natgillin/translations-raw huggingface dataset:
The Privacy Shield supports shared privacy principles, bridging the differences in our legal approaches, while furthering trade and economic objectives of both Europe and the United States.
svoji odgovornosti v primerih prenosa tretjemu.
While a company's decision to self-certify to this new Framework will be voluntary, once a company publicly commits to the Privacy Shield, its commitment is enforceable under U.S. law by either the Federal Trade Commission or Department of Transportation, depending on which authority has jurisdiction over the Privacy Shield organization.
b.
The resulting Privacy Shield strengthens the protection of privacy by:
Možnost izbire a.
requiring additional information be provided to individuals in the Notice Principle, including a declaration of the organization's participation in the Privacy Shield, a statement of the individual's right to access personal data, and the identification of the relevant independent dispute resolution body;
Organizacija mora posameznikom ponuditi možnost izbire (zavrnitve) o tem, ali se bodo njihovi osebni podatki (i) razkrili tretji stranki ali (ii) se bodo uporabili za namen, ki se bistveno razlikuje od namenov, za katere so bili prvotno zbrani ali jih posamezniki pozneje odobrili.
providing that a Privacy Shield organization is responsible for the processing of personal information it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf, and that the Privacy Shield organization shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the Principles, unless the organization proves that it is not responsible for the event giving rise to the damage;
Vendar pa organizacija vedno sklene pogodbo s posrednikom.
clarifying that Privacy Shield organizations must limit personal information to the information that is relevant for the purposes of processing;
Poleg tega mora organizacija obravnavati kot občutljive vse osebne informacije, ki jih je prejela od tretje stranke, kadar jih kot občutljive identificira in obravnava tretja stranka.
requiring an organization to annually certify with the Department its commitment to apply the Principles to information it received while it participated in the Privacy Shield if it leaves the Privacy Shield and chooses to keep such data;
3.
requiring that independent recourse mechanisms be provided at no cost to the individual;
Odgovornost za prenos tretjemu
requiring organizations and their selected independent recourse mechanisms to respond promptly to inquiries and requests by the Department for information relating to the Privacy Shield;
a.
requiring organizations to respond expeditiously to complaints regarding compliance with the Principles referred by EU Member State authorities through the Department; and
Za prenos osebnih informacij tretjemu, ki nastopa v vlogi upravljavca, morajo organizacije izpolniti načeli obvestila in možnosti izbire.
requiring a Privacy Shield organization to make public any relevant Privacy Shield-related sections of any compliance or assessment report submitted to the FTC if it becomes subject to an FTC or court order based on non-compliance.
Organizacije morajo skleniti tudi pogodbo s tretjim upravljavcem, ki določa, da se taki podatki smejo obdelovati le za omejene in natančno določene namene v skladu s soglasjem, ki ga podal posameznik, in da bo prejemnik zagotovil enako raven zaščite kot načela ter organizacijo obvestil, če ugotovi, da te obveznosti ne more več izpolnjevati.
Administration and Supervision of the Privacy Shield Program by the Department of Commerce
V tej pogodbi je določeno, da tretji upravljavec v primeru take ugotovitve preneha z obdelavo ali sprejme druge razumne in ustrezne ukrepe za odpravo. b.
The Department reiterates its commitment to maintain and make available to the public an authoritative list of U.S. organizations that have self-certified to the Department and declared their commitment to adhere to the Principles (the ‘Privacy Shield List’).
Za prenos osebnih podatkov tretji stranki, ki nastopa v vlogi posrednika, morajo organizacije: (i) prenesti takšne podatke le za omejene in natančno določene namene; (ii) potrditi, da je posrednik dolžan zagotoviti vsaj enako raven varstva zasebnosti, kot jo zahtevajo načela; (iii) sprejeti razumne in ustrezne ukrepe, s katerimi zagotovijo, da posrednik dejansko obdela prenesene osebne informacije na način, ki je skladen z obveznostmi organizacije v skladu z načeli; (iv) od zastopnika zahtevati, da jih v primeru ugotovitve, da ne more več izpolnjevati obveznosti glede zagotavljanja enake ravni varstva, kot jo zahtevajo načela, o tem obvesti; (v) po obvestilu, vključno v skladu s točko iv, sprejeti razumne in ustrezne ukrepe za ustavitev in odpravo nepooblaščene obdelave ter na zahtevo Ministrstvu zagotovi povzetek ali reprezentativni izvod ustreznih določb o zasebnosti iz svoje pogodbe s tem posrednikom.
The Department will keep the Privacy Shield List up to date by removing organizations when they voluntarily withdraw, fail to complete the annual re-certification in accordance with the Department's procedures, or are found to persistently fail to comply.
4.
The Department will also maintain and make available to the public an authoritative record of U.S. organizations that had previously self-certified to the Department, but that have been removed from the Privacy Shield List, including those that were removed for persistent failure to comply with the Principles.
Varnost
In addition, the Department commits to strengthening the administration and supervision of the Privacy Shield.
Organizacije, ki pripravljajo, vzdržujejo, uporabljajo ali širijo osebne podatke, morajo sprejeti ustrezne in razumne ukrepe, da jih zavarujejo pred izgubo, zlorabo in nepooblaščenim dostopom, razkritjem, spreminjanjem in uničenjem ob ustreznem upoštevanju tveganj, vključenih v obdelavo, in naravo osebnih podatkov.
Specifically, the Department will:
Neokrnjenost podatkov in omejitev namena
Provide Additional Information on the Privacy Shield Website
a.
maintain the Privacy Shield List, as well as a record of those organizations that previously self-certified their adherence to the Principles, but which are no longer assured of the benefits of the Privacy Shield;
V skladu z načeli je treba osebne informacije omejiti na informacije, ki ustrezajo namenu obdelave [2].
include a prominently placed explanation clarifying that all organizations removed from the Privacy Shield List are no longer assured of the benefits of the Privacy Shield, but must nevertheless continue to apply the Principles to the personal information that they received while they participated in the Privacy Shield for as long as they retain such information; and
Organizacija ne sme obdelovati osebnih podatkov na način, ki je nezdružljiv z nameni, za katere so bili podatki zbrani ali jih je posameznik pozneje odobril.
provide a link to the list of Privacy Shield-related FTC cases maintained on the FTC website.
Organizacija mora spoštovati načela, dokler hrani take informacije.
Verify Self-Certification Requirements
Ta obveznost organizacijam ne preprečuje obdelave osebnih podatkov za daljša obdobja, in sicer če čas in obseg take obdelave razumno služi namenom arhiviranja v javnem interesu, novinarstva, literature in umetnosti, znanstvenih in zgodovinskih raziskav ter statistične analize.
prior to finalizing an organization's self-certification (or annual re-certification) and placing an organization on the Privacy Shield List, verify that the organization has:
V teh primerih za tako obdelavo veljajo druga načela in določbe okvira.
provided required organization contact information;
Organizacije morajo sprejeti razumne in ustrezne ukrepe za uskladitev s to določbo.
described the activities of the organization with respect to personal information received from the EU;
v. potrebna za izvajanje obveznosti organizacije na področju delovnega prava; ali
indicated what personal information is covered by its self-certification;
povezana s podatki, ki jih je posameznik očitno dal v javnost sam.
if the organization has a public website, provided the web address where the privacy policy is available and the privacy policy is accessible at the web address provided, or if an organization does not have a public website, provided where the privacy policy is available for viewing by the public;
2.
included in its relevant privacy policy a statement that it adheres to the Principles and if the privacy policy is available online, a hyperlink to the Department's Privacy Shield website;
Izjeme za novinarsko področje
identified the specific statutory body that has jurisdiction to hear any claims against the organization regarding possible unfair or deceptive practices and violations of laws or regulations governing privacy (and that is listed in the Principles or a future annex to the Principles);
Sekundarna odgovornost a.
if the organization elects to satisfy the requirements in points (a)(i) and (a)(iii) of the Recourse, Enforcement and Liability Principle by committing to cooperate with the appropriate EU data protection authorities (‘DPAs’), indicated its intention to cooperate with DPAs in the investigation and resolution of complaints brought under the Privacy Shield, notably to respond to their inquiries when EU data subjects have brought their complaints directly to their national DPAs;
Ponudniki internetnih storitev, telekomunikacijska podjetja in druge organizacije niso odgovorni po načelih zasebnostnega ščita, kadar v imenu druge organizacije zgolj prenašajo, usmerjajo, zamenjujejo ali pridobivajo informacije.
identified any privacy program in which the organization is a member;
Kakor utemeljuje sama direktiva, zasebnostni ščit ne ustvarja sekundarne odgovornosti.
identified the method of verification of assuring compliance with the Principles (e.g., in-house, third party);
Kolikor je organizacija zgolj posrednik podatkov, ki jih prenaša tretja stranka ter pri tem ne določa namenov in načinov obdelave teh osebnih podatkov, ni odgovorna.
identified, both in its self-certification submission and in its privacy policy, the independent recourse mechanism that is available to investigate and resolve complaints;
Izvedba skrbnega pregleda in revizij
included in its relevant privacy policy, if the policy is available online, a hyperlink to the website or complaint submission form of the independent recourse mechanism that is available to investigate unresolved complaints; and
a.
if the organization has indicated that it intends to receive human resources information transferred from the EU for use in the context of the employment relationship, declared its commitment to cooperate and comply with DPAs to resolve complaints concerning its activities with regard to such data, provided the Department with a copy of its human resources privacy policy, and provided where the privacy policy is available for viewing by its affected employees.
Dejavnosti revizorjev in investicijskih bank lahko vključujejo obdelavo osebnih podatkov brez privolitve ali vednosti posameznika.
work with independent recourse mechanisms to verify that the organizations have in fact registered with the relevant mechanism indicated in their self-certification submissions, where such registration is required.
b.
Expand Efforts to Follow Up with Organizations That Have Been Removed from the Privacy Shield List
Javne delniške družbe in podjetja z omejenim številom lastnikov, vključno z organizacijami v zasebnostnem ščitu, so predmet rednih revizij.
notify organizations that are removed from the Privacy Shield List for ‘persistent failure to comply’ that they are not entitled to retain information collected under the Privacy Shield; and
Takšne revizije, zlasti tiste, ki preiskujejo morebitna hudodelstva, so lahko ogrožene, če so razkrite prehitro.
send questionnaires to organizations whose self-certifications lapse or who have voluntarily withdrawn from the Privacy Shield to verify whether the organization will return, delete, or continue to apply the Principles to the personal information that they received while they participated in the Privacy Shield, and if personal information will be retained, verify who within the organization will serve as an ongoing point of contact for Privacy Shield-related questions.
Prehitro razkritje lahko ovira posel ali celo krši veljavni predpis glede vrednostnih papirjev.
Search for and Address False Claims of Participation
Ti zakoniti interesi vključujejo spremljanje izpolnjevanja zakonitih obveznosti in zakonitih računovodskih dejavnosti organizacij ter potrebo po zaupnosti v zvezi z morebitnimi nakupi, združitvami, skupnimi vlaganji ali drugo podobno transakcijo, ki jo opravijo investicijske banke in revizorji.
In instances where a DPA believes that an organization is not complying with the Principles, including following a complaint from an EU individual, the DPA can reach out to the dedicated contact at the Department to refer the organization for further review.
Zavajanje Ministrstva se lahko kaznuje po zakonu o lažnih navedbah (False Statements Act) (člen 1001 naslova 18 zakonodajne zbirke ZDA).
Adopt Arbitral Procedures and Select Arbitrators in Consultation with the Commission
Po načelih zasebnostnega ščita je pravica do dostopa temeljna za varstvo zasebnosti.
The Department will fulfill its commitments under Annex I and publish the procedures after agreement has been reached.
Posameznikom zlasti omogoča, da preverijo točnost svojih podatkov, ki jih hrani organizacija.
Joint Review Mechanism of the Functioning of the Privacy Shield
Načelo dostopa pomeni, da imajo posamezniki pravico: 1. pridobiti od organizacije potrditev o tem, ali organizacija obdeluje njihove osebne podatke ali ne [4];
The Department of Commerce, the FTC, and other agencies, as appropriate, will hold annual meetings with the Commission, interested DPAs, and appropriate representatives from the Article 29 Working Party, where the Department will provide updates on the Privacy Shield program.
da jim sporočijo takšne podatke, da lahko preverijo njihovo točnost in zakonitost obdelave; in
The annual meetings will include discussion of current issues related to the functioning, implementation, supervision, and enforcement of the Privacy Shield, including referrals received by the Department from DPAs, the results of ex officio compliance reviews, and may also include discussion of relevant changes of law.
da spremenijo, popravijo ali izbrišejo podatke, kadar so ti netočni ali obdelani ob kršitvi načel. ii.
The first annual review and subsequent reviews as appropriate will include a dialogue on other topics, such as in the area of automated decision-making, including aspects relating to similarities and differences in approaches in the EU and the US.
Posameznikom ni treba upravičevati zahtev za dostop do njihovih osebnih podatkov.
Update of Laws
Organizacije naj pri odzivu na posameznikovo zahtevo po dostopu najprej pogledajo težave, ki so vodile do zahteve.
The Department will make reasonable efforts to inform the Commission of material developments in the law in the United States so far as they are relevant to the Privacy Shield in the field of data privacy protection and the limitations and safeguards applicable to access to personal data by U.S. authorities and its subsequent use.
Če je na primer zahteva po dostopu nejasna in se nanaša na več področij, lahko organizacija v pogovoru s posameznikom poskuša bolje razumeti motiv za njegovo zahtevo ter poišče ustrezne podatke.
National Security Exception
Organizacija lahko poizve, na katere dele organizacije se je posameznik obrnil ali na katere vrste podatkov ali njihovo uporabo se nanaša zahteva po dostopu. iii.
In addition, these letters describe the transparency provided by the Intelligence Community about these matters.
Stroški in izdatki za zagotovitev dostopa
As the Commission is assessing the Privacy Shield Framework, the information in these letters provides assurance to conclude that the Privacy Shield will operate appropriately, in accordance with the Principles therein.
i.
We understand that you may raise information that has been released publicly by the Intelligence Community, along with other information, in the future to inform the annual review of the Privacy Shield Framework.
Pravico dostopa do osebnih podatkov je mogoče omejiti v izjemnih okoliščinah, kjer bi bile kršene zakonite pravice drugih oseb ali kjer bi bili stroški ali izdatki za zagotovitev dostopa nesorazmerni s tveganji za zasebnost posameznika v zadevnem primeru.
On the basis of the Privacy Shield Principles and the accompanying letters and materials, including the Department's commitments regarding the administration and supervision of the Privacy Shield Framework, our expectation is that the Commission will determine that the EU-U.S. Privacy Shield Framework provides adequate protection for the purposes of EU law and data transfers from the European Union will continue to organizations that participate in the Privacy Shield.
Stroški in izdatki so pomemben dejavnik, ki ga je treba upoštevati, vendar niso prevladujoči dejavniki pri ugotavljanju, ali je zagotovitev dostopa razumna ali ne.
Annex 2
Na primer, če se bodo osebne informacije uporabile za odločitve, ki bodo pomembno vplivale na posameznika (npr. zavrnitev ali dodelitev pomembnih ugodnosti, kot so zavarovanje, hipoteka in zaposlitev), potem mora organizacija v skladu z drugimi določbami teh dopolnilnih načel razkriti navedene podatke, četudi je zagotovitev njihovega dostopa razmeroma težka ali draga.
Arbitral Model
Če zahtevane osebne informacije niso občutljive ali se ne uporabijo za odločitve, ki bodo pomembno vplivale na posameznika, temveč so dostopne in poceni, mora organizacija zagotoviti dostop do takih informacij.
This Annex I provides the terms under which Privacy Shield organizations are obligated to arbitrate claims, pursuant to the Recourse, Enforcement and Liability Principle.
c.
The binding arbitration option described below applies to certain ‘residual’ claims as to data covered by the EU-U.S. Privacy Shield.
Zaupne tržne informacije
This arbitration option is available to an individual to determine, for residual claims, whether a Privacy Shield organization has violated its obligations under the Principles as to that individual, and whether any such violation remains fully or partially unremedied.
Kadar je zaupno tržno informacijo mogoče brez težav ločiti od drugih osebnih informacij, na katere se nanaša zahteva po dostopu, mora organizacija na novo prekriti zaupno tržno informacijo in omogočiti dostop do podatkov, ki niso zaupni.
B. Available Remedies
Dostop je treba zagotoviti samo do osebnih informacij, ki jih hrani organizacija.
Under this arbitration option, the Privacy Shield Panel (consisting of one or three arbitrators, as agreed by the parties) has the authority to impose individual-specific, non-monetary equitable relief (such as access, correction, deletion, or return of the individual's data in question) necessary to remedy the violation of the Principles only with respect to the individual.
e.
An individual's decision to invoke this binding arbitration option is entirely voluntary.
Posameznik ima tudi pravico, da mu sporočijo njegove osebne podatke.
Arbitral decisions will be binding on all parties to the arbitration.
Organizacija lahko zaračuna pristojbino, ki ni previsoka. ii.
F. The Arbitration Panel
Organizacija lahko postavi razumne omejitve glede številka poskusov v določenem obdobju, v katerem bodo izpolnjene zahteve za dostop nekega posameznika.
The parties will select the arbitrators from the list of arbitrators discussed below.
Pri postavljanju takšnih omejitev mora organizacija upoštevati takšne dejavnike, kot je pogostost posodabljanja informacij, namen njihove uporabe in njihova narava.
Consistent with applicable law, the U.S.
h.
Department of Commerce and the European Commission will develop a list of at least 20 arbitrators, chosen on the basis of independence, integrity, and expertise.
Goljufive zahteve za dostop
will remain on the list for a period of 3 years, absent exceptional circumstances or for cause, renewable for one additional period of 3 years;
Časovni okvir za odgovore Organizacije morajo odgovoriti na zahteve za dostop v razumnem roku, na razumen način in v obliki, ki je razumljiva posamezniku.
shall not be subject to any instructions from, or be affiliated with, either party, or any Privacy Shield organization, or the U.S., EU, or any EU Member State or any other governmental authority, public authority, or enforcement authority; and
Podatki o človeških virih a.
Procedures will be developed to ensure that an individual's same claimed violation does not receive duplicative remedies or procedures.
Uporaba načel obvestila in možnosti izbire
The location of the arbitration will be the United States, and the individual may choose video or telephone participation, which will be provided at no cost to the individual.
Na primer, kadar organizacija namerava uporabiti podatke, zbrane v zaposlitvenem razmerju, za namene, ki niso povezani z zaposlitvenim razmerjem, kot so tržne komunikacije, mora organizacija ZDA pred tem prizadetim posameznikom zagotoviti predpisano možnost izbire, razen če so že odobrili uporabo podatkov v take namene.
In-person participation will not be required.
Taka uporaba ne sme biti nezdružljiva s prvotnimi nameni, zaradi katerih so bili osebni podatki zbrani ali jih je posameznik pozneje odobril.
Upon a reasoned request, and taking into account whether the individual is represented by an attorney, interpretation at the arbitral hearing as well as translation of arbitral materials will be provided at no cost to the individual, unless the panel finds that, under the circumstances of the specific arbitration, this would lead to unjustified or disproportionate costs.
Treba je navesti, da nekateri splošno uporabni pogoji za prenos iz nekaterih držav članic EU, lahko izključijo drugačno uporabo takih podatkov tudi po prenosu v državah zunaj EU, in take pogoje bo treba spoštovati.
H. Costs
c.
Arbitrators should take reasonable steps to minimize the costs or fees of the arbitrations.
Uporaba načela dostopa
Id.
Organizacija ZDA, ki je pristopila k zasebnostnemu ščitu in uporablja podatke o človeških virih, prenesene iz EU v okviru zaposlitvenih razmerij, ter želi, da za ta prenos veljajo načela zasebnostnega ščita, se mora zato zavezati, da bo v takih primerih sodelovala v preiskavah pristojnih organov EU in upoštevala njihov nasvet.
§ 203.Chapter 2 also provides that ‘Chapter 1 applies to actions and proceedings brought under this chapter to the extent that chapter is not in conflict with this chapter or the [New York] Convention as ratified by the United States.’
Pogodbe za obdelavo podatkov
Id.
Namen pogodbe je zagotoviti, da izvajalec obdelave: 1. deluje samo po navodilih upravljavca;
ANNEX II EU-U.S.
Ker pristopnice zasebnostnega ščita zagotavljajo ustrezno zaščito podatkov, se za pogodbe, sklenjene s pristopnicami zasebnostnega ščita samo zaradi obdelave podatkov, ne zahteva predhodno dovoljenje (ali pa bodo države članice EU tako dovoljenje dale avtomatično), kakršno se zahteva za pogodbe s prejemniki podatkov, ki niso pristopili k zasebnostnemu ščitu ali kako drugače ne zagotavljajo ustrezne zaščite podatkov.
Given those differences and to provide organizations in the United States with a reliable mechanism for personal data transfers to the United States from the European Union while ensuring that EU data subjects continue to benefit from effective safeguards and protection as required by European legislation with respect to the processing of their personal data when they have been transferred to non-EU countries, the Department of Commerce is issuing these Privacy Shield Principles, including the Supplemental Principles (collectively ‘the Principles’) under its statutory authority to foster, promote, and develop international commerce (15 U.S.C. § 1512).
V primeru takih prenosov organizacija v zasebnostnem ščitu ostane odgovorna za spoštovanje načel zasebnostnega ščita. c.