Home > Information on statistics > Mobile application for collecting consumption survey data

Data protection description 15th August 2025: Mobile application for collecting consumption survey data 2026

This Data protection description explains how Statistics Finland processes data submitted by households via the mobile application for the consumption survey. The application can be used to send photos of receipts and record daily purchases as part of the consumption survey. The purpose of the application is to reduce the burden of responding to the consumption survey by making it easier to submit data.

Statistics Finland acts as the controller and processor of personal data in the survey and is responsible for the practical implementation of the consumption survey data collection and the processing of the data. The data is used only for statistical purposes in the consumption survey and is not used to identify individuals or households.

The data collected through the app forms part of the overall consumption survey data, which also includes interview and register data as well as paper receipts and diaries submitted by households. The processing of these data is subject to a separate privacy statement for the consumption survey, which describes in more detail the principles for processing the entire research data, the combination of data, and the rights of data subjects.

1. Controller and contact persons

Statistics Finland

Postal address: FI-00022 STATISTICS FINLAND

Street address: Työpajankatu 13, Helsinki

Telephone: +358 29 551 1000 (switchboard)

Contact person: Tuomas Parikka

Email: kulutus.tilastokeskus@stat.fi

2. Data protection officer

Email: tietosuoja@stat.fi

3. Purpose and legal basis for processing personal data

The application is used to collect information on household consumption as part of Statistics Finland's consumption survey. The data is used solely for compiling consumption survey material. Respondents are informed about the entire consumption survey in a separate privacy statement, which describes in more detail the principles for processing the entire survey data, the combination of data, and the rights of data subjects.

Personal data is processed based on Article 6(1)(e) of the EU General Data Protection Regulation, based on a task carried out in the public interest.

Log data is processed based on Article 6(1)(c) of the EU General Data Protection Regulation in order to comply with the controller's legal obligation (Act on Information Management in Public Administration 906/2019, Sections 13 and 17).

4. Retention period for personal data

Data will only be retained for as long as necessary to conduct the consumer survey, i.e. for approximately two years. After this period, the data will be anonymized or deleted.

5. Personal data processed

The following data may be processed in the application:

• Household identification data necessary for processing the material (identification number or code, no names)

• Purchase transaction data (date, product information, price, place of purchase)

• Receipt images

• Technical data related to the use of the application (e.g., device type, operating system, log data)

• Feedback and messages sent by the user through the application. Messages are stored in a database and contain free-form text. In this case, the respondent is responsible for the content of the message.

The app does not collect personal identification or contact information, nor does it track activity in other apps. However, sensitive personal information such as health and prescription information may end up in the data, for example, from images of pharmacy receipts.

6. Regular data sources

Data subject's own notification: The data has been collected directly from the person themselves.

7. Disclosure of data

Data collected using the application will not be disclosed outside Statistics Finland.

8. Data transfer outside the EU or EEA countries

As a rule, Statistics Finland does not transfer personal data outside the EU or the EEA area. Personal data may be transferred to such third countries in which the protection of personal data is adequate in accordance with the European Commission’s decision.

With a user licence, data can be processed via the remote access system also in those countries outside the EU, whose level of data protection has been determined to be adequate by the European Commission’s decision. A list of these countries is published in the Official Journal of the European Union and on the website of the European Commission.

9. Automatic decision-making

Personal data are not used for automatic decision-making.

10. Rights of data subjects

Information about the rights of data subjects can be found on Statistics Finland's website www.stat.fi/meta/tietosuoja/index.html

11. Right to submit a complaint with the supervisory authority

If you think your personal data are processed unlawfully, you can submit a complaint to the Office of the Data Protection Ombudsman.

Office of the Data Protection Ombudsman
Street address Lintulahdenkuja 4, 00530 Helsinki
Postal address P.O.Box 800, 00531 Helsinki
Email tietosuoja(at)om.fi
Switchboard +358 29 566 6700
Registrar's Office +358 29 566 6768

Further information about submitting a complaint is available on the website of the Office of the Data Protection Ombudsman at www.tietosuoja.fi/en.