Personal data protection
In accordance with the provisions of the General Data Protection Regulation, NEK hereby informs external parties about the processing of personal data at NEK.
Personal data filing system controller
Nuclear Power Plant Krško, d. o. o., Vrbina 12, 8270 Krško
Tel.: +386 7 48 02 000
E-mail: nek@nek.si
Contact information for exercising the rights of data subjects:
e-mail: nek@nek.si
Information on the right to lodge a complaint
Complaints about the lawfulness of personal data processing by the controller may be lodged with:
Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, SI-1000 Ljubljana, e-mail: gp.ip@ip-rs.si, telephone: + 386 1 230 97 30, website: www.ip-rs.si.
Personal data processing
Personal data of NEK external contractors and visitors
Purpose of processing: Protection of property and life of data subjects as well as preservation of order at the nuclear facility and control of access to and movement around the nuclear facility.
Legal basis: Personal data of visitors entering NEK are processed in compliance with Article 148, paragraph 6, of the Ionizing Radiation Protection and Nuclear Safety Act (Official Gazette of the Republic of Slovenia, No. 76/17, with amendments). The following data are collected: name, date and place of birth, residence address, type and number of ID document, gender, nationality, and reason for entry. Personal data of persons who undergo security vetting and perform work at the nuclear facility are processed in compliance with Articles 148 and 149 of the Ionizing Radiation Protection and Nuclear Safety Act (Official Gazette of the Republic of Slovenia, No. 76/17, with amendments).
Storage period: Personal data of visitors shall be kept for 5 years after the last exit of the person concerned, personal data of external contractors shall be kept for 5 years after the work of the person concerned is terminated, and the data obtained through biometric control shall be kept on file for five years after the last exit of the person concerned.
Personal data shall not be transferred to third countries or international organizations. The data subject may request access to personal data concerning him or her, and has the right to rectification, objection, erasure or restriction of processing. The processing is not based on the data subject's consent. In compliance with the Ionizing Radiation Protection and Nuclear Safety Act, the provision of personal data is a legal obligation. If the data subject does not provide the data, he or she shall be refused entry. Automated decision-making and profiling are not carried out.
Personal data of candidates for employment at NEK
Purpose of processing: Ensuring the regularity of the selection process which is carried out in accordance with the legislation.
Legal basis: Article 48 of the Employment Relationships Act.
Storage period: 1 year from the date of the decision on the selection of the candidate (non-selected candidates) or permanently (selected candidates).
Personal data shall not be transferred to third countries or international organizations. The data subject may request access to personal data concerning him or her, and have the right to rectification, objection, erasure or restriction of processing. The provision of personal data is a legal obligation. If it is not possible to verify that the candidate meets the conditions of a call, the application of the candidate for the vacant post cannot be considered. Automated decision-making and profiling are not carried out.
E-mail addresses of journalists
Purpose of processing: Informing journalists about press releases.
Storage period: until withdrawal of consent
Legal basis: consent of the data subject
Personal data shall not be transferred to third countries or international organizations. The data subject may request access to personal data concerning him or her, and have the right to rectification, objection, erasure or restriction of processing. Data subjects shall have the right to withdraw his or her consent to receive press releases at any time. The provision of personal data is not a legal obligation or a contractual requirement. If data subjects do not provide personal data, they cannot receive electronic messages. Automated decision-making and profiling are not carried out.
Personal data of NEK holiday accommodation users
An individual must provide the controller with a certain amount of data, otherwise he or she cannot rent the NEK holiday facilities. The following data shall be collected: name and surname, address, e-mail address of renter, and names and surnames of the persons who will be staying in the facility at the time of the rental.
Purpose of processing: Implementation of measures before the conclusion of the rental agreement for holiday accommodations and the implementation of the rental relationship.
Legal basis: rental contract for holiday accommodations
Storage period: 1 year from the conclusion of the contract.
Personal data shall not be transferred to third countries or international organizations. The data subject may request access to personal data concerning him or her, and have the right to rectification, objection, erasure or restriction of processing. The provision of personal data is a contractual obligation. If the data subject does not provide the data, they cannot conclude a rental agreement for NEK holiday accommodation. Automated decision-making and profiling are not carried out.
Video surveillance in controlled area of NEK
Legal basis: Video surveillance of the protected area of NEK is carried out for the purpose of ensuring the safety of people and property in compliance with the requirements of the Slovenian Private Security Act (Official Gazette of the Republic of Slovenia, No. 17/11), Ionising Radiation Protection and Nuclear Safety Act (Official Gazette of the Republic of Slovenia, Nos 76/17, 26/19, 172/21, 18/23 – ZDU-1O) and Rules on the Physical Protection of Nuclear Facilities and Nuclear and Radioactive Materials (Official Gazette of the Republic of Slovenia, Nos 17/13, 76/17 – ZVISJV-1). The above Rules require the implementation of a technical security measure of continuous video surveillance in the controlled area of a category I nuclear facility. The controlled area of a category I nuclear facility includes an area within the circle with the center of the nuclear facility and a radius of 500 m.
Categories of users: NEK security personnel
Specific effects of processing: There are no specific effects of processing.
Uncommon processing: The movement of persons in the NEK controlled area is monitored through real-time video surveillance camera images. No sound is recorded. Personal data is not transferred to third countries.
Personal data retention period: Video recordings from all cameras shall be retained for 3 months, and then automatically deleted. Security event recordings shall be kept for 1 year. The retention period shall be determined in compliance with the Security Control Center standard, and it may not be less than three months.
Information on the existence of an individual's right to request access to personal data and rectification or erasure of personal data or restrictions, or the existence of the right to object processing and the right to data portability: The data subject has the right to request access to personal data relating to them, and when the conditions under the provisions of the European Data Protection Regulation are fulfilled, they have the right to erasure or restriction of processing.
You can exercise your rights with the operator using the contact information provided above.
Information about whether the provision of personal data is a legal or contractual obligation: It is not a legal or contractual obligation; however, it is not possible to enter the controlled area in a way to avoid video surveillance.
Information on the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information on the reasons for it, as well as the importance and envisaged consequences of such processing for the person to whom the personal data relates: There is no automated decision-making nor profiling.
Protection of personal data of the users of the NEK website
The personal data of the users of the NEK website are protected in compliance with Slovenian and European legislation. The data collected will be used exclusively to improve the use of websites and for the purposes for which they are provided by internet users. Personal data and contact information are not used for other purposes and are not disclosed to third parties without the express permission of the internet user.