You have registered or want to register on Heartbeat Now Ireland? Of course we are happy about that, but first you must give us permission to use your personal data. By registering, you agree to our Privacy Statement.
We would like to tell you what we do with the data you provide to Heartbeat Now Ireland and why we do this. That way you can make a conscious choice and you won’t be confronted with any surprises. You also know exactly what Heartbeat Now Ireland does (or does not do) to keep your private data truly private.
1. When you register, we use your personal data
- 1. Data you can use to identify or approach someone is called personal data. The data we process are the fields filled in by you when you create your account on the Heartbeat Now Ireland website, such as:
- Name
- Location data of you or your AED
- Availability of you or your AED
- Email address and telephone number
- Date of birth
- Training data
- 2. We use your data for the reasons we mention in this privacy statement. These are called the foundations:
- a) We alert you when necessary (execution of the agreement)
- b) Analysis and research (legitimate interest)
- c) We support you in your role (that for which we have your permission)
- 3. In case of a Heartbeat Now Ireland alert, the 112 control room can see the alert and the locations of the alerted community first responders and AEDs. This can be the GPS position, but also the home/work address and/or AED location.
- 4. If you do not want us to poll your GPS location, it is better not to use the GPS functionality in the app so that you are only alerted based on address.
- 5. In Ireland, the General Data Protection Regulation (GDPR) applies. Of course we comply with this. We always take your privacy and the relevant legislation into account. You can rely on that.
- 6. We only process data that you have provided to us yourself and not data received from third parties. You can withdraw your consent at any time by deleting your account. To do so, click on the red button ‘Delete Account’ when you are logged in. You may also email us. We will then remove all your information. You can rely on that too.
2. This is what we do with the details of your account
- 1. After your registration, we check your account, including (the validity of) your training and AED details. If everything is correct, we will accept and activate your registration and continue to manage your account. You can also help us with this by updating your account yourself if, for example, you move house, have a holiday or if you have a new validity date of your training due to a refresher course.
- 2. We alert you or the AED when there is a 112 report of a resuscitation and support you if necessary with tips, information and aftercare.
- 3. We use your mobile phone number, availability, training and location data (GPS) to alert you near a victim of cardiac arrest. The same applies to the location and availability of an AED you manage.
- 4. You can register with Heartbeat Now Ireland from the age of 18, but special risks or government policies may be reasons not to alert you (temporarily). This is why we ask you to fill in your date of birth.
- 5. We use your name, gender (not required), email address and mobile phone number to keep in touch with you about your account or an alerted AED.
- 6. If you wish, we offer you personal aftercare, for example if (from your questionnaire) it appears that your deployment had a high impact.
- 7. We will warn you in time if data in your account expires. If you do not take action, your account or the AED will be temporarily inactive and eventually removed from the system by us.
- 8. We send you updates on Heartbeat Now Ireland to inform you about (and help you with) aspects and situations you (may) have to deal with as a volunteer.
- 9. We are happy to answer your questions or help you manage your profile. Please contact us by email or phone.
3. This is what we do with your alert and deployment data
- 1. After every alarm on Heartbeat Now Ireland processes, questionnaires are automatically sent to all alerted citizen aid workers. This is how we collect turnout and deployment data from citizen aid workers and AEDs, which we use for evaluation and research into the effects of Heartbeat Now Ireland. As a result, we also see possible improvements in the system.
- 2. After every alert, the locations of the alerted community first responders and AEDs are saved.
- 3. Heartbeat Now Ireland also supports other research and new developments in the field of (civil) assistance, deployed AEDs, resuscitation and survival in case of cardiac arrest. We also cooperate in extracting data from a deployed AED, if this is necessary for the treatment of a victim.
- 4. Before we decide to cooperate in new developments or research, we check carefully whether it fits with the objectives of Heartbeat Now Ireland. We also check compliance with applicable (privacy) legislation.
- 15. Data that we use for evaluation, research and development are processed anonymously, unless there is no other way. This is the case, for example, if a deployed AED must be read out for research or treatment. We sign a processing agreement in advance where necessary.
4. We process your GPS data when you use the Heartbeat Now Ireland website
- 1. We collect exact (real-time) GPS location data from the device on which you have installed our Heartbeat Now Ireland app, linked to your Heartbeat Now Ireland account. This allows us to offer GPS location-based alerts and deployment based on the data in your Heartbeat Now Ireland account.
- 2. To determine your current GPS location, you need to be logged into the Heartbeat Now Ireland app. Do you log out or delete the app? Then we can no longer determine a new GPS position. This is also the case if you delete the app from the background.
- 3. In the event of a 112 resuscitation alert near your last known location, your position is relayed and you can receive the system alert (provided you are still logged in and have enabled the ‘available’ functionality).
- 4. We poll GPS location data only for the purpose of alerting you if there is a resuscitation incident in your immediate vicinity.
- 5. We do not keep a history of your GPS locations, only your last known GPS location. As soon as we track your GPS location again, it will be replaced by a new location and the old GPS location will disappear. If you have received an alert, the position on which you received an alert (home address, work address or GPS position) remains known to us.
- 6. When the system processes a CPR alert, the administrator can see this alert, along with the locations of alerted community first responders in the immediate vicinity of the victim. This is the address or GPS location based on which you were located within the alert radius for a notification.
- 7. Every CPR alert for which the system has been deployed is saved. Your GPS location and Heartbeat Now Ireland account remain linked to the alert processed by the system.
5. Heartbeat Now Ireland and local partner organisations
- 1. Heartbeat Now Ireland can enter into partner agreements with local organisations. These are AED foundations or first aid associations, with no commercial intent.
- 2. If partner organisations comply with the privacy legislation (GDPR) and our additional conditions, they can sign a processing agreement. They may then manage your registration locally, but only to support local CPR assistance.
- 3. Partner organisations only carry out the management tasks necessary for the partnership, within a digitally protected environment. They have limited access and management rights to select data.
6. Information we use when you visit our website
- 1. When you visit our website, we place cookies: a small file on the hard disk of your computer. In this way we keep track of the visit data of Heartbeat Now Ireland and make it easier for you to access the website. We also adapt the layout of our websites to the most sought-after pages and information.
- 2. No further (special) personal data of yours are processed when you surf our websites. The cookies we use from Google’s Analytics service are set in a privacy-friendly manner in accordance with the recommendations of the Personal Data Authority.
- 3. We have not allowed Google to use the analytics information obtained for other Google services. The information is anonymised as much as possible. Your IP address is always anonymised.
- 4. Google states that it adheres to the Privacy Shield principles and is a member of the US Department of Commerce’s Privacy Shield programme. This means there is an ‘adequate level of protection for the processing of any personal data.’
- 5. If you do not want us to use cookies, you can select the ‘cookies off’ option in your browser. You can also ask your browser provider for the appropriate settings.
7. Disclosure of your data to third parties
- 1. Only if we are obliged to do so under Irish law (in the event of legal proceedings, or if we receive a request from government agencies) do we have to disclose your personal data.
- 2. We may also have to disclose your data when national security, law enforcement or public interest is at stake.
- 3. In the event of a reorganisation, merger or sale of our organisation, we will transfer your data to that affected party, but only for the purpose for which you have entrusted it to us.
- 4. Your personal data will not be used for marketing or other purposes, unless you have given your consent.
- 5. We will always approach you personally before processing your personal data for new/additional services.
8. Emergency services, victims and others involved
- 1. We do not give your personal data to emergency services and/or victims, unless required by laws and regulations, or you agree to this yourself.
9. Retention, access, modification, deletion or transfer of your data
- 1. You can check, change and delete your registration data on your personal page via the website
- 2. We will only keep your data for as long as you are registered as a community first responder or AED administrator on the system.
- 3. If you unsubscribe from the system, we will remove your personal data and the associated history completely from our system.
- 4. If you request, we will transfer your data to another organisation for the same purposes for which you have entrusted them to us.
10. What we do to keep your data private
- 1. Our website and database have a valid security certificate and are well protected against hacking.
- 2. ICT systems (PC, laptop, tablet) we use are as secure as possible against hacking, viruses and malware, according to the current state of the art.
- 3. Every year we have the security of the system investigated. If it proves necessary, we take immediate measures to improve a component.
- 4. We have established which employees must be able to view and/or change personal data for their work. We inform our employees properly about the procedures for handling personal data.
- 5. We always sign a data processing agreement with external parties who process our personal data, e.g. a research party or local partner organisations.
- 6. We have an internal procedure that we use to quickly assess any breach notification (data breach) and act if necessary.
Want to respond?
We’ve told you what we do with the data we collect and why we do it. Maybe you still have a question. Feel free to ask it by completing this form: https://heartsafenwe.nweurope.eu/contactus
Our staff are of course are also familiar with the privacy policy and will be happy to inform you further if you have a complaint or comment about our privacy statement or the processing of your data.
By the way, we will always inform you if we need to adjust our privacy policy, for example when the legislation on privacy changes.