JT Group Limited - Data Protection Notice
This is the data protection notice referred to in the various JT Terms and Conditions applicable to our products and services (the "Conditions"). Terms defined in the relevant Conditions shall have the same meaning in this notice unless otherwise defined in this notice.
This notice applies to any natural person (a "data subject" or "you") entering into a Contract with JT ("we" or "us") or in relation to whom JT receives personal information in relation to a Contract. We may update this notice at any time.
JT is a 'data controller'. This means that we are responsible for deciding how we hold and use personal information about you. We are required under the Data Protection (Jersey) Law 2018 and the Data Protection (Bailiwick of Guernsey) Law 2017 (as applicable, the "Data Protection Laws") to notify you of the information contained in this notice.
It is important that you read this notice, together with any other data protection notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
JT will process your personal information on the following legal bases:
1. it is necessary for the performance of a contract to which you are a party (the "contractual necessity" basis);
2. it is necessary for compliance with a legal obligation (other than a contract) to which JT is subject (the "legal obligation" basis);
3. it is necessary for the purpose of legitimate interests (the "legitimate interests" basis) pursued by JT or a third party provided your interests and fundamental rights do not override those interests;
4. if it is necessary to protect vital interests (life and limb) of the data subject or another person (the "vital interests" basis); or
5. if it is necessary for any legal proceedings, obtaining legal advice or establishing, exercising or defending legal rights (the "legal proceedings" basis).
The purposes for which (and, in parentheses, the relevant legal bases on which) JT shall process your personal information in relation to the Contract are as follows:
1. performing the Contract and providing the Service (legitimate interests and, where the data subject is a party to the Contract, contractual necessity);
2. dealing with complaints or enquiries in relation to the use of the Service (legitimate interests);
3. assisting the emergency services in an emergency (legitimate interests and, in some circumstances, vital interests);
4. debt collection, credit referencing and preventing fraud, theft and other unlawful activity (legitimate interests); and
5. compliance with applicable law or orders of a court or other body of competent jurisdiction (legal obligation).
Some of the above bases for processing will overlap and there may be several bases which justify the use of your personal information. We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
If you fail to provide certain information when requested, we may not be able to perform our obligations under the Contract and we may be prevented from complying with our legal obligations. In such circumstances, JT may suspend the Service and/or terminate the Contract.
JT may disclose your personal information to members of the JT Group and to third party sub-contractors or agents engaged by JT for the purpose of performing the Contract and providing the Service. JT may also disclose your personal information to persons making a complaint or an enquiry in relation to the use of the Service and, in an emergency, to the emergency services. Your personal information may be shared with other communications service providers and network operators, credit reference and debt collection agencies and the appropriate authorities for the purpose of preventing fraud, theft and other unlawful activity. JT may also be legally required to share your personal information with judicial, law enforcement, regulatory and governmental bodies or agencies.
JT will not transfer your personal information outside of Jersey or the European Economic Area or to an international organisation.
JT will store your personal information for no more than 6 years after your Contract has ended.
Under the Data Protection Laws, you will have the right in certain circumstances to:
1. request access to your personal information (commonly known as a 'data subject access request'). This enables you to receive a copy of the personal information held about you and to check that it is being lawfully processed;
2. request correction of your personal information. This enables you to have any incomplete or inaccurate information held about you corrected;
3. request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You will also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);
4. object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes;
5. request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it; and
6. request the transfer of your personal information to another party.
If you wish to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, or request the transfer of your personal information to another party, you should contact JT in writing. JT has appointed a data protection officer who may be contacted at firstname.lastname@example.org. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if the request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We do not envisage that any decisions will be taken about you using automated means, however we will notify you in writing if this position changes.
Under the Data Protection Laws, you will have the right to make a complaint at any time to either the Jersey or Guernsey Data Protection Authority, the Island's respective supervisory authorities for data protection issues.
Your Right to Object
It is important that you understand that you have a right to object to us processing your personal information where we do so exclusively on the basis of legitimate interests. As set out above, this applies to where we are processing your data for the purposes of:
· - performing a Contract to which you are not a party
· - dealing with complaints or enquiries in relation to the use of the Service
· - assisting the emergency services where there is no risk to life or limb
· - debt collection, credit referencing and preventing fraud, theft and other unlawful activity
As of 25th May 2018, the EU General Data Protection Regulation (“GDPR”) shall replace the Data Protection Directive 95/46/EC. The GDPR is designed to harmonise data privacy laws across Europe, to give EU citizens greater protection and control of their personal data and to better protect data subjects against data privacy breaches. Although the key principles of data privacy were contained in the previous directive, the GDPR introduces a number of new requirements which extends to all companies that process personal and sensitive data of data subjects residing in the EU, irrespective of where the companies processing that personal or sensitive data are located.
JT Group has always understood how important personal data is to its customers and is fully compliant with all applicable regulations in this area. Furthermore, since the new principles and regulations set out in the GDPR were tabled in the first half of 2016, JT has been fully engaged in work to ensure this remains the case when the updated regulations come into force on 25th May 2018.
Please do not hesitate to contact us should you have any questions regarding this programme of work that JT Group is undertaking in relation to maintain our excellent record of full compliance in this area.