Which data are collected by the Entry/Exit System?
You need to provide your personal data each time you reach the external borders of the European countries using the Entry/Exit System (EES).
The EES will be deployed gradually across the external borders of the 29 European countries over a period of 6 months. These European countries will introduce the different elements of the EES in phases, including the collection of biometric data, such as facial image and fingerprints. This means that travellers’ biometric data (facial image and fingerprints) might not be collected at every border crossing point right away, and their personal information may not be registered in the system. Passports will continue to be stamped as usual.
This progressive implementation will last until 9 April 2026. From 10 April 2026, the EES will be fully operational at all external border crossing points of the European countries using the system.
The EES collects, records and stores:
- data listed in your travel document(s) (e.g. full name, date of birth, etc.),
- date and place of each entry and exit,
- facial image and fingerprints (called ‘biometric data’),
- whether you were refused entry.
Conditions for collecting and storing personal data in the EES are set out in Regulation (EU) 2017/2226 establishing the Entry/Exit System.
If you hold a short-stay visa to enter the Schengen area, your fingerprints will already be stored in the Visa Information System (VIS) and will not be stored again in the EES.
Depending on your particular situation, the system also collects your personal information from the Visa Information System (which contains additional personal information).
All this is done in full compliance with data protection rules and rights.
Why is your data collected in the EES?
Your data is collected and processed in the EES to:
- reinforce the efficiency of external border management,
- prevent irregular immigration,
- facilitate the management of migration flows,
- identify travellers who have no right to enter or who have exceeded their permitted stay,
- identify travellers who are using fake identities or passports,
- help prevent, detect and investigate terrorist offences and other serious crimes.
This is required in accordance with Regulation (EU) 2017/2226, specifically Articles 14, 16 to 19 and 23 of Chapter II and Chapter III.
How will you be informed about the processing of your personal data?
You will be provided with written information about the EES and your related rights when you cross the external borders of the European countries implementing the EES for a short stay (maximum of 90 days in any 180-day period).
What happens if you refuse to have your fingerprints scanned or a photo of your face taken?
The recording of biometric data (fingerprints and facial image) is mandatory. Refusal to provide biometric data at the border crossings point operating the Entry/Exit System will lead to refusal of entry.
Who can access your personal data?
- Border, visa and immigration authorities in the European countries using the EES for the purpose of verifying your identity and understanding whether you should be allowed to enter or stay on the territory.
- Law enforcement authorities of the countries using the EES and Europol for law enforcement purposes.
- Under strict conditions, your data may be transferred to another country (inside or outside the EU) or international organisation (listed in Annex I of Regulation (EU) 2017/2226 - a UN organisation, the International Organisation for Migration, or the International Committee of the Red Cross) for return (Article 41(1) and (2), and Article 42) and/or law enforcement purposes (Article 41(6)).
- Transport carriers will only be able to verify whether short-stay visa holders have already used the number of entries authorised by their visa and will not be able to access any further personal data.
How long does the EES keep your personal data?
Your data will only be kept in the system for the purposes for which it was collected and for the specific durations outlined.
- Records of entries, exits and refusals of entry - 3 years Starting on the date on which they were created
- Individual files containing personal data - 3 years and 1 day Starting on the date of your last exit or of your refusal of entry (if you were not permitted to enter)
- If no exit has been recorded - 5 years Starting on the expiry date of your authorised stay.
- Records of entries and exits for non-EU nationals who:
- are family members of EU citizens or non-EU citizens who can travel throughout Europe like an EU citizen;
- do not hold a residence document; and
- are accompanying an EU, EEA or Swiss citizen, who is travelling or residing in a Member State other than the one of their nationality.
1 year Starting on the date of creation of the exit record.
- If no exit has been recorded and you:
- are a family member of an EU or a non-EU citizen who can travel throughout Europe like an EU citizen;
- do not hold a residence document; and
- are accompanying an EU, EEA or Swiss citizen, who is travelling or residing in a Member State other than the one of their nationality.
Your data will not be kept. There is no calculation of the length of your authorised stay.
After each time period expires, your data is automatically erased.
How to check the duration of your authorised stay in the European countries using the EES and what happens if you overstay?
You can use the “short-stay calculator” as a helping tool to check the duration of your authorised stay. The result of this calculator does not confer a right to stay for the calculated period.
If you stay longer than permitted, you will be considered an ‘overstayer’. If you are an ‘overstayer’, consequences can be enforced depending on national legislation in place in the respective European country using the EES (e.g. you may be removed from the territory; you may be subject to administrative fines or detention; you may be prevented from re-entering the EU in the future.)
If, as an overstayer, you provide credible evidence to the competent authorities, such as border authorities or immigration authorities, that you exceeded the authorised duration of stay due to unforeseeable or mitigating circumstances (e.g. hospitalisation due to a serious injury), your data can be amended in the system.
The calculation of the duration of the authorised stay do not apply to non-EU nationals who are family members of EU, EEA or Swiss nationals who travel to a state other than the state of their nationality, or already reside there, and are accompanying or joining the EU, EEA or Swiss national.
What rights do you have as regards to your personal data?
You have the right to:
- Request from the controller access to data relating to you;
- Request that inaccurate or incomplete data is corrected;
- Request that unlawfully processed personal data that concern you is erased and/or request that specific data are not processed.
To exercise any of these rights, you must contact a data controller (e.g. the entity responsible for processing your data) or data protection officer in any of the European countries using the EES, preferably the ones to which you travelled.
You can find the relevant contact details for the European countries using the EES.
In Slovakia the data subject can exercise his/her rights by submitting a request:
- in person, in writing or electronically signed with a guaranteed electronic signature to:
Úrad inšpekčnej služby
útvar kontroly
Pribinova 2
812 72 Bratislava
Slovenská republika
If you attach files to your message (such as copy of your ID, passport...), we kindly ask you sending it always password protected. Password should be sent in a different email. Doing so helps to protect your privacy.
How can you make a complaint about your data?
Lodging a complaint means that you submit a formal request for a new assessment of your data protection rights, for instance, if your query to the data controller to access, delete or amend your data is refused.
You can lodge a complaint with:
- the supervisory authority of the European country using the EES in charge of processing your data (e.g. if you believe that the country has recorded your data incorrectly)
Úrad na ochranu osobných údajov Slovenskej republiky
Námestie 1. mája 18
811 06 Bratislava
https://dataprotection.gov.sk/uoou/sk