Uradni list

Številka 59
Uradni list RS, št. 59/2004 z dne 28. 5. 2004
Uradni list

Uradni list RS, št. 59/2004 z dne 28. 5. 2004

Kazalo

57. Zakon o ratifikaciji Konvencije na podlagi člena K.3 Pogodbe o Evropski uniji o ustanovitvi Evropskega policijskega urada (Konvencija o Europolu) (MKEPU), stran 4077.

Na podlagi druge alinee prvega odstavka 107. člena in prvega odstavka 91. člena Ustave Republike Slovenije izdajam
U K A Z
O RAZGLASITVI ZAKONA O RATIFIKACIJI KONVENCIJE NA PODLAGI ČLENA K.3 POGODBE O EVROPSKI UNIJI O USTANOVITVI EVROPSKEGA POLICIJSKEGA URADA (KONVENCIJA O EUROPOLU) (MKEPU)
Razglašam Zakon o ratifikaciji Konvencije na podlagi člena K.3 Pogodbe o Evropski uniji o ustanovitvi Evropskega policijskega urada (Konvencija o Europolu) (MKEPU), ki ga je sprejel Državni zbor Republike Slovenije na seji 20. maja 2004.
Št. 001-22-111/04
Ljubljana, dne 28. maja 2004
Predsednik
Republike Slovenije
dr. Janez Drnovšek l. r.
Z A K O N
O RATIFIKACIJI KONVENCIJE NA PODLAGI ČLENA K.3 POGODBE O EVROPSKI UNIJI O USTANOVITVI EVROPSKEGA POLICIJSKEGA URADA (KONVENCIJA O EUROPOLU) (MKEPU)
1. člen
Ratificira se Konvencija na podlagi člena K.3 Pogodbe o Evropski uniji o ustanovitvi Evropskega policijskega urada (Konvencija o Europolu), podpisana v Bruslju dne 26. julija 1995.
2. člen
Besedilo konvencije se v izvirniku v angleškem in v prevodu v slovenskem jeziku glasi:
C O N V E N T I O N
based on article K.3 of the Treaty on
European Union, on the establishment of
a European Police Office
(Europol Convention)
THE HIGH CONTRACTING PARTIES to the present Convention, Member States of the European Union,
REFERRING to the Council Act of 26 July 1995;
AWARE of the urgent problems arising from terrorism, unlawful drug trafficking and other serious forms of international crime;
WHEREAS there is a need for progress in solidarity and cooperation between the Member States of the European Union, particularly through an improvement in police cooperation between the Member States;
WHEREAS such progress should enable the protection of security and public order to be further improved;
WHEREAS the establishment of a European Police Office (Europol) was agreed in the Treaty on European Union of 7 February 1992;
IN VIEW of the decision of the European Council of 29 October 1993 that Europol should be established in the Netherlands and have its seat in The Hague;
MINDFUL of the common objective of improving police cooperation in the field of terrorism, unlawful drug trafficking and other serious forms of international crime through a constant, confidential and intensive exchange of information between Europol and Member States' national units;
ON THE UNDERSTANDING that the forms of cooperation laid down in this Convention should not affect other forms of bilateral or multilateral cooperation;
CONVINCED that in the field of police co-operation, particular attention must be paid to the protection of the rights of individuals, and in particular to the protection of their personal data;
WHEREAS the activities of Europol under this Convention are without prejudice to the powers of the European Communities; whereas Europol and the Communities have a mutual interest, in the framework of the European Union, in establishing types of cooperation enabling each of them to perform their respective tasks as effectively as possible,
HAVE AGREED AS FOLLOWS:
                                CONTENTS
 
TITLE I         ESTABLISHMENT AND TASKS
Article 1       Establishment
Article 2       Objective
Article 3       Tasks
Article 4       National units
Article 5       Liaison officers
Article 6       Computerized system of collected information
TITLE II        INFORMATION SYSTEM
Article 7       Establishment of the information system
Article 8       Content of the information system
Article 9       Right of access to the information system
TITLE III       WORK FILES FOR THE PURPOSES OF ANALYSIS
Article 10      Collection, processing and utilization of personal data
Article 11       Index system
Article 12      Order opening a data file
TITLE IV        COMMON PROVISIONS ON INFORMATION PROCESSING
Article 13      Duty to notify
Article 14      Standard of data protection
Article 15      Responsibility in data protection matters
Article 16      Provisions on drawing up reports
 
Article 17      Rules on the use of data
Article 18      Communication of data to third States and third bodies
Article 19      Right of access
Article 20      Correction and deletion of data
Article 21      Time limits for the storage and deletion of data files
Article 22      Correction and storage of data in paper files
 
Article 23      National supervisory body
Article 24      Joint supervisory body
Article 25      Data security
TITLE V         LEGAL STATUS, ORGANIZATION AND
                FINANCIAL PROVISIONS
Article 26      Legal capacity
Article 27      Organs of Europol
Article 28      Management Board
Article 29      Director
Article 30      Staff
Article 31      Confidentiality
Article 32      Obligation of discretion and confidentiality
Article 33      Languages
Article 34      Informing the European Parliament
Article 35      Budget
Article 36      Auditing
Article 37      Headquarters agreement
TITLE VI        LIABILITY AND LEGAL PROTECTION
Article 38      Liability for unauthorized or incorrect data
                processing
Article 39      Other liability
Article 40      Settlement of disputes
Article 41      Privileges and immunities
TITLE VII       FINAL PROVISIONS
Article 42      Relations with third States and third bodies
Article 43      Amendment of the Convention
Article 44      Reservations
Article 45      Entry into force of the Convention
Article 46      Accession by new Member States
Article 47      Depositary
        Annex referred to in Article 2
        Declaration
TITLE I
ESTABLISHMENT AND TASKS
Article 1
Establishment
1. The Member States of the European Union, hereinafter referred to as "Member States", hereby establish a European Police Office, hereinafter referred to as "Europol".
2. Europol shall liaise with a single national unit in each Member State, to be established or designated in accordance with Article 4.
Article 2
Objective
1. The objective of Europol shall be, within the framework of cooperation between the Member States pursuant to Article K.1(9) of the Treaty on European Union, to improve, by means of the measures referred to in this Convention, the effectiveness and cooperation of the competent authorities in the Member States in preventing and combating terrorism, unlawful drug trafficking and other serious forms of international crime where there are factual indications that an organized criminal structure is involved and two or more Member States are affected by the forms of crime in question in such a way as to require a common approach by the Member States owing to the scale, significance and consequences of the offences concerned.
2. In order to achieve progressively the objective mentioned in paragraph 1, Europol shall initially act to prevent and combat unlawful drug trafficking, trafficking in nuclear and radioactive substances, illegal immigrant smuggling, trade in human beings and motor vehicle crime.
Within two years at the latest following the entry into force of this Convention, Europol shall also deal with crimes committed or likely to be committed in the course of terrorist activities against life, limb, personal freedom or property. The Council, acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union, may decide to instruct Europol to deal with such terrorist activities before that period has expired.
The Council, acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union, may decide to instruct Europol to deal with other forms of crime listed in the Annex to this Convention or specific manifestations thereof. Before acting, the Council shall instruct the Management Board to prepare its decision and in particular to set out the budgetary and staffing implications for Europol.
3. Europol's competence as regards a form of crime or specific manifestations thereof shall cover both:
(1) illegal money-laundering activities in connection with these forms of crime or specific manifestations thereof;
(2) related criminal offences.
The following shall be regarded as related and shall be taken into account in accordance with the procedures set out in Articles 8 and 10:
– criminal offences committed in order to procure the means for perpetrating acts within the sphere of competence of Europol,
– criminal offences committed in order to facilitate or carry out acts within the sphere of competence of Europol,
– criminal offences committed to ensure the impunity of acts within the sphere of competence of Europol.
4. For the purposes of this Convention, "competent authorities" means all public bodies existing in the Member States which are responsible under national law for preventing and combating criminal offences.
5. For the purposes of paragraphs 1 and 2, "unlawful drug trafficking" means the criminal offences listed in Article 3(1) of the United Nations Convention of 20 December 1988 against Illicit Traffic in Narcotic Drugs and Psychotropic Substances and in the provisions amending or replacing that Convention.
Article 3
Tasks
1. In the framework of its objective pursuant to Article 2(1), Europol shall have the following principal tasks:
(1) to facilitate the exchange of information between the Member States;
(2) to obtain, collate and analyse information and intelligence;
(3) to notify the competent authorities of the Member States without delay via the national units referred to in Article 4 of information concerning them and of any connections identified between criminal offences;
(4) to aid investigations in the Member States by forwarding all relevant information to the national units;
(5) to maintain a computerized system of collected information containing data in accordance with Articles 8, 10 and 11.
2. In order to improve the cooperation and effectiveness of the competent authorities in the Member States through the national units with a view to fulfilling the objective set out in Article 2 (1), Europol shall furthermore have the following additional tasks:
(1) to develop specialist knowledge of the investigative procedures of the competent authorities in the Member States and to provide advice on investigations;
(2) to provide strategic intelligence to assist with and promote the efficient and effective use of the resources available at national level for operational activities;
(3) to prepare general situation reports.
3. In the context of its objective under Article 2 (1) Europol may, in addition, in accordance with its staffing and the budgetary resources at its disposal and within the limits set by the Management Board, assist Member States through advice and research in the following areas:
(1) training of members of their competent authorities;
(2) organization and equipment of those authorities;
(3) crime prevention methods;
(4) technical and forensic police methods and investigative procedures.
Article 4
National Units
1. Each Member State shall establish or designate a national unit to carry out the tasks listed in this Article.
2. The national unit shall be the only liaison body between Europol and the competent national authorities. Relationships between the national unit and the competent authorities shall be governed by national law, and, in particular the relevant national constitutional requirements.
3. Member States shall take the necessary measures to ensure that the national units are able to fulfil their tasks and, in particular, have access to relevant national data.
4. It shall be the task of the national units to:
(1) supply Europol on their own initiative with the information and intelligence necessary for it to carry out its tasks;
(2) respond to Europol's requests for information, intelligence and advice;
(3) keep information and intelligence up to date;
(4) evaluate information and intelligence in accordance with national law for the competent authorities and transmit this material to them;
(5) issue requests for advice, information, intelligence and analysis to Europol;
(6) supply Europol with information for storage in the computerized system;
(7) ensure compliance with the law in every exchange of information between themselves and Europol.
5. Without prejudice to the exercise of the responsibilities incumbent upon Member States as set out in Article K.2 (2) of the Treaty on European Union, a national unit shall not be obliged in a particular case to supply the information and intelligence provided for in paragraph 4, points 1, 2 and 6 and in Articles 7 and 10 if this would mean:
(1) harming essential national security interests; or
(2) jeopardizing the success of a current investigation or the safety of individuals;
(3) involving information pertaining to organizations or specific intelligence activities in the field of State security.
6. The costs incurred by the national units for communications with Europol shall be borne by the Member States and, apart from the costs of connection, shall not be charged to Europol.
7. The Heads of national units shall meet as necessary to assist Europol by giving advice.
Article 5
Liaison Officers
1. Each national unit shall second at least one liaison officer to Europol. The number of liaison officers who may be sent by Member States to Europol shall be laid down by unanimous decision of the Management Board; the decision may be altered at any time by unanimous decision of the Management Board. Except as otherwise stipulated in specific provisions of this Convention, liaison officers shall be subject to the national law of the seconding Member State.
2. The liaison officers shall be instructed by their national units to represent the interests of the latter within Europol in accordance with the national law of the seconding Member State and in compliance with the provisions applicable to the administration of Europol.
3. Without prejudice to Article 4 (4) and (5), the liaison officers shall, within the framework of the objective laid down in Article 2 (1), assist in the exchange of information between the national units which have seconded them and Europol, in particular by:
(1) providing Europol with information from the seconding national unit;
(2) forwarding information from Europol to the seconding national unit; and
(3) cooperating with the officials of Europol by providing information and giving advice as regards analysis of the information concerning the seconding Member State.
4. At the same time, the liaison officers shall assist in the exchange of information from their national units and the coordination of the resulting measures in accordance with their national law and within the framework of the objective laid down in Article 2 (1).
5. To the extent necessary for the performance of the tasks under paragraph 3 above, the liaison officers shall have the right to consult the various files in accordance with the appropriate provisions specified in the relevant Articles.
6. Article 25 shall apply mutatis mutandis to the activity of the liaison officers.
7. Without prejudice to the other provisions of this Convention, the rights and obligations of liaison officers in relation to Europol shall be determined unanimously by the Management Board.
8. Liaison officers shall enjoy the privileges and immunities necessary for the performance of their tasks in accordance with Article 41 (2).
9. Europol shall provide Member States free of charge with the necessary premises in the Europol building for the activity of their liaison officers. All other costs which arise in connection with seconding liaison officers shall be borne by the seconding Member State; this shall also apply to the costs of equipment for liaison officers, to the extent that the Management Board does not unanimously recommend otherwise in a specific case when drawing up the budget of Europol.
Article 6
Computerized system of collected information
1. Europol shall maintain a computerized system of collected information consisting of the following components:
(1) an information system as referred to in Article 7 with a restricted and precisely defined content which allows rapid reference to the information available to the Member States and Europol;
(2) work files as referred to in Article 10 established for variable periods of time for the purposes of analysis and containing comprehensive information; and
(3) an index system containing certain particulars from the analysis files referred to in point 2, in accordance with the arrangements laid down in Article 11.
2. The computerized system of collected information operated by Europol must under no circumstances be linked to other automated processing systems, except for the automated processing systems of the national units.
TITLE II
INFORMATION SYSTEM
Article 7
Establishment of the information system
1. In order to perform its tasks, Europol shall establish and maintain a computerized information system. The information system, into which Member States, represented by their national units and liaison officers, may directly input data in compliance with their national procedures, and into which Europol may directly input data supplied by third States and third bodies and analysis data, shall be directly accessible for consultation by national units, liaison officers, the Director, the Deputy Directors and duly empowered Europol officials.
Direct access by the national units to the information system in respect of the persons referred to in Article 8 (1), point 2 shall be restricted solely to the details of identity listed in Article 8 (2). If needed for a specific enquiry, the full range of data shall be accessible to them via the liaison officers.
2. Europol shall:
(1) have the task of ensuring compliance with the provisions governing cooperation on and operation of the information system, and
(2) be responsible for the proper working of the information system in technical and operational respects. Europol shall in particular take all necessary measures to ensure that the measures referred to in Articles 21 and 25 regarding the information system are properly implemented.
3. The national unit in each Member State shall be responsible for communication with the information system. It shall, in particular, be responsible for the security measures referred to in Article 25 in respect of the data-processing equipment used within the territory of the Member State in question, for the review in accordance with Article 21 and, insofar as required under the laws, regulations, administrative provisions and procedures of that Member State, for the proper implementation of this Convention in other respects.
Article 8
Content of the information system
1. The information system may be used to store, modify and utilize only the data necessary for the performance of Europol's tasks, with the exception of data concerning related criminal offences as referred to in the second subparagraph of Article 2 (3). Data entered shall relate to:
(1) persons who, in accordance with the national law of the Member State concerned, are suspected of having committed or having taken part in a criminal offence for which Europol is competent under Article 2 or who have been convicted of such an offence;
(2) persons who there are serious grounds under national law for believing will commit criminal offences for which Europol is competent under Article 2.
2. Personal data as referred to in paragraph 1 may include only the following details:
(1) surname, maiden name, given names and any alias or assumed name;
(2) date and place of birth;
(3) nationality;
(4) sex, and
(5) where necessary, other characteristics likely to assist in identification, including any specific objective physical characteristics not subject to change.
3. In addition to the data referred to in paragraph 2 and data on Europol or the inputting national unit, the information system may also be used to store, modify and utilize the following details concerning the persons referred to in paragraph 1:
(1) criminal offences, alleged crimes and when and where they were committed;
(2) means which were or may be used to commit the crimes;
(3) departments handling the case and their filing references;
(4) suspected membership of a criminal organization;
(5) convictions, where they relate to criminal offences for which Europol is competent under Article 2.
These data may also be input when they do not yet contain any references to persons. Where Europol inputs the data itself, as well as giving its filing reference it shall also indicate whether the data were provided by a third party or are the result of its own analyses.
4. Additional information held by Europol or national units concerning the groups of persons referred to in paragraph 1 may be communicated to any national unit or Europol should either so request. National units shall do so in compliance with their national law.
Where the additional information concerns one or more related criminal offences as defined in the second subparagraph of Article 2 (3), the data stored in the information system shall be marked accordingly to enable national units and Europol to exchange information on the related criminal offences.
5. If proceedings against the person concerned are dropped or if that person is acquitted, the data relating to either decision shall be deleted.
Article 9
Right of access to the information system
1. Only national units, liaison officers, and the Director, Deputy Directors or duly empowered Europol officials shall have the right to input data directly into the information system and retrieve it therefrom. Data may be retrieved where this is necessary for the performance of Europol's tasks in a particular case; retrieval shall be effected in accordance with the laws, regulations, administrative provisions and procedures of the retrieving unit, subject to any additional provisions contained in this Convention.
2. Only the unit which entered the data may modify, correct or delete such data. Where a unit has reason to believe that data as referred to in Article 8 (2) are incorrect or wishes to supplement them, it shall immediately inform the inputting unit; the latter shall examine such notification without delay and if necessary modify, supplement, correct or delete the data immediately. Where the system contains data as referred to in Article 8 (3) concerning a person any unit may enter additional data as referred to in Article 8 (3). Where there is an obvious contradiction between the data input, the units concerned shall consult each other and reach agreement. Where a unit intends to delete altogether data as referred to in Article 8 (2) which is has input on a person and where data as referred to in Article 8 (3) are held on the same person but input by other units, responsibility in terms of data protection legislation pursuant to Article 15 (1) and the right to modify, supplement, correct and delete such data pursuant to Article 8 (2) shall be transferred to the next unit to have entered data as referred to in Article 8 (3) on that person. The unit intending to delete shall inform the unit to which responsibility in terms of data protection is transferred of its intention.
3. Responsibility for the permissibility of retrieval from, input into and modifications within the information system shall lie with the retrieving, inputting or modifying unit; it must be possible to identify that unit. The communication of information between national units and the competent authorities in the Member States shall be governed by national law.
TITLE III
WORK FILES FOR THE PURPOSES OF THE ANALYSIS
Article 10
Collection, processing and utilization of personal data
1. Where this is necessary to achieve the objective laid down in Article 2 (1), Europol, in addition to data of a non-personal nature, may store, modify, and utilize in other files data on criminal offences for which Europol is competent under Article 2 (2), including data on the related criminal offences provided for in the second subparagraph of Article 2 (3) which are intended for specific analyses, and concerning:
(1) persons as referred to in Article 8 (1);
(2) persons who might be called on to testify in investigations in connection with the offences under consideration or in subsequent criminal proceedings;
(3) persons who have been the victims of one of the offences under consideration or with regard to whom certain facts give reason for believing that they could be the victims of such an offence;
(4) contacts and associates, and
(5) persons who can provide information on the criminal offences under consideration.
The collection, storage and processing of the data listed in the first sentence of Article 6 of the Council of Europe Convention of 28 January 1981 with regard to Automatic Processing of Personal Data shall not be permitted unless strictly necessary for the purposes of the file concerned and unless such data supplement other personal data already entered in that file. It shall be prohibited to select a particular group of persons solely on the basis of the data listed in the first sentence of Article 6 of the Council of Europe Convention of 28 January 1981 in breach of the aforementioned rules with regard to purpose.
The Council, acting unanimously, in accordance with the procedure laid down in Title VI of the Treaty on European Union, shall adopt implementing rules for data files prepared by the Management Board containing additional details, in particular with regard to the categories of personal data referred to in this Article and the provisions concerning the security of the data concerned and the internal supervision of their use.
2. Such files shall be opened for the purposes of analysis defined as the assembly, processing or utilization of data with the aim of helping a criminal investigation. Each analysis project shall entail the establishment of an analysis group closely associating the following participants in accordance with the tasks defined in Article 3 (1) and (2) and Article 5 (3):
(1) analysts and other Europol officials designated by the Europol Directorate: only analysts shall be authorized to enter data into and retrieve data from the file concerned;
(2) the liaison officers and/or experts of the Member States supplying the information or concerned by the analysis within the meaning of paragraph 6.
3. At the request of Europol or on their own initiative, national units shall, subject to Article 4 (5), communicate to Europol all the information which it may require for the performance of its tasks under Article 3 (1), point 2. The Member States shall communicate such data only where processing thereof for the purposes of preventing, analysing or combating offences is also authorized by their national law.
Depending on their degree of sensitivity, data from national units may be routed directly and by whatever means may be appropriate to the analysis groups, whether via the liaison officers concerned or not.
4. If, in addition to the data referred to in paragraph 3, it would seem justified for Europol to have other information for the performance of tasks under Article 3 (1), point 2, Europol may request that:
(1) the European Communities and bodies governed by public law established under the Treaties establishing those Communities;
(2) other bodies governed by public law established in the framework of the European Union;
(3) bodies which are based on an agreement between two or more Member States of the European Union;
(4) third States;
(5) international organizations and their subordinate bodies governed by public law;
(6) other bodies governed by public law which are based on an agreement between two or more States, and
(7) the International Criminal Police Organization,
forward the relevant information to it by whatever means may be appropriate. It may also, under the same conditions and by the same means, accept information provided by those various bodies on their own initiative. The Council, acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union and after consulting the Management Board, shall draw up the rules to be observed by Europol in this respect.
5. Insofar as Europol is entitled under other Conventions to gain computerized access to data from other information systems, Europol may retrieve personal data by such means if this is necessary for the performance of its tasks pursuant to Article 3 (1), point 2.
6. If an analysis is of a general nature and of a strategic type, all Member States, through liaison officers and/or experts, shall be fully associated in the findings thereof, in particular through the communication of reports drawn up by Europol.
If the analysis bears on specific cases not concerning all Member States and has a direct operational aim, representatives of the following Member States shall participate therein:
(1) Member States which were the source of the information giving rise to the decision to open the analysis file, or those which are directly concerned by that information and Member States subsequently invited by the analysis group to take part in the analysis because they are also becoming concerned;
(2) Member States which learn from consulting the index system that they need to be informed and assert that need to know under the conditions laid down in paragraph 7.
7. The need to be informed may be claimed by authorized liaison officers. Each Member State shall nominate and authorize a limited number of such liaison officers. It shall forward the list thereof to the Management Board.
A liaison officer shall claim the need to be informed as defined in paragraph 6 by means of a written reasoned statement approved by the authority to which he is subordinate in his Member State and forwarded to all the participants in the analysis. He shall then be automatically associated in the analysis in progress.
If an objection is raised in the analysis group, automatic association shall be deferred until completion of a conciliation procedure, which may comprise three stages as follows:
(1) the participants in the analysis shall endeavour to reach agreement with the liaison officer claiming the need to be informed; they shall have no more than eight days for that purpose;
(2) if no agreement is reached, the heads of the national units concerned and the Directorate of Europol shall meet within three days;
(3) if the disagreement persists, the representatives of the parties concerned on the Management Board shall meet within eight days. If the Member State concerned does not waive its need to be informed, automatic association of that Member State shall be decided by consensus.
8. The Member State communicating an item of data to Europol shall be the sole judge of the degree of its sensitivity and variations thereof. Any dissemination or operational use of analysis data shall be decided on in consultation with the participants in the analysis. A Member State joining an analysis in progress may not, in particular, disseminate or use the data without the prior agreement of the Member States initially concerned.
Article 11
Index system
1. An index system shall be created by Europol for the data stored on the files referred to in Article 10 (1).
2. The Director, Deputy Directors and duly empowered officials of Europol and liaison officers shall have the right to consult the index system. The index system shall be such that it is clear to the liaison officer consulting it, from the data being consulted, that the files referred to in Article 6 (1), point 2 and Article 10 (1) contain data concerning the seconding Member State.
Access by liaison officers shall be defined in such a way that it is possible to determine whether or not an item of information is stored, but that it is not possible to establish connections or further conclusions regarding the content of the files.
3. The detailed procedures for the design of the index system shall be defined by the Management Board acting unanimously.
Article 12
Order opening a data file
1. For every computerized data file containing personal data operated by Europol for the purpose of performing its tasks referred to in Article 10, Europol shall specify in an order opening the file, which shall require the approval of the Management Board:
(1) the file name;
(2) the purpose of the file;
(3) the groups of persons on whom data are stored;
(4) the nature of the data to be stored, and any of the data listed in the first sentence of Article 6 of the Council of Europe Convention of 28 January 1981 which are strictly necessary;
(5) the type of personal data used to open the file;
(6) the supply or input of the data to be stored;
(7) the conditions under which the personal data stored in the file may be communicated, to which recipients and under what procedure;
(8) the time limits for examination and duration of storage;
(9) the method of establishing the audit log.
The joint supervisory body provided for in Article 24 shall immediately be advised by the Director of Europol of the plan to order the opening of such a data file and shall receive the dossier so that it may address any comments it deems necessary to the Management Board.
2. If the urgency of the matter is such as to preclude obtaining the approval of the Management Board as required under paragraph 1, the Director, on his own initiative or at the request of the Member States concerned, may by a reasoned decision, order the opening of a data file. At the same time he shall inform the members of the Management Board of his decision. The procedure pursuant to paragraph 1 shall then be set in motion without delay and completed as soon as possible.
TITLE IV
COMMON PROVISIONS ON INFORMATION PROCESSING
Article 13
Duty to notify
Europol shall promptly notify the national units and also their liaison officers if the national units so request, of any information concerning their Member State and of connections identified between criminal offences for which Europol is competent under Article 2. Information and intelligence concerning other serious criminal offences, of which Europol becomes aware in the course of its duties, may also be communicated.
Article 14
Standard of data protection
1. By the time of the entry into force of this Convention at the latest, each Member State shall, under its national legislation, take the necessary measures in relation to the processing of personal data in data files in the framework of this Convention to ensure a standard of data protection which at least corresponds to the standard resulting from the implementation of the principles of the Council of Europe Convention of 28 January 1981, and, in doing so, shall take account of Recommendation No R (87) 15 of the Committee of Ministers of the Council of Europe of 17 September 1987 concerning the use of personal data in the police sector.
2. The communication of personal data provided for in this Convention may not begin until the data protection rules laid down in paragraph 1 above have entered into force on the territory of each of the Member States involved in such communication.
3. In the collection, processing and utilization of personal data Europol shall take account of the principles of the Council of Europe Convention of 28 January 1981 and of Recommendation No R (87) 15 of the Committee of Ministers of the Council of Europe of 17 September 1987.
Europol shall also observe these principles in respect of non-automated data held in the form of data files, i.e. any structured set of personal data accessible in accordance with specific criteria.
Article 15
Responsibility in data protection matters
1. Subject to other provisions in this Convention, the responsibility for data stored at Europol, in particular as regards the legality of the collection, the transmission to Europol and the input of data, as well as their accuracy, their up-to-date nature and verification of the storage time-limits, shall lie with:
(1) the Member State which input or otherwise communicated the data;
(2) Europol in respect of data communicated to Europol by third parties or which result from analyses conducted by Europol.
2. In addition, subject to other provisions in this Convention, Europol shall be responsible for all data received by Europol and processed by it, whether such data be in the information system referred to in Article 8, in the data files opened for the purposes of analysis referred to in Article 10, or in the index system referred to in Article 11, or in the data files referred to in Article 14 (3).
3. Europol shall store data in such a way that it can be established by which Member State or third party the data were transmitted or whether they are the result of an analysis by Europol.
Article 16
Provisions on the drawing up of reports
On average, Europol shall draw up reports for at least one in ten retrievals of personal data – and for each retrieval made within the information system referred to in Article 7 – in order to check whether they are permissible under law. The data contained in the reports shall only be used for that purpose by Europol and the supervisory bodies referred to in Articles 23 and 24 and shall be deleted after six months, unless the data are further required for ongoing control. The details shall be decided upon by the Management Board following consultation with the joint supervisory body.
Article 17
Rules on the use of data
1. Personal data retrieved from the information system, the index system or data files opened for the purposes of analysis and data communicated by any other appropriate means, may be transmitted or utilized only by the competent authorities of the Member States in order to prevent and combat crimes falling within the competence of Europol and to combat other serious forms of crime.
The data referred to in the first paragraph shall be utilized in compliance with the law of the Member State responsible for the authorities which utilized the data.
Europol may utilize the data referred to in paragraph 1 only for the performance of its tasks as referred to in Article 3.
2. If, in the case of certain data, the communicating Member State or the communicating third State or third body as referred to in Article 10 (4) stipulates particular restrictions on use to which such data is subject in that Member State or by third parties, such restrictions shall also be complied with by the user of the data except in the specific case where national law lays down that the restrictions on use be waived for judicial authorities, legislative bodies or any other independent body set up under the law and made responsible for supervising the national competent authorities within the meaning of Article 2 (4). In such cases, the data may only be used after prior consultation of the communicating Member State whose interests and opinions must be taken into account as far as possible.
3. Use of the data for other purposes or by authorities other than those referred to in Article 2 of this Convention shall be possible only after prior consultation of the Member State which transmitted the data insofar as the national law of that Member State permits.
Article 18
Communication of data to third states and third bodies
1. Europol may under the conditions laid down in paragraph 4 communicate personal data which it holds to third states and third bodies within the meaning of Article 10 (4), where:
(1) this is necessary in individual cases for the purposes of preventing or combating criminal offences for which Europol is competent under Article 2;
(2) an adequate level of data protection is ensured in that State or that body, and
(3) this is permissible under the general rules within the meaning of paragraph 2.
2. In accordance with the procedure in Title VI of the Treaty on European Union, and taking into account the circumstances referred to in paragraph 3, the Council, acting unanimously, shall determine the general rules for the communication of personal data by Europol to the third States and third bodies within the meaning of Article 10 (4). The Management Board shall prepare the Council decision and consult the joint supervisory body referred to in Article 24.
3. The adequacy of the level of data protection afforded by third States and third bodies within the meaning of Article 10 (4) shall be assessed taking into account all the circumstances which play a part in the communication of personal data; in particular, the following shall be taken into account:
(1) the nature of the data;
(2) the purpose for which the data is intended;
(3) the duration of the intended processing; and
(4) the general or specific provisions applying to the third States and third bodies within the meaning of Article 10 (4).
4. If the data referred to have been communicated to Europol by a Member State, Europol may communicate them to third States and third bodies only with the Member State's consent. The Member State may give its prior consent, in general or other terms, to such communication; that consent may be withdrawn at any time.
If the data have not been communicated by a Member State, Europol shall satisfy itself that communication of those data is not liable to:
(1) obstruct the proper performance of the tasks falling within a Member State's sphere of competence;
(2) jeopardize the security and public order of a Member State or otherwise prejudice its general welfare.
5. Europol shall be responsible for the legality of the authorizing communication. Europol shall keep a record of communications of data and of the grounds for such communications. The communication of data shall be authorized only if the recipient gives an undertaking that the data will be used only for the purpose for which it was communicated. This shall not apply to the communication of personal data required for a Europol inquiry.
6. Where the communication provided for in paragraph 1 concerns information subject to the requirement of confidentiality, it shall be permissible only insofar as an agreement on confidentiality exists between Europol and the recipient.
Article 19
Right of access
1. Any individual wishing to exercise his right of access to data relating to him which have been stored within Europol or to have such data checked may make a request to that effect free of charge to the national competent authority in any Member State he wishes, and that authority shall refer it to Europol without delay and inform the enquirer that Europol will reply to him directly.
2. The request must be fully dealt with by Europol within three months following its receipt by the national competent authority of the Member State concerned.
3. The right of any individual to have access to data relating to him or to have such data checked shall be exercised in accordance with the law of the Member State where the right is claimed, taking into account the following provisions:
Where the law of the Member State applied to provides for a communication concerning data, such communication shall be refused if such refusal is necessary to:
(1) enable Europol to fulfil its duties properly;
(2) protect security and public order in the Member States or to prevent crime;
(3) protect the rights and freedoms of third parties,
considerations which it follows cannot be overridden by the interests of the person concerned by the communication of the information.
4. The right to communication of information in accordance with paragraph 3 shall be exercised according to the following procedures:
(1) as regards data entered within the information system defined in Article 8, a decision to communicate such data cannot be taken unless the Member State which entered the data and the Member States directly concerned by communication of such data have first had the opportunity of stating their position, which may extend to a refusal to communicate the data. The data which may be communicated and the arrangements for communicating such data shall be indicated by the Member State which entered the data;
(2) as regards data entered within the information system by Europol, the Member States directly concerned by communication of such data must first have had the opportunity of stating their position, which may extend to a refusal to communicate the data;
(3) as regards data entered within the work files for the purposes of analysis as defined in Article 10, the communication of such data shall be conditional upon the consensus of Europol and the Member States participating in the analysis, within the meaning of Article 10 (2), and the consensus of the Member State(s) directly concerned by the communication of such data.
Should one or more Member State or Europol have objected to a communication concerning data, Europol shall notify the person concerned that it has carried out the checks, without giving any information which might reveal to him whether or not he is known.
5. The right to the checking of information shall be exercised in accordance with the following procedures:
Where the national law applicable makes no provision for a communication concerning data or in the case of a simple request for a check, Europol, in close cooperation with the national authorities concerned, shall carry out the checks and notify the enquirer that it has done so without giving any information which might reveal to him whether or not he is known.
6. In its reply to a request for a check or for access to data, Europol shall inform the enquirer that he may appeal to the joint supervisory body if he is not satisfied with the decision. The latter may also refer the matter to the joint supervisory body if there has been no response to his request within the time-limits laid down in its Article.
7. If the enquirer lodges an appeal to the joint supervisory body provided for in Article 24, the appeal shall be examined by that body.
Where the appeal relates to a communication concerning data entered by a Member State in the information system, the joint supervisory body shall take its decision in accordance with the national law of the Member State in which the application was made. The joint supervisory body shall first consult the national supervisory body or the competent judicial body in the Member State which was the source of the data. Either national body shall make the necessary checks, in particular to establish whether the decision to refuse was taken in accordance with paragraphs 3 and 4 (1) of this Article. On confirmation of that, the decision, which may extend to a refusal to communicate any information, shall be taken by the joint supervisory body in close cooperation with the national supervisory body or competent judicial body.
Where the appeal relates to a communication concerning data entered by Europol in the information system or data stored in the work files for the purposes of analysis, the joint supervisory body, in the event of persistent objections from Europol or a Member State, may not overrule such objections unless by a majority of two-thirds of its members after having heard Europol or the Member State concerned. If there is no such majority, the joint supervisory body shall notify the enquirer that it has carried out the checks, without giving any information which might reveal to him whether or not he is known.
Where the appeal concerns the checking of data entered by a Member State in the information system, the joint supervisory body shall ensure that the necessary checks have been carried out correctly in close cooperation with the national supervisory body of the Member State which entered the data. The joint supervisory body shall notify the enquirer that it has carried out the checks, without giving any information which might reveal to him whether or not he is known.
Where the appeal concerns the checking of data entered by Europol in the information system or of data stored in the work files for the purposes of analysis, the joint supervisory body shall ensure that the necessary checks have been carried out by Europol. The joint supervisory body shall notify the enquirer that it has carried out the checks, without giving any information which might reveal to him whether or not he is known.
8. The above provisions shall apply mutatis mutandis to non-automated data held by Europol in the form of data files, i.e. any structured set of personal data accessible in accordance with specific criteria.
Article 20
Correction and deletion of data
1. If it emerges that data held by Europol which have been communicated to it by third States or third bodies or which are the result of its own analyses are incorrect or that their input or storage contravenes this Convention, Europol shall correct or delete such data.
2. If data that are incorrect or that contravene this Convention have been passed directly to Europol by Member States, they shall be obliged to correct or delete them in collaboration with Europol. If incorrect data are transmitted by another appropriate means or if the errors in the data supplied by Member States are due to faulty transmission or have been transmitted in breach of the provisions of this Convention or if they result from their being entered, taken over or stored in an incorrect manner or in breach of the provisions of this Convention by Europol, Europol shall be obliged to correct them or delete them in collaboration with the Member States concerned.
3. In the cases referred to in paragraphs 1 and 2, the Member States which are recipients of the data shall be notified forthwith. The recipient Member States shall also correct or delete those data.
4. Any person shall have the right to ask Europol to correct or delete incorrect data concerning him.
Europol shall inform the enquirer that data concerning him have been corrected or deleted. If the enquirer is not satisfied with Europol's reply or if he has received no reply within three months, he may refer the matter to the joint supervisory body.
Article 21
Time limits for the storage and deletion of data files
1. Data in data files shall be held by Europol only for as long as is necessary for the performance of its tasks. The need for continued storage shall be reviewed no later than three years after the input of data. Review of data stored in the information system and its deletion shall be carried out by the inputting unit. Review of data stored in other Europol data files and their deletion shall be carried out by Europol. Europol shall automatically inform the Member States three months in advance of the expiry of the time limits for reviewing the storage of data.
2. During the review, the units referred to in the third and fourth sentences of paragraph 1 above may decide on continued storage of data until the next review if this is still necessary for the performance of Europol's tasks. If no decision is taken on the continued storage of data, those data shall automatically be deleted.
3. Storage of personal data relating to individuals as referred to in point 1 of the first subparagraph of Article 10 (1) may not exceed a total of three years. Each time limit shall begin to run afresh on the date on which an event leading to the storage of data relating to that individual occurs. The need for continued storage shall be reviewed annually and the review documented.
4. Where a Member State deletes from its national data files data communicated to Europol which are stored in other Europol data files, it shall inform Europol accordingly. In such cases, Europol shall delete the data unless it has further interest in them, based on intelligence that is more extensive than that possessed by the communicating Member State. Europol shall inform the Member State concerned of the continued storage of such data.
5. Deletion shall not occur if it would damage the interests of the data subject which require protection. In such cases, the data may be used only with the consent of the data subject.
Article 22
Correction and storage of data in paper files
1. If it emerges that an entire paper file or data included in that file held by Europol are no longer necessary for the performance of Europol's tasks, or if the information concerned is overall in contravention of this Convention, the paper file or data concerned shall be destroyed. The paper file or data concerned must be marked as not for use until they have been effectively destroyed.
Destruction may not take place if there are grounds for assuming that the legitimate interests of the data subject would otherwise be prejudiced. In such cases, the paper file must bear the same note prohibiting all use.
2. If it emerges that data contained in the Europol paper files are incorrect, Europol shall be obliged to correct them.
3. Any person covered by a Europol paper file may claim the right vis-ŕ- vis Europol to correction or destruction of paper files or the inclusion of a note. Article 20 (4) and Article 24 (2) and (7) shall be applicable.
Article 23
National Supervisory Body
1. Each Member State shall designate a national supervisory body, the task of which shall be to monitor independently, in accordance with its respective national law, the permissibility of the input, the retrieval and any communication to Europol of personal data by the Member State concerned and to examine whether this violates the rights of the data subject. For this purpose, the supervisory body shall have access at the national unit or at the liaison officers' premises to the data entered by the Member State in the information system and in the index system in accordance with the relevant national procedures.
For their supervisory purposes, national supervisory bodies shall have access to the offices and documents of their respective liaison officers at Europol.
In addition, in accordance with the relevant national procedures, the national supervisory bodies shall supervise the activities of national units under Article 4 (4) and the activities of liaison officers under Article 5 (3), points 1 and 3 and Article 5 (4) and (5), insofar as such activities are of relevance to the protection of personal data.
2. Each individual shall have the right to request the national supervisory body to ensure that the entry or communication of data concerning him to Europol in any form and the consultation of the data by the Member State concerned are lawful.
This right shall be exercised in accordance with the national law of the Member State to the national supervisory body of which the request is made.
Article 24
Joint Supervisory Body
1. An independent joint supervisory body shall be set up, which shall have the task of reviewing, in accordance with this convention, the activities of Europol in order to ensure that the rights of the individual are not violated by the storage, processing and utilization of the data held by Europol. In addition, the joint supervisory body shall monitor the permissibility of the transmission of data originating from Europol. The joint supervisory body shall be composed of not more than two members or representatives (where appropriate assisted by alternates) of each of the national supervisory bodies guaranteed to be independent and having the necessary abilities, and appointed for five years by each Member State. Each delegation shall be entitled to one vote.
The joint supervisory body shall appoint a chairman from among its members.
In the performance of their duties, the members of the joint supervisory body shall not receive instructions from any other body.
2. Europol must assist the joint supervisory body in the performance of the latter's tasks. In doing so, it shall, in particular:
(1) supply the information it requests, give it access to all documents and paper files as well as access to the data stored in the system; and
(2) allow it free access at any time to all its premises;
(3) carry out the joint supervisory body's decisions on appeals in accordance with the provisions of Articles 19 (7) and 20 (4).
3. The joint supervisory body shall also be competent for the examination of questions relating to implementation and interpretation in connection with Europol's activities as regards the processing and utilization of personal data, for the examination of questions relating to checks carried out independently by the national supervisory bodies of the Member States or relating to the exercise of the right to information, as well as for drawing up harmonized proposals for common solutions to existing problems.
4. Each individual shall have the right to request the joint supervisory body to ensure that the manner in which his personal data have been collected, stored, processed and utilized by Europol is lawful and accurate.
5. If the joint supervisory body notes any violations of the provisions of this Convention in the storage, processing or utilization of personal data, it shall make any complaints it deems necessary to the Director of Europol and shall request him to reply within a time limit to be determined by it. The Director shall keep the Management Board informed of the entire procedure. In the event of any difficulty, the joint supervisory body shall refer the matter to the Management Board.
6. The joint supervisory body shall draw up activity reports at regular intervals. In accordance with the procedure laid down in Title VI of the Treaty on European Union, these shall be forwarded to the Council; the Management Board shall first have the opportunity to deliver an opinion, which shall be attached to the reports.
The joint supervisory body shall decide whether or not to publish its activity report, and, if it decides to do so, determine how it should be published.
7. The joint supervisory body shall unanimously adopt its rules of procedure, which shall be submitted for the unanimous approval of the Council. It shall set up internally a committee comprising one qualified representative from each Member State with entitlement to a vote. The committee shall have the task of examining the appeals provided for in Articles 19 (7) and 20 (4) by ail appropriate means. Should they so request, the parties, assisted by their advisers if they so wish, shall be heard by the committee. The decisions taken in this context shall be final as regards all the parties concerned.
8. It may also set up one or more other committees.
9. It shall be consulted on that part of the budget which concerns it. Its opinion shall be annexed to the draft budget in question.
10. It shall be assisted by a secretariat, the tasks of which shall be defined in the rules of procedure.
Article 25
Data security
1. Europol shall take the necessary technical and organizational measures to ensure the implementation of this Convention. Measures shall only be necessary where the effort they involve is proportionate to the objective they are designed to achieve in terms of protection.
2. In respect of automated data processing at Europol each Member State and Europol shall implement measures designed to:
(1) deny unauthorized persons access to data processing equipment used for processing personal data (equipment access control);
(2) prevent the unauthorized reading, copying, modification or removal of data media (data media control);
(3) prevent the unauthorized input of data and the unauthorized inspection, modification or deletion of stored personal data (storage control);
(4) prevent the use of automated data processing systems by unauthorized persons using data communication equipment (user control);
(5) ensure that persons authorized to use an automated data processing system only have access to the data covered by their access authorization (data access control);
(6) ensure that it is possible to verify and establish to which bodies personal data may be transmitted using data communication equipment (communication control);
(7) ensure that it is subsequently possible to verify and establish which personal data have been input into automated data processing systems and when and by whom the data were input (input control);
(8) prevent unauthorized reading, copying, modification or deletion of personal data during transfers of personal data or during transportation of data media (transport control);
(9) ensure that installed systems may, in case of interruption, be immediately restored (recovery);
(10) ensure that the functions of the system perform without fault, that the appearance of faults in the functions is immediately reported (reliability) and that stored data cannot be corrupted by means of a malfunctioning of the system (integrity).
TITLE V
LEGAL STATUS, ORGANIZATION AND FINANCIAL PROVISIONS
Article 26
Legal capacity
1. Europol shall have legal personality.
2. Europol shall enjoy in each Member State the most extensive legal and contractual capacity available to legal persons under that State's law. Europol may in particular acquire and dispose of movable or immovable property and be a party to legal proceedings.
3. Europol shall be empowered to conclude a headquarters agreement with the Kingdom of the Netherlands and to conclude with third States and third bodies within the meaning of Article 10 (4) the necessary confidentiality agreements pursuant to Article 18 (6) as well as other arrangements in the framework of the rules laid down unanimously by the Council on the basis of this Convention and of Title VI of the Treaty on European Union.
Article 27
Organs of Europol
The organs of Europol shall be:
(1) the Management Board;
(2) the Director;
(3) the Financial Controller;
(4) the Financial Committee.
Article 28
Management Board
1. Europol shall have a Management Board. The Management Board:
(1) shall take part in the extension of Europol's objective (Article 2 (2));
(2) shall define unanimously liaison officers' rights and obligations towards Europol (Article 5);
(3) shall decide unanimously on the number of liaison officers the Member States may send to Europol (Article 5);
(4) shall prepare the implementing rules governing data files (Article 10);
(5) shall take part in the adoption of rules governing Europol's relations with third States and third bodies within the meaning of Article 10 (4) (Articles 10, 18 and 42);
(6) shall unanimously decide on details concerning the design of the index system (Article 11);
(7) shall approve by a two-thirds majority orders opening data files (Article 12);
(8) may deliver opinions on the comments and reports of the joint supervisory body (Article 24);
(9) shall examine problems which the joint supervisory body brings to is attention (Article 24 (5));
(10) shall decide on the details of the procedure for checking the legal character of retrievals in the information system (Article 16);
(11) shall take part in the appointment and dismissal of the Director and Deputy Directors (Article 29);
(12) shall oversee the proper performance of the Director's duties (Articles 7 and 29);
(13) shall take part in the adoption of staff regulations (Article 30);
(14) shall take part in the preparation of agreements on confidentiality and the adoption of provisions on the protection of confidentiality (Articles 18 and 31);
(15) shall take part in the drawing up of the budget, including the establishment plan, the auditing and the discharge to be given to the Director (Articles 35 and 36);
(16) shall adopt unanimously the five-year financing plan (Article 35);
(17) shall appoint unanimously the financial controller and oversee the performance of his duties (Article 35);
(18) shall take part in the adoption of the financial regulation (Article 35);
(19) shall unanimously approve the conclusion of the headquarters agreement (Article 37);
(20) shall adopt unanimously the rules for the security clearance of Europol officials;
(21) shall act by a two-thirds majority in disputes between a Member State and Europol or between Member States concerning compensation paid under the liability for unauthorized or incorrect processing of data (Article 38);
(22) shall take part in any amendment of this Convention (Article 43);
(23) shall be responsible for any other tasks assigned to it by the Council particularly in provisions for the implementation of this Convention.
2. The Management Board shall be composed of one representative of each Member State. Each member of the Management Board shall have one vote.
3. Each member of the Management Board may be represented by an alternate member; in the absence of the full member, the alternate member may exercise his right to vote.
4. The Commission of the European Communities shall be invited to attend meetings of the Management Board with non-voting status. However, the Management Board may decide to meet without the Commission representative.
5. The members or alternate members shall be entitled to be accompanied and advised by experts from their respective Member States at meetings of the Management Board.
6. The Management Board shall be chaired by the representative of the Member State holding the Presidency of the Council.
7. The Management Board shall unanimously adopt its rules of procedure.
8. Abstentions shall not prevent the Management Board from adopting decisions which must be taken unanimously.
9. The Management Board shall meet at least twice a year.
10. The Management Board shall adopt unanimously each year:
(1) a general report on Europol's activities during the previous year;
(2) a report on Europol's future activities taking into account Member States' operational requirements and budgetary and staffing implications for Europol.
These reports shall be submitted to the Council in accordance with the procedure laid down in Title VI of the Treaty on European Union.
Article 29
Director
1. Europol shall be headed by a Director appointed by the Council, acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union after obtaining the opinion of the Management Board, for a four-year period renewable once.
2. The Director shall be assisted by a number of Deputy Directors as determined by the Council and appointed for a four-year period renewable once, in accordance with the procedure laid down in paragraph 1. Their tasks shall be defined in greater detail by the Director.
3. The Director shall be responsible for:
(1) performance of the tasks assigned to Europol;
(2) day-to-day administration;
(3) personnel management;
(4) proper preparation and implementation of the Management Board's decisions;
(5) preparing the draft budget, draft establishment plan and draft five-year financing plan and implementing Europol's budget;
(6) all other tasks assigned to him in this Convention or by the Management Board.
4. The Director shall be accountable to the Management Board in respect of the performance of his duties. He shall attend its meetings.
5. The Director shall be Europol's legal representative.
6. The Director and the Deputy Directors may be dismissed by a decision of the Council, to be taken in accordance with the procedure laid down in Title VI of the Treaty on European Union by a two-thirds majority of the Member States, after obtaining the opinion of the Management Board.
7. Notwithstanding paragraphs 1 and 2, the first term of office after entry into force of this Convention shall be five years for the Director, four years for his immediate Deputy and three years for the second Deputy Director.
Article 30
Staff
1. The Director, Deputy Directors and the employees of Europol shall be guided in their actions by the objectives and tasks of Europol and shall not take or seek orders from any government, authority, organization or person outside Europol, save as otherwise provided in this Convention and without prejudice to Title VI of the Treaty on European Union.
2. The Director shall be in charge of the Deputy Directors and employees of Europol. He shall engage and dismiss employees. In selecting employees, in addition to having regard to personal suitability and professional qualifications, he shall take into account the need to ensure the adequate representation of nationals of all Member States and of the official languages of the European Union.
3. Detailed arrangements shall be laid down in staff regulations which the Council shall, after obtaining the opinion of the Management Board, adopt unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union.
Article 31
Confidentiality
1. Europol and the Member States shall take appropriate measures to protect information subject to the requirement of confidentiality which is obtained by or exchanged with Europol on the basis of this Convention. To this end the Council shall unanimously adopt appropriate rules on confidentiality prepared by the Management Board and submitted to the Council in accordance with the procedure laid down in Title VI of the Treaty on European Union.
2. Where Europol has entrusted persons with a sensitive activity, Member States shall undertake to arrange, at the request of the Director of Europol, for security screening of their own nationals to be carried out in accordance with their national provisions and to provide each other with mutual assistance for the purpose. The relevant authority under national provisions shall inform Europol only of the results of the security screening, which shall be binding on Europol.
3. Each Member State and Europol may entrust with the processing of data at Europol, only those persons who have had special training and undergone security screening.
Article 32
Obligation of discretion and confidentiality
1. Europol organs, their members, the Deputy Directors, employees of Europol and liaison officers shall refrain from any action and any expression of opinion which might be harmful to Europol or prejudice its activities.
2. Europol organs, their members, the Deputy Directors, employees of Europol and liaison officers, as well as any other person under a particular obligation of discretion or confidentiality, shall be bound not to disclose any facts or information which come to their knowledge in the performance of their duties or the exercise of their activities to any unauthorized person or to the public. This shall not apply to facts or information too insignificant to require confidentiality. The obligation of discretion and confidentiality shall apply even after leaving office or employment, or after termination of activities. The particular obligation laid down in the first sentence shall be notified by Europol, and a warning given of the legal consequences of any infringement; a written record shall be drawn up of such notification.
3. Europol organs, their members, the Deputy Directors, employees of Europol and liaison officers, as well as persons under the obligation provided for in paragraph 2, may not give evidence in or outside court or make any statements on any facts or information which come to their knowledge in the performance of their duties or the exercise of their activities, without reference to the Director or, in the case of the Director himself, to the Management Board.
The Director or Management Board, depending on the case, shall approach the judicial body or any other competent body with a view to taking the necessary measures under the national law applicable to the body approached; such measures may either be to adjust the procedures for giving evidence in order to ensure the confidentiality of the information, or, provided that the national law concerned so permits, to refuse to make any communication concerning data insofar as is vital for the protection of the interests of Europol or of a Member State.
Where a Member State's legislation provides for the right to refuse to give evidence, persons asked to give evidence must obtain permission to do so. Permission shall be granted by the Director and, as regards evidence to be given by the Director, by the Management Board. Where a liaison officer is asked to give evidence concerning information he receives from Europol, such permission shall be given after the agreement of the Member State responsible for the officer concerned has been obtained.
Furthermore, if the possibility exists that the evidence may extend to information and knowledge which a Member State has communicated to Europol or which clearly involve a Member State, the position of that Member State concerning the evidence must be sought before permission is given.
Permission to give evidence may be refused only insofar as this is necessary to protect overriding interests of Europol or of a Member State or States that need protection.
This obligation shall apply even after leaving office or employment or after termination of activities.
4. Each Member State shall treat any infringement of the obligation of discretion or confidentiality laid down in paragraphs 2 and 3 as a breach of the obligations imposed by its law on official or professional secrets or its provisions for the protection of confidential material.
Where appropriate, each Member State shall introduce, no later than the date of entry into force of this Convention, the rules under national law or the provisions required to proceed against breaches of the obligations of discretion or confidentiality referred to in paragraphs 2 and 3. It shall ensure that the rules and provisions concerned apply also to its own employees who have contact with Europol in the course of their work.
Article 33
Languages
1. Reports and all other papers and documentation placed before the Management Board shall be submitted in all official languages of the European Union; the working languages of the Management Board shall be the official languages of the European Union.
2. The translations required for Europol's work shall be provided by the translation centre of the European Union institutions.
Article 34
Informing the European Parliament
1. The Council Presidency shall each year forward a special report to the European Parliament on the work of Europol. The European Parliament shall be consulted should this Convention be amended in any way.
2. The Council Presidency or its representative appointed by the Presidency shall, with respect to the European Parliament, take into account the obligations of discretion and confidentiality.
3. The obligations laid down in this Article shall be without prejudice to the rights of national parliaments, to Article K.6 of the Treaty on European Union and to the general principles applicable to relations with the European Parliament pursuant to Title VI of the Treaty on European Union.
Article 35
Budget
1. Estimates shall be drawn up of all of Europol's income and expenditure including all costs of the joint supervisory body and of the secretariat set up by it under Article 22 for each financial year and these items entered in the budget; an establishment plan shall be appended to the budget. The financial year shall begin on 1 January and end on 31 December.
The income and expenditure shown in the budget shall be in balance.
A five-year financing plan shall be drawn up together with the budget.
2. The budget shall be financed from Member States' contributions and by other incidental income. Each Member State's financial contribution shall be determined according to the proportion of its gross national product to the sum total of the gross national products of the Member States for the year preceding the year in which the budget is drawn up. For the purposes of this paragraph, "gross national product" shall mean gross national product as determined in accordance with Council Directive 89/130/EEC, Euratom of 13 February 1989 on the harmonization of the compilation of gross national product at market prices.
3. By 31 March each year at the latest, the Director shall draw up the draft budget and draft establishment plan for the following financial year and shall submit them, after examination by the Financial Committee, to the Management Board together with the draft five-year financing plan.
4. The Management Board shall take a decision on the five-year financing plan. It shall act unanimously.
5. After obtaining the opinion of the Management Board, the Council shall, in accordance with the procedure laid down in Title VI of the Treaty on European Union, adopt Europol's budget by 30 June of the year preceding the financial year at the latest. It shall act unanimously. The adoption of the budget by the Council shall entail the obligation for each Member State to make available promptly the financial contribution due from it.
6. The Director shall implement the budget in accordance with the financial regulation provided for in paragraph 9.
7. Monitoring of the commitment and disbursement of expenditure and of the establishment and collection of income shall be carried out by a financial controller from an official audit body of one of the Member States who shall be appointed by the Management Board, acting unanimously, and shall be accountable to it. The financial regulation may make provision for ex-post monitoring by the financial controller in the case of certain items of income or expenditure.
8. The Financial Committee shall be composed of one budgetary representative from each Member State. Its task shall be to prepare for discussions on budgetary and financial matters.
9. The Council shall, in accordance with the procedure laid down in Title VI of the Treaty on European Union, unanimously adopt the financial regulation, specifying in particular the detailed rules for drawing up, amending and implementing the budget and for monitoring its implementation as well as for the manner of payment of financial contributions by the Member States.
Article 36
Auditing
1. The accounts in respect of all income and expenditure entered in the budget together with the balance sheet showing Europol's assets and liabilities shall be subject to an annual audit in accordance with the financial regulation. For this purpose the Director shall submit a report on the annual accounts by 31 May of the following year at the latest.
2. The audit shall be carried out by a joint audit committee composed of three members, appointed by the Court of Auditors of the European Communities on a proposal from its President. The term of office of the members shall be three years; these shall alternate in such a way that each year the member who has been on the audit committee for three years shall be replaced. Notwithstanding the provisions of the second sentence, the term of office of the member that, after drawing lots:
– is first, shall be two years,
– is second, shall be three years,
– is third, shall be four years,
in the initial composition of the joint audit committee after Europol has begun to operate.
Any costs arising from the audit shall be charged to the budget provided for in Article 35.
3. The joint audit committee shall in accordance with the procedure laid down in Title VI of the Treaty on European Union submit to the Council an audit report on the annual accounts; prior thereto the Director and Financial Controller shall be given an opportunity to express an opinion on the audit report and the report shall be discussed by the Management Board.
4. The Europol Director shall provide the members of the joint audit committee with all information and every assistance which they require in order to perform their task.
5. A decision on the discharge to be given to the Director in respect of budget implementation for the financial year in question shall be taken by the Council, after examination of the report on the annual accounts.
6. The detailed rules for performing audits shall be laid down in the Financial Regulation.
Article 37
Headquarters agreement
The necessary arrangements concerning the accommodation to be provided for Europol in the headquarters State and the facilities to be made available by that State as well as the particular rules applicable in the Europol headquarters State to members of Europol's organs, its Deputy Directors, employees and members of their families shall be laid down in a headquarters agreement between Europol and the Kingdom of the Netherlands to be concluded after obtaining the unanimous approval of the Management Board.
TITLE VI
LIABILITY AND LEGAL PROTECTION
Article 38
Liability for unauthorized or incorrect data processing
1. Each Member State shall be liable, in accordance with its national law, for any damage caused to an individual as a result of legal or factual errors in data stored or processed at Europol. Only the Member State in which the event which gave rise to the damage occurred may be the subject of an action for compensation on the part of the injured party, who shall apply to the courts having jurisdiction under the national law of the Member State involved. A Member State may not plead that another Member State had transmitted inaccurate data in order to avoid its liability under its national legislation vis-ŕ-vis an injured party.
2. If these legal or factual errors occurred as a result of data erroneously communicated or of failure to comply with the obligations laid down in this Convention on the part of one or more Member States or as a result of unauthorized or incorrect storage or processing by Europol, Europol or the other Member State in question shall be bound to repay, on request, the amounts paid as compensation unless the data were used by the Member State in the territory of which the damage was caused in breach of this Convention.
3. Any dispute between that Member State and Europol or another Member State over the principle or amount of the repayment must be referred to the Management Board, which shall settle the matter by a two-thirds majority.
Article 39
Other liability
1. Europol's contractual liability shall be governed by the law applicable to the contract in question.
2. In the case of non-contractual liability, Europol shall be obliged, independently of any liability under Article 38, to make good any damage caused through the fault of its organs, of its Deputy Directors or of its employees in the performance of their duties, insofar as it may be imputed to them and regardless of the different procedures for claiming damages which exist under the law of the Member States.
3. The injured party shall have the right to demand that Europol refrain from or drop any action.
4. The national courts of the Member States competent to deal with disputes involving Europol's liability as referred to in this Article shall be determined by reference to the relevant provisions of the Brussels Convention of 27 September 1968 on Jurisdiction and the Enforcement of Judgments in Civil and Commercial Matters, as later amended by Accession Agreements.
Article 40
Settlement of disputes
1. Disputes between Member States on the interpretation or application of this Convention shall in an initial stage be discussed by the Council in accordance with the procedure set out in Title VI of the Treaty on European Union with the aim of finding a settlement.
2. When such disputes are not so settled within six months, the Member States who are parties to the dispute shall decide, by agreement among themselves, the modalities according to which they shall be settled.
3. The provisions on appeals referred to in the rules relating to the conditions of employment applicable to temporary and auxiliary staff of the European Communities shall apply, mutatis mutandis, to Europol staff.
Article 41
Privileges and immunities
1. Europol, the members of its organs and the Deputy Directors and employees of Europol shall enjoy the privileges and immunities necessary for the performance of their tasks in accordance with a Protocol setting out the rules to be applied in all Member States.
2. The Kingdom of the Netherlands and the other Member States shall agree in the same terms that liaison officers seconded from the other Member States as well as members of their families shall enjoy those privileges and immunities necessary for the proper performance of the tasks of the liaison officers at Europol.
3. The Protocol referred to in paragraph 1 shall be adopted by the Council acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union and approved by the Member States in accordance with their respective constitutional requirements.
TITLE VII
FINAL PROVISIONS
Article 42
Relations with third states and third bodies
1. Insofar as is relevant for the performance of the tasks described in Article 3, Europol shall establish and maintain cooperative relations with third bodies within the meaning of Article 10 (4), points 1 to 3. The Management Board shall unanimously draw up rules governing such relations. This provision shall be without prejudice to Article 10 (4) and (5) and Article 18 (2); exchanges of personal data shall take place only in accordance with the provisions of Titles II to IV of this Convention.
2. Insofar as is required for the performance of the tasks described in Article 3, Europol may also establish and maintain relations with third States and third bodies within the meaning of Article 10 (4), points 4, 5, 6 and 7. Having obtained the opinion of the Management Board, the Council, acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union, shall draw up rules governing the relations referred to in the first sentence. The third sentence of paragraph 1 shall apply mutatis mutandis.
Article 43
Amendment of the Convention
1. In accordance with the procedure laid down in Title VI of the Treaty on European Union, the Council, acting on a proposal from a Member State and, after consulting the Management Board, shall unanimously decide, within the framework of Article K.1 (9) of the Treaty on European Union, on any amendments to this Convention which it shall recommend to the Member States for adoption in accordance with their respective constitutional requirements.
2. The amendments shall enter into force in accordance with Article 45 (2) of this Convention.
3. However, the Council, acting unanimously in accordance with the procedure laid down in Title VI of the Treaty on European Union, may decide, on the initiative of a Member State and after the Management Board has discussed the matter, to amplify, amend or supplement the definitions of forms of crime contained in the Annex. It may in addition decide to introduce new definitions of the forms of crime listed in the Annex.
4. The Secretary-General of the Council of the European Union shall notify all Member States of the date of entry into force of the amendments.
Article 44
Reservations
Reservations shall not be permissible in respect of this Convention.
Article 45
Entry into force
1. This Convention shall be subject to adoption by the Member States in accordance with their respective constitutional requirements.
2. Member States shall notify the depositary of the completion of their constitutional requirements for adopting this Convention.
3. This Convention shall enter into force on the first day of the month following the expiry of a three-month period after the notification, referred to in paragraph 2, by the Member State which, being a member of the European Union on the date of adoption by the Council of the act drawing up this Convention, is the last to fulfil that formality.
4. Without prejudice to paragraph 2, Europol shall not take up its activities under this Convention until the last of the acts provided for in Articles 5 (7), 10 (1), 24 (7), 30 (3), 31 (1), 35 (9), 37 and 41 (1) and (2) enters into force.
5. When Europol takes up its activities, the activities of the Europol Drugs Unit under the joint action concerning the Europol Drugs Unit of 10 March 1995 shall come to an end. At the same time, all equipment financed from the Europol Drugs Unit joint budget, developed or produced by the Europol Drugs Unit or placed at its disposal free of charge by the headquarters State for its permanent use, together with that Unit's entire archives and independently administered data files shall become the property of Europol.
6. Once the Council has adopted the act drawing up this Convention, Member States, acting either individually or in common, shall take all preparatory measures under their national law which are necessary for the commencement of Europol activities.
Article 46
Accession by new Member States
1. This Convention shall be open to accession by any State that becomes a member of the European Union.
2. The text of this Convention in the language of the acceding State, drawn up by the Council of the European Union, shall be authentic.
3. Instruments of accession shall be deposited with the depositary.
4. This Convention shall enter into force with respect to any State that accedes to it on the first day of the month following expiry of a three- month period following the date of deposit of its instrument of accession or on the date of entry into force of the Convention if it has not already entered into force at the time of expiry of the said period.
Article 47
Depositary
1. The Secretary-General of the Council of the European Union shall act as depositary of this Convention.
2. The depositary shall publish in the Official Journal of the European Communities the notifications, instruments or communications concerning this Convention.
In witness whereof, the undersigned Plenipotentiaries have hereunto set their hands.
Done at Brussels on the twenty-sixth day of July in the year one thousand nine hundred and ninety-five in a single original, in the Danish, Dutch, English, Finnish, French, German, Greek, Irish, Italian, Portuguese, Spanish and Swedish languages, each text being equally authentic, such original remaining deposited in the archives of the General Secretariat of the Council of the European Union.
ANNEX
Referred to in Article 2
List of other serious forms of international crime which Europol could deal with in addition to those already provided for in Article 2 (2) in compliance with Europol's objective as set out in Article 2 (1).
 
Against life, limb or personal freedom:
– murder, grievous bodily injury
– illicit trade in human organs and tissue
– kidnapping, illegal restraint and hostage-taking
– racism and xenophobia
 
Against property or public goods including fraud:
– organized robbery
– illicit trafficking in cultural goods, including antiquities and works of art
– swindling and fraud
– racketeering and extortion
– counterfeiting and product piracy
– forgery of administrative documents and trafficking therein
– forgery of money and means of payment
– computer crime
– corruption
 
Illegal trading and harm to the environment:
– illicit trafficking in arms, ammunition and explosives
– illicit trafficking in endangered animal species
– illicit trafficking in endangered plant species and varieties
– environmental crime
– illicit trafficking in hormonal substances and other growth promoters.
 
In addition, in accordance with Article 2 (2), the act of instructing Europol to deal with one of the forms of crime listed above implies that it is also competent to deal with the related money-laundering activities and the related criminal offences.
 
With regard to the forms of crime listed in Article 2 (2) for the purposes of this Convention:
– "crime connected with nuclear and radioactive substances" means the criminal offences listed in Article 7 (1) of the Convention on the Physical Protection of Nuclear Material, signed at Vienna and New York on 3 March 1980, and relating to the nuclear and/or radioactive materials defined in Article 197 of the Euratom Treaty and Directive 80/836 Euratom of 15 July 1980,
– "illegal immigrant smuggling" means activities intended deliberately to facilitate, for financial gain, the entry into, residence or employment in the territory of the Member States of the European Union, contrary to the rules and conditions applicable in the Member States,
– "traffic in human beings" means subjection of a person to the real and illegal sway of other persons by using violence or menaces or by abuse of authority or intrigue with a view to the exploitation of prostitution, forms of sexual exploitation and assault of minors or trade in abandoned children,
– "motor vehicle crime" means the theft or misappropriation of motor vehicles, lorries, semi-trailers, the loads of lorries or semi-trailers, buses, motorcycles, caravans and agricultural vehicles, works vehicles, and the spare parts for such vehicles, and the receiving and concealing of such objects,
– "illegal money-laundering activities" means the criminal offences listed in Article 6 (1) to (3) of the Council of Europe Convention on Laundering, Search, Seizure and Confiscation of the Proceeds from Crime, signed at Strasbourg on 8 November 1990.
 
The forms of crime referred to in Article 2 and in this Annex shall be assessed by the competent national authorities in accordance with the national law of the Member States to which they belong.
Declaration
Article 40 (2)
'The following Member States agree that in such cases they will systematically submit the dispute in question to the Court of Justice of the European Communities:
– Kingdom of Belgium,
– Kingdom of Denmark,
– Federal Republic of Germany,
– Hellenic Republic,
– Kingdom of Spain,
– French Republic,
– Ireland,
– Italian Republic,
– Grand Duchy of Luxembourg,
– Kingdom of the Netherlands,
– Republic of Austria,
– Portuguese Republic,
– Republic of Finland,
– Kingdom of Sweden'.
K O N V E N C I J A
na podlagi člena K.3 Pogodbe o Evropski uniji o ustanovitvi Evropskega policijskega urada (Konvencija o Europolu)
VISOKE POGODBENICE te konvencije, države članice Evropske unije,
S SKLICEVANJEM na Akt Sveta z dne 26. julija 1995;
ZAVEDAJOČ SE nujnih problemov, ki nastajajo zaradi terorizma, nedovoljenega prometa s prepovedanimi drogami in drugih hujših oblik mednarodnega kriminala;
KER je treba razvijati solidarnost in sodelovanje med državami članicami Evropske unije, zlasti z izboljšanjem sodelovanja policije med državami članicami;
KER naj takšen razvoj omogoči nadaljnjo izboljšavo zaščite javnega reda in varnosti;
KER je bila ustanovitev Evropskega policijskega urada (Europol) sklenjena v Pogodbi o Evropski uniji z 7. februarja 1992;
OB UPOŠTEVANJU Sklepa Evropskega sveta 29. oktobra 1993 o ustanovitvi Europola na Nizozemskem s sedežem v Haagu;
ZAVEDAJOČ SE skupnega cilja izboljšanja policijskega sodelovanja na področju terorizma, nedovoljenega prometa s prepovedanimi drogami in drugih hujših oblik mednarodnega kriminala s stalno, zaupno in intenzivno izmenjavo informacij med Europolom in nacionalnimi enotami držav članic;
POD POGOJEM, da naj oblike sodelovanja iz te konvencije ne vplivajo na druge oblike dvostranskega ali večstranskega sodelovanja;
PREPRIČANE, da je treba na področju policijskega sodelovanja posebno pozornost posvetiti varstvu pravic posameznikov in zlasti varstvu osebnih podatkov;
KER dejavnosti Europola iz te konvencije ne posegajo v pooblastila Evropskih Skupnosti; ker je skupen interes Europola in Skupnosti v okviru Evropske unije vzpostaviti več vrst sodelovanja, ki bi vsem skupaj omogočile kar najuspešnejše opravljanje njihovih nalog –
SO SE DOGOVORILE:
                                  VSEBINA
 
NASLOV I      USTANOVITEV IN NALOGE
Člen 1        Ustanovitev
Člen 2        Cilj
Člen 3        Naloge
Člen 4        Nacionalne enote
Člen 5        Uradniki za zvezo
Člen 6        Računalniški sistem zbranih informacij
NASLOV II     INFORMACIJSKI SISTEM
Člen 7        Vzpostavitev informacijskega sistema
Člen 8        Vsebina informacijskega sistema
Člen 9        Pravica do dostopa do informacijskega sistema
NASLOV III    DELOVNE DATOTEKE ZA ANALITIČNE
              NAMENE
Člen 10       Zbirka, obdelava in uporaba osebnih podatkov
 
Člen 11       Indeksni sistem
Člen 12       Odredba o odprtju podatkovne zbirke
NASLOV IV     SPLOŠNE DOLOČBE GLEDE OBDELAVE INFORMACIJ
Člen 13       Dolžnost uradnega obveščanja
Člen 14       Standard varstva podatkov
Člen 15       Odgovornosti v zadevah v zvezi z varstvom podatkov
Člen 16       Določbe o sestavi poročil
Člen 17       Pravila o uporabi podatkov
Člen 18       Sporočanje podatkov tretjim državam in tretjim organom
Člen 19       Pravica do dostopa
Člen 20       Popravljanje in brisanje podatkov
Člen 21       Roki za shranjevanje in brisanje podatkovnih zbirk
Člen 22       Popravljanje in shranjevanje podatkov v dokumentih
Člen 23       Nacionalni nadzorni organ
Člen 24       Skupni nadzorni organ
Člen 25       Zaščita podatkov
NASLOV V      PRAVNI POLOŽAJ, ORGANIZACIJA IN
              FINANČNE DOLOČBE
Člen 26       Pravna sposobnost
Člen 27       Organi Europola
Člen 28       Upravni odbor
Člen 29       Direktor
Člen 30       Osebje
Člen 31       Zaupnost
Člen 32       Obveznost molčečnosti in zaupnosti
Člen 33       Jeziki
Člen 34       Obveščanje Evropskega parlamenta
Člen 35       Proračun
Člen 36       Revizija
Člen 37       Sporazum o sedežu
NASLOV VI     ODGOVORNOST IN PRAVNA ZAŠČITA
Člen 38       Odgovornost za nepooblaščeno ali nepravilno obdelavo podatkov
Člen 39       Druge vrste odgovornosti
Člen 40       Reševanje sporov
Člen 41       Posebne pravice in imunitete
NASLOV VII    KONČNE DOLOČBE
Člen 42       Odnosi s tretjimi državami in tretjimi organi
Člen 43       Spremembe konvencije
Člen 44       Pridržki
Člen 45       Začetek veljavnosti konvencije
Člen 46       Pristop novih držav članic
Člen 47       Depozitar
    Priloga iz člena 2
    Izjava
NASLOV I
USTANOVITEV IN NALOGE
Člen 1
Ustanovitev
1. Države članice Evropske unije, v nadaljevanju "države članice", s to konvencijo ustanovijo Evropski policijski urad, v nadaljevanju "Europol".
2. Europol se poveže z eno nacionalno enoto v vsaki državi članici, ki naj se ustanovi ali določi v skladu s členom 4.
Člen 2
Cilj
1. Cilj Europola je, v okviru sodelovanja med državami članicami v skladu s členom K.1(9) Pogodbe o Evropski uniji, z ukrepi iz te konvencije izboljšati učinkovitost in sodelovanje pristojnih organov v državah članicah pri preprečevanju in boju proti terorizmu, nedovoljenemu prometu s prepovedanimi drogami in drugim hujšim oblikam mednarodnega kriminala, kadar obstajajo dejanski znaki o vpletenosti organiziranih kriminalnih združb in prizadetosti dveh ali več držav članic z oblikami tega kriminala, zaradi česar je potrebno skupno delovanje držav članic, ustrezno stopnji, pomembnosti in posledicam tovrstnih kaznivih ravnanj.
2. Da bi se postopoma dosegel cilj iz odstavka 1, Europol že od začetka ravna v smislu preprečevanja ali boja proti nedovoljenemu prometu s prepovedanimi drogami, trgovini z jedrskimi in radioaktivnimi snovmi, nezakonitemu tihotapljenju imigrantov, trgovini z ljudmi ter kriminalom, povezanim z motornimi vozili.
Najpozneje v dveh letih po začetku veljavnosti te konvencije Europol obravnava tudi kazniva dejanja, ki so bila ali bodo verjetno storjena med terorističnimi dejavnostmi zoper življenje in telo, osebno svobodo ali premoženje. Svet se lahko soglasno, v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji, odloči, da Europolu da navodila za obravnavanje takšnih terorističnih dejavnosti pred iztekom tega obdobja.
Svet se lahko soglasno, v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji, odloči, da Europolu da navodila za obravnavanje drugih oblik kriminala, naštetih v prilogi k tej konvenciji, ali njihovih značilnih pojavnih oblik. Pred odločitvijo Svet da navodila Upravnemu odboru za pripravo svoje odločitve in zlasti za opredelitev posledic za Europol v zvezi s proračunom in kadri.
3. Pod pristojnost Europola v zvezi z oblikami kriminala ali njihovimi značilnimi pojavnimi oblikami spada:
(1) pranje denarja, povezano s temi oblikami kriminala ali njihovimi značilnimi pojavnimi oblikami;
(2) z njimi povezana kazniva dejanja.
Z njimi povezana kazniva dejanja, ki se upoštevajo v skladu s postopki iz členov 8 in 10, so:
– kazniva dejanja, storjena z namenom pridobitve sredstev za izvrševanje takšnih dejanj v pristojnosti Europola,
– kazniva dejanja, storjena z namenom omogočanja ali izvrševanja takšnih dejanj v pristojnosti Europola,
– kazniva dejanja, storjena z namenom zagotavljanja nekaznivosti takšnih dejanj v pristojnosti Europola.
4. Za namen te konvencije pomenijo "pristojni organi" vse javne organe, ki obstajajo v državah članicah in ki so v okviru nacionalne zakonodaje odgovorni za preprečevanje in boj proti kaznivim dejanjem.
5. Za namen odstavkov 1 in 2 pomeni "nedovoljen promet s prepovedanimi drogami" kazniva dejanja, navedena v členu 3(1) Konvencije Združenih narodov proti nedovoljeni trgovini z mamili in psihotropnimi substancami z 20. decembra 1988 ter v določbah, ki spreminjajo ali nadomeščajo navedeno konvencijo.
Člen 3
Naloge
1. Glavne naloge Europola v okviru svojega cilja v skladu s členom 2(1) so:
(1) olajšati izmenjavo informacij med državami članicami;
(2) pridobiti, zbrati in analizirati informacije in obvestila;
(3) nemudoma in prek nacionalnih enot iz člena 4, uradno obvestiti pristojne organe držav članic o informacijah, ki jih zadevajo, in o vseh prepoznanih povezavah med kaznivimi dejanji;
(4) pomagati pri preiskavah v državah članicah s posredovanjem vseh potrebnih informacij nacionalnim enotam;
(5) vzdrževati računalniški sistem zbranih informacij, ki vsebuje podatke, v skladu s členi 8, 10 in 11.
2. Da bi se izboljšalo sodelovanje in učinkovitost pristojnih organov v državah članicah preko nacionalnih enot zaradi izpolnitve cilja iz člena 2(1), so dodatne naloge Europola še:
(1) poglabljanje strokovnega znanja pristojnih organov v državah članicah o preiskovalnih postopkih in svetovanje v zvezi s preiskavami;
(2) posredovanje strateških podatkov za pomoč in podporo učinkovite in uspešne uporabe sredstev, razpoložljivih na nacionalni ravni za operativne dejavnosti;
(3) priprava poročil o splošnem trenutnem stanju zadev.
3. Europol lahko v okviru cilja iz člena 2(1) v skladu s svojimi proračunskimi in kadrovskimi viri, ki jih ima na voljo, in v mejah, ki jih določi Upravni odbor, državam članicam pomaga s svetovanjem in raziskavo na naslednjih področjih:
(1) usposabljanju članov njihovih pristojnih organov;
(2) organizaciji in opremi teh organov;
(3) metodah za preprečevanje kriminala;
(4) tehničnih in forenzičnih policijskih metodah ter preiskovalnih postopkih.
Člen 4
Nacionalne enote
1. Vsaka država članica ustanovi ali določi nacionalno enoto, ki izvaja naloge, navedene v tem členu.
2. Nacionalna enota je edini zvezni organ med Europolom in pristojnimi državnimi organi. Odnose med nacionalno enoto in pristojnimi organi ureja nacionalna zakonodaja in zlasti ustrezna nacionalna ustavna pravila.
3. Države članice sprejmejo potrebne ukrepe za zagotovitev sposobnosti nacionalnih enot, da lahko opravljajo svoje naloge, in zlasti, da imajo dostop do ustreznih baz nacionalnih podatkov.
4. Naloge nacionalnih enot so:
(1) na svojo lastno pobudo posredovati potrebne informacije in podatke Europolu, za opravljanje njegovih nalog;
(2) odgovoriti na zahteve Europola po informacijah, podatkih in svetovanju;
(3) posodabljati informacije in podatke;
(4) oceniti informacije in podatke v skladu z nacionalno zakonodajo za namene pristojnih organov in jim predati ves material;
(5) izdati zahteve Europolu v zvezi s svetovanjem, informacijami, podatki in analizami;
(6) oskrbeti Europol z informacijami, za shranitev v računalniškem sistemu;
(7) zagotoviti skladnost z zakoni pri vsaki izmenjavi informacij med njimi in Europolom.
5. Brez ozira na izvajanje odgovornosti, ki jo nosijo države članice, kot je določeno v členu K.2(2) Pogodbe o Evropski uniji, nacionalna enota v posebnem primeru ni obvezna posredovati informacij in podatkov, predvidenih v 1, 2 in 6 točki člena 4 ter členov 7 in 10, če to:
(1) škoduje osnovnim nacionalnim interesom v zvezi z varnostjo; ali
(2) ogroža uspeh tekoče preiskave ali varnost posameznikov;
(3) vključuje informacije o organizacijah ali posebnih obveščevalnih dejavnostih na področju državne varnosti.
6. Stroške, ki jih ustvarijo nacionalne enote v komuniciranju z Europolom, krijejo države članice in se, razen stroškov vzpostavitve zveze, Europolu ne zaračunajo.
7. Vodje nacionalnih enot se sestanejo po potrebi, da skozi svetovanje pomagajo Europolu.
Člen 5
Uradniki za zvezo
1. Vsaka nacionalna enota napoti v Europol najmanj enega uradnika za zvezo. O številu uradnikov za zvezo, ki jih države članice lahko pošljejo v Europol, se soglasno odloči Upravni odbor; to odločitev je mogoče spremeniti kadar koli s soglasno odločitvijo Upravnega odbora. Razen če ni s posebnimi določbami te konvencije predvideno drugače, uradniki za zvezo delujejo v okviru nacionalne zakonodaje države članice pošiljateljice.
2. Nacionalne enote dajo svojim uradnikom za zvezo navodila, naj predstavljajo njihove interese znotraj Europola v skladu z nacionalno zakonodajo države članice pošiljateljice in skladno z določbami o delovanju Europola.
3. Brez vpliva na člen 4(4) in (5) uradniki za zvezo v okviru cilja iz člena 2(1) pomagajo pri izmenjavi informacij med nacionalnimi enotami, ki so jih poslale v Europol, zlasti s:
(1) posredovanjem informacij Europolu iz nacionalne enote pošiljateljice;
(2) pošiljanjem informacij iz Europola nacionalni enoti pošiljateljici; in
(3) sodelovanjem z uslužbenci Europola, tako da posredujejo informacije in svetujejo pri analizah informacij, ki se nanašajo na državo članico pošiljateljico.
4. Uradniki za zvezo v skladu z nacionalno zakonodajo in v okviru cilja iz člena 2(1) obenem nudijo pomoč pri izmenjavi informacij iz njihovih nacionalnih enot in pri koordinaciji nastalih ukrepov.
5. V obsegu, potrebnem za opravljanje nalog iz odstavka 3, imajo uradniki za zvezo pravico do pregledovanja različnih datotek v skladu z ustreznimi določbami, ki so natančno opredeljene v ustreznih členih.
6. Člen 25 se s potrebnimi spremembami nanaša na dejavnost uradnikov za zvezo.
7. Brez vpliva na druge določbe te konvencije, pravice in dolžnosti uradnikov za zvezo glede Europola soglasno določi Upravni odbor.
8. Uradniki za zvezo uživajo privilegije in imunitete, ki so potrebne za opravljanje njihovih nalog v skladu s členom 41(2).
9. Europol državam članicam za dejavnosti njihovih uradnikov za zvezo v stavbi Europola brezplačno priskrbi vse potrebne prostore. Vse druge stroške, ki nastanejo v zvezi s pošiljanjem uradnikov za zvezo, krije država članica pošiljateljica; to velja tudi za stroške opreme uradnikov za zvezo, vse dokler Upravni odbor pri sestavi proračuna Europola v posebnih primerih soglasno ne predlaga drugače.
Člen 6
Računalniški sistem zbranih informacij
1. Europol vzdržuje računalniški sistem zbranih informacij, ki ga sestavljajo naslednje sestavine:
(1) informacijski sistem iz člena 7 z omejeno in natančno opredeljeno vsebino, ki državam članicam in Europolu omogoča hitro uporabo razpoložljivih informacij;
(2) delovne datoteke iz člena 10, ustvarjene za različno dolga časovna obdobja za namene analize, ki vsebujejo izčrpne informacije; in
(3) indeksni sistem, ki vsebuje določene podrobnosti iz analitičnih datotek iz točke 2 v skladu z dogovori iz člena 11.
2. Računalniški sistem zbranih informacij, s katerim upravlja Europol, ne sme biti pod nikakršnimi pogoji povezan z drugimi avtomatiziranimi obdelovalnimi sistemi, razen z avtomatiziranimi obdelovalnimi sistemi nacionalnih enot.
NASLOV II
INFORMACIJSKI SISTEM
Člen 7
Vzpostavitev informacijskega sistema
1. Europol vzpostavi in vzdržuje računalniški informacijski sistem za opravljanje svojih nalog. Informacijski sistem, v katerega lahko države članice, ki jih predstavljajo njihove nacionalne enote in uradniki za zvezo, neposredno vnašajo podatke po svojih nacionalnih postopkih, in v katerega lahko Europol neposredno vnaša podatke, pridobljene iz tretjih držav in tretjih organov ter podatke o analizah, je neposredno dostopen za uporabo nacionalnim enotam, uradnikom za zvezo, direktorju, namestnikom direktorja in pooblaščenim uslužbencem Europola.
V zvezi z osebami iz točke 2 člena 8(1) je neposreden dostop nacionalnih enot do informacijskega sistema omejen samo na podrobnosti glede identitete, navedene v členu 8(2). Dostop nacionalnih enot do celotne zbirke podatkov, če je to treba za določeno preiskavo, je mogoč prek uradnikov za zvezo.
2. Europol:
(1) ima nalogo, da zagotovi skladnost z določbami, ki urejajo sodelovanje pri informacijskem sistemu in njegovo vodenje, ter
(2) je odgovoren za ustrezno delovanje informacijskega sistema v tehničnem in operativnem smislu. Europol zlasti sprejme vse potrebne ukrepe, da zagotovi ustrezno izvajanje ukrepov iz členov 21 in 25 v zvezi z informacijskim sistemom.
3. Nacionalna enota vsake države članice je odgovorna za povezavo z informacijskim sistemom. Zlasti je odgovorna za varnostne ukrepe iz člena 25 glede opreme za obdelavo podatkov, ki je v uporabi na območju zadevne države članice, za pregled v skladu s členom 21 in, kolikor je treba v okviru zakonov, predpisov in upravnih določb ter postopkov navedene države članice, za ustrezno izvajanje te konvencije v drugih pogledih.
Člen 8
Vsebina informacijskega sistema
1. Informacijski sistem je mogoče uporabiti za shranjevanje, spreminjanje in uporabo izključno tistih podatkov, ki so potrebni za opravljanje nalog Europola, z izjemo podatkov, s katerimi so povezana kazniva dejanja iz drugega pododstavka člena 2(3). Vneseni podatki se nanašajo na:
(1) osebe, ki so v skladu z nacionalno zakonodajo osumljene storitve ali sodelovanja v kaznivem dejanju, za katero je Europol pristojen v skladu s členom 2, ali pravnomočno obsojene, zaradi storitve takih dejanj;
(2) osebe, za katere v okviru nacionalne zakonodaje obstaja utemeljen sum, da bodo storile kaznivo dejanje, za katero je Europol pristojen v skladu s členom 2.
2. Osebni podatki iz odstavka 1 smejo vsebovati samo naslednje podatke:
(1) priimek, dekliški priimek, rojstna imena in vsa druga imena ali privzeta imena;
(2) datum in kraj rojstva;
(3) državljanstvo;
(4) spol; in
(5) kadar je treba, druge značilnosti, ki bi lahko pomagale pri identifikaciji, vključno z vsemi posebnimi stvarnimi fizičnimi značilnostmi, ki jih ni mogoče spreminjati.
3. Poleg podatkov iz odstavka 2 in navedb o Europolu ali nacionalni enoti, ki je podatke vnesla, je informacijski sistem mogoče uporabiti tudi za shranjevanje, spreminjanje in uporabo naslednjih navedb v zvezi z osebami iz odstavka 1:
(1) kazniva dejanja, domnevna kazniva dejanja ter kje in kdaj so bila storjena;
(2) sredstva, ki so bila ali utegnejo biti uporabljena za storitev kaznivih dejanj;
(3) oddelki, odgovorni za postopek, in referenčna številka zadeve;
(4) domnevno članstvo v kriminalni združbi;
(5) pravnomočne obsodbe, kadar so povezana s kaznivimi dejanji, za katera je Europol pristojen v skladu s členom 2.
Te podatke je mogoče vnesti tudi, ko se še ne nanašajo na nobeno osebo. Kadar Europol vnese podatke sam in hkrati posreduje referenčno številko zadeve, označi tudi, ali je podatke posredovala tretja stranka ali so rezultat analiz, opravljenih v Europolu.
4. Dodatne informacije, ki jih hrani Europol ali nacionalne enote v zvezi s skupinami oseb iz odstavka 1, se lahko sporočijo kateri koli nacionalni enoti ali Europolu na njuno zaprosilo. Nacionalne enote to opravijo v skladu s svojo nacionalno zakonodajo.
Kadar dodatne informacije zadevajo eno ali več povezanih kaznivih dejanj, kot so opredeljena v drugem pododstavku člena 2(3), se podatki, shranjeni v informacijskem sistemu, ustrezno označijo, s čimer se nacionalnim enotam in Europolu omogoči izmenjava informacij o povezanih kaznivih dejanjih.
5. Če so postopki proti osebi opuščeni ali če je ta oseba oproščena tožbe, se podatki o eni ali drugi odločitvi izbrišejo.
Člen 9
Pravica do dostopa do informacijskega sistema
1. Pravico do neposrednega vnosa podatkov v informacijski sistem in do dostopa do njih v sistemu imajo samo nacionalne enote, uradniki za zvezo, direktor, namestniki direktorja ter pooblaščeni uslužbenci Europola. Dostop do podatkov je mogoč, kadar je to potrebno za opravljanje Europolovih nalog v zvezi z določenim primerom; dostop se izvrši v skladu z zakoni in drugimi predpisi ter postopki enote, ki do podatkov dostopa, ob upoštevanju vseh določb iz te konvencije.
2. Samo enota, ki je podatke vnesla, lahko te podatke spreminja, popravlja ali briše. Kadar enota upravičeno domneva, da so podatki iz člena 8(2) nepravilni, ali kadar jih želi dopolniti, o tem takoj obvesti enoto, ki je podatke vnesla; ta nemudoma preveri takšno obvestilo in, če je potrebno, podatke takoj spremeni, dopolni, popravi ali izbriše. Kadar sistem vsebuje podatke iz člena 8(3), ki veljajo za določeno osebo, lahko katera koli enota vnese dodatne podatke v okviru člena 8(3). Kadar obstajajo med vnesenimi podatki očitne razlike, se enote med sabo posvetujejo in sklenejo dogovor. Kadar enota namerava v celoti izbrisati podatke iz člena 8(2), ki veljajo za določeno osebo, in kadar shranjeni podatki iz člena 8(3) veljajo za isto osebo, vnesle pa so jih druge enote, se odgovornost po zakonu o varstvu podatkov v skladu s členom 15(1) ter pravica spreminjanja, dopolnjevanja, popravljanja in brisanja teh podatkov v skladu s členom 8(2) prenese na enoto, ki je naslednja vnesla podatke iz člena 8(3) o navedeni osebi. Enota, ki namerava podatke izbrisati, o svojem namenu obvesti enoto, na katero je bila prenesena odgovornost glede varstva podatkov.
3. Odgovornost glede dopustitve dostopa do, vnosa v ali sprememb v informacijskem sistemu nosi enota, ki do podatkov dostopa, jih vnaša ali spreminja; navedena enota mora biti prepoznavna. Sporočanje informacij med nacionalnimi enotami in pristojnimi organi držav članic je urejeno z nacionalno zakonodajo.
NASLOV III
DELOVNE DATOTEKE ZA ANALITIČNE NAMENE
Člen 10
Zbiranje, obdelava in uporaba osebnih podatkov
1. Kadar je treba za dosego cilja iz člena 2(1), lahko Europol poleg podatkov neosebne narave v drugih datotekah hrani, spreminja in uporablja podatke o kaznivih dejanjih, za katera je Europol pristojen v skladu s členom 2(2), vključno s podatki o povezanih kaznivih dejanjih, ki jih predvideva drugi pododstavek člena 2(3), namenjenimi za posebne analize in v zvezi z:
(1) osebami iz člena 8(1);
(2) osebami, ki bi lahko bile poklicane, da pričajo pri preiskavah v zvezi z obravnavanimi kaznivimi dejanji ali pri nadaljnjih kazenskih postopkih;
(3) osebami, ki so bile žrtve enega izmed obravnavanih kaznivih dejanj ali v zvezi s katerimi na podlagi nekaterih dejstev obstaja utemeljen sum, da lahko postanejo žrtve takšnega kaznivega dejanja;
(4) zvezami in sodelavci, ter
(5) osebami, ki lahko posredujejo informacije o obravnavanih kaznivih dejanjih.
Zbiranje, shranjevanje in obdelava podatkov, navedenih v prvem stavku člena 6 Konvencije Sveta Evrope o zaščiti posameznikov glede na avtomatsko obdelavo osebnih podatkov z dne 28. januarja 1981 se ne dovoli, razen če je to nujno potrebno za namene datoteke in če takšni podatki dopolnjujejo druge osebne podatke, ki so že vneseni v navedeno datoteko. Prepovedano je izbrati posebno skupino ljudi izključno na podlagi podatkov, navedenih v prvem stavku člena 6 Konvencije Sveta Evrope z dne 28. januarja 1981, s čimer bi se kršila prej navedena pravila glede namena.
Svet soglasno, v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji, sprejme pravila izvajanja v zvezi s podatkovnimi zbirkami, ki jih pripravi Upravni odbor in ki vsebujejo dodatne podrobnosti, zlasti glede kategorij osebnih podatkov iz tega člena ter določb o varnosti teh podatkov in notranjem nadzoru njihove uporabe.
2. Tovrstne datoteke se odprejo v namene analize, kar pomeni zbiranje, obdelavo in uporabo podatkov z namenom olajšanja kriminalistične preiskave. Vsak analitični projekt sproži ustanovitev analitične skupine, ki v skladu z nalogami iz člena 3(1) in (2) in člena 5(3) tesno sodeluje z naslednjimi udeleženci:
(1) analitiki in drugimi uslužbenci Europola, ki jih določi Direktorat Europola: za vnos in dostop do podatkov v datoteki so pooblaščeni izključno analitiki;
(2) uradniki za zvezo in/ali strokovnjaki iz držav članic, ki prispevajo informacije ali za katere velja analiza v smislu odstavka 6.
3. Nacionalne enote na zaprosilo Europola ali na svojo lastno pobudo v okviru člena 4(5) Europolu sporočijo vse informacije, ki bi jih le-ta lahko potreboval za opravljanje svojih nalog iz točke 2 člena 3(1). Države članice sporočijo te informacije le v primeru, da njihovo obdelavo za namen preprečevanja, analize ali boja proti kaznivim dejanjem dopušča tudi njihova nacionalna zakonodaja.
Podatki iz nacionalnih enot lahko, odvisno od stopnje občutljivosti podatkov, do analitičnih skupin prispejo neposredno in z uporabo kakršnih koli ustreznih sredstev, bodisi preko uradnikov za zvezo ali ne.
4. Če se zdi, da bi poleg podatkov iz odstavka 3 Europol bil upravičen tudi do drugih informacij, potrebnih za opravljanje svojih nalog v okviru točke 2 člena 3(1), lahko Europol zaprosi, da mu:
(1) Evropske Skupnosti in organi javnega prava, ustanovljeni v okviru Pogodb o ustanovitvi Skupnosti;
(2) drugi organi javnega prava, ustanovljeni v okviru Evropske unije;
(3) organi, ki temeljijo na sporazumu med dvema ali več državami članicami Evropske unije;
(4) tretje države;
(5) mednarodne organizacije in njihovi podrejeni organi javnega prava;
(6) drugi organi javnega prava, ki temeljijo na sporazumu med dvema ali več državami; in
(7) Mednarodna organizacija kriminalistične policije,
pošljejo vse koristne informacije s pomočjo kakršnih koli ustreznih sredstev. Poleg tega lahko Europol pod enakimi pogoji in s pomočjo enakih sredstev sprejema tudi informacije, ki jih na svojo lastno pobudo posredujejo navedeni različni organi. Svet soglasno, v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji, in po posvetu z Upravnim odborom v zvezi s tem sestavi pravila, ki jih mora Europol spoštovati.
5. Če je Europol na podlagi drugih sporazumov upravičen do pridobitve računalniškega dostopa do podatkov iz drugih informacijskih sistemov, lahko na ta način išče osebne podatke, kadar je to potrebno za opravljanje njegovih nalog v skladu s točko 2 člena 3(1).
6. Če je analiza splošnega in strateškega tipa, so vse države članice z njenimi ugotovitvami povezane preko uradnikov za zvezo in/ali strokovnjakov, od katerih prejmejo poročila, ki jih sestavi Europol.
Če analiza obravnava posebne primere, ki ne veljajo za vse države članice, in ima neposreden operativen cilj, so v njej udeleženi predstavniki naslednjih držav članic:
(1) tistih, ki so bile vir informacij, na podlagi katerih je prišlo do odločitve o odprtju analitične datoteke, ali tistih, za katere navedene informacije veljajo neposredno, ter tistih, ki jih je analitična skupina naknadno povabila k sodelovanju v analizi, ker so tudi one postale vpletene;
(2) tistih, ki iz indeksnih sistemov razberejo, da morajo biti obveščene, in uveljavijo to potrebo pod pogoji iz odstavka 7.
7. Na potrebo po obveščanju se lahko sklicujejo pooblaščeni uradniki za zvezo. Vsaka država članica imenuje in pooblasti omejeno število takšnih uradnikov za zvezo. Njihov seznam pošlje Upravnemu odboru.
Uradnik za zvezo se na potrebo po obveščanju sklicuje v skladu z odstavkom 6 prek pisne utemeljene izjave, ki jo odobrijo organi, katerim je podrejen v svoji državi, in ki jo pošlje vsem udeležencem analize. S tem se avtomatično udeleži analize, ki je v teku.
Če analitična skupina temu ugovarja, se avtomatična udeležitev odloži do zaključka spravnega postopka, ki lahko obsega tri stopnje:
(1) udeleženci analize se lahko trudijo doseči sporazum z uradnikom za zvezo, ki se sklicuje na potrebo po obveščanju; za to imajo največ osem dni časa;
(2) če ni sklenjen nikakršen sporazum, se vodje nacionalnih enot in Direktorata Europola sestanejo v treh dneh;
(3) če se nesoglasje ne razreši, se predstavniki strank v Upravnem odboru sestanejo v osmih dneh. Če se država članica ne odreče potrebi po obveščanju, se odločitev o avtomatični udeležbi navedene države članice sprejme s soglasjem.
8. Država članica, ki Europolu sporoči podatek, je edina, ki presodi stopnjo njegove občutljivosti in njegove variacije. Odločitev o vsakem širjenju ali operativni uporabi analitičnih podatkov se sprejme po posvetu z udeleženci analize. Država članica, ki se udeleži analize, ki je v teku, zlasti ne sme širiti ali uporabiti podatkov brez predhodnega sporazuma držav članic na katere se to nanaša že od samega začetka.
Člen 11
Indeksni sistem
1. Za podatke, shranjene v datotekah iz člena 10(1) Europol sestavi indeksni sistem.
2. Do uporabe indeksnega sistema so upravičeni direktor, namestniki direktorja in pooblaščeni uslužbenci Europola ter uradniki za zvezo. Indeksni sistem je sestavljen tako, da je uradniku za zvezo, ki ga uporablja, iz uporabljenih podatkov razumljivo, da datoteke iz točke 2 člena 6(1) ter iz člena 10(1) vsebujejo podatke, ki veljajo za državo članico pošiljateljico.
Dostop uradnikov za zvezo se uredi tako, da je mogoče ugotoviti, ali je neka informacija shranjena ali ne, ni pa mogoče določiti povezav ali priti do nadaljnjih ugotovitev glede vsebine datotek.
3. Podrobno opredeljene postopke sestave indeksnega sistema soglasno opredeli Upravni odbor.
Člen 12
Odredba o odprtju podatkovne zbirke
1. Europol za vsako računalniško podatkovno zbirko z osebnimi podatki, ki jih uporablja pri opravljanju svojih nalog iz člena 10, v odredbi o odprtju podatkovne zbirke, ki jo mora odobriti Upravni odbor, navede:
(1) ime podatkovne zbirke;
(2) namen podatkovne zbirke;
(3) skupino oseb, o katerih so podatki shranjeni;
(4) naravo podatkov, ki jih je treba shraniti, in vseh nujno potrebnih podatkov, navedenih v prvem stavku člena 6 Konvencije Sveta Evrope z dne 28. januarja 1981;
(5) vrsto osebnih podatkov, uporabljenih za odprtje podatkovne zbirke;
(6) pritok ali vnos podatkov, ki jih je treba shraniti;
(7) pogoje za sporočanje osebnih podatkov, shranjenih v podatkovni zbirki, prejemnike in vrste postopkov;
(8) roke za pregled in čas shranjevanja;
(9) metodo za sestavo dnevnika nadzora.
Direktor Europola takoj obvesti skupni nadzorni organ, kot ga predvideva člen 24, o načrtu odredbe za odprtje takšne podatkovne zbirke, in mu pošlje zapisnik, na podlagi katerega lahko vse svoje po njegovem mnenju potrebne pripombe, pošlje Upravnemu odboru.
2. Če je zadeva tako nujne narave, da pridobitev dovoljenja Upravnega odbora iz odstavka 1 ni mogoča, direktor na svojo lastno pobudo ali na zaprosilo držav članic, v kolikor je odločitev utemeljena, odredi odprtje podatkovne zbirke. O svoji odločitvi hkrati obvesti tudi člane Upravnega odbora. Postopek se v skladu z odstavkom 1 sproži brez odlašanja in zaključi v najkrajšem roku.
NASLOV IV
SPLOŠNE DOLOČBE GLEDE OBDELAVE INFORMACIJ
Člen 13
Dolžnost uradnega obveščanja
Europol takoj obvesti nacionalne enote in njihove uradnike za zvezo, če nacionalne enote tako zahtevajo, o vseh informacijah v zvezi z njihovo državo članico in prepoznanimi povezavami med kaznivimi dejanji, za katera je Europol pristojen v skladu s členom 2. Posredujejo se lahko tudi informacije in obvestila o drugih kaznivih dejanjih, s katerimi se Europol seznani med opravljanjem svojih dolžnosti.
Člen 14
Standard varstva podatkov
1. Vsaka država članica najpozneje do začetka veljavnosti te konvencije v skladu s svojo nacionalno zakonodajo sprejme potrebne ukrepe o obdelavi osebnih podatkov v podatkovnih zbirkah v okviru te konvencije, da se zagotovi standard varstva podatkov, najmanj enak standardu, ki je rezultat izvajanja načel Konvencije Sveta Evrope z 28. januarja 1981, pri tem pa upošteva Priporočilo št. R (87) 15 Odbora ministrov Sveta Evrope z 17. septembra 1987 o uporabi osebnih podatkov v policijskem sektorju.
2. Sporočanje osebnih podatkov, predvideno v tej konvenciji, se ne sme začeti, vse dokler na ozemlju vsake od držav članic, ki je udeležena pri takšnem sporočanju, ne začnejo veljati pravila o varstvu podatkov iz odstavka 1.
3. Pri zbiranju, obdelavi in uporabi osebnih podatkov Europol upošteva načela Konvencije Sveta Evrope z 28. januarja 1981 in Priporočilo št. R (87) 15 Odbora ministrov Sveta Evrope z dne 17. septembra 1987.
Europol prav tako upošteva načela v zvezi z neavtomatiziranimi podatki, hranjenimi v obliki podatkovnih zbirk, tj. v kakršni koli strukturirani zbirki osebnih podatkov, ki je dostopna v skladu s posebnimi kriteriji.
Člen 15
Odgovornost v zadevah varstva podatkov
1. Na podlagi drugih določb v tej konvenciji odgovornost za podatke, shranjene v Europolu, zlasti v zvezi z zakonitostjo njihovega zbiranja, pošiljanja Europolu in vnosa, kot tudi v zvezi z njihovo pravilnostjo, aktualnostjo in preverjanjem rokov za shranjevanje, nosita:
(1) država članica, ki vnaša ali kakor koli drugače sporoči podatke;
(2) Europol, in sicer v zvezi s podatki, ki mu jih sporočijo tretje stranke ali ki so rezultat njegovih analiz.
2. Poleg tega je, na podlagi drugih določb v tej konvenciji Europol odgovoren za vse podatke, ki jih sprejme in obdela, ne glede na to ali se ti podatki nahajajo v informacijskem sistemu iz člena 8, v podatkovnih zbirkah, odprtih za namene analize iz člena 10, ali v indeksnih sistemih iz člena 11, ali v podatkovnih zbirkah iz člena 14(3).
3. Europol shranjuje podatke tako, da je mogoče razbrati, katera država članica ali tretja stranka je podatke poslala, oziroma da so podatki rezultat analize, ki jo je opravil Europol.
Člen 16
Določbe o sestavi poročil
Europol v povprečju sestavi poročila za najmanj eno na deset dostopanj do osebnih podatkov – in za vsako iskanje, opravljeno znotraj informacijskega sistema iz člena 7 –, da preveri, ali jih zakon dopušča. Podatke, vsebovane v poročilih, za ta namen uporabijo le Europol in nadzorni organi iz členov 23 in 24 ter se izbrišejo po šestih mesecih, razen če so potrebni še za nadzor, ki je v teku. O podrobnostih odloči Upravni odbor po posvetu s skupnim nadzornim organom.
Člen 17
Pravila o uporabi podatkov
1. Osebne podatke, do katerih se dostopa v informacijskem sistemu, indeksnem sistemu ali podatkovnih zbirkah, odprtih za namene analize, ter podatke, sporočene s pomočjo katerih koli drugih ustreznih sredstev, lahko pošiljajo in uporabijo le pristojni organi držav članic za namen preprečevanja in boja proti kriminalu, za katera je pristojen Europol, ter boja proti drugim hujšim oblikam kriminala.
Podatki iz prvega odstavka se uporabijo v skladu z zakonom države članice, odgovorne za organe, ki so podatke uporabili.
Europol lahko uporabi podatke iz odstavka 1 le za opravljanje svojih nalog iz člena 3.
2. Če v primeru nekaterih podatkov država članica ali tretja država, ki podatke sporoči, ali tretji organ iz člena 10(4) določi posebne omejitve za uporabo teh podatkov v navedeni državi članici ali s strani tretjih strank, se mora po teh omejitvah ravnati tudi uporabnik podatkov, razen v posebnih primerih, kadar nacionalna zakonodaja določa, da omejitve za uporabo ne veljajo za sodne organe, zakonodajne organe ali kateri koli drug neodvisen organ, ki je ustanovljen na podlagi zakona in odgovoren za nadzor nacionalnih pristojnih organov v smislu člena 2(4). V takšnih primerih je podatke mogoče uporabiti le po predhodnem posvetu države članice, ki podatke sporoča in katere interese in mnenja je treba kar najbolj upoštevati.
3. Uporaba podatkov za druge namene ali s strani drugih organov, ki niso navedeni v členu 2 te konvencije, je mogoča le po predhodnem posvetu z državo članico, ki je podatke poslala, kolikor to dovoljuje nacionalna zakonodaja navedene države članice.
Člen 18
Sporočanje podatkov tretjim državam in tretjim organom
1. Europol lahko pod pogoji iz odstavka 4 sporoči shranjene osebne podatke tretjim državam ali tretjim organom v smislu člena 10(4), kadar:
(1) je to v posameznih primerih potrebno za namene preprečevanja ali boja proti kaznivim dejanjem, za katera je Europol pristojen v skladu s členom 2;
(2) je v navedeni državi ali navedenem organu zagotovljena ustrezna stopnja varstva podatkov; in
(3) je to dovoljeno v okviru splošnih pravil v smislu odstavka 2.
2. V skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji in upoštevajoč okoliščine iz odstavka 3, Svet soglasno opredeli splošna pravila sporočanja osebnih podatkov Europola tretjim državam in tretjim organom v smislu člena 10(4). Upravni odbor pripravi odločitev Sveta in se posvetuje s skupnim nadzornim organom iz člena 24.
3. Ustreznost stopnje varstva podatkov, ki jo nudijo tretje države in tretji organi v smislu člena 10(4), se oceni ob upoštevanju vseh okoliščin, ki igrajo vlogo v sporočanju osebnih podatkov; zlasti se upošteva naslednje:
(1) narava podatkov;
(2) namen podatkov;
(3) trajanje predvidene obdelave; in
(4) splošne ali posebne določbe, ki veljajo za tretje države in tretje organe v smislu člena 10(4).
4. Če omenjene podatke Europolu sporoči država članica, jih Europol lahko sporoči tretjim državam in tretjim organom le s soglasjem države članice. Država članica lahko da za takšno sporočanje svoje soglasje,v splošnem ali drugačnem smislu, že vnaprej; soglasje se lahko umakne kadar koli.
Če podatkov ni sporočila država članica, se Europol prepriča, da sporočanje navedenih podatkov:
(1) ne ovira ustreznega opravljanja nalog, ki so v pristojnosti države članice;
(2) ne ogroža varnosti in javnega reda države članice ali kako drugače škodi njeni splošni blaginji.
5. Europol je odgovoren za zakonitost odobritve sporočanja. Europol vodi evidenco o sporočanju podatkov in o razlogih za takšno sporočanje. Sporočanje podatkov se odobri le, če prejemnik zajamči, da bodo podatki uporabljeni le za namen, za katerega so bili sporočeni. To ne velja za sporočanje osebnih podatkov, ki so potrebni za preiskavo, ki jo izvaja Europol.
6. Kadar sporočanje, predvideno v odstavku 1, velja za informacije, za katere se zahteva zaupnost, se to dovoli le, v kolikor obstaja sporazum o zaupnosti med Europolom in prejemnikom.
Člen 19
Pravica do dostopa
1. Vsak posameznik, ki želi uveljaviti pravico do dostopa do podatkov, ki se nanašajo nanj in jih hrani Europol, ali ki želi te podatke preveriti, lahko za ta namen pošlje brezplačno zahtevo pristojnemu nacionalnemu organu v kateri koli državi članici po njegovi izbiri, navedeni organ pa zahtevo nemudoma posreduje Europolu in prosilca obvesti, da mu bo Europol takoj odgovoril na zahtevo.
2. Europol mora zahtevo dokončno razrešiti v treh mesecih po tem, ko jo je prejel nacionalni pristojni organ države članice.
3. Posameznikova pravica do dostopa do podatkov, ki se nanašajo nanj, ali do preverjanja teh podatkov se uveljavlja v skladu s predpisi države članice, kjer se za to pravico zaprosi, in sicer ob upoštevanju naslednjih določb:
Kadar zakoni države članice, na katero je bila zahteva naslovljena, predvideva sporočanje podatkov, se to sporočanje zavrne, če je to potrebno:
(1) da Europol ustrezno opravi svoje naloge;
(2) za zaščito varnosti in javnega reda v državah članicah ali za preprečitev kriminala;
(3) za zaščito pravic in svoboščin tretjih strank,
v primeru česar ne prevladajo interesi osebe, za katere velja sporočanje teh informacij.
4. Pravica do sporočanja informacij v skladu z odstavkom 3 se uveljavlja v skladu z naslednjimi postopki:
(1) v zvezi s podatki, vnesenimi v informacijski sistem iz člena 8, odločitev o sporočanju teh podatkov ni mogoče sprejeti, razen če je imela država članica, ki je podatke vnesla, skupaj z državami članicami, za katere sporočanje teh podatkov neposredno velja, prva možnost opredelitve svojega položaja, kar se lahko razširi tudi na zavrnitev sporočanja podatkov. Podatke, ki se smejo sporočati, ter sporazume v zvezi s sporočanjem takih podatkov opredeli država članica, ki je podatke vnesla;
(2) v zvezi s podatki, ki jih je v informacijski sistem vnesel Europol, morajo imeti države članice, za katere sporočanje takšnih podatkov neposredno velja, prve možnost opredelitve svojega položaja, kar se lahko razširi tudi na zavrnitev sporočanja podatkov;
(3) v zvezi s podatki, vnesenimi v delovne datoteke za namene analiiz iz člena 10, je sporočanje takšnih podatkov odvisno od soglasja med Europolom in državami članicami, ki se udeležijo analize v skladu s členom 10(2), ter od soglasja med državo ali državami članicami, za katere sporočanje takšnih podatkov neposredno velja.
Če ena ali več držav članic ali Europol nasprotujejo sporočanju podatkov, Europol obvesti prosilca o opravljeni preveritvi, ne da bi mu razkril, ali Europol o njem hrani kakršne koli podatke ali ne.
5. Pravica do preverjanja informacij se uveljavlja v skladu z naslednjimi postopki:
Kadar veljavna nacionalna zakonodaja ne vsebuje nikakršne določbe o sporočanju podatkov ali kadar gre zgolj za preprosto zahtevo za preveritev, Europol v tesnem sodelovanju z zadevnimi nacionalnimi organi obvesti prosilca o opravljeni preveritvi, ne da bi mu razkril, ali Europol o njem hrani kakršne koli podatke ali ne.
6. Europol v svojem odgovoru na zaprosilo za preveritev ali dostop do podatkov prosilca obvesti, da se lahko, če z odločitvijo ni zadovoljen, pritoži skupnemu nadzornemu organu. Prosilec lahko zadevo sporoči skupnemu nadzornemu organu tudi, če na svojo prošnjo v roku, določenem v tem členu, ni prejel nobenega odgovora.
7. Če prosilec pošlje pritožbo skupnemu nadzornemu organu iz člena 24, navedeni organ pritožbo pregleda.
Kadar se pritožba nanaša na sporočanje podatkov, ki jih je v informacijski sistem vnesla država članica, skupni nadzorni organ sprejme odločitev v skladu z nacionalno zakonodajo države članice, v kateri je bilo vloženo zaprosilo. Skupni nadzorni organ se najprej posvetuje z nacionalnim nadzornim organom ali pristojnim sodnim organom v državi članici, ki je podatke posredovala. Oba državna organa opravita potrebno preveritev, zlasti da bi ugotovila, ali je bila odločitev o zavrnitvi sprejeta v skladu z odstavki 3 in 4(1) tega člena. Če se to potrdi, skupni nadzorni organ v tesnem sodelovanju z nacionalnim nadzornim organom ali pristojnim sodnim organom sprejme odločitev, ki se lahko razširi na zavrnitev sporočanja kakršnih koli informacij.
Kadar se pritožba nanaša na sporočanje podatkov, ki jih je v informacijski sistem vnesel Europol, ali podatkov, ki so shranjeni v delovnih datotekah za namene analize, lahko skupni nadzorni organ v primeru vztrajnih nasprotovanj s strani Europola ali države članice ta nasprotovanja zavrne izključno z dvotretjinsko večino njegovih članov po zaslišanju Europola ali države članice. Če takšna večina ni dosežena, skupni nadzorni organ obvesti prosilca o opravljeni preveritvi, ne da bi mu razkril, ali Europol o njem hrani kakršne koli podatke ali ne.
Kadar se pritožba nanaša na preveritev podatkov, ki jih je v informacijski sistem vnesla država članica, skupni nadzorni organ zagotovi, da so potrebne preveritve opravljene primerno in v tesnem sodelovanju z nacionalnim nadzornim organom države članice, ki je podatke vnesla. Skupni nadzorni organ uradno obvesti prosilca o opravljeni preveritvi, ne da bi mu razkril, ali Europol o njem hrani kakršne koli podatke ali ne.
Kadar se pritožba nanaša na preveritev podatkov, ki jih je v informacijski sistem vnesel Europol, ali podatkov, ki so shranjeni v delovnih datotekah v namene analize, skupni nadzorni organ zagotovi, da Europol opravi vse potrebne preveritve. Skupni nadzorni organ obvesti prosilca o opravljeni preveritvi, ne da bi mu razkril, ali Europol o njem hrani kakršne koli podatke ali ne.
8. Zgoraj navedene določbe se s potrebnimi spremembami nanašajo na neavtomatizirane podatke, ki jih hrani Europol v obliki podatkovnih zbirk, tj. v kakršni koli strukturirani zbirki osebnih podatkov, ki je dostopna v skladu s posebnimi kriteriji.
Člen 20
Popravljanje in brisanje podatkov
1. Če se izkaže, da so podatki, ki jih hrani Europol in ki so jih Europolu sporočile tretje države ali tretji organi, ali ki so rezultat Europolovih lastnih analiz, nepravilni, ali da njihov vnos ali shranjevanje krši to konvencijo, Europol takšne podatke popravi ali izbriše.
2. Če so podatke, ki so netočni ali kršijo to konvencijo, Europolu neposredno posredovale države članice, so jih te države članice obvezne popraviti ali izbrisati v sodelovanju z Europolom. Če so netočni podatki poslani s pomočjo kakšnega drugega ustreznega sredstva, ali če so napake v podatkih, ki jih posredujejo države članice, posledica napak pri pošiljanju, ali so bili preneseni s kršitvijo določb te konvencije, ali če do napak pride zaradi nepravilnega vnosa, prevzema ali shranjevanja podatkov ali s kršitvijo določb te konvencije s strani Europola, je Europol zavezan podatke popraviti ali izbrisati v sodelovanju z državami članicami.
3. V zvezi s primeri iz odstavkov 1 in 2 je treba nemudoma obvestiti države članice, ki te podatke sprejemajo. Države članice prejemnice navedene podatke tudi popravijo ali izbrišejo.
4. Vsaka oseba ima pravico zaprositi Europol, da popravi ali izbriše nepravilne podatke, ki se nanašajo nanjo.
Europol prosilca obvesti, da so bili podatki, ki se nanašajo nanj, popravljeni ali izbrisani. Če prosilec z Europolovim odgovorom ni zadovoljen ali če v roku treh mesecev ne prejme nikakršnega odgovora, lahko o tem obvesti skupni nadzorni organ.
Člen 21
Roki za shranjevanje in brisanje podatkovnih zbirk
1. Podatke v podatkovnih zbirkah Europol hrani le toliko časa, kolikor je to potrebno za opravljanje njegovih nalog. Potreba po nadaljnjem shranjevanju se preveri najpozneje v treh letih po vnosu podatkov. Pregled podatkov, shranjenih v informacijskem sistemu, in njihovo brisanje opravi enota, ki jih je vnesla. Pregled podatkov, shranjenih v drugih Europolovih podatkovnih zbirkah, in njihovo brisanje opravi Europol. Europol tri mesece vnaprej avtomatično obvesti države članice o izteku roka za pregled shranjevanja podatkov.
2. Med pregledom se enote iz tretjega in četrtega stavka zgoraj navedenega odstavka 1 lahko odločijo za nadaljnje shranjevanje podatkov do naslednjega pregleda, če je to še potrebno za opravljanje Europolovih nalog. Če o nadaljnjemshranjevanju podatkov niso bile sprejete nikakršne odločitve, se ti podatki avtomatično izbrišejo.
3. Shranjevanje osebnih podatkov v zvezi s posamezniki iz točke 1 prvega pododstavka člena 10(1) ne sme prekoračiti treh let. Vsak rok začne teči na novo na dan, ko se začne shranjevanje podatkov v zvezi z navedenim posameznikom. Potreba po neprekinjenem shranjevanju se pregleda vsako leto, pregled pa se dokumentira.
4. Kadar država članica iz svojih nacionalnih podatkovnih zbirk izbriše Europolu sporočene podatke, ki so shranjeni v drugih Europolovih podatkovnih zbirkah, o tem obvesti Europol. Europol v takšnih primerih izbriše podatke, razen če ima za njih še naknaden interes, ki izhaja iz obvestil, ki so bolj obsežna od tistih, ki mu jih je sporočila država članica. Europol državo članico obvesti o nadaljnjem shranjevanju takšnih podatkov.
5. Brisanje podatkov se ne izvrši, če bi to škodovalo interesom osebe, na katero se podatki nanašajo, ki zahteva zaščito. V takšnih primerih je podatke mogoče uporabiti le s privolitvijo osebe, na katero se podatki nanašajo.
Člen 22
Popravljanje in shranjevanje podatkov v dokumentih
1. Če se zgodi, da celoten dokument ali nekateri podatki iz tega dokumenta, ki jih hrani Europol, niso več potrebni za opravljanje Europolovih nalog, ali če je informacija popolnoma v nasprotju s to konvencijo, se dokument ali podatki uničijo. Dokler dokument ali podatki niso dokončno uničeni, je treba označiti, da niso uporabni.
Uničenje se ne sme izvršiti, če obstaja utemeljen sum, da bi bili legitimni interesi osebe, na katero se podatki nanašajo, s tem kršeni. V takšnih primerih mora dokument nositi enako oznako, ki prepoveduje vsakršno uporabo.
2. Če se izkaže, da so podatki, vsebovani v Europolovih dokumentih, nepravilni, jih mora Europol popraviti.
3. Vsaka oseba, na katero se nanašajo Europolovi dokumenti, lahko v zvezi z Europolom uveljavlja pravico do popravljanja ali uničenja teh dokumentov ali pripojitve oznake. V tem primeru se uporabljata člena 20(4) in 24(2) in (7).
Člen 23
Nacionalni nadzorni organ
1. Vsaka država članica določi nacionalni nadzorni organ, katerega naloga je, da neodvisno in v skladu z nacionalno zakonodajo spremlja dopustnost vnosa, dostopa in vsakega sporočanja osebnih podatkov Europolu s strani države članice, ter preveri, ali so s tem kršene pravice osebe, na katero se podatki nanašajo. V ta namen ima nadzorni organ v nacionalni enoti ali v prostorih uradnika za zvezo dostop do podatkov, ki jih je v informacijski sistem ali indeksni sistem vnesla država članica v skladu z ustreznimi nacionalnimi postopki.
Za svoje nadzorne postopke lahko nacionalni nadzorni organi dostopajo do pisarn in dokumentov njihovih uradnikov za zvezo v Europolu.
Poleg tega, v skladu z ustreznimi nacionalnimi postopki, nacionalni nadzorni organi nadzorujejo dejavnosti nacionalnih enot v okviru člena 4(4) ter dejavnosti uradnikov za zvezo v okviru točk 1 in 3 člena 5(3) ter člena 5(4) in (5), vse dokler so takšne dejavnosti pomembne za varstvo osebnih podatkov.
2. Vsak posameznik ima pravico zaprositi nacionalni nadzorni organ, da zagotovi zakonitost vnosa ali sporočanja podatkov v zvezi z njim Europolu v kakršni koli obliki ter dostopa do teh podatkov s strani zadevne države članice.
Ta pravica se uveljavlja v skladu z nacionalno zakonodajo države članice pri nacionalnem nadzornem organu, na katerega je naslovljeno zaprosilo.
Člen 24
Skupni nadzorni organ
1. Ustanovi ali uvede se neodvisni skupni nadzorni organ, katerega naloga je, da v skladu s to konvencijo opravlja pregled nad dejavnostmi Europola in tako zagotovi, da s shranjevanjem, obdelavo in uporabo podatkov, ki jih ima Europol, niso kršene pravice posameznika. Poleg tega skupni nadzorni organ spremlja dopustnost prenosa podatkov, ki izhajajo iz Europola. Skupni nadzorni organ sestavljata največ dva člana ali predstavnika (ki jima, kjer je primerno, pomagata namestnika) vsakega izmed nacionalnih nadzornih organov, za katera je zagotovljeno, da sta neodvisna in da imata vse potrebne sposobnosti, ter ki ju vsaka država članica imenuje za dobo petih let. Vsaka delegacija ima pravico do enega glasu.
Skupni nadzorni organ imenuje predsednika iz vrst svojih članov.
Člani skupnega nadzornega organa ne sprejemajo navodil drugih organov pri opravljanju svojih nalog.
2. Europol mora skupnemu nadzornemu organu pomagati pri opravljanju njegovih nalog. Pri tem zlasti:
(1) posreduje zahtevane informacije, omogoča dostop do vseh dokumentov in datotek, ter do podatkov, shranjenih v sistemu;
(2) omogoči prost dostop v vse svoje prostore v katerem koli času; in
(3) izvaja odločitve skupnega nadzornega organa v zvezi s pritožbami v skladu z določbami členov 19(7) in 20(4).
3. Skupni nadzorni organ je prav tako pristojen za pregled vseh vprašanj o izvajanju in razlag v zvezi z dejavnostmi Europola, ki se nanašajo na obdelavo in uporabo osebnih podatkov, za pregled vprašanj o preverjanjih, ki so jih neodvisno opravili nacionalni nadzorni organi držav članic ali ki se nanašajo na uveljavljanje pravice do informacij, kakor tudi za sestavo usklajenih predlogov za skupne rešitve obstoječih problemov.
4. Vsak posameznik ima pravico zaprositi skupni nadzorni organ, da mu zagotovi zakonitost in pravilnost načina zbiranja, shranjevanja, obdelave in uporabe njegovih osebnih podatkov Europola.
5. Če skupni nadzorni organ opazi kakršno koli kršitev določb iz te konvencije v zvezi s shranjevanjem, obdelavo ali uporabo osebnih podatkov, pošlje direktorju Europola pritožbe, glede katerih je mnenja, da so potrebne, in zahteva odgovor v roku, ki ga določi sam. Direktor o celotnem postopku obvesti Upravni odbor. V primeru kakršnih koli zapletov skupni nadzorni organ zadevo posreduje Upravnemu odboru.
6. Skupni nadzorni organ v rednih časovnih obdobjih sestavi poročilo o svojih dejavnostih. Po postopku iz Naslova VI Pogodbe o Evropski uniji se ta poročila posredujejo Svetu; Upravni odbor ima prvi možnost, da sprejme mnenje, ki ga priloži k poročilom.
Skupni nadzorni organ se odloči, ali bo poročilo o dejavnostih objavil ali ne in, v kolikor se odloči za objavo, opredeli tudi način objave.
7. Skupni nadzorni organ enoglasno sprejme svoj poslovnik in ga posreduje Svetu, ki ga soglasno odobri. Skupni nadzorni organ ustanovi notranji odbor, ki ga sestavlja po en usposobljen predstavnik iz vsake države članice s pravico do enega glasu. Naloga odbora je pregledovanje pritožb, predvidenih v členih 19(7) in 20(4), s pomočjo vseh ustreznih sredstev. Odbor lahko zasliši stranke na njihovozaprosilo, pri čemer jim lahko pomagajo njihovi svetovalci, v kolikor tako želijo. Odločitve, sprejete v tem sobesedilu v zvezi s strankami so dokončne.
8. Skupni nadzorni organ lahko sestavi tudi enega ali več drugih odborov.
9. S skupnim nadzornim organom se je treba posvetovati v zvezi s tistim delom proračuna, ki se nanaša nanj. Njegovo mnenje se priloži osnutku proračuna.
10. Skupnemu nadzornemu organu pomaga sekretariat, katerega naloge so opredeljene v poslovniku.
Člen 25
Zaščita podatkov
1. Europol sprejme vse potrebne tehnične in organizacijske ukrepe za zagotovitev izvajanja te konvencije. Ukrepi so potrebni takrat, kadar je vložen napor sorazmeren s ciljem, ki ga želijo izpolniti glede zaščite.
2. Ob upoštevanju avtomatizirane obdelave podatkov v Europolu vsaka država članica in Europol izvajata ukrepe, da se:
(1) nepooblaščenim osebam onemogoči dostop do opreme za obdelavo podatkov, ki se uporablja za obdelavo osebnih podatkov (nadzor dostopa do opreme);
(2) prepreči nepooblaščeno branje, kopiranje, spreminjanje ali odstranjevanje nosilcev podatkov (nadzor nosilcev podatkov);
(3) prepreči nepooblaščen vnos podatkov in nepooblaščeno preverjanje, spreminjanje ali brisanje shranjenih osebnih podatkov (nadzor shranjevanja);
(4) prepreči uporaba sistemov za avtomatizirano obdelavo podatkov nepooblaščenih oseb, ki uporabljajo opremo za sporočanje podatkov (nadzor uporabnikov);
(5) osebam, ki so pooblaščene za uporabo sistemov za avtomatizirano obdelavo podatkov, zagotovi dostop le do tistih podatkov, ki so zajeti v njihovem pooblastilu za dostop (nadzor dostopa do podatkov);
(6) zagotovijo možnosti preverjanja in ugotovitve, katerim organom je dovoljeno sporočiti osebne podatke z uporabo opreme za sporočanje podatkov (nadzor sporočanja);
(7) zagotovi, da je naknadno mogoče preveriti in ugotoviti, kateri osebni podatki so bili vneseni v sisteme za avtomatizirano obdelavo podatkov ter kdaj in kdo je podatke vnesel (nadzor vnosa);
(8) prepreči nepooblaščeno branje, kopiranje, spreminjanje ali brisanje osebnih podatkov v času pošiljanja osebnih podatkov ali v času prenosa nosilcev podatkov (nadzor prenosa):
(9) zagotovi, da je vgrajene sisteme v primeru prekinitve mogoče takoj povrniti (obnovitev);
(10) zagotovi, da funkcije sistema delujejo brezhibno, da se o pojavu napak v funkcijah takoj poroča (zanesljivost) in da shranjenih podatkov ni mogoče uničiti z okvaro sistema (neoporečnost).
NASLOV V
PRAVNI POLOŽAJ, ORGANIZACIJA IN FINANČNE DOLOČBE
Člen 26
Pravna sposobnost
1. Europol ima pravno osebnost.
2. Europol v vsaki državi članici uživa najobsežnejšo pravno in pogodbeno sposobnost, ki je na voljo pravnim osebam v okviru nacionalne zakonodaje. Europol lahko zlasti pridobi in razpolaga s premičninami ali nepremičninami ter je stranka v pravnih postopkih.
3. Europol je pooblaščen za sklenitev sporazuma o sedežu s Kraljevino Nizozemsko ter v smislu člena 10(4) za sklenitev potrebnih sporazumov o zaupnosti s tretjimi državami in tretjimi organi v skladu s členom 18(6), kot tudi drugih sporazumov v okviru pravil, ki jih je soglasno določil Svet na podlagi te konvencije ter Naslova VI Pogodbe o Evropski uniji.
Člen 27
Organi Europola
Organi Europola so:
(1) Upravni odbor;
(2) direktor;
(3) finančni nadzornik;
(4) finančni odbor.
Člen 28
Upravni odbor
1. Europol ima svoj Upravni odbor.
Upravni odbor:
(1) sodeluje pri širjenju cilja Europola (člen 2(2));
(2) soglasno opredeli pravice in obveznosti uradnikov za zvezo do Europola (člen 5);
(3) soglasno odloči o številu uradnikov za zvezo, ki jih države članice lahko pošljejo v Europol (člen 5);
(4) pripravi pravila izvajanja, ki urejajo podatkovne zbirke (člen 10);
(5) sodeluje pri sprejetju pravil, ki urejajo Europolove odnose s tretjimi državami in tretjimi organi v smislu člena 10(4) (členi 10, 18 in 42);
(6) soglasno odloči o podrobnostih v zvezi z oblikovanjem indeksnega sistema (člen 11);
(7) z dvotretjinsko večino odobri odredbe o odprtju podatkovnih zbirk (člen 12);
(8) lahko posreduje mnenja o pripombah in poročilih skupnega nadzornega organa (člen 24);
(9) preuči probleme, na katere opozori skupni nadzorni organ (člen 24(5));
(10) se odloči o podrobnostih glede postopka za preverjanje pravnega značaja dostopov v informacijski sistem (člen 16);
(11) sodeluje pri imenovanju in odstavitvi direktorja in namestnikov direktorja (člen 29);
(12) nadzoruje ustrezno izvajanje direktorjevih dolžnosti (člena 7 in 29);
(13) sodeluje pri sprejemanju kadrovskih predpisov (člen 30);
(14) sodeluje pri pripravi sporazumov o zaupnosti in sprejemanju določb o zaščiti zaupnosti (člena 18 in 31);
(15) sodeluje pri sestavi proračuna, vključujoč organizacijsko shemo, revizije in razrešnice, ki naj se dajo direktorju (člena 35 in 36);
(16) soglasno sprejme petletni finančni načrt (člen 35);
(17) soglasno imenuje finančnega nadzornika ter nadzoruje opravljanje njegovih dolžnosti (člen 35);
(18) sodeluje pri sprejetju finančnih predpisov (člen 35);
(19) soglasno odobri sklenitev sporazuma o sedežu (člen 37);
(20) soglasno sprejme pravila za varnostno preverjanje uslužbencev Europola;
(21) z dvotretjinsko večino odloča v sporih med državo članico in Europolom ali med državami članicami v zvezi z odškodnino, izplačano v okviru odgovornosti za nepooblaščeno ali nepravilno obdelavo podatkov (člen 38);
(22) sodeluje pri vsaki spremembi te konvencije (člen 43);
(23) je odgovoren za vse druge naloge, ki mu jih dodeli Svet, zlasti v določbah o izvajanju te konvencije.
2. Upravni odbor sestavlja po en predstavnik vsake države članice. Vsak član Upravnega odbora ima en glas.
3. Vsakega člana Upravnega odbora lahko predstavlja njegov nadomestni član; v odsotnosti polnopravnega člana lahko nadomestni član uveljavlja njegovo volilno pravico.
4. Komisija Evropskih skupnosti je povabljena, da sodeluje na sestankih Upravnega odbora brez glasovalne pravice. Upravni odbor pa se lahko odloči, da se sestane brez predstavnika Komisije.
5. Člani ali nadomestni člani imajo pravico, da jih na sestankih Upravnega odbora spremljajo ali jim svetujejo strokovnjaki iz njihovih držav članic.
6. Upravnemu odboru predseduje predstavnik tiste države članice, ki predseduje Svetu.
7. Upravni odbor soglasno sprejme svoj poslovnik.
8. Vzdržani glasovi Upravnemu odboru ne preprečijo sprejemanja soglasnih odločitev.
9. Upravni odbor se sestane najmanj dvakrat letno.
10. Upravni odbor vsako leto soglasno sprejme:
(1) splošno poročilo o dejavnostih Europola med preteklim letom;
(2) poročilo o prihodnjih dejavnostih Europola, upoštevajoč operativne zahteve držav članic in posledice za Europol v zvezi s proračunom in kadri.
Ti poročili se posredujeta Svetu v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji.
Člen 29
Direktor
1. Na čelu Europola je direktor, ki ga imenuje Svet soglasno po postopku iz Naslova VI Pogodbe o Evropski uniji po sprejetju mnenja Upravnega odbora za štiriletni mandat z enim podaljšanjem.
2. Direktorju pomaga število namestnikov direktorja, kot jih določi Svet in imenuje za štiriletni mandat z enim podaljšanjem po postopku iz odstavka 1. Njihove naloge v največjih podrobnostih opredeli direktor.
3. Direktor je odgovoren za:
(1) opravljanje nalog, dodeljenih Europolu;
(2) tekoče upravljanje;
(3) kadrovsko vodenje;
(4) ustrezno pripravo in izvajanje odločitev Upravnega odbora;
(5) pripravo osnutka proračuna, osnutka organizacijske sheme in osnutka petletnega finančnega načrta ter izvajanja proračuna Europola;
(6) vse druge naloge, ki so mu dodeljene po tej konvenciji ali s strani Upravnega odbora.
4. Direktor za opravljanje svojih dolžnosti odgovarja Upravnemu odboru. Prisostvuje tudi na njegovih sestankih.
5. Direktor je pravni predstavnik Europola.
6. Direktorja in namestnike direktorja je mogoče odstaviti z odločitvijo Sveta, ki se sprejme v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji z dvotretjinsko večino držav članic po prejetju mnenja Upravnega odbora.
7. Ne glede na odstavka 1 in 2 prvi mandat po začetku veljavnosti te konvencije traja pet let za direktorja, štiri leta za njegovega neposrednega namestnika in tri leta za njegovega drugega namestnika.
Člen 30
Osebje
1. Direktorja, namestnike direktorja in uslužbence Europola pri njihovih dejavnostih vodijo cilji in naloge Europola, zato ne sprejemajo ali iščejo navodil pri nobeni vladi, organu, organizaciji ali osebi zunaj Europola, razen če je to predvideno v tej konvenciji in brez vpliva na Naslov VI Pogodbe o Evropski uniji.
2. Direktor je odgovoren za namestnike direktorja in uslužbence Europola. Uslužbence zaposli in odstavi. Pri izbiri uslužbencev mora, poleg upoštevanja posameznikove ustreznosti in profesionalne usposobljenosti, upoštevati tudi potrebo po zagotovitvi ustrezne zastopanosti državljanov vseh držav članic ter uradnih jezikov Evropske unije.
3. Podrobne ureditve se določijo v kadrovskih predpisih, ki ga Svet po prejetju mnenja Upravnega odbora soglasno sprejme v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji.
Člen 31
Zaupnost
1. Europol in države članice sprejmejo ustrezne ukrepe za zaščito zaupnih informacij, ki jih pridobi Europol ali ki so z njim izmenjane na podlagi te konvencije. V ta namen Svet soglasno sprejme ustrezna pravila o zaupnosti, ki jih pripravi Upravni odbor in predloži Svetu v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji.
2. Kadar Europol osebam zaupa občutljivo nalogo, države članice na prošnjo direktorja Europola pripravijo varnostno preverjanje svojih lastnih državljanov, ki naj se opravi v skladu z nacionalnimi določbami, ter druga drugi za ta namen posredujejo vzajemno pomoč. Pristojni organ v okviru nacionalnih določb obvesti Europol le o rezultatih varnostnega preverjanja, obvezujočih za Europol.
3. Vsaka država članica in Europol lahko obdelovanje podatkov v Europolu zaupa le tistim osebam, ki so opravili posebno usposabljanje in prestali varnostno preverjanje.
Člen 32
Obveznost molčečnosti in zaupnosti
1. Organi Europola, njihovi člani, namestniki direktorja, uslužbenci Europola in uradniki za zvezo se vzdržijo vseh dejanj in vsakega izražanja mnenja, ki bi lahko škodoval Europolu ali njegovim dejavnostim.
2. Organi Europola, njihovi člani, namestniki direktorja, uslužbenci Europola in uradniki za zvezo kot tudi vse druge osebe, ki jih posebej obvezujeta molčečnost in zaupnost, ne smejo nepooblaščeni osebi ali javnosti razkriti nikakršnih dejstev ali informacij, s katerimi se seznanijo med opravljanjem svojih dolžnosti ali izvajanjem svojih dejavnosti. To ne velja za dejstva ali informacije, ki so preveč nepomembnega značaja, da bi se zanje zahtevala zaupnost. Obveznost molčečnosti in zaupnosti velja celo po izteku dolžnosti ali delovnega razmerja ali po zaključku dejavnosti. Europol uradno sporoči posebne obveznosti iz prvega stavka, in hkrati opozori na pravne posledice vsake kršitve; sestavi se zapis o takšnih uradnih obvestilih.
3. Organi Europola, njihovi člani, namestniki direktorja, uslužbenci Europola in uradniki za zvezo kot tudi vse druge osebe, za katere veljajo obveznosti, predvidene v odstavku 2, ne smejo razkrivati dokazov na ali izven sodišča ali dajati kakršni koli izjav o katerih koli dejstvih ali informacijah, s katerimi se lahko seznanijo med opravljanjem svojih dolžnosti ali izvajanjem svojih dejavnosti, brez navodil direktorja ali, v kolikor gre za direktorja, brez navodil Upravnega odbora.
Direktor ali Upravni odbor, odvisno od primera, pristopita sodnemu organu ali kateremu koli pristojnemu organu z namenom sprejemanja potrebnih ukrepov v okviru nacionalne zakonodaje, na podlagi katere deluje organ; ti ukrepi so lahko ali prilagojeni postopkom posredovanja dokazov, da se zagotovi zaupnost informacij, ali, pod pogojem da zadevna nacionalna zakonodaja tako dovoljuje, da se zavrne vsakršno sporočanje podatkov, kolikor je to ključno za zaščito interesov Europola ali države članice.
Kadar zakonodaja države članice predvideva pravico do zavrnitve posredovanja dokazov, morajo osebe, ki so bile zaprošene, da dokaze posredujejo, za to pridobiti dovoljenje. Dovoljenje izda direktor in, v kolikor naj dokaze posreduje direktor, pa Upravni odbor. Kadar je za dokaze v zvezi z informacijami, ki jih dobi od Europola, zaprošen uradnik za zvezo, se takšno dovoljenje izda po sprejetju soglasja države članice, odgovorne za zadevnega uradnika.
Nadalje, če obstaja možnost, da bi dokaz lahko razkril informacije in obvestila, ki jih je država članica sporočila Europolu ali ki očitno vpletajo državo članico, je treba stališče zadevne države članice v zvezi z dokazom določiti še pred izdajo dovoljenja.
Dovoljenje za posredovanje dokazov se lahko zavrne, v kolikor je to potrebno za zaščito glavnih interesov Europola ali države članice ali držav, ki potrebujejo zaščito.
Ta obveznost velja tudi po izteku dolžnosti ali delovnega razmerja ali po zaključku dejavnosti.
4. Vsaka država članica obravnava vsako kršenje obveznosti molčečnosti ali zaupnosti iz odstavkov 2 in 3 kot kršitev obveznosti, ki jih nalaga njena zakonodaja o uradnih ali poklicnih tajnostih ali njene določbe o varstvu zaupnega materiala.
Kadar je to primerno, vsaka država članica najpozneje do dne začetka veljavnosti te konvencije določi pravila v okviru nacionalne zakonodaje ali določb, ki so potrebna za uvedbo postopkov proti kršenju obveznosti glede molčečnosti ali zaupnosti iz odstavkov 2 in 3. S tem zagotovi, da zadevna pravila in določbe veljajo tudi za njene lastne uslužbence, ki med svojim delom vzpostavljajo zvezo z Europolom.
Člen 33
Jeziki
1. Poročila in vsa druga dokazila ter dokumentacija, poslani Upravnemu odboru, se posredujejo v vseh uradnih jezikih Evropske unije; delovni jeziki Upravnega odbora so uradni jeziki Evropske unije.
2. Prevode, potrebne za delo Europola, posreduje prevajalsko središče institucij Evropske unije.
Člen 34
Obveščanje Evropskega parlamenta
1. Predsedstvo Sveta vsako leto posreduje Evropskemu parlamentu posebno poročilo o delu Europola. Če naj se ta konvencija kakor koli spreminja, se o tem opravi posvet z Evropskim parlamentom.
2. Predsedstvo Sveta ali njegovi predstavniki, ki jih imenuje predsedstvo, upošteva v zvezi z Evropskim parlamentom obveznosti glede molčečnosti in zaupnosti.
3. Obveznosti iz tega člena ne vplivajo na pravice nacionalnih parlamentov, na člen K.6 Pogodbe o Evropski uniji in na splošna načela, ki veljajo za zveze z Evropskim parlamentom, v skladu z Naslovom VI Pogodbe o Evropski uniji.
Člen 35
Proračun
1. Sestavijo se ocene vseh Europolovih prihodkov in odhodkov, vključno z vsemi stroški skupnega nadzornega organa in sekretariata, ki ga Europol ustanovi v okviru člena 22 za vsako finančno leto, te postavke pa vnese v proračun; proračunu se priloži ustanovitveni načrt. Finančno leto se začne 1. januarja in konča 31. decembra.
Prihodki in odhodki, prikazani v proračunu, so uravnoteženi.
Skupaj s proračunom se sestavi petletni finančni načrt.
2. Proračun se financira iz prispevkov držav članic in drugih naključnih dohodkov. Finančni prispevek vsake države članice se določi v skladu z višino njenega bruto nacionalnega proizvoda v odnosu do skupnega zneska bruto nacionalnih proizvodov držav članic za leto pred letom sestave proračuna. Za namene tega odstavka "bruto nacionalni proizvod" pomeni bruto nacionalni proizvod, določen v skladu z Direktivo Sveta 89/130/EGS, Euratom z dne 13. februarja 1989 o usklajevanju kompilacije bruto družbenega proizvoda po tržnih cenah.
3. Direktor najpozneje do 31. marca vsakega leta sestavi osnutek proračuna in osnutek ustanovitvenega načrta za naslednje finančno leto in ju po pregledu s strani finančnega odbora odda Upravnemu odboru skupaj z osnutkom petletnega finančnega načrta.
4. Upravni odbor sprejme odločitev glede petletnega finančnega načrta. Odločitev sprejmesoglasno.
5. Po prejetju mnenja Upravnega odbora Svet v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji najpozneje do 30. junija sprejme proračun Europola za leto pred finančnim letom. Odločitev sprejme s soglasjem. Ko Svet sprejme proračun, so države članice obvezne nemudoma ponuditi ustrezen finančni prispevek.
6. Direktor izvaja proračun v skladu s finančnimi predpisi, predvidenimi v odstavku 9.
7. Spremljanje obveznosti in izplačila odhodkov ter ustanovitve in zbiranja dohodkov izvaja finančni nadzornik iz uradnega revizijskega organa ene izmed držav članic, ki ga soglasno imenuje Upravni odbor, kateremu je odgovoren. V primeru posebnih postavk prihodkov ali odhodkov lahko finančni predpisi predvidijo določbo o naknadnem spremljanju s strani finančnega nadzornika.
8. Finančni odbor sestavlja po en proračunski predstavnik iz vsake države članice. Njegova naloga je pripraviti razprave o proračunskih in finančnih zadevah.
9. Svet v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji soglasno sprejme finančne predpise in zlasti opredeli podrobna pravila za sestavo, dopolnjevanje in izvajanje proračuna ter spremljanje njegovega izvajanja kot tudi način plačila finančnih prispevkov s strani držav članic.
Člen 36
Revizija
1. Računi v zvezi z vsemi dohodki in odhodki, vnesenimi v proračun, skupaj z izkazom stanja, ki Europolu prikazujejo sredstva in obveznosti, so predmet letne revizije v skladu s finančnimi predpisi. Za ta namen direktor posreduje poročilo o letnih računih najpozneje do 31. maja naslednjega leta.
2. Revizijo izvede skupni revizijski odbor v sestavi treh članov, ki jih imenuje Računsko sodišče Evropskih skupnosti na predlog njegovega predsednika. Mandat članov traja tri leta; ti se menjajo tako, da se vsako leto zamenja član, ki je bil tri leta v revizijskem odboru. Ne glede na določbe drugega stavka, mandat člana, ki je po žrebu:
– prvi, traja dve leti,
– drugi, traja tri leta,
– tretji, traja štiri leta,
in sicer v začetni postavi skupnega revizijskega odbora po začetku delovanja Europola.
Vsi stroški, ki nastanejo iz revizije, se zaračunajo v proračun, kot predvideva člen 35.
3. Skupni revizijski odbor v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji Svetu posreduje revizijsko poročilo o letnih računih; pred tem imata direktor in finančni nadzornik možnost izraziti mnenje o revizijskem poročilu, o katerem razpravlja tudi Upravni odbor.
4. Direktor Europola posreduje članom skupnega revizijskega odbora vse informacije in vso pomoč, ki jo zahteva pri opravljanju svojih nalog.
5. Odločitev o dolžnostih, ki naj bodo naložene direktorju v zvezi z izvajanjem proračuna za zadevno finančno leto, sprejme Svet po pregledu poročila o letnih računih.
6. Podrobna pravila za izvajanje revizije so določena v finančnih predpisih.
Člen 37
Sporazum o sedežu
Potrebne ureditve glede namestitve, ki jo je treba priskrbeti Europolu v državi sedeža ter glede prostorov, ki naj mu jih navedena država omogoči, so skupaj s posebnimi pravili, ki v državi Europolovega sedeža veljajo za člane Europolovih organov, njegove namestnike direktorja, uslužbence in njihove družinske člane, opredeljene v sporazumu o sedežu med Europolom in Kraljevino Nizozemsko, ki se sklene po sprejetju soglasnega dovoljenja s strani Upravnega odbora.
NASLOV VI
ODGOVORNOST IN PRAVNO VARSTVO
Člen 38
Odgovornost za nepooblaščeno ali nepravilno obdelavo podatkov
1. Vsaka država članica je v skladu z nacionalno zakonodajo odgovorna za vsako škodo, povzročeno posamezniku, ki je posledica pravnih ali dejanskih napak v podatkih, shranjenih ali obdelanih v Europolu. Samo država članica, v kateri se je zgodila povzročitev škode, je lahko tožena za povračilo škode, ki jo vloži oškodovana stranka pred sodiščem, ki spada pod pristojnost nacionalne zakonodaje vpletene države članice. Država članica se ne sme zagovarjati, da je druga država članica prenesla nepravilne podatke, da bi se izognila lastni odgovornosti v okviru svoje nacionalne zakonodaje v zvezi z oškodovano stranko.
2. Če so te pravne ali dejanske napake posledica napačno sporočenih podatkov ali neuspele izpolnitve obveznosti iz te konvencije s strani ene ali več držav članic ali posledica nepooblaščenega ali nepravilnega shranjevanja ali obdelovanja s strani Europola, so Europol ali druge države članice obvezne na zahtevo izplačati zneske v obliki odškodnin, razen če je podatke uporabila država članica, na področju katere je bila povzročena škoda s kršenjem te konvencije.
3. Vsak spor med navedeno državo članico in Europolom ali drugo državo članico glede načela ali zneska odplačila se naslovi na Upravni odbor, ki zadevo razreši z dvotretjinsko večino.
Člen 39
Druge vrste odgovornosti
1. Europolove pogodbene odgovornosti ureja zakon, ki velja za posamezno pogodbo.
2. V primeru nepogodbenih odgovornosti je Europol obvezen, neodvisno od vsake odgovornosti iz člena 38, popraviti vsako škodo, ki je nastala zaradi napak njegovih organov, namestnikov direktorja ali njegovih uslužbencev pri opravljanju njihovih dolžnosti, v kolikor jih je s tem mogoče bremeniti in ne glede na različne postopke za zahtevo odškodnine, ki obstajajo po zakonodaji države članice.
3. Oškodovana stranka ima pravico zahtevati, da se Europol od tožbe vzdrži ali jo zavrže.
4. Nacionalna sodišča držav članic, pristojna za reševanje sporov, ki se nanašajo na odgovornost Europola, kot je določeno v tem členu, so določena na podlagi ustreznih določb Bruseljske konvencije z dne 27. septembra 1968 o pristojnosti in priznavanju ter izvrševanju sodnih odločb v civilnih in trgovinskih zadevah, kasneje spremenjenimi s Pogodbami o pristopu.
Člen 40
Reševanje sporov
1. O sporih med državami članicami glede razlage ali uporabe te konvencije na začetni stopnji razpravlja Svet v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji z namenom najti rešitev.
2. Kadar takšni spori niso razrešeni v šestih mesecih, se države članice, ki so stranke v sporu, z medsebojnim sporazumom odločijo o načinih, po katerih naj se spori razrešijo.
3. Določbe o pritožbah, na katere opozarjajo pravila v zvezi s pogoji zaposlitve, ki veljajo za začasno in pomožno osebje Evropskih skupnosti veljajo s potrebnimi spremembami tudi za osebje Europola.
Člen 41
Privilegiji in imunitete
1. Europol, člani njegovih organov in namestniki direktorjev ter uslužbenci Europola uživajo privilegije in imunitete pri opravljanju svoji nalog v skladu s protokolom, ki določa pravila za uporabo v vseh državah članicah.
2. Kraljevina Nizozemska in druge države članice pod istimi pogoji sklenejo, da se uradnikom za zvezo, ki jih predlagajo druge države članice, kot tudi njihovim družinskim članom, podelijo tisti privilegiji in imunitete, potrebne za ustrezno opravljanje nalog uradnikov za zvezo v Europolu.
3. Protokol iz odstavka 1 sprejme Svet soglasno v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji, odobrijo pa ga države članice v skladu z ustavnimi pravili vsake izmed njih.
NASLOV VII
KONČNE DOLOČBE
Člen 42
Odnosi s tretjimi državami in tretjimi organi
1. Kolikor je pomembno za opravljanje nalog iz člena 3, Europol vzpostavi in vzdržuje medsebojne odnose s tretjimi organi v smislu točk 1 in 3 člena 10(4). Upravni odbor soglasno sestavi pravila, ki urejajo takšne odnose. Ta določba ne vpliva na člen 10(4) in (5) ter člen 18(2); izmenjave osebnih podatkov se izvršijo le v skladu z določbami iz Naslovov II do IV te konvencije.
2. Kolikor je to potrebno za opravljanje nalog iz člena 3, Europol lahko tudi vzpostavi in vzdržuje odnose s tretjimi državami in tretjimi organi v smislu točk 4, 5, 6 in 7, člena 10(4). Po prejetju mnenja Upravnega odbora, Svet soglasno in v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji, sestavi pravila, ki urejajo odnose iz prvega stavka. Tretji stavek odstavka 1 se uporablja s potrebnimi spremembami.
Člen 43
Spremembe Konvencije
1. V skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji se Svet na predlog države članice in po posvetu z Upravnim odborom soglasno odloči v okviru člena K.1(9) Pogodbe o Evropski uniji o vseh spremembah te konvencije, ki jih predlaga državam članicam, da naj jih sprejmejo v skladu s svojimi ustavnimi pravili.
2. Spremembe začnejo veljati v skladu s členom 45(2) te konvencije.
3. Svet pa se lahko soglasno v skladu s postopkom iz Naslova VI Pogodbe o Evropski uniji odloči, na pobudo države članice in po tem, ko je o zadevi že razpravljal Upravni odbor, za razširitev, spremembo ali dopolnitev opredelitev oblik kriminala iz priloge. Poleg tega se lahko odloči za uvedbo opredelitev novih oblik kriminala, navedenih v prilogi.
4. Generalni sekretar Sveta Evropske unije uradno obvesti vse države članice o datumu začetka veljavnosti sprememb.
Člen 44
Pridržki
V zvezi s to konvencijo niso dovoljeni nobeni pridržki.
Člen 45
Začetek veljavnosti
1. To konvencijo sprejmejo države članice v skladu s svojimi ustavnimi pravili.
2. Države članice uradno obvestijo depozitarja o zaključku vseh postopkov, ki so v skladu z njihovimi ustavnimi pravili potrebni za sprejem te konvencije.
3. Ta konvencija začne veljati prvega dne v mesecu, ki sledi izteku trimesečnega obdobja po priglasitvi iz odstavka 2 države članice, ki je kot član Evropske unije na dan sprejetja akta o sestavi te konvencije s strani Sveta, zadnja, ki izpolni naveden pogoj.
4. Brez vpliva na odstavek 2 Europol ne prevzema dejavnosti iz te konvencije do začetka veljavnosti zadnjega izmed aktov iz členov 5(7), 10(1), 24(7), 30(3), 31(1), 35(9), 37 ter 41(1) in (2).
5. Ko Europol prevzame svoje dejavnosti, se zaključijo dejavnosti Europol službe za droge v okviru skupnih nalog, ki veljajo za Europol službo za droge z dne 10. marca 1995. Hkrati postane last Europola vsa oprema, ki je financirana iz skupnega proračuna Europol službe za droge, ki jo je Europol služba za droge razvila ali izdelala ali ki ji jo je na brezplačno razpolago dala za stalno uporabo država sedeža.
6. Ko Svet sprejme akt o sestavi te konvencije, države članice, ki delujejo vsaka zase ali skupaj, sprejmejo pripravljalne ukrepe v okviru svoje nacionalne zakonodaje, ki so potrebni za začetek Europolovih dejavnosti.
Člen 46
Pristop novih držav članic
1. Ta konvencija je odprta za pristop katere koli države, ki postane članica Evropske unije.
2. Besedilo te konvencije v jeziku države pristopnice, ki ga sestavi Svet Evropske unije, je enako verodostojno.
3. Listine o pristopu se predajo depozitarju.
4. Ta konvencija, ob upoštevanju vsake države pristopnice, začne veljati prvega dne v mesecu, ki sledi izteku trimesečnega obdobja po dnevu predaje listin o pristopu ali na dan začetka veljavnosti te konvencije, če ta že ni začela veljati v času izteka navedenega obdobja.
Člen 47
Depozitar
1. Generalni sekretar Sveta Evropske unije prevzame naloge depozitarja te konvencije.
2. Depozitar v Uradnem listu Evropskih skupnosti objavi priglasitve, listine ali sporočila, ki veljajo za to konvencijo.
V potrditev tega so spodaj podpisani pooblaščenci podpisali to konvencijo.
V Bruslju, dne šestindvajsetega julija leta tisoč devetsto petindevetdeset, v enem izvodu, v danskem, nizozemskem, angleškem, finskem, francoskem, nemškem, grškem, irskem, italijanskem, portugalskem, španskem in švedskem jeziku, pri čemer je vsako besedilo enako verodostojno, takšen originalni izvod pa ostane deponiran v arhivih generalnega sekretariata Sveta Evropske unije.
PRILOGA
iz člena 2
Seznam resnih oblik mednarodnega kriminala, ki jih lahko rešuje Europol poleg tistih, ki so že predvidene v členu 2(2) v skladu s cilji Europola iz člena 2(1).
 
Zoper življenje, telo ali osebno svobodo:
– umor, hude telesne poškodbe,
– nedovoljeno trgovanje s človeškimi organi in tkivi,
– ugrabitev, nezakonito zadrževanje in jemanje talcev,
– rasizem in ksenofobija.
 
Zoper lastnino ali javnim dobrinam, vključno z goljufijo:
– organiziran rop,
– nedovoljen promet kulturnih dobrin, vključno s starinami in umetninami,
– prevare in goljufije,
– grožnje in izsiljevanje,
– ponarejanje in piratstvo,
– ponarejanje uradnih dokumentov in trgovina z njimi,
– ponarejanje denarja in plačilnih sredstev,
– računalniški kriminal,
– korupcija.
 
Nezakonito trgovanje in škoda, povzročena v okolju:
– nedovoljena trgovina z orožjem, strelivom in eksplozivi,
– nedovoljena trgovina z ogroženimi živalskimi vrstami,
– nedovoljena trgovina z ogroženimi rastlinskimi vrstami in podvrstami,
– okolje-varstveni kriminal,
– nedovoljena trgovina s hormonskimi snovmi in drugimi spodbujevalci rasti.
 
Poleg tega, v skladu s členom 2(2), posredovanje napotkov Europolu, naj rešuje eno izmed zgoraj naštetih oblik kriminala, pomeni, da je Europol prav tako pristojen za reševanje sorodnih dejavnosti pranja denarja in z njim povezanih kaznivih dejanj.
 
Upoštevajoč oblike kriminala, naštete v členu 2(2) za namene konvencije:
– "kriminal, povezan z jedrskimi in radioaktivnimi snovmi" pomeni kazniva dejanja, našteta v členu 7(1) Konvencije o fizični zaščiti jedrskega materiala, podpisane na Dunaju in v New Yorku 3. marca 1980, ki velja za jedrski in/ali radioaktivni material, opredeljen v členu 197 pogodbe Euratom in Direktive 80/836/Euratom z dne 15. julija 1980,
– "nezakonito tihotapljenje imigrantov" pomeni dejavnosti, s katerimi se namerno za finančni dobiček omogoči vstop v, bivanje ali zaposlitev na ozemlju držav članic Evropske Unije, v nasprotju s pravili in pogoji, ki veljajo v državah članicah,
– "trgovina z ljudmi" pomeni izpostavljanje osebe pravemu in nezakonitemu vplivu drugih oseb z uporabo nasilja ali groženj ali z zlorabo oblasti ali intrigo z namenom izkoriščanja prostitucije, oblik spolnega izkoriščanja in zlorabe mladoletnikov ali trgovine z zapuščenimi otroki,
– "kriminal, povezan z motornimi vozili" pomeni krajo ali odtujitev motornih vozil, tovornjakov, poltovornih vozil, tovorov tovornjakov ali poltovornih vozil, avtobusov, motornih koles, prikolic in kmetijskih vozil, delovnih vozil in rezervnih delov za takšna vozila, ter sprejemanje in skrivanje teh predmetov,
– "nezakonite dejavnosti pranja denarja" pomenijo kazniva dejanja, našteta v členu 6(1) do (3) Konvencije Sveta Evrope o pranju denarja, iskanju, zajetju in zaplembi postopkov iz kriminala, podpisane v Strasbourgu, dne 8. novembra 1990.
 
Oblike kriminala iz člena 2 in te Priloge ocenijo pristojni nacionalni organi v skladu z nacionalno zakonodajo držav članic, ki jim pripadajo.
Izjava
o členu 40 (2)
"Naslednje države članice se strinjajo, da bodo v takšnih primerih sistematično predložile spor Sodišču evropskih skupnosti:
– Kraljevina Belgija,
– Kraljevina Danska,
– Zvezna republika Nemčija,
– Helenska republika,
– Kraljevina Španija,
– Francoska republika,
– Irska,
– Italijanska republika,
– Veliko vojvodstvo Luksemburg,
– Kraljevina Nizozemska,
– Republika Avstrija,
– Portugalska republika,
– Republika Finska,
– Kraljevina Švedska."
3. člen
Republika Slovenija izjavlja, da bo v primerih iz drugega odstavka 40. člena konvencije spor med Republiko Slovenijo in državo članico, ki bo stranka v sporu, predložila v reševanje Sodišču evropskih skupnosti.
4. člen
Nacionalna enota, določena v 4. členu konvencije, je pristojna enota Generalne policijske uprave v Ministrstvu za notranje zadeve Republike Slovenije – Policiji. Pri opravljanju svojih nalog sodeluje s pristojnima enotama Ministrstva za finance Republike Slovenije, odgovornima za področji carinskih zadev in preprečevanja pranja denarja.
5. člen
Za izvajanje konvencije skrbi Ministrstvo za notranje zadeve Republike Slovenije.
6. člen
Ta zakon začne veljati naslednji dan po objavi v Uradnem listu Republike Slovenije – Mednarodne pogodbe.
Št. 212-05/04-40/1
Ljubljana, dne 20. maja 2004
EPA 1297-III
Predsednik
Državnega zbora
Republike Slovenije
Borut Pahor l. r.