States Greffe Department Privacy Notice (Fair Processing Notice)
Last update: November 30 2018
The Department is registered as a ‘Controller’ under the Data Protection (Jersey) Law 2018 as we collect and process personal information about you. We process and hold your information as a public function in order for you to participate in the petitions service to either start or sign online petitions to raise issues with Jersey ministers or the States Assembly. This notice explains how we use and share your information.
We will continually review and update this privacy notice to reflect changes in our services and feedback from service users, as well as to comply with changes in the law.
What information do we collect about you?
We collect the following types of information about you:
- Your name
- Your email address
- Your postcode
- Whether you are a Jersey citizen
- Whether you are over 16 years old
- The IP address you use when starting or signing a petition
Why do we collect information about you?
We need to collect and hold information about you, in order to:
- Make sure that people only sign a petition once
- Check that you’re eligible to sign a petition
- Contact you about petitions you start
- If you consent, email you updates about what happens in the States Assembly in relation to petitions you’ve signed
How will we use the information about you?
We will use the information you provide in a manner that conforms to the Data Protection (Jersey) Law 2018.
We will use your postcode to work out how many people in each parish have signed a petition.
We may not be able to provide you with a service unless we have enough information or your permission to use that information.
We will not pass any personal data on to anyone outside of the States of Jersey, other than those who either process information on our behalf, or because of a legal requirement, and we will only do so, where possible, after we have ensured that sufficient steps have been taken by the recipient to protect your personal data.
We will not disclose any information that you provide ‘in confidence’, to anyone else without your permission, except in the few situations where disclosure is required by law, or where we have good reason to believe that failing to share the information would put someone else at risk. You will be told about this unless there are exceptional reasons not to do so.
We will retain your personal data from the date you start or sign a petition, until 6 months after that petition closes – a maximum of 12 months in total.
We do not process your information overseas using web services that are hosted outside the European Economic Area.
We may pass your information to States of Jersey (SOJ) departments or States members that have a responsibility for the issues detailed in the petition. These individuals and departments are obliged to keep your details securely, and only use your information for the purposes of addressing the petition.
We may disclose information to other departments where it is necessary, either to comply with a legal obligation, or where permitted under other legislation. Examples of this include, but are not limited to: where the disclosure is necessary for the purposes of the prevention and/or detection of crime; for the purposes of meeting statutory obligations; or to prevent risk of harm to an individual, etc.
At no time will your information be passed to organisations for marketing or sales purposes or for any commercial use without your prior express consent.
Publication of your information
We may publish your information on our website for the following reasons:
- If you start a petition and we accept it, your name will be published with the petition. We will not publish any other personal information about you.
- If you have signed a petition we will not publish any personal information about you.
If you email us we may keep a record of your email address and a copy of the email for record keeping purposes.
For security reasons we will not include any confidential information about you in any email we send to you. We would also suggest that you keep the amount of confidential information you send to us via email to a minimum or use our secure online services where possible or correspond with us by post.
We will not share your email address or your email contents unless is it necessary for us to do so; either to fulfil your request for a service; to comply with a legal obligation, or where permitted under other legislation.
We do not record or monitor any telephone calls you make to us using recording equipment, although if you leave a message on our voicemail systems your message will be kept until we are able to return your call or make a note of your message. File notes of when and why you called may be taken for record keeping purposes. We will not pass on the content of your telephone calls, unless is it necessary for us to do so; either to fulfil your request for a service; to comply with a legal obligation, or where permitted under other legislation.
You can ask us to stop processing your information
You have the right to request that we stop processing your personal data in relation to any of our services. However, this may cause delays or prevent us delivering a service to you. Where possible we will seek to comply with your request but we may be required to hold or process information to comply with a legal requirement.
You can withdraw your consent to the processing of your information
In the few instances when you have given your consent to process your information, you have the right to withdraw your consent to the further processing of your personal data. However, this may cause delays or prevent us delivering a service to you. We will always seek to comply with your request but we may be required to hold or process your information in order to comply with a legal requirement.
You request that the processing of your personal data is restricted
You have the right to request that we restrict the processing of your personal information. You can exercise this right in instances where you believe the information being processed in inaccurate, out of date, or there are no legitimate grounds for the processing. We will always seek to comply with your request but we may be required to continue to process your information in order to comply with a legal requirement.
You can ask us for a copy of the information we hold about you
You are legally entitled to request a list of, or a copy of any information that we hold about you. However where our records are not held in a way that easily identifies you, for example a land registry, we may not be able to provide you with a copy of your information, although we will do everything we can to comply with your request.
In some circumstances we may not be able to comply fully with your subject rights provisions to the extent required to avoid an infringement of the privileges of the States Assembly.
You can ask us to correct or amend your information
You have the right to challenge the accuracy of the information we hold about you and request that it is corrected where necessary. We will seek to ensure that corrections are made not only to the data that we hold but also any data held by other organisations/parties that process data on our behalf.
Changes to this notice
We may change this privacy notice. In that case the ‘last updated’ date at the top of this page will also change. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, we will take reasonable steps to make sure you know.
You can complain to us about the way your information is being used
If you have an enquiry or concern regarding the processing of your personal data please contact:States Greffe
Jersey JE1 1DD
Or alternatively:Central Data Protection Unit
28-30 The Parade
Jersey JE2 3QQ
You can also complain to the Information Commissioner about the way your information is being used
The Office of the Information Commissioner can be contacted in the following ways:
Telephone: +44 (0)1534 716530
Email: email@example.comOffice of the Information Commissioner
5 Castle Street
Jersey JE2 3BT