natgillin/translations-raw huggingface dataset:
Such measures should take into account the nature, scope, context and purposes of the processing and the risk to the rights and freedoms of natural persons.
Tveganja za posameznikove pravice in svoboščine, ki se razlikujejo po verjetnosti in resnosti, so lahko posledica obdelave podatkov, ki bi lahko povzročila fizično, premoženjsko ali nepremoženjsko škodo, zlasti kadar obdelava lahko privede do diskriminacije, kraje ali zlorabe identitete, finančne izgube, okrnitve ugleda, izgube zaupnosti podatkov, zaščitenih s poklicno skrivnostjo, neodobrene reverzije psevdonimizacije ali katere koli druge večje gospodarske ali socialne škode ali kadar bi bile posameznikom, na katere se nanašajo osebni podatki, lahko odvzete pravice in svoboščine ali možnost nadzora nad njihovimi osebnimi podatki; kadar se obdelujejo osebni podatki, ki razkrivajo rasno ali etnično poreklo, politična stališča, veroizpoved ali filozofsko prepričanje ali članstvo v sindikatu, kadar se obdelujejo genetski ali biometrični podatki za edinstveno identifikacijo zadevnega posameznika ali kadar se obdelujejo podatki v zvezi z zdravjem ali podatki v zvezi s spolnim življenjem in spolno usmerjenostjo, kazenskimi obsodbami in prekrški ali s tem povezanimi varnostnimi ukrepi; kadar se vrednotijo osebni vidiki, zlasti analiziranje in predvidevanje vidikov, ki zadevajo uspešnost pri delu, ekonomski položaj, zdravje, osebni okus ali interese, zanesljivost ali vedenje, lokacijo ali gibanje, da bi se ustvarili ali uporabljali osebni profili; kadar se obdelujejo osebni podatki ranljivih posameznikov, zlasti otrok, ter kadar obdelava vključuje veliko število osebnih podatkov in zadeva veliko število posameznikov, na katere se nanašajo osebni podatki.
The measures taken by the controller should include drawing up and implementing specific safeguards in respect of the treatment of personal data of vulnerable natural persons, such as children.
Verjetnost in resnost tveganja bi bilo treba ugotoviti glede na vrsto, obseg, okoliščine in namene obdelave.
The risk to the rights and freedoms of natural persons, of varying likelihood and severity, may result from data processing which could lead to physical, material or non-material damage, in particular: where the processing may give rise to discrimination, identity theft or fraud, financial loss, damage to the reputation, loss of confidentiality of data protected by professional secrecy, unauthorised reversal of pseudonymisation or any other significant economic or social disadvantage; where data subjects might be deprived of their rights and freedoms or from exercising control over their personal data; where personal data are processed which reveal racial or ethnic origin, political opinions, religion or philosophical beliefs or trade union membership; where genetic data or biometric data are processed in order to uniquely identify a person or where data concerning health or data concerning sex life and sexual orientation or criminal convictions and offences or related security measures are processed; where personal aspects are evaluated, in particular analysing and predicting aspects concerning performance at work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements, in order to create or use personal profiles; where personal data of vulnerable natural persons, in particular children, are processed; or where processing involves a large amount of personal data and affects a large number of data subjects.
Tveganje bi bilo treba oceniti na podlagi objektivne ocene, s katero bi ugotovili, ali dejanja obdelave podatkov pomenijo veliko tveganje.
The likelihood and severity of the risk should be determined by reference to the nature, scope, context and purposes of the processing.
Veliko tveganje pomeni znatno tveganje poseganja v pravice in svoboščine posameznikov, na katere se nanašajo osebni podatki.
Risk should be evaluated on the basis of an objective assessment, through which it is established whether data-processing operations involve a high risk.
Zaradi varstva pravic in svoboščin posameznikov v zvezi z obdelavo osebnih podatkov je treba sprejeti primerne tehnične in organizacijske ukrepe, s čimer se zagotovi izpolnitev zahtev iz te direktive.
A high risk is a particular risk of prejudice to the rights and freedoms of data subjects.
Izvajanje takih ukrepov ne bi smelo biti odvisno zgolj od gospodarskih vidikov.
The protection of the rights and freedoms of natural persons with regard to the processing of personal data requires that appropriate technical and organisational measures are taken, to ensure that the requirements of this Directive are met.
Da bi upravljavec lahko dokazal skladnost s to direktivo, bi moral sprejeti notranje politike in izvesti ukrepe, ki spoštujejo zlasti načeli vgrajenega in privzetega varstva podatkov.
The implementation of such measures should not depend solely on economic considerations.
Če je upravljavec izvedel oceno učinka v zvezi z varstvom podatkov v skladu s to direktivo, bi bilo treba rezultate te ocene upoštevati pri oblikovanju navedenih ukrepov in postopkov.
In order to be able to demonstrate compliance with this Directive, the controller should adopt internal policies and implement measures which adhere in particular to the principles of data protection by design and data protection by default.
Ti ukrepi bi med drugim lahko vključevali ukrep čim zgodnejše uporabe psevdonimizacije.
Where the controller has carried out a data protection impact assessment pursuant to this Directive, the results should be taken into account when developing those measures and procedures.
Uporaba psevdonimizacije za namene te direktive bi lahko služila kot orodje, ki bi lahko olajšalo zlasti prost pretok osebnih podatkov znotraj območja svobode, varnosti in pravice.
The measures could consist, inter alia, of the use of pseudonymisation, as early as possible.
Varstvo pravic in svoboščin posameznikov, na katere se nanašajo osebni podatki, pa tudi pristojnost in odgovornost upravljavcev in obdelovalcev, tudi v povezavi s spremljanjem in ukrepi nadzornih organov, zahtevajo jasno razdelitev odgovornosti iz te direktive, tudi kadar upravljavec namene in sredstva obdelave določi skupaj z drugimi upravljavci ali kadar je dejanje obdelave izvedeno v imenu upravljavca.
The use of pseudonymisation for the purposes of this Directive can serve as a tool that could facilitate, in particular, the free flow of personal data within the area of freedom, security and justice.
Obdelavo s strani obdelovalca bi moral urejati pravni akt, vključno s pogodbo, v kateri bi bile določene obveznosti obdelovalca do upravljavca, predvsem pa navedeno, da bi obdelovalec moral delovati samo po navodilih upravljavca.
The protection of the rights and freedoms of data subjects as well as the responsibility and liability of controllers and processors, also in relation to the monitoring by and measures of supervisory authorities, requires a clear attribution of the responsibilities set out in this Directive, including where a controller determines the purposes and means of the processing jointly with other controllers or where a processing operation is carried out on behalf of a controller.
Obdelovalec bi moral upoštevati načelo vgrajenega in privzetega varstva podatkov.
The carrying-out of processing by a processor should be governed by a legal act including a contract binding the processor to the controller and stipulating, in particular, that the processor should act only on instructions from the controller.
Za dokaz skladnosti s to direktivo bi moral upravljavec ali obdelovalec hraniti evidence o vseh vrstah dejavnosti obdelave osebnih podatkov, za katere je odgovoren.
The processor should take into account the principle of data protection by design and by default.
Vsak upravljavec in obdelovalec bi moral sodelovati z nadzornim organom in mu na zahtevo omogočiti dostop do teh evidenc, ki jih ima na voljo, da bi se lahko uporabile za spremljanje teh dejanj obdelave.
In order to demonstrate compliance with this Directive, the controller or processor should maintain records regarding all categories of processing activities under its responsibility.
Upravljavec ali obdelovalec, ki obdeluje osebne podatke v neavtomatiziranih sistemih obdelave, bi moral vzpostaviti učinkovite metode za dokazovanje zakonitosti obdelave, notranje spremljanje ter zagotavljanje neoporečnosti in varnosti podatkov, kot so dnevniki ali druge oblike evidentiranja.
Each controller and processor should be obliged to cooperate with the supervisory authority and make those records available to it on request, so that they might serve for monitoring those processing operations.
Dnevnike bi bilo treba hraniti vsaj za dejanja v avtomatiziranih sistemih obdelave, kot so zbiranje, predelava, vpogled, razkritje, vključno s prenosi, kombiniranje ali izbris.
The controller or the processor processing personal data in non-automated processing systems should have in place effective methods of demonstrating the lawfulness of the processing, of enabling self-monitoring and of ensuring data integrity and data security, such as logs or other forms of records.
Identifikacija osebe, ki je vpogledala v osebne podatke ali jih razkrila, bi morala biti zabeležena v dnevniku, na podlagi tega pa bi moralo biti možno utemeljiti dejanja obdelave.
Logs should be kept at least for operations in automated processing systems such as collection, alteration, consultation, disclosure including transfers, combination or erasure.
Dnevnike bi bilo treba uporabljati zgolj za preverjanje zakonitosti obdelave, notranje spremljanje ter zagotavljanje neoporečnosti in varnosti podatkov in kazenskih postopkov.
The identification of the person who consulted or disclosed personal data should be logged and from that identification it should be possible to establish the justification for the processing operations.
Notranje spremljanje vključuje tudi notranji disciplinski postopek pristojnih organov.
The logs should solely be used for the verification of the lawfulness of the processing, self-monitoring, for ensuring data integrity and data security and criminal proceedings.
Upravljavec bi moral opraviti oceno učinka v zvezi z varstvom podatkov, če je verjetno, da bodo dejanja obdelave povzročila znatno tveganje za pravice in svoboščine posameznikov, na katere se nanašajo osebni podatki, zaradi svoje narave, obsega ali namena, kar bi zlasti moralo vključevati ukrepe, zaščitne ukrepe in mehanizme, predvidene za zagotavljanje varstva osebnih podatkov in dokazovanje skladnosti s to direktivo.
Self-monitoring also includes internal disciplinary proceedings of competent authorities.
Ocene učinka bi morale zajemati ustrezne sisteme in dejanja obdelave, ne pa tudi posameznih primerov.
A data protection impact assessment should be carried out by the controller where the processing operations are likely to result in a high risk to the rights and freedoms of data subjects by virtue of their nature, scope or purposes, which should include, in particular, the measures, safeguards and mechanisms envisaged to ensure the protection of personal data and to demonstrate compliance with this Directive.
Upravljavec ali obdelovalec bi se moral v nekaterih primerih pred obdelavo posvetovati z nadzornim organom, da bi bilo zagotovljeno učinkovito varstvo pravic in svoboščin posameznikov, na katere se nanašajo osebni podatki.
Impact assessments should cover relevant systems and processes of processing operations, but not individual cases.
Za ohranitev varnosti in preprečitev obdelave, ki bi pomenila kršitev te direktive, bi moral upravljavec ali obdelovalec oceniti tveganje, povezano z obdelavo, in izvesti ukrepe za ublažitev tega tveganja, na primer šifriranje.
In order to ensure effective protection of the rights and freedoms of data subjects, the controller or processor should consult the supervisory authority, in certain cases, prior to the processing.
Takšni ukrepi bi morali zagotoviti ustrezno raven varnosti, vključno z zaupnostjo, in bi morali upoštevati najsodobnejše tehnologije, stroške izvajanja glede na tveganje in naravo osebnih podatkov, ki jih je treba varovati.
In order to maintain security and to prevent processing that infringes this Directive, the controller or processor should evaluate the risks inherent in the processing and should implement measures to mitigate those risks, such as encryption.
Pri oceni tveganj v zvezi z varstvom podatkov bi bilo treba pozornost posvetiti tveganjem, ki jih pomeni obdelava podatkov, kot so nenamerno ali nezakonito uničenje, izguba, sprememba ali nepooblaščeno razkritje ali dostop do osebnih podatkov, ki so poslani, shranjeni ali kako drugače obdelani, kar lahko zlasti povzroči fizično, premoženjsko ali nepremoženjsko škodo.
Such measures should ensure an appropriate level of security, including confidentiality and take into account the state of the art, the costs of implementation in relation to the risk and the nature of the personal data to be protected.
Upravljavec in obdelovalec bi morala zagotoviti, da obdelave osebnih podatkov ne izvajajo nepooblaščene osebe.
In assessing data security risks, consideration should be given to the risks that are presented by data processing, such as the accidental or unlawful destruction, loss, alteration or unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed, which may, in particular, lead to physical, material or non-material damage.
Kršitev varstva osebnih podatkov lahko, če se ne obravnava ustrezno in pravočasno, zadevnim posameznikom povzroči fizično, premoženjsko ali nepremoženjsko škodo, kot so izguba nadzora nad njihovimi osebnimi podatki ali omejitev njihovih pravic, diskriminacija, kraja ali zloraba identitete, finančna izguba, neodobrena reverzija psevdonimizacije, okrnitev ugleda, izguba zaupnosti osebnih podatkov, zaščitenih s poklicno skrivnostjo, ali katera koli druga znatna gospodarska ali socialna škoda.
The controller and processor should ensure that the processing of personal data is not carried out by unauthorised persons.
Zato bi moral upravljavec, takoj, ko se seznani s kršitvijo varstva osebnih podatkov, o njej uradno obvestiti pristojni nadzorni organ brez nepotrebnega odlašanja in po možnosti najpozneje v 72 urah po seznanitvi s kršitvijo, razen če lahko upravljavec v skladu z načelom odgovornosti dokaže, da ni verjetno, da bi kršitev varstva osebnih podatkov povzročila tveganje za pravice in svoboščine posameznikov.
A personal data breach may, if not addressed in an appropriate and timely manner, result in physical, material or non-material damage to natural persons such as loss of control over their personal data or limitation of their rights, discrimination, identity theft or fraud, financial loss, unauthorised reversal of pseudonymisation, damage to reputation, loss of confidentiality of personal data protected by professional secrecy or any other significant economic or social disadvantage to the natural person concerned.
Kadar ni mogoče uradno obvestiti v 72 urah, bi bilo treba uradnemu obvestilu priložiti razloge za zamudo, informacije pa se lahko zagotovijo postopoma in brez dodatnega nepotrebnega odlašanja.
Therefore, as soon as the controller becomes aware that a personal data breach has occurred, the controller should notify the personal data breach to the supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the controller is able to demonstrate, in accordance with the accountability principle, that the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.
Posameznike bi bilo treba brez nepotrebnega odlašanja obvestiti, kadar bi kršitev varstva osebnih podatkov lahko povzročila znatno tveganje za pravice in svoboščine posameznikov, da bi se ti lahko ustrezno zavarovali.
Where such notification cannot be achieved within 72 hours, the reasons for the delay should accompany the notification and information may be provided in phases without undue further delay.
Obvestitev bi morala vsebovati opis narave kršitve varstva osebnih podatkov in vključevati priporočila za zadevnega posameznika v zvezi z ublažitvijo morebitnih škodljivih učinkov.
Natural persons should be informed without undue delay where the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, in order to allow them to take the necessary precautions.
Posamezniki, na katere se nanašajo osebni podatki, bi morali biti obveščeni, kakor hitro je to razumno mogoče, v tesnem sodelovanju z nadzornim organom in ob upoštevanju smernic nadzornega organa ali drugih ustreznih organov.
The communication should describe the nature of the personal data breach and include recommendations for the natural person concerned to mitigate potential adverse effects.
Potreba po ublažitvi neposrednega tveganja nastanka škode bi na primer terjala takojšnjo obvestitev posameznikov, na katere se nanašajo osebni podatki, potreba po izvajanju ustreznih ukrepov zoper nadaljnje ali podobne kršitve varstva podatkov pa bi lahko upravičila daljši rok obvestitve.
Communication to data subjects should be made as soon as reasonably feasible, in close cooperation with the supervisory authority, and respecting guidance provided by it or other relevant authorities.
Kadar z odložitvijo ali omejitvijo obvestitve zadevnega posameznika o kršitvi varstva osebnih podatkov ni mogoče doseči preprečevanja oviranja uradnih ali zakonitih preiskav, poizvedb ali postopkov, izogibanja vplivu na preprečevanje, odkrivanje, preiskovanje ali pregon kaznivih dejanj ali izvrševanje kazenskih sankcij, zaščite javne varnosti in varnosti države ali zaščite pravic in svoboščin drugih, se ta obvestitev v izjemnih okoliščinah lahko opusti.
For example, the need to mitigate an immediate risk of damage would call for a prompt communication to data subjects, whereas the need to implement appropriate measures against continuing or similar data breaches may justify more time for the communication.
Upravljavec bi moral določiti osebo, ki bi mu pomagala pri spremljanju notranje skladnosti s predpisi, sprejetimi na podlagi te direktive, razen če se država članica odloči, da izvzame sodišča in druge neodvisne pravosodne organe, kadar delujejo kot sodni organ.
Where avoiding obstruction of official or legal inquiries, investigations or procedures, avoiding prejudice to the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties, protecting public security, protecting national security or protecting the rights and freedoms of others cannot be achieved by delaying or restricting the communication of a personal data breach to the natural person concerned, such communication could, in exceptional circumstances, be omitted.
Ta oseba je lahko član obstoječega osebja upravljavca, ki se je udeležilo posebnega usposabljanja o zakonodaji in praksah s področja varstva podatkov z namenom pridobiti strokovno znanje na tem področju.
The controller should designate a person who would assist it in monitoring internal compliance with the provisions adopted pursuant to this Directive, except where a Member State decides to exempt courts and other independent judicial authorities when acting in their judicial capacity.
Določiti bi bilo treba stopnjo potrebnega strokovnega znanja, zlasti glede na izvedeno obdelavo podatkov in varstvo, ki je potrebno pri osebnih podatkih, obdelanih s strani upravljavca.
That person could be a member of the existing staff of the controller who received special training in data protection law and practice in order to acquire expert knowledge in that field.
Ta oseba lahko svoje naloge opravlja v okviru krajšega ali polnega delovnega časa.
The necessary level of expert knowledge should be determined, in particular, according to the data processing carried out and the protection required for the personal data processed by the controller.
Več upravljavcev lahko ob upoštevanju svoje organizacijske strukture in velikosti, na primer v primeru skupnih virov v centralnih enotah, skupaj imenuje pooblaščeno osebo za varstvo podatkov.
His or her task could be carried out on a part-time or full-time basis.
Ta oseba je lahko prav tako imenovana na različne položaje v okviru strukture zadevnih upravljavcev.
A data protection officer may be appointed jointly by several controllers, taking into account their organisational structure and size, for example in the case of shared resources in central units.
Upravljavcu in zaposlenim, ki obdelujejo osebne podatke, bi morala pomagati tako, da bi jih obveščala in jim svetovala o izpolnjevanju njihovih obveznosti v zvezi z varstvom podatkov.
That person can also be appointed to different positions within the structure of the relevant controllers.
Takšnim pooblaščenim osebam za varstvo podatkov bi moralo biti omogočeno, da svoje dolžnosti in naloge opravljajo neodvisno in v skladu s pravom držav članic.
That person should help the controller and the employees processing personal data by informing and advising them on compliance with their relevant data protection obligations.
Države članice bi morale zagotoviti, da se prenos v tretjo državo ali mednarodno organizacijo izvede samo, če je potreben za preprečevanje, preiskovanje, odkrivanje ali pregon kaznivih dejanj ali izvrševanje kazenskih sankcij, vključno z varovanjem pred grožnjami javni varnosti in njihovim preprečevanjem, ter če je upravljavec v tretji državi ali mednarodni organizaciji organ, pristojen v smislu te direktive.
Such data protection officers should be in a position to perform their duties and tasks in an independent manner in accordance with Member State law.
Prenos bi smeli izvesti le pristojni organi, ki delujejo kot upravljavci, razen ko je obdelovalcem izrecno naročen prenos v imenu upravljavcev.
Member States should ensure that a transfer to a third country or to an international organisation takes place only if necessary for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security, and that the controller in the third country or international organisation is an authority competent within the meaning of this Directive.
Tak prenos se lahko izvede v primerih, v katerih je Komisija sklenila, da zadevna tretja država ali mednarodna organizacija zagotavlja ustrezno raven varstva, po zagotovitvi ustreznih zaščitnih ukrepov ali v posebnih primerih, v katerih se uporabljajo odstopanja.
A transfer should be carried out only by competent authorities acting as controllers, except where processors are explicitly instructed to transfer on behalf of controllers.
Kadar se osebni podatki prenašajo iz Unije upravljavcem, obdelovalcem ali drugim uporabnikom v tretjih državah ali mednarodnim organizacijam, raven varstva posameznikov, ki jo v Uniji zagotavlja ta direktiva, ne bi smela biti ogrožena, vključno v primeru nadaljnjih prenosov osebnih podatkov iz tretje države ali mednarodne organizacije upravljavcem ali obdelovalcem v isti ali drugi tretji državi ali mednarodni organizaciji.
Such a transfer may take place in cases where the Commission has decided that the third country or international organisation in question ensures an adequate level of protection, where appropriate safeguards have been provided, or where derogations for specific situations apply.
Kadar se osebni podatki posredujejo iz države članice v tretje države ali mednarodne organizacije, bi moral biti tak prenos načeloma možen šele po pridobitvi soglasja države članice, ki je posredovala podatke.