Data protection (Privacy policy)

How is private data stored?

Statistics Estonia is a state agency and its activities are public. Anyone can submit a request for information and inquire about our activities and published official statistics.

In the course of our activities, personal data are obtained, including private personal data. Access to personal data is restricted by law.

Data protection requirements describe how we use personal data and ensure their confidentiality.

What kind of data is obtained on persons?

• Contact details (name, address, e-mail address, phone number) and other data in documents
• Recordings of phone calls (at the beginning of the phone call there is a notification that the call is recorded)
• Electronic identification data (IP address)
• Data collected by customer surveys and feedback questionnaires
• Data on ordered products and services and website visits
• Data provided when applying for a job
• Data collected for the production of official statistics
   

If you are interested in whether and how your personal data becomes available through Statistics Estonia, please read the explanations.

• You submit a request for information, request for explanation, memorandum or order contract work.
• An inquiry is submitted concerning your employment at Statistics Estonia.
• You use our services, call customer support, participate in our events, customer surveys or feedback surveys.
• You visit our website and save cookies.
• You wish to access the collected data concerning you.
• You apply for a job at Statistics Estonia.
• You participated in an official statistics survey or Statistics Estonia collected data concerning you from state registers and databases for the purpose of producing statistics.
• There has been a personal data breach in the institution.
• Use of confidential data for scientific purposes.

Data protection requirements do not cover:

• storing data of legal persons;
• processing personal data on websites to which the website of Statistics Estonia links (external links).

Responding to requests for information, orders for contract work, memoranda or requests for explanation

• Your contact details are used only to respond to you or to contact you to notify of interesting new products. E-mails always include the option of unsubscribing from notifications. Once you have unsubscribed, you will not receive notifications for three years.
• Pursuant to the Public Information Act, the correspondence of a state agency has to be publicly available in a document register on the agency’s website. The contact details and other private information concerning individuals are confidential and access to such data is restricted by law.
• In the case of individuals, Statistics Estonia publishes in the document register on the website only the initials of the sender/recipient and the type of document (request for information and order for contract work, letter). The exact title or the content of the letter as well as the sender’s contact details are not disclosed, as there is a restriction on access to correspondence with individuals (for internal use). These data are not collected for the production of official statistics, regardless of the restriction on access, we release the data to an agency or person who pursuant to law has a right to request it (e.g. body conducting pre-trial proceedings or court).

Responding to an inquiry concerning employment at Statistics Estonia

As these data are not collected during the production of official statistics, Statistics Estonia will release the data to an agency or person who pursuant to law has a direct right to request it.

Using services, calling customer support, participating in events, customer surveys or feedback surveys

Your contact details are used only to respond to you or contact you, incl. to notify of new products that might be of interest to you.

Advertising and direct marketing messages (e.g. information on Statistics Estonia’s products and services, conferences, training invitations, etc.) are sent to customers who have given consent to receive direct marketing offers from Statistics Estonia. These persons receive newsletters and direct marketing messages by e-mail.

Customers can unsubscribe from the newsletter or direct marketing messages by opening the link included in the e mail or by following other instructions in the respective direct marketing message.

Data of your orders and responses given to customer surveys are used to develop products and services. Providing contact data in customer surveys and feedback surveys is voluntary. The summaries of surveys are published in a form that does not allow identification, without the name and address of the respondent. Access to the data of your website visits that are saved in log files and to the data collected in customer surveys is restricted, and the data are meant for internal use. Website use statistics and results of customer surveys are published anonymously, without the possibility of identification.

Phone calls to customer support or the general line are recorded. A notification of recording is at the beginning of the call. If you do not wish for your call to be recorded, you can end the call and choose another option for getting information (send a letter, e-mail or visit Statistics Estonia).

The recordings are used only to check the quality of service or if it is necessary to verify the content of the call. The recordings can be accessed by persons responsible for the quality of service. The recordings are stored for six months. The summaries of phone calls are anonymous and they are only for internal use.

Using the website and cookies

A cookie is a small text file that is saved on your computer or mobile device when you visit our website.

Statistics Estonia uses cookies on its website that allow identifying the setting and preferences of the visitor's computer. We use cookies to ensure more effective websites and get information on the visitor's preferences.

The following cookies are used on the website of Statistics Estonia:

• _ga – Google Analytics analytical cookie to distinguish users and their information/behaviour, with expiration in two years from its creation/update
• _gid – Google Analytics analytical cookie to monitor usage of webpages, with expiration in one day
• _gat_UA-5303491-1 – Google Analytics analytical cookie to filter/limit queries, with expiration in one  minute

• Facebook Pixel analytical cookie to monitor usage of webpages and optimise ads over the last 180 days

   

We may provide your data to other persons/institutions only if they have an explicit legal right (e.g. a court or a body conducting pre-trial proceedings) and a legitimate reason to access the data. The data are retained for one year from your visit and are deleted after the expiration of this period.

Right to access data concerning you

You have the right to access data concerning you collected by Statistics Estonia.

Please submit a digitally signed application by e-mail at stat [at] stat.ee (stat[at]stat[dot]ee). If the application concerns data collected on an enterprise, it must be signed by a person authorised to represent the enterprise.

We will reply to your application at the first opportunity but no later than within one month. Encryption will be used for the safe transmission of data by e-mail.

Applying for a job

When you apply for a job at Statistics Estonia:

• we will depend on the data you provide as well as public sources;
• we will assume that we can contact the persons named as references;
• you have the right to know what data concerning you we have collected;
• you have the right to access the collected data and present explanations/objections;
• the data of other candidates are not released to you;
• candidates’ data are stored in recruiting software Talendipank, in the e-mail boxes of human resources staff and in the document management system. Only the human resources staff of Statistics Estonia and members of a recruiting committee of a specific hiring project have access to the data;
• the data of unsuccessful candidates are stored for the period that the result can be challenged (one year), and for a longer period only if the candidate provides consent to receive invitations to participate in future job competitions;
• access to your data is restricted and given to third parties only in the cases provided by law;
• we may involve external experts  in the evaluation and use the services of external partners (recruitment agencies) and service providers (authorised processor) with whom we have entered into contract in which personal data protection is stipulated. As a result you may receive e-mails from authorised processors (e.g. from e-mail address @talendipank).

Participating in an official statistics survey or data from state registers and databases for the production of official statistics

Why does Statistics Estonia process my personal data?

Statistics Estonia processes your personal data to fulfill the obligation to produce official statistics arising from the Official Statistics Act¹.

Who is the chief processor of personal data and where can I find the contact details of the chief processor?

The chief processor of the personal data collected for the production of official statistics is Statistics Estonia ². The contact details for Statistics Estonia can be found on the website.

What types of personal data does Statistics Estonia process?

The categories of personal data processed by Statistics Estonia are personal data³ (e.g. name, personal identification code, economic and social characteristics, etc.) and special categories of personal data⁴ (e.g. ethnic nationality, health data, etc.). The processing takes place on the basis of the list of statistical activities⁵ approved by an order of the Government of the Republic or on the basis of section 20 “Statistical actions outside programme” of the Official Statistics Act.

To whom are my personal data disclosed?

As a rule, Statistics Estonia discloses your personal data in a form that does not allow identification, i.e. anonymously. Your data are disclosed in a form that allows identification only with your consent⁶ or in the cases provided by the Official Statistics Act (e.g. for scientific research purpose⁷ or to institutions of the European Statistical System⁸, etc.). In the disclosure of personal data, Statistics Estonia is guided by the rules established in the Official Statistics Act. To third countries, Statistics Estonia discloses data only in an anonymous form.

For how long does Statistics Estonia store my data?

The data for producing official statistics are stored indefinitely and the data are indefinitely protected by statistical confidentiality. 

The need to store data indefinitely arises from the so-called high value of data, as the collection, quality control, organisation etc. of data, which are essential components of producing statistics, require a lot of time and financial resources. It would be unreasonable not to use such an organised dataset for further or completely new studies in the future. We presume that even 100 years from now studies are conducted and people want to find out more about contemporary life. It could be said that to destroy the dataset would be to destroy national heritage – similarly the data in church records are invaluable and not to be destroyed.

The protection of statistical confidentiality means that your data can be disclosed only in an anonymous form, with your consent or in an identifiable form pursuant to the Official Statistics Act, and the collected data cannot be used in support of administrative, legal, control or person-related measures or decisions. The exception of storing data of official statistics is established also by the European Union General Data Protection Regulation (EU) 2016/679 (Article 5(1) point (e) and Article 89(1)).

Am I required to submit my data to Statistics Estonia?

As a rule, natural persons⁹ submit their personal data on voluntary basis. Exceptions to this rule are natural persons who own immovable property, buildings or parts thereof or own or possess agricultural land or farm animals or make international payments¹⁰ and census (population census, housing census and agricultural census) respondents¹¹. The aforementioned natural persons are required to submit the relevant data. The rule as well as the exceptions are established in subsections 28 (2) and 23 (1) of the Official Statistics Act.

Do I have the right to request erasure of personal data?

No, you do not have the right to request erasure of personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception¹² is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

Do I have the right to request rectification of personal data?

No, you do not have the right to request rectification of personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception¹³ is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

The Official Statistics Act requires Statistics Estonia to use for the production of statistics data previously collected in databases and state registers. Statistics Estonia receives data from various databases and state registers on the basis of bilateral agreements and written inquiries. It is very important that your data in these data sources are correct and up-to-date. Please make corrections to your data in the relevant registers and databases.

Do I have the right to request restriction of processing personal data?

No, you do not have the right to request restriction of processing personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception¹⁴ is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

Do I have the right to object to processing personal data?

No, you do not have the right to object to processing personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception¹⁵ is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

Does the right to data portability extend to my data?

No, the right to data portability does not extend to your data. Statistics Estonia processes personal data pursuant to the Official Statistics Act and performs a public duty. According to the European Union General Data Protection Regulation (EU) 2016/679¹⁶, if data processing occurs only on the basis of law, the right to data portability does not apply.

Does Statistics Estonia ask for data concerning me only from me or also from other data sources?

Statistics Estonia uses various data sources for producing official statistics. Moreover, the Official Statistics Act requires Statistics Estonia to use for the production of statistics existing data, i.e. data previously collected in databases and state registers. The aim is to reduce the response burden and save state resources. Statistics Estonia uses data from state registers and databases on the basis of bilateral agreements and written inquiries.

Does Statistics Estonia use profiling or automated decision-making concerning me?

No, Statistics Estonia does not use profiling or automated decision-making concerning individuals. The Official Statistics Act requires Statistics Estonia to use data collected for the production of official statistics only for the production of official statistics. The data cannot be used for administrative, legal, taxation or control purposes and they cannot be used for any measures or decision-making (incl. automated decisions and profiling) concerning a particular natural person. The relevant rule is established in the European Union General Data Protection Regulation (EU) 2016/679, the Official Statistics Act and the European Union regulation (EC) 223/2009 on statistics.

Do I have the right to request data concerning me that Statistics Estonia has collected?

Yes, you have the right to access data concerning you that Statistics Estonia has collected. Please submit a digitally signed application by e-mail at stat [at] stat.ee (stat[at]stat[dot]ee). If the application concerns data collected on an enterprise, it must be signed by a person authorised to represent the enterprise. We will reply to your application at the first opportunity but no later than within one month. Encryption will be used for the safe transmission of data by e-mail.

Do I have the right to lodge a complaint with a supervisory authority – the Data Protection Inspectorate?

Yes, you have the right to lodge a complaint (intervention application) with the Data Protection Inspectorate about the use of personal data in the production of official statistics.

Does Statistics Estonia have a data protection officer?

Yes, data protection at Statistics Estonia is handled by Ilona Reiljan, Thea Palm and Petra Brenner (andmekaitse [at] stat.ee (andmekaitse[at]stat[dot]ee)).

If I would like to ask Statistics Estonia questions about data protection, which address should I send my questions to?

Please send your data protection related questions to e-mail address andmekaitse [at] stat.ee (andmekaitse[at]stat[dot]ee).

Personal data breach

If a personal data breach happens at Statistics Estonia and it poses a potential risk to the rights and freedoms of a person, we will prepare the relevant required documents. We will take measures to end the breach immediately.

If as a result of the breach, there is a potentially high risk to your rights and freedoms, we will communicate this to you. The purpose of communication is to allow you to take the necessary precautions to mitigate the situation.

Use of confidential data for scientific purposes

Legal persons and organisations can use for research confidential data held by Statistics Estonia. The data can be used on a safe centre computer or remotely, depending on the nature of the data and contract conditions.

For further information, click here.