1. How personal information, defined as data that can identify you (such as your name, age, address, email, location, or IP address), is collected and processed.
2. Your rights concerning this information.
3. Who is accountable for processing this data.
4. To whom this information is disclosed.
5. The site’s stance on cookie usage.
This policy adheres to the regulations outlined in the Personal Information Protection and Electronic Document Act (PIPEDA) and Bill 25, overseen by the Commission d’accès à l’information in Quebec.
Information Collection by OBORO
OBORO typically collects information pertaining to online purchases, newletters, user participation in programming activities, administration for internal operations, and statistics requested by funders. The organization commits to using personal data only for its intended purposes or those consistent with the original collection.
Types of Personal Information Collected
OBORO collects personal information relevant to its mandate and activities, primarily obtained directly from users. This information includes names, addresses, email addresses, phone numbers, and occasionally banking and social security details. The organization may also gather data from other sources as needed.
When users visit the OBORO website, information such as IP addresses, connection locations, clicked links, consulted content, and connection date and time (cookies) may be collected.
Access and Disclosure of Personal Information
Personal information is not disclosed by OBORO without the individuals’ consent. When consent is granted, only necessary information is disclosed, and individuals are informed to the extent possible.
Access to personal information is limited to OBORO’s permanent team members who require the information for their duties. Any contracted individuals must comply with relevant laws, this policy, and internal procedures.
Protection of Personal Information
OBORO is dedicated to safeguarding personal information against loss, theft, unauthorized access, disclosure, alteration, or destruction. Security measures include staff training, need-to-know access, employee screening, and technical and physical safeguards.
OBORO seeks consent before collecting personal information, emphasizing express consent when possible. Consent can be expressed or implied, depending on circumstances and information type. Implied consent may be inferred from individual actions. If personal information is to be used for a new purpose, consent is sought again.
Retention and Destruction of Personal Information
Personal information is processed according to a predetermined life cycle. Information used to make decisions about an individual is retained for a minimum of two years and a maximum of seven years.
Access or Corrections to Personal Information
Individuals can informally access and correct their personal information collected by OBORO. Formal requests under privacy and access acts are also accommodated. Users can withdraw or change consent at any time, notifying OBORO within a reasonable timeframe.
For any inquiries or modifications to personal information, please contact the individual responsible for personal information protection.
Contact: Marianne Breton, firstname.lastname@example.org