Information on the Processing of Personal Data in Connection with Video Surveillance

This document provides, in accordance with the General Data Protection Regulation (GDPR), a notice to individuals regarding the processing of personal data in connection with video surveillance at the Human Rights Ombudsman of the Republic of Slovenia.

1. Identity and Contact Details of the Controller

Name: Human Rights Ombudsman of the Republic of Slovenia (the Ombudsman)
Address: Dunajska cesta 56, 1000 Ljubljana, Slovenia
Telephone: +386 1 475 00 50
Email: info@varuh-rs.si

2. Contact Details of the Data Protection Officer (DPO)

Name: Andreja Mrak, Institute for Organizational Solutions
Email: dpo@varuh-rs.si

3. Purposes of Personal Data Processing

The processing of personal data is necessary for the performance of the Ombudsman’s lawful powers, duties, and obligations:

• to protect property, life, or the physical integrity of individuals and maintain order in the Ombudsman’s premises,

• to ensure control over entry into and exit from the Ombudsman’s premises.

4. Legal Basis for Personal Data Processing

The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, as per Article 6(1)(e) of the GDPR:

• protection of persons and property under Articles 77 and 78 of the Personal Data Protection Act (ZVOP-2),

• monitoring of access to and from the Ombudsman’s premises under Article 85 of ZVOP-2.

5. Statutory or Contractual Requirement and Consequences of Non-Provision

Providing personal data is not a statutory or contractual requirement. However, entering or accessing the Ombudsman’s protected premises is not possible without being subject to video surveillance.

6. Recipients of Personal Data

There are no external recipients. Personal data may exceptionally be disclosed to authorized technical support providers or to legally authorized recipients such as the police, courts, public prosecutors, or inspection bodies.

7. Transfer of Personal Data to a Third Country or International Organization

Personal data are not transferred to third countries or international organizations.

8. Existence of Automated Decision-Making or Profiling

Automated decision-making or profiling is not carried out.

9. Unusual Further Processing

Unusual further processing, such as live monitoring or audio intervention during live monitoring, is not carried out.

10. Retention Period of Personal Data

Video surveillance recordings are generally retained for 30 days or until the completion of legal proceedings.

11. Rights of the Data Subject

All individuals whose personal data are collected and processed by the Ombudsman have the following rights:

• right of access to personal data,

• right to rectification of inaccurate or incomplete data,

• right to erasure of personal data,

• right to restriction of processing,

• right to data portability,

• right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.

An individual may request from the Ombudsman access to, rectification, or erasure of personal data, restriction of processing, objection to processing, and data portability. Requests are handled in accordance with the GDPR.

For questions or complaints, you may contact us directly at:
dpo@varuh-rs.si or info@varuh-rs.si.

12. Consent and the Right to Withdraw Consent

Processing is not based on the data subject’s consent.

13. Right to Lodge a Complaint with a Supervisory Authority

Complaints may be lodged with the supervisory authority:
Information Commissioner of the Republic of Slovenia
Dunajska cesta 22, 1000 Ljubljana
Tel.: +386 1 230 97 30
Email: gp.ip@ip-rs.si

14. Further Questions

Questions, comments, and requests regarding the protection of your personal data are welcome. Please address them to:
dpo@varuh-rs.si or info@varuh-rs.si.