When your personal data are processed in the Schengen Information System or the Visa Information System
The Schengen Information System (SIS) and the joint Visa Information System (VIS) of the EU countries are information exchange systems used as tools for cooperation between authorities and assistance with matters such as border checks. The Schengen Information System is used in cooperation between the police, the customs, border control and law enforcement authorities, among other things. On this page, you can find information on how your personal data are processed in the Schengen Information System and the Visa Information System, and how you can exercise your rights as a data subject concerning your data in the information systems.
The Schengen Information System (SIS)
The Schengen Information System (SIS) is a system that helps with finding wanted or missing persons. The information system can also be used for discreet or specific checks of people or objects.
Every Schengen country can enter information into the Schengen Information System concerning people who are wanted for arrest or who are sought based on a request related to a police investigation or legal proceedings, for instance.
Personal data in the database
The personal data are stored in a central database maintained by the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA). The data are then available to the law enforcement and border control authorities of the Schengen countries.
A Member State can also enter information about persons who are not nationals of a Schengen country, and who shall be refused entry into the Schengen Area by the decision of an authority or a court of law of said country. This information will be available to authorities that are competent to issue visas and residence permits. In addition, the authorities responsible for vehicle registration in the Schengen countries can access information related to stolen or missing vehicles in the system.
Read more about the SIS II information system on the website of eu-LISA
The processing of the data is supervised by the EDPS and the national data protection authorities
The European Data Protection Supervisor (EDPS) and the national data protection authorities of the EU Member States share the responsibility of supervising the processing of data in the Schengen Information System. The EDPS is responsible for supervising the central database, while the national data protection authorities ensure that the authorities in each country handle the data in the Schengen Information System correctly. This means that the Finnish Office of the Data Protection Ombudsman supervises how the Finnish authorities process data in the Schengen Information System.
Rights of the data subjects
You have the right to find out if the Schengen Information System contains data related to you. You also have the right to request that the data concerning you in the Schengen Information System are rectified or erased or that their processing is restricted. In order to exercise your rights, you can contact the National Police Board, which is the authority in Finland responsible for the processing of personal data in the Schengen Information System. If you are not satisfied with how your request was handled by the National Police Board, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman.
Further information on the processing of personal data by the Finnish police on their website
Contact information of the Office of the Data Protection Ombudsman
The Visa Information System (VIS)
The Visa Information System (VIS) is a system for exchanging visa information between the EU Member States.
Among other things, the system is intended to facilitate the visa application procedure and border checks within the EU and prevent visa shopping and fraud. The Visa Information System contains personal data that have been collected and registered in connection with the visa application process. In addition to the personal data provided in the visa application form, the data also includes the applicant's fingerprints and facial image.
Personal data are stored in a central database
The personal data are stored in a central database maintained by the European Union Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice (eu-LISA). The authorities that issue visas as well as the personnel that carry out border checks can access the data. Under certain conditions, other authorities may also have access to the data in the Visa Information System for law enforcement purposes. In Finland, the Ministry for Foreign Affairs is responsible for the processing of data in the Visa Information System.
Read more about the VIS system on the website of eu-LISA
The processing of visa information is supervised by the EDPS and the national data protection authorities
The European Data Protection Supervisor (EDPS) and the national data protection authorities of the EU Member States share the responsibility of supervising the processing of data in the Visa Information System. The EDPS is responsible for supervising the central database, while the national data protection authorities ensure that the authorities in each country handle the data in the Visa Information System correctly. This means that the Office of the Data Protection Ombudsman supervises how the Finnish authorities process data in the Visa Information System.
Read more about how the processing of the visa information is supervised on the website of the EDPS
Rights of the data subjects
As a data subject, you have the right to know what data related to you are stored in the Visa Information System. You also have the right to request that the data concerning you in the Visa Information System are rectified or erased or that their processing is restricted. In order to exercise your rights, you can contact the Ministry for Foreign Affairs, which is responsible for the processing of data in the Visa Information System in Finland. If you are not satisfied with how your request was handled by the Ministry for Foreign Affairs, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman.
Contact information of the Office of the Data Protection Ombudsman