The Jamaica Civil Aviation Authority (“JCAA”, “we”, “our”, “us”) respects your right to privacy and will protect it when you visit our websites. In order to understand how people use our sites generally, and to create more valuable experiences for you, we may collect data about your use of our sites. In this Notice, the JCAA explains how it collects, uses and protects your personal data and your rights regarding personal information.
This Privacy Notice applies to all individuals who interact with the JCAA as consumers or otherwise and explains the JCAA’S information processing practices. It applies to any personal information from or about you provided to the JCAA directly or through our websites and to any personal information we collect from other sources. The JCAA might aggregate personal data from different sources (websites, offline event) and across different devices. This Notice does not apply to your use of a third-party website which may be linked to the JCAA’s websites. We encourage you to read those privacy policies to learn how they collect and use your information.
If you do not provide the necessary personal data to us, we may not be able to provide you with our services.
This Privacy Notice provides important information on the following:
As business and technology evolve, the JCAA may need to change this Notice and we encourage you to regularly review same to ensure that you are up to date with how the JCAA uses your Personal Data.
Throughout this Notice, you will see certain terms which are defined and have specific meanings in the context of this Notice. These definitions are set out below:-
1. ‘Personal Data/Personal Information’ means any information relating to a living individual or an individual who has been deceased for less than thirty years who can be identified from that information alone or from that information and other information in the possession of, or likely to come into the possession of the data controller and includes any expression of opinion about that individual and any indication of the intentions of the data controller or any other person in respect of that individual.
2. ‘Data processing’ means obtaining, recording or storing the information of personal data, carrying out any operation or sets of operations (whether or not by automated means) on the information or data including (a) organizing, adaptation or alteration of the information or data; (b) retrieving, consulting or using the information or data; (c) disclosing the information or data by transmitting, disseminating or otherwise making it available; or (d) aligning, combining, blocking, erasing or destroying the information or data, or rendering the data anonymous.
3. ‘Data processor’ means any person, other than an employee of the data controller, who processes the data on behalf of the data controller.
Depending on how you interact with the JCAA (online, offline, over the phone etc) the JCAA collects various types of information about you in order to best serve your needs. We collect information when you create an account, request a service from us, register with or use our websites or applications, pay fees, contact us with a complaint or query, provide feedback, fill in a form, send us an email, call us, share content on our websites or publicly share information about the JCAA, or contact us on social media.
We also collect data that we create, such as when you apply for licences and permits and data that is automatically collected when you access our websites or applications including IP address, device ID, browser used or how you interact with our websites prior to or after having a JCAA account.
Information collected includes:
We process personal information about the following non-exhaustive list of persons:
The JCAA uses personal information including any sensitive personal data that you have provided to us with your consent, to deliver services, communicate with you, answer your queries, respond to your complaints, reply to your feedback comments, manage your access to restricted areas of the website, fulfil requests for reports and other similar information, register you for a member/online account, issue certificates (licences), fulfil contractual and legal obligations, and for our legitimate interests.
The gathering of personal data also allows the JCAA to inter alia comply with applicable laws and regulatory duties which may include:
The JCAA also uses personal data for its own purposes. When the JCAA uses personal data for its own purposes, it uses it to analyse and improve how it delivers and markets its services. For this purpose, the JCAA may use your e-mail address or mailing address in order to conduct a survey, to add you to our mailing list, or by your request, to have someone contact you for additional information. Whenever we request your identity, the JCAA will clearly indicate the purpose of the inquiry before the information is requested. The JCAA maintains a strict “No Spam” policy which means that the JCAA does not intend to sell, rent, or otherwise give your e-mail address to a third-party, without your consent.
In addition, our websites will not send you e-mails that you have not agreed to receive. If you are a member of our Mailing List, you will be contacted with announcements and news. You have the option of “Unsubscribing” from our Mailing List at any time, thereby disabling any further such e-mail communication from being sent to you. If you wish to have specific communications with a member of the JCAA staff, you will be required to provide specific information that will be routed to the appropriate contact within JCAA.
The JCAA limits the disclosure of your personal data to others. However, the JCAA may need to share your personal data in certain instances and where this is necessary, the JCAA will comply with the applicable privacy laws. The JCAA may need to share information mainly in the following circumstances:-
Where necessary or required, we share information with:
The JCAA does not rent, sell or otherwise disclose personal data to unaffiliated third parties for their own marketing use.
The security of your personal information is important to the JCAA and as such, the JCAA uses a variety of measures to keep your personal data confidential and secure, including restricting access to your personal data on a need-to-know basis and following appropriate security standards to protect your data. The JCAA has put in place reasonable physical, technical and administrative security standards to protect your information from loss, misuse, unauthorised alteration and destruction.
The JCAA will use technical and organisational measures to safeguard your personal data. For example:
The JCAA will take every reasonable step to ensure that your personal data is only processed for the minimum period necessary in connection with: (i) the purposes set out in this Privacy Notice; (ii) any additional purposes notified to you at or before the time of collection of the relevant personal data or commencement of the relevant processing; or (iii) as required or permitted by applicable law; and thereafter, for the duration of any applicable limitation period.
Whilst the JCAA will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and that for this reason, the JCAA cannot guarantee the security or integrity of any personal data which is transferred from or to you via the internet. If at any time there has been a breach to our systems which compromises your personal data, the JCAA aims to notify you within 72 hours of first becoming aware of the breach.
It is also important that you play a role in keeping your personal data safe and secure. When signing up for an online account, please be sure to choose an account password that would be difficult for others to guess and never reveal your password to anyone else. You are responsible for keeping this password confidential and for any use of your account. If you use a shared or public computer, never choose to have your login ID/email address or password remembered and make sure to log out of your account every time you leave the computer. You should also make use of any privacy settings or controls we provide you on our websites/applications.
Whenever the JCAA asks you to provide any personal data, you will be told why we need it and how it will be used. Your personal data will only be processed for the purposes set out in this Notice, or any other further purpose notified to you before the processing begins. If you choose not to provide personal data when we ask you, this may limit the services we can offer you. If you share personal data with us, you have the right to do any of the following by logging into your account or contacting us as provided herein:-
Please be aware that in certain circumstances, the JCAA will not be able to delete your personal data without also deleting your online account. We may be required to retain some of your personal data after you have requested deletion, to satisfy our legal or contractual obligations. We may also be permitted by applicable laws to retain some of your personal data to satisfy our business needs.
Where available, our websites/applications have a dedicated feature through which you can review and edit the personal data that you have provided. Please note that we require our registered consumers to verify their identity (eg login ID/email address, password) before they can access or make changes to their account information. This helps prevent unauthorised access to your account.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit the JCAA’s website, the JCAA may collect information from you automatically through cookies or similar technology. For example, we may monitor how many times you visit, which pages you go to, traffic data, location data and the originating domain name of a user’s internet service provider.
From time to time, we may provide your information to our customer service/regulatory agencies for research and analysis purposes so that we can monitor and improve the services we offer.
This Notice was last updated December 2020.
If you wish to review further and more detailed information on data rights you may review the Data Protection Act, 2020, which is set to be gazetted.
If you have any questions about this Notice, the data we hold on you or if you would like to exercise any of your data protection rights as outlined in this Notice, please do not hesitate to contact us at:
Email to: firstname.lastname@example.org
Call us on: 876-960-3948
Address: 4 Winchester Road, Kingston 10, Jamaica, W.I.
To provide you with the services you require, the JCAA may collect, use, store and share your personal data in keeping with the terms of this Notice. Before doing so we will request your consent where required. If you give your consent and wish to withdraw it at any time and or wish to exercise any of your data protection rights, then you may contact us as provided above.