Policy Objectives
At Altex, we attach great importance to privacy and are committed to protecting the confidentiality of our employees' and customers' personal information, whether it is stored by us or by a third party.
This document is intended to inform you about Altex's personal information practices and explain its policies and procedures for collecting, using and disclosing personal information. This policy applies to all personal information collected by Altex, regardless of the channel through which it is collected. Altex's collection, use, disclosure and retention of personal information are subject to the Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1).
Personal Information
Un renseignement personnel inclut tout renseignement qui concerne une personne physique et permet, directement ou indirectement, de l’identifier.
Liability
The success of the privacy program and the adoption of a privacy-conscious culture depend on support from senior management. At Altex, senior management promotes the privacy program and ensures that company activities comply with established policies and procedures.
The day-to-day management of the privacy program is formally delegated to the privacy officer at Altex. They are responsible for implementing Altex's commitment to earning and maintaining the trust of customers and other stakeholders with respect to the handling of their personal information. They are responsible for structuring, designing and managing the program, including all procedures, training, monitoring/auditing, documentation, evaluation and follow-up.
Determining the Purpose of Date Collection
Altex ensures that it has a legitimate reason for collecting personal information in all situations. The main reasons we collect your personal information are as follows:
- to support recruitment processes and human resources management
- establish and maintain business relationships with customers
- to identify the needs and preferences of customers and their end users
- to provide products and services to customers
- comply with laws, regulations and contractual provisions
- Investigate and resolve incidents, complaints or disputes involving customers and end users.
For these purposes, we may collect the following personal information:
- contact information
- social security information
- financial information
- employment information
- location information
- other
Please note that we only collect data that helps us to fulfil the purposes set out in this privacy policy. We will not collect any additional data without your prior consent.
Consent
Altex will only collect your personal information for the purposes for which we have obtained your consent, except as permitted or required by law. We will obtain your consent before collecting any personal information. Depending on the nature and sensitivity of the information collected, and how it is used, your consent may be either express or implied. Generally, Altex will seek express consent when the information is collected. Consent may be given verbally, electronically or in writing. In some situations, implied consent may be reasonably inferred from a person's actions or inactions. For example, providing a name and address to receive a publication, or a name and phone number to get an answer to a question, may constitute implied consent. If we wish to use personal information for a new purpose, we will describe the intended use and ask for consent again.
You can withdraw your consent for the collection, disclosure and retention of your personal information at any time. You can also request that your information be de-indexed, in which case Altex will cease disseminating it or de-index any hyperlinks providing access to it. Please note that if you withdraw your consent or request de-indexing, Altex may not be able to provide certain products or services to you thereafter.
To withdraw consent or request deindexing, a written request must be submitted to the privacy officer. Altex will comply within 30 days by ceasing to use the information.
Collection Limitation
Altex is committed to limiting the collection of personal information to what is necessary for establishing, managing and maintaining relationships with individuals, and for the above-mentioned purposes. Altex collects personal information that you voluntarily provide when using our services. This includes, but is not limited to, completing a form, communicating with us by telephone regarding payment for services, and applying for job offers, etc.
Limitation of Use, Disclosure, and Retention
Altex is committed to using personal information only for the purposes for which it was collected. Unless required by law, Altex will obtain new consent from the relevant individual to use the information for any purpose other than that for which the original consent was obtained.
Altex will not disclose personal information to third parties without first obtaining the consent of the individuals concerned. However, if applicable laws permit disclosure without consent, this may be done.
- During an audit, financial review or any other mandatory inspection, where anonymising personal information would not be possible.
- In connection with normal requests made by government agencies to ensure the functioning of their services, such as the payment of unemployment benefits.
In general, the personal information we collect is used and stored in Quebec. However, some of our service providers may store it outside the province in order to provide us with their services. Where applicable, Altex ensures, through a written agreement, that the information is subject to controls that protect its confidentiality, and that it is only used and retained for the purposes described in this policy.
Altex has a policy regarding the management of personal information lifecycles. In this regard, Altex undertakes to retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal requirements and to protect our legitimate business interests. After this period, Altex will ensure that personal information is securely destroyed or anonymised to maintain confidentiality and comply with applicable laws.
Accuracy
Altex is committed to taking all reasonable and necessary measures to ensure the accuracy of the personal information it holds. If you notice any errors or wish to update your information, please notify us by contacting the privacy officer. We are committed to making the necessary changes within 30 days.
Safety Measures
Altex takes all reasonable security measures to protect the personal information in its possession. We are committed to implementing appropriate technical, administrative and organisational security measures to safeguard against loss or theft, unauthorized access, use, disclosure, modification or destruction. The level of protection afforded to personal information may depend on the following factors:
- The sensitivity of the personal information
- The quantity, distribution and format of the information
- The method and duration of storage
Management of privacy incidents
Altex has developed a personal data breach response plan that is continuously reviewed and improved. This ensures that any privacy-threatening incident is managed and resolved properly and in a coordinated manner. It clearly sets out the roles and responsibilities of each person, as well as the reporting, hierarchical recourse and decision-making criteria to be followed. Incidents are recorded in a log for future reference.
Transparency
Altex is committed to ensuring that everyone has easy access to accurate information about its policies and practices regarding the management of personal information. Altex's collection, use and disclosure of your personal information are governed by the current version of this Privacy Policy.
We may update our policy periodically. We therefore encourage you to review it regularly to stay informed of the latest updates.
Access to Personal Information
You can request access to your personal information at any time. To do so, please contact the privacy officer. Altex will respond to your request within 30 days of receiving it. If we refuse your request, we will inform you of the reasons for our decision, subject to any legal restrictions, and advise you of the available remedies.
Possibility of Filing a Complaint for non-compliance with the principles
Any questions or complaints about how Altex handles personal information should be directed to the privacy officer. Altex has procedures in place to respond to enquiries or complaints relating to the handling of personal information and is committed to investigating such complaints or issues of non-compliance with this Privacy Policy.
Contact information for the person responsible for protecting personal information
If you have any questions or comments about this Privacy Policy or how we protect your personal information, if you want to exercise any of your rights, if you want to file a complaint or if you want to find out more about how we work with service providers, you can contact our privacy officer by email at
prp@altex.ca or by mail using the following address:
To the attention of the privacy officer
Altex Montreal
3530 des Entreprises Blvd.
Terrebonne, Quebec
Canada J6X 4J8