This privacy notice covers how data is processed to enable the various Government of Jersey (GoJ) departments to plan for, respond to, and aid recovery from major incidents.
Different GoJ departments will be involved depending on the type of major incident.
GoJ departments are registered as individual Data Controllers under the Data Protection (Jersey) Law 2018 (Data Protection Law), as they determine the purpose and means of the processing of the personal information collected about you.
As Government Departments, we generally process and hold your information in order to provide public services and meet our statutory obligations. This notice explains in more detail how we use and share information relating to you (your personal data) in order to prepare for and respond to major incidents.
To find out more information on how individual departments use your personal data for other services please visit States of Jersey privacy policies.
We will continually review and update this privacy notice to reflect changes in our services and as a result of feedback from service users, as well as to comply with changes in the law.
How we collect information about you
The types of personal data we collect, and process will depend on the function we perform. The information collected will include:
- Information provided by staff and volunteers
- Information you provide following a major incident, including from forms completed at designated evacuation / survivor centres
- Information provided by category 1 responders (such as emergency services) and category 2 responders (such as utilities and telecoms)
- Information gathered in person or electronically from anyone else impacted by a major incident, including witnesses and perpetrators
- CCTV and body worn camera images
- Information already accessible in GoJ systems
- Completed risk assessments
- Emergency plans
- Information provided by mail, email or telephone, including calls into the Emergency Services Control Centre (ESCC)
Other relevant information may be collected and processed depending on the type of major incident that has taken place.
We may collect information about you from other GoJ departments or from third parties with which we interact in order to deliver our duties, these include:
- Ports of Jersey
- Andium Homes
- Honorary Police
- Jersey Electricity Company
- Jersey Water
- Island Energy Group
- Jersey Telecoms
- Sure
- Liberty Bus
- Jersey Post
- Rubis
- Ferry Speed
- Condor Ferries
- Channel Seaways
- British Red Cross
- Salvation Army
- Citizens Advice Jersey
- JSPCA
- Jersey Raynet Group
We may also collect and process information from third parties that are not listed above depending on what is needed in each circumstance.
Types of information we collect
The types of personal data collected will vary. However, we have listed below the most common categories of information we may collect about you:Name
- Contact details (Address, telephone number, email address)
- Date of birth
- Gender
- Professional or employment / business-related information
- Official identity information
- Location
- Health information
- Social care information
- Race and / or primary language
- Religion
- Family and household data
- Financial information and / or insurance details
- Next of kin details
- Any other information you may disclose if you have been impacted
How we will use the information about you
We do not collect or process all this personal data for all people all the time. We only collect and process the personal data that is necessary to provide you with support and assistance in the event that you are affected by a major incident.
We need to collect and hold personal data about you, in order to carry out the public functions of the GoJ. Our legal basis for processing personal data in most cases is that it is necessary for the exercise of our functions of the States or as a public authority (Schedule 2 para 4(c) of the Data Protection Law).
We have set out in further detail below why we use your personal data in each instance
To effectively respond to major incidents
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b) Vital interests: Schedule 2, Part 1, Paragraph (3) of the Law, which permits the processing of personal data to protect the vital interests of the data subject or any other natural person. Schedule 2, Part 2, Paragraph (9) of the Law, which permits the processing of special category data to protect the vital interests of the data subject or another person, in a case where consent cannot be given by or on behalf of the data subject, or the controller cannot reasonably be expected to obtain the consent of the data subject; or another person, in a case where consent by or on behalf of the date subject has been unreasonably withheld.
Substantial public interest: Schedule 2, Part 2, Paragraph (14) of the Law, which permits the processing of special category data for reasons of substantial public interest.
Medical purposes: Schedule 2, Part 2, Paragraph (15) of the Law, which permits the processing of special category data for medical purposes.
Public health: Schedule 2, Part 2, Paragraph (16) of the Law, which permits the processing of special category data for reasons of public interest in the area of public health.
Prevent unlawful acts: Schedule 2, Part 2, Paragraph (19) of the Law, which permits the processing of special category data to prevent unlawful acts.
| All listed above
|
|---|
To provide health care to individuals
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b) Medical purposes: Schedule 2, Part 2, Paragraph (15) of the Law, which permits the processing of special category data for medical purposes.
Vital interests: Schedule 2, Part 1, Paragraph (3) of the Law, which permits the processing of personal data to protect the vital interests of the data subject or any other natural person. Schedule 2, Part 2, Paragraph (9) of the Law, which permits the processing of special category data to protect the vital interests of the data subject or another person, in a case where consent cannot be given by or on behalf of the data subject, or the controller cannot reasonably be expected to obtain the consent of the data subject; or another person, in a case where consent by or on behalf of the date subject has been unreasonably withheld.
| Name and contact details Date of birth
Gender
Health information
Social care information Race and / or primary language Family or next of kin details
|
|---|
To contact individuals and offer additional services and guidance to those affected by major incidents
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b) Medical purposes: Schedule 2, Part 2, Paragraph (15) of the Law, which permits the processing of special category data for medical purposes.
| Name and contact details Family and next of kin details Professional or employment related information Public services information Race and / or primary language Religion Financial and / or insurance information
|
|---|
To notify and update next of kin
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
Legal obligations: Schedule 2, Part 2, Paragraph (7) of the Law, which permits processing of special category data to comply with a legal obligation, other than one imposed by contract, to which the controller is subject. | Name and contact details Date of birth
Race and / or primary language Health information Family and next of kin details
|
|---|
To identify dependents and provide support as required
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
| Name and contact details
Date of birth
Health information Social care information Race and / or primary language Family and household data
|
|---|
To notify and update employers where appropriate
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
| Name and contact details
Professional or employment / business related information
|
|---|
Answer queries, investigate complaints or manage our relationship with you
| Public functions: The processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
| Name and contact details Race and / or primary language Any information provided as part of a query or complaint
|
|---|
Who we share your personal information with
Other data controllers
Category 1 and 2 responders have a duty to share appropriate information during an incident and throughout the longer-term recovery period.
GoJ departments may need to pass your personal data to other departments or the following organisations for the purposes stated above:
- The Government’s Data Protection Officer
- The Jersey Office of the Information Commissioner
- The third parties listed in this privacy notice
- Other organisations for the purpose of supporting you. For example; to provide you with temporary accommodation, replacement eye glasses / false teeth, pet sitting services, etc.
We may also disclose information to other public authorities where it is necessary, either to comply with a legal obligation, or where required under other legislation. Examples of this include, but are not limited to:
- Where the disclosure is necessary for the purposes of the prevention or detection of crime
- For national security purposes
- For the purposes of meeting statutory obligations
- To prevent risk of harm to an individual
During some incidents, organisations may request information held by other data controllers so they can share it with a third party to fulfil their own functions.
Your data may also be used in an anonymised form for reasons of public interest, for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Service providers
Your personal data may be processed on our behalf by certain third parties who provide services to us. We have strict contracts in place with these service providers to ensure they process your data only on our instructions and with appropriate security in place. The categories of third parties who may receive your personal data in order to provide us with a service are:
- Motorola: emergency services control centre radio system
- Jersey Telecom: initial emergency call handling
- MIS Emergency Systems Limited: emergency service control centre triage system
- Priority Dispatch Corporation: emergency service control centre dispatch
- Reveal: Body Worn Cameras
- Psychology providers; providing mental health support after an incident
- IT support or security service providers: Prosperity 24/7
- Smart Survey; a digital survey solution that helps anyone create surveys, build questionnaires, and analyse the results
At no time will your information be passed to organisations for marketing or sales purposes or for any commercial use without your prior express consent.
Individual GoJ department privacy notices are available to view at States of Jersey privacy policies.
Publication of your information
We may need to publish your anonymised information on our website for the following reasons:
- where we are required by law to publicise certain information
- in the interests of demonstrating a fair and transparent decision-making process
- where we are required to provide statistical information about a group of people, although your data will be anonymised to protect your identity
- where you have responded to a public consultation or survey, although your comments will be anonymised to protect your identity
We will not publish any of your sensitive personal information unless there is a requirement for us to do so in order to carry out our statutory functions.
How long we store your information
We will keep your personal data accurate and up to date and not keep it for longer than is necessary.
In some cases we are required to send your data to the Government of Jersey Archive for long term preservation and historical interest. All personal data sent to the Government Archive is closed to access by the public for 100 years to protect your identity.
These arrangements are regularly reviewed as part of our Information Governance responsibilities. Ask to see our retention schedules for more detail about how long we retain your information.
Where we store your information
GoJ systems store data in Jersey, the UK and the European Union. The UK has been granted adequacy status by the European Commission and personal data stored there will be protected to the same standards as personal data held in Jersey and the EU.
In some instances, we may be required to transfer your personal data outside Jersey and the EEA, if the recipient is located outside these jurisdictions. However, we shall only do this with the necessary safeguards in place and where it complies with the Data Protection Law. For details of the safeguards we rely on if we do this, contact the Department using the contact details below.
Cookies and the gov.je website
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Find details of the cookies used on gov.je website in the gov.je privacy policy.
Statutory or contractual obligations to provide personal data
To provide you with our services, we rely on different legal bases as explained above. If you choose not to provide certain information when requested, we may not be able to perform the required service, or we may be prevented from complying with our legal obligations.
Your rights
You can find information on the details of your rights under the Data Protection Law and how to exercise them on the Your personal data rights webpage.
Complaints
If you have an enquiry or concern regarding processing your personal data you can contact the Central Data Protection Unit.
If you want to make a complaint about how your personal data is processed, you can email the Government’s Data Protection Officer (DPO) at DPO@gov.je
If you believe that the GoJ has contravened the Data Protection Law and the contravention affects your data protection rights, you have the right to make a complaint at any time to the Jersey Office of the Information Commissioner (JOIC).
We would, however, appreciate the chance to deal with your concerns before you approach the JOIC, so contact the DPO in the first instance.
Changes to this notice
We may, from time to time, revise this privacy notice to ensure it remains up to date. It is advisable to check it regularly to keep aware of any changes.
gov.je