In accordance with the fundamental principles of personal data protection, citizens of the Schengen Member States as well as citizens of other countries have the right to information about their personal data in the Schengen Information System (SIS), the right to request the rectification of inaccurate personal data stored in the SIS and the right to request the erasure of personal data stored unlawfully in the SIS.
Data subjects may exercise the rights concerning their personal data processed in the SIS as set out in Articles 15, 16 and 17 of Regulation (EU) 2016/679 (the so-called General Data Protection Regulation or GDPR) and Articles 14 and 16 (1) and (2) of Directive (EU) 2016/680 (LED), and in accordance with Article 53 of Regulation (EU) 2018/1861 and Article 67 of Regulation (EU) 2018/1862. Every data subject has the right, in the territory of each Schengen state, to request rectification, erasure, information or compensation in relation to an alert concerning him or her from a court or other authority competent under national law.
- Right to information on personal data in the SIS
- Right to completion, rectification or erasure of personal data in the SIS
- About the Schengen Information System (SIS)
Right to information on personal data in the SIS
Based on Article 53 of Regulation (EU) No 2018/1861, every data subject shall have the right to information on personal data concerning him or her which are entered in the SIS. A request for access to personal data in the SIS may be submitted with the competent authority of any Member State (although the procedure may differ from one country to another, depending on the national law of each country).
- How and where to submit a request in Slovenia?
In Slovenia, a request for information on data in the SIS is made in writing or orally on the record to the Police. A special form must be filled in: Request for information on data in the Schengen Information System in Slovenia
The form contains information about the person making the request, additional information related to the request that may facilitate the procedure, as well as legal information about the rights of the individual, the time limits for making the request, the possibilities of appeal and the appeal body. The completed form should be sent to:
Police – Ministry of the Interior
Štefanova 2, 1501 Ljubljana, Slovenia
Phone: 01 428 40 00
Fax: 01 251 43 30
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
The request can also be completed electronically on eGovernment: Request for Information on Data in the Schengen Information System (SIS) in Slovenia
You can also submit your request at all border crossing points, administrative units and diplomatic or consular representations of Slovenia abroad. The request is immediately referred to the Police for processing. The Police must allow the individual to inspect, transcribe, copy and obtain an extract within 15 days of receipt of the request, or inform the individual in writing within the same period of time of the reasons for refusal.
- Which data is the data subject entitled to?
The procedure for exercising the right to information on an individual’s personal data in Slovenia is regulated in more detail by the Personal Data Protection Act (ZVOP-2) and the Act on the Protection of Personal Data in the Field of Criminal Offences (ZVOPOKD). Article 24 of ZVOPOKD provides that an individual has the right to request from the Police, as the controller of the N.SIS personal data collection, information on whether his or her personal data are being processed, and a copy or extract of such data. Specifically, the individual has the right to obtain specific information on:
- the purposes of the processing and their legal basis;
- the types of personal data processed in the SIS relating to him or her;
- the users or categories of users to whom the data have been disclosed, in particular if they are in third countries or international organisations;
- the envisaged period of retention of the personal data or, if this is not possible, the criteria for determining that period;
- the existence of the right to have the controller rectify or erase personal data or restrict the processing of personal data and the existence of the right to object to such processing;
- the right to lodge a complaint with the supervisory authority, the Information Commissioner of the Republic of Slovenia;
- the source of the personal data processed in the SIS relating to him or her (where the personal data are not collected from the data subject and where this information is available), unless the identity of the source is classified or confidential by law;
- the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the reasons for it, as well as on the significance and foreseeable consequences of such processing for the data subject.
The request for access to personal data or the provision of information to an individual may be partially or totally restricted in accordance with the Schengen legislation if this prevents the execution of an alert entered in the SIS or if this is necessary for the protection of national security, public safety, defence or for the prevention and investigation of criminal offences or for the protection or exercise of human rights and fundamental freedoms of third parties. The right to information may also be restricted in accordance with national law.
Right to completion, rectification or erasure of personal data in the SIS
The right to rectification of factually inaccurate data or erasure of unlawfully entered data is the right of anyone who establishes that data relating to him or her and kept in a particular database are incorrect or unlawfully stored. For the SIS database, this right is governed by Article 53 of Regulation (EU) 2018/1861 and Article 67 of Regulation (EU) 2018/1862.
Thus, in addition to the right to information about their own personal data entered in the SIS, citizens of the Member States of the Schengen area, as well as citizens of other countries, also have the right to have inaccurate personal data stored in the SIS rectified and to have personal data stored unlawfully in the SIS erased. The individual may seek rectification, erasure, information or compensation in respect of measures concerning him or her in any Schengen States, before a court or other competent authority established by national law, since all national SIS databases are identical.
- How and where to submit a request in Slovenia?
In Slovenia, the procedure for rectifying factually inaccurate data or erasing unlawfully entered data, as well as the procedure for restricting processing, is regulated in more detail in the Act on the Protection of Personal Data in the Field of Criminal Offences (ZVOPOKD). With regard to SIS alerts issued by Slovenia, based on Article 26 of the ZVOPOKD, the data subject has the right to request that the Police rectify, complete or erase his or her personal data which the data subject demonstrates to be incomplete, inaccurate or out of date, or which have been collected or processed in breach of the law.
For this purpose, the following form must be completed: Request for completion, correction, erasure, restriction of processing, portability and objection to the processing of your personal data in the Schengen Information System in Slovenia
The completed form must be sent to:
Police – Ministry of the Interior
Štefanova 2, 1501 Ljubljana, Slovenia
Phone: 01 428 40 00
Fax: 01 251 43 30
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
The request can also be completed electronically on eGovernment: Request for completion, correction, erasure, restriction of processing, portability and objection to the processing of your personal data in the Schengen Information System (SIS) in Slovenia
The police must decide on this right without undue delay, but no later than 15 days after receiving the request, and inform the individual accordingly. If the police do not fully comply with the request, the decision on the individual's rights must include a reference to the right to lodge a complaint with the supervisory authority (the Information Commissioner of the Republic of Slovenia).
If the alert was not issued by Slovenia and there is evidence that the personal data in the SIS are incorrect or unlawfully entered, the Police must inform the competent authority of the country that issued the alert to rectify or erase the personal data. The Member State issuing the alert shall check the notification and, if necessary, immediately rectify or erase the contested data. According to the Schengen legislation, only the issuing Member State may amend, rectify or delete an alert.
About the Schengen Information System (SIS)
The SIS is an electronic database used by the Member States of the Schengen area to exchange information on persons, objects and security threats. It contains only specific categories of data entered by the Schengen States via the national database. Personal data may only be used by authorised persons in accordance with the legally defined purposes. More: Schengen Information System – SIS