Privacy Statement Aruba Health App and hard copy Test or Vaccination record.
This privacy statement is applicable to the Aruba Health App (AHA) including the generation and issuing of an (EU) Digital Corona Certificate (DCC). The statement explains how personal data is used and processed and which privacy protective measures have been taken to protect your personal data.
In case you wish to travel back to Aruba you are exempt of taking a Covid-19 testing upon arrival in case you demonstrate:
Such proof for inbound residents can be uploaded in the AHA for verification purposes or is generated by the AHA. The proof must include a QR code that is verifiable by the Public Health Authorities of Aruba.
In case you are outbound from Aruba to other territories you may be required to show you do not have the infectious decease of Covid-19 by demonstrating: (i) a negative Covid-19 test, (ii) you have recently undergone Covid-19 or (iii) proof that you are fully vaccinated against Covid-19. Such proof is generated and issued through the AHA as a DCC or emailed to you by the Laboratory that administers the test/Public Health Department. The proof always includes a QR code that is verifiable by other authorities.
In case you are fully vaccinated on Aruba you can generate your vaccination certificate through your mobile AHA and email it to yourself for printing or generate it via the website: www.dvg/app.aw .
The Minister in charge of Public Health of Aruba is responsible for generation and issuing of the vaccination certificate and other types of Digital Corona Certificates, as well as the verification of uploaded tests, records, and certificates by the Public Health Department of Aruba. For this personal data must be processed. In this privacy statement it is explained which personal data and on which legal basis these are processed as well as your right in case you are not in agreement with the processing.
To generate and issue a Vaccination Certificate (for locally vaccinated persons)/ DCC we use data regarding your health: Covid-19 test results and vaccination records. We also use data that enables us to verify your identity and match this with the data regarding your health. For this purpose, we need the following data from you:
In addition to mentioned data other information is needed that varies depending on the type of DCC one is requesting:
Because the AHA is web based and uses the internet your IP address is processed. This is inherent to the use of internet and IP technology and required to create a connection between the system of the public health department and your mobile phone/browser. The IP address is solely used for management and security purposes.
Besides this, other data is collected which is not directly linked to you. Please refer to the Overview of processed personal data.
Your test-, vaccination, or recovery data are provided by the Laboratory who has administered your tests and the Public Health Department that has administered your vaccination in Aruba. This data is requested in three possible methods:
Your data is collected in order to be able to request Covid-19 tests and Covid-19 vaccination appointments, to receive your test results and to request your Digital Corona Certificate. This to manage and prevent the spread of Covid-19 in Aruba and abroad.
Requirement to show a proof a DCC of other Test Record for entry of Aruba
The current Ministerial Decree based on the State Ordinance on Calamities requires that a resident shows valid proof of being fully vaccinated or a medical statement/proof that he/she does not have an infectious disease (in this case Covid-19) or he/she has proof to be tested upon arrival at the Airport.
Local reporting
The State Ordinance on Infectious diseases (AB 2019 no 27) requires that any person suffering from Infectious diseases such as SARS (Human Corona Virus) is reported to the department of Public Health. As such, healthcare providers must report positive test results of Covid 19 (SARS 2) to the appointed medical doctor of the Department of Public Health Department.
When sharing data all parties are required to take the State Ordinance on personal data registration (AB 2011 no.37) into account.
Issuance and verification of DCC
On the 14th of June 2021 the Regulation (EU) 20211/952 of the European Parliament and of the Council on the framework for the issuance, verification, and acceptance of interoperable Covid-19 vaccination, testing and recovery certificates in order to facilitate free movement during the Covid-19 pandemic, was published. This Regulation provides a European Technical framework for the issuance of interoperable certificates for Covid-19 vaccination, testing and recovery certificates in order to facilitate free movement of persons (Article 21 TFEU). The EU DCC is provided on the basis of the Regulation (Article 3, second paragraph of the Regulation). The Minister in charge of Health of Aruba is allowed to issue the DCC in digital form or on paper as Aruba a Country within the Kingdom of the Netherlands. Because the regulation has direct effect and the need to process data in the context of the task imposed is evident it is not necessary to include a separate processing basis in the law for this. In Article 10 sub 6 of the Regulation the person responsible for the issuance is designated as the controller. The Minister in charge of Health in Aruba is there for the controller for the issuance of the DCC.
The minister in charge of Public Health in Aruba is responsible for the processing of the personal data in the AHA as well as the verification of the EU Digital Corona Certificate (DCC) and other verifications of Vaccine and test Records.
The information is processed on behalf of the Minister by:
The data in the AHA is stored by the Department of Health for statistics.
In order to check the DCC, other Vaccination or Test record the Public Health Department will verify the uploaded proof and the AHA emails a fit to fly to Aruba green check mark in case approved. In addition, the Immigration of Aruba will scan the QR code on your DCC or other Test record. This data is not kept by the immigration but is only to check whether you have a valid proof and that such matches your identity. For check data is shared between the immigration authorities of Aruba and the Public Health Department.,
For locally administered test data is shared between the laboratories who have administered the tests and the Public Health Department.
Yes, there is a process that automatically verifies and by user request generates a DCC. This is done in compliance with the DCC rules and regulations.
In case you have any complaints, questions or need any assistance you can contact the healthapp@dvg.aw via email. You have the right to request removal of data that can be linked to your person.
The minister in charge of Public Health takes the protection of your personal data very serious and has ensured that the proper technical and organizational measure have been taken to prevent abuse, loss or unauthorized access, unwanted publication, and unauthorized changes of the processed data.
When registering in the AHA you as the user of the app explicitly authorize the processing of the personal data for the purposes as described in this privacy statement.
This privacy statement can be amended. In case of amendment, we will publicize such on our website DVG.aw/healthapp Upon publication the privacy statement is in effect. The last version is dated 16.8.21
Overview of processed personal data:
Personal data that is processed when issuing a DCC:
Personal date that are stored in the QR code
The QR codes for the DCC are generated every [ time] and contain the following data:
Test:
Vaccination:
Recovery:
Personal data that is processed by scanning your QR code
Depending on the type of proof, different personal data is processed in the scanning process. In any case it will be all the data contained in the QR code of the provided proof. For all types of proof the scanner shows only the following to the immigration officer:
The data will disappear from the screen at the next scan or after 240 seconds at the latest.
"if you are a non-resident, visiting Aruba, you can read our privacy statement here (link)
Privacy Statement Aruba Health App and hard copy Test or Vaccination record.
This privacy statement is applicable for the Aruba Health App (AHA) including the verification of the EU Digital Corona Certificate (DCC) and other verifications of Vaccine/Test Records. This privacy statement explains how personal data is used and processed and which privacy protective measures are taken.
In case you wish to travel to Aruba you are required to show that you do not have the infectious decease of Covid-19 by demonstrating: (i) a negative Covid-19 test, (ii) you have recently undergone Covid-19 or (iii) proof that you are fully vaccinated against Covid-19 (subject to rules and regulations for acknowledgement). Such proof for inbound travelers can be uploaded in the AHA for verification purposes. The proof must include a QR code that is verifiable by the Public Health Authorities of Aruba. You can also opt to undergo a Covid-19 test upon arrival at the Airport.
In case you are testing upon arrival or are outbound from Aruba to other territories you may be required to show you do not have the infectious decease of Covid-19 by demonstrating a negative Covid-19 test that has been administered prior to leaving Aruba. The test results are processed through the AHA or send by email to you. The proof always includes a QR code that is verifiable by other authorities. Please take note of the reporting obligation of the Laboratories for positive test results.
The Minister in charge of Public Health of Aruban is responsible the verification of uploaded tests, records, and certificates by the Public Health Department of Aruba as well as the handling of positive test results of outbound nonresidents. For this personal data must be processed. In this privacy statement it is explained which personal data and on which legal basis these are processed as well as your right in case you are not in agreement with the processing.
To process Covid-19 test results we use data that enables us to verify your identity and match this with the data regarding your health. For this purpose, we need the following data:
Because the AHA is web based and uses the internet your IP address is processed. This is inherent to the use of internet and IP technology and required to create a connection between the system of the public health department and your mobile phone/browser. The IP address is solely used for management and security purposes.
Besides this other data is collected which is not directly linked to you. Please refer to the Overview of processed personal data.
Your test data are provided by the Laboratory who has administered the tests or the medical care provider that has administered the vaccine outside of Aruba. This data is requested in three possible ways:
Your data is collected in order to facilitate your entry into Aruba during the Covid-19 pandemic and to manage and prevent the spread of Covid-19.
Requirement to show a proof a DCC of other Vaccination/Test Record for entry of Aruba
In accordance with article 7 sub 2 of het State Decree on Admission (AB 2009 no. 59) requires that a person subject to admission by the immigration of Aruba shows proof of a valid vaccination certificate (subject to rules and regulations) or medical statement/proof that he/she does not have an infectious disease (in this case Covid-19).
Local reporting
The State Ordinance on Infectious diseases (AB 2019 no 27) requires that any person suffering from Infectious diseases such as SARS (Human Cororna Virus) is reported to the department of public Health. As such, healthcare providers must report positive test results of Covid 19 (SARS 2) to the appointed medical doctor of the Department of Public Health Department.
.
When sharing data all parties are required to take the State Ordinance on personal data registration (AB 2011 no.37) into account.
Issuance and verifiaction of DCC
On the 14th of June 2021 the Regulation (EU) 20211/952 of the European Parliament and of the Council on the framework for the issuance, verification, and acceptance of interoperable Covid-19 vaccination, testing and recovery certificates in order to facilitate free movement during the Covid-19 pandemic, was published. This Regulation provides a European Technical framework for the issuance of interoperable certificates for Covid-19 vaccination, testing and recovery certificates in order to facilitate free movement of persons (Article 21 TFEU). The EU DCC is provided on the basis of the Regulation (Article 3, second paragraph of the Regulation). Because the regulation has direct effect and the need to process data in the context of the task imposed is evident it is not necessary to include a separate processing basis in the law for this. Reference is made to the privacy statement of your country regarding the DCC.
Verification of other Vaccination/Test Records
Aruba has several agreements in place with renowned and trusted networks of government-approved laboratories and can provide the visitors from the US to Aruba with the service of providing verification of Test results or other medical records such as vaccination records when available. The visitor who uses these networks are referred to the service providers privacy statements.
The minister in charge of Public Health in Aruba is responsible for the processing of the personal data in the AHA as well as the verification of the EU Digital Corona Certificate (DCC) and other verifications of Vaccine and test Records.
The information is processed on behalf of the Minister by:
Uploaded negative test results by visitors are kept a maximum of 30 days;
Uploaded DCC or uploaded other QR standards that are accepted by Aruba are kept maximum 24 hours upon entry of Aruba;
Positive test results are kept up to 30 days after testing;
In order to check the DCC, other Vaccination or Test records the Public Health Department will verify the uploaded proof and the AHA emails a fit to fly to Aruba green check mark in case approved. In addition, the Immigration of Aruba will scan the QR code on your DCC or other Vaccination or Test record. This data is not kept by the immigration but is only to check whether you have a valid proof and that such matches your identity. For check data is shared between the immigration authorities of Aruba and the Public Health Department.
For locally administered test data is shared between the laboratories who have administered the tests and the Public Health Department.
Yes, there is a process that automatically verifies a DCC or other by Aruba accepted QR standard. This is done in compliance with the DCC rules and regulations or relevant agreements.
In case you have any complaints, questions or need any assistance you can contact the healthapp@dvg.aw via email. You have the right to request removal of data that can be linked to your person.
The minister in charge of Public Health takes the protection of your personal data very serious and has procured for the proper technical and organizational measures to prevent abuse, loss or unauthorized access, unwanted publication and unauthorized changes of the processed data.
When registering in the AHA you as the user of the app explicitly authorize the processing of the Personal data for the purposes as described in this privacy statement.
This privacy statement can be amended. In case of amendment, we will publicize such on our website DVG.aw/healthapp Upon publication the privacy statement is in effect. The last version is dated 16.8.21
Overview of processed personal data:
Personal date that are stored in the QR code
The QR codes for the DCC are generated every [ time] and contain the following data:
Test:
Vaccination:
Recovery:
Personal data that is processed by when verifying by scanning
Depending on the type of proof, different personal data is processed in the scanner. In any case it will be all the data contained in the QR code of the provided proof. For all types of proof the scanner shows only the following to the immigration officer:
The data will disappear from the screen at the next scan or after 240 seconds at the latest.