Accueil > Data protection policy
The Society for Life, Integration and Learning for the Disabled V.I.A. inc. (the “Company”) recognizes the importance of protecting personal information and is concerned about how it handles such information.
It therefore undertakes to collect, use, communicate and retain only the personal information required to carry out its activities and in the course of its business.
The Company has adopted a policy on the protection of personal information, applies it in the course of its business, and has designated, in accordance with the Act respecting the protection of personal information in the private sector (the ” LPRPSP “A person responsible for the protection of personal information and privacy within his or her company. The identity and contact details of this person are given at the end of this section.
When and how is personal information collected?
In the normal course of its operations and in the course of its business and provision of services, the Company collects certain personal information necessary for these purposes or for any other compatible purpose if the criteria of PHIPA and other applicable privacy laws and regulations are met (collectively, the “Personal Information”). Law “). Personal information may also be collected by the Company in the context of employment, customer knowledge, collection, consultation and business relations.
The personal information collected by the Company may relate to the identity, contact details, health, social or family situation, employment, recruitment, financial information, training or education of the individuals concerned, depending on the nature of the relationship between them and the Company. Identification documents containing personal information may also be collected by the Company. The necessity criterion guides the Company’s collection of personal information.
The Company ensures that the persons concerned by the personal information collected consent to and are notified of such collection before it takes place. The Company also demonstrates transparency and takes steps to ensure that individuals concerned by the personal information it collects understand the purposes for which it is collected.
Unless otherwise stipulated by law, consents are free, clear, precise, manifest, informed and distinct if given in writing. If sensitive information is collected by the Company, the persons concerned must give their express consent beforehand.
The Company may collect personal information through the use of technology that includes functions to identify, locate or profile an individual. In such cases, consent in accordance with the law will be requested from the person concerned. Information on the use of the Company’s Web site and other technical or visitor interaction information may be collected. A privacy policy is available to provide clear and simple information in this regard as well as regarding any collection of personal information via technological means.
In cases where personal information collected by the Company is communicated to it by a third party, i.e., a person other than the person to whom the information relates, the person making the communication must ensure that he or she has obtained the consent of the person to whom the information relates and has given him or her prior notice of the communication.
How is personal information used?
The personal information collected by the Company is used to provide its services and, in some cases, to meet legal obligations arising from the Act. Personal information collected by the Company may also be required to meet its contractual obligations to its customers and other third parties.
When may personal information be disclosed by the Company?
From time to time, the Company may disclose personal information it holds to third parties, including companies that act as subcontractors or service providers. These third parties may, in some cases, be located outside the province of Quebec, so that the personal information that the Company collects and holds may be located in a jurisdiction with a different applicable legal regime than that of Quebec.
Contracts entered into by the Company with third parties require them to maintain the confidentiality of personal information and provide, among other things, for their obligation to comply with the legal framework applicable to the Company with respect to the protection of personal information and privacy.
Subject to an exception provided for in the Act, consent will be sought from the individuals to whom the personal information relates if the Company were to disclose to third parties personal information that is not related to its current operations and activities or that is not compatible with the purposes for which it was collected.
The Company may also disclose certain personal information it holds as part of a commercial transaction or in other cases provided for in the Act. In the event that the circumstances of the communication are such that the Company does not need to seek the consent of the persons concerned by the personal information, it will comply with the requirements of the Act to proceed with such communication.
The Company may also be required to disclose certain personal information it holds to government authorities or law enforcement agencies.
What security measures does the Company take with respect to the personal information it holds?
The Company implements policies and practices governing corporate governance and the protection of personal information.
Personal information held by the Company is kept in secure locations, in accordance with generally accepted practices, and access to this information is limited to employees who need access to it in the course of their duties.
The Company’s employees are made aware of the importance of protecting personal information and of the measures to be taken to ensure that this information remains confidential. As part of their duties, employees follow procedures that protect the confidentiality of personal information and promote best practices in this area.
The Company protects personal information as soon as it is collected and implements security measures to protect it against use that does not comply with current legislation, accidental loss, unauthorized modification, disclosure or access, misuse or any form of illegal use. However, the Company cannot guarantee that the personal information it collects is protected against any breach.
Where is the personal information collected by the Company kept?
The Company’s personal information may be held or transferred outside the province of Quebec, including in countries other than Canada, whose rules regarding the protection of personal information differ from those of Quebec and Canada. When information is located outside Quebec or Canada, it is subject to the laws of the country where it is located, and its collection, communication, use and destruction may be carried out differently from provincial or federal requirements.
How long is personal information kept?
Unless authorized or required by applicable law, the Company retains personal information only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying ethical, legal, tax, accounting or governmental notification requirements. At the end of the retention period, personal information is destroyed, deleted or made anonymous. Anonymized information no longer irreversibly identifies the person concerned.
In the event of a confidentiality incident involving personal information, the Company follows the provisions of the Act in force and takes reasonable measures to mitigate the risks of harm being caused to the persons concerned by the personal information affected by the incident.
Confidentiality complaint
A person who believes that his or her own personal information or that of another person has been :
is invited to submit its complaint in writing to the Privacy Officer identified below.
The complaint must include the relevant details, i.e. the personal information concerned, the context, the potential or actual harm suffered or that could be suffered, and the relevant dates. The details of the reported incident should be described as precisely as possible, so that action can be taken quickly.
Any employee who receives a complaint knows that it must be forwarded to the Privacy Officer as soon as it is received.
As soon as a complaint is received, the Company follows its internal Complaints Handling Procedure, in order to deal with the complaint fairly.
Person responsible for the protection of personal information
If you have any questions or comments about how the Company handles personal information during its life cycle within the Company, or if you wish to exercise your rights under the Privacy Act, you may contact the person responsible for the protection of personal information at the Company:
Jean-Sébastien Daigle, President and Chief Executive Officer
The Society for Life, Integration and Learning for the Disabled V.I.A. inc.
1200, rue des Riveurs
Lévis (Québec) G6Y 9G2