Use of cookies and privacy statement for the kela.fi website

Kela is committed to protecting the privacy of its clients and the users of its website.

This privacy statement is valid both for the www.kela.fi website, which is open to everyone, and for Kela’s Facebook pages. It describes how Kela deals with data concerning the users of the www.kela.fi website.

Kela and its partners use cookies and other similar tracking and personalisation technologies (hereinafter referred to collectively as “cookies”) on the www.kela.fi website. They are used to collect information on how and when the website is used. They help to improve usability and to offer different groups of users targeted information about Kela’s services and benefits.

Kela cannot identify individual users based on the data collected, because it does not capture the users’ name, contact details or personal data code.

Behavioural data collected on the www.kela.fi website is not matched to e-service sign-in data or to other personally identifying data that Kela may handle in some other context.

By adjusting their browser settings or by visiting the websites of Kela’s partners, users have control over the use of cookies. See sections 6 and 7 for details on the options available to you.

This privacy statement answers the following questions:

1. How can I find Kela’s contact information?
2. What are cookies and what kind of information is collected with them?
3. What data does Kela collect on its social media pages?
4. For what purposes are cookies and the information associated with them used?
5. How long are data stored?
6. What options do users have regarding cookies?
7. What other means of control are available to users?
8. To whom are data released or transferred?
9. How are data protected?
10. How is this privacy statement revised or updated?

 

1. Contact information

The Social Insurance Institution of Finland (Kela)
PL 450, 00101 Helsinki or Nordenskiöldinkatu 12, 00250 Helsinki, Finland
Telephone: 020 634 11
www.kela.fi/yhteystiedot-hallinto

Contact person:
Pipsa Lotta Marjamäki, Director of Communications, tel. 020 634 1419.
firstname.lastname (at) kela.fi.

2. What are cookies and what kind of information is collected with them?

Like many other websites, the kela.fi website uses cookies and other similar tracking and personalisation technologies. Cookies are small text files containing information which are downloaded to the user’s device and which collect information about visits to the kela.fi website.

By continuing to use the kela.fi website after having been provided with information and offered the possibility to exercise control, users accept the setting of cookies. See sections 6 and 7 for details on the options available to you.

Both first-party and third-party cookies are used on the kela.fi website. First-party cookies are created by the website whose address is shown in the address bar. The kela.fi website also uses third-party cookies from marketing technology providers and social media. Only the server that created the cookie can read the cookie and for example recognise a returning user.

On the kela.fi website, cookies are used among other things to collect information about

⦁ the number of visitors to the website
⦁ what types of devices are used to access the kela.fi website
⦁ the online address from which users access the website
⦁ the individual pages visited.

The page requests made by visitors to the site are stored automatically in cookies and on the servers for the kela.fi website. Such information typically includes the user’s page request and its date and time, the IP address of the user’s device, and the type and language of the browser.

Cookies and log data are mainly in a format that prevents them from being matched to individual users without access to additional information. Cookies and server logs are not used to store information for example about the user’s name, email address, telephone number or home address. Kela is unable to match cookie data to specific individuals, and is taking steps to further minimise the potential to identify specific users. For example, when using web analytics tools, Kela deletes digits in the user’s IP address in order to prevent anyone from identifying specific users.

3. What data does Kela collect on its social media pages?

Kela’s Facebook presence consists of three pages (Kela-Kerttu, Kela-FPA and Student Financial Aid). With regard to user data on Kela’s Facebook pages, the joint data controllers are Facebook and Kela. Please refer to Facebook’s Privacy Statement for more information on how personal information is processed.

Kela only handles statistics on Facebook likes and visits and on the visibility of content posted on the page. They cannot be used to identify individual users. The visitor data for the Facebook page help Kela find out what type of content is of interest to the users. The statistics can help to make the content more useful to the target audience.

The kela.fi website may also include links to outside websites. Kela is not accountable for the privacy practices of such websites. For more information on Kela’s social medial presence, see www.kela.fi/sosiaalinen-media

4. How are cookies and the information associated with them used?

Cookies are used to ensure the proper functioning of the website and to guarantee data security, for analytics and development, and to offer targeted advertising:

Ensuring the technical functioning of the website and guaranteeing data security: Cookies can be used to ensure the proper functioning and security of the kela.fi website.

Analysis and development of the website: Web analytics tools (Google Analytics and Piwik Pro) use cookies to collect statistical data. We collect data to analyse the number of visitors, to gauge users’ interest in various types of content and to identify different ways in which the service used, as well as to develop the site further.

Targeted advertising: Kela uses cookies to provide targeted advertising to various customer categories about services and benefits of potential interest to them. For example, users who have visited the kela.fi website may see advertising messages from Kela on social media services. Our partners in providing targeted information are Adform, MediaMath and Facebook. By deploying cookies from these service providers on its website, Kela makes it possible to collect information and to transmit it to the service providers.

With targeted advertising, Kela can provide information on topics which are likely to be relevant to users. Kela also reaches out to the public through communications to offer advice and to guide users to Kela’s e-service. Learn more about why Kela uses advertising.

Kela will never use information collected on the kela.fi website for example for purposes of automating the review of applications. The information collected therefore does not affect the protections that users enjoy under the law. Kela uses the collected information simply to reach groups of users who are likely to be interested in the services offered by Kela.

Not all of the advertising deployed by Kela is targeted to users who previously visited the kela.fi website with the aim of delivering marketing elsewhere online based on the cookie created in that prior visit. Kela may ask a social media platform or other online service to display advertising about Kela’s services to a specific target group, for example users who are likely to be students. This means that an advertisement about the study grant may be displayed also to users who have never visited the kela.fi website.

Kela will never match the collected data to personal information obtained through some other channel.

However, users should note that other service providers may match data collected on the kela.fi website to information they have collected elsewhere. For example Facebook may match a cookie related to a visit to the kela.fi website to a specific Facebook user who has a Facebook account. Facebook uses cookies to create target groups that Kela can use for advertising purposes. Kela can use such target groups for example to display advertising about how to apply for the study grant to Facebook users who have previously looked up study grant related information on kela.fi. However, Kela cannot identify specific Facebook users. Also Google may match a cookie to a user’s Google account.

Please see below for more information on Kela.fi partners and the purposes for which cookies are used:

Google Analytics

Purpose for which the cookie is used: To collect statistical data on the website and to analyse it in order to improve the website content.
Click here for more information on how Google uses cookies.

Piwik Pro

Purpose for which the cookie is used: To collect statistical data on the website and to analyse it in order to improve the website content.
Click here for more information on how Piwik Pro uses cookies.

Hotjar

Purpose for which the cookie is used: To collect statistical data on the website and to analyse it in order to improve the website content.
Click here for more information on how Hotjar uses cookies.

Google Tag Manager (GTM)

Purpose for which the cookie is used: Managing target cookies such as Facebook and Adform pixels.
Click here for more information on how Google uses cookies.

Google Double Click

Purpose for which the cookie is used: To personalise, implement and analyse advertising in order to display the kind of advertising that users are most likely to find interesting.
More information: If the user has a Google account, Google may match the cookie to the user’s account. Click here for more information on how Google users cookies for personalised advertising.

Facebook

Purpose for which the cookie is used: To personalise, implement and analyse advertising in order to display the kind of advertising that users are most likely to find interesting.
More information: Click here for more information on how Facebook uses cookies. Facebook may match a cookie related to a visit to the kela.fi website to a specific Facebook user who has a Facebook account.

Adform   

Purpose for which the cookie is used: To personalise, implement and analyse advertising in order to display the kind of advertising that users are most likely to find interesting.
Click here for more information on how Adform uses cookies.

MediaMath    

Purpose for which the cookie is used: To personalise, implement and analyse advertising in order to display the kind of advertising that users are most likely to find interesting.
Click here for more information on how MediaMath uses cookies.

5. How long are data stored?

The cookies either expire after the session ends (i.e., until the user closes the browser) or they are persistent cookies with a lifetime of a few months or a few years. Users can at any time block or delete cookies using the tools available in the browser. Please refer to section 6 for details.

Targeted advertising: The data collected for the purpose of targeted advertising is typically stored for a few months. For example Adform and Mediamath, both Kela partners, delete the data within 13 months.

Analysis and development of the website and data security: Cookies collected for this purpose are deleted from Hotjar or equivalent within 365 days. Data collected by Google Analytics are typically stored for xx months and data collected by Piwik Pro for xx months.

6. What options do users have regarding cookies?

You can block cookies and affect how they are used by visiting our partners’ websites:

  • Google Analytics: Users can block the use of site data in Google Analytics by installing a browser add-on available here. The add-on prevents the Google Analytics JavaScript code running on the website (ga.js, analytics.js and dc.js) from sharing site usage data with Google Analytics.
  • Google DoubleClick: Users can manage Google’s advertising settings here.
  • Facebook: Users can manage Facebook’s advertising settings here.
  • Adform: Users can go withdraw their consent to targeted advertising here.
  • MediaMath: Users can withdraw their consent to targeted advertising here.
  • Hotjar: Users can go here to prevent the collection of data .
  • Piwik Pro: Users can stop the collection of data by enabling Do not track in the browser settings. Browser-specific instructions: Internet Explorer, Firefox and Google Chrome.

You can also use the browser settings to block or delete cookies. Please note that blocking or deleting cookies may affect choices you have made previously on these partner websites, for example deleting a cookie set previously on the website which forbids targeted advertising. Also note that the settings are browser specific, which means that you must make the corresponding changes in every browser you use.

In Google Chrome, Internet Explorer and Mozilla Firefox, for example, cookies are blocked as follows:

Google Chrome 66

  1. Open Google Chrome.
  2. Click the menu in the upper right-hand corner and select Settings..
  3. Click Show advanced settings..
  4. Click Content settings under Privacy and Security.
  5. Turn off “Allow sites to save and read cookie data (recommended)”.

Internet Explorer 11

  1. Open Internet Explorer.
  2. Click the Tools icon (which looks like a cog) and select Internet Options.
  3. Select the Privacy tab and click on Advanced.
  4. Select Block for both First-party Cookies and Third-party Cookies, and uncheck the “Always allow session cookies” checkbox.
  5. Then click OK.

Mozilla Firefox 52

  1. Open Firefox
  2. Click the menu in the upper right-hand corner and select Options..
  3. Select Privacy.
  4. In the History section, click on the drop-down menu and select “Never remember history”.
  5. Close the Options page.

If you block cookies, you can allow them again at any time.

Blocking cookies will not make it more difficult to use the Kela.fi website

However, cookies must be enabled for you to sign in to Kela’s e-service for example if you wish to file a claim for benefits. In that context, cookies are essential for the service to function properly. Cookies related to signing in are not used for marketing.

7. What other options do users have?

Besides having the right to information about the handling of personal information, users have the right under the privacy law
 
⦁    to check what personal information has been stored about them  
⦁    to correct the information
⦁    to delete the information and to exercise their right to be forgotten
⦁    to restrict the handling of the information
⦁    to ask that the information they have supplied, which is handled automatically based on their consent or an agreement, not be transferred from one system to another
⦁    to object to the handling of their personal information.

By default, exercising the above rights requires Kela to identify each user. This means that users must supply additional information to allow them to be identified.

The principal ways in which users can affect the handling of their personal information is to block cookies in the browser settings and to visit the websites of Kela’s marketing partners. Users can contact Kela by phone, by using the Messages function on Kela’s e-service, by submitting a written request to Kela’s Registry, or by visiting a Kela office personally. The contact information is stated in section 1. Users can also file a complaint with the supervisory authority at www.tietosuoja.fi.

Location-based services (such as the route planner), which are part of the customer service locator page, request the user’s consent for the service to locate the user’s device. The consent may be revoked at any time. The map service is provided by the National Land Survey of Finland.

8. To whom are data released or transferred?

Kela works with a number of reliable partners to target marketing and enables these partners to collect information on the kela.fi website by means of cookies and similar technologies. Please refer to section 4 for information on how the partners handle the data.

Certain service providers contracted by Kela (such as communications agencies) may have access to data created in connection with visits to the kela.fi website. These service providers may use the data only as appropriate to Kela’s requirements. In that context, Kela may transfer processed personal data outside the EU or ETA in compliance with prevailing legislation.

Kela seeks to ensure by contractual means that the partners and service providers handle the information in accordance with the prevailing legislation.

9. How are data protected?

At Kela, data security and protection of personal data are systematically taken into account in all use and handling of information. The privacy and usability of personal data are ensured by employing the appropriate technical and administrative measures. Kela handles all personal data with data protection in mind and in the manner determined by law.
 

All persons at Kela who handle personal data sign a confidentiality agreement. The personal data are used only by authorised persons who need them to perform their official duties.

Data collected by means of cookies are also handled by certain external partners of Kela in accordance with separate agreements. Kela seeks to ensure by contractual means that the partners take the necessary steps to guarantee data security as required by legislation.

10. Will the privacy statement be updated at some point?

Kela may update the privacy statement when appropriate, for example if the purposes for which which the data are handled change or if the relevant legislation or government recommendations are revised. Information about the updates will be posted on the www.kela.fi website.

Kela published a privacy statement compliant with the EU General Data Protection Regulation on 24 May 2018. The privacy statement was updated in December 2018 with information on users’ options when it comes to the handling of personal information and further in March 2019 with information about such new tools as Hotjar and Tag Manager. The statement was edited for clarity in October 2019.