Last updated on June 7, 2016
By providing personal information to the IRSST via its Site, you expressly consent to our collection, use and disclosure of such information in accordance with the terms and conditions of this Policy. If you provide personal information concerning a third party, the IRSST will consider that this third party has implicitly consented to this disclosure, and you are responsible for ensuring that such is the case.
Subject to legal and contractual requirements and with reasonable notice, you may at any time withdraw your consent to the IRSST’s collection, use and disclosure of your personal information by writing to the Communications and Knowledge Transfer Division by e-mail at [email protected],. However, the withdrawal of such consent may limit the IRSST’s capacity to offer you certain services on the Site. In addition, notwithstanding the withdrawal of such consent, the IRSST may collect, use or disclose your personal information where permitted or required by law.
Collection of Personal Information
We will ask you for information when we need data for purposes of personal identification (“Personal Information”) or to contact you. The Personal Information we collect may include your name, job, name of your company or organization, your business e-mail address, business telephone number, business or personal mailing address, information about your job or company, and your credit card information.
The types of Personal Information collected by the IRSST depend on several factors and the context. The IRSST only collects the Personal Information needed to carry out its activities and for certain specific purposes. For example, your Personal Information may be required when we provide a service or carry out a transaction you have requested, such as registering for an event, ordering newsletters by e-mail, accessing a tool on the Site, or obtaining or consulting publications.
Certain services on our Site offer individuals the possibility of publicly posting certain Personal Information as, for example, when individuals wish to publish their contact information as part of the services they offer. Participation in such services remains optional at all times. To prevent your Personal Information from being retrieved or misused by others, we recommend that you exercise caution when it comes to sharing your Personal Information in discussion forums or blogs on the Site. To the fullest extent permitted by the applicable laws, under no circumstances may the IRSST be held liable for any damages arising out of your disclosure of Personal Information in discussion forums or blogs on the Site.
Use and Disclosure of Personal Information
The Personal Information collected on this Site is used as part of the operation of the Site and to help us provide you with the service or complete the transaction you have requested or authorized. We also use your Personal Information to improve the Site and any services offered on the Site, and to facilitate your browsing experience by saving you from having to enter the same information repeatedly. We may also use your Personal Information to send you important information about the Site services you use, including, without limitation, your use of Publications.
The IRSST undertakes not to make publicly available, sell, rent or disclose your Personal Information to anyone, except as permitted by this Policy. The IRSST will only disclose Personal Information to third parties in the following cases:
- you have expressly authorized the IRSST to communicate your Personal Information for a specific purpose;
- the IRSST is obliged to provide Personal Information in response to an order rendered in due form by a court, a summons to produce documents, an investigation by authorities, or when otherwise required to do so by law;
- the IRSST reserves the right to inform law enforcement authorities of any activity that the IRSST believes, in good faith, to be unlawful;
- the IRSST may disclose certain Personal Information when it believes such disclosure necessary to protect the rights, goods and security of third parties as well as those of the IRSST, or to ensure that you meet your obligations with respect to the IRSST;
- the IRSST may supply Personal Information to third parties that act on behalf of the IRSST or in collaboration with the IRSST, as agents, partners or suppliers of services (collectively, the “Suppliers”), in particular, as regards the hosting of microsites, technical support, data storage or other, and the Personal Information is supplied to them solely for the purpose of assisting the IRSST in providing said services. It is understood that these third parties must comply with strict contractual obligations that require them to maintain the confidentiality of all Personal Information and to use this information solely for purposes relating to the provision of the services in question.
The Personal Information collected on the Site may be stored and used in Canada or elsewhere in the world, and may be stored or used from servers maintained by the IRSST or third parties, or through cloud-based external information services, as the case may be, for all purposes referred to herein. By using the Site, you agree to all the transfers of your Personal Information required to give effect to the foregoing.
Notwithstanding any provision to the contrary in this Policy, to the fullest extent permitted by the applicable laws, you hereby indemnify, defend and hold the IRSST harmless against any and all liabilities relating to use of your Personal Information by the Suppliers of the IRSST, including, without limitation, as part of the services offered jointly by the IRSST and a supplier on the Site.
Retention of Personal Information
The IRSST retains the Personal Information it collects for as long as necessary to conduct its activities or fulfill identified purposes that gave rise to the collection, and in all cases, for as long as it is reasonable to do so for legal or commercial purposes. The retention period depends on the IRSST service in question and the nature of the Personal Information. Upon expiry of this period, the Personal Information is destroyed, erased or made anonymous.
Access to Personal Information
The IRSST ensures that Personal Information is as accurate, complete and up-to-date as possible for the purposes for which it is used. It is your responsibility, however, to ensure that you update your Personal Information, such as your contact information, at the IRSST.
You may access your Personal Information in order to consult, update, rectify or delete it by communicating in writing with the Communications and Knowledge Transfer Division at the following e-mail address: [email protected].
Any such request must include sufficient details to permit the IRSST to process the request. The IRSST undertakes to act upon such requests within a reasonable time, on the understanding that the IRSST must first verify the identity of the person making such a request.
The IRSST may deny, in writing, access to or modification of the Personal Information of any person for serious reasons, such as the prohibitive cost of cost of providing the information, the fact that the Personal Information contains information pertaining to other individuals, the existence of legal, security, or commercial proprietary reasons, and the fact that the Personal Information is subject to solicitor-client or litigation privilege.
The IRSST reserves the right to charge fees for the transcription, reproduction or transmission of Personal Information, subject to giving you prior notice.
Security of Personal Information
Subject to the cases of disclosure provided for in this Policy, only authorized personnel of the IRSST have access to your Personal Information. These employees are informed by the IRSST of their obligation to maintain the confidentiality of this Personal Information. The IRSST employees who have access to Personal Information may only use this information in accordance with the principles set forth in this Policy and with the applicable statutes and regulations.
The IRSST takes all commercially reasonable technical, contractual, administrative and physical measures to rigorously safeguard your Personal Information. Although it is impossible to guarantee infallible protection, the IRSST uses various technologies and security procedures to safeguard your Personal Information and prevent this information from being consulted, used or disclosed without your consent. For example, we make every effort to store Personal Information on servers (whether maintained by the IRSST or by our Suppliers) to which there is limited access and that are located in controlled facilities. In addition, when we transmit sensitive confidential information via the Internet (a credit card number, for example), we try to do so using an encryption system or other technical means for encrypting this information.
Information on Site Usage
The Site may also collect information about your visit, including the name of your Internet service provider and the IP address used to access the Internet, the date and time you access the Site, the pages you view on the Site, and the URL of the Web site from which you linked to our Site. This information is used to analyze trends and improve the Web site. You hereby authorize us to share these statistics and information with third parties subject to compliance with the other provisions of this Policy concerning the disclosure of Personal Information.
One of the main practical purposes of cookies is to save you time. For example, if you are browsing the Site, the cookie will help the Site recall your specific information on your subsequent visits. In particular, this streamlines the content delivery process and site navigation. When you visit the site again, the information you provided previously will be reused to give you easier access to the Site features.
We may also use web beacons to help install the cookie. Web beacons do not access Personal Information. They collect only a limited set of data, in particular, a cookie number, and the time and data on which the page was displayed, and a description of the page on which the web beacon is placed. The Site may also include web beacons placed by Suppliers of the IRSST to help the IRSST assess and analyze the efficiency of the Site’s various features.
Changes to the Policy
We update this Policy from time to time. In this case, we also correct the “last updated” date indicated at the top of the Policy. We recommend that you consult this Policy periodically to stay informed about the ways in which we help protect the Personal Information we collect from you. Your continued use of our Site constitutes your acceptance of this Policy and its updates.