Privacy policy
This page is a translation of the French version. The French version shall prevail in case of any discrepancy.
1. Introduction
At La Cantine pour tous, we place great importance on the protection of your personal information. This policy clearly and simply explains how we collect, use, store, and share your data when you use our website or services. Our goal is to comply with applicable laws, including Law 25, while remaining transparent and accountable.
This policy applies to all interactions with our website and all services we offer online or through other digital means. We are committed to protecting you throughout your experience with us.
2. Definitions
Here are the terms used in this policy to help you better understand how we protect your personal information:
- Personal Information: Any information that can directly or indirectly identify you.
- Sensitive Personal Information: Personal data that, due to its intimate nature or usage context, requires enhanced protection.
- Partner: Any person or business with whom we collaborate to provide our services.
- Third Party: Any external entity other than users and partners of La Cantine pour tous.
- Website: The official website of La Cantine pour tous, including subdomains.
- Consent: Your free and informed agreement for the use of your personal information. It may be implied or explicit depending on the nature of the data.
- Collection: The act of gathering your personal information, either directly or electronically.
- Retention: The secure storage of your personal information in our systems.
- Use: Any operation involving the processing of your personal information.
- Disclosure: Sharing your personal information with partners or third parties.
- Anonymization: The process through which data can no longer identify you, irreversibly.
- Destruction: The complete and permanent deletion of your personal information from our systems.
3. Purpose and Scope
This policy aims to protect the personal information of everyone we interact with, including employees, service users, partners, and third parties. It applies to all internal and external activities of La Cantine pour tous in accordance with applicable laws, particularly Law 25.
It applies to all Board members and employees. Each employee must read and comply with it upon hiring and whenever the policy is updated.
4. Person Responsible for the Protection of Personal Information
The protection of your personal information is overseen by a Manager appointed by General Management from among our employees.
5. Information and Transparency
We are committed to clearly informing our users about the management of their personal information. Contact details for the employee responsible of data privacy are available on our website. You may request access to your personal information or a copy of this policy by submitting a written request. We commit to responding as quickly as possible.
6. Training and Monitoring
We regularly provide training for our staff and board members to ensure proper understanding and application of this policy. We also conduct continuous monitoring through reports and regular meetings to ensure compliance.
7. Collection of Personal Information
7.1 Obtaining Consent
Your consent is required before we collect, use, or share your personal information. We collect specific, free, and informed consent using an inclusive approach.
7.1.1 Implied Consent
In some cases, such as browsing our website, we collect implied consent for non-sensitive data. This type of consent is based on your continued use of the services and does not apply to sensitive information.
7.1.2 Express Consent
For sensitive data, we will ask for your express consent, tailored to the nature of the information.
7.2 Purposes of Collecting Personal Information
We collect your personal information for the following reasons:
- To provide and personalize our services.
- To improve our website and user experience.
- To offer better customer service.
- To manage transactions and payments.
- To communicate with users and partners.
- To produce evaluation and monitoring reports.
- For other needs necessary to the program.
8. Retention of Personal Information
8.1 Security of Retention
We are responsible for the security of your personal information, including that entrusted to our partners or third parties. We use best practices and technologies to ensure secure data storage.
8.2 Access to Personal Information
We guarantee access to your data for legally permitted reasons, in a timely manner and in an understandable format. For example, we may provide access to a close relative of a deceased person, unless the person had explicitly denied this right.
8.3 Anonymization
When your personal data is no longer needed, we will anonymize it securely, protecting your identity while allowing legitimate data use.
8.4 Database Backup
Our website performs regular automated backups to ensure service continuity and protect your data in the event of technical issues.
9. Use of Personal Information
Your personal data is only used for legitimate and necessary reasons, consistent with the purposes for which it was collected. All uses are secure and lawful. Your consent is always required prior to use.
10. Disclosure of Personal Information
10.1 Disclosure to Partners
With your consent, we may share your personal information with our partners. They are required to comply with Québec and Canadian privacy laws. They may only use your information for agreed purposes and must ensure its protection.
10.2 Disclosure to Third Parties
We may disclose your data to third parties when legally required or permitted. This includes studies, research, or statistical use, provided the legal conditions are met.
11. Destruction, Archiving, and Deindexing
We commit to destroying your data when its intended purpose has been fulfilled. However, some documents may be archived for legal or legitimate reasons, in accordance with current legislation.
You have the right to request the deletion or deindexing of your personal information online. We will honour such requests in accordance with the law.
12. Measures in Case of a Risk or Incident
12.1 Nature of the Risk or Incident
A risk or incident may occur if your data is accessed, used, disclosed, or lost without legal authorization. We take these situations seriously and have implemented measures to minimize impacts.
12.2 Incident Response Procedures
We have established a thorough procedure to evaluate and respond to any incident involving your data.
If you believe your data protection rights were not respected, you may submit a complaint to the Privacy Officer. Your request will be reviewed, and a timely response will be provided. If needed, a meeting may be arranged to explain the decision.
13. Policy Changes
We commit to updating this policy when legally required or when deemed necessary by the Board. Any change will be communicated and will maintain strong privacy standards. The introduction and appendices are integral to this policy. In case of contradiction, the policy takes precedence.
