Privacy Policy and Notice on the processing and protection of personal data for employees

Datum

15.03.2023

Številka

07121-1/2022/1483

Kategorije

Delovna razmerja, Informiranje posameznika

The Information Commissioner (Slovenian National Supervisory Body for Personal Data Protection, hereinafter: Slovenian DPA) received your question. You are asking if Privacy Policy and Notice on the processing and protection of personal data for employees must be in Slovenian or can it be in English.

Please find our reply bellow.

According to first paragraph of Article 12 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), the controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child.

GDPR does not expressly determine in which language information referred to in Articles 13 and 14 must be provided, but in accordance with Article 12, the information must be understandable to the average member of the target public, and can only be understood if it is in a language that they can understand. This means that you are obliged to provide translations of information (privacy policy, notice for employees, etc.) into languages that can be understood by the individuals (employees).

Regarding the compulsory use of the Slovene language, we suggest that you contact Culture and Media Inspectorate of the Republic of Slovenia (gp.irskm@gov.si).

With kind regards,

Mojca Prelesnik, Information Commissioner

Prepared by

Barbara Žurej, Prevention Advisor