I. Introduction
This document outlines the personal data processing of user data from the MyZZSJMK mobile application. This data processing is governed by legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, referred to as the GDPR – the General Data Protection Regulation.
II. The personal data controller
The Operator of the MyZZSJMK app system (hereinafter referred to as the ‘app’) is the Zdravotnická záchranná služba Jihomoravského kraje (South Moravian Regional Emergency Medical Service) organisation, Company Reg. No.: 00346292 (hereinafter referred to as ‘EMS South Moravia’). EMS South Moravia is, within the meaning of GDPR, the controller of personal data sent via the app.
III. The personal data processed and purpose of processing
The operator does not process personal data within the mobile application. Users are logged in to the application via their personal number within the job classification at ZZS JmK. The application is only used to distribute specific information to users. They also have the opportunity to share their location with the emergency control room. Location sharing is performed once or continuously for a limited time, always and only after the activation of a specific function in the application by the user.
Data on the location and personal number of the user are transmitted by secure data transmission, or SMS message, to a central server stored in the infrastructure of the Emergency Medical Service of the South Moravian Region. The transfer only takes place if the user has activated this function within the "Connection" module.
IV. Legal titles of processing
The Operator shall process personal data on the basis of the user’s acceptance of the conditions during the installation of the app.
V. Duration of processing
ZZS JmK stores data on transferred positions on the central server of the application for a maximum of two years.
VI. Personal data security
The Operator has taken appropriate technical and organisational measures with regard to the technology, financial costs, nature and purpose of processing. The Operator has ensured an adequate level of security for personal data transferred as part of an emergency call to the central server at South Moravia EMS, taking into account the risks of accidental or unlawful destruction, loss, alteration, unauthorized access or other forms of unauthorized data processing.
The Operator shall undertake to comply with the above measures with regard to the development of new technologies and to eliminate possible future threats to the system.
Employees of the Operator, and other persons who process personal data on the basis of a contract with the Operator, and other persons who come into contact with personal data in the performance of their rights and obligations are obliged to maintain the confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of personal data. The obligation to maintain confidentiality does not apply to the obligation to provide information under special laws.
VII. Processing methods
Personal data is processed exclusively in automated electronic form.
VIII. Recipients of personal data
Recipients of personal data include employees of regional EMS services and other units of the rescue service system participating in the rescue operation (the water rescue services, mountain rescue services, etc.)
IX. Contacting the Data Protection Officer
The Data Protection Officer can be contacted by email at: poverenec@zzsjmk.cz