Data protection (Privacy policy)

How is private data stored?

Statistics Estonia is a state agency and its activities are public. Anyone can submit a request for information and inquire about our activities and published official statistics.

In the course of our activities, personal data are obtained, including private personal data. Access to personal data is restricted by law.

These data protection requirements describe how Statistics Estonia uses personal data and ensures their confidentiality.


What kind of data is obtained on persons?

  • Contact details (name, address, e-mail address, phone number) and other data in documents
  • Recordings of phone calls (at the beginning of the phone call there is a notification that the call is recorded)
  • Electronic identification data (IP address)
  • Data collected by customer surveys and feedback questionnaires
  • Data on ordered products and services and website visits
  • Data provided when applying for a job
  • Data collected for the production of official statistics


If you are interested in whether and how your personal data becomes available through Statistics Estonia, please read the explanations. This happens in the following situations.


Data protection requirements do not cover:

  • storing data of legal persons;
  • processing personal data on websites referred to on the website of Statistics Estonia (external websites).

Responding to requests for information, orders for contract work, memoranda or requests for explanation

  • Your contact details are used only to respond to you or contact you and to notify of interesting new products. E-mails always include the option of unsubscribing from notifications. Once you have unsubscribed, you will not receive notifications for three years.
  • Pursuant to the Public Information Act, the correspondence of a state agency has to be publicly available in a document register on the agency’s website. The contact details and other private information concerning individuals are confidential and access to such data is restricted by law.
  • In the case of individuals, Statistics Estonia publishes in the document register on the website only the initials of the sender/recipient and the type of document (request and order for contract work, letter). The exact title or the content of the letter as well as the sender’s contact details are not disclosed, as there is a restriction on access to correspondence with individuals (for internal use).
  • As these data are not collected for the production of official statistics, regardless of the restriction on access, we release the data to an agency or person who pursuant to law has a right to request it (e.g. body conducting pre-trial proceedings or court).
  • When you write to Statistics Estonia on behalf of a legal person or an institution, please use your work related contact details instead of your personal data. These contact details are publicly available in the document register.

Responding to an inquiry concerning employment at Statistics Estonia

As these data are not collected during the production of official statistics, Statistics Estonia will release the data to an agency or person who pursuant to law has a direct right to request it.

Visiting the website, using services, calling the respondents’ contact centre or statistical information line, participating in events and customer surveys or responding to feedback questionnaires.

Your contact details are used only to respond to you or contact you, incl. to notify of new products that might be of interest to you.

Advertising and direct marketing messages (e.g. information on Statistics Estonia’s products and services, conferences, training invitations, etc.) are sent to customers who have given consent to receive direct marketing offers from Statistics Estonia. These persons receive newsletters and direct marketing messages by e-mail.

Customers can unsubscribe from the newsletter or direct marketing messages by opening the link included in the e mail or by following other instructions in the respective direct marketing message.

Data of your orders, website visits and responses given to customer surveys are used to develop the products and services of Statistics Estonia. Providing contact data in customer surveys and feedback questionnaires is voluntary. The summaries of surveys are published in a form that does not allow identification, without the name and address of the respondent. Access to the data of your website visits that are saved in log files and to the data collected in customer surveys is restricted, and the data are meant for internal use. Website use statistics and results of customer surveys are published anonymously, without the possibility of identification.

Phone calls to the respondents’ contact centre, statistical information or general line are recorded. A notification of recording is at the beginning of the call. If you do not wish for your call to be recorded, you can end the call and choose another option for getting information (send a letter, e-mail or visit Statistics Estonia).

The recordings are used only to check the quality of service or if it is necessary to verify the content of the call. The recordings can be accessed by persons responsible for the quality of service. The recordings are stored for six months. The summaries of phone calls are anonymous and they are only for internal use.

Right to access data concerning you

You have the right to access data concerning you collected by Statistics Estonia.

Please submit an application. See the standard of services “Request for information”:

You will receive an answer concerning the application at first opportunity, but no later than within one month.

Applying for a job

When you apply for a job at Statistics Estonia:

  • we will depend on the data you provide as well as public sources;
  • we will assume that we can contact the persons named as references;
  • you have the right to know what data concerning you we have collected;
  • you have the right to access the collected data and present explanations/objections;
  • the data of other candidates are not released to you;
  • the data of unsuccessful candidates are stored for the period that the result can be challenged (one year), and for a longer period only if the candidate provides consent to receive invitations to participate in future job competitions;
  • access to your data is restricted and given to third parties only in the cases provided by law.

Participating in an official statistics survey or data from state registers and databases for the production of official statistics

Why does Statistics Estonia process my personal data?

Statistics Estonia processes your personal data to fulfil the obligation to produce official statistics arising from the Official Statistics Act1.

Who is the chief processor of personal data and where can I find the contact details of the chief processor?

The chief processor of the personal data collected for the production of official statistics is Statistics Estonia 2. The contact details for Statistics Estonia can be found on the website.

What types of personal data does Statistics Estonia process?

The categories of personal data processed by Statistics Estonia are personal data3 (e.g. name, personal identification code, economic and social characteristics, etc.) and special categories of personal data4 (e.g. ethnic nationality, health data, etc.). The processing takes place on the basis of the list of statistical actions5 approved by an order of the Government of the Republic or on the basis of section 20 “Statistical actions outside programme” of the Official Statistics Act.

To whom are my personal data disclosed?

As a rule, Statistics Estonia discloses your personal data in a form that does not allow identification, i.e. anonymously. Your data are disclosed in a form that allows identification only with your consent6 or in the cases provided by the Official Statistics Act (e.g. for scientific research purpose7 or to institutions of the European Statistical System8, etc.). In the disclosure of personal data, Statistics Estonia is guided by the rules established in the Official Statistics Act. To third countries, Statistics Estonia discloses data only in an anonymous form.

For how long does Statistics Estonia store my data?

The data for producing official statistics are stored indefinitely and the data are indefinitely protected by statistical confidentiality. The corresponding amendment to the Official Statistics Act is being prepared.
The need to store data indefinitely arises from the so-called high value of data, as the collection, quality control, organisation etc. of data, which are essential components of producing statistics, require a lot of time and financial resources. It would be unreasonable not to use such an organised dataset for further or completely new studies in the future. We presume that even 100 years from now studies are conducted and people want to find out more about contemporary life. It could be said that to destroy the dataset would be to destroy national heritage – similarly the data in church records are invaluable and not to be destroyed. The protection of statistical confidentiality means that your data can be disclosed only in an anonymous form, with your consent or in an identifiable form pursuant to the Official Statistics Act, and the collected data cannot be used in support of administrative, legal, control or person-related measures or decisions.

The exception of storing data of official statistics is established also by the European Union General Data Protection Regulation (EU) 2016/679 (Article 5(1) point (e) and Article 89(1)).

Am I required to submit my data to Statistics Estonia?

As a rule, natural persons9 submit their personal data on voluntary basis.
Exceptions to this rule are natural persons who own immovable property, buildings or parts thereof or own or possess agricultural land or farm animals or make international payments10 and census (population census, housing census and agricultural census) respondents11. The aforementioned natural persons are required to submit the relevant data.
The rule as well as the exceptions are established in subsections 28 (2) and 23 (1) of the Official Statistics Act.

Do I have the right to request erasure of personal data?

No, you do not have the right to request erasure of personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception12 is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

Do I have the right to request rectification of personal data?

No, you do not have the right to request rectification of personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception13 is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.
The Official Statistics Act requires Statistics Estonia to use for the production of statistics data previously collected in databases and state registers. Statistics Estonia receives data from various databases and state registers on the basis of bilateral agreements and written inquiries. It is very important that your data in these data sources are correct and up-to-date. Please make corrections to your data in the relevant registers and databases.

Do I have the right to request restriction of processing personal data?

No, you do not have the right to request restriction of processing personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception14 is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

Do I have the right to object to processing personal data?

No, you do not have the right to object to processing personal data used for producing official statistics. Statistics Estonia processes personal data in order to produce official statistics, or performs a public duty. In the European Union General Data Protection Regulation (EU) 2016/679, an exception15 is established for processing personal data required to perform a duty of public interest. The exception ensures that institutions performing public duties can meet their obligations arising from law.

Does the right to data portability extend to my data?

No, the right to data portability does not extend to your data. Statistics Estonia processes personal data pursuant to the Official Statistics Act and performs a public duty. According to the European Union General Data Protection Regulation (EU) 2016/67916, if data processing occurs only on the basis of law, the right to data portability does not apply.

Does Statistics Estonia ask for data concerning me only from me or also from other data sources?

Statistics Estonia uses various data sources for producing official statistics. Moreover, the Official Statistics Act requires Statistics Estonia to use for the production of statistics existing data, i.e. data previously collected in databases and state registers. The aim is to reduce the response burden and save state resources. Statistics Estonia uses data from state registers and databases on the basis of bilateral agreements and written inquiries.

Does Statistics Estonia use profiling or automated decision-making concerning me?

No, Statistics Estonia does not use profiling or automated decision-making concerning individuals. The Official Statistics Act requires Statistics Estonia to use data collected for the production of official statistics only for the production of official statistics. The data cannot be used for administrative, legal, taxation or control purposes and they cannot be used for any measures or decision-making (incl. automated decisions and profiling) concerning a particular natural person. The relevant rule is established in the European Union General Data Protection Regulation (EU) 2016/679, the Official Statistics Act and the European Union regulation (EC) 223/2009 on statistics.

Do I have the right to request data concerning me that Statistics Estonia has collected?

Yes, you have the right to access data concerning you that Statistics Estonia has collected. Please submit an application. See the standard of services “Request for information”. You will receive an answer concerning the application at first opportunity, but no later than within one month.

Do I have the right to lodge a complaint with a supervisory authority – the Data Protection Inspectorate?

Yes, you have the right to lodge a complaint (intervention application) with the Data Protection Inspectorate about the use of personal data in the production of official statistics.

Does Statistics Estonia have a data protection officer?

Yes, the data protection officer of Statistics Estonia is data protection specialist Katre Viljalo andmekaitse@stat.ee.

If I would like to ask Statistics Estonia questions about data protection, which address should I send my questions to?

Please send your data protection related questions to e-mail address andmekaitse@stat.ee.

Personal data breach

If a personal data breach happens at Statistics Estonia and it poses a potential risk to the rights and freedoms of a person, we will prepare the relevant required documents. We will take measures to end the breach immediately.

If as a result of the breach, there is a potentially high risk to your rights and freedoms, we will communicate this to you. The purpose of communication is to allow you to take the necessary precautions to mitigate the situation.


 

https://www.riigiteataja.ee/akt/13338093?leiaKehtiv

Official Statistics Act section 34 (8)

Regulation (EU) 2016/679 Article 4 point (1)

4Regulation (EU) 2016/679 Article 9 point (1)

https://www.riigiteataja.ee/akt/320022018004?leiaKehtiv

Official Statistics Act section 35 (2)

Official Statistics Act section 38

Official Statistics Act section 35 (3)

Official Statistics Act section 28 (2)

10 Official Statistics Act section 28 (2)

11 Official Statistics Act section 23 (1)

12 Regulation (EU) 2016/679 Article 17(3) point (d)

13 Regulation (EU) 2016/679 Article 89(2)

14 Regulation (EU) 2016/679 Article 89(2)

15 Regulation (EU) 2016/679 Article 89(2) and Article 21(6)

16 Regulation (EU) 2016/679 Article 20(3)