PRIVACY POLICY

www.skisaintbruno.ca
Ski Saint-Bruno

Type of site: e-commerce

Obligations regarding the application of a “privacy policy”

The provincial law to modernize legislative provisions regarding the protection of personal information, also known as “Law 25,” aims to protect Quebecers by making companies more accountable for the personal information they hold.

Ski Saint-Bruno is committed to respecting the privacy of individuals in accordance with the laws, regulations and standards applicable in Quebec regarding the protection of personal information.

The purpose of this privacy policy (the “Policy”) is to set out the general principles to which the Organization adheres as well as the practices we follow when we collect, use, communicate, retain and destroy the personal information of our clients, suppliers, business partners, employees and other persons concerned as part of our activities.

In accordance with the aforementioned provisions, Ski Saint-Bruno may collect personal information and data when required, and for the following purposes:

1. Collection of personal information and data
2. Use of the collected data
3. Who has access to collected data
4. The rights of site users
5. The site’s cookie policy

Applicable laws

This Privacy Policy complies with statements made under the Personal Information Protection and Electronic Documents Act (PIPEDA).

For residents of EU countries, the General Data Protection Regulation (GDPR) governs all data protection policies, regardless of where the site is located.

This policy is intended to govern under the GDPR. If there are any inconsistencies between this Policy and the GDPR, the provisions of the GDPR shall prevail.

For residents of the State of California, this Privacy Policy is intended to comply with the standards of the California Consumer Privacy Act (CCPA). If there are any inconsistencies between this document and the CCPA, State law shall apply.

Consent

Users agree that by using the Ski Saint-Bruno website, they consent to the following:

1. The terms and conditions set out in this Privacy Policy
2. The collection, use and retention of the data listed in this Policy

Personal information and data we process

Information and data collected automatically

When you visit and use our site, we may automatically collect and store the following information:

1. IP address
2. Location
3. Hardware and software details
4. Links a user clicks while using the site
5. Content a user views on our site

Information and data collected non-automatically

We may also collect the following data when you perform certain functions on our site:

1. First and last name
2. Age
3. Date of birth
4. Gender
5. Email address
6. Telephone number
7. Home address

This data may be collected using the following methods:

1. Purchase from the online store
2. Job application
3. Contact form

Please note that we only collect data that enables us to achieve the objective stated in this Privacy Policy. We will not collect any additional data without informing you first.

How we use personal data

Personal information and data collected on our site are used solely for the purposes specified in this Policy or indicated on the relevant pages of our site. We will not use your data beyond what we disclose.

The data we collect automatically is used for the following purposes:

1. Manage a problematic situation that may be brought to our attention
2. Analyze browsing data
3. Procéder à une analyse de données de navigation
4. Optimize the user experience

Data collected when the user performs certain functions on the Ski Saint-Bruno site may be used for the following purposes:

1. Communications
2. Mailing of purchased products
3. Creation of client accounts for season pass holders
4. Creation of client accounts for equipment rentals
5. Creation of client accounts for lesson bookings
6. Promotions

Parties with whom we share personal data

Employees
We may disclose to any member of the Ski Saint-Bruno organization user information and data solely applicable and required to achieve the objectives set out in this Policy.

Third parties

This Privacy Policy does not authorize Ski Saint-Bruno employees to share any personal user information or data with any third parties.

Other disclosures

This Privacy Policy does not authorize Ski Saint-Bruno employees to sell, transfer or share your information and data except in situations required under legal provisions en toute conformité émanant d’une requête introductive d’instance ou autres, procédurales, suivantes if the following apply:

1. It is required by law (applicable in the judicial territory of Longueuil).
2. It is related to a legal inquiry and/or procedure concerning you.
3. It gives Ski Saint-Bruno the opportunity to protect or justify its legal rights.
4. As part of the sale of Ski Saint-Bruno, the organization was required to submit certain information and/or data to a duly identified and designated potential buyer or group of buyers in accordance with applicable transactional procedures.

Notice

If you follow hyperlinks from the Ski Saint-Bruno site to any other site, be advised that Ski Saint-Bruno will not be responsible nor liable for any subsequent situational issues, as the Organization has no control over other sites’ privacy policies and practices.

How long we store personal data

Any information or data provided by our users will be retained for a maximum period of two (2) years, in compliance with the law.

In accordance with the security provisions implemented within its Organization, Ski Saint-Bruno shall notify identified users in the event that such retention may exceed the aforementioned period.

How we protect your personal data

The information and data stored in our computer system are secured in accordance with the applicable standards of Law 25 and are only accessible to authorized employees.

Ski Saint-Bruno employees are bound by a strict confidentiality agreement. A breach of this agreement may lead directly to dismissal.

Individuals under the age of majority (outside Canada)

For EU residents, the GDPR specifies that individuals under the age of 15 are considered minors for the purposes of data collection. Individuals who are minors must have the consent of a legal representative for their data to be collected, processed and used.

Your rights as a user

As a user, you have the right to access all personal information and data (nominative or other) belonging to you which you have freely and voluntarily sent to us.

In addition, you have the right to update or correct any personal information or data in our database provided that it is acceptable under the law.

Modifying or deleting your own collected information and data

In compliance with Law 25 on the protection of personal information and Bill 64 on the access to information, you may modify or delete your personal information and data at any time.

To do so, you must send your request directly to the Data Protection Officer at the following email address:

dpo@skisaintbruno.ca

Finally, you may also file a complaint directly with the Data Protection Officer at the above-mentioned email address if you believe or have information to the effect that you have been targeted by, affected by or suffered any prejudice whatsoever either directly or indirectly in connection with a privacy incident.

For additional general information

Feel free to contact us using one of the following options:

Telephone: 450-653-3441, ext. xxxx

Email: information@skisaintbruno.ca

Mailing address/in person: 550 Rang des Vingt-Cinq Est, Saint-Bruno, QC

J3V 0G6

Updated: 08-2023