Who is responsible for processing my data and how can I contact the Data Protection Commissioner?

Responsibility for processing the data lies with the mission of the Federal Republic of

Germany in Wellington P.O. Box 1687, Wellington 6140, New Zealand, Tel. +64 4 473 60 63

and the Federal Foreign Office (postal address: Federal Foreign Office, 11013 Berlin, Germany).

The Federal Foreign Office Data Protection Commissioner can be contacted as follows:

Werderscher Markt 1

10117 Berlin

Germany

Email: dsb-r@auswaertiges-amt.de

Tel: + 49 30 5000 2711

Fax: + 49 30 5000 51733

What data does the mission process when I apply for a visa, and where do the data come from?

The categories of personal data processed cover the data requested on the visa application

form. Generally these include in particular your surname, name at birth, forename, date and

place (including the country) of birth, gender, nationality/nationalities, civil status, current

address, telephone number, email address, occupation, details of your travel document (type

of document, serial number, issuing state and authority, date of issue, expiry date), your

photograph and fingerprints.

The data in these categories derive from the information you provide in the course of the

visa application process.

What data does the mission process when I issue a letter of invitation for someone to use to apply for a visa, and where do the data come from?

The categories of personal data processed cover the data requested on the visa application

form about the person issuing the invitation. This includes in particular your surname and

forename, your address, fax number and email address.

The data in these categories derive from the information you provide in the letter of

invitation and the applicant provides in the course of the visa application process.

Why are my data collected, and what happens if they are not?

Your data are collected because it is necessary and legally required for the proper conduct of

the visa application procedure. If you apply for a visa, you are required under Section 82 of

the Residence Act (Aufenthaltsgesetz) to provide the data required for the processing of the

application and to make available the necessary evidence. If your data are not provided, it

may be that your application is rejected and the fee retained.Embassy of the Federal Republic of Germany in Wellington

For what purposes and on what legal basis are my data processed?

Your personal data are processed solely in order to ensure the correct handling of the visa

application.

The legal basis is provided by Art. 6 (1) (c) and (e) and (2) of Regulation (EU) 2016/679

(General Data Protection Regulation) in combination with Regulation (EC) No. 767/2008 (VIS

Regulation) and Regulation (EC) No. 810/2009 (Visa Code) including its Annexes, and Sections

72a ff. of the Residence Act and Section 69 of the Ordinance on residence, as well as the

Central Register of Foreigners implementing regulation (AZRG-DV), the Visa Warning File Act

(VWDG) and further special regulations as appropriate or Section 3 of the Federal Data

Protection Act (BDSG 2018).

How long will my data be kept?

Your data are deleted as soon as they are no longer required for completion of the visa

procedure. Generally they are deleted two years after the visa procedure has been

completed, but at the latest five years after the final decision on the visa application.

Who receives my data?

Your data are transferred to third parties only where necessary for the proper conduct of the

visa procedure. As part of this procedure, it may be that your personal data are passed to the

competent authorities in Germany, to the responsible visa offices of other Schengen member

states or to the responsible authorities in your place of habitual residence. If an external

service provider is charged with carrying out individual stages of the visa application

procedure, your data will be collected by or transferred to this provider as far as necessary

for the completion of the application procedure. Your data are only transferred to recipients

outside the European Union to the extent permissible under Chapter V of the General Data

Protection Regulation.

What data protection rights can I exercise?

You can request information about the personal data stored about you from the

abovementioned entities responsible for data processing. In addition, under certain

conditions, you can request that your data are corrected, erased or that processing is

restricted. Further, under certain conditions you can object to the processing of your data.

Where can I file a complaint?

You have the right to file a complaint about the processing of your personal data with a data

protection authority, particularly in the member state in which you have your place of

residence, your place of employment or the place where the alleged breach of data privacy

occurred.