načelu o „podatkih o človeških virih“ k načelom zasebnosti (glej Prilogo II, člen III.9).
This Decision is addressed to the Member States.
Na primer, delodajalci bi morali ustreči prednostnim pravicam zaposlenih po zasebnosti z omejitvijo dostopa do osebnih podatkov, anonimizacijo nekaterih podatkov ali dodelitvijo kod ali psevdonimov.
Done at Brussels, 12 July 2016.
Najpomembneje je, da se od organizacij zahteva, da sodelujejo z organi za varstvo podatkov Unije in upoštevajo njihove nasvete v zvezi s takimi podatki.
For the Commission
To velja za vse prenose podatkov v okviru zasebnostnega ščita, tudi če se ti nanašajo na podatke, zbrane v zaposlitvenem razmerju.
Member of the Commission
Čeprav lahko samocertificirana organizacija v ZDA načeloma uporablja podatke o človeških virih za različne namene, ki niso povezani z zaposlitvijo (npr. nekatere tržne komunikacije), mora spoštovati prepoved nezdružljive obdelave, poleg tega pa lahko to počne samo v skladu z načeloma obvestila in možnosti izbire.
OJ L 281, 23.11.1995, p. 31.
Prepoved, da organizacija v ZDA sprejme kakršen koli kazenski ukrep zoper zaposlenega zaradi uveljavljanja take možnosti izbire, vključno s kakršnim koli omejevanjem zaposlitvenih možnosti, zagotavlja, da se nad zaposlenim, kljub podrejenemu razmerju in s tem povezano odvisnostjo, ne izvaja pritisk in da lahko tako dejansko uveljavlja možnost svobodne izbire.
See Opinion 4/2016 on the EU-U.S. Privacy Shield draft adequacy decision, published 30 May 2016.
Glej Prilogo II, člen III.12.
Case C-362/14, Maximillian Schrems v Data Protection Commissioner (‘Schrems’), EU:C:2015:650, paragraph 39.
Glej tudi dopolnilno načelo o „dostopu“ (Priloga II, člen III.8).
Case C-553/07, Rijkeboer, EU:C:2009:293, paragraph 47; Joined Cases C-293/12 and C-594/12, Digital Rights Ireland and Others, EU:C:2014:238, paragraph 53; Case C-131/12, Google Spain and Google, EU:C:2014:317, paragraphs 53, 66 and 74.
Glej na primer zakon o enakih možnostih pridobitve posojila (Equal Credit Opportunity Act, v nadaljnjem besedilu: ECOA) (člen 1691 in naslednji naslova 15 zakonodajne zbirke ZDA), zakon o pravičnem poročanju o kreditni sposobnosti (Fair Credit Reporting Act, v nadaljnjem besedilu: FRCA) (člen 1681 in naslednji naslova 15 zakonodajne zbirke ZDA) ali zakon proti diskriminaciji v zvezi s prodajo in najemom stanovanj in hiš (Fair Housing Act, v nadaljnjem besedilu: FHA) (člen 3601 in naslednji naslova 42 zakonodajne zbirke ZDA).
Commission Decision 2000/520/EC of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the U.S. Department of Commerce (OJ L 215, 28.8.2000, p. 7).
V okviru prenosa osebnih podatkov, ki so bili zbrani v EU, v večini primerov obstaja pogodbeno razmerje med posameznikom (stranko) in upravljavcem iz EU, ki mora spoštovati predpise EU o varstvu podatkov in običajno sprejme kakršno koli odločitev, ki temelji na samodejni obdelavi.
Communication from the Commission to the European Parliament and the Council Rebuilding Trust in EU-U.S. Data Flows, COM(2013) 846 final of 27 November 2013.
To vključuje scenarije, v katerih podatke obdeluje organizacija v zasebnostnem ščitu, ki nastopa v vlogi posrednika in deluje v imenu upravljavca iz EU.
Communication from the Commission to the European Parliament and the Council on the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies established in the EU, COM(2013) 847 final of 27 November 2013.
Glej tudi dopolnilno načelo o reševanju sporov in izvrševanju (Priloga II, člen III.11).
See e.g. Council of the European Union, Final Report by EU-US High Level Contact Group on information sharing and privacy and personal data protection, Note 9831/08, 28 May 2008, available on the internet at: http://www.europarl.europa.eu/document/activities/cont/201010/20101019ATT88359/20101019ATT88359EN.pdf.
Glej tudi dopolnilno načelo o samocertificiranju (Priloga II, člen III.6).
Report on the Findings by the EU Co-chairs of the ad hoc EU-U.S. Working Group on Data Protection, 27 November 2013, available on the internet at: http://ec.europa.eu/justice/data-protection/files/report-findings-of-the-ad-hoc-eu-us-working-group-on-data-protection.pdf.
Glej tudi dopolnilno načelo o preverjanju (Priloga II, člen III.7).
See footnote 3.
Glej tudi dopolnilno načelo o obveznih pogodbah za prenos tretjemu (Priloga II, člen III.10).
Schrems, paragraph 97.
Glej tudi dopolnilno načelo o obveznih pogodbah za prenos tretjemu (Priloga II, člen III.10.b).
Schrems, paragraphs 73-74.
Čeprav to načelo omogoča prenose tudi na podlagi nepogodbenih instrumentov (npr. programi skladnosti in nadzora znotraj skupine), besedilo jasno navaja, da morajo ti instrumenti vedno „zagotavljati neprekinjeno varstvo osebnih podatkov v skladu z načeli“.
Schrems, paragraph 88-89.
Poleg tega bo to načelo glede na to, da bodo samocertificirane organizacije v ZDA še vedno odgovorne za skladnost z načeli, zagotavljalo močno spodbudo za uporabo instrumentov, ki so dejansko učinkoviti v praksi.
See Annex II, Sec.
Glej Prilogo II, člen I.5.
III.10.a.
Posamezniki ne bodo imeli pravice zavrnitve, če se osebni podatki prenašajo tretji stranki, ki v vlogi posrednika izvaja naloge v imenu in po navodilih organizacije v ZDA.
In line with the definition in Sec.
Vendar to zahteva pogodbo s posrednikom in organizacija v ZDA bo odgovorna za zagotavljanje varstva v skladu z načeli z izvajanje pooblastil za dajanje navodil.
I.8.c., the EU controller will determine the purpose and means of processing of the personal data.
Stanje je različno, odvisno od tega, ali je tretja stranka upravljavec ali obdelovalec (posrednik).
Moreover, the contract with the agent has to make clear whether onward transfers are allowed (see Sec.
V prvem scenariju mora biti v pogodbi s tretjo stranko določeno, da tretja stranka preneha z obdelavo ali sprejme druge razumne in ustrezne ukrepe za izboljšanje stanja.
III.10.a.ii.2.).
V drugem scenariju mora te ukrepe sprejeti organizacija v zasebnostnem ščitu, ki nadzoruje obdelavo in po katere navodilih deluje posrednik.
This applies also where human resources data transferred from the Union in the context of the employment relationship are concerned.
V takem primeru mora tudi organizacija v ZDA sprejeti razumne in ustrezne ukrepe (i) za zagotovitev, da posrednik učinkovito obdeluje osebne podatke, ki se prenašajo v skladu z obveznostmi organizacije po načelih ter (ii) za ustavitev in prenehanje nedovoljene obdelave na podlagi obvestila.
While the Principles stress the ‘primary responsibility’ of the EU employer (see Annex II, Sec.
Informacije o vodenju seznama zasebnostnega ščita so v Prilogi I in Prilogi II (člen I.3, člen I.4, člen III.6.d in člen III.11.g).
III.9.d.i.), they at the same time make clear that its conduct will be covered by the rules applicable in the Union and/or respective Member State, not the Principles.
Glej npr. Prilogo II, člen I.3, člen III.6.f in člen III.11.g.i.
See Annex II, Sec.
Glej člen o iskanju in obravnavi lažnih navedb o sodelovanju v Prilogi I.
III.9.a.i., b.ii., c.i., d.i.
Glej Prilogo II, člen III.6.h in člen III.11.f.
This applies also to processing that takes place through the use of equipment situated in the Union but used by an organisation established outside the Union (see Article 4(1)(c) of Directive 95/46/EC).
Glej Prilogo I.
As of 25 May 2018, the General Data Protection Regulation (GDPR) will apply to the processing of personal data (i) in the context of the activities of an establishment of a controller or processor in the Union (even where the processing takes place in the United States), or (ii) of data subjects who are in the Union by a controller or processor not established in the Union where the processing activities are related to (a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or (b) the monitoring of their behaviour as far as their behaviour takes place within the Union.
To je organ za obravnavanje pritožb, ki ga imenuje senat organov za varstvo podatkov, določen v dopolnilnem načelu o vlogi organov za varstvo podatkov (Priloga II, člen III.5).
See Article 3(1), (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).
i.
The present decision has EEA relevance.
Potrošnike je treba spodbujati, da se s svojimi pritožbami najprej obrnejo na ustrezno organizacijo in šele nato uporabijo neodvisne pritožbene mehanizme.
The Agreement on the European Economic Area (EEA Agreement) provides for the extension of the European Union's internal market to the three EEA States Iceland, Liechtenstein and Norway.
Organizacije morajo odgovoriti potrošniku v 45 dneh od prejema pritožbe.
The Union data protection legislation, including Directive 95/46/EC, is covered by the EEA Agreement and has been incorporated into Annex XI thereof.
Glej Prilogo II, člen III.11.e.
The EEA Joint Committee has to decide on the incorporation of the present decision into the EEA Agreement.
Glej Prilogo II, člen III.11.g, zlasti točki (ii) in (iii).
Once the present decision applies to Iceland, Liechtenstein and Norway, the EU-U.S. Privacy Shield will also cover these three countries and references in the Privacy Shield package to the EU and its Member States shall be read as including Iceland, Liechtenstein and Norway.
Organi za varstvo podatkov bi morali pripraviti poslovnik neuradnega senata organov za varstvo podatkov na podlagi svoje pristojnosti za organizacijo dela in medsebojno sodelovanje.
See Annex II, Sec.
Glej člen o okrepitvi sodelovanja z organi za varstvo podatkov in člen o olajšanju reševanja pritožb zaradi nespoštovanja načel v Prilogi I ter Prilogo II, člen II.7.e.
III.6.e.
Glej str. 6 Priloge IV.
Special rules providing additional safeguards apply for human resources data collected in the employment context as laid down in the supplemental principle on ‘Human Resources Data’ of the Privacy Principles (See Annex II, Sec.
Glej člen o olajšanju reševanja pritožb zaradi nespoštovanja načel v Prilogi I.
III.9).
Organizacija v zasebnostnem ščitu se mora javno zavezati k spoštovanju načel, javno razkriti svoje politike varstva zasebnosti v skladu s temi načeli in jih v celoti izvajati.
For instance, employers should accommodate the privacy preferences of employees by restricting access to the personal data, anonymising certain data or assigning codes or pseudonyms.
Nespoštovanje načel se preganja na podlagi člena 5 zakona o FTC, ki prepoveduje nepoštena in goljufiva dejanja v trgovini ali v zvezi z njo.
Most importantly, organisations are required to cooperate and comply with the advice of Union Data Protection Authorities when it comes to such data.
FTC glede na informacije, ki jih je podala, nima pooblastil za izvajanje pregledov na kraju samem na področju varstva zasebnosti.
This applies to all data transfers under the Privacy Shield, including where these concern data collected through the employment relationship.
Vendar ima pooblastila, da od organizacij zahteva, da predložijo dokumente in izjave prič (glej člen 20 zakona o FTC), ter lahko v primeru neizpolnitve uporabi sodni sistem za izvršitev takih odločb.