# IP (Slovenia) - 0602-68/2025/18

- Type: News
- Source: GDPRhub
- Date: 2026-09-07
- Original: https://gdprhub.eu/index.php?title=IP_(Slovenia)_-_0602-68/2025/18
- Canonical: https://overview.legal/posts/353782
- Topics: Right of Access Procedures, Personal Data, Storage Limitation, Supervisory Authorities, Retention Period, Controllers

## Summary

The DPA held that the controller had violated Articles 12 and 15 GDPR by not providing the data subject adequate information on the retention period of their personal data and a copy of a document containing their personal data. English Summary. Facts. The data subject made an access request asking for a copy of their personal data processed by the controller and information on the anticipated retention period of this data. The data subject specifically requested access to a photocopy of a docum

## Full text

The DPA held that the controller had violated Articles 12 and 15 GDPR by not providing the data subject adequate information on the retention period of their personal data and a copy of a document containing their personal data. English Summary. Facts. The data subject made an access request asking for a copy of their personal data processed by the controller and information on the anticipated retention period of this data. The data subject specifically requested access to a photocopy of a document related to the controller’s defense in another proceeding that also contained personal data of third parties. The controller refused to provide a copy of the requested document on the grounds that even a partial disclosure of the document by redacting the personal data of other individuals would disproportionately interfere with the rights of third parties. Regarding the retention period, the controller explained that it retains personal data in accordance with applicable law, which specifie

---
Generated by overview.legal · https://overview.legal/posts/353782 · 2026-09-08