Protection of personal data

Legal basis for the processing of personal data

The State Data Agency (Statistics Lithuania) (hereinafter referred to as the "Agency"), pursuant to the Law on Official Statistics and State Data Governance of the Republic of Lithuania (hereinafter refferred to as the "Law"), has been designated as one of the institutions responsible for producing official statistics and implementing the Official Statistics Programme.

Personal data are processed where a lawful purpose and appropriate legal basis for processing have been established: when carrying out tasks assigned to the Agency in the public interest and/or when fulfilling legal obligations laid down in legal acts, in accordance with Regulation (EC) No 223/2009 of the European Parliament and of the Council of 11 March 2009 on European statistics and Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), Article 6(1)(e) and Article 6(1)(c).

During surveys, personal data are collected in the implementation of the Official Statistics Programme, in accordance with Article 10(1)(1), (3) and (4) of the Law, which grants institutions producing official statistics the right to conduct statistical surveys, obtain, collect and combine statistical data necessary for the production of official statistics, including personal data, as well as data enabling the direct or indirect identification of individuals. As an institution responsible for producing official statistics, the Agency processes such data only to the extent necessary for official statistics purposes and in compliance with personal data protection requirements.

Categories of personal data processed

When conducting population surveys and producing official statistics, the following categories of personal data may be processed: identification and contact data, demographic data, social and economic data, special categories of personal data, as well as other responses provided during population surveys. 

The specific categories of data processed depend on the nature of the statistical survey conducted and the methodology applied.

Sources of personal data

Data for statistical surveys of the population are collected from respondents (residents) through surveys and from state registers. Telephone numbers are obtained from telecommunications service providers on the basis of contractual agreements.

Retention periods of personal data

Statistical data, including personal data of natural persons, are stored and processed no longer than necessary for the purposes for which the data are processed, in accordance with the requirements set out in the regulations of the State Data Governance Information System.

After the expiry of the retention period, the data are deleted, anonymised, or stored for archiving purposes in accordance with the procedure established by legal acts. Specific retention periods for personal data depend on the nature and periodicity of the statistical survey conducted. 

Telephone numbers and email addresses used during population surveys are stored for 6 months from the date they are obtained. After this period, these data are deleted from the Agency's systems, are not transferred to third parties, and are not used for any other purposes.

Data subject rights

Residents whose personal data are processed for the purposes of official statistics have the data subject rights established under the GDPR. However, where personal data are processed for official statistics purposes, certain rights may be exercised only to the extent that this does not prevent or seriously impair the achievement of official statistics objectives, in accordance with the Law and the GDPR.

Residents selected to participate in surveys have the following rights:

• to receive information about the processing of personal data;
• to access their personal data being processed;
• to request the rectification of inaccurate or incomplete personal data;
• to lodge a complaint with the State Data Protection Inspectorate.

For official statistics purposes, the following rights may be restricted:

• the right to restriction of processing of personal data;
• the right to object to the processing of personal data;
• the right to erasure ("right to be forgotten").

Certain data subject rights (the right to restriction of processing, the right to object, and the right to ensure) may be limited where their exercise would render impossible or seriously impair the achievement of official statistics purposes, in accordance with the Law and the GDPR. The right to erasure does not apply where the processing is necessary for the performance of tasks carried out by the Agency in accordance with legal acts for the purposes of official statistics, as provided for in Article 17(3)(b) of the GDPR.

Data Protection Officer

We inform you that the monitoring and supervision of compliance with personal data protection requirements within the Agency is carried out by the Data Protection Officer (DPO), appointed by order of the Director General of the State Data Agency. You may contact the Agency's Data Protection Officer by email: [email protected].

Actions or omissions of the State Data Agency may be appealed to the State Data Protection Inspectorate (L. Sapiegos St. 17, Vilnius) or to the Regional Administrative Court (Žygimantų St. 2, Vilnius). Before submitting a complaint, we encourage you to first contact the State Data Agency - we will be happy to provide additional information and assist in resolving any questions.