- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
DPA case 07100-17-2023-7 – Complaint Upheld (Slovenia, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A person in Slovenia complained that a company didn't give him access to his personal data related to a public tender application. The data protection authority found that the company initially failed to provide the requested information but later complied. This case highlights the importance of companies responding to access requests from individuals.
What happened
A person requested access to his personal data from a company but was initially denied.
Who was affected
The individual who applied for a public tender and sought access to his personal data.
What the authority found
The authority determined that the company did not comply with the access request at first but later fulfilled its obligation.
Why this matters
This case emphasizes that companies must take access requests seriously and respond appropriately. It serves as a reminder for businesses to have clear processes in place for handling such requests.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On 14 July 2023, the Slovenian DPA received a complaint from a data subject alleging a violation of his right to access by the controller. The complainant declared that the controller had refused to grant him access to his data relating to the application process for a public tender. The controller had explained that it could not comply on the basis of professional secrecy. The DPA noted that the controller had not yet provided the applicant with all the personal data requested. Nonetheless, given that during the proceedings an individual has the right to be informed of the controller's response, the DPA asked the controller whether it could provide the complainant the full response to the complaint, which would implicitly make the controller comply with the initial request. On 25 August 2023, the controller provided an affirmative reply. Thus, on 20 September 2023, the DPA invited the complainant to inform it within ten days whether he wanted to withdraw the complaint or maintain it since he received the requested personal data. The complainant did not respond to the DPA’s query. From the access request made by the complainant on 1 May 2023 and subsequent correspondence with the data controller, the DPA noted that the complainant requested from the controller several data: information about the score obtained and the assessment process, information on what his ranking was, and the number of points compared to the highest number of points in the written test. On the basis of the information, the DPA concluded that the controller did not comply with the complainant's access request at the time of the submission of the request, on 14 July 2023, thus breaching [http://www.pisrs.si/Pis.web/pregledPredpisa?id=ZAKO7959 Article 15 of the National Data Protection Act 2022 (ZVOP-2)] in conjunction with [http://www.pisrs.si/Pis.web/pregledPredpisa?id=ZAKO7959 Articles 12 and 14 ZVOP-2]. However, the DPA acknowledged that the controller had subsequently fulfilled its obliga
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 07100-17-2023-7 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 07100-17-2023-7 - Slovenia (2023). Retrieved from cookiefines.eu
Last updated: