With the development of new communication tools, it is necessary to pay particular attention to the protection of privacy. CIAC is concerned about protecting your privacy, which is why it is committed to respecting the confidentiality of the personal information it collects.
This Privacy Policy (hereinafter referred to as the “policy”) sets out the manner in which CIAC collects, uses, communicates, retains, destroys and protects the personal information it holds, in order to comply with the requirements of the applicable privacy laws to which it is subject, as well as any other applicable laws and regulations in this area.
The policy applies to personal information collected by us in any manner, whether in person, over the telephone or through our website. In addition, when we collect your personal information, we may provide you with additional information regarding the processing of your personal information. We may also obtain your specific consent in certain cases to the collection, use, disclosure and retention of your personal information. By accepting this policy, or by providing us with personal information after you have had an opportunity to review the policy or any supplemental notice, you consent to the processing of your personal information in accordance with the policy and the supplemental notice.
This policy does not apply to information that is public information under such legislation.
About CIAC
CIAC is an office for contemporary art located at 1 – 3651 Av. Laval, Montreal (Québec), H2X 3E1, Canada. Claude Gosselin is the Privacy Officer and can be reached at the above address or at the following e-mail address: claude.gosselin@ciac.ca .
Important definitions
In this policy
- “Personal Information” means any information that relates to a natural person and allows, directly or indirectly, that person to be identified.
- “Privacy Incident” means (i) any access to Personal Information that is not authorized by law; (ii) any use of Personal Information that is not authorized by law; (iii) any disclosure of Personal Information that is not authorized by law; or (iv) any loss of or other breach of Personal Information.
Liability
CIAC is responsible for protecting the personal information it holds or entrusts to a third party.
CIAC ensures that its employees, as well as any subcontractors with whom it does business, protect the confidentiality of personal information to which they have access, regardless of the nature of the medium or the form in which it is made available.
Collection of personal information
We use the personal information we collect only for the following purposes: to identify you, contact you, bill you, schedule appointments, issue receipts, respond to your requests (in person or by e-mail) and manage services.
Consent, collection, use and disclosure
The people who have access to your personal information are the administrative staff and the professionals you consult at CIAC. We obtain your consent before collecting, using or disclosing your personal information to third parties, except as provided by law. Under no circumstances will CIAC use or disclose personal information without your consent unless it is authorized or required to do so under applicable legislation.
Retention period
We retain your personal information for a period of seven years following its last use, except where the law provides for a different retention period.
Security measures and protection of your personal information
We follow industry security standards to protect the information we collect and receive. In particular, we have put in place appropriate physical, technical, IT and administrative safeguards to protect your personal information against any breach of confidentiality. The personal information we collect is kept in a secure environment. People working for us are required to respect the confidentiality of your information. To ensure the security of your personal information, we use the following measures:
- SSL (Secure Sockets Layer) protocol
- Access management – authorized person
- Network monitoring software
- Computer backup
- Login / password
- Firewalls
We are committed to maintaining a high level of confidentiality by integrating the latest technological innovations to ensure the confidentiality of your transactions.
Despite these measures, given the risks inherent in the use of computer systems, we cannot ensure or warrant the security and confidentiality of any information you transmit or provide to us, and you do so at your own risk. If you have reason to believe that personal information has been compromised, please contact our Privacy Officer.
Accessing and correcting your personal information
It is important that the personal information we hold about you is up to date. Please inform us of any changes to this information.
The law gives you various rights with respect to your personal information. In particular, you have the following rights: • Access: the right to ask whether we hold any personal information about you and, if so, to request access to that information. • Rectification: the right to request rectification of any incomplete or inaccurate personal information we hold. • Withdrawal of consent: the right to withdraw your consent to the disclosure or use of your personal information. • Restrict or deny access: the right to request that a specific stakeholder or stakeholder category not have access to one or more pieces of information you have identified. • Complaint: the right to make a complaint to our Privacy Officer or to file a complaint with the Commission de l’accès à l’information du Québec if you believe that a breach of privacy legislation has occurred. • Portability: You have the right to request that your personal information be communicated to you or transferred to another organization in a structured and commonly used technological format. To exercise any of these rights, please contact our Privacy Officer.
Third-party sites
This policy does not apply to third party websites, pages or applications that may be accessed via our services and we are not responsible for such third party services.