# IP (Slovenia) - SI – 0612-59/2024/8 - Type: News - Source: GDPRhub - Date: 2026-11-11 - Original: https://gdprhub.eu/index.php?title=IP_(Slovenia)_-_SI_–_0612-59/2024/8 - Canonical: https://overview.legal/posts/607172 - Topics: Cookies, Supervisory Authorities, AI Value Chain Actors and Roles, Controllers ## Summary The Slovenian DPA found that a controller failed to provide clear and consistent information about its use of cookies.The DPA found that the provider of a website failed to provide transparently inform users about the use of cookies. In particular, the information incorrectly stated that the mere use of the website constitutes agreement to the usage of cookies. English Summary. English Summary ## Full text The Slovenian DPA found that a controller failed to provide clear and consistent information about its use of cookies.The DPA found that the provider of a website failed to provide transparently inform users about the use of cookies. In particular, the information incorrectly stated that the mere use of the website constitutes agreement to the usage of cookies. English Summary. English Summary ## Cited law provisions (19) ### GDPR — gdpr-art-4-par-1-en ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; ### GDPR — gdpr-art-4-par-11-en ‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her; ### GDPR — gdpr-art-12-par-1-en The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child. The information shall be provided in writing, or by other means, including, where appropriate, by electronic means. When requested by the data subject, the information may be provided orally, provided that the identity of the data subject is proven by other means. ### GDPR — gdpr-art-13-par-1-pnt-f-en where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available. ### GDPR — gdpr-art-13-par-2-en In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing: ### GDPR — gdpr-art-49-par-1-en In the absence of an adequacy decision pursuant to Article 45(3), or of appropriate safeguards pursuant to Article 46, including binding corporate rules, a transfer or a set of transfers of personal data to a third country or an international organisation shall take place only on one of the following conditions: ### GDPR — gdpr-art-2-en Material scope ### GDPR — gdpr-art-4-en For the purposes of this Regulation: ### GDPR — gdpr-art-7-en Conditions for consent ### GDPR — gdpr-art-12-en Transparent information, communication and modalities for the exercise of the rights of the data subject ### GDPR — gdpr-art-13-en Information to be provided where personal data are collected from the data subject ### GDPR — gdpr-art-21-en Right to object ### GDPR — gdpr-art-22-en Automated individual decision-making, including profiling ### GDPR — gdpr-art-28-en Processor ### GDPR — gdpr-art-29-en The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law. ### GDPR — gdpr-art-32-en Security of processing ### GDPR — gdpr-art-46-en Transfers subject to appropriate safeguards ### GDPR — gdpr-art-47-en Binding corporate rules ### GDPR — gdpr-art-77-en Right to lodge a complaint with a supervisory authority --- Generated by overview.legal · https://overview.legal/posts/607172 · 2026-11-14