Informacijski pooblaščenec Republika Slovenija
dekorativna slika

About the site

+ -

Pursuant to provisions of the Slovenian Copyright and Related Rights Act, the official legislative, administrative and judicial texts are not copyrighted. Consequently, the documents published on the Information Commissioner's site can be reproduced, publicly disclosed, distributed, leased, or transformed. However, in case of use of the freely available published information, the “Information Commissioner” should be stated as source.

The Information Commissioner shall try to ensure that the information published on their site is accurate and up to date, but they shall assume no liability for its accuracy, while the users use all published content at their own risk. The Information Commissioner, nor any other legal entity or natural person involved in the creation and production of this site, does not assume any liability for damage incurred by access to the contents of this site, by the use or inability to use the information published on the site, or by any errors or omissions therein.

Information about the site administrator

Site administrator's identity and contact information

Information Commissioner

Dunajska 22

1000 Ljubljana

Phone: +386 (0)1 230 97 30

Fax: +386 (0)1 230 97 78

Email: gp.ip(at)

Data Protection Officer's contact information

The purpose of the processing of personal data and legal grounds for processing.

(a) Site visits

What: Upon each visit of the Information Commissioner's site the web server automatically stores web server log files (e.g. IP number – the number used to identify a specific computer or other device online). The worldwide web operates by recording specific information about site visits (e.g. IP number, browser version, time of visit, etc.) on the web server hosting the site. The Information Commissioner does not process the collected information separately, nor does it connect this information to any other data. You can find more information about the measures with respect to the operation and maintenance of the Information Commissioner's information environment here.

Why: The aim of these procedures is to ensure network and information security, i.e. to enable the detection and prevention of unauthorised access that could impair the accessibility, integrity and confidentiality of the stored or transferred personal data, as well as the security of associated services, which are available on these networks and systems.

Legal grounds: The processing of this information is required for the provision of the Information Commissioner’s public service.

Duration: The data is stored for a period of 30 days after the site visit.

(b) Subscribing to the e-newsletter

What: When you subscribe to the online newsletter, besides your IP number the Information Commissioner also processes your email address that you enter into the online form, as well as the date and time of your subscription.

Why: The Information Commissioner shall process this information solely to send you news on the selected topic(s). 

Duration: The information about your email is stored until you unsubscribe from the e-newsletter. You can unsubscribe from the e-newsletter anytime by clicking the relevant link in the received email, or by unsubscribing from the e-newsletter here.

Legal grounds: Personal data (email address) is processed pursuant to a valid data subject’s consent (Article 6(a) of GDPR). When completing the e-newsletter subscription form, please check the relevant checkbox to state your agreement with the Information Commissioner’s use of your email to send you news on the selected topic(s), and the relevant checkbox to confirm that you have been informed you can withdraw your consent anytime by clicking the relevant link in the received email, or by unsubscribing from the e-newsletter here.

If you fail to provide your consent, the Information Commissioner will not send any notifications to, nor collect or process your email address. The Information Commissioner’s e-newsletter subscription system is based on prior email approval (i.e. opt-in), meaning that emails are sent only to persons who have given their explicit consent to receive emails.

(c) Reporting violations, comments and questions 

What: On the Information Commissioner’s site users can also use an online form to report a violation of legislation in the field of personal data protection, to provide comments, or to ask questions. In this case you need to complete the “Your message” field and – in order to prevent automated submission of spam mail – the “Copy two words” field. All other information is not mandatory; however, you can also add your name, surname and email address.

Why: The Information Commissioner needs your email address to answer your questions, respond to your comment, or notify you on the findings in connection with your report. The sender can also add their name and surname, although this information is not mandatory.

Legal grounds: The information you enter into the online form will be processed by the Information Commissioner only if this is urgently required for the fulfilment of their legal powers, tasks and obligations (Article 6(e) of GDPR), e.g. processing of violation reports, questions, and comments, their resolution and storage (archiving).

Duration: Length of the retention period depends on the type of procedure and the legal basis regulating operations and storage of documents and archives.

Users of personal data

Contractual processor responsible for the maintenance and hosting of the Information Commissioner's site.

Transfer of personal data to a third country or international organisations

Personal data shall not be transferred to third countries or international organisations.

Personal data retention period, or – when the retention period is not specified – the criteria used for determining the retention period

Listed above for different types of information.

The right to request access to, revision or deletion, or restriction of processing of data subject’s personal data from the data controller, or the right to object to personal data processing or portability of such data

The data subject may request access to, revision or deletion of or a restriction processing of all related personal data, or object to personal data processing and the right to transfer data. Data subject’s request shall be examined pursuant to provisions of the GDPR.

When the processing of data is based on Articles 6(1)(a) or 9(2)(a) of GDPR, the right to withdraw consent at any time, without affecting the lawfulness of prior processing performed on pursuant to the consent until its withdrawal

Information regarding the withdrawal of consent when subscribing to the e-newsletter is provided above.

The right to file a complaint with the supervisory body

Each user of the Information Commissioner’s site can use the online form to report a violation in the field of personal data protection.

Is the provision of personal data a statutory or contractual obligation, or an obligation required for the conclusion of an agreement; does the person need to provide personal data, and what are the consequences if they fail to do so

Each individual is completely free to decide whether to subscribe to the e-newsletter.

When reporting violations, or when submitting comments or questions, the individual is not required to provide any personal data. However, if the sender fails to provide contact information the Information Commissioner will not be able to contact them.

Personal data of site visitors are transferred to the site administrator due to the operation of the Internet.

Automated decision-making, including profiling under Articles 22(1) and (4) of GDPR, and the underlying reasoning, as well as the significance and foreseen consequences of such processing for the data subject

Automated decision-making or profiling is not performed.


What are cookies?

Cookies are small text files downloaded to your computer or mobile device by the sites you visit. Cookies have different roles. Sometimes they help the site remember your settings (e.g. language, font size, as well as other settings which you set on your computer for our site), so you do not have to re-enter them each time you visit the site. This way the site can remember your preferences, information about a cast vote in the online survey, or merely the fact that you have already logged in. Some cookies are required for the site’s operation (e.g. log-in cookie on shopping basket cookie), some aim to improve the user experience (e.g. storing user preferences), while others are used to monitor the site visits, thus helping the site administrator to continuously improve both the site and user experience. Some cookies allow tracking of users over several sites.

You can find more information about cookies in our Cookies FAQ (in Slovene):

Cookie management

Most web browsers automatically accept cookies. You can change web browser’s operation in its settings, so that the computer rejects cookies or displays a warning prior to storing a cookie. In your web browser you can also completely prevent installation of cookies for all visited websites. Furthermore, you can also delete all cookies stored on your computer.

Which cookies do we use?

Our site is hosted on the server infrastructure of our contractual processor with registered office in Slovenia and does not use cookies.


Personal data protection notification

I. When will the Information Commissioner contact me?

The Information Commissioner will contact you only in the following two cases:

- If you subscribe to the e-newsletter;

- If you submit a report, question or comments, and provide your contact information, the Information Commissioner will inform you on the findings regarding your report and/or to respond to your question. The Information Commissioner will also contact you, if this is needed to clarify the facts of a report (however, only if you choose to provide your contact information).

II. Will the Information Commissioner submit my data to third parties?

The Information Commissioner shall not submit your personal data, collected during your visits of the site or your e-newsletter subscription to third parties, unless stipulated otherwise by the law. Furthermore, the Information Commissioner will not submit your personal data acquired from your report, question or comment to third parties, unless stipulated otherwise by the law.

III. How can I find out which personal data of mine is being processed by the Information Commissioner? 

Upon your request and pursuant to applicable law regarding your personal data, the Information Commissioner will enable you to view, transcribe, copy or print your personal data, and provide you with a list of users who received your personal data, including when, on what grounds and for what purpose the data was submitted. Moreover, upon your request and pursuant to applicable legislation, the Information Commissioner will also provide you with other information regarding your collected personal data. In order to acquire confirmation whether data subject’s personal data is still being processed, as well as any other information, you can submit your request to:

IV. Security of collected data

Personal data security is ensured in accordance with internal rules and regulations of the Information Commissioner, available on:

V. Conclusion 

The Information Commissioner undertakes to safeguard the confidentiality of site users’ personal data. The collected information will be used solely for the purposes that they were submitted for by the site users, and within the statutory powers of the Information Commissioner.

Personal data and contact information will not be used for any other purposes, nor shall they be disclosed to third parties without explicit consent of the site user, unless stipulated otherwise by the law. We will do all in our power to protect your personal data from all and any violations or abuse.

Please send any questions with respect to the protection of your personal data when using this site to:

VII. Amendments of the Privacy Notice

The notification was last updated in July 2019