This repository has been archived by the owner on May 17, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
/
privacy_policy.html
246 lines (180 loc) · 13.5 KB
/
privacy_policy.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>CJSM- Privacy Policy</title>
<link rel="stylesheet" type="text/css" media="all" href="css/stopFOUC.css" />
<style type="text/css" media="all">@import "css/master.css";</style>
<link rel="stylesheet" type="text/css" media="all" href="css/custom.css" />
<script async src="js/gtag_cjsm.js"></script>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<meta http-equiv="Content-Language" content="en-us" />
<meta name="robots" content="all" />
<meta name="description" content="CJSM is a safe, efficient alternative to regular email, fax and post. It is free of charge to users who work within the Criminal Justice System." />
<meta name="keywords" content="Easy-to-use, encrypted, web mail, web-based, encrypted email, private email, e-mail, privacy, encryption, security, encrypt, privacy rights, email privacy, secure messaging, government connections, Secure Document Delivery, Email Security, Email Encryption,Part of the CJS IT Programme, Criminal Justice System Information Technology Programme, CJS Reform, Criminal Justice System Information Technology (CJIT), Criminal Justice System Information Technology Programme, CJS infrastructure, CJS Exchange, CJS Exchange portal framework, Criminal Justice Agencies (CJAs), CJS IT Programme, encryption, identity theft, spam avoidance, closed community, authentication, sensitive information, restricted, virus checking, Interactive training, shared folders, distribution lists, group mailbox, search features" />
<!--[if IE 6]>
<style type="text/css">
@import url(/css/ie6win.css);
</style>
<![endif]-->
</head>
<body id="privacy">
<div id="wrapper">
<div id="header">
<div class="innerwrap">
<a accesskey="1" href="index.html" title="CJSM"><img id="logo" src="images/cjsm-logo-white.png" alt="CJSM" /></a>
<div id="home-nav">
<div id="vertical-menu">
<ul>
<li><a href="https://www.cjsm.net/" target="_blank" title="Signing up">Sign in or Register ></a></li>
<!-- <li><a href="training/index.html" title="Training">Terms ></a></li> -->
</ul>
</div>
</div>
<a id="top" name="top"></a>
</div>
</div>
<div id="topnav">
<a class="skip-link" href="#content" accesskey="s">Skip navigation</a>
<div class="innerwrap bordertop">
<ul>
<li><a accesskey="a" id="topnav-why" href="./why/index.html" title="Why do I need CJSM?">About CJSM</a></li>
<li><a accesskey="t" id="topnav-what" href="./what/index.html" title="Server or webmail">Server or webmail</a></li>
<li><a accesskey="q" id="topnav-admin" href="./admin/index.html" title="Administrators">Administrators</a></li>
<li><a accesskey="q" id="topnav-admin" href="./signup/how_to_apply.html" title="How to Apply">How to apply</a></li>
<li><a accesskey="c" id="topnav-contact" href="contact/index.html" title="Support">Support</a></li>
</ul>
</div>
</div>
<div id="main">
<div class="innerwrap">
<div id="maincontent" class="full">
<a name="content" class="hidden"></a>
<div id="content" class="pushtop">
<h1>Privacy Policy</h1>
<div class="content-single-column-dotted noclear">
<h2 class="mb-0">Purpose</h2>
<p>This privacy notice sets out the standards that you can expect from the <strong>CJSM Service</strong> when we manage or hold personal information ('personal data') about you; how you can get access to a copy of your personal data; and what to do if you think the standards are not being met.</p>
<p>CJSM, hosted by MoJ, provides a secure email platform for the safe transfer of information, including personal data. The CJSM service processes personal data for this purpose and so MoJ will not always be the Controller of the data flowing through the service.</p>
<p>The Ministry of Justice is the data controller for the personal information we collect and store about CJSM users. The Service collects and processes personal data for purposes of the administration of the Criminal Justice Secure Mail Service in accordance with the relevant data protection legislation.</p>
<p>The CJSM Terms & Conditions (issued to all users) provide general instructions about the service itself, to which all users must adhere. Service users will often be Data Controllers in their own right, with their own lawful basis for transacting data and information across the CJSM service. As such, service users must also comply with the relevant data protection legislation. In particular, they must ensure personal data is processed lawfully when using the Service.</p>
<h2 class="mb-0">About personal information</h2>
<p>Personal data is information about an individual. It can be a name, address or telephone number. It can also include information about online identifiers, cookies and IP addresses.</p>
<p>We know how important it is to protect customers' privacy and to comply with data protection laws so data should only be disclosed where it is lawful to do so, or with the consent of the data subject.</p>
<h2 class="mb-0">Purpose of processing and the lawful basis</h2>
<p><strong>CJSM users must be able to justify and demonstrate that the case for lawful processing via the service has been made out if challenged. MoJ, as service hosts, provide the service on the understanding that users have the appropriate lawful basis for transacting emails / data.</strong></p>
<p>Personal data processed via the secure CJSM platform may be for criminal law enforcement purposes and/or for general data processing. For MoJ purposes, the most relevant lawful basis for processing will be:</p>
<p><strong>In the case of General Processing (non-criminal law enforcement)</strong></p>
<ul>
<li>GDPR Article 6(1)(c) necessary for compliance with a legal obligation to which the controller is subject;</li>
<li>GDPR Article 6(1)(e) necessary for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the controller;</li>
</ul>
<p><strong>And for Special Categories of Data:</strong></p>
<ul>
<li>GDPR Article 9(2)(c) vital interests, (f) the establishment, exercise or defence of legal claims, and (g) where processing is necessary for reasons of substantial public interest.</li>
</ul>
<p>Where CJSM users rely on these articles as the lawful basis for the processing via the service, they will have their own legal basis, set out in legislation, or by clear common law or prerogative power for transacting the data over CJSM. The legal basis must be clear, precise and foreseeable to the user, either for a specific purpose or in pursuit of an overall task.</p>
<h2 class="mb-0">In the case of Law-Enforcement (criminal) Processing</h2>
<ul>
<li>DPA 2018 (Part.3) Section.35(2) the processing of personal data is based on law, and either:<br />
(a) the data subject has given consent to the processing, or;<br />
(b) the processing is necessary for the performance of a task carried out for that purpose by a competent authority.</li>
</ul>
<p><strong>And for Special Categories of Data:</strong></p>
<ul>
<li>As required by DPA 2018 (Part.3) Section.35(3), CJSM users must further have a lawful basis under 35(4) requiring consent and an appropriate policy document, or; under 35(5) where the processing is strictly necessary for the law enforcement purpose, meets a Schedule 8 condition and an appropriate policy document is in place.</li>
</ul>
<p><strong>There may also be circumstances where an Appropriate Policy Document is not required which is for the CJSM user to justify if challenged.</strong></p>
<h2 class="mb-0">Who the information may be shared with</h2>
<p>We sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary we will comply with all aspects of the data laws. The organisations we share your personal information with are:</p>
<ul>
<li><strong>Egress (Supplier)</strong></li>
<li><strong>Bulletproof (in the form of protective monitoring logs)</strong></li>
<li><strong>Other CJSM users (CJSM user details will appear in the CJSM webmail portal directory)</strong></li>
</ul>
<h2 class="mb-0">Retention period for information collected</h2>
<p>The following data retention policies apply to the CJSM Service:</p>
<ul>
<li>Backups of mailboxes are retained for 36 hours</li>
<li>Directory and SQL data retained for 30 days</li>
<li>System logs are retained for 6 months</li>
<li>Message tracking logs for 1 year</li>
<li>Applications (Approvals or Rejections) are retained permanently</li>
<li>User and Organisation Data is retained while they are active, and then soft deleted.</li>
</ul>
<h2 class="mb-0">Access to personal information</h2>
<p>You can find out if we hold any personal data about you by making a 'subject access request'. If you wish to make a subject access request please contact:</p>
<p><strong>Offender and ex-offenders</strong><br />
Branston Registry,<br />
Building 16, S & T Store,<br />
Burton Road,<br />
Branston,<br />
Burton-on-Trent,<br />
Staffordshire,<br />
DE14 3EG</p>
<p><strong>All others</strong><br />
Disclosure Team,<br />
Post point 10.38,<br />
102 petty France,<br />
London,<br />
SW1H 9AJ</p>
<h2 class="mb-0">When we ask you for personal data</h2>
<p>We promise to inform you why we need your personal data and ask only for the personal data we need and not collect information that is irrelevant or excessive;</p>
<ul>
<li>You can withdraw consent at any time, where relevant;</li>
<li>You can lodge a complaint with the supervisory authority;</li>
<li>Protect it and make sure no unauthorised person has access to it;</li>
<li>Only where appropriate and necessary share it with other organisations for legitimate purposes;</li>
<li>Make sure we don't keep it longer than is necessary;</li>
<li>Not make your personal data available for commercial use without your consent; and</li>
<li>Consider your request to correct, stop processing or erase your personal data.</li>
</ul>
<h2 class="mb-0">You can get more details on</h2>
<ul>
<li>Agreements we have with other organisations for sharing information;</li>
<li>Circumstances where we can pass on personal information without telling you, for example, to help with the prevention or detection of crime or to produce anonymised statistics;</li>
<li>Our instructions to staff on how to collect, use or delete your personal information;</li>
<li>How we check that the information we hold is accurate and up-to-date;</li>
<li>How to make a complaint; and</li>
</ul>
<p>For more information about the above issues, please contact the MoJ Data Protection Officer;</p>
<p>102 petty France,<br />
London,<br />
SW1H 9AJ,<br />
<a href="mailto:data.compliance@justice.gov.uk" title="Contact the MoJ Data Protection Officer">data.compliance@justice.gov.uk</a></p>
<p>For more information on how and why your information is processed please see the information provided when you accessed our services or were contacted by us.</p>
<h2 class="mb-0">Complaints</h2>
<p>When we ask you for information, we will keep to the law. If you consider that your information has been handled incorrectly, you can contact the Information Commissioner for independent advice about data protection. You can contact the Information Commissioner at:</p>
<p><strong>Information Commissioner's Office</strong><br />
Wycliffe House,<br />
Water Lane,<br />
Wilmslow,<br />
Cheshire,<br />
SK9 5AF,</p>
<p>Tel: 0303 123 1113<br />
<a href="https://www.ico.org.uk">www.ico.org.uk</a></p>
<p><strong>CJSM organisations and users understand the conditions on which connection has been granted as set out in the CJSM Terms and Conditions and that the conditions are ongoing and cover any continuous use of the CJSM service. The consequences of failing to comply with the CJSM Terms and Conditions may result in access to the CJSM service being suspended or terminated.</strong></p>
</div>
</div>
</div>
</div>
<div id="footernav">
<ul>
<li><a accesskey="p" id="footernav-copyright" href="copyright.html" title="Copyright">Copyright</a> | </li>
<li><a accesskey="v" id="footernav-privacy" href="privacy_policy.html" title="Privacy policy">Privacy Policy</a> | </li>
<li><a accesskey="m" id="footernav-terms" href="terms.html" title="Terms & Conditions">Terms & Conditions</a> | </li>
<li><a accesskey="0" id="footernav-access-keys" href="access_keys.html" title="Access Keys">Access Keys</a> | </li>
<li><a accesskey="g" id="footernav-glossary" href="glossary.html" title="Glossary">Glossary</a> | </li>
<li><a accesskey="3" id="footernav-sitemap" href="sitemap.html" title="Sitemap">Sitemap</a></li>
</ul>
</div>
</div>
<!-- <script>
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','https://www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-7607492-12', 'auto');
ga('send', 'pageview');
</script> -->
</body>
</html>