Policies and Practices Governing the Handling of Personal Information
9408-3078 Quebec Inc. (hereinafter “CLAWD”) is governed by the Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1) (the Act).
CLAWD Website Terms of Use
Our website is provided as a service to visitors. CLAWD reserves the right to modify, add or delete content on this website, at any time and for any reason, without notice.
Privacy Notice
Communications sent by email may contain personal and/or confidential information. If by mistake you receive a communication that is not intended for you, please notify the sender and destroy the communication, without sharing its contents or keeping a copy.
Browsing data is non-personal information since it does not allow a person to be identified. All of our business partners, without exception, are required to adhere, by law, to recognized principles regarding the protection of privacy.
The confidentiality of electronic communications through this website cannot be guaranteed. In the event of an urgent need to contact us or send us documents, please telephone or use an encryption method.
IP Address
When you visit our website, our servers may collect the IP address of your device (computer, mobile device, tablet, etc.) and the name of your internet service provider. By using our website, by consulting our social networks or specialized applications, you thereby consent to the use that we will make of the browsing data that is collected.
Cookies
Certain information is collected when you visit our website through files commonly known as “cookies”. These cookie files are saved directly on the hard drive of your device, by an HTTPS server. These files do not contain any personal information, they are simply unique numbers allowing you to be identified during your visits in order to facilitate the downloading of pages which have already been visited as well as to provide you with content likely to be of interest to you, all, in order to offer you an optimal experience.
Google Analytics
CLAWD uses the Google Analytics tool to collect data on the browsing activities of visitors to its website, including, without limitation, the source, the time spent on our website as well as the pages consulted.
Pixels
CLAWD or one of its partners may use “Spy Pixels” for the purpose of collecting data related to users of its website, including demographic data or browsing behavior.
Personal information
Personal information is information which concerns a physical person and which allows, directly or indirectly, to identify them. A writing, an image, a video and a sound recording may contain personal information. As part of its professional activities, CLAWD may collect personal information such as name, home address, date of birth, identity document information, etc.
Consent
CLAWD collects, uses and communicates personal information with the consent of the person concerned. To be valid, this consent must be manifest, free, informed and given for specific purposes. The person who consents to provide their personal information is presumed to consent to their use and communication for the purposes for which they were collected.
Any person may withdraw their consent to the collection, use and communication of their personal information by CLAWD at any time. In this case, if the collection is necessary for the conclusion or execution of the contract by CLAWD, CLAWD may not be able to comply with a service request.
Responsibility
CLAWD is responsible for the protection of the personal information it holds in the course of carrying out its activities. To this end, CLAWD has adopted the confidentiality policy as well as policies and practices governing governance with regard to personal information and the objective of which is to regulate the collection, use, communication, retention and destruction of personal information.
Collection of personal information
CLAWD only collects personal information necessary to carry out its business activities. For example, this may involve information collected for the purposes of carrying out a transaction, for the purposes of record keeping or any other purpose determined by CLAWD and brought to the attention of the person to whom it is disclosed asks for consent.
CLAWD invites its staff members to explain in simple and clear terms to the person concerned the reasons for collecting their personal information and to ensure their understanding.
CLAWD may also collect personal information verbally during correspondence with persons involved in a transaction or through various documents submitted as part of completing a transaction (identification documents, financial documents, powers of attorney, etc.).
Use and disclosure of personal information
Personal information is used and communicated for the purposes for which it was collected and with the consent of the person concerned. In certain cases provided for by law, personal information may be used for other purposes, for example, for the purpose of detecting and preventing fraud, for the purpose of providing a service to the person concerned.
CLAWD may be required to communicate personal information to third parties, for example, suppliers, co-contractors, subcontractors, agents, insurers, professionals, or outside Quebec.
CLAWD may, without the consent of the person concerned, communicate personal information to a third party if this communication is necessary for the execution of a mandate or a service or business contract. In this case, CLAWD establishes a written mandate or contract in which it indicates the measures that its agent must take to ensure the protection of the personal information entrusted to it, so that it is only used in the exercise of the mandate or contract and that they are destroyed after its end. The sub-contractor must also undertake to collaborate with CLAWD in the event of a violation of the confidentiality of personal information.
Before communicating personal information outside Quebec, CLAWD takes into account its sensitivity, the purpose of its use and the protection measures it will benefit from outside Quebec. CLAWD will only communicate personal information outside of Quebec if its analysis demonstrates that it will benefit from adequate protection in the place where it must be communicated.
Retention and destruction of personal information
When the purposes for which the personal information was collected or used have been accomplished, CLAWD will destroy it, subject to a retention period provided for by law. In this regard, CLAWD’s professional obligations require it to keep its files for at least six (6) years following their final closure.
Security measures
When collecting, using, retaining and destroying personal information, CLAWD applies security measures necessary to protect the confidentiality of personal information. More specifically, here are the applicable measures for the protection of personal information:
- **Access control**: Only authorized personnel have access to data and only for specific tasks.
- **Staff Training**: Regular training of staff on best practices in data management and information security.
- **Audit and Monitoring**: Regular audits are carried out to ensure compliance with security policies.
- **Regular Security Updates**: Software and systems are regularly updated to fix possible security vulnerabilities.
- **Firewall and antivirus**: Installation and maintenance of firewalls and antivirus software.
- **Backup protocols**: Regular and secure backups of data are performed and stored in a secure location.
- **Incident Response Plan**: An action plan is in place in the event of a data breach or other security incidents.
- **Secure Archiving**: Data is securely archived when its use by brokers is no longer necessary, in accordance with data protection laws. Only authorized internal personnel have access to it with a password.
- **Risk Assessment**: Regular risk assessments to identify and mitigate potential vulnerabilities.
- **Transparency and consent**: Individuals are informed about how their data is used and stored, and informed consent is obtained.
Privacy incident
A confidentiality incident is the access, use, communication of personal information not authorized by law or the loss of personal information or any other breach of the protection of personal information.
CLAWD has implemented a confidentiality incident management protocol in which the people who assist the Personal Information Protection Manager are identified and which provides for the concrete actions that must be taken in the event of an incident. This protocol provides in particular the responsibilities expected at each stage of incident management, including the measures to be taken to ensure data security.
Roles and responsibilities
- CLAWD
CLAWD:
Ensures the confidentiality of information through good information management practices. More particularly, CLAWD provides directives, training and instructions to staff members relating to the collection, use, storage, modification, consultation, communication and permissible destruction of personal information.
Deploys appropriate protection measures to reduce the risk of confidentiality incidents, for example, IT security, updating policies relating to personal information, training of its staff, etc.
Has standardized methods for filing documents containing personal information.
Has standardized methods for preserving documents containing personal information, particularly regarding the scanning procedure.
Manages physical and computer access to personal information based in particular on its sensitivity.
Proceeds with secure archiving of personal information. More particularly, she (he) gives directives or instructions to staff members relating to the secure archiving method, archiving deadlines, etc.
- Links to other sites – This website may include links and references to websites and documents published by third parties (“other sites”) for your convenience and information. CLAWD is in no way responsible for other websites and their activities, products, services, or content and has no control over these sites. We also reserve the right to demand the removal of hyperlinks to our website.
- Responsible for the protection of personal information
In accordance with the Law, CLAWD has appointed the Personal Information Protection Officer.
In particular, it ensures that these policies are respected and that they comply with applicable regulations. The name and contact details of this person appear in the “Right of access, withdrawal and rectification” section.
The Personal Information Protection Manager is responsible for managing confidentiality incidents and, in this context, takes actions provided for by law.
The Privacy Officer processes requests for access and rectification of personal information. It also handles complaints relating to the processing of personal information by CLAWD.
The Privacy Officer is consulted as part of an assessment of the factors relating to privacy for any project for the acquisition, development and redesign of an information system or electronic delivery of services involving the collection, use, communication, retention, archiving or destruction of personal information. He may suggest measures to ensure the protection of personal information in the context of such a project.
- Staff
A member of CLAWD staff may access personal information only to the extent that it is essential to the performance of their functions or mandate.
CLAWD staff member:
Ensures the integrity and confidentiality of personal information held by CLAWD.
Complies with all of CLAWD policies and guidelines on access, collection, use, disclosure, archiving, destruction of personal information and information security and follows the instructions that are presented to him.
Respects the security measures put in place at their workstation and on any equipment containing personal information.
Use only equipment and software authorized by CLAWD.
Ensures, when the time comes, the secure archiving of personal information in accordance with the instructions received. Immediately report to his superior any act of which he becomes aware that may constitute a real or suspected violation of security rules relating to personal information.
Right of access, withdrawal and rectification
An individual (or their authorized representative) may request access to their personal information held by CLAWD. An individual may withdraw their consent to the collection, use and disclosure of their personal information at any time. This withdrawal is then recorded in writing.
A person may ask to correct, in a file that concerns them, personal information that they consider to be inaccurate, incomplete or ambiguous.
CLAWD may refuse a request for access or rectification in the cases provided for by law.
Complaints
A person who considers themselves wronged may file a complaint regarding the processing of their personal information by CLAWD. This complaint will be processed diligently within a maximum of 10 working days by the Privacy Officer and a written response will be sent to you.
- **Receipt of the Complaint**: Upon receipt of the complaint, an acknowledgment of receipt will be sent to the complainant within 48 hours.
- **Registration of the Complaint**: The complaint is recorded in a dedicated tracking system to ensure effective and transparent monitoring.
- **Initial Assessment**: The Privacy Officer will assess the complaint to determine its validity and urgency.
- **Investigation**: A full investigation will be carried out to understand the circumstances surrounding the complaint. This may include interviews with relevant personnel and review of systems and activity logs.
- **Documentation**: All evidence and findings will be fully documented.
- **Decision and Corrective Actions**: Based on the findings, corrective actions will be taken if necessary, and a decision will be made regarding the complaint.
- **Notification to Complainant**: A written response detailing the findings of the investigation and the actions taken will be sent to the complainant within 10 business days.
- **Remedies**: If the complainant is not satisfied with the response, he or she will be informed of the available remedies, including the possibility of taking the complaint to the competent authorities.
- **Internal Review**: A process review will be conducted to identify lessons learned and make future improvements.
- **Archiving**: The complaint and all associated actions will be securely archived for future auditing needs.
For any questions or comments regarding personal information, exercising your rights, filing a complaint or obtaining additional information about our policies, please contact our Privacy Officer by email at notification@myclawd.com or by mail at the following address:
Clawd Technologies Inc.
c/o Privacy Officer
1470 rue Peel, suite 305
Montréal QC
Canada
CLAWD reserves the right to modify its privacy policy at any time, without notice. We suggest that you check this page for any updates or changes to our terms and conditions.
Applicable Law
These Terms of Use, your access to and use of this website, as well as all other related matters are governed by the laws applicable in Québec. All disputes arising from these must be submitted to the competent Québec judicial body in the jurisdiction of Québec.
