{"id":1587,"date":"2025-12-15T11:03:12","date_gmt":"2025-12-15T16:03:12","guid":{"rendered":"https:\/\/pavilloncoaticook.com\/privacy-policy\/"},"modified":"2026-08-05T13:44:15","modified_gmt":"2026-08-05T17:44:15","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/pavilloncoaticook.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<section id=\"block-69fa1340789c2\" class=\"block header-secondary block-spacing-before-md block-spacing-after-md\">\n\n\t<div class=\"header-secondary-background\">\n\n\t\t\n\t\t\n\t<\/div>\n\n\t<div class=\"header-secondary-foreground\">\n\t\t<div class=\"container\">\n\n\t\t\t<div class=\"header-secondary-caption\"><div class=\"header-secondary-path\">\n\n\t\n<\/div>\n<\/div>\n\t\t\t<div class=\"header-secondary-content\">\n\t\t\t\t<h1 class=\"h0\">Privacy Policy<\/h1>\n\n\t\t\t<\/div>\n\n\t\t\t\n\t\t<\/div>\n\t<\/div>\n\n<\/section><section id=\"block-69fa134079917\" class=\"block text block-spacing-before-lg block-spacing-after-md block-style-white\">\n\t<div class=\"container-md\">\n\t\t<div class=\"text-content wysiwyg\">\n\t\t\t<p>Purpose <br \/>1.1. This Privacy Policy governs the handling of personal information within the Pavillon des arts et de la culture de Coaticook (hereinafter the \u201cOrganization\u201d) and promotes best practices in this regard. <\/p>\n<p>1.2. The Organization recognizes the importance of protecting personal information and is concerned about how it is handled. It therefore commits to collecting, using, disclosing, and retaining only the personal information necessary for carrying out its activities and conducting its business. <\/p>\n<p>2.\u2003Scope of Application <br \/>2.1. This policy applies to all personal information held by the Organization in the course of its activities within the meaning of the Act Respecting the Protection of Personal Information in the Private Sector\u00b9, as well as any other applicable laws and regulations governing the protection of personal information (collectively, the \u201cAct\u201d). This includes, in particular, information relating to identity, health, social or family situation, employment, financial matters, education, or training of the individuals concerned (hereinafter, \u201cPersonal Information\u201d). <\/p>\n<p>2.2. Without limiting the generality of the foregoing, this policy applies to Personal Information relating to the Organization\u2019s staff members as well as its clients, suppliers, and partners.<\/p>\n<p>2.3. The person responsible for implementing this policy is the Privacy Officer:<\/p>\n<p>General Management of the Pavillon des arts et de la culture de Coaticook<\/p>\n<p>direction@pavillondesarts.qc.ca<\/p>\n<p>(hereinafter, the \u201cPrivacy Officer\u201d)<\/p>\n<p>3. Security Measures<br \/>3.1. Personal Information held by the Company is stored in secure locations, in accordance with generally accepted practices, and access to such Personal Information is limited solely to those Company employees who require it for the performance of their duties. <\/p>\n<p>3.2. The Company\u2019s employees are also aware of the importance of ensuring the security and confidentiality of all Personal Information held by the Company and follow procedures that protect the confidentiality of Personal Information and promote best practices in this area.<\/p>\n<p>3.3. The Company ensures the protection of personal information from the moment it is collected and implements security measures designed to protect it against use that does not comply with applicable law, and to prevent accidental loss, alteration, unauthorized disclosure or access, misuse, or any other form of illegal use.<\/p>\n<p>4. Collection of Personal Information <br \/>4.1. In the normal course of its activities and business operations, the Organization must collect Personal Information. <\/p>\n<p>4.2. The Organization collects only the Personal Information necessary for these purposes.<\/p>\n<p>4.3. Unless otherwise consented to, the Organization collects Personal Information through one or more of the following means:<\/p>\n<p>4.3.1. From the individual concerned<\/p>\n<p>4.3.2. Through interactions with the individual concerned, including via its website<\/p>\n<p>4.3.3. From the holder of parental authority or a legal guardian<\/p>\n<p>4.4. The Organization may collect Personal Information using technology that includes functions allowing identification, location tracking, or profiling.<\/p>\n<p>4.5. In this regard, the Organization ensures that the individual concerned is informed:<\/p>\n<p>4.5.1. That such technology is being used<\/p>\n<p>4.5.2. Of the means available to activate identification, location, or profiling functions<\/p>\n<p>4.6. For the purposes of paragraph 4.4, profiling refers to the collection and use of Personal Information to evaluate certain characteristics of an individual, including for the purpose of analyzing work performance, economic situation, health, personal preferences, interests, or behavior.<\/p>\n<p>5. Use of Personal Information <br \/>5.1. Through this policy, the Organization ensures that individuals whose Personal Information is involved understand the purposes for which their Personal Information is collected. <\/p>\n<p>5.2. With the consent of the individual concerned or, where applicable, as permitted under the Act, the Organization uses Personal Information for the following purposes:<\/p>\n<p>5.2.1. For clients:<\/p>\n<p>5.2.1.1. To provide entertainment services to the client<\/p>\n<p>5.2.1.2. To identify and ensure the ongoing delivery of quality services<\/p>\n<p>5.2.1.3. To ensure and facilitate communication with the client<\/p>\n<p>5.2.1.4. To communicate with other providers or organizations, where applicable, for service delivery<\/p>\n<p>5.2.1.5. To ensure and support billing and collection processes<\/p>\n<p>5.2.1.6. To comply with any other mandatory requirements prescribed by a governmental authority<\/p>\n<p>5.2.1.7. To carry out administrative and management activities, including resource planning, reporting, or evaluations<\/p>\n<p>5.2.1.8. For development purposes (including security-related development)<\/p>\n<p>5.2.1.9. For any other purposes that may be specified before or at the time Personal Information is collected<\/p>\n<p>5.2.1.10. For any other purposes required or permitted by the Act<\/p>\n<p>5.2.1.11. For purposes consistent with the above<\/p>\n<p>5.2.2. For employees, suppliers, and partners:<\/p>\n<p>5.2.2.1. For recruitment purposes (processing job applications and assessing a candidate\u2019s profile for potential employment within the Organization)<\/p>\n<p>5.2.2.2. To ensure and facilitate communication with the employee, supplier, or partner<\/p>\n<p>5.2.2.3. To support compensation, billing, and collection processes<\/p>\n<p>5.2.2.4. To carry out administrative, disciplinary, and management activities<\/p>\n<p>5.2.2.5. For marketing and business development purposes<\/p>\n<p>5.2.2.6. To communicate with other providers or organizations, where applicable, for service delivery<\/p>\n<p>5.2.2.7. To comply with any other mandatory requirements prescribed by a governmental authority<\/p>\n<p>5.2.2.8. For development purposes (including security-related development)<\/p>\n<p>5.2.2.9. For any other purposes that may be specified before or at the time Personal Information is collected<\/p>\n<p>5.2.2.10. For any other purposes required or permitted by the Act<\/p>\n<p>5.2.2.11. For purposes consistent with the above<\/p>\n<p>6. Disclosure of Personal Information<br \/>\n6.1. For purposes required or permitted by the Act, the Organization may provide Personal Information to its service providers and partners. <\/p>\n<p>6.2. The Organization may also share Personal Information with certain third parties, including the following:<\/p>\n<p>6.2.1. Third\u2011party service providers<\/p>\n<p>6.2.2. Government authorities and law enforcement agencies when required under applicable laws<\/p>\n<p>6.3. In this regard, the Organization commits to limiting the Personal Information it provides to third parties to only what is reasonably necessary for them to carry out their duties.<\/p>\n<p>6.4. Personal Information may be disclosed outside Qu\u00e9bec.<\/p>\n<p>6.5. Before disclosing Personal Information outside Qu\u00e9bec, the Organization ensures that the information will receive adequate protection by conducting a privacy impact assessment, taking into account the following elements:<\/p>\n<p>6.5.1. The sensitivity of the information<\/p>\n<p>6.5.2. The purpose for which it will be used<\/p>\n<p>6.5.3. The protective measures, including contractual safeguards, that would apply to the information<\/p>\n<p>6.5.4. The legal framework applicable in the jurisdiction where the information would be disclosed, including the personal information protection principles in force there<\/p>\n<p>6.6. Contracts entered into by the Organization with its service providers require them to maintain the confidentiality of Personal Information and include, among other things, an obligation for third parties to comply with the legal framework applicable to the Organization regarding the protection of personal information and privacy.<\/p>\n<p>6.7. Consent will be requested from individuals concerned if the Organization must disclose Personal Information to third parties for purposes unrelated to its regular operations and activities or for purposes incompatible with those for which the information was originally collected.<\/p>\n<p>6.8. Individuals may withdraw their consent to the disclosure or use of Personal Information collected by the Organization.<\/p>\n<p>7. Retention and Destruction of Personal Information<br \/>\n7.1. The Organization retains Personal Information only for the period necessary to fulfil the purposes set out in this policy and\/or to comply with its legal and regulatory obligations. <\/p>\n<p>7.2. In this regard, the Organization maintains a retention schedule for Personal Information that complies with its obligations.<\/p>\n<p>7.3. Once the retention period for Personal Information has expired, the Organization ensures its physical and technological destruction, or its anonymization, in accordance with best practices.<\/p>\n<p>8. Correction or Access to Personal Information<br \/>\n8.1. The Organization strives to ensure the accuracy of Personal Information and to keep it up to date. <\/p>\n<p>8.2. Should any changes occur regarding the Personal Information of its employees, clients, suppliers, or partners, the Organization expects to be notified without delay.<\/p>\n<p>8.3. Upon request from the individual concerned, the Organization will confirm, where applicable, the existence of a file concerning that individual.<\/p>\n<p>8.4. The individual concerned, or their representative where applicable, may submit a written request for access to or correction of their Personal Information. The Organization will consider such a request only if it is made in writing by a person who can establish their identity. <\/p>\n<p>8.5. The Privacy Officer within the Organization ensures that a written response to the access or correction request is provided no later than 30 days from the date the request is received.<\/p>\n<p>8.6. Where applicable, an individual who wishes to obtain a transcription, reproduction, or transmission of the Personal Information contained in their file will be informed in advance of any related fees.<\/p>\n<p>9. Privacy Incident Involving Personal Information<br \/>\n9.1. In the event of a privacy incident, or if there is doubt regarding the occurrence of such an incident, the Organization ensures compliance with the steps set out in its Privacy Incident Management Plan involving Personal Information, in order to take measures to protect the Personal Information involved, mitigate the risk of harm, and limit the consequences. <\/p>\n<p>9.2. A privacy incident includes:<\/p>\n<p>9.2.1. Unauthorized access to Personal Information under the Act<\/p>\n<p>9.2.2. Unauthorized use of Personal Information under the Act<\/p>\n<p>9.2.3. Unauthorized disclosure of Personal Information under the Act<\/p>\n<p>9.2.4. Loss of Personal Information or any other breach of its protection<\/p>\n<p>A privacy incident may result from an internal source (i.e., originating from an employee of the Organization) or an external source (i.e., originating from an entity or individual outside the Organization).<br \/>\n10. Privacy Impact Assessment<br \/>\n10.1. When designing, developing, or implementing a project or initiative involving Personal Information or likely to have an impact on individuals\u2019 privacy, the Organization will conduct, in accordance with the requirements of the Act, a Privacy Impact Assessment (hereinafter, a \u201cPIA\u201d). <\/p>\n<p>10.2. By way of example, the following projects require the Organization to conduct a PIA:<\/p>\n<p>10.2.1. Developing a new information system or a method for customizing a product or service<\/p>\n<p>10.2.2. Seeking new clientele or exploring new markets<\/p>\n<p>10.2.3. Using an algorithmic or artificial intelligence system<\/p>\n<p>10.2.4. Installing a video surveillance system<\/p>\n<p>10.2.5. Comparing different versions of databases or files<\/p>\n<p>10.2.6. Acquiring or merging organizations<\/p>\n<p>10.2.7. Using fingerprints, geolocation, facial recognition systems, connected devices, etc.<\/p>\n<p>10.3. The purpose of the PIA is to better protect Personal Information and better respect individuals\u2019 privacy.<\/p>\n<p>10.4. When required, the Organization ensures that the PIA is conducted in accordance with its internal documentation and processes.<\/p>\n<p>11. Privacy\u2011Related Questions and Concerns<br \/>\n11.1. Any questions or concerns regarding how the Organization handles Personal Information throughout its lifecycle may be directed to the Organization\u2019s Privacy Officer. <\/p>\n<p>12. Privacy\u2011Related Complaints<br \/>\n12.1. To file a complaint regarding non\u2011compliance with Personal Information handling procedures, an individual may contact the Privacy Officer. <\/p>\n<p>12.2. In such cases, the Organization ensures compliance with the steps set out in its Complaint Handling Procedure in order to address the complaint fairly.<\/p>\n<p>13. Updating this Policy<br \/>\n13.1. The Organization periodically reviews its policies and procedures. As such, the Organization may amend its Privacy Policy without prior notice.  <\/p>\n<p>[1] RLRQ c. P-39.1 <\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/section>","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_seopress_titles_title":"","_seopress_titles_desc":"This Privacy Policy governs the handling of personal information at the Pavillon des arts.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"both","_seopress_redirections_param":"","_seopress_redirections_type":301,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"inline_featured_image":false,"footnotes":""},"class_list":["post-1587","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/pages\/1587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/comments?post=1587"}],"version-history":[{"count":1,"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/pages\/1587\/revisions"}],"predecessor-version":[{"id":1588,"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/pages\/1587\/revisions\/1588"}],"wp:attachment":[{"href":"https:\/\/pavilloncoaticook.com\/en\/wp-json\/wp\/v2\/media?parent=1587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}