Processing of personal data

Processing of Personal Data regarding migration operations

This is how the Swedish mission processes personal data that is submitted to the Swedish mission for a visa application, residence and work permit. The Swedish mission ensures that the personal data processing is in accordance with EU General Data Protection Regulation (GDPR) and other regulations.

Personal Data Controller

The Swedish Migration Agency is data controller for the automated personal data 
processing that takes place at Swedish missions abroad. If you want to read more about how the Swedish Migration Agency process your personal data, you can find more information on www.migrationsverket.se.

You can contact The Swedish Migration Agency for complaints and other questions:
Please use the form: Request for register extract, rectification, erasure or restriction of  personal data in central systems (you will find the form at www.migrationsverket.se)

Postal address: Migrationsverket, 601 70 Norrköping, Sweden.
Online: www.migrationsverket.se
Phone: + 46 (0)771-235 235
Registration number: 202100-2163.
For complaints, you can also contact the Swedish Migration Agency's Data Protection Officer at dataskyddsombud@migrationsverket.se, or the Swedish Authority for Privacy Protection at imy@imy.se. 

Purpose of processing

The Swedish mission processes personal data in order to be able to carry out the visa application process and the process of residence and work permits. The Swedish mission processes your personal data in order to identify you. Your personal data is also used in associated functions, such as records of applicants and submitted documents, and in order to file your application.

The Swedish mission processes personal data in accordance with the EU General Data Protection Regulation (GDPR). The Swedish mission also handles personal data in accordance with the Act on the Personal Data of Aliens (2016:27) and the Personal Data of Alien's Ordinance (2016:30). The register regulations also contain, among other things, provisions allowing the data to be processed without the consent of the data subject. Furthermore, the Swedish mission processes certain personal data in accordance with the provisions of the Data Protection Act (2018:218).

In some cases, personal data might be processed by another public authority or organization according to national law or European law. For example, visa applications in accordance with the Regulation (EC) No 810/2009 of the European Parliament and of the Council of 13 July 2009 establishing a Community Code on Visas (Visa Code). Biometric data for Schengen visa applications will furthermore be stored in the Visa Information System (VIS) in accordance with Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the  exchange of data between Member States on short-stay visas (VIS Regulation).

Personal data collected by the Swedish mission will be stored in servers belonging to the Swedish Migration Agency.

Lawfulness of processing

The personal data, including biometric data, of the data subject is lawfully processed with  the support of article 5, 6.1 (e) and 9.2 (g) of the GDPR. The processing is deemed necessary for the performance of a task carried out in the public interest.

Transfer of personal data

After being examined, your personal data may be disclosed, to parties that need to access the data due to a legal obligation, for a purpose of general interest such as the collection of statistical data, or for a purpose connected with the exercise of the functions of a public authority where it is necessary to process the data. The Swedish mission may forward personal data provided via the website if the Agency is the wrong authority for the information to be addressed to, and it should be passed on in order to end up in the right place. The transfer of personal data takes place in accordance with personal data- or confidentiality legislation.

Principle of public access to official documents

The Swedish mission is a government agency. As such, the Swedish mission is subject to the Principle of Public Access to Official Documents. This means that all documents, including personal data, that are submitted to the Swedish mission become public domain documents that can be disclosed to anyone who so requests. In some cases, however, data may be considered confidential, and are therefore not disclosed.

Rights

You have the right to receive information from the Swedish mission regarding what data about you is processed, and you can request correction, transfer, deletion and/or restriction of the processing of your personal data.

In regards to requests for deletion, it is important to understand that, as a general rule, Swedish national archival regulations require that personal data be stored.

Processing of personal data at another authority or organisation

Processing can be done at a different public authority, provided that this authority has the right to process the personal data in question. In such cases, the authority or organisation in question can be responsible for the processing of personal data.

Security

In order to protect your personal data, the Swedish mission and Swedish Migration Agency has physical and electronic protections that meet security requirements.