Notice of the Ministry of Foreign and European Affairs regarding the processing of personal data
Video surveillance at the Ministry of Foreign and European Affairs of the Republic of Slovenia and at the representations of the Republic of Slovenia abroad
Notification to individuals under article 13 of the general data protection regulation concerning the processing of personal data.
Personal database controller: Ministry of Foreign and European Affairs, Prešernova cesta 25, 1000 Ljubljana, phone: +386 1 478 2341, e-mail: gp.mzz@gov.si.
Contact details of the personal data protection officer: e-mail: dpo.mzez@gov.si.
Information on the right to lodge a complaint with the supervisory authority: Complaints can be lodged with the Information Commissioner of the Republic of Slovenia (address: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, e-mail: gp.ip@ip-rs.si, phone: +386 1 230 9730)
Purpose of personal data processing: Video surveillance of accesses to the premises of the Ministry of Foreign and European Affairs and the representations of the Republic of Slovenia abroad is carried out in order to ensure the security of people and property.
Legal basis for processing personal data: Article 6(1)(e) of the General Data Protection Regulation in conjunction with Articles 76, 77 and 80 of the Personal Data Protection Act (Official Gazette of the Republic of Slovenia No. 163/22).
Users of personal data: Contracted security service. In the event of a security incident or suspected criminal offence, CCTV footage may be handed over to the competent law enforcement authorities.
Information on the transfer of personal data to a third country or international organisation:
To contracted security or reception services at the representations of the Republic of Slovenia in third countries on the basis of:
- an adequacy decision pursuant to Article 45 of the General Data Protection Regulation in Argentina, Canada, Israel, Japan, the Republic of Korea, Switzerland, the United Kingdom and the United States of America (in the latter case only if the company participates in the EU-US Data Privacy Framework), and
- standard data protection clauses adopted by the Commission on 4 June 2021 pursuant to Article 46 of the General Data Protection Regulation in Albania, Algeria, Australia, Bosnia and Herzegovina, Brazil, Montenegro, Egypt, Ethiopia, the Philippines, India, Iran, China, Kosovo, the Russian Federation, North Macedonia, Serbia, Turkey, Ukraine, the United Arab Emirates and Palestine.
To law enforcement authorities in third countries by representations of the Republic of Slovenia on the basis of:
- an adequacy decision pursuant to Article 45 of the General Data Protection Regulation in Argentina, Israel, Japan, the Republic of Korea, Switzerland and the United Kingdom, and
- necessity for the establishment, exercise or defence of legal claims pursuant to Article 49(1)(e) of the General Data Protection Regulation in Albania, Algeria, Australia, Bosnia and Herzegovina, Brazil, Canada, Montenegro, Egypt, Ethiopia, the Philippines, India, Iran, China, Kosovo, the Russian Federation, North Macedonia, Serbia, Turkey, Ukraine, the United Arab Emirates, Palestine and the United States of America
Personal data storage period: Up to 30 days.
Information on the specific effects of the processing of the personal data, in particular further processing: No specific effects of the processing.
Information on unusual further processing of personal data: No unusual further processing.
Information on the data subject's rights regarding access to, rectification of, erasure of, restriction of processing of, object to and portability of personal data: In accordance with the provisions of the General Data Protection Regulation, the data subject has the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability.
Information on whether the provision of personal data is a legal or contractual obligation: The provision of personal data is not a legal or contractual obligation of the data subject.
Information on whether the individual is required to provide personal data and the possible consequences of not providing it: It is not possible to enter the premises of the Ministry of Foreign and European Affairs or the representations of the Republic of Slovenia abroad without being subject to video surveillance.
Information on the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject: Automated decision-making and/or profiling is not carried out.