The data controller is ELES, d.o.o., operator of the combined electricity transmission and distribution network, Hajdrihova 2, SI-1000 Ljubljana, Slovenia, telephone +386(0)1 474 30 00, e-mail: info@eles.si.
Purpose of processing: The personal data of the visitors is processed for the purposes of ensuring the security of persons and property, protecting classified information, and controlling access to and movement within ELES facilities and premises.
Legal basis: Personal data of external visitors entering ELES facilities is processed based on legitimate interest, as defined in Article 6(1)(f) of the General Data Protection Regulation (GDPR), in conjunction with Article 85 of the Personal Data Protection Act (ZVOP-2).
ELES ensures the safe, reliable and uninterrupted transmission of electricity under the Electricity Supply Act. This is achieved through the implementation of measures to protect persons and property, including access control and movement monitoring within protected areas for ELES. The processing of personal data is also based on the Critical Infrastructure Act and the Act on the Protection of Persons and Property.
Types of data:
- The following data is collected: name, surname, home address, type and number of identity document, time of arrival and departure, reason for entry and occupation.
- The visitor’s e-mail address is processed for notification purposes when a visit is booked.
- Visitors may also provide their car registration number to facilitate access to the ELES parking area.
Retention period: Visitor personal data is retained for a period of 3 months, while access control data is retained for 2 years. In the case of security incident investigations, visitor data may be kept for up to 1 year.
Recipients of personal data: Personal data will be used by ELES employees responsible for implementing access control, as well as by contracted partners in the field of personal and property security, in compliance with the applicable legislation regarding data protection, trade secrets and private security. Access to data is restricted to employees with the necessary authorisations and access rights. Contracted partners in the field of security will have access to the data solely for the purpose of safeguarding persons and property, provided they comply with all the legal requirements related to the provision of private security.
Other important information: Personal data will not be transferred to third countries or international organisations. Failure to provide personal data will prevent entry to ELES facilities and premises. Automated decision-making and profiling will not be used.
In accordance with the GDPR and ZVOP-2, the data subject has the right to request access to their personal data, the right to request the rectification of inaccurate personal data, the right to restrict the processing of their data, the right to erasure and the right to object to the processing of their data.
Contact details:
The Data Protection Officer of ELES can be contacted at: dpo@eles.si.
The supervisory authority is the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, telephone: +386(0)1 230 97 30, e-mail: gp.ip@p-rs.si. If an individual believes their rights have been violated regarding the processing of personal data, they have the right to lodge a complaint with the Information Commissioner.