Biometrics in gyms - IPRS

Biometrics in gyms + - Opozorilo: Mnenje je bilo izdano na podlagi določb Zakona o varstvu osebnih podatkov (ZVOP-1, Uradni list RS, št. 94/07 - uradno prečiščeno besedilo), ki je z dnem

2. 2023 prenehal veljati in ga je nadomestil nov Zakon o varstvu osebnih podatkov (ZVOP-2, Uradni list RS, št. 163/22), zato mnenje ni več nujno aktualno. Mnenja po ZVOP-2 so na voljo tukaj. Datum: 09.01.2019 Številka: 0712-3/2018/2650 Kategorije:Biometrija --> Kategorije: Biometrija The Information Commissioner (Slovenian National Supervisory Body for Personal Data Protection, hereinafter: Slovenian DPA) has received your inquiry concerning the use of biometric authentication in gyms. We wish to inform you that Slovenian DPA has not conducted any inspections reviewing the use of biometrics in gyms after May 25, 2018, so we share our general stand regarding the topic in question. Our national legislation (Personal Data Protection Act) poses strict limitations on use of biometrics (Art. 78-81) and Slovenian DPA plays an important role in the process. The private sector may implement biometric measures only if they are necessarily required for the performance of activities, for the security of people or property, or to protect secret data or business secrets. Biometric measures may only be used on employees if they were informed in writing thereof in advance. If the implementation of specific biometric measures in the private sector is not regulated by statute, a data controller intending to implement biometric measures shall prior to introducing the measures be obliged to supply the national DPA with a description of the intended measures and the reasons for the introduction thereof. DPA shall on receipt of information be obliged within two months to decide whether the intended introduction of biometric measures complies with the Personal Data Protection Act. https://www.ip-rs.si/en/legislation/personal-data-protection-act/ Biometric measures in the private sector may, as stated above, only be used on employees (if they were informed in writing thereof in advance) and not on other individuals. Therefore these measures may not be used on customers of the gym so we could not allow the use of fingerprints in the form of a biometric measure as the only possibility to enter the gym. Kind regards, Matej Sironič, Personal Data Protection Adviser Mojca Prelesnik Information Commissioner of the Republic of Slovenia O NAS Informacijski pooblaščenec Dunajska cesta 22 1000 Ljubljana, Slovenija Zemljevid (vir: najdi.si) Telefon: 01 230 97 30 Poštni in varni e-predal: gp.ip(at)ip-rs.si Odgovorna oseba za informacije za medije: dr. Jelena Virant Burnik. Kontakt za medije: Barbara Repovš, mediji@ip-rs.si ali 01 230 97 30 Prijava kršitev (Navodila in obrazci) URADNE URE PON - PET 9.00 - 12.00 POVEZAVE Informacije javnega značaja Priročniki in smernice Obrazci Politika zasebnosti Informacije o obdelavi osebnih podatkov Izjava o dostopnosti Podpora za majhna podjetja Pravice posameznikov Prijava na prejemanje e-novic Informacijski pooblaščenec | 2026