DPO registration

Opozorilo: Mnenje je bilo izdano na podlagi določb Zakona o varstvu osebnih podatkov (ZVOP-1, Uradni list RS, št. 94/07 - uradno prečiščeno besedilo), ki je z dnem 26. 1. 2023 prenehal veljati in ga je nadomestil nov Zakon o varstvu osebnih podatkov (ZVOP-2, Uradni list RS, št. 163/22), zato mnenje ni več nujno aktualno. Mnenja po ZVOP-2 so na voljo tukaj.

The Information Commissioner (Slovenian National Supervisory Body for Personal Data Protection, hereinafter: Slovenian DPA) received your questions regarding DPO registration. You are asking how to declare a DPO for a Slovenian organization.

Please find our reply bellow.

According to seventh paragraph of Article 37 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC  (General Data Protection Regulation) the controller or the processor shall publish the contact details of the data protection officer and communicate them to the supervisory authority.

You can find a template for notification of the data protection officer (hereinafter: DPO) to the Slovenian DPA on our website: https://www.ip-rs.si/obrazci/varstvo-osebnih-podatkov/, document name: “Obvestilo o imenovanju pooblaščene osebe za varstvo osebnih podatkov”. However, the template is not mandatory.

Please, provide the following information:

• name of the controller, address and registration number,
• name and surname of the DPO, position, contact details (e-mail and telephone number) and
• date and number of a decision on the appointment of the DPO.

The completed form or the above listed information should be sent to the following address: “Informacijski pooblaščenec, Dunajska 22, 1000 Ljubljana, Slovenija”, or by e-mail to: gp.ip@ip-rs.si.

With kind regards,

Mojca Prelesnik

Information Commissioner

Prepared by:

Barbara Pirš

Prevention Advisor