Privacy Policy

Introduction

As a responsible company, the BROSSARD group (Appendix on the companies comprising the BROSSARD group) places the highest priority on the protection of the personal information of its customers and partners by implementing procedures and technical solutions in compliance with cybersecurity standards and applicable regulations, including the Law modernizing legislative provisions on the protection of personal information in Quebec and the relevant laws and regulations concerning privacy protection in Canada.

1. Personal information management

1. What personal information do we use?

Personal information" (PI) is any information that relates to a natural person and makes it possible, directly, or indirectly, to identify that person. This definition applies to information collected and stored by the BROSSARD group or by a third-party partner, regardless of the medium on which it is stored or the form in which it is accessed.

The categories of personal information collected by the BROSSARD Group are indicated below (non-exhaustive list):

  • Identifying information: surname, first name, postal address, cell phone number, personal e-mail address, nationality, age, age range, date of birth, marital status, avatars, photo, prizes or awards, postal code, country or town of birth, etc.
  • Commercial information: transaction history, requests for information and quotes, etc.
  • Application, human resources and hiring information: resume, driver's license, training, level of education, grade level, experience, letters of recommendation, references, work history, hobbies, categories of interest, community involvement, membership in clubs / charities (other than political or religious), educational program, school records, test / exam results, high school diplomas, grades / GPA, interview information, etc.
  • Information on computer and digital activity: IP address, MAC address, logs, device type, etc.
  • Account information: roles and permission, settings and preferences, login, passwords, etc.
  • Cookies: Cookies are small files that can be downloaded to a visitor's device when visiting and using the Brossard Leasing website. They allow for the recognition of devices and the storage of information about users' preferences or previous actions. The BROSSARD group may use cookies to record user preferences, optimize the design of its website, or for business and promotional purposes. Cookies also help us identify the most popular sections of our website and enable us to provide content that more precisely meets the needs of customers while improving our service. Finally, some navigation cookies are necessary for strictly technical reasons. They facilitate navigation and enhance the user-friendliness of websites and applications.
  • Geolocation: trucks are geolocated to comply with legal requirements.
  • Video surveillance: films from the video surveillance system that identify individuals.

PRs, like all confidential data, must be identified (file title, etc.), to facilitate management and protection. 

2. For what purposes is your personal information collected and processed?

In certain circumstances, your personal information is essential for the conclusion of a contract or to comply with certain legal obligations.

When you consent to the collection of your personal information, the BROSSARD Group collects and processes your personal information for the following purposes:

  • Prospecting and commercial transactions
  • Customize your website;
  • Use of services offered by the BROSSARD group;
  • Transaction management: ordering, shipping, invoicing, payment;
  • Sends commercial communications relating to our company or selected partner companies;
  • Notifications or e-newsletter.
  • Human resources and administration:
  • Training and development;
  • Financial management: Payroll and other;
  • Pension plan management;
  • Group insurance management;
  • Recruiting: Background and diploma checks, conducting interviews, organizing recruitment events, checking references, gathering information on candidates who have applied for job offers, identifying and attracting qualified candidates;
  • Management of profiles, applications and exchanges with the BROSSARD group.
  • Research and development: to improve products, websites, applications, services, and user experiences, and for other research and analysis purposes to improve our products, services, activities, operations, and processes.
  • Audit, reporting, and investigations: statistics, internal investigations, ethical and compliance incident reporting, conflict of interest management, export control compliance, litigation management, corporate legal obligations, and mandate management.
  • Legal compliance: compliance with legal obligations, in response to an authority, a court order or a request for disclosure of documents.
  • Protect ourselves and others: when it is necessary to investigate, prevent or act regarding illegal activities, suspected scams, potential threats to individuals, violations of policies, conditions, or other regulations.
  • Information analysis: optimization of IT resources, improvement of the BROSSARD Group's performance and processes, guarantee and preservation of the BROSSARD Group's interests, compliance with social agreements and/or legal obligations.

Personal information is only used for the purposes stated above, unless we reasonably believe that we need to use it for another purpose that is also consistent with the original purpose. In such cases, the holder of the personal information must be informed prior to any processing.

We will only use your personal information for the purposes set out above, unless we reasonably consider that we need to use it for another reason and that this reason is compatible with the original purpose. In this case, we will inform you prior to processing and send you the appropriate privacy notice.

 

Personal information is collected in the following ways (non-exhaustive list):

  • Resume;
  • Collection of personal information from employees (inspection reports, employment contracts, pension plan enrolment, group insurance plan enrolment, payroll records, etc.);
  • Commercial transactions (contracts, etc.) ;
  • Newsletter subscription;
  • Navigation on BROSSARD group information systems;
  • Geolocation system;
  • Video surveillance

3. Consent

Except in the cases provided for by law, the user's consent to the disclosure of his personal information must be explicit, free, informed and intended for the purposes defined above.

Consent is obtained by the following means (not exhaustive): handwritten signature, electronic signature, click box.

Consent is obtained separately for each purpose.

Consent is valid only for the time necessary to achieve the purposes for which it was requested.

Consent for minors under the age of 14 is given by the parent or guardian. The consent of minors aged 14 and over is given by the minor, the holder of parental authority or the guardian.

Waiver of consent

Consent to the collection or disclosure of personal information is not required in the following cases:

  • Disclosure of personal information required to complete a commercial transaction;
  • Disclosure of personal information for statistical, research or production purposes;
  • Other cases provided for by law: communication to the Public Prosecutor, prosecution of an offence under a Quebec law, application of a collective agreement, emergency involving endangerment, etc.

4. How long is your personal information kept?

In accordance with the law modernizing the protection of personal information, we process and store your personal information for as long as is strictly necessary for the purposes for which you have given your consent or if it is necessary to comply with our legal and contractual obligations.

 

After the specified retention period, your personal information is permanently destroyed or made anonymously.

5. Decision-making based exclusively on automated processing of personal information.

If the BROSSARD Group were to use such a process, we would inform you in advance and inform you of your rights, including the possibility of rectifying the information used to make the decision and the right to make comments.

6. Protecting your personal information

The BROSSARD Group complies with current regulations and standards governing the protection of personal information and the security of information systems.

 

We apply technical security and incident response measures to protect the personal information we manage (or that is entrusted to our selected partners) against accidental or intentional manipulation, loss, destruction, and access by unauthorized persons.

Our safety procedures are continually improved in line with new technologies.

7. Disclosure of personal information outside Québec

The personal information we collect may be stored, processed, and transferred in any country or region in which the BROSSARD Group operates to enable us to use that information in accordance with this policy.

 

In the case of a transfer outside the province of Quebec, a Privacy Impact Assessment (PIA) is carried out to verify that your personal information will benefit from the appropriate level of protection and confidentiality.

2. Your rights

You may exercise your privacy rights at any time in the circumstances provided for by law:

  • Withdrawal of consent: You have the right to withdraw your consent to the use of your personal information.
  • Right of access and rectification of personal information held about you: Access to your personal information is free of charge. You have the right to obtain confirmation that personal information concerning you is being processed by the BROSSARD Group and the right to ask what specific personal information is being processed.

A copy of your personal information is available upon request.

You have the right to request the rectification of any inaccurate personal information.

  • Right to be forgotten in certain cases, notably when personal information is no longer required for the purposes for which it was collected or when the dissemination of personal information contravenes the law, you have the right to request the deletion of your personal information as well as the de-indexation of any hyperlink attached to your name.
  • Right to portability of personal information: you have the right to receive your personal information in a structured, commonly used, and machine-readable format and/or to transmit this information to another data controller.

The BROSSARD Group Privacy Officer will respond within 30 days of receiving your request. If no response is received within this period, the request is deemed to have been refused.

3. How can you exercise your rights or file a complaint?

If you wish to exercise your rights, file a complaint about the processing of your personal information or have any questions regarding the processing of your personal information, you may contact Groupe Brossard's Privacy Officer by the following means:

 

 

  • Postal address:

 

Privacy Officer

Brossard Leasing

2190 Hymus Boulevard

Dorval, Quebec, H9P 1J7

 

If in doubt about your identity, we may ask you to provide proof of identity.

If you are still not satisfied, you can contact Quebec's personal information protection control authority directly: Commission d'accès à l'Information du Québec (CAI).

4. Modification of the privacy notice

The BROSSARD Group will regularly update this privacy notice to reflect changes in our practices, services and regulations relating to the protection of personal information. We will inform you of any substantial changes in the way we handle your personal information.