Privacy policy in Government Office of Estonia

Personal data is any data that allows a person to be identified. The processing of personal data is any act performed using personal data. Presented below is information on the principles governing personal data processing in the Government Office and on the rights of a person to examine their own data.

Personal data and the processing thereof

The processing of personal data is any operation performed using personal data, including data collection, storage, organisation, modification, use, disclosure, provision of access, making of inquiries and extracts, transmission, deletion and storage.

Personal data is any information about an identified or identifiable individual. Examples of personal data are the following:

  • name
  • address
  • e-mail address
  • phone number
  • IP address
  • information collected by cookies on a website

In addition, health data, data on sexual life and sexual orientation, genetic and biological data, etc.

My data and rights

The Government Office will implement appropriate organisational, technical, and physical measures to ensure the protection of all personal data processed in the Government Office. The Government Office does not process or transfer your personal data outside the European Union / European Economic Area (EU/EEA).

You have the right to receive information on whether the Government Office is processing your personal data and the right to inspect the data collected concerning you. The Government Office has the right to confirm your identity when resolving your inquiry.

You have the right to request the rectification of incorrect personal data, to object to the processing of your personal data, and to apply for the erasure of personal data. This right will not apply if the personal data to be deleted is required to be retained pursuant to law. If the processing of personal data is taking place with your consent, you can always withdraw your consent. You also have the right to restrict the processing of your personal data if the processing of personal data does not take place on a lawful basis.

The Government Office may refuse to comply with your request if doing so could damage the rights and freedoms of another person, hinder the prevention of a crime or prevent the apprehension of a criminal, make it more difficult to establish the truth in criminal proceedings, or jeopardise confidentiality in the filiation of a child.

We will respond to your inquiry regarding the processing of your personal data as soon as possible. If necessary, the Government Office has the right to ask for clarifications regarding the request. In the case of complex and voluminous requests, the one-month period may be extended by up to two months. If the data is being processed by another institution, the Government Office will forward the request to the relevant institution for response, informing you thereof.

riikikantselei.ee,  valitsus.ee and digitalsummit.ee

In the case of its public web environments, the Government Office automatically collects information about visitors, which is stored in log files. This information may include the user’s IP address, location, time of visit, type of browser used, information about the operating system, history of page views, technical data, such as plug-ins used (Flash, Java, etc.).

As a rule, the Government Office processes the data of visitors to websites in a non-personalised form.

The Government Office uses the information collected through websites to develop its websites. It may also be necessary to use the IP address of the interested party to identify problems on the Government Office’s server, manage the website, analyse trends, and obtain an overview of the activities of visitors to the page.

The Government Office’s online environment also uses cookies.

The Government Office uses the web analytics service Google Analytics, offered by Google Inc., on its website, which helps to collect information on how the websites of the Government Office. The Government Office needs this information to improve the user-friendliness of the website, for example, to make information on the website easier to find.

Google Analytics cookies collect, among other things, the following data: IP address; number of website visitors; origin of the inquiry (country); pages viewed by the interested party; and the length of time someone has spent on one page or another. Information about the use of the Government Office’s website is transmitted to and stored on Google’s server. The information is used to prepare general overviews regarding the use of the website, which does not contain any personalised information about the user. Google’s privacy policy can be found at https://policies.google.com/privacy.

If the user of the Government Office’s website does not want the above-mentioned data about them to be transmitted to Google Analytics, this function can be disabled. To do so, you will need to download and install the corresponding browser-based add-on, which is available at https://tools.google.com/dlpage/gaoptout?hl=en.

In addition to the Google Analytics service, the Government Office may use other services that enable web analysis – such as the React & Share service – on the websites it manages. For more information on React & Share privacy settings, visit https://www.reactandshare.com/privacy-policy.

Social media channels Facebook, Twitter and LinkedIn

The Government Office uses social media channels (Facebook, Twitter and LinkedIn) to transmit information in accordance with the data protection conditions of these service providers.

The Government Office uses Facebook, Twitter and LinkedIn links on its social media networks. If you click on the corresponding link when visiting the Government Office’s website, a connection will be established with Facebook, Twitter, or LinkedIn. If you have logged in to Facebook, Twitter, or LinkedIn while clicking on the link, the respective service provider can associate the visit with the account of the clicked link and share the website information in your account. To avoid such data collection, you must log out of the respective social media channel or not click on the link before clicking on the Facebook, Twitter, or LinkedIn link on the Government Office’s website.

YouTube video platform

The Government Office uses the YouTube video platform to transmit information in accordance with the data protection terms and conditions established by the said service provider.

If you click on the corresponding link when visiting the Government Office’s website, a connection to YouTube will be established. If you are logged in as a YouTube user while clicking on the link, YouTube can associate the visit with the account of the person who clicked on the link. In order to avoid such data collection, you must log out of this web environment or not click on the link before clicking on the YouTube link found on the Government Office’s website.

Infringements

If a violation related to personal data occurs in the Government Office and it poses a likely threat to your rights and freedoms, the Government Office will take the measures required by legislation, in particular, measures that allow the violation to be terminated without delay. If, as a result of the violation, your rights and freedoms are placed at grave risk, the Government Office will inform you thereof.

Government Office

You can contact the Government Office concerning all matters related to the processing of your personal data.

Data Protection Inspectorate

If you find that the Government Office has violated your rights in processing personal data, you can contact the Data Protection Inspectorate.

Last updated: 11.08.2021