natgillin/translations-raw huggingface dataset:
Those measures shall be reviewed and updated where necessary.
Če so bili operativni osebni podatki na podlagi odstavkov 1, 2 in 3 popravljeni ali izbrisani ali je bila njihova obdelava omejena, EJT o tem uradno obvesti uporabnike, in jim sporoči, da morajo popraviti ali izbrisati operativne osebne podatke, za katere so odgovorni, ali omejiti njihovo obdelavo.
Where proportionate in relation to processing activities, the measures referred to in paragraph 1 shall include the implementation of appropriate data protection policies by the EPPO.
Člen 62
Article 64
Uveljavljanje pravic posameznika, na katerega se nanašajo osebni podatki, in preverjanje, ki ga izvede Evropski nadzornik za varstvo podatkov
Joint controllers
V primerih iz člena 58(3), člena 60(2) in člena 61(5) lahko posameznik, na katerega se nanašajo osebni podatki, svoje pravice uveljavlja tudi prek Evropskega nadzornika za varstvo podatkov.
Where the EPPO together with one or more controllers jointly determine the purposes and means of processing, they shall be joint controllers.
EJT obvesti posameznika, na katerega se nanašajo osebni podatki, da lahko svoje pravice uveljavlja prek Evropskega nadzornika za varstvo podatkov v skladu z odstavkom 1.
They shall, in a transparent manner, determine their respective responsibilities for compliance with their data protection obligations, in particular as regards the exercising of the rights of the data subject and their respective duties to provide the information, by means of an arrangement between them unless, and in so far as, the respective responsibilities of the controllers are determined by Union law or the law of a Member State of the European Union to which the controllers are subject.
Kadar posameznik, na katerega se nanašajo osebni podatki, uveljavlja pravico iz odstavka 1, ga Evropski nadzornik za varstvo podatkov obvesti vsaj o tem, da je izvedel vsa potrebna preverjanja oziroma opravil pregled.
The arrangement may designate a contact point for data subjects.
Evropski nadzornik za varstvo podatkov posameznika, na katerega se nanašajo osebni podatki, obvesti tudi o tem, da ima pravico do uveljavljanja pravnega sredstva na Sodišču proti odločitvi Evropskega nadzornika za varstvo podatkov.
The arrangement referred to in paragraph 1 shall duly reflect the respective roles and relationships of the joint controllers vis-à-vis the data subjects.
Člen 63
The essence of the arrangement shall be made available to the data subject.
Obveznosti EJT
Irrespective of the terms of the arrangement referred to in paragraph 1, the data subject may exercise his/her rights under this Regulation in respect, and against each, of the controllers.
EJT ob upoštevanju narave, obsega, okoliščin in namenov obdelave, pa tudi tveganj za pravice in svoboščine posameznikov, ki se razlikujejo po verjetnosti in resnosti, izvede ustrezne tehnične in organizacijske ukrepe, da zagotovi in je zmožno dokazati, da obdelava poteka v skladu s to uredbo.
Article 65
Ti ukrepi se pregledajo in dopolnijo, kjer je to potrebno.
Processor
Kadar je to sorazmerno glede na dejavnosti obdelave, ukrepi iz odstavka 1 vključujejo izvajanje ustreznih politik za varstvo podatkov s strani EJT.
Where processing is to be carried out on behalf of the EPPO, the EPPO shall use only processors providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of this Regulation and ensure the protection of the rights of the data subject.
Člen 64
The processor shall not engage another processor without prior specific or general written authorisation of the EPPO.
Skupni upravljavci
In the case of general written authorisation, the processor shall inform the EPPO of any intended changes concerning the addition or replacement of other processors, thereby giving the controller the opportunity to object to such changes.
Kadar EJT skupaj z enim ali več upravljavci določi namene in načine obdelave, gre za skupne upravljavce.
Processing by a processor shall be governed by a contract or other legal act under Union law, or the law of a Member State of the European Union, that is binding on the processor with regard to the EPPO and that sets out the subject matter and duration of the processing, the nature and purpose of the processing, the type of operational personal data and categories of data subjects and the obligations and rights of the EPPO.
Skupni upravljavci na pregleden način z medsebojnim dogovorom določijo dolžnosti vsakega od njih z namenom izpolnjevanja njihovih obveznosti varstva podatkov, zlasti v zvezi z uresničevanjem pravic posameznika, na katerega se nanašajo osebni podatki, in dolžnosti vsakega od njih glede zagotavljanja informacij, razen če in kolikor so dolžnosti vsakega od upravljavcev določene s pravom Unije ali pravom države članice Evropske unije, ki velja za upravljavce.
That contract or other legal act shall stipulate, in particular, that the processor:
Z dogovorom se lahko določi kontaktna točka za posameznike, na katere se nanašajo osebni podatki.
acts only on instructions from the controller;
Dogovor iz odstavka 1 ustrezno odraža vlogo vsakega od skupnih upravljavcev in njegovo razmerje do posameznikov, na katere se nanašajo osebni podatki.
ensures that persons authorised to process the operational personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
Vsebina dogovora se da na voljo posamezniku, na katerega se nanašajo osebni podatki.
assists the controller by any appropriate means to ensure compliance with the provisions on the data subject’s rights;
Posameznik, na katerega se nanašajo osebni podatki, lahko ne glede na pogoje dogovora iz odstavka 1 uresničuje svoje pravice v skladu s to uredbo glede vsakega od upravljavcev in proti vsakemu od njih.
at the choice of the EPPO, deletes or returns all the operational personal data to the EPPO after the end of the provision of services relating to processing, and deletes existing copies unless Union law or the law of a Member State of the European Union requires storage of the operational personal data;
Člen 65
makes available to the EPPO all information necessary to demonstrate compliance with the obligations laid down in this Article;
Obdelovalec
complies with the conditions referred to in paragraphs 2 and 3 for engaging another processor.
Kadar se obdelava izvaja v imenu EJT, to sodeluje zgolj z obdelovalci, ki zagotovijo zadostna jamstva za izvedbo ustreznih tehničnih in organizacijskih ukrepov na tak način, da obdelava izpolnjuje zahteve iz te uredbe in zagotavlja varstvo pravic posameznika, na katerega se nanašajo osebni podatki.
The contract or the other legal act referred to in paragraphs 3 shall be in writing, including in electronic form.
Obdelovalec ne zaposli drugega obdelovalca brez predhodnega posebnega ali splošnega pisnega dovoljenja EJT.
If a processor infringes this Regulation by determining the purposes and means of processing, the processor shall be considered to be a controller in respect of that processing.
V primeru splošnega pisnega dovoljenja obdelovalec EJT obvesti o vseh nameravanih spremembah glede vključitve dodatnih obdelovalcev ali njihove zamenjave, s čimer se upravljavcu omogoči, da nasprotuje tem spremembam.
Article 66
Obdelavo s strani obdelovalca ureja pogodba ali drug pravni akt v skladu s pravom Unije ali pravom države članice Evropske unije, ki določa obveznosti obdelovalca do EJT in v katerem so določeni vsebina in trajanje obdelave, narava in namen obdelave, vrsta osebnih podatkov, kategorije posameznikov, na katere se nanašajo operativni osebni podatki, ter obveznosti in pravice EJT.
Processing under the authority of the controller or processor
Ta pogodba ali drug pravni akt zlasti določa, da obdelovalec:
The processor and any person acting under the authority of the EPPO or of the processor, who has access to operational personal data, shall not process those data except on instructions from the EPPO, unless required to do so by Union law or the law of a Member State of the European Union.
deluje samo po navodilih upravljavca;
Article 67
zagotovi, da so osebe, ki so pooblaščene za obdelavo operativnih osebnih podatkov, zavezane k zaupnosti ali jih k zaupnosti zavezuje ustrezen zakon;
Data protection by design and by default
pomaga upravljavcu na kakršen koli ustrezen način, da se zagotovi skladnost z določbami o pravicah posameznika, na katerega se nanašajo osebni podatki;
The EPPO shall, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for rights and freedoms of natural persons posed by the processing, both at the time of the determination of the means for processing and at the time of the processing itself, implement appropriate technical and organisational measures, such as pseudonymisation, which are designed to implement data protection principles, such as data minimisation, in an effective manner and to integrate the necessary safeguards into the processing, in order to meet the requirements of this Regulation and protect the rights of the data subjects.
v skladu z odločitvijo EJT izbriše ali vrne vse operativne osebne podatke EJT po zaključku storitev v zvezi z obdelavo ter uniči obstoječe kopije, razen če pravo Unije ali pravo države članice Evropske unije predpisuje hrambo operativnih osebnih podatkov;
The EPPO shall implement appropriate technical and organisational measures ensuring that, by default, only operational personal data which are adequate, relevant and not excessive in relation to the purpose of the processing are processed.
da EJT na voljo vse informacije, potrebne za dokazovanje izpolnjevanja obveznosti iz tega člena;
That obligation applies to the amount of operational personal data collected, the extent of their processing, the period of their storage and their accessibility.
izpolnjuje pogoje iz odstavkov 2 in 3 za vključitev drugega obdelovalca.
In particular, such measures shall ensure that by default operational personal data are not made accessible without the individual’s intervention to an indefinite number of natural persons.
Pogodba ali drug pravni akt iz odstavka 3 je v pisni obliki, vključno z elektronsko obliko.
Article 68
Če obdelovalec krši to uredbo s tem, ko določi namene in sredstva obdelave, se šteje za upravljavca v zvezi s to obdelavo.
Records of categories of processing activities
Člen 66
The EPPO shall maintain a record of all categories of processing activities under its responsibility.
Obdelava pod vodstvom upravljavca ali obdelovalca
That record shall contain all of the following information:
Obdelovalec in katera koli oseba, ki deluje pod vodstvom EJT ali obdelovalca in ima dostop do operativnih osebnih podatkov, teh podatkov ne sme obdelati brez navodil EJT, razen če to od njega zahteva pravo Unije ali pravo države članice Evropske unije.
its contact details and the name and the contact details of the data protection officer;
Člen 67
the purposes of the processing;
Vgrajeno in privzeto varstvo podatkov
a description of the categories of data subjects and of the categories of operational personal data;
EJT ob upoštevanju najnovejšega tehnološkega razvoja in stroškov izvajanja ter narave, obsega, okoliščin in namenov obdelave, pa tudi tveganj za pravice in svoboščine posameznikov, ki se razlikujejo po verjetnosti in resnosti, tako v času določanja sredstev obdelave kot v času same obdelave, izvaja ustrezne tehnične in organizacijske ukrepe, na primer psevdonimizacijo, ki so oblikovani za učinkovito izvajanje načel varstva podatkov, kot je načelo najmanjšega obsega podatkov, ter v obdelavo vključi potrebne zaščitne ukrepe, da se izpolnijo zahteve te uredbe in zaščitijo pravice posameznikov, na katere se nanašajo osebni podatki.
the categories of recipients to whom the operational personal data have been or will be disclosed including recipients in third countries or international organisations;
EJT izvede ustrezne tehnične in organizacijske ukrepe, ki zagotavljajo, da se privzeto obdelujejo samo operativni osebni podatki, ki so ustrezni, relevantni in ne pretirani glede na namene, za katere se obdelujejo.
where applicable, transfers of operational personal data to a third country or an international organisation, including the identification of that third country or international organisation;
Ta obveznost velja za količino zbranih operativnih osebnih podatkov, obseg njihove obdelave, obdobje njihove hrambe in njihovo dostopnost.
where possible, the envisaged time limits for erasure of the different categories of data;
S takšnimi ukrepi se zagotovi zlasti, da operativni osebni podatki niso samodejno dostopni nedoločenemu številu fizičnih oseb brez posredovanja zadevnega posameznika.
where possible, a general description of the technical and organisational security measures referred to in Article 73.
Člen 68
The records referred to in paragraph 1 shall be in writing, including in electronic form.
Evidence vrst dejavnosti obdelave
The EPPO shall make the record available to the European Data Protection Supervisor on request.
EJT vodi evidenco vseh vrst dejavnosti obdelave, za katere je odgovorno.
Article 69
Ta evidenca vsebuje vse naslednje informacije:
Logging in respect of automated processing
njegove kontaktne podatke ter ime in kontaktne podatke pooblaščene osebe za varstvo podatkov;
The EPPO shall keep logs of any of the following processing operations in automated processing systems: collection, alteration, consultation, disclosure including transfers, combination and erasure of operational personal data used for operational purposes.
namene obdelave;
The logs of consultation and disclosure shall make it possible to establish the justification for, and the date and time of, such operations, the identification of the person who consulted or disclosed operational personal data, and, as far as possible, the identity of the recipients of such operational personal data.
opis kategorij posameznikov, na katere se nanašajo osebni podatki, in vrst operativnih osebnih podatkov;
The logs shall be used solely for verification of the lawfulness of processing, self-monitoring, ensuring the integrity and security of the operational personal data, and for criminal proceedings.
kategorije uporabnikov, ki so jim bili ali jim bodo razkriti operativni osebni podatki, vključno z uporabniki v tretjih državah ali mednarodnih organizacijah;
Such logs shall be deleted after 3 years, unless they are required for on-going control.
po potrebi prenose operativnih osebnih podatkov v tretjo državo ali mednarodno organizacijo, vključno z identifikacijo te tretje države ali mednarodne organizacije;
The EPPO shall make the logs available to the European Data Protection Supervisor on request.
kadar je mogoče, predvidene roke za izbris različnih vrst podatkov;
Article 70
kadar je mogoče, splošni opis tehničnih in organizacijskih varnostnih ukrepov iz člena 73.
Cooperation with the European Data Protection Supervisor
Evidence iz odstavka 1 so v pisni obliki, kar vključuje elektronsko obliko.
The EPPO shall, on request, cooperate with the European Data Protection Supervisor in the performance of its tasks.
EJT na zahtevo omogoči Evropskemu nadzorniku za varstvo podatkov dostop do evidenc.
Article 71
Člen 69
Data protection impact assessment
Vodenje dnevnikov v zvezi z avtomatizirano obdelavo
Where a type of processing, in particular, using new technologies, and taking into account the nature, scope, context and purposes of the processing is likely to result in a high risk to the rights and freedoms of natural persons, the EPPO shall carry out, prior to the processing, an assessment of the impact of the envisaged processing operations on the protection of operational personal data.
EJT vodi dnevnike o vseh naslednjih dejanj obdelave v avtomatiziranih sistemih obdelave: zbiranje, spreminjanje, vpogled, razkritje, vključno s prenosi, združevanje in izbris operativnih osebnih podatkov, uporabljenih za operativne namene.
The assessment referred to in paragraph 1 shall contain at least a general description of the envisaged processing operations, an assessment of the risks to the rights and freedoms of data subjects, the measures envisaged to address those risks, safeguards, security measures and mechanisms to ensure the protection of operational personal data and to demonstrate compliance with this Regulation, taking into account the rights and legitimate interests of the data subjects and other persons concerned.
Dnevniki vpogledov in razkritij omogočajo, da se take dejavnosti utemeljijo, ter opredeli datum in čas takih dejavnosti ter identificirajo osebe, ki so imele vpogled v operativne osebne podatke ali so operativne osebne podatke razkrile, ter da se, kolikor je to mogoče, identificirajo uporabniki takih operativnih osebnih podatkov.
Article 72
Dnevniki se uporabljajo zgolj za preverjanje zakonitosti obdelave, notranje spremljanje, zagotavljanje neoporečnosti in varnosti operativnih osebnih podatkov ter v kazenskih postopkih.
Prior consultation of the European Data Protection Supervisor
Taki dnevniki se izbrišejo po treh letih, razen če so potrebni za tekoči nadzor.
The EPPO shall consult the European Data Protection Supervisor prior to processing which will form part of a new filing system to be created, where:
EJT na zahtevo omogoči Evropskemu nadzorniku za varstvo podatkov dostop do dnevnikov.
a data protection impact assessment as provided for in Article 71 indicates that the processing would result in a high risk in the absence of measures taken by the EPPO to mitigate the risk; or
Člen 70
the type of processing, in particular, where using new technologies, mechanisms or procedures, involves a high risk to the rights and freedoms of data subjects.
Sodelovanje z Evropskim nadzornikom za varstvo podatkov
The European Data Protection Supervisor may establish a list of the processing operations which are subject to prior consultation pursuant to paragraph 1.
EJT na zahtevo sodeluje z Evropskim nadzornikom za varstvo podatkov pri izvajanju njegovih nalog.
The EPPO shall provide the European Data Protection Supervisor with the data protection impact assessment pursuant to Article 71 and, on request, with any other information to allow the European Data Protection Supervisor to make an assessment of the compliance of the processing and in particular of the risks for the protection of operational personal data of the data subject and of the related safeguards.
Člen 71
Where the European Data Protection Supervisor is of the opinion that the intended processing referred to in paragraph 1 of this Article would infringe this Regulation, in particular where the EPPO has insufficiently identified or mitigated the risk, the European Data Protection Supervisor shall provide, within a period of up to 6 weeks of receipt of the request for consultation, written advice to the EPPO according to its powers in accordance with Article 85.
Ocena učinka v zvezi z varstvom podatkov
That period may be extended by a month, taking into account the complexity of the intended processing.
Kadar bi lahko vrsta obdelave, zlasti z uporabo novih tehnologij, ob upoštevanju narave, obsega, okoliščin in namenov obdelave povzročila veliko tveganje za pravice in svoboščine posameznikov, EJT pred obdelavo opravi oceno učinka predvidenih dejanj obdelave na varstvo operativnih osebnih podatkov.
The European Data Protection Supervisor shall inform the EPPO of any such extension within 1 month of receipt of the request for consultation, together with the reasons for the delay.
Ocena iz odstavka 1 obsega vsaj splošni opis predvidenih dejanj obdelave, oceno tveganja za pravice in svoboščine posameznikov, na katere se nanašajo osebni podatki, ukrepe, namenjene obvladovanju teh tveganj, zaščitne ukrepe, varnostne ukrepe ter mehanizme za zagotavljanje varstva operativnih osebnih podatkov in za dokazovanje skladnosti s to uredbo, pri čemer se upoštevajo pravice in zakoniti interesi posameznikov, na katere se nanašajo osebni podatki, ter drugih zadevnih oseb.
Article 73
Člen 72
Security of processing of operational personal data
Predhodno posvetovanje z Evropskim nadzornikom za varstvo podatkov
The EPPO shall, taking into account the state of the art, costs of implementation and the nature, scope, context and purposes of the processing as well as risk of varying likelihood and severity for the rights and freedoms of natural persons, implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in particular as regards the processing of special categories of operational personal data referred to in Article 55.
EJT se pred obdelavo osebnih podatkov, ki bodo del nove zbirke, posvetuje z Evropskim nadzornikom za varstvo podatkov, kadar:
In respect of automated processing, the EPPO shall, following an evaluation of the risks, implement measures designed to:
ocena učinka v zvezi z varstvom podatkov iz člena 71 pokaže, da bi obdelava povzročila veliko tveganje, če EJT ne sprejme ukrepov za ublažitev tveganja, ali
deny unauthorised persons access to data processing equipment used for processing (equipment access control);
vrsta obdelave, zlasti v primeru uporabe novih tehnologij, mehanizmov ali postopkov, pomeni veliko tveganje za pravice in svoboščine posameznikov, na katere se nanašajo osebni podatki.
prevent the unauthorised reading, copying, modification or removal of data media (data media control);
2.
prevent the unauthorised input of data and the unauthorised inspection, modification or deletion of stored operational personal data (storage control);
Evropski nadzornik za varstvo podatkov lahko pripravi seznam dejanj obdelave, za katere je treba v skladu z odstavkom 1 opraviti predhodno posvetovanje.
prevent the use of automated processing systems by unauthorised persons using data communication equipment (user control);
EJT Evropskemu nadzorniku za varstvo podatkov predloži oceno učinka v zvezi z varstvom podatkov v skladu s členom 71 in na zahtevo tudi druge informacije, ki bodo Evropskemu nadzorniku za varstvo podatkov omogočile, da oceni skladnost obdelave in zlasti tveganja za varstvo operativnih osebnih podatkov posameznika, na katerega se nanašajo operativni osebni podatki, ter s tem povezane zaščitne ukrepe.
ensure that persons authorised to use an automated processing system have access only to the operational personal data covered by their access authorisation (data access control);
Kadar Evropski nadzornik za varstvo podatkov meni, da bi predvidena obdelava iz odstavka 1 tega člena kršila to uredbo, zlasti kadar EJT ni zadostno opredelilo ali ublažilo tveganja, Evropski nadzornik za varstvo podatkov v roku do šestih tednov po prejemu zahteve za posvetovanje pisno svetuje EJT v skladu s svojimi pooblastili iz člena 85.
ensure that it is possible to verify and establish the bodies to which operational personal data have been or may be transmitted or made available using data communication (communication control);
Ta rok se lahko ob upoštevanju zahtevnosti predvidene obdelave podaljša za en mesec.
ensure that it is subsequently possible to verify and establish which operational personal data have been input into automated data processing systems, and when and by whom the data were input (input control);
Evropski nadzornik za varstvo podatkov v enem mesecu po prejemu zahteve za posvetovanje o vsakem takem podaljšanju obvesti EJT ter navede tudi razloge za zamudo.
prevent unauthorised reading, copying, modification or deletion of operational personal data during transfers of operational personal data or during transportation of data media (transport control);
Člen 73
ensure that installed systems may, in the case of interruption, be restored (recovery);
Varnost obdelave operativnih osebnih podatkov