Data subjects’ rights
In accordance with the applicable legal framework, each person has the right to:
- access VIS-stored information
- request that inaccurate or incorrect data is corrected
- request the removal of its unlawfully processed data
- submit a complaint to the national data protection authority
- turn to the courts.
Pursuant to Article 44 of Law no. 271/2010, the request regarding the exercise of the data subject’s rights in the context of the processing of personal data in the National Visa Information System (SNIV) or the Visa Information System (VIS) shall be addressed to the National Visa Centre, and the response shall be communicated to the applicant as soon as possible, but no later than 60 days from the date of receipt of the request.
The deadline provided for above shall be extended to 90 days if the request concerns data that have been entered by another Member State.
The correspondence address for sending requests for exercising the rights in the context of the processing of personal data in SNIV or VIS:
Ministry of Foreign Affairs of Romania through the Diplomatic Missions/Consular Posts of Romania and the National Visa Centre of Romania
Premises: 31 Aleea Alexandru, 1st district, Bucharest, PO 011822
Tel.: +40 21 431 11 00; +40 21 431 15 62; +40 21 319 21 08; +40 21 319 21 25
Fax: +40 21 319 68 62
Email: dpo@mae.ro
Right to submit a complaint to the data protection authority
The lawfulness of the processing of personal data in SNIV or VIS on the Romanian territory and the transmission of this data abroad, as well as the subsequent exchange or processing of additional information are monitored and subject to the control of the National Supervisory Authority for Personal Data Processing (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP).
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes the legal provisions applicable in the domain.
According to the Procedure for handling complaints, adopted by Decision no. 133/2018, when submitting the complaints, it is mandatory to specify in detail the subject matter, the actions taken by the petitioner at the level of the complainant data controller or processor, as the case may be, the information available to support the allegations, as well as to attachment of conclusive evidence.
The contact details of ANSPDCP are:
Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
28-30 G-ral Gheorghe Magheru Boulevard
1st district, Bucharest, PO 011336,
Romania
Tel.: +40 31 805 92 11
Fax: +40 31 805 96 02
E-mail: anspdcp@dataprotection.ro
Right to bring an action before the court
Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority, each data subject shall have the right to an effective judicial remedy where he or she considers that their rights have been infringed as a result of the processing of their personal data.