General Privacy Policy
What is Privacy
The privacy concept is very broad, very complex, and can be interpreted in a wide range of ways depending on the perspective form which one approaches it.
But it generally refers to being free from unwanted intrusion in our lives, which encompasses the right to “keep things private” about ourselves, especially if the knowledge of these “things” by others is susceptible of causing us harm.
This means that we must be able to control the circulation of our personal information and, to the extent permitted by law, decide who can know certain things about us and what these parties can do with that information.
What Privacy Means for Organizations
Organizations that collect and use personal information about individuals are expected to be transparent in regard to the use and sharing that they make of it, and they must adequately protect it from unauthorized access, modification, use and destruction.
They must also allow the individuals to have access to the personal information under their control as well as to request its correction when it is inaccurate, out-of-date or incomplete.
About Personal Information
Since privacy is largely (although not exclusively) about “personal information” (or personal data), it is important to define what is meant by that expression:
“Personal Information” is generally understood to include all the elements of information that reveal something about an identifiable individual:
- The individual’s “existential” characteristics, such as gender, birth date, place of birth, ethnic group, bodily and intellectual characteristics, genetics, DNA, blood type, etc.;
- The individual’s life accomplishments (or lack of), including education, work experience, interests, hobbies, preferences, learned languages, addresses over his or her lifetime, financial situation, criminal record (or not), social, political and religious affiliations, lifestyle, social status, etc.;
- Professional assessment and evaluative information about the individual, views and opinions expressed by other individuals about the individual, and the consequence that those assessments, views and opinions have had or are likely to have on the individual, etc.
Our Company’s Privacy Standards
Our privacy standards are in line with the requirements of the European Union General Data Protection Regulation (GDPR - https://gdpr.eu/what-is-gdpr/) which, as the toughest privacy and security code in the world, is fast becoming the international standard for privacy protection. Consequently, our privacy standards exceed the requirements of all of the Canadian privacy laws that apply to us.
Personal Information that we collect and create
We only collect and create the elements of personal information that are absolutely necessary to achieve our service objectives and fulfill our legal obligations. These typically include:
- Your name as provided to us by you during our interactions – by phone, email, etc.;
- Your home, work or contact address as provided by you during our interactions – by phone, email, in person, etc.;
- Your email address(es) and phone number(s) s provided by you during our interactions – by phone, email, in person, etc.;
- Your personal or corporate credit card or banking information as provided by you when paying an invoice;
- Your professional background information as provided by you during our interactions – by phone, email, in person, etc., for the purpose of assessing your training or consulting needs;
- Elements of your private or professional life as provided informally by you during our interactions – by phone, email, in person, etc.;
- Your place of work, job title and other work-related facts that you share with us during our interactions – by phone, email, in person, etc.;
- Your assessment in regard to the quality of our training and consulting services, to the extent that you identify yourself in the course evaluation forms or which you voluntary share with us during our interactions – by phone, email, in person, etc.
We may also gain access to personal information of various types about individuals as part of the following activities:
- While processing requests for access to records or personal information for government institutions under the applicable legislation;
- While conducting security reviews and administrative investigations for government institutions;
- While conducting inventories of records and information for government institutions;
- While conducting privacy reviews, privacy impact assessments and investigating privacy breaches for government institutions;
- While performing other functions for government institutions.
We do not participate in any marketing or advertising campaign that involve the use of personal information, and we do not maintain any mailing lists. Consequently, we do not collect or create personal information for those purposes.
How we Use the Personal Information Under our Control
We only use the personal information under our control for the specific purposes for which we collected it or created it.
How we Disclose the Personal Information Under our Control
We only share the personal information which is under our control with the following parties:
- With the employers of those individuals who attend our training sessions or who are involved in the consulting projects that we undertake for those organizations;
- With our contractors who perform services for us, such as accounting, the monitoring and maintenance of our website, etc.;
- With regulatory agencies, such as the Canada Revenue Agency, for the purpose of their audits and other types of verification;
- With credit card processing companies, who require the name of the credit card holders that are used by clients to pay our invoices;
- To other government institutions and agencies, when required by law.
How Long we Keep the Personal Information Under our Control
Our records and information retention schedules are established in compliance with the following requirements:
- In accordance with the applicable legislation, such as federal, provincial and territorial income tax legislation;
- In accordance with the requirements of our insurance policies;
- To meet our company’s business requirements and to respond to our clients’ requests for information after the delivery of our training and consulting services.
How we Protect the Personal Information Under our Control
As we do not use Cloud-based computer services, the personal information in our possession is constantly under our exclusive control, and we implement physical and IT-related security measures that adequately protect it against unreasonable access, modification, use and destruction.
About our Service Providers’ Privacy Standards
Since our privacy standards can only be enforced in regard to the personal information that is under our control, we cannot guarantee that the service providers on whom we rely for services such as our website, email and other Internet-based services, such as the platforms that we use to deliver our training courses, our phone service, the processing of credit card payments, the postal and courier services that we use as well as the hotel venues that we rent to deliver our training courses meet the our own privacy standards, as we exercise no control over their policies and operations.
That said, we constantly remain alert to the inherent risks of using other organizations to achieve our business objectives, and we act accordingly.
Your Right of Access to the Personal Information About You Which is Under our Control and Your Right to Request its Correction
You have the right to request access to the personal information that we have about you, and you also have the right to request the correction of that personal information.
You can do so by contacting us by:
Phone: 613-282-1794
Email: yvon@yvongauthier.com – please be aware that we cannot guarantee the confidentiality of correspondence exchanged by email
Regular mail: 25 Aveia Private, Ottawa ONT. K4A 0X1
Your Recourse
In accordance with the PIPEDA, you have a right to complain about the way in which we collect, create, use or otherwise handle your personal information.
Complaints must be sent to the Office of the Privacy Commissioner of Canada:
30, Victoria Street
Gatineau, Quebec
K1A 1H3
https://www.priv.gc.ca/en/
Toll-free: 1-800-282-1376
Phone: (819) 994-5444
TTY: (819) 994-6591
Questions?
Inquiries about how Yvon Gauthier Info-Training Inc. handles and protects personal information must be addressed to Yvon Gauthier by:
Phone: 613-282-1794
Email: yvon@yvongauthier.com – please be aware that we cannot guarantee the confidentiality of correspondence exchanged by email
Regular mail: 25 Aveia Private, Ottawa ONT. K4A 0X1