Appendix 1: NOTIFICATION TO NATURAL PERSONS UNDER ARTICLES 13 AND 14 OF THE GENERAL DATA PROTECTION REGULATION (GDPR) REGARDING THE PROCESSING OF PERSONAL DATA
related to personal data filing systems:
Personal data filing systems related to video surveillance
Datum der Mitteilung: 23.05.2018
Personal data controller:
Controller’s identity and contact details
Name des Verantwortlichen:
PAPIRNICA VEVČE D.O.O.
Controller’s address:
Papirniška pot 25, 1261 Ljubljana – Dobrunje
Controller’s email address:
Controller’s telephone number:
Controller’s email address for the exercise of the rights of the natural person:
that has a designated Data Protection Officer (DPO):
Data Protection Officer’s contact details
DPO’s name:
Urška Kralj
DPO’s email address:
processes and protects personal data in accordance with the Personal Data Protection Act (Zakon o varstvu osebnih podatkov – ZVOP-2) (Official Gazette of the Republic of Slovenia 163/2022) and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119 4.5.2016, p. 1-88).
You can find out more about the processing of personal data on the following website:
and for further information you can also contact the controller’s Data Protection Officer, Ms Urška Kralj.
The purposes for which personal data are processed
Video surveillance is carried out in accordance with ZVOP-2, specifically under:
- Article 76 – General provisions on video surveillance and protection of personal data
AND - Article 77 – Video surveillance of access to official work and office premises
– for the safety of people or property;
– to ensure control of entry into or exit from these premises;
– if the nature of the work poses a potential risk to employees. - Article 78 – Video surveillance within workspaces
– as it is urgently necessary for the safety of people or property and cannot be achieved by less intrusive means;
– as it is urgently necessary for the protection of classified information or business secrets and cannot be achieved by less intrusive means.
ADDITIONAL INFORMATION RELATED TO POINTS 3 AND 5 OF ARTICLE 76(4) OF ZVOP-2:
76(4)(3)
Information on the specific effects of the processing, in particular further processing:
NO further processing
76(4)(5)
Unusual further processing, such as transfers to third country entities, live monitoring, possibility of audio intervention in case of live monitoring: NO unusual further processing. Live monitoring is carried out by authorised persons (security guards) of the contracted company Sintal d.d.
The categories of personal data concerned
Personal data:
Source:
Legal requirement:
Contractual requirement:
Consequences if the natural person does not provide personal data:
Footage of the natural person (picture), location, date and time of the footage, date and time of entry into and exit from the official office premises.
☒ Natural person
☐ Other:
☐ Yes
☒ No
☒ No
☐ Yes
☒ No
☒ No
The natural person provides the data by being present in the areas where video surveillance is carried out. Video surveillance is otherwise carried out on the basis of ZVOP-2.
Legal basis for processing of personal data
6(1)(c)
Processing is necessary for compliance with a legal obligation to which the controller is subject
Explanation:
Personal Data Protection Act (Official Gazette of Republic of Slovenia, No. 163/22):
• Article 76 – General provisions on video surveillance and protection of personal data;
AND
• Article 77 – Video surveillance of access to official work and office premises;
• Article 78 – Video surveillance within workspaces.
• Article 76 – General provisions on video surveillance and protection of personal data;
AND
• Article 77 – Video surveillance of access to official work and office premises;
• Article 78 – Video surveillance within workspaces.
The period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period
Video surveillance footage is stored for 90 days, and processing logs are stored for 2 years after the end of the year in which they were created.
The recipients or categories of recipients of the personal data, if any
Recipient/category of recipient:
Role of recipient:
Sintal d.d.
Processor
State authorities and other competent authorities by law
Supervisory authority
Information on the transfer of personal data to a third country or an international organisation
Personal data is not transferred to third countries or international organisations.
Information on the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject
We do not carry out automated decision-making or profiling.
Information on the right to lodge a complaint with a supervisory authority:
You can lodge a complaint with the Information Commissioner (address: Dunajska 22, 1000 Ljubljana, email address: gp.ip@ip-rs.si, telephon: 01 230 97 30, website: www.ip-rs.si).
