Privacy Policy

The Public Procurement Commission (PPC) operates the Enterprise Risk Management Application System (ERMAS) as an internal platform for managing enterprise risks within the organization. ERMAS is designed for use by authorized PPC staff to identify, assess, monitor, and report on risks across the Commission.

This Privacy Policy informs PPC staff about our policies and procedures for the collection, use, and disclosure of Personal Data within ERMAS.

By accessing and using ERMAS, you agree to the collection and use of information in accordance with this policy. The Personal Data we collect is used solely for the purpose of enterprise risk management within the PPC. We will not use or share your information with anyone except as described in this Privacy Policy.

Interpretation and Definitions

In this Policy-

• Account means an account created to access and use the System;
• Cookies mean small files that are placed on your computer or electronic device by a website, containing the details of your browsing history on that website among its many uses;
• Data Controller, for the purposes of section 2 of the DPA, refers to the PPC as the legal person which alone or jointly or in common with other persons determines the purposes and means of the processing of Personal Data;
• DPA means the Data Protection Act, 2015;
• Personal Data, for the purposes of section 2 of the DPA, means any information relating to the user or visitor who can be identified from that information alone or from that information and other information in the possession of the Data Controller;
• Process, for the purposes of section 2 of the DPA, means obtaining, recording or storing the information or personal data, or carrying out any operation or set of operations (whether or not by automated means) on the information or data including organisation, adaptation or alteration, retrieving, consulting or using, disclosing by transmitting or disseminating, or aligning, combining, blocking, erasing or destroying, or rendering the data anonymous;
• Service means the operation of ERMAS to monitor and manage enterprise risks for public procurement projects and contracts within Jamaica;
• System means ERMAS and its accompanying applications;
• PPC means the Public Procurement Commission.

Data Protection Standards

The PPC is committed to ensuring compliance with the data protection standards as articulated by the DPA. As the Data Controller, the PPC shall ensure that the following principles are adhered to when processing Personal Data on ERMAS:

• fairness and lawfulness;
• purpose limitation;
• data minimisation;
• accuracy;
• storage limitation;
• protection against unauthorised use, transfer or access.

The PPC shall not retain any Personal Data for any period longer than its intended use or as provided by the DPA or the Public Procurement Act, 2015.

Information Collection

Personal Data

While using our System, we may require you to provide us with certain Personal Data that may be used to contact or identify you. Personal Data may include, but is not limited to:

• email address;
• first name and last name;
• phone number;
• address;
• occupation;
• employer/department;
• signature;
• usage data.

Usage Data

Usage data is collected when using the System. Usage data may include information such as your device's internet protocol address, browser type, browser version, the pages of our System you visit, the time and date of your visit, the time spent on those pages, and other statistics.

Cookies

Cookies are files with small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive.

Our website uses these "cookies" to collect information and to improve our service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our System.

Use of Your Personal Data

The PPC may use your Personal Data for the following purposes:

• to provide and maintain our services on the System, including monitoring the usage of our System;
• to manage your account, including registration as a user of the System;
• for enterprise risk management: to fulfil the PPC's statutory obligations as a regulator and facilitator of the public procurement process, the Personal Data provided by you will be used to manage and monitor enterprise risks;
• to contact you by email, telephone calls, SMS or other forms of electronic communication related to the System and service;
• to manage and respond to your requests;
• for other purposes: we may use the information for other purposes, such as data analysis, reporting obligations or any other legal/statutory obligations to the relevant government authority, and determining the effectiveness of the System and service.

Disclosure

We may share your Personal Data in the following situations:

• with service providers: we may share your information with service providers to monitor and analyse the use of our System.
• with affiliates: we may share your information with our affiliates, in which case we will require those affiliates to honour this Privacy Policy. Affiliates include our parent Ministry, branches of the PPC, and any other relevant government ministry, department or agency.
• with your consent: we may disclose your information for any other person with your consent.

Your Rights

Under the DPA, you have the following rights in relation to your Personal Data:

• to access the Personal Data held by the PPC about you;
• to have your Personal Data corrected, if it is incomplete or incorrect;
• to opt out of receiving marketing communications at any time;
• to receive a copy of the Personal Data which you have provided subject to applicable laws;
• to restrict or object to the processing of Personal Data in certain circumstances, and subject to applicable law;
• the right to seek redress from the Office of the Information Commissioner.

If you want to exercise any rights described above or are dissatisfied with the way we have used your information, please contact (876) 754-3747 or general@ppc.gov.jm.

Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our System may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at (876) 754-3747 or general@ppc.gov.jm.