The Republic of Srpska

In compliance with Article 14 and Article 68 of the Law on the Protection of Personal Data (Official Gazette of BIH, 12/25)(hereinafter: the Law), the aim of the Privacy rules of the Republic of Srpska Ministry of the Interior (hereinafter: the Ministry) is to transparently provide information on processing their personal data to all persons whose personal information is processed by the Ministry as a part of procedures that are being implemented, with exceptions defined by a special law.

The Privacy Rules apply to all personal data that the Ministry collects, uses or processes in another way, directly or through other controlling authorities.

According to the Law, these notions mean the following:

Personal data refers to any data relating to an identified or identifiable natural person.

Processing of personal data refers to any procedure or set of procedures performed on personal data or sets of personal data using automated or non-automated means, such as collecting, recording, organizing, structuring, keeping, adapting or amending, detecting, gaining insight, using, detecting through transfer, disseminating or otherwise putting at disposal, harmonizing or combining, limiting, deleting or destruction.

Data controller is a natural or legal person, a public authority or competent authority that independently or with another entity defines purposes or means for processing personal data.

Data processor is a natural or legal person, a public authority competent for personal data processing on behalf of data controller.

Third party is a natural or legal person, public authority, agency or other body that is not a holder of personal data, data controller, data processor or a person authorized for processing personal data under direct competence of a data controller or data processor.

Public authority is every legislative, executive or court body at all levels of government in Bosnia and Herzegovina.

Competent authority is an authority competent for prevention, investigation and detection of criminal offences, prosecution of perpetrators of criminal offences or execution of criminal sanctions, including the protection and prevention of threats to public security, as well as the legal persons authorized by law to perform these activities, as a special category.

1. Information on data controller

The Republic of Srpska Ministry of the Interior,
Trg Republike Srpske 1, 78 000 Banja Luka
Phone: +387 51 338 478; fax +387 51 338 844
E-mail: mup@mup.vladars.rs

Officer for personal data protection (in the field of police work)
Phone: +387 51 333 622
E-mail: szizr.szzlp@mup.vladars.rs

Officer for personal data protection (in the field of administrative and legal affairs)
Phone: +387 51 334 348
E-mail: upkp.szzlp@mup.vladars.rs

2. The purpose and legal basis for personal data processing

The Ministry is processing your personal data in accordance with the Law, based on Articles 2, 5, and 6 of the Law on Police and Internal Affairs (Official Gazette of the Republic of Srpska, 57/16, 110/16, 58/19, 82/19, 18/22, 55/23, 48/24, and 81/25), by completing their competence and powers, which particularly include the following:

Police affairs

• prevention of minor offences and criminal offences,
• detecting criminal offences and minor offences, finding, arresting and handing over the perpetrators of criminal offences and minor offences to the competent authorities,
• maintaining public order and peace;

and other internal affairs, especially those focused on the following:

• administrative and legal affairs that are related to unique designated numbers, permanent and temporary residence, passports, identity cards, driving licences, registration of motor vehicles and trailers, and control of procurement, keeping and carrying weapons and ammunition.

3. Time frame for keeping personal data

The Ministry is processing your personal data within a timeframe that is necessary to fulfill the purpose of processing them. After the purpose of collecting your personal data is fulfilled, the data are no longer used, but are kept in accordance with the List of categories of documentary material and deadlines for keeping, defined by the Ministry of the Interior in the Decision no: S/M-052-189/25 from 23 January 2025, adopted based on the Law on archival activities (Official Gazette of the Republic of Srpska, 119/08).

4. Technical and organizational measures for personal data protection

The Ministry is processing your personal data in the manner that provides appropriate security and confidentiality as well as the appropriate application of principles for legal data processing, and the reduction of the amount of personal data according to the necessity principle. The Ministry respects the period for keeping personal data and their availability.
Physical, technical and organizational protection measures for personal data were undertaken, as prescribed by the Personal data security plan. All the employees of the Ministry have signed the confidentiality statements regarding the personal data to which they have access.

5. What are your rights related to personal data processing?

With exceptions defined by the law, you have the following rights:

• the right to access your personal data,
• the right to correct your personal data,
• the right to erase your personal data,
• the right to make an objection.

In order to realize your rights, you may address the Ministry in writing or by e-mail to the listed e-mail address. If you are dissatisfied with an action of the Ministry, you may address the competent monitoring authority at www.azlp.ba or by filing a lawsuit with the competent court.

6. Transferring personal data to other data controllers; transferring personal data abroad

The Ministry may give your personal data to other data controllers if that is necessary to implement the obligations defined by law. In addition, the Ministry may give your personal data to the third party if that is necessary for the completion of the obligations of the third party defined by law or if it is necessary for implementing the legitimate interests of the third party. Furthermore, the Ministry is not transferring your personal data to other controllers abroad unless such processing is necessary according to the law or international agreement that is binding for the Ministry.
Additionally, the Ministry may provide access to your personal data to the providers of information-communication services with who they have signed a contract and those that follow the rules of handling personal data.

7. Changes of the Privacy rules

The Ministry is going to update regularly the Privacy rules so they present accurate information. According to the transparency principle, you are going to be timely informed on all amendments to the Privacy rules.