(4) Persons normally not having the capacity to be a party to legal proceedings may also be parties
to the litigation.
(5) Should it be requested, the court is entitled to make its verdict public – by disclosing the ID data
of the controller – should it be deemed necessary in the interests of data protection and freedom of
information, as well as to protect the rights of a greater number of data subjects protected within the
scope of the present Act.
35. Data Protection File
Section 65
(1) The Authority registers data control undertaken in respect of personal data in a file (hereinafter
data protection file) to facilitate access to information for the data subject, which file – with
exceptions defined in subsection (2) - contains the following:
a.
b.
c.
d.
e.
f.
g.
the objective of the data control;
legal grounds of control;
scope of data subjects;
description of data concerning the data subjects;
source of the data;
duration of the control of the data;
type of data transferred, its recipients and the legal grounds of transfer, equally including
data transfers to third countries;
h. name and address of the controller, as well as the data processor, actual data control, place of
data processing and the activity undertaken by the data processor in connection with data
control;
i. type of data processing technology applied;
j. name and contact details of the internal data protection officer, in the event of taking part in
the process.
(2) The data protection file shall contain the name and address of the national security agency, the
objective of the control and its legal grounds in respect of data control undertaken by national
security agencies.
(3) The Authority shall not register data controls in the data protection file which
a. relate to the personal data of individuals associated with the controller through employment,
organisational membership, enrolment in kindergarten, educational institutions, college
membership – with the exception of financial organisations, public utility services,
electronic telecommunications service providers - or who are clients of the controller;
b. are carried out in accordance with the internal regulations of the Church, a religious
denomination or religious community;
c. relate to personal data regarding the illness or state of health of an individual undergoing
healthcare treatment with the aim of receiving medical therapy or health preservation,
validating social security claims;
d. relate to personal data registered with the aim of providing financial and social assistance to
the data subject;
e. relate to the personal data of individuals involved in administrative, prosecution and legal
proceedings and conducting the proceedings, or personal data controlled in connection with
the execution of the sentence during the course of the sentence;
f. contain personal data for official statistical purposes on condition that the verification of the
link between the data and the data subject is definitively severed in accordance with
conditions set out under the relevant legislation;
g. contain the data of media service providers, as specified within the scope of the act on media
services and mass telecommunication, which exclusively serve their own information
activities;