Visa and Immigration

General Information and Guidance

The Consulate general of Luxembourg in Shanghai processes visa applications for Chinese and other third-country nationals who reside in Shanghai, Anhui, Jiangsu, Zhejiang or Fujian and plan to travel to Luxembourg (on either short term Schengen visas or long term national visas). Application requirements for applicants residing in any of the other provinces can be found on the website of the Embassy of Luxembourg in Beijing

Please note: Applications for short-term and long-term visas are to be lodged exclusively through the Consulate general’s external service provider VFS Global. Exceptions apply for EU/EEA/Swiss national/article 50 TEU family members, who are are free to choose whether to file a visa application through the external service provider VFS Global, or directly at the Consulate General.

The specific procedure and documents requested vary depending on the purpose and duration of the planned visit. For further information regarding short stay Schengen visa and long stay national visa applications, please consult the VFS website or consult the Types of Visa section below. 

Who can apply?

Citizens from this list of countries, which includes China, require a visa to travel to Luxembourg. 

Chinese nationals and nationals of other countries subject to a visa requirement, legally residing in China and planning to travel to Luxembourg, can apply for a visa through one of Luxembourg's diplomatic representations in China. Please note that non-Chinese nationals can only apply for a visa to Luxembourg at one of Luxembourg's diplomatic representations in China if they are in possession of a valid Chinese residence permit. 

An application may be accepted from a person legally present – but not residing - in the jurisdiction of the consulate if the applicant can justify why the application could not be lodged at a consulate in his/her place of residence.

When to apply? When will I receive the result of my visa application?

The application must be submitted at least 15 calendar days before the intended departure, but not earlier than 6 months before the start of the intended visit. Please be advised that applications shall be decided on within 15 calendar days, starting from the date applications are received by the Consulate General. In special cases, namely when further scrutiny of the application is needed, this period may be extended to a maximum of 45 calendar days.

Visa application fees

Type of visa
Visa fee
Short stay Schengen visa  (C) 90€
Long stay national visa (D) 50€
Children between the age of 6 and 12 (regardless of visa type) 45€

Nationals from countries with a visa facilitation agreement (Armenia, Azerbaijan, and holders of non-biometric passports from Albania, Bosnia and Herzegovina, Georgia, North Macedonia, Moldova, Montenegro, Serbia and Ukraine) shall pay a reduced visa fee of 35€.

No visa fee will be charged for:

  • children under 6 years of age;
  • pupils, students and teachers accompanying them on school trips or educational study trips;
  • third country researchers going abroad to carry out scientific research;
  • representatives of non-profit making organisations aged 25 years at most who participate in seminars, conferences, or sports, cultural or educational events;
  • family members of an EU/EEA national, as defined here (cf.  'Who is concerned?')

 

Applicants applying via VFS Global will settle the visa fees at the respective Visa Application Center (VAC). For applicants applying directly at the Consulate, please note that visa fees are to be paid in RMB, either in cash or via mobile payment (Alipay). The Consulate does not accept payment by credit or debit card.

The amount of the visa application fee in RMB is determined and regularly reviewed in application with the Euro foreign exchange reference rate set by the European Central Bank.

The visa fee is not refundable if a negative decision is taken on the application or if the application is withdrawn.  

Information applicable in case of visa refusal

Applicants who have been refused a visa receive a standard form notifying and motivating the refusal. They have the right to appeal, following the procedure and respecting the time limit indicated in the standard form. Appeals are made against the Member State that has taken the decision, in accordance with its national legislation. 

The rules on appeal against decisions on refusal/annulment/revocation of a visa are set out in “Loi du 21 juin 1999 portant règlement de procédure devant les juridictions administratives (Mémorial A n°98 du 26 juillet 1999)”. 

The visa fee is not refundable if a negative decision is taken on the application.

 

Types of visa

Depending on purpose and duration of the visit, applicants can either apply for a short stay Schengen visa (C-type visa), which allows visa holders to travel freely within the Schengen Area for a maximum stay of up to 90 days in any 180 days period, or a long stay national visa (D-type visa), which allows for stays in Luxembourg exceeding 90 days. 

Short stay Schengen visa (→ for stays up to 90 days)

Please find below the document requirements for Schengen visa to Luxembourg. Please select the checklist that corresponds to the purpose of your visit:

The Schengen visa application form can be found here.

If you are a family member of an EU/EEA national or Swiss national, please consult the information box below. 

General information about Schengen visa

A Schengen visa is a short-stay visa allowing its holder to circulate in the Schengen area for a maximum of 90 days within a 180-day period. The Schengen area covers 27 countries (“Schengen States”). These countries are Austria, Belgium, Croatia, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Slovakia, Slovenia, Spain, Sweden and Switzerland. Bulgaria, Cyprus, Ireland and Romania are members of the EU but currently do not apply the Schengen agreement.

The Schengen visa must be requested at the consulate of the country the applicant intends to visit, or, if he intends to visit more than one Schengen State, at the consulate of the country of his primary destination (i.e. main purpose of stay or longest stay). If the applicant intends to visit several Schengen states for a stay of equal duration, the visa application must be sent to the consulate of the country whose external borders the applicant will cross first when entering the Schengen area.

Family/friend visit: applying for a declaration of guarantee (engagement de prise en charge)

The application form for a declaration of guarantee (engagement de prise en charge), to be filled out by the reference person/guarantor in Luxembourg, can be found here

Before sending the declaration of guarantee to the third country national for whom (s)he is acting as guarantor, the guarantor must:

  • have her/his signature officially authenticated on the form at their commune of residence;
  • send the form to the Passport, Visa and Legalisation Office (Bureau des passeports, visas et légalisations) for a stay of less than 90 days together with:
    • the last 3 salary slips or a document stating the guarantor's monthly income;
    • a copy of the guarantor's passport or national identity card;
    • if he or she is a foreign national, proof of lawful residence in Luxembourg;
    • a copy of the valid passport of the non-EU national being cared for.

If the application is accepted, the guarantor receives an official stamped copy of the document. The foreign national then has 6 months to use this document to apply for a visa.

Visa procedure for family members of EU/EEA nationals and Swiss nationals

If you are a family member of an EU/Iceland/Liechtenstein/Norway or Swiss national, you shall benefit from a simplified and accelerated visa procedure, including exemption from the visa fee, as long as you meet the following criteria:

  1. You are a family member (this includes a spouse, registered partner, child who is under 21 or a depending family member) of an EU/Iceland/Liechtenstein/Norway or Swiss national (or of his/her spouse/registered partner); AND
  2. That EU/Iceland/Liechtenstein/Norway or Swiss national is residing in another Member State than that of which he/she is a national or travelling there to take up residence; AND
  3. You are accompanying the EU/Iceland/Liechtenstein/Norway or Swiss national or planning to join him/her for residence.

The visa should be applied for at the Embassy/Consulate of the country of future residence of the EU/Iceland/Liechtenstein/Norway or Swiss national, not at the Embassy of his/her country of origin.

If you think you qualify for visa facilitation, please contact the Consulate General for additional information on application procedures. 

Long stay national visa (→ for stays exceeding 90 days)

Third country nationals subject to a visa obligation who wish to stay in Luxembourg for more than 3 months must apply for a long stay visa (also called national or D-type visa).  

Before submitting an application for a visa, the non-EU national must apply for a temporary authorisation to stay at the General Department of Immigration.

The application procedure for the authorisation to stay depends on the planned activity. For additional information on the application procedures and documents, please consult Guichet.lu

Once the temporary authorisation to stay has been issued, applicants are invited to apply for a long stay visa via the Consulate General's external service provider VFS Global - please consult the info box below for further information.

I have already obtained a temporary authorisation to stay? What are the next steps?

Individuals who have successfully obtained a temporary authorisation to stay can apply for a long stay visa (D-type visa) by submitting the following documents via the Consulate General's external service provider VFS Global:

Long stay visa for students

Application guidelines and document requirements for future students who have not yet obtained a temporary authorisation to stay issued by the Immigration Directorate can be found on the following information sheet:

  • Application for a temporary authorisation to stay / Visa D for students

Future students who have successfully obtained a temporary authorisation to stay are kindly invited to contact the 

Application guidelines and document requirements for future students who have not yet obtained a temporary authorisation to stay issued by the General Department of Immigration can be found on the following information sheet:

Future students who have successfully obtained a temporary authorisation to stay can apply for a long stay (D-type) visa by submitting the following documents via the Consulate General's external service provider VFS Global:

What procedures apply to third-country nationals who are family members of an EU citizen or Luxembourg national?

Third-country nationals who are family members of an EU citizen or a Luxembourg national can consult the following information on Guichet.lu.

Special cases

Frequently Asked Questions (FAQ)

Does the Consulate offer express or priority visa services?

The Consulate does not provide express or priority visa services. Please plan accordingly (cf. info box on 'When to apply').

Can applicants submit their visa applications via a Visa Application Centre?

Please note that applications for short-term and long-term visas are to be lodged exclusively  through the Consulate General’s external service provider VFS Global. Exceptions apply for EU/EEA/Swiss national/article 50 TEU family members, who are are free to choose whether to file a visa application through the external service provider VFS Global, or directly at the Consulate General.

I want to visit family or friends in Luxembourg and need to to submit a declaration of guarantee from my reference person in Luxembourg. How do I go about this?

The application form for a declaration of guarantee (engagement de prise en charge), to be filled out by the reference person/guarantor in Luxembourg, can be found here

Before sending the declaration of guarantee to the third country national for whom (s)he is acting as guarantor, the guarantor must:

  • have her/his signature officially authenticated on the form at their commune of residence;
  • send the form to the Passport, Visa and Legalisation Office (Bureau des passeports, visas et légalisations) for a stay of less than 90 days together with:
    • the last 3 salary slips or a document stating the guarantor's monthly income;
    • a copy of the guarantor's passport or national identity card;
    • if he or she is a foreign national, proof of lawful residence in Luxembourg;
    • a copy of the valid passport of the non-EU national being cared for.

If the application is accepted, the guarantor receives an official stamped copy of the document. The foreign national then has 6 months to use this document to apply for a visa.

[SCHENGEN] How long can I stay in the Schengen area with a short stay Schengen visa?

The short stay Schengen visa allows for stays of a maximum duration not exceeding 90 days over any 180-day period. The visa can be issued for one or several entries, depending on the reasons of stay.

Specific information regarding the period of validity, the period of authorised stay (i.e. the effective number of days that the visa holder may stay in the territory of the Member States) and the number of entries can be found on the visa sticker. 

The Schengen calculator may help keep track of the number of days authorized in the Schengen area, based on the travel dates. A user guide for the calculator is also available.

The results shown by this tool are not legally binding.

[SCHENGEN] I am planning on travelling to the Schengen area on an itinerary that includes Luxembourg. Can I apply for my visa at the Consulate general of Luxembourg in Shanghai?

Not necessarily. In addition to limitations regarding consular jurisdiction (cf. info box 'Where to apply' above), the Consulate general of Luxembourg in Shanghai will be competent for examining and deciding on an application for a short stay Schengen visa only if one of the following conditions applies:

  1. Luxembourg constitutes the sole destination of the planned trip; OR
  2. If the travel destination includes more than one Schengen country, Luxembourg constitutes the main destination (i.e. the destination where the applicant intends to spend the longest time or where the main purpose of the intended journey is carried out); OR
  3. If no main destination can be determined, Luxembourg constitutes the Schengen country whose external border the applicant intends to cross first. 

[SCHENGEN] Do I have to present any other document at the Schengen external borders apart from my travel document with the Schengen visa?

The short stay visa does not automatically entitle you to enter the Schengen area. At the Schengen border (or during other controls) you may have to show the visa but also provide additional documentation, for example information on that you have sufficient means to cover the stay and the return trip. It is therefore recommended that you carry with you copies of the documents which you presented when applying for the visa (e.g. letters of invitation, travel confirmations, other documents stating the purpose of your stay).

Data protection

Information regarding the collection of biometric information

Since 12th October 2015 all applicants are required to provide their biometric data (fingerprints and a digital photograph) when applying for a Schengen visa. This is a simple procedure that only takes a few minutes.

All first-time applicants will have to appear in person at a consulate or Luxembourg Visa Application Centre. Biometric data, along with the data provided in the Schengen visa application form, will be recorded in the Visa Information System (VIS) database and stored for five years. Frequent travelers will only have to complete the procedure once every five years (provided that the passport has not expired), as fingerprints will be copied from the previous application file in the VIS.

The VIS contains all visa applications submitted to and decisions taken by any Schengen State's consulate. This facilitates visa application procedures and checks at external border of the European Union, as well as enhances security. The recourse to biometric technology offers visa applicants a better protection against identity theft and prevents false identifications, which in certain cases could lead to a visa refusal or denial of entry to a person who is entitled to enter.  It also allows to legally regulate the use of applicants' visa application and travel history (e.g. when applying for a long stay visa).

Exemptions from the fingerprinting requirement are provided for a limited number of applicants, including children under the age of twelve and persons for whom the collection of fingerprints is physically impossible. Heads of State, members of the national governments as well as members of their official delegation and spouses are also exempted, if travelling for official purposes.

Information to visa applicants concerning the processing of personal data in the Visa Information System (VIS) provided upon short stay visa application

Information on the processing of personal data

The collection of personal data required by any visa application including the taking of the photograph and the taking of the fingerprints are mandatory for the examination of a visa application. Failure to provide such data will result in the application being inadmissible.

The responsible authorities

Ministère des Affaires étrangères et européennes
Bureau des Passeports, Visas et Légalisations
6 Rue de l’Ancien Athenée
L-1144 Luxembourg
service.visas@mae.etat.lu
Data protection officer: dataprotection.mae@mae.etat.lu

The legal basis

The legal basis for the collection and the processing of personal data is set out in Regulation (EC) 767/2008 (VIS Regulation), Regulation (EU) 2019/1155 amending Regulation (EC) 810/2009 establishing a Community Code on Visas (Visa Code) and Council Decision 2008/633/JHA.

The processing of personal data

The data will be shared with the relevant authorities of the Member States[1] and processed by those authorities for the purposes of a decision on a visa application.

The data and data concerning the decision taken on an application or a decision whether to annul, revoke, or extend a visa issued will be entered into, and stored in the Visa Information System (VIS) for a maximum period of five years, during which it will be accessible to the visa authorities and the authorities competent for carrying out checks on visas at external borders and within the Member States, immigration and asylum authorities in the Member States for the purposes of verifying whether the conditions for the legal entry into, stay and residence on the territory of the Member States are fulfilled, of identifying persons who do not or who no longer fulfil these conditions, of examining an asylum application and of determining responsibility for such examination.

Under certain conditions the data will be also available to designated authorities of the Member States and to Europol for the purposes of the prevention, detection and investigation of terrorist offences and of other serious criminal offences.

Third Country and international organisations

Personal data might also be transferred to third countries or international organisations for the purpose of proving the identity of third-country nationals, including for the purpose of return. Such transfer only take place under certain conditions[2]. You can contact the authority responsible for processing the data to obtain further information on these conditions and how they are met in your specific case.

Transparency and rights of the data subject

Under the General Data Protection Regulation[3] and the VIS Regulation[4], you are entitled to obtain access to your personal data, including a copy of it, as well as the identity of the Member State which transmitted it to the VIS. You also have the right that your personal data which is inaccurate or incomplete be corrected or completed, that the processing of your personal data be restricted under certain conditions, and that your personal data processed unlawfully be erased.

You may address your request for access, rectification, restriction or erasure directly to the authority responsible for processing the data. Further details on how you may exercise these rights, including the related remedies according to the national law of the State concerned, are available on its website and can be provided upon request.

You may also address your request to any other Member State. The list of competent authorities and their contact details is available at: https://ec.europa.eu/home-affairs/sites/homeaffairs/files/what-we-do/policies/borders-and-visas/visa-policy/how_to_apply/docs/links_to_ms_websites_en.pdf

Lodge a complaint

You are also entitled to lodge at any time a complaint with the national data protection authority of the Member State of the alleged infringement, or of any other member State, if you consider that your data have been unlawfully processed.

The data protection authority of Luxembourg is:

National Commission for Data Protection (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux
Phone: (+352) 26 10 60 - 1
Web contact: https://cnpd.public.lu/en/support/contact.html
Website: https://cnpd.public.lu/en/commission-nationale.html

[1] Austria, Belgium, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Italy, Latvia, Lithuania, Malta, The Netherlands, Poland, Portugal, Slovakia, Spain, Sweden, Norway, Iceland, Liechtenstein and Switzerland

[2] Article 31 of Regulation (EC) 767/2008 (VIS Regulation)

[3] Article 15 to 19 of Regulation (EU) 2016/679 (GDPR)

[4] Article 38 of Regulation (EC) 767/2008 (VIS Regulation)

What is the VIS?

The Visa Information System (VIS) is a system for exchanging data on short-stay visas between Schengen states. The main objectives of the VIS are to facilitate visa application procedures and external border controls, and to enhance the security of the Schengen area.

The aim of the global VIS introduction process is to provide applicants with greater protection against identity theft, and to prevent document fraud and the practice of "visa shopping". Fingerprints are widely used in the EU as one of the most secure means of identification. The use of biometric data to identify a visa holder is a faster and more precise way of identifying a visa holder by the border police.

The VIS incorporates a central database, a national interface in each Schengen state, and a communication infrastructure between the central database and the national interface. The VIS is linked to the national visa systems of all the Schengen States via the national interfaces, enabling the competent authorities in the Schengen States to process data on visa applications and on visas either issued, refused, annulled, revoked or extended.

The VIS consists of two systems: the VIS database, which conducts alphanumeric searches, and the Automated Fingerprint Identification System (AFIS), which compares fingerprints received with the database and returns a positive or negative response, including any matches.

The main central VIS is located in Strasbourg (France) and a back-up central VIS, capable of providing all the functions of the main central VIS, is located in Sankt Johann in Pongau (Austria).

The VIS is continually processing information gathered by the consulates of the Schengen states. For instance, information entered locally by visa authorities can be available in the VIS in a matter of minutes. The VIS offers rapid verification services for visa holders at border crossings, taking just a few seconds to conduct a visa check.

The Commission was responsible for developing the central database, the national interfaces and the communication infrastructure between the central VIS and the national interfaces. Individual Schengen States are responsible for the development, management and operation of their respective national systems.

The EU Agency for large-scale IT systems, eu-LISA, is responsible for the operational management of VIS.

What is the legal basis for the VIS?

The main acts constituting the legal framework of the VIS are the following:

·                  Council Decision 2004/512/EC of 8 June 2004 establishing the Visa Information System (VIS), OJUE L 213, 15.6.2004, p. 5.

·                  Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the VIS and the exchange of data between Member States on short-stay visas (VIS Regulation), OJUE L 218, 13.8.2008, p. 60.

·                  Council Decision 2008/633/JHA of 23 June 2008 concerning access for consultation of the VIS by designated authorities of Member States and by Europol for the purposes of the prevention, detection and investigation of terrorist offences and of other serious criminal offence, OJUE L 218, 13.8.2008, p. 129.

·                  Regulation (EC) No 81/2009 of the European Parliament and of the Council of 14 January 2009 amending Regulation (EC) No 562/2006 as regards the use of the Visa Information System (VIS) under the Schengen Borders Code, OJUE L 35, 4.2.2009, p. 56.

·                  Regulation (EC) No 810/2009 of the European Parliament and the Council of 13 July 2009 establishing a Community Code on Visas (Visa Code), OJUE L 243, 5.9.2009, p. 1.

What are the consequences of VIS in practice for visa applicants?

First-time visa applicants must always present themselves in person when submitting their application to provide their photograph and fingerprints.

The photograph is currently scanned from an existing paper photograph. At a later stage, the photograph will be taken digitally at the moment of the application.

For all new subsequent applications submitted within a period of 59 months, the fingerprints can be copied into the VIS from the previous application file.

Nevertheless, it should be stressed that in the event of reasonable doubt as to the applicant's identity, the consulate will collect fingerprints again within the 59 months referred to above. Moreover, the applicant may ask for fingerprints to be taken if, at the time the application is submitted, it is not immediately possible to confirm that the fingerprints were taken within the aforementioned period.

The biometric data of visa applicants may be collected by Schengen State consulates and external service providers (such as VFS, TLS and others), but not by commercial intermediaries (e.g. travel agencies).

Upon arrival at the Schengen external border, visa holders must provide their fingerprints for comparison with those registered in the VIS, at the request of the Schengen States' border control authorities. Searches in the VIS by Schengen border guards are based on the visa sticker number in combination with fingerprints.

Visa holders whose fingerprints have not been taken at the time of application, on the grounds that they have been exempted from this requirement, will not be asked to provide fingerprints at the border.

What happens to those who refuse to provide fingerprints for various reasons?

As a result, a Schengen visa will not be issued if biometric data is not provided. However, in accordance with Article 13(7) of the Visa Code, there are several categories of citizens who are not required to provide this data, as indicated in the FAQ under Question 18.

If I already have a biometric passport, do I also need to submit my fingerprints?

Yes, holders of biometric passports must also appear in person when applying for a short-stay Schengen visa for the first time to submit their fingerprints.

How is my biometric data protected in the VIS?

Strict data protection rules are defined in the VIS regulation and are subject to control by national and European data protection authorities.

Data is kept in the VIS for a maximum of five years from the visa expiry date, if a visa has been issued, or from the new visa expiry date, if a visa has been extended, or from the date on which a refusal decision is issued by the visa authorities.

All individuals have the right to obtain communication of the data recorded in the VIS concerning them from the Schengen State which entered the data in the system. Individuals may also request that inaccurate data concerning them be rectified, and that illegally recorded data be deleted.

In each Schengen State, the national supervisory authorities independently monitor the processing of personal data recorded in the VIS by the respective Schengen State.

The European Data Protection Supervisor monitors the data processing activities of the VIS Management Authority.

Which data are registered in the VIS?

The visa authorities in each Schengen state register data relating to short-stay visa applications (i.e. applications to stay in the Schengen area for 90 days or less) in the VIS. Data relating to national long-stay visas are not yet recorded in the VIS.

Upon reception of an application, the visa authorities of the relevant Schengen State create an application file in VIS and record the alphanumeric data contained in the Schengen visa application form, the applicant's digital photograph and the ten fingerprints collected.

If the applicant is traveling in a group, the travelers' application files will be linked in the VIS. If a previous application has been registered for the same applicant, the two applications will also be linked in the VIS.

Once a decision has been taken on the application (visa granted/refused) or post-decision (annulment, revocation, extension), the information is recorded in the VIS by the visa authorities of the relevant Schengen States. Once the visa has been issued and all applicant data - including fingerprints - have been recorded in the VIS, a code is inserted in the visa sticker.

Which authorities have access to the VIS?

The visa authorities of the Schengen States have access to the VIS for both data recording and consultation. Application and decision data are entered into the VIS by the visa authorities of the Schengen State responsible for examining the application or taking the decision. The data entered by one Schengen State can then be consulted by the visa authorities of all the other Schengen States, for example when examining another application from the same applicant.

Other authorities from the Schengen States have access to the VIS for consultation only.

National border authorities have access to the VIS in order to verify the identity of the visa holder, the authenticity of the visa and whether the conditions for entry into the territory of the Schengen states have been fulfilled. VIS checks at the Schengen area's external borders, with systematic fingerprint verification, are compulsory, except in a limited number of cases.

The national authorities responsible for carrying out identity checks on the territory of the Schengen states have access to the VIS in order to verify the identity of the visa holder, the authenticity of the visa and whether the conditions for entry, stay or residence on the territory of the Schengen states have been fulfilled.

National asylum authorities have access to the VIS to determine the Member State responsible for examining an asylum application in accordance with Regulation (EC) No 343/2003 and for processing the application.

Europol has access to the VIS for consultation purposes as part of the prevention, detection and investigation of terrorist offences and other serious criminal offences.

National law enforcement authorities have access to VIS data for the same purposes, provided certain legal conditions are respected: access to VIS data must be necessary in a particular case, and there must be reasonable grounds for considering that consultation of the data will make a substantial contribution to the prevention, detection and investigation of terrorism and other serious crimes.

As a general rule, VIS data may not be transferred or made available to a third country or international organization. By way of derogation, certain data recorded in the VIS (name, nationality, travel document number, residence) may be communicated to a third country or international organization when a specific case requires it to prove the identity of a third-country national, including for return purposes.

How to exercise your access rights?

You will find template letters as well as detailed information on how to exercise the rights of data subjects on the following page:

https://cnpd.public.lu/en/dossiers-thematiques/schengen-acquis/vis1.html

 

SIS

CITIZENS’ RIGHTS IN THE FIELD OF THE SCHENGEN INFORMATION SYSTEM

1. General presentation of the Schengen Information System

The Schengen Information System (SIS) was implemented as a search system for persons and objects by the Convention implementing the Schengen Agreement of 19 June 1990. The SIS was designed as a compensatory measure to the lifting of internal border controls with the aim of ensuring a high level of security in the European Union’s area of freedom, security and justice.

The system includes alerts

i. On persons, namely :

  • Third-country nationals subject to a return decision,
  • Third-country nationals subject to a refusal of entry and stay,
  • Persons wanted for arrest for surrender or extradition purposes,
  • Missing persons, including :
  • Children at risk of abduction by a parent, a family member or a guardian, o Vulnerable persons who need to be prevented from travelling,
  • Persons sought to assist with a judicial procedure,
  • Persons for discreet, inquiry or specific checks,
  • Unknown wanted persons for the purpose of identification under national law.

ii. On objects:

  • For discreet, inquiry or specific checks,
  • For seizure or use as evidence in criminal proceedings.

 

2. Legal framework applicable to SIS as well as to data protection

The SIS is established by the following legal instruments:

-        Regulation (EU) 2018/1860 of the European Parliament and of the Council, of 28 November 2018 on the use of the Schengen Information System for the return of illegally staying thirdcountry nationals,

-        Regulation (EU) 2018/1861 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, and amending the Convention implementing the Schengen Agreement, and amending and repealing Regulation (EC) No 1987/2006,

-        Regulation (EU) 2018/1862 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA, and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EU.

The following legal instruments are applicable in terms of data protection:

-        Loi du 1er août 2018 relative à la protection des personnes physiques à l'égard du traitement des données à caractère personnel en matière pénale ainsi qu’en matière de sécurité nationale (Law of 1 August 2018 on the protection of natural persons with regard to the processing of personal data in criminal and national security matters, transposing into national law the Directive 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA) (hereafter « LPD »),

-        Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereafter « GDPR »)

-        Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données et du régime général sur la protection des données » (Law of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework).

3. Information to be made available to the individual on data processing in the SIS

i. The data controller

In Luxembourg, the data controller for the data processing in the context of the SIS is the Grand Ducal Police, represented by its General Director.

ii. The purposes of the processing

The purposes of the processing for which the personal data are intended are the following:

  • Prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security,
  • External border control,
  • Immigration control.

iii. The categories of personal data that may be processed

The personal data that may be included in a SIS alert are listed in article 20 of Regulation 2018/1861 and of Regulation 2018/1862 as well as in article 4 of Regulation 2018/1860.

iv. The recipients or categories of recipients

National competent authorities of the Schengen Member States that can access the SIS and are thus to be considered as recipients are listed in article 34 of Regulation 2018/1861 and articles 44 to 47 of Regulation 2018/1862. In addition to these national competent authorities, SIS can also be accessed by Europol, Frontex and Eurojust in accordance with articles 35 and 36 of Regulation 2018/1861 and articles 48 to 50 of Regulation 2018/1862.

v. The storage period

Alerts on persons and on objects shall be kept only for the time required to achieve the purposes for which they were entered.

The above-mentioned regulations foresee several time limits for a periodic review of the need for the storage of personal data with the possibility to renew the alerts.

Alerts on persons subject to a discrete, inquiry or specific check as well as certain categories of missing persons have in principle to be re-examined at the latest after one year.

Alerts on persons subject to a return decision, subject to a refusal of entry and stay, sought to assist with a judicial procedure as well as unknown wanted persons for the purpose of identification have in principle to be re-examined at the latest after three years.

Alerts on persons wanted for arrest for surrender or extradition purposes as well as certain categories of missing persons are in principle to be re-examined at the latest after five years.

Alerts on objects are in principle to be re-examined at the latest after ten years.

vi. The rights of individuals

Concerning the right for information provided under articles 13 and 14 of the GDPR, respectively article 12 of the LPD, the Grand-Ducal Police refers to the information on its website under the heading « Data protection » (Link https://police.public.lu/fr/support/protection-des-donnees-a-caractere-personnel.html).

As foreseen in article 53 of Regulation 2018/1861 and article 67 of Regulation 2018/1862, individuals have the right to introduce

-        A request for access to their data,

-        A request for correction of inaccurate data,

-        A request for deletion of unlawfully stored data,

In accordance with articles 15, 16 and 17 of the GDPR and 13 and 15 of the LPD.

These requests may be submitted to any Member State of the European Union operating the system and any of the four Schengen Associated States (Switzerland, Norway, Liechtenstein and Island). The receiving Member State will process the request according to their own national procedures in place as well as according to the European rules in force.

With regard to deadlines for processing such requests, it should be noted that both the requests for access and the requests for rectification and deletion must be answered within 1 month (article 53(4) of the Regulation 2018/1861 and article 67(4) of the Regulation 2018/1862, both referring to article 12(3) of the GDPR).

Regarding the form, Member States will have to strive to respect both the form (letter or email) of the requestor as well as the language used by them, this of course as far as possible. In general, the Grand Ducal Police processes access requests as well as correction or deletion requests if they are introduced in any of the administrative languages of the country (Luxembourgish, French, German) or in English.

In accordance with article 12(6) of the GDPR and article 11, paragraph 5 of the LPD, the Grand-Ducal Police must have sufficient guarantees to establish with certainty the identity of the person requesting information, so as not to prejudice the rights of others. The following documents have therefore to be enclosed to the requests:

For a request from an individual:

-        A signed letter,

-        A copy of an identity document (identity card or passport).

For a request from an individual on behalf of another individual:

-        A power of attorney duly signed by both parties,

-        A letter signed by the represented party,

-        A copy of an identity document of represented party (identity card or passport),

-        A copy of an identity document of the representing party (identity card or passport).

For a request from an attorney:

-        A power of attorney duly signed by the client and the attorney,

-        A copy of an identity document of the client (identity card or passport),

-        A copy of an identity document of the attorney (identity card or passport),

-        A copy of an attorney card or equivalent.

It goes without saying that the transmission of a copy of an identity card or passport via the Internet may present a certain risk in the event of possible abuse by a third party (for example, interception).

Finally, in exceptional circumstances and in accordance with article 53(3) of the Regulation 2018/1861, article 67(3) of the Regulation 2018/1862, and articles 14 and 15, paragraph 4 of the LPD, a Member State may take a decision not to provide information to the data subject, in whole or in part, in order to safeguard national security, defence and public security, or for the prevention, investigation, detection and prosecution of criminal offences, for as long as such a restriction constitutes a necessary and proportionate measure in a democratic society with due regard for the fundamental rights and legitimate interests of the data subject concerned.

vii. Right to lodge a complaint or to seek judicial remedy

In case the reply which is provided by the Grand Ducal Police does not satisfy the requestor, the latter has the right to file a complaint with the national supervisory authority, namely the « Commission nationale pour la protection des données », in accordance with article 77 of the GDPR, respectively in accordance with article 44 of the LPD. The national supervisory authority may be contacted under the following contact details:

Commission nationale pour la protection des données (CNPD)

Service des réclamations

15, Boulevard du Jazz

L-4370 Belvaux

Luxembourg.

 

Furthermore, the requestor also has the right to seek judicial remedy within three months after the receipt of the final reply at the Administrative Court of Luxembourg (Tribunal administratif) with the assistance of an attorney.