DPA case 07121-1/2021/662 – Violation Found (Slovenia, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Slovenian data protection authority clarified that self-employed individuals do not have the same privacy protections when acting as business entities. This means that personal data related to their business activities is not protected in the same way. This ruling is important for self-employed individuals to understand their privacy rights.
What happened
The authority determined that self-employed individuals' data related to their business activities is not protected under personal data laws.
Who was affected
Self-employed individuals in Slovenia who perform registered activities.
What the authority found
The authority explained that personal data protection does not apply when individuals act as business entities.
Why this matters
This clarification helps self-employed individuals understand the limits of their privacy rights in business contexts. It highlights the need for awareness of data protection rules when operating as a business.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA received a question whether self-employed individuals enjoy the protection of personal data if the public disclosure concerns their activity as business entities. The IP explained that data on self-employed individuals in connection with the performance of their registered activity do not enjoy the protection of personal data. In accordance with the constitutional case law (Decision no. U-I-84/03 and no. U-I-298/04), personal data protection cannot be applied to the personal data of an individual when he/she appears on the market as a business entity (the Constitutional Court ruled on personal data of sole proprietors). Other entities that perform a registered activity in the Republic of Slovenia, including cultural activity, can also be considered business entities in a broader sense.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 07121-1/2021/662 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 07121-1/2021/662 - Slovenia (2021). Retrieved from cookiefines.eu
Last updated: