This privacy notice covers the States of Jersey Ambulance Service (SoJAS) a Division of Justice and Home Affairs (JHA).
The SoJAS is registered as a 'Controller' under the
Data Protection (Jersey) Law 2018 (Data Protection Law) (registration number 101353), as we determine the purpose and means of the processing of the personal information collected about you for this service.
As a Government Department, we generally process and hold your information in order to provide public services and meet our statutory obligations. This notice explains in more detail how we use and share information relating to you (your Personal Data) in order to provide the service described above.
Find more information on how the Department uses your personal data for other services in our States of Jersey privacy policies.
We will continually review and update this privacy notice to reflect changes in our services and feedback from service users, as well as to comply with changes in the law.
How we collect information about you
Your Personal Data will, in most cases, be collected directly from you. This may be done in any of the following ways:
- when in contact with you as a patient
- by attending incidents:
- when you contact 999 in an emergency situation
- by you telephoning, mailing or emailing us directly
- through information you provide through the Customer Feedback Management System
- through the use of Body Worn Cameras (BWCs), station CCTV, and CCTV on vehicles
In some cases, we may collect information about you from another Government of Jersey department or from the following third parties with which we interact in order to deliver our duties:
- Jersey Fire and Rescue Service
- States of Jersey Police
- The Honorary Police
- Coastguard
- Health and Community Services
Your data may also be shared with us from other members of the public to help treat you in an emergency.
Types of information we collect
The types of personal data collected will vary depending on what information you volunteer and the information we need in each circumstance.
However, we have listed below the most common categories of information we may collect about you:
- contact details, such as name, address, phone number, mobile phone number, email address
- location details of incidents, which could be your address, or the address of someone else’s property
- health data, such as details of any injuries, symptoms, treatment given, disabilities or allergies
- date of birth
- gender
- age
- other special category data, such as race, ethnic origin, sex life or sexual orientation
- voluntary information that you may provide to us when you engage with us
How we will use the information about you
We need to collect and hold personal data about you, in order to carry out the public functions of the SoJAS. Our legal basis for processing personal data in most cases is that it is necessary for the exercise of SoJAS’ function of the States or any public authority (Schedule 2 para 4(c) of the Data Protection Law). Other legal obligations include:
- Health and Safety At Work (Jersey) Law 1989
- Human Rights (Jersey) Law 2000
- States of Jersey Law 2005
We have set out in further detail below why we use your personal data in each instance.
To provide clinical emergency care
| Public functions: the processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b) Vital Interests: the processing is necessary to protect the vital interests of the data subject or any other natural person (Date Protection (Jersey) Law 2018, Schedule 2, paragraph 3)
| Contact details
Voluntary information Age Gender Date of Birth Health Data Other special category data
|
Investigate an incident, complaint or query
| Public functions: the processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
| Contact details
Voluntary information
|
| To help us train our staff, monitor and improve performance
Complete clinical audits
| Public functions: the processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
| Contact details
Voluntary information
Age
Gender
Date of Birth
Health Data
|
Non-emergency transport service (PTS)
| Public functions: the processing is necessary for the exercise of any function of Crown, the States or any public authority (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b)
| Contact details
Age Gender Date of Birth Health Data
|
Who we may share your personal information with
Other Data Controllers
We may need to pass your Personal Data to other Government of Jersey Departments or the following organisations for the purposes stated above:
- States of Jersey Police
- States of Jersey Fire and Rescue Service
- Coastguard
- Health and Community Services
- the Government’s Data Protection Officer
- The Jersey Office of the Information Commissioner
- Jersey Hospice Care
We may also disclose information to other public authorities where it is necessary, either to comply with a legal obligation, or where required under other legislation. Examples of this include, but are not limited to:
- where the disclosure is necessary for the purposes of the prevention and detection of crime
- for national security purposes
- for the purposes of meeting statutory obligations
- prevent risk of harm to an individual
The Emergency Services Control Centre (ESCC) as part of JHA as Data Controller, process calls on behalf of the States of Jersey Fire and Rescue Service (SJFRS) and SoJAS. They are co-located in the Control Centre with States of Jersey Police (SoJP) call handlers. SoJP staff members have the ability to activate body-worn cameras within the Control Centre. A Data Sharing Agreement is in place between the services which identifies what data can be shared, the processes that must be followed and cases where data should not be further processed.
Service Providers
Your Personal Data may be processed on our behalf by certain third parties who provide service to us, so that they can provide those services. We have strict contracts in place with these service providers to ensure they process your data only on our instructions and with appropriate security in place. The categories of third parties who may receive your personal data in order to provide us with a service are:
- Motorola: emergency services control centre radio system
- Jersey Telecom: initial emergency call handling
- MIS Emergency Systems Limited: emergency services control centre triage system and sequence of events recording
- Priority Dispatch Corporation: emergency services control centre dispatch
- Multitone Electronics: paging system
- Ortivus and Hytech: storing Electronic Patient Records
- Reveal: Body Worn Cameras
- IT support or security service providers: Prosperity 24/7
At no time will your information be passed to organisations for marketing or sales purposes or for any commercial use without your prior express consent.
How long do we store the information about you
We will keep your personal data accurate and up to date and not keep it for longer than is necessary in order to carry out the public functions of SoJAS. Ask for our retention schedule for more detail about how long we retain your information.
Where do we store the information about you
Government of Jersey systems and their suppliers store data in Jersey, the UK and the EU. The UK has been granted adequacy status by the European Commission and personal data stored there will be protected to the same standards as personal data held in Jersey and the EU.
Cookies and the gov.je website
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Statutory or contractual obligations to provide Personal Data
To provide you with our services, we rely on different legal bases as explained above. If you choose not to provide certain information when requested, we may not be able to perform the required service, or we may be prevented from complying with our legal obligations.
Your rights
Under the Data Protection Law you have certain rights relating to the information we process about you. These rights are to:
- be told and understand what your information is being used for
- access your record and receive it in an easy to use format
- ask us to make amendments to information we hold about you which is incorrect.
- withdraw any consent you may have previously given us
- object to us processing your information. If you do object, then we can only stop processing your information if the Law allows us to
Find more details on how to exercise your rights on your
personal data rights.
Contact details
If you wish to contact the Department in relation to this Privacy Notice,email the Data Governance Officer at
JHAGovernance@gov.je.
Complaints
If you have an enquiry or concern regarding SoJAS processing your personal data you can contact us on:
If you wish to make a complaint about how your personal data is processed, email the Government’s Data Protection Officer at
DPO@gov.je.
If you believe that SOJAS has contravened the Data Protection Law and the contravention affects your data protection rights, you have the right to make a complaint at any time to the
Jersey Office of the Information Commissioner (JOIC):
- calling +44 (0) 1534 716530
- email the
enquiries@oicjersey.org
- writing to Office of the Information Commissioner, Second floor, 5 Castle Street, St Helier, Jersey, JE2 3BT
We would, however, appreciate the chance to deal with your concerns before you approach the JOIC, so contact the DPO in the first instance.
Changes to this notice
We may, from time to time, revise this privacy to ensure it remains up to date. It is advisable to check it regularly to keep aware of any changes.
gov.je