Regulation (EC) 767/2008
According to Article 37 of the Regulation (EC) 767/2008, visa applicants have the right to be informed about the identity of the controller, the purposes for which the data will be processed, the data retention period, the categories of recipients of the data, hat the collection of the data is mandatory, as well as of the data subject rights. The information shall be provided in writing when the applications/data are collected.
In addition, persons whose data are recorded in VIS have the rights of access, correction and deletion as provided for in the Regulation and Decision on VIS (Article 38 of VIS Regulation and Article 14 of VIS Decision). These rights are exercised in writing before the controller, namely the Ministry of Foreign Affairs.
The contact details of the Ministry in question are as follows:
Ministry of Foreign Affairs
1 Vas. Sofias Av., GR- 106 71 Athens, www.mfa.gr
Data subjects also have the right to bring an action before the courts of that Member State which refused the right of access to or the right of correction or deletion of data relating to them; alternatively, they have the right to bring an action before the Hellenic Data Protection Authority (HDPA) in case they have already exercised their right but have not received a satisfactory response by the controller or if they consider that their data have been unlawfully processed (see Article 40(1) of VIS Regulation and Article 14(8) of VIS Decision).
The contact details of the Authority are as follows:
Hellenic Data Protection Authority
Kifissias 1-3, GR- 115 23, Athens, tel: 210-6475600, email: firstname.lastname@example.org, www.dpa.gr
Finally, it should be stressed that the HDPA is not competent for issuing short or long stay visas and is in no way involved in the visa procedure. For any such matter you are kindly requested to contact the Ministry of Foreign Affairs or the local offices of the Greek Embassies and Consulates abroad.