Protection of Personal Information
Epurair, brand of Innovair Solutions Inc. (the “Company”) recognizes the importance of protecting personal information and is concerned about how it treats this information.
It therefore undertakes to collect, use, communicate and retain only the personal information necessary to carry out its activities and in the context of its business. The Company has adopted a policy on the protection of personal information, applies it in the course of its business, and has designated, in accordance with the Act respecting the protection of personal information in the private sector (the “ LPRPSP ”), a person responsible for the protection of personal information and privacy within his company. The identity and contact details of this person are mentioned at the end of this section.
When and how is personal information collected?
In the normal course of its activities and as part of its business and provision of services, the Company collects certain personal information necessary for these purposes or for any other compatible purpose if the criteria of the PIPESA and other laws and regulations applicable to the protection of personal information are met (collectively, the “ Act ”). Personal information may also be collected by the Company in the context of employment, knowledge of its customers, collection, consultation and business relations.
The personal information collected by the Company may in particular relate to identity, contact details, health, social or family situation, employment, recruitment, financial information, training or the education of the individuals concerned, depending on the nature of the relationship between them and the Company. Identity documents containing personal information may also be collected by the Company.
The Company ensures that the persons concerned by this personal information collected are informed of its collection and that they understand the purposes of this collection.
The Company may collect personal information using technology that includes functions to identify, locate or profile an individual. In such a case, consent in accordance with the Law will be requested from the person concerned. Information about the Company's website usage and other technical information or website visitor interaction may be collected.
In cases where the personal information collected by the Company is communicated to it by a third party, i.e. a person other than the person concerned by this information, the person who makes the communication must ensure that they have obtained the consent of the person. concerned and to have informed it of this communication, in advance.
For what purposes is personal information used?
The personal information collected by the Company is used as part of the provision of its services, to ensure the proper functioning of the company and, in certain cases, to meet legal obligations which arise in particular from the Law. Personal information collected by the Company may also be required to enable it to meet its contractual obligations towards its customers and other third parties.
In what cases can personal information be communicated by the Company?
It may happen that the Company communicates personal information that it holds to third parties, in particular to companies that subcontract for it or as a service provider. These third parties may, in certain cases, be located outside the province of Quebec so that the personal information that the Company collects and holds may be located in a location with an applicable legal regime different from that of Quebec.
The contracts that the Company concludes with third parties require them to preserve the confidentiality of personal information and provide, in particular, for their obligation to respect the legal framework applicable to the Company in terms of data protection. personal information and privacy.
Subject to an exception provided for in the Act, consent will be requested from the persons concerned by the personal information if the Company were to communicate to third parties personal information which is not related to its current operations and activities or which is not are not compatible with the purposes for which they were collected.
It is also possible that the Company communicates certain personal information that it holds as part of a commercial transaction or in other cases provided for in the Act. If the circumstances of the communication mean that the Company does not have to request the consent of the persons concerned by the personal information, it will respect the requirements of the Act to carry out such communication.
In addition, the Company may be required to disclose certain personal information it holds to government authorities or law enforcement agencies.
What security measures does the Company take with respect to the personal information it holds?
The Company implements policies and practices governing corporate governance and the protection of personal information.
Personal information held by the Company is kept in secure locations, according to generally accepted practices, and access to this information is limited to employees who need to have access to it in the course of their duties.
The Company's employees are made aware of the importance of protecting personal information and the measures to be taken to ensure that the confidentiality of this information is respected. As part of their duties, employees follow procedures that protect the confidentiality of personal information and promote best practices in this area.
The Company ensures the protection of personal information from the moment it is collected and implements security measures aimed at protecting it against use that does not comply with current legislation, to avoid accidental loss, modifications, disclosures or unauthorized access. , misuse or any illegal form of use. However, the Company cannot guarantee that the personal information it collects is certainly protected against any attack.
Where is the personal information collected by the Company kept?
The Company's personal information may be held or transferred outside the province of Quebec, including in countries other than Canada and whose rules regarding the protection of personal information differ from those of Quebec and Canada. When information is located outside Quebec or Canada, it is subject to the laws of the country where it is located and its collection, communication, use and destruction may be carried out differently from provincial or federal requirements.
How long is personal information retained?
Unless authorized or required by applicable laws, the Company retains personal information only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any ethical, legal, tax, accounting or other data requirements. notice to the appropriate government authorities. When the retention period expires, the personal information is destroyed, deleted or anonymized. Anonymized information no longer irreversibly allows the identification of the person concerned.
In the event of a confidentiality incident involving personal information, the Company follows the provisions of the Law in force and takes reasonable measures to mitigate the risks of harm being caused to the persons concerned by the personal information covered by the incident. .
Privacy Complaint
The person who believes that their own personal information or that of another person has been the subject of:
- access not authorized by law;
- use not authorized by law;
- a communication not authorized by law;
- of a loss or any other violation of the protections provided for in the Act.
is invited to submit its complaint in writing to the Personal Information Protection Officer identified below. The complaint must include the relevant details, namely the personal information concerned, the context, the potential or actual harm suffered or which could be suffered, as well as the relevant dates. The details of the reported incident should be described as accurately as possible so that a response can be carried out quickly. Any employee who receives a complaint knows that they must forward it, upon receipt, to the Personal Information Protection Officer. Upon receipt of a complaint, the Company complies with its internal Complaint Handling Procedure , in order to handle the complaint fairly.
Person responsible for the protection of personal information
For any questions or comments regarding the way in which the Company processes personal information during its life cycle within the Company or if you wish to assert your rights provided for in the Act regarding the protection of personal information, you can contact the person responsible for the protection of personal information of the Company:
Mr. Sylvain Claireaux CPA
Innovair Solutions inc.
180 3e avenue L'Islet QC G0R 2C0
vieprivee-privacy@innovairsolutions.com
