(hereinafter the "Policy")

The Société d'aide au développement de la Collectivité de Lac St-Jean Est inc. (hereinafter the "SADC") collects personal information when you interact with an authorized representative of the "SADC" and through its website https://sadc.lacstjean.qc.ca (hereinafter the "Website").

Personal information is collected through various means:

- Automatically by connecting to the Web Site;
- Automatically through the use of cookies or pixels on the Website;
- By e-mail;
- By telephone;
- Electronically during job interviews;
- By sending personal information by mail;
- In person.

Purpose of personal information

Personal information is collected for the following purposes:

- Communicate with job applicants or potential customers and ensure that communication with them is personalized;
- Advertise to potential customers, clients or job applicants;
- Evaluate job applications;
- Satisfy requests from customers, candidates or visitors to the Website;
- Assess customer needs and interests;
- Ensure that a visitor can connect to the Website;
- Ensure that the Website functions properly;
- Evaluate the effectiveness of " la SADC 's" efforts to acquire visitors, customers or candidates;
- Improve the performance of the Web Site and its effectiveness in retaining visitors;
- Identify the legislative regime to which the personal information of Web Site visitors is subject;
- To advertise to potential customers, visitors or job applicants;
- To ensure compliance with any law, court order or legal process;
- Ensure the legal protection of " SADC ";
- Evaluate and improve protection and security measures;
- Prevent or detect fraud;
- Respond to complaints, requests for access, rectification or withdrawal of consent.

Disclosure of personal information

" La SADC "communicates personal information :

- To its employees if they require access to such information in the course of their duties;
- to any other person or entity, where disclosure is required or permitted by applicable law without the consent of the person concerned, or with the consent of the person concerned;
- To external service providers with whom SADC "has entered into a contractual agreement under which the that the external service provider may not use the personal information for any purpose other than the the provision of said service and must destroy the personal information communicated no later than the end of the contractual agreement.

Consents

If you continue to use the " SADC "Web Site, if you forward this information to an authorized authorized representative of SADC "or if you communicate personal information to " SADC "by completing an form provided by the SADC "you consent to the purposes and disclosures of the personal information submentioned above.

You must consent to the purposes, uses and disclosures of your personal information prior to using the " SADC ". Please refer to the document below to identify the circumstances information will be collected.

The personal information collected is destroyed as soon as the purposes for which it was collected have been fulfilled, unless, of course, a law or regulation requires "SADC" to keep it. unless, of course, a law or regulation requires "SADC" to retain it, or a law or regulation imposes a specific retention period. imposes a specific retention period.

"CDIC does not sell personal information to third parties and does not allow third parties access to personal information unless such access is necessary to fulfill one of the purposes for which the information was collected. access to personal information unless such access is necessary to fulfill one of the above-mentioned purposes and access or disclosure without consent is authorized or required by law or regulation. or required by law or regulation.

All privacy settings applicable to your use of the Website offer, by default, the highest level of privacy without any intervention on your part. without any intervention on your part.

How does "SADC" protect the confidentiality of your personal information?

"SADC" takes adequate physical, technological, contractual and administrative safeguards to protect measures to protect your personal information personal information and reduce the risks access, use, unauthorized communication and destruction.

Without limiting the generality of the foregoing, the Website is equipped with certain security mechanisms designed to protect your personal information:

- Personal information collected on the Website is encrypted at rest;
- All transfers of personal information between the various components of the Website are encrypted;
- SADC's IT service providers are contractually bound to respect various security obligations SADC"'s IT service providers are contractually bound to comply with various security security practices and processes, as well as ongoing monitoring and updating of the Web Site's software components. software components.

In addition to these measures, "SADC" also provides for, among others:

- An internal access management policy for our employees. According to this policy, only our employees necessary to access personal information in order to perform their duties may access it. access;
- An internal policy for the protection of information to which "SADC" employees are subject, in order to ensure the integrity, availability and confidentiality of personal information;
- A confidentiality incident log, which helps "SADC" keep track of incidents, whether minor or major, breach of your personal information, to ensure that such incidents do not recur, and to identify identify the necessary measures
- A personal information retention schedule, to ensure that personal information is destroyed when it is no longer required. personal information is destroyed when it is no longer required for the above-mentioned purposes, and when it is no longer required by law to be retained; and retention;
- A privacy incident response plan, which enables "SADC" to respond effectively and quickly to your personal information;
- Logging of access to your personal information; and
- Annual training for our staff.

Despite these various measures, it remains impossible for "SADC" to guarantee the security of the personal information entrusted to it. personal information entrusted to it. If you suspect that your personal information held by "SADC" has been compromised, please contact our Privacy Officer. has been compromised, please contact our Privacy Officer at the following address at the following address atremblay@sadc.lacstjean.qc.ca

What measures has "SADC" put in place to deal with confidentiality incidents?

"SADC" maintains a register of privacy incidents in accordance with applicable legislation. In the event of a breach of your personal information that poses a risk of serious harm to you, "SADC" will take the necessary steps to notify you in accordance with the law. you, "SADC" will take the necessary steps to notify you, in accordance with applicable legislation. applicable legislation. "SADC" will also take steps to limit the harm that may result from the breach. that may result from the breach and that will limit the chances of the breach recurring.

How long is your personal information kept?

In accordance with our procedures for the secure retention and destruction of personal information, we retain your personal information only as long as necessary for the fulfillment of the purposes purposes listed in section 1 of this Policy or as required to comply with our statutory statutory obligations, whichever is the later.

Personal information requests

i) Access request

You or a person authorized by the Act respecting the protection of personal information in the private sector may make a request for access to your personal information by contacting our Privacy Officer in accordance with the above procedure. The Privacy Officer SADC" will grant such access unless :

- The law prevents "SADC" from granting access ;
- "SADC" has a serious and legitimate interest in refusing access; or
- Granting access could seriously harm a third party.

In principle, exercise of the right of access is free of charge. However, a reasonable fee may be charged to the applicant to to compensate for the cost of transcribing, reproducing or transmitting personal information. personal information. In such a case, the applicant will be notified of the amount of the fee in question before his or her request is processed. request is processed.

You may also request a copy of your personal information by by submitting a written request to the Privacy Officer in accordance with the procedure below.

In the event that "the CFDC" grants any request to obtain a copy of computerized personal information personal information, "the CFDC" will ensure that it (or any person or organization authorized by law to authorized by law to collect such personal information) this copy in a structured and commonly used technological format. commonly used technological format. Unless communicating this copy in such a technological format raises serious practical difficulties or that "CDIC" or one of its service providers has inferred or created the personal information.

ii) Request for withdrawal of consent

Subject to your contractual obligations with "SADC" and applicable legislation, the Act respecting the protection of personal information in the private sector (if it applies to you) allows you to withdraw your consent to the use of your personal information. sector (if applicable to you) allows you to withdraw your consent to certain uses or consent to certain uses or disclosures of personal information. Please note that exercising this right of this right may affect the services provided by "la SADC" to you. As such, if you make such a request, "SADC" will identify the consequences of the withdrawal of consent on the services.

Application procedures

All requests for access or rectification must be addressed in writing to Sandra Tremblay, our Privacy Officer. Privacy Officer. A requestor may contact her directly by sending an e-mail to atremblay@sadc.lacstjean.qc.ca.

The request must be sufficiently detailed to allow our Manager to assess and identify the personal information personal information covered by the request. Above all, the requestor must ensure that the person in charge can contact him/her so that the Responsible Officer can assist him/her in clarifying the request, in facilitating the identification of the personal information concerned by the request, and, above all, to communicate the acceptance or refusal of the request.

The Privacy Officer has a duty to process such requests within 30 days. If the request is not processed within this period, it is deemed to have been refused.

Complaints procedure

You can make a complaint about our privacy or governance policies, practices or procedures by of information policies at contacting directly à our Manager of the protection at at this address: atremblay@sadc.lacstjean.qc.ca.

The Privacy Officer will respond to the complaint within 30 days of receipt. receipt. If the complaint is accepted, a brief summary of the changes made to our methods, practices and or governance policies will be provided to you.

Changes to the privacy policy

"CDIC" may unilaterally change this Privacy Policy. Prior to implementing any changes, however, "CDIC" will provide notice on the Website identifying the upcoming changes. We therefore invite you to revisit this policy from time to time to check for any changes. if any changes have been made. To facilitate this process, we have indicated the date on which this Policy was last updated. Policy.

If you have provided us with your e-mail address, you will also receive this or a similar notice by e-mail. Your use of the Web Site, your communication of your personal information to an authorized agent of agent of "CDIC" or by entering your personal information on any form of "CDIC" upon receipt of this receipt of this version will be deemed to constitute acceptance of the changes made.

Other

If you have any questions about any of your rights, if you would like to ask "SADC" any questions or if you have any comments, please contact the Privacy Officer. please contact the Privacy Officer.

C/O: Annie Tremblay, Privacy Officer, Société d'aide au développement de la collectivité de Lac St-Jean Est inc. Lac St-Jean Est inc.

469, rue Sacré-Coeur Ouest, Alma (Québec) G8B 1M4
E-mail address: atremblay@sadc.lacstjean.qc.ca

Last update of this policy: June 27, 2024