Website Privacy Policy
Policy Statement
The PVSC is committed to ensuring that it adheres to the privacy protection provisions of the Freedom of Information and Protection of Privacy Act, with respect to all information gathered in the course of its business, or employment.
Definition
Data Subject
The individual about whom information is collected.
Personal Information
Personal information is defined in the Freedom of Information and Protection of Privacy Act.
- 3 (L) (i) “Personal information” means recorded information about an identifiable individual including the following:
- The individual’s name, address or telephone number.
- The individual’s race, national or ethnic origin, color, or religious or political beliefs or association.
- The individual’s age, sex, sexual orientation, marital status or family status.
- An identifying number, symbol or other particular assigned to the individual.
- The individual’s fingerprints, blood type or inheritable characteristics.
- Information about the individual’s health-care history, including a physical or mental disability.
- Information about the individual’s educational, financial, criminal or employment history.
- Anyone else’s opinions about the individual.
- The individual’s personal views or opinions, except if they are about someone else.
Server Logs
Web server logs are lists of all requests made to the server, including some identifying information about the requestor such as internet protocol address, or PID numbers.
Web Server
A computer that provides Word Wide Web services on the internet or on an intranet. It will have an internet protocol address (e.g. 198.34.21.65) and usually a domain name (e.g. www.pvsc.ca). It includes the hardware, operating system, web server software, communications protocol and the website content (web pages). It will have software that can manage and deliver documents and it may be able to operate additional software that can provide such functions as database searches or commercial transactions.
Website
A site (location) on the World Wide Web is usually operated 24 hours a day 7 days a week.
Policy Objectives
The policy is designed to do the following:
- Ensure that PVSC meets its legislated obligations in the collection, use and disclosure of personal information obtained through secure websites only as authorized by law.
- Assure the public that PVSC protects personal information collected through its websites, including having adequate security in place.
Policy Directives
- Websites will only collect personal information where authorized by law and where notification of such collection and the intended use and disclosure of the information is prominently displayed at the initial point of collection.
- Personal information obtained through PVSC websites or other means, including server log information, will only be made publicly or commercially available directly or through service providers with the explicit consent of the data subject or as permitted by law.
- Other use and disclosure or personal information collected is prohibited without the explicit consent of the data subject or as permitted by law.
- Unsolicited personal information sent to the PVSC through its website, or other means, will be governed by the provisions of the Freedom of Information and Protection of Privacy Act, 1993, c. 5, s. 1, of Nova Scotia.
- PVSC websites will use a secure connection or other protective measures, where possible, during transmission of personal information to or from the website unless such information is authorized to be publicly available.
- In the event of identified unauthorized access to personal information by a member of the public or inappropriate release of personal information into the public domain involving PVSC websites, PVSC will follow guidelines designed to deal with these situations.
- PVSC websites may require contact information when collecting personal information, incase PVSC needs to communicate with the individual.
- All PVSC websites will provide information on how visitors can obtain access to their personal information collected, at that site.
- Individuals who have submitted personal information to the PVSC website are entitled to access that information and request corrections or amendments. The request itself will be recorded even if the changes requested are not accepted.
- Personal information will not knowingly be collected from children without the consent of a parent or guardian except where authorized by law.
- PVSC web servers will not be used to store unsecured personal information.
- PVSC website may collect and use information about website visits, including web server log information, for statistical purposes. This information will be compiled and used in a way such that individuals cannot be identified.
Policy Guidelines
- When personal information is collected through the PVSC website, consent for further used or disclosure of that information beyond the use for which it is collected must be expressly given.
- It is strongly recommended that when personal information is collected through the PVSC website, except what is contained in server log information, that personal information should be immediately transferred to a computer that is within the PVSC secure periphery (i.e. , inside the firewall or a similar secure location).
- PVSC has an obligation to protect against inappropriate access to and use of the personal information it collects. Therefore, unrestricted anonymous access to databases of publicly available personal information is not recommended. Before undertaking any initiative that will involve anonymous access to such databases the proposal should be discussed fully with Freedom of Information and Protection of Privacy administrators within the PVSC.
- PVSC website developers should consult with their departmental records designate and Freedom and Information and Protection of Privacy administrator for direction and advise on the appropriate treatment of PVSC records that may be created or accessed through PVSC websites.
Accountability
- The Director of Client Services of the PVSC is responsible for administering the policy, and for issuing instructions to ensure implementation of the policy including, but not limited to, the following:
- Informing employees of the requirements of the policy and ensuring compliance.
- Providing avenues for individuals to communicate concerns about personal privacy related to government websites.
- The CEO may augment the policy with supplementary procedures and guidance regarding the protection of personal information particular to the unique and special responsibilities of the PVSC and reflecting any special requirements contained in statutes governing the operations of the PVSC.
Monitoring
The Director of Client Services is responsible for monitoring the policy.
References
- Freedom of Information and Protection of Privacy Act
- Business Electronic Filing Act
- Electronic Commerce Act
Website Privacy Policy Statement
Basic Statement
PVSC websites are covered by the Freedom of Information and Protection of Privacy Act. Our privacy policy arises from that Act, other legislation, and fair information practices.
What it means
On our websites, we collect personal information about you and protect the personal information given to use when you fill out a form. We have implemented a variety of security measures to ensure that your personal information is not lost, misused, altered, or unintentionally destroyed.
What do we mean by personal information?
By “personal information” we mean any information about you as an identifiable individual including your name, an identifying number such as your driver’s license number, your birth date, your email address, or your credit card information. (For other examples, see: Freedom of Information and Protection of Privacy Act, Section 3 (L)(i)).
What we don’t do
We do not provide personal information gathered on the websites to third parties except with your express permission or as permitted by law. (For example, see: Freedom of Information and Protection of Privacy Act, Section 27)
What we might do
We may release or use your personal information provided on the websites for the purpose for which it was provided or for a compatible purpose. We may also do so if we are permitted under law, such as under a subpoena, or to collect a debt owing to government. This may include sharing information with the PVSC when it is necessary. (For example, see: Freedom of Information and Protection of Privacy Act, Sections 26 and 27)
Access to your information
You are entitled to correct any personal information gathered through the websites that we hold about you. If you want to correct your personal information, there will be an appropriate contact listed for you to direct enquiries. If not contact is identified, then you should contact the webmaster of the relevant site. (For example, see: Freedom of Information and Protection of Privacy Act, Section 25)
Do we use cookies or tracking devices?
PVSC websites may use cookies or tracking devices during your visit to our website. Information gathered by these technologies will disappear once you leave the website unless there is notice to the contrary on the website.
Server Logs
PVSC web servers automatically collect some information about a visitor’s computer or other access device, such as its Internet protocol address or browser version, in their logs. This information is used in aggregate form for statistical purposes only.
Top
Related Links