NOTICE TO USERS UNDER ARTICLE 13 OF THE GENERAL DATA PROTECTION REGULATION (GDPR) REGARDING THE PROCESSING OF PERSONAL DATA AND ARTICLE 76(4) OF THE ZVOP-2V REGARDING RECORDS ON PERSONAL DATA PROCESSING FROM VIDEO SURVEILLANCE AND VIDEO SURVEILLANCE WITH THE AUTOMATED NUMBER PLATE RECOGNITION SYSTEM

Controller of the personal data filing system: Fraport Slovenija, upravljanje letališč, d.o.o., Zgornji Brnik 130A, 4210 Brnik – Aerodrom, Slovenia, company registration number: 5142768000, Tel: +386 (0)4 20 61 000, email: info@fraport-slovenija.si

Contact details of the personal data protection officer: Tel: +386 (0)4 2061 440: info.gdpr@fraport-slovenija.si

Purpose of personal data processing:

• Video surveillance: purpose – protection of people and property, entry and exit controls, records contain a recording of the individual, information on the location, date and time of the recording and, where necessary, sound.

Legal basis for the processing of personal data:

• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract under the provision of Article 6(1)(b) of the GDPR and
• processing is necessary for the purposes of the legitimate interests pursued by the controller under the provision of Article 6(1)(f) of the GDPR.

Explanation of legitimate interests: Video surveillance is carried out in order to protect people, property and personal data, and ensure that entry and exit controls are performed.

Users or categories of users of personal data, if they exist: Users are persons authorised by the controller. Personal data is not transferred to third parties except in cases of emergency.

Information on the transfer of personal data to third countries or international organisations: Personal data is not transferred to a third country or international organisation.

Period for which personal data is stored, or, if this is not possible, the criteria used to determine that period: Personal data is processed until the purpose is met, whereby video recordings and consultation of the automated number plate processing system are erased within six months, except in cases of emergency, where the period of storage lasts until the emergency is resolved.

Information on the existence of an individual’s right of access to personal data, right of rectification or erasure of personal data and right to restriction of processing, or the existence of the right of objection to processing and the right to data portability: An individual may request access to, completion, rectification, blocking/restriction of processing or erasure of their personal data, object to the processing of data concerning them and request the transfer of data.

Information on the right to file a complaint with the supervisory authority: You may file a complaint with the Information Commissioner: Dunajska 22, 1000 Ljubljana, email: gp.ip@ip-rs.si, Tel: +386 (0)1 2309730, www.ip-rs.si.

Information on whether providing personal data is a statutory or contractual obligation or whether the individual is obliged to provide personal data, and what the consequences are of not providing it: Providing personal data is a statutory obligation under Articles 127 and 128 of the Aviation Act. In other cases it is a statutory obligation that the individual must comply with if a contract is to be performed.

Information on the existence of the automated adoption of a decision on the basis of profiling:

The controller does not carry out the automated adoption of decisions, nor does it profile individuals.

Extraordinary further processing of video recordings: Live video recording may be carried out by the controller in order to react immediately to an event.

General policy of personal data protection Fraport Slovenija

You will find more information on how Fraport Slovenia Ltd. collects, stores and processes personal data of individuals here.

Fraport Slovenija d.o.o.