Intranet des employé(e)s de Vivaco

Confidentiality and protection of personal information policy

VIVACO GROUPE COOPÉRATIF

1. General information

a) Introduction

The protection of privacy is important to VIVACO cooperative group (hereinafter “Entity”, “We”, “Our”). For this reason, We have implemented protection measures and sound management practices for your Personal Information in accordance with the laws applicable in Quebec and Canada.

This privacy policy (the “Policy”) describes our practices regarding the collection, use, processing, communication and retention of the Personal Information of our customers, visitors and users.

By using our website https://www.vivaco.coop (the “Website”) or any of our services, you agree that We may collect, use, process, disclose and retain your Personal Information in accordance with the terms described herein. If you do not agree to comply with and be bound by this Policy, you are not authorized to visit, access or use Our Website or Services or share your Personal Information with Us.

This Policy does not apply to Personal Information of employees, representatives and consultants of the Entity, or any other person affiliated with the Entity, as well as any information that does not constitute Personal Information as defined by the laws applicable in Quebec and Canada.

b) Responsible for the protection of personal information

Questions, comments and complaints regarding the Entity's Privacy Policy and practices may be directed to Our Personal Information Protection Officer at the following contact details:

Telephone: 819-758-4770
Email: vieprivee@vivaco.coop 
Address: VIVACO cooperative group
5  Pie-X Avenue
Victoriaville, QC, G6P 4R8
Canada

2. Definitions

The following words and expressions, when they appear with a capitalized first letter in the Policy, have the meaning assigned to them below, unless an implicit or explicit exception is made in the text:

“Service Provider”: any natural or legal person who processes Personal Information on behalf of the Entity. These are third party companies or individuals employed by the Entity to facilitate the Services, provide the Services on behalf of the Entity, perform services related to the Services or assist the Entity in analyzing the use of the Services.

“Personal information”: any information which concerns a natural person and allows them to be identified, that is to say which directly or indirectly reveals something about the identity, characteristics (e.g.: skills, preferences , psychological tendencies, predispositions, mental capacities, character and behavior of the person concerned) or the activities of this person, whatever the nature of the medium and whatever the form in which this information is accessible (written, graphic , audio, visual, computerized or other).

“Personal information protection manager”: the person who is responsible for the application of this Policy and whose contact details are identified in section 1 of this Policy.

“Services”: Services refers to the Website and our social media pages.

3. Processing of Personal Information

3.1 Collection of Personal Information

As part of our activities, We may process different types of Personal Information including the information listed below:

  • contact details, such as your first and last name, your address, your email address and your telephone number, your date of birth, your age, your gender, your credit card number, your username and your password .
  • information relating to products or services, such as information concerning the Services that We have provided to you;
  • transaction and payment information, such as the payment method used, date and time, payment amount, billing zip code, your address and other related information;
  • information that you choose to provide or transmit to Us, for example, when you fill out a form, make a purchase on Our Website, respond to surveys, apply for one of our job offers or communicate with one our employees or representatives;
  • information collected automatically when using the Website and our Services, including:
  • login information and other information about your activities on the Website, such as your IP address, the pages you viewed, the time and date of your visits, the number of connections, the type of browser you use , your device's operating system and other hardware and software information;
  • demographic data and geolocation data, such as your IP address, a precise or approximate location determined from your IP address or the GPS of your mobile device (depending on the settings of your device);
  • financial information about your activities when using the Website and our Services such as credit card numbers when you carry out commercial transactions related to the Entity.
  • In each case, this Personal Information is processed in accordance with the legitimate and necessary purposes listed in section 3.2 below.

3.2 Use of Personal Information

We may use your Personal Information for the legitimate purposes described below:

  • operate, maintain, supervise, develop, improve and offer all the functionalities of Our Website;
  • present and/or provide Services to you;
  • Allow you to apply for job offers;
  • allow you to acquire our Services and carry out transactions related to our Services;
  • carry out our contractual obligations towards you;
  • develop, improve and offer new Services;
  • send you messages, updates, security alerts;
  • for marketing and business development purposes, if you have previously consented to the processing of your Personal Information for these purposes;
  • answer your questions and provide you with assistance if necessary;
  • collect opinions and comments regarding our Services;
  • carry out research, analyzes and statistics relating to Our business and our Services;
  • detect and prevent fraud, errors, spam, abuse, security incidents and other harmful activities;
  • for any other purpose permitted or required by law.

3.3 Communication of Personal Information

We may disclose your Personal Information to our employees (including marketing and sales departments), consultants, agents, contractors, service providers and other trusted third parties (collectively, “Service Providers”), who have a need to this information to help Us operate Our Website, carry out our business activities or serve you, provided that such Service Providers have previously committed in writing to ensuring the confidentiality of your Personal Information in accordance with applicable laws and Our Governance Program some information.
We do not sell, trade, or otherwise disclose your Personal Information to third parties.

3.3.1 Service Providers and Other Third Parties

Although We try to avoid sharing your Personal Information with third parties, We may use Service Providers to perform various services on Our behalf, such as IT management and security, marketing, and analytics. , hosting and data storage. We have defined below the cases in which such sharing can take place:

  • We use Google Analytics to analyze the Website's audience, establish statistics and communicate with customers and prospects. Consult their privacy policy (in English only);
  • We use the services of Stripe and Paypal to carry out commercial transactions on Our Services. Check out their privacy policy;
  • We use Cyberimpact services. Check out their privacy policy;
  • We use Google Ads to analyze the audience of Our Services, establish statistics and communicate with customers and prospects. Check out their privacy policy. Check out their privacy policy;
  • We use Facebook Pixel services to understand and serve ads, compile statistics and communicate with customers and prospects. Check out their privacy policy;
  • We use the services of Career Builder, TERAPRO, BMR, LinkedIn, Jobilico, Indeed, Emploi Québec, Université Laval, Université de Sherbrooke and Université du Québec à Trois-Rivières to recruit our employees. Check out their privacy policy;
  • We use the Facebook and Instagram social network services of the Meta group to communicate about our Services and our products. Check out their privacy policy;
  • We use the services of the social network LinkedIn to communicate and promote our job offers. View their privacy policy.
  • We use YouTube to present our products and Services. Check out their Google Privacy Policy;
  • We use the services of Nmédia for hosting Our Website;

Before communicating your Personal Information to Service Providers outside the province of Quebec or depending on the nature of the Personal Information communicated, We carry out an assessment of the factors relating to privacy. When We communicate your Personal Information to Service Providers, We enter into written contracts with them before your Personal Information is communicated to them and We only provide them with the Personal Information necessary to carry out their mandate. As part of these contracts entered into with our Service Providers, We are committed to ensuring that the principles set out in this Policy are respected, and these Service Providers are required to use Personal Information confidentially, according to our directives and only for the purposes for which they were provided. We offer sufficient guarantees regarding the implementation of adequate protection measures which are proportional to the sensitivity of the Personal Information processed or communicated. When our Service Providers no longer need your Personal Information, We require them to destroy this data appropriately.

3.3.2 Compliance with legislation, responding to legal requests, preventing harm and protecting our rights

We may disclose your Personal Information when We believe such disclosure is authorized, necessary or appropriate, including:

  • to respond to requests from public and government authorities;
  • to protect our activities;
  • to comply with legal proceedings;
  • to protect our rights, Our privacy, Our safety, our property, yours or those of third parties;
  • to enable Us to implement available remedies or limit the damage We may suffer; And
  • in accordance with applicable laws in force;

3.3.3 Commercial transaction

We may share, transfer or communicate, in strict accordance with this Policy and the provisions of the Act respecting the protection of personal information in the private sector, RLRQ c P-39.1 (the “Private Sector Act”) and the Act modernizing legislative provisions regarding the protection of personal information, LQ 2021, c 25 (the “Bill 25”, assented to on September 22, 2021), your Personal Information in the event of sale, transfer or assignment, in whole or in part , the Entity or our assets (for example, following a merger, consolidation, change of control, reorganization, bankruptcy, liquidation or any other other commercial transaction, including in connection with the negotiation of such transactions). In this case, We will notify you before your Personal Information is transferred and becomes governed by another privacy policy.

3.4 Consent of Personal Information

Where possible, the Entity obtains consent directly from the person concerned for Us to collect, use and communicate their Personal Information. However, if you provide Us with Personal Information about other people, you must ensure that you have duly informed them that you are providing their information to Us in addition to having obtained their consent to such communication.

We will seek your explicit, manifest, free, informed consent to be given for specific purposes before using or disclosing your Personal Information for purposes other than those set out herein. We will also seek your explicit consent each time Sensitive Personal Information is involved in one of the Entity's processing activities. We will ask for your consent for each specific purpose in simple and clear terms, separate from any other information communicated to you.

BY USING OUR WEBSITES, BY TRANSMITTING YOUR PERSONAL INFORMATION BY EMAIL, YOU CONSENT TO THIS PRIVACY POLICY AND TO THE COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THE PRIVACY POLICY.

If You do not agree, please stop using the Website. Except where the law provides otherwise, You may withdraw your consent at any time, upon giving reasonable notice. Please note that if You choose to withdraw your consent to the collection, use or disclosure of your Personal Information, certain features of our Website may no longer be accessible to You or we will no longer be able to offer You certain of our services.

3.5 Retention of Personal Information

Subject to applicable laws, We retain your Personal Information only for as long as necessary to fulfill the purposes for which such information was collected, unless you consent to your Personal Information being used or processed for another purpose. As an indication, the duration of certain information may extend up to 7 years following the end of the Services provided by the Entity to you. Additionally, our retention periods may be changed from time to time due to legitimate interests (for example, to ensure the security of Personal Information, to prevent abuse and violations or to prosecute criminals).

To obtain more information on the periods during which your Personal Information is retained, please contact our Personal Information Protection Officer using the contact details provided in section 1b) of this Policy.

4. Your rights

As a data subject, you can exercise the rights set out below by communicating in writing with Our Privacy Officer using the contact details provided in section 1b) of the Policy. Please note that We may ask you to verify your identity before responding to any of these requests.

  • You have the right to be informed of the Personal Information that We hold about you, of their use, communication, retention and destruction, subject to the exceptions provided for by applicable law;
  • You have the right to access your Personal Information, to request a copy, including paper copy, of the documents containing your Personal Information, subject to the exceptions provided for by applicable law and to obtain, where applicable, additional details on the how we use, communicate, store and destroy them;
  • You have the right to have the Personal Information that We hold about you rectified, modified and updated if it is incomplete, ambiguous, out of date or inaccurate;
  • You have the right to withdraw or modify your consent for the Entity to collect, use, communicate or retain your Personal Information at any time, subject to applicable legal and contractual restrictions;
  • You have the right to ask Us to stop disseminating your Personal Information and to deindex any link attached to your name which gives access to this information if this dissemination contravenes the law or a court order;
  • You have the right to request that your Personal Information be communicated to you or transferred to another organization in a structured and commonly used technological format;
  • The right to be informed of a confidentiality incident concerning your Personal Information which may cause you serious harm. To this end, we keep a register which lists all confidentiality incidents and we assess the damage they may cause;
  • You have the right to file a complaint with the Commission for Access to Information, subject to the conditions provided for by applicable law.
  • In order to comply with your request, you may be asked to provide appropriate identification or otherwise identify yourself.

5. Cookies and Other Tracking Technologies

We use cookies and other similar technologies (collectively, Cookies) to help us operate, protect and optimize the Website and the Services we offer. Cookies are small text files that are stored on your device or browser. They collect certain information during your visit to the Website, including your preferred language, the type and version of your browser, the type of device you are using and the unique identifier of your device. If some of the Cookies We use are deleted after your browser session ends, other Cookies are retained on your device or browser to enable us to recognize your browser when your next visit to the Website. The Personal Information collected through these Cookie Files is not intended to identify you. They make it possible in particular to guarantee the functioning of the Website, to improve the browsing experience of users and provide certain data which allows us to better understand the traffic and interactions which take place on Our Website as well as to detect certain types of frauds. Cookies do not cause any damage to your device and cannot be used to extract your Personal Information. We collect your IP address, information relating to your device and your operating system or browser, your journey and your browsing history on Our Website as well as your queries, your browsing preferences (the languages used), etc.
You can configure your browser so as to be informed of the installation of “Cookies” Cookies during your visit to the Website, so that you can decide, in each case, to accept or refuse the use of certain or all “Cookies” Witness Files. Please note that deactivating Cookies on your browser could harm your browsing experience on the Website and prevent you from using some of its features.
To find out more about how we use Cookies, you can consult our “Cookie Policy”.

6. Security measures

The Entity has implemented physical, technological and organizational security measures aimed at adequately protecting the confidentiality and security of your personal information against loss, theft or any non-access, disclosure, reproduction, communication, use, modification. allowed. These measures include:

Administratively, the adoption of a series of policies and procedures as part of the implementation of our information governance program which include:

  • regulate access, communication, conservation, depersonalization, including anonymization and/or, where applicable, destruction of Personal Information;
  • determine the roles and responsibilities of our employees throughout the life cycle of Personal Information and documents;
  • establish intervention and response procedures in the event of a confidentiality incident;
  • supervise the process of requests and complaints relating to the protection and processing of Personal Information.

On a technical level, the use of several means such as:

  • the use of a secure server. Any sensitive or credit information provided is transmitted via "Secure Socket Layer (SSL)" technology and then encrypted in Our payment gateway provider database only to be accessible by authorized individuals with special access rights to these systems, and are required to keep the information confidential;
  • the use of backup systems, network monitoring software, etc. ;
  • the use of encryption and separation of duties systems, access controls and carry out internal audits.

We have not exhaustively listed the set of measures we are putting in place given the public nature of this Policy.

Despite the measures described above, We cannot guarantee the absolute security of your Personal Information. If you have reason to believe that your Personal Information is no longer protected, please contact Our Privacy Officer immediately using the contact details provided in section 1b) above.

7. Modification of this Privacy Policy

We reserve the right to modify this Policy at any time in accordance with applicable law. If there are any changes, We will post the revised version of the Privacy Policy and update the updated date in the footer of the Privacy Policy. We will also inform you by email at least thirty (30) days before the effective date of the new version of our Policy. If you do not agree to the new terms of the Privacy Policy, We invite you to no longer use Our Website and our Services. If you continue to use Our Website or our Services after the new version of our Policy comes into effect, your use of Our Website and our Services will then be governed by this new version of the Policy.

8. Links to third party websites

From time to time We may include on Our Website references or links to Our Facebook page, websites, products or services provided by third parties (the “Third Party Services”). These Third Party Services, which are not operated or controlled by the Entity, are governed by privacy policies that are entirely separate and independent from ours. We therefore assume no responsibility for the content and activities of these sites. This Policy applies only to the Website and the Services We offer. The Policy does not extend to Third Party Services such as Our Facebook Page / such as Our Facebook Pages and YouTube.

9. Information relating to your rights to the protection of Personal Information under the General Data Protection Regulation (GDPR)

For the purposes of this privacy policy, We act as controller of your Personal Information. If you are from the European Economic Area (EEA), Our legal basis for collecting and using your Personal Information, as described in this Privacy Policy, depends on the information We collect and the specific context in which We collect them. We may process your Personal Data because:

  • We need to enter into a contract with you, such as when you use Our Service;
  • You gave us permission to do this;
  • The processing is in Our legitimate interests and does not override your rights;
  • To comply with the law.

If you reside in the European Economic Area (EEA), you have certain rights to protect your Personal Information. In certain circumstances, you have the following protective rights:

  • The right to access, update or delete the Personal Data that We have about you;
  • The right of rectification;
  • The right to object;
  • The right of restriction;
  • The right to portability;
  • The right to withdraw your data consent.

 Please note that We may ask you to verify your identity before responding to these requests.

You have the right to complain to a Personal Information Protection Authority about Our collection and use of your Personal Information. For further information, please contact your local data protection authority in the European Economic Area (EEA).

10. Reseller Services

We use reseller services. What is a reseller? In digital marketing, reselling (or retargeting) is the practice of serving ads across the Internet to people who have previously visited your website. It allows your business to make your website visitors appear to follow you across the Internet by showing ads for Our Service on the websites and platforms they use most.

11. Payment Details

With respect to credit card details or other payment information that you provide to Us, We undertake to ensure that this confidential information is stored as securely as possible.

12. Individuals under the age of 14

We do not knowingly collect or use Personal Information from anyone under the age of 14. If you are under 14 years of age, you should not provide your Personal Information to Us without the consent of your parent or guardian. If you are a parent or guardian and you learn that your child has provided Personal Information to Us without consent, please contact Us using the contact information provided in section 1(b) above to request that We delete the personal information from this child of our systems.

13. Applicable laws

The laws of Canada and Quebec, excluding its conflict of law rules, will govern this agreement and your use of the Website. Your use of the Website may also be subject to other local, provincial, national or international laws.