Cookies are used to collect information on how and when the website is used. This information helps to improve usability and to offer different groups of users targeted information about Kela’s services and benefits elsewhere on the internet.
Kela cannot identify individual users based on the data collected, because it does not capture the users’ name, contact details or personal data code. Behavioural data collected on the www.kela.fi website is not matched to e-service sign-in data or to other personally identifying data that Kela may handle in some other context.
Users can allow cookies by adjusting their cookie preferences.
Users can also allow access to their device’s location, which is needed by specific functions (such as the route planner) embedded into the Customer service locator produced by the National Land Survey of Finland.
Users can decide not to allow cookies or access to location, or withdraw their consent at any time.
1. How can I find Kela’s contact information?
2. What are cookies and what kind of information is collected with them?
3. What data does Kela collect on its social media pages?
4. For what purposes are cookies and the information associated with them used?
5. How long are data stored?
6. What options do users have regarding cookies?
7. What other options do users have?
8. To whom are data released or transferred?
9. How are data protected?
10. Will the privacy statement be updated at some point?
The Social Insurance Institution of Finland (Kela)
PL 450, 00101 Helsinki or Nordenskiöldinkatu 12, 00250 Helsinki, Finland
Telephone: 020 634 11
Pipsa Lotta Marjamäki, Director of Communications, tel. 020 634 1419.
Both first-party and third-party cookies are used on the kela.fi website. First-party cookies are created by the website whose address is shown in the address bar. The kela.fi website also uses third-party cookies from marketing technology providers and social media. Only the server that created the cookie can read the cookie and for example recognise a returning user.
On the kela.fi website, cookies are used among other things to collect information about
- the number of visitors to the website
- what types of devices are used to access the kela.fi website
- the online address from which users access the website
- the individual pages visited.
The page requests made by visitors to the site are stored automatically in cookies and on the servers for the kela.fi website. Such information typically includes the user’s page request and its date and time, the IP address of the user’s device, and the type and language of the browser.
The information is in a format that prevents it from being matched to individual users without access to additional information. Cookies are not used to store information for example about the user’s name, email address, telephone number or home address. Kela is unable to match cookie data to specific individuals and is taking steps to further minimise the potential to identify specific users. For example, when using web analytics tools, Kela deletes digits in the user’s IP address in order to prevent anyone from identifying specific users.
Kela’s Facebook presence consists of three pages (Kela-Kerttu, Kela-FPA and Student Financial Aid). With regard to user data on Kela’s Facebook pages, the joint data controllers are Facebook and Kela. Please refer to Facebook’s Privacy Statement for more information on how personal information is processed.
Kela only handles statistics on Facebook likes and visits and on the visibility of content posted on the page. They cannot be used to identify individual users. The visitor data for the Facebook page help Kela find out what type of content is of interest to the users. The statistics can help to make the content more useful to the target audience.
The kela.fi website may also include links to outside websites. Kela is not accountable for the privacy practices of such websites. For more information on Kela’s social medial presence, see www.kela.fi/sosiaalinen-media.
Functional cookies: These cookies are used to ensure the proper functioning of the kela.fi website, including allowing users to log in to the online customer service. They are required to offer the service requested by the individual user. Users are not asked for their consent to the use of these cookies.
With targeted advertising, Kela can provide information on topics which are likely to be relevant to users. Kela also reaches out to the public through communications to offer advice and to guide users to Kela’s e-service. Learn more about why Kela uses advertising.
Kela uses the Piwik Pro web analytics tool to better serve the needs of its customers. Analytics data is used to monitor the number of visitors and their behaviour on the site and to analyse why they visited the site. Users can block Piwik Pro cookies simply by changing their browser settings. One of the several ways in which Kela ensures the privacy of the visitors when using Piwik Pro analytics is to store only anonymised data in the service. Because user data is anonymised, it cannot be used as personal data and cannot be associated with a specific individual even if linked to data from other sources. Re-identification is thus prevented. For further information, see section 9 of the privacy statement.
Kela will never use information collected on the kela.fi website for example for purposes of automating the review of applications. The information collected therefore does not affect the protections that users enjoy under the law. Kela uses the collected information simply to reach groups of users who are likely to be interested in the services offered by Kela. Kela will never match the collected data to personal information obtained through some other channel.
Not all of the advertising deployed by Kela is targeted to users who previously visited the kela.fi website with the aim of delivering marketing elsewhere online based on the cookie created in that prior visit. Kela may ask a social media platform or other online service to display advertising about Kela’s services to a specific target group, for example users who are likely to be students. This means that an advertisement about the study grant may be displayed also to users who have never visited the kela.fi website.
The use of third-party cookie data is governed by the terms and conditions of the third parties, which can be examined below:
- Purpose for which cookies are used: To collect statistical data on the website and to analyse it in order to improve the website content.
- Purpose for which cookies are used: To collect statistical data on the website and to analyse it in order to improve the website content.
- A separate banner is not displayed to ask the user’s consent to the use of Piwik Pro cookies. Users can block Piwik Pro cookies simply by changing their browser settings.
- Purpose for which cookies are used: To collect feedback on the usefulness of individual pages on the website.
Google Tag Manager (GTM)
- Purpose for which the cookie is used: Managing target cookies such as Facebook and Adform pixels.
- Purpose for which the cookie is used: To personalise, implement and analyse marketing messages in order to display the kind of messages that users are most likely to find interesting.
- Purpose for which the cookie is used: To personalise, implement and analyse advertising in order to display the kind of advertising that users are most likely to find interesting.
- Purpose for which cookies are used: To personalise, implement and analyse marketing messages in order to display the kind of messages that users are most likely to find interesting.
The cookies either expire after the session ends (i.e., until the user closes the browser) or they are persistent cookies with a lifetime of a few months or a few years. Users can affect the length of time for which the data collected with cookies is stored by clearing the cookies in their browser settings, which will reset their cookie profile.
Typical storage periods for data collected with cookies are as follows:
Essential cookies: Essential cookies needed to log in to the e-service are session specific and are not stored after the browser is closed.
Cookies related to user metrics and analytics: Data collected by Google Analytics is typically stored for 26 months and data collected by Piwik Pro for 36 months.
Targeted communications. Data collected for purposes of targeted advertising is stored as follows:
- Adform 60 days
- Mediamath 13 months
- Facebook 180 days
- Twitter 30 days
Users may decline or withdraw their consent by clicking on the Block cookies button in the banner. Users can also set specific preferences for each type of cookie in Cookie Preferences.
The Cookie Preferences do not affect cookies which are essential to offer the requested service. They also do not affect Piwik Pro cookies. Kela is taking a number of steps to ensure the privacy of users, and user re-identification is prevented. By monitoring user behaviour Kela can improve the site to better serve customers’ needs.
Users can can also use the browser settings to block or delete cookies. Blocking or deleting cookies may affect the choices that users may previously have made on the website, for example delete a cookie forbidding targeted advertising. Any selections made are browser-specific, which means that users must manage their preferences separately in each browser.
In Google Chrome, Internet Explorer and Mozilla Firefox, for example, cookies are deleted as follows:
Google Chrome 66
- Open Google Chrome.
- Click the menu in the upper right-hand corner and select Options.
- Click Show advanced settings..
- Yes. Fill in the following data:
- Turn off “Allow sites to save and read cookie data (recommended)”.
Internet Explorer 11
- Launch Internet Explorer.
- Click the Tools icon (which looks like a cog) and select Internet Options.
- Select the Privacy tab and click on Advanced.
- Under First-party Cookies and Third-party Cookies, select Block. Also uncheck “Always allow session cookies”.
- Then click OK.
Mozilla Firefox 52
- Launch Firefox
- Click the menu in the upper right-hand corner and select Options..
- Select Privacy & Security.
Choose “Firefox will” in the drop-down menu under History.
Select “Never remember history”.
Close the Options page.
If you block cookies, you can allow them again at any time.
Blocking cookies will not make it more difficult to use the Kela.fi website However, cookies must be enabled if the user wishes to sign in to Kela’s e-service for example to file a claim for benefits. In that context, cookies are essential for the service to function properly. Cookies related to signing in are not used for marketing.
Besides having the right to information about the handling of personal information, users have the right under the privacy law
- to check what personal information has been stored about them
- to correct the information
- to delete the information and to exercise their right to be forgotten
- to restrict the handling of the information
- to ask that the information they have supplied, which is handled automatically based on their consent or an agreement, be transferred from one system to another
By default, exercising the above rights requires Kela to identify each user. If a user does not supply additional information to allow them or their data to be identified, Kela cannot take the measures needed for the exercise of the abovementioned rights.
Changing the cookie preferences as described above is the primary way in which users can affect the processing of their data. Users can contact Kela by phone or use the Message function on Kela’s e-service, submit a written request to Kela’s Registry, or personally visit a Kela service point. The contact information can be found in section 1.
Users can also file a complaint with the supervisory authority at www.tietosuoja.fi.
Kela works with a number of reliable partners to target marketing and enables these partners to collect information on the kela.fi website by means of cookies and similar technologies. Please refer to section 4 for information on how the partners handle the data.
Certain service providers contracted by Kela (such as communications agencies) may have access to data created in connection with visits to the kela.fi website. These service providers may use the data only as appropriate to Kela’s requirements. In that context, Kela may transfer processed personal data outside the EU or ETA in compliance with prevailing legislation.
Kela seeks to ensure by contractual means that the partners and service providers handle the information in accordance with the prevailing legislation.
At Kela, data security and protection of personal data are systematically taken into account in all use and handling of information. The privacy and usability of personal data are ensured by employing the appropriate technical and administrative measures. Kela handles all personal data with data protection in mind and in the manner determined by law.
All persons at Kela who handle personal data sign a confidentiality agreement. The personal data are used only by authorised persons who need them to perform their official duties.
Data collected by means of cookies are also handled by certain external partners of Kela in accordance with separate agreements. Kela seeks to ensure by contractual means that the partners take the necessary steps to guarantee data security as required by legislation.
The following privacy measures apply to the Piwik Pro analytics tool:
- Only anonymised data is stored in the service. Because user data is anonymised, it cannot be used as personal data and cannot be associated with a specific individual even if linked to data from other sources. Re-identification is thus prevented.
- Users cannot be identified on the basis of their IP address or location. Fingerprint authentication is disabled as well.
- Data are anonymised in accordance with the requirements set forth in the General Data Protection Regulation: The last two segments in IP addresses are deleted, and location data are reviewed at a general level only
- Cookies generated by Piwik Pro are stored in Kela’s own domain and on its own server. The data are stored in a system operated by Kela’s contractual partner Fujitsu.