{"id":215,"date":"2022-02-07T20:59:01","date_gmt":"2022-02-07T20:59:01","guid":{"rendered":"https:\/\/slaveska.mk\/en\/?p=215"},"modified":"2023-03-13T14:00:35","modified_gmt":"2023-03-13T14:00:35","slug":"stakeholders-in-the-processing-of-personal-data","status":"publish","type":"post","link":"https:\/\/slaveska.mk\/en\/2022\/02\/07\/stakeholders-in-the-processing-of-personal-data\/","title":{"rendered":"Stakeholders in the processing of personal data"},"content":{"rendered":"

Personal Data Subject<\/span><\/strong><\/h4>\n

The only users of the rules for personal data protection are the identified natural persons, i.e. the natural persons that can be identified. Legal entities cannot appear as holders of the right to personal data protection but can appear as holders of the right to privacy (right to reputation).<\/span><\/p>\n

 <\/p>\n

Identified person<\/span><\/strong><\/h4>\n

Identification implies the existence of elements that describe the individual in a way that distinguishes him from other entities (e.g. the unique identification number of the citizen). Also, the personal name (name and surname) of the individual can be considered as such information. However, since the names are often repeated, additional information may be necessary to establish the identity of the person (e.g.: date of birth, address of residence, etc.). In other cases, other identifiers may be used to establish the identity of the person (e.g. for public office holders, it is sufficient to indicate the function of the person in order to establish his or her identity).<\/span><\/p>\n

 <\/p>\n

A person who can be identified<\/span><\/strong><\/h4>\n

It is considered that the person can be identified if the information contains elements through which the identity of the person can be directly or indirectly determined.
\nAdditional information for this purpose can be used: HTTP cookies, mobile phone bills, IP-address, location data, consumer habits of the person, etc. Thereby, it is necessary to have a reasonable possibility to identify the person, which means that such information can be obtained at a reasonable cost, at a reasonable time by all potential users of the information. In other words, if the identification of a person requires unreasonable time, effort, means, such a person will not be considered as an identifiable person, and hence such data will not fall under the rules of personal data protection.<\/span><\/p>\n

 <\/p>\n

Personal Data Controller<\/span><\/strong><\/h4>\n

A controller can be a natural or legal person, a body of state power or a legal entity established by the state to exercise public authority, an agency or another body, which independently or together with others determines the purposes and manner of processing personal data. For example: Although the human resources department in a particular company processes employee data, the company, not its department, acts as a controller. In the recent case law \u201eGoogle vs. Spain\u201c of the EU Court of Justice, the definition of controller is visibly extended to search engines. According to the Court, the browser operator determines the purposes and means of the activity, making the entered data on the websites available to any Internet user who searches for the name of the data subject, due to which it falls under the scope of “personal data controller”.<\/span><\/p>\n

 <\/p>\n

Personal Data Processor<\/span><\/strong><\/h4>\n

Processor is a natural or legal person, body of state authority, state body or legal entity established by the state to exercise public authority, agency or other body that processes personal data on behalf of the controller.<\/span><\/p>\n

 <\/p>\n

Personal Data Protection Officer (DPO)<\/span><\/strong><\/h4>\n

The personal data protection officer is an authorized person for personal data protection, appointed by the personal data controller, in the following cases:<\/span><\/p>\n