Data protection

Data protection

• ORDER OF THE MINISTER OF FOREIGN AFFAIRS OF LITHUANIA ON THE AMENDMENT OF THE ORDER OF THE MINISTER OF FOREIGN AFFAIRS OF THE REPUBLIC OF LITHUANIA NO V-306 OF 25 OCTOBER 2019 “REGARDING THE APPROVAL OF THE RULES FOR THE PROCESSING OF PERSONAL DATA AT THE MINISTRY OF FOREIGN AFFAIRS OF THE REPUBLIC OF LITHUANIA, DIPLOMATIC MISSIONS, CONSULATES AND SPECIAL MISSIONS”
• DESCRIPTION OF THE PROCEDURE OF PERSONAL DATA PROCESSING AND IMPLEMENTATION OF THE RIGHTS OF DATA SUBJECTS AT THE MINISTRY OF FOREIGN AFFAIRS OF THE REPUBLIC OF LITHUANIA, DIPLOMATIC MISSIONS, CONSULATES AND SPECIAL MISSIONS
• REQUEST FOR THE IMPLEMENTATION OF THE RIGHT(S) OF THE DATA SUBJECT

Data protection officer, designated according to the Decree on Data protection officer designation (2022.12.22 Nr.V-426): +370 706 52829; urm@urm.lt

Information on the Processing of Personal Data in the Schengen Visa Application Procedure

The legal basis for the collection and processing of your personal data is laid down in Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation), Regulation (EC) No 810/2009 of the European Parliament and of the Council of 13 July 2009 establishing a Community Code on Visas (Visa Code), and Council Decision 2008/633/JHA of 23 June 2008 concerning access for consultation of the Visa Information System (VIS) by designated authorities of Member States and by Europol for the purposes of the prevention, detection and investigation of terrorist offences and other serious criminal offences.

In order to examine your visa application, it is mandatory to collect the personal data requested in the visa application form, take your photograph and collect your fingerprints. Failure to provide such data will render the application inadmissible.

These data will be shared with the competent authorities of the Member States (Austria, Belgium, Denmark, Greece, Spain, Italy, Croatia, Luxembourg, the Netherlands, Portugal, France, Finland, Sweden, Germany, Lithuania, Latvia, Czechia, Estonia, Poland, Malta, Slovakia, Hungary, Slovenia, Bulgaria, Romania, Iceland, Liechtenstein, Norway and Switzerland), which will process the data for the purpose of taking a decision on your visa application.

These data, together with data relating to the decision taken on your application or decisions to annul, revoke or extend a visa, will be entered into and stored in the Visa Information System (the Lithuanian National Visa Information System, hereinafter N.VIS, and the Central Visa Information System, hereinafter C.VIS) for a period not exceeding five years. During that period, they will be accessible to visa authorities and competent authorities carrying out visa checks at external borders and within Member States, as well as to immigration and asylum authorities of the Member States, for the purpose of verifying whether the conditions for lawful entry into, stay and residence in the territory of the Member States are fulfilled, identifying persons who do not or no longer fulfil these conditions, examining asylum applications and determining responsibility for examining such applications. Under certain conditions, the data may also be accessible to designated authorities of the Member States and Europol for the purposes of the prevention, detection and investigation of terrorist offences and other serious criminal offences.

Your personal data may also be transferred to third countries or international organisations for the purpose of proving the identity of third-country nationals, including for return purposes. Such transfers may take place only under the conditions laid down in Article 31 of the VIS Regulation.

Pursuant to Articles 15–19 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) and Article 38 of the VIS Regulation, you have the right to obtain access to your personal data, including a copy thereof, and to information on the Member State which transmitted the data. You also have the right to request the rectification or completion of inaccurate or incomplete personal data, the restriction of processing under certain conditions, and the erasure of unlawfully processed personal data.

You have the right to receive information on the processing of your personal data in N.VIS and may submit a request to the controller of N.VIS – the Ministry of the Interior of the Republic of Lithuania (Šventaragio St. 2, LT-01510 Vilnius, e-mail: generalsd@vrm.lt) – seeking access to your personal data, rectification of inaccurate data, or erasure of unlawfully processed personal data.

If, after obtaining access to your personal data, you determine that the data are incorrect, incomplete, inaccurate or processed unlawfully, and you submit a written request to the controller of N.VIS, the controller must, without undue delay, ensure the verification of your personal data, the rectification of incorrect or inaccurate data, the completion of incomplete personal data, or the erasure of unlawfully processed data in accordance with the Regulations of the Register of Foreigners approved by Resolution No. 968 of the Government of the Republic of Lithuania of 17 September 2014 and Article 38 of the VIS Regulation.

Where data concerning you have been entered into the C.VIS by another European Union Member State, the right to request rectification, erasure or restriction of processing shall be exercised through the competent authority of that Member State in accordance with Article 38 of the VIS Regulation and the applicable national legislation. In such cases, the controller of N.VIS shall forward your written request to the competent authority of the relevant Member State within 14 calendar days of receipt and shall inform you accordingly.

The controller of N.VIS shall, without undue delay, inform you in writing of any rectification or erasure of personal data carried out at your request, any restriction of processing, and shall inform recipients of C.VIS data to whom inaccurate, incomplete or incorrect data were disclosed of the rectification, erasure or restriction, unless this proves impossible or involves a disproportionate effort.

Any refusal by the controller of N.VIS to comply with your request must be duly reasoned. Such refusal must be communicated to you in writing no later than 30 calendar days from the date of your request.

You may lodge a complaint concerning the actions or omissions of the controller of N.VIS with the supervisory authority responsible for monitoring personal data processing in N.VIS – the State Data Protection Inspectorate (L. Sapiegos St. 17, LT-10312 Vilnius, Lithuania, tel. +370 5 271 2804, +370 5 279 1445, e-mail: ada@ada.lt). The actions or omissions of the supervisory authority may be challenged before a court in accordance with the procedure established by law.

Contact details of the Data Protection Officer of the Ministry of Foreign Affairs of the Republic of Lithuania: J. Tumo-Vaižganto St. 2, LT-01108 Vilnius, Lithuania
E-mail: dap@urm.lt

Template forms for exercising your rights:

• Request for access to your personal data processed in the Visa Information System (VIS);
• Request for correction or deletion of your personal data processed in the VIS;

You will find more detailed information on Schengen Information System (SIS), including request for access to, rectification or deletion of your personal data processed in the Schengen Information System forms here.