{"id":36992,"date":"2023-11-21T14:55:19","date_gmt":"2023-11-21T18:55:19","guid":{"rendered":"https:\/\/www.hampstead.qc.ca\/?page_id=36992"},"modified":"2025-02-10T16:10:07","modified_gmt":"2025-02-10T21:10:07","slug":"privacy-and-confidentiality","status":"publish","type":"page","link":"https:\/\/www.hampstead.qc.ca\/en\/privacy-and-confidentiality\/","title":{"rendered":"Privacy and Confidentiality"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"36992\" class=\"elementor elementor-36992\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0bbec82 elementor-section-height-min-height elementor-section-boxed elementor-section-height-default elementor-section-items-middle\" data-id=\"0bbec82\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;slideshow&quot;,&quot;background_slideshow_gallery&quot;:[{&quot;id&quot;:37038,&quot;url&quot;:&quot;https:\\\/\\\/b2671802.smushcdn.com\\\/2671802\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/Privacy-2-2.png?lossy=1&strip=1&webp=1&quot;}],&quot;background_slideshow_transition_duration&quot;:501,&quot;background_slideshow_loop&quot;:&quot;yes&quot;,&quot;background_slideshow_slide_duration&quot;:5000,&quot;background_slideshow_slide_transition&quot;:&quot;fade&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-566e4d7\" data-id=\"566e4d7\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2616efb elementor-align-right elementor-widget elementor-widget-button\" data-id=\"2616efb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.legisquebec.gouv.qc.ca\/en\/document\/cs\/A-2.1\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Learn more<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8f05ba4 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8f05ba4\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-66 elementor-top-column elementor-element elementor-element-9abe4df\" data-id=\"9abe4df\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c9f7e75 elementor-widget elementor-widget-text-editor\" data-id=\"c9f7e75\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h1>The Town\u2019s commitment<\/h1><p>The Town of Hampstead is committed to protecting the privacy and safety of your personal information.<\/p><p>This Policy concerns you. It describes how we collect, use and disclose your personal information. It also explains how you can request access to this information or correct it, when necessary.<\/p><p>When you provide us with personal information in writing, verbally or online, via our website or one of our mobile applications, you consent to our use and disclosure of such information in the manner described in the Policy.<\/p><p>All requests regarding protection of personal information must be sent by email and be addressed to the Town Clerk and Legal Affairs Department at <a href=\"mailto:info@hampstead.qc.ca\">info@hampstead.qc.ca<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e10bd1 elementor-widget elementor-widget-toggle\" data-id=\"2e10bd1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"toggle.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<div id=\"elementor-tab-title-4831\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-4831\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-caret-right\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-caret-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Privacy Policy<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-4831\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-4831\"><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Prepared by : <\/strong>Access to Information and Privacy Committee<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy at a glance<\/span><\/h4><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">HOW :<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When you visit our website, download one of our mobile applications or contact us, we collect certain information about you that enables us to identify you.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">WHAT :<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We collect information that allows us to identify you, information about purchases and information about the use you make of our services.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">WHY :<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">To better serve you, answer your questions, handle your requests and manage our website and applications.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Who else is involved? Suppliers that help us process payments, provide a service or communicate with you also have access to certain information.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">WHERE :<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Mostly in Quebec, but some of our suppliers may also have access to your information outside of Quebec.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">YOUR RIGHTS :<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">You can request access to or the correction of your information by writing to us.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">YOUR CONSENT :<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">You have the right to withdraw your consent at any time, but this may have an effect on the services offered.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">What do we mean by \u00ab Personal Information \u00bb?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00ab Personal Information \u00bb is any information about an individual that makes it possible to identify them, either directly &#8211; using only this information &#8211; or indirectly &#8211; in combination with other information.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">How do we collect your personal information?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We collect your personal information when you :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Fill out one of our online forms;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Browse on our website;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In writing or verbally at one of our service points.<\/span><\/li><\/ul><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">What information do we collect and why?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We collect only the personal information we require in order to provide our municipal services. The personal information we collect is gathered in a variety of ways, including in writing, verbally or online. This includes our computer systems, online forms and the interactivity between you and our website. We also use cookies or log files to gather information about you.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Accordingly, we may collect the following information :<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">1)\u00a0\u00a0\u00a0 Information about your identity :<\/span><\/h5><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Last name, first name;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Address and postal details;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Email address;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Telephone or Fax numbers;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Any other personal information required as the case may be (date of birth, SIN, resume, credit card number, ).<\/span><\/li><\/ul><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">2)\u00a0\u00a0\u00a0 Website usage information :<\/span><\/h5><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Cookies or browsing logs;<\/span><\/li><\/ul><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Online correspondence or comments;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">User behaviour analysis systems,<\/span><\/li><\/ul><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">3)\u00a0\u00a0\u00a0 Documents related to municipal online services :<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In connection with our various online municipal services, your personal information is collected through various computer systems and forms, namely :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Online requests;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Access to information, claim or other service request forms;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Registration forms (e.g. Day Camp, Emergency Information System, Online Services, Newsletter, );<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Service forms (e.g. Taxation, Water meters, );<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Subscription and access form (e.g. Library, );<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">License application form, certificates of authorization or permit request;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Rental application form;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Financial support application form;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Employment application form;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Surveys,<\/span><\/li><\/ul><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">4)\u00a0\u00a0\u00a0 Why?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In connection with our various municipal services, we use the personal information collected for the following purposes :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Information and service offers;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Contacts and correspondence;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Registration or subscription to services and contests;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Follow-up, management and answers to requests, applications, registrations, subscriptions, licenses, certificates of authorization, permits, rentals, financial support, jobs, etc.;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Surveys and statistics;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Website management, service improvement, personalized welcome,<\/span><\/li><\/ul><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We occasionally have to use your personal information to :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Meet our legal obligations;<\/span><\/li><\/ul><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Prevent cyber threats and fraud;<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Respond to requests, warrants and orders from courts and other agencies;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Protect your rights and interests as well as ours;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Cooperate in legal proceedings or investigations,<\/span><\/li><\/ul><\/li><\/ul><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Who do we disclose your personal information to?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In some circumstances, we call on suppliers to help us serve you. Before disclosing your personal information with them, we take reasonable measures to ensure these suppliers undertake to comply with this Policy.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Where is your personal information stored?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We store and process your personal information in Quebec. In certain circumstances, it may be stored outside Quebec, when we use third-party service providers, mainly in Canada and the United States, but also elsewhere in the world.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Your personal information may be stored in countries other than your country of residence, which may have different privacy rules. In such cases, the information is subject to the laws of the country in which it is located, and may be disclosed to the governments, courts or law enforcement or regulatory agencies of that country.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">However, at all times, our practices regarding your personal information remain governed by this Policy and by the Quebec laws applicable to the protection of personal information.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When does this Policy not apply?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy does not apply to websites operated by third parties over whom we have no control. If you follow a link to a third-party site (for example, to register for an event), the privacy policy of that third party site will apply. We are not responsible for their privacy policies, procedures or practices. We encourage you to review these policies before submitting any personal information on these websites.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">How long do we keep your personal information?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We keep your personal information for as long as necessary for the purposes described in this Policy, to comply with our legal obligations, to settle disputes and to enter into agreements with suppliers, when applicable.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We take reasonable steps to delete obsolete or unnecessary personal information, for example, when you tell us that you no longer wish to use our services. You may request the correction or deletion of information at any time. On this subject, please see &#8220;What are your rights?&#8221; below<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">How do we protect your personal information? Measures<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We have implemented physical, administrative and technical measures to protect the confidentiality and security of the personal information we hold, most notably to prevent unauthorized access.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">We have a plan in the event of an incident involving personal information. It stipulates that we will notify the authorities and the persons concerned when such an incident presents a risk of serious harm, and that we will put in place measures to limit negative consequences.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Limited access<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Only authorized personnel who need to consult your personal information in carrying out their duties have access to it. In addition, employee accounts and access to servers and applications are subject to up-to-date security standards, including, among other things, double authentication.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Disclaimer<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">However, no security measure is absolute or fully guaranteed. If you have reason to believe that your interaction with us is no longer secure (for example, if you believe that the security of any information you have provided to us has been compromised), please contact us immediately at the address listed in the &#8220;How to contact us&#8221; section below.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">What are your rights?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Access, deletion and correction<\/strong><\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">You can request access the personal information we hold about you and, where applicable, request corrections as permitted or required by law. You may also request the deletion of outdated or unjustified information, or provide comments in writing.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">However, to ensure that the personal information we hold about you is accurate and up-to-date, please inform us promptly of any changes.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">At your request, and provided it does not entail serious practical difficulties, we can provide you with computerized personal information in a structured, commonly used technological format.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Withdrawal of your consent<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">You can also withdraw your consent to the use and disclosure of your personal information. However, certain services require the use of your personal information. If you<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">withdraw your consent, we may no longer be able to offer you these services. Some of the information we collect may not be retrievable by law (e.g. Taxation, Billing, Infraction, etc.).<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">To exercise your rights, please write to us at the address indicated in the &#8220;How to contact us&#8221; section below. Please note that we may ask you for identification to make sure it&#8217;s you.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">To find out more about your rights under Quebec privacy laws, visit <a href=\"https:\/\/www.cai.gouv.qc.ca\/english\/\">https:\/\/www.cai.gouv.qc.ca\/english\/<\/a>.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">How to contact us?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">For any question or comment about this Policy or the protection of your personal information, please contact the Person in Charge of the Protection of Personal Information (PCPPI) at the following coordinates :<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Person in Charge of the Protection of Personal Information (PCPPI)<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 Brinda Poovadee Permal-Vardin<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 Town Clerk<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 Town of Hampstead<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 5569 Chemin Queen Mary<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 Hampstead<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 H3X 1W5<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">\u00a0\u00a0 <a href=\"mailto:tclerk@hampstead.qc.ca\"><strong>tclerk@hampstead.qc.ca<\/strong><\/a><\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">If you have reason to believe that your interaction with us is no longer secure, please contact us at : <a href=\"mailto:info@hampstead.qc.ca\">info@hampstead.qc.ca<\/a>.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Our Person in Charge of the Protection of Personal Information will reply to requests for access to or correction of information and look into any complaints you may have regarding our practices with respect to your personal information.<\/span><\/p><h5><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Will this Policy be updated?<\/span><\/h5><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">If we make significant changes to this Policy, for example, to comply with new legal requirements, we will publish a notice of change 15 days before the changes take effect. The new version, along with the notice of change, will be made available on the website, with the date of the latest update.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy comes into effect on November 16, 2023.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<div id=\"elementor-tab-title-4832\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-4832\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-caret-right\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-caret-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Governance Policy regarding the Protection of Personal Information<\/a>\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-4832\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-4832\"><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><a href=\"https:\/\/www.hampstead.qc.ca\/wp-content\/uploads\/2023\/11\/Governance-Policy-regarding-the-Protection-of-Personal-Information.pdf\" target=\"_blank\" rel=\"noopener\">Governance Policy regarding the Protection of Personal Information<\/a><\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Prepared by : <\/strong>Access to Information and Privacy Committee<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">1.\u00a0 Foreword<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In carrying out its activities and fulfilling its mission, Town of Hampstead handles Personal Information, in particular information regarding visitors to its website, citizens and employees. In this respect, it recognizes the importance of respecting privacy and protecting the Personal Information that it holds.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">To meet its obligations in this area, the Town has prepared the present Policy. It sets forth the framework principles applicable to the protection of Personal Information held by the Town throughout the Life Cycle of the information and to the rights of the Persons Concerned.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Protecting the Personal Information held by the Town is the responsibility of any person who handles such information inherent in the performance of their duties or stemming from their relationship with the Town.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">2.\u00a0 Purpose<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">sets forth the Town\u2019s governance principles regarding Personal Information throughout its Life Cycle and the exercise of the rights of the Persons Concerned;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">provides a process for handling complaints regarding the protection of Personal Information;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">defines the roles and responsibilities relating to the protection of Personal Information at the Town;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">describes the training and awareness activities that the Town offers to its<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">3.\u00a0 Normative Framework<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy has been developed in a context governed most notably by the <em>Act respecting Access to documents held by public bodies and the Protection of personal information<\/em><\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">(CQLR, c. A-2-1). As provided in this Act, this Policy is accessible through the Town\u2019s website.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">4.\u00a0 Definitions<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">For the purposes of this Policy, the following terms mean :<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Access Committee <\/strong>: the Town\u2019s Access to Information and Privacy Committee.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>CAI <\/strong>: the Commission d\u2019acc\u00e8s \u00e0 l\u2019information du Qu\u00e9bec.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Life Cycle <\/strong>: the set of steps involved in the processing of Personal Information, namely the collection, use, disclosure, retention and destruction of such information.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Privacy Impact Assessment <\/strong>or <strong>PIA <\/strong>: the preventative approach aimed at better protecting Personal Information and respecting the privacy of individuals. It consists of considering all the factors that have positive and negative impacts on the privacy of the Persons Concerned.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Confidentiality Incident <\/strong>: any consultation, use or disclosure unauthorized by the law of Personal Information, or any loss or other breach of the privacy of this information.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Act <\/strong>: the <em>Act respecting Access to documents held by public bodies and the Protection of personal information <\/em>(CQLR, c. A 2 1).<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Person concerned <\/strong>: the individual whose Personal Information is involved.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Personal Information <\/strong>: any information about an individual that makes it possible to identify them, either directly using only this information or indirectly in combination with other information.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Person in Charge of Access to Documents and of the Protection of Personal Information or PCPPI <\/strong>: the person who, within the Town, performs this function, who responds to requests for access to documents and ensures compliance with and implementation of the Act.<\/span><\/p><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\"><strong>Sensitive Personal Information <\/strong>: any Personal Information that \u2013 by its nature, in particular its medical, biometric or otherwise intimate nature, or due to how it is used or disclosed \u2013 comes with a very high reasonable expectation of privacy.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">5.\u00a0 Scope<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy applies to the Personal Information held by the Town and to any person who handles the Personal Information held by the Town.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">6.\u00a0 Handling of personal information<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Personal information is protected throughout its Life Cycle in accordance with the following principle, except as provided by law.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">6.1.\u00a0 Collection<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town collects only the Personal Information necessary for carrying out its mission and operations. Before collecting Personal Information, the Town determines the purposes for which it will be handled.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Personal Information is collected from the Person concerned, from a legally authorized person or, in the case of a minor under the age of 14, from the holder of parental authority or guardian.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">At the time of collection and subsequently upon request, the Town informs the Persons Concerned, in particular, of why and how their Personal Information will be used and of their rights with respect to such information, for example by referring to its Privacy Policy or by means of a notice.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When the Act requires that consent be obtained, it must be clear, free, informed and provided for specific purposes. It is requested for each of these purposes, in simple, clear terms. This consent is valid only for as long as necessary for the purposes for which it has been requested.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">6.2.\u00a0 Use<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town uses Personal Information for the purposes for which the information has been collected. However, the Town may amend these purposes provided the Person Concerned has consented to it in advance.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">It may also use the information for secondary purposes without the consent of the Person Concerned in any of the following cases :<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if the use is for purposes consistent with those for which the information was collected;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if the information is clearly used for the benefit of the Person concerned;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if the information is necessary for the application of an act in Quebec, whether or not the law explicitly provides for its use;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if the use is necessary for the purposes of study, research or producing statistics and the information has been anonymized.<\/span><\/li><\/ul><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When it uses Personal Information for secondary purposes in one of the first three cases referred to in article 6.2.2, it must record the use in the register provided for the purpose, as described in article 7.3 of the Policy.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When an act expressly requires it or when the handling of Personal Information is deemed riskier for the Persons Concerned, the Town undertakes a PIA under article 8 hereof in order to mitigate the identified risks.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town prepares and keeps up-to-date an inventory of the Personal Information files it has collected, used and disclosed. At a minimum, this inventory includes :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the classes of information it contains, the purposes for which the information is kept and the method used to manage each;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the source of the information entered in each file;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the categories of the Persons Concerned by the information entered in each file;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the categories of persons who have access to each file in carrying out their duties;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the security measures taken to ensure the protection of the Personal<\/span><\/li><\/ul><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Any person who so requests has a right of access to the inventory, except with respect to information whose existence may be refused by virtue of the provisions of the Act.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">6.3.\u00a0 Disclosure<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Subject to the exceptions provided by law, the Town may not disclose Personal Information without the consent of the Person Concerned. The consent must be given expressly when Sensitive Personal Information is involved.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">If the Personal Information is disclosed to an agent or service provider as part of a mandate or a service agreement or to carry out a mandate, the Town indicates the measures it must take to ensure the confidentiality of the information, that it is used only in the exercise of its mandate or the performance of its contract, and that it is not retained after its expiry.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When the Personal Information is disclosed to third parties outside Quebec, the Town shall conduct a PIA in conformance with article 8 hereof. All disclosures to third parties are entered in the register provided for the purpose.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">6.4.\u00a0 Retention<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town takes all reasonable measures to ensure that the Personal Information that it holds is up-to-date, accurate and complete to serve for the purposes for which it is collected and used.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town keeps Personal Information for as long as necessary to carry out its activities, subject to the time limits specified in its retention schedule.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">6.5.\u00a0 Destruction and anonymization<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When the purposes for which the Personal Information was collected have been achieved, the Town takes reasonable steps to ensure that this information is destroyed or made anonymous, subject to the Archives Act (CQLR, A-21.1) and according to the time limits specified in the retention schedule and the Town\u2019s document management rules.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">7.\u00a0 Registers<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In accordance with the Act, the Town maintains the following registers :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Register of disclosures of Personal Information without the consent of the Person Concerned in the following cases :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when the Town discloses the identity of a Person Concerned to a person or a private body in order to collect information previously gathered by the person or body;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when the Town discloses Personal Information in order to apply a Quebec act, whether or not such a disclosure is explicitly provided by law;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when the Town discloses Personal Information in order to apply a collective agreement, decree, order, directive or regulation that establishes working conditions;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when the Town discloses Personal Information to an agent or service provider in connection with a mandate or service agreement;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when the Town discloses Personal Information for study, research or statistics purposes;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when, after conducting a PIA, the Town discloses Personal Information in one of the cases referred to in section 68 of the Act.<\/span><\/li><\/ul><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In theses cases, the register shall include :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the nature or type of information disclosed;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the person or body to which the information is disclosed;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the purpose for which the information is disclosed and, if applicable, a statement to the effect that it is a disclosure of Personal Information outside Quebec;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the reason justifying the<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Register of collection agreements entered into for the purpose of carrying out the functions or implementing a program of a public body with which the Town collaborates in order to deliver services or achieve a common mission. This register shall include :<\/span><\/li><\/ul><\/li><\/ul><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the name of the body for which the information is collected;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the identification of the program or attribution for which the information is necessary;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the nature or type of service to be provided or mission;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the nature or type of information collected;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the purpose for which the information is collected;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the category of person within the body collecting the information and within the receiving body that has access to the information.<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Register of uses of Personal Information within the Town for other purposes and without the consent of the Person Concerned if the use is consistent with the purposes for which it was collected, whether it is clearly for the benefit of the Person Concerned or is necessary for the application of an act in Quebec. This register shall include :<\/span><\/li><\/ul><\/li><\/ul><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">a reference to the second paragraph of section 65.1 of the Act that allows the use, i.e. the applicable legal basis;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">in the case referred to in subparagraph 3 of the second paragraph of section<\/span><\/li><\/ul><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">85.1 of the Act, the legislative provision that makes use of the information necessary;<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the category of person that has access to the information for the purpose<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Register of the disclosures of information regarding a Confidentiality Incident to a person or body likely to reduce the risk of serious harm associated with a Confidentiality Incident.<\/span><\/li><\/ul><\/li><\/ul><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This register shall include :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">a description of the Personal Information involved in the incident or, if this is not known, the reason for the inability to provide such a description;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">a short description of the circumstances of the incident;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the date on or time period during which the incident occurred or, if this is not known, an approximation of the time period;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the date on or time period during which the organization became aware of the incident;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the number of Persons Concerned by the incident or, if this is not known, an approximation of the number;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">a description of the factors that lead the organization to conclude that there does or does not exist a risk of serious injury to the Persons Concerned, such as the sensitivity of the Personal Information concerned, the possible malicious<\/span><\/li><\/ul><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">use of this information, the anticipated consequences of its use and the possibility that it be used for harmful purposes;<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if the incident presents a risk of serious injury, the dates on which notices were sent to the CAI and to the Persons Concerned, as required under the second paragraph of section 8 of the Act, as well as a statement indicating whether public notices were given by the Town and the reason why, if applicable;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">a short description of the measures taken by the organization subsequent to the incident in order to reduce the risk of injury.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">8.\u00a0 Privacy Impact Assessment<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town conducts a PIA, in particular in the following Personal Information handling situations :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">before undertaking a project to acquire, develop or overhaul an information system or electronic service delivery system that involves Personal Information;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">before collecting any Personal Information necessary for the exercise of powers, the performance of a duty and function or the updating of a program of a public body with which it collaborates to deliver services or carry out a common mission;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">before releasing Personal Information without the consent of the Persons Concerned to a person or organization that wants to use this information for study, research or statistics production purposes;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if it intends to disclose Personal Information without the consent of the Persons Concerned, in accordance with section 68 of the Act;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if it intends to disclose Personal Information outside Quebec or to assign to a person or organization outside Quebec the responsibility for collecting, using, disclosing or retaining such information on its behalf.<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When conducting a PIA, the Town shall take into account the sensitivity of the Personal Information to be handled, the purposes for which it is used, its quality, its distribution and the medium involved as well as the proportionality of the measures proposed for protecting the Personal Information.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Moreover, if the Personal Information is disclosed outside Quebec, the Town shall ensure that it is adequately protected, in particular with respect to the generally accepted principles for the protection of Personal Information.<\/span><\/li><\/ul><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">A PIA is carried out to demonstrate that the Town has met all its Personal Information protection obligations and that all measures have been taken to effectively protect the information.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">9.\u00a0 Research Activities and Access to Personal Information<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Researchers may request access to Personal Information for research purposes. The request should be submitted to the Town\u2019s PCPPI.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">When the PIA concludes that Personal Information may be disclosed for this purpose, the Town shall enter into an agreement with the researchers which contains the provisions required under section 2.3 of the Act and any additional measures specified in the PIA.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">10.\u00a0 Surveys<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The following protective measures apply to Personal Information collected or used in connection with a survey, including an assessment by the Access Committee of the following :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the need for the survey;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the ethical aspect of the survey, taking into account, in particular, the sensitivity of the Personal Information collected and the purpose for which it is to be used;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the rules governing the collection and retention of Personal Information from<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">11.\u00a0 Rights of the Persons Concerned<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Subject to the provisions of the applicable laws, any Person Concerned whose Personal Information is held by the Town shall have the following rights :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the right to access their Personal Information held by the Town and to obtain a copy of it in electronic or non-electronic Unless doing so entails serious practical difficulties, computerized Personal Information collected from a Person Concerned and not created or inferred from Personal Information about them shall be sent to them in a structured, commonly used technological format on their request;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the right to have any incomplete or inaccurate Personal Information held by the Town corrected;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the right to be informed, if applicable, that Personal Information is used in making a decision using automated processing.<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Although the right to access may be exercised at any time, access to the documents containing the information is subject to certain exceptions specified in the Act.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Documents containing Personal Information may be viewed on site or made accessible in another manner, with or without the payment of fees. If applicable,<\/span><\/li><\/ul><\/li><\/ul><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">the Town shall inform the Person Concerned of the requirement to pay fees before their request can be processed.<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Requests to access Personal Information by the Persons Concerned may be made orally or in writing. Oral requests are handled informally and may not receive a written reply.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Requests to access Sensitive Personal Information shall be made in writing and receive a written reply.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Requests to access Personal Information shall be specific enough to enable the PCPPI to locate the requested information. The right of access applies only to existing Personal Information.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">12.\u00a0 Complaint Handling<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Any complaint regarding the Town\u2019s Personal Information protection practices or its compliance with the requirements of the Act must be submitted to the PCPPI, who shall respond to the complaint in the 20 days following its receipt.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">13.\u00a0 Security of Personal Information<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town implements reasonable security measures to ensure the privacy, integrity and availability of the Personal Information collected, used, disclosed, retained and These measures take into account the level of sensitivity of the Personal Information, the purpose for which it is collected, its quality, its location and the medium.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town manages the access rights of the members of its personnel so that only those subject to a confidentiality agreement and needing to access Personal Information as part of their duties have access to it.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">14. Privacy Incidents<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">All Confidentiality Incidents are handled in accordance with the Town\u2019s Confidentiality Incident Response Plan. The Town takes reasonable measures to reduce the risk of injury and prevent new incidents of a similar nature.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Any Confidentiality Incidents are reported to the PCPPI and entered in the Register of Confidentiality Incidents, in accordance with article 7.4 of this Policy.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">If a Confidentiality Incident presents a risk of serious harm for the Persons Concerned, the Town shall promptly inform them and the CAI.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">15. Roles and Responsabilities<\/span><\/h4><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Protecting the Personal Information held by the Town is predicated on the commitment of all who handle such information, in particular the following :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The PCPPI :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">ensures that Personal Information is protected throughout its Life Cycle, from collection through destruction;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">sits on the Access Committee;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">complies with the requirements related to requests for access or correction, including :<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">notifying the applicant of the date their request was received;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">informing the applicant of the time limits and of their right of review;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">replying to the request within 20 days or, if processing the request does not appear possible without interfering with the Town\u2019s normal operations, within a period of 10 additional days, after having notified the applicant in writing;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">provide assistance to the applicant in identifying the document likely to contain the sought information when their request is imprecise;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">justify any refusal to approve a request for access;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">at the applicant\u2019s request, provide assistance to help them understand the resulting decision;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">issue a decision in writing and send a copy of it to the applicant. This shall be accompanied by the text of the provision on which the refusal is based, if applicable, and a notice informing them of the procedure for review and stating the time period during which it may be exercised;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">ensure that the information concerned by the request is kept for the time necessary to allow the applicant to exhaust the recourses provided by<\/span><\/li><\/ul><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">oversees the keeping of the registers listed in article 7 of this Policy;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">takes part in assessing the risk of serious harm related to a confidentiality incident, in particular as regards the sensitivity of the information concerned, the anticipated consequences of its use and the likelihood that the information will be used for malicious purposes;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">if applicable, verifies the confidentiality obligations related to the disclosure of Personal Information in connection with mandates or service agreements awarded to third-parties, in accordance with article 6.3.2 of this Policy.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Access Committee :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">ensures measures are implemented to raise the awareness of Town employees and management and provide training to them about the obligations and practices regarding access to information and the protection of Personal Information;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">develops the principles of information distribution;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">approves this Governance Policy Regarding the Protection of Personal Information;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">issues guidelines on the use of computerized marketing tools involving data disclosure and profiling;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">identifies the main risks involved in protecting Personal Information and informs management so that corrective measures can be proposed;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">approves any exemptions from the general Personal Information protection rules that have been established;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">issues guidelines on the protection of Personal Information, in particular regarding the retention of such information by third parties and outside Quebec;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">is consulted, from the start of a project and for the purposes of the PIA, on all projects to acquire, develop or overhaul an information system or electronic service delivery system that involves Personal Information :<\/span><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">ensuring that the PIA process is proportional to the sensitivity of the information concerned, to the purposes for which it is used, to the quantity of information, to the distribution of the information and to the medium on which it is stored;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">when necessary, ensuring that the project allows the Person Concerned to be informed of the computerized Personal Information collected from them in a structured, commonly use technological format;<\/span><\/li><\/ul><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">escalates any recommendations not followed up on to the PCPPI;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">shall be informed of any Confidentiality Incident involving Personal Information and advise the Town regarding the action to take in response;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">in the event of a Confidentiality Incident, reviews the Confidentiality Incident Response Plan;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">assesses the need for a survey, the ethical aspect of the survey, taking into account, in particular, the sensitivity of the Personal Information collected and the purpose for which it is to be used, and the rules governing the collection and retention of Personal Information from surveys;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">reviews any matter of interest relating to the protection of Personal Information;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">reviews the video surveillance measures and ensures privacy is protected when such surveillance is used.<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Any person who handles Personal Information held by the Town :<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">acts prudently and incorporates the principles set forth in this Policy into their activities;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">accesses only the information necessary to carry out their duties;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">incorporates and keeps information only in the files needed to carry out their duties;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">stores these files so that only authorized persons may access them;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">protects access to the Personal Information in their possession or to which they have access by using a password or otherwise;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">refrains from disclosing the Personal Information of which they become aware in the course of carrying out their duties unless duly authorized to do so;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">refrains from keeping, at the end of their tenure or contract, the Personal Information obtained or collected as part of their duties and maintains their confidentiality obligations;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">destroys any Personal Information in accordance with the Town\u2019s destruction procedure;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">takes part in the protection of Personal Information awareness and training activities intended for them;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">flags any shortcoming, Confidentiality Incident or other situation or irregularity that could in any way compromise the security, integrity or confidentiality of Personal Information in accordance with Town\u2019s established procedure.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">16. Awareness Activities<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">The Town offers training and awareness-raising activities to its personnel on the protection of Personal Information. In particular, it has :<\/span><\/p><ul><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">trained its personnel and municipal council on Confidentiality Incident and best practices for protecting Personal Information;<\/span><\/li><li><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">provided a table of good practices in the protection of Personal Information to its personnel and to the municipal council.<\/span><\/li><\/ul><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">17. Sanctions<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">Any person who violates this Policy may be subject to disciplinary action, up to and including dismissal.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">18. Update<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">In order to follow the evolution of the normative framework applicable to the protection of Personal Information and to improve the protection of Personal Information, this Policy may be updated from time to time. Please visit the Town&#8217;s Website to consult the most recent version.<\/span><\/p><h4><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">19. Coming Into Effect<\/span><\/h4><p><span style=\"font-size: 1.6rem; font-family: georgia, palatino, serif;\">This Policy comes into effect on November 16, 2023.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-d565a74\" data-id=\"d565a74\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Learn more The Town\u2019s commitment The Town of Hampstead is committed to protecting the privacy and safety of your personal information. This Policy concerns you. It describes how we collect, use and disclose your personal information. It also explains how you can request access to this information or correct it, when necessary. When you provide us with personal information in writing, verbally or online, via our website or one of our mobile applications, you consent to our use and disclosure of such information in the manner described in the Policy. All requests regarding protection of personal information must be sent<\/p>\n","protected":false},"author":11,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-36992","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/pages\/36992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/comments?post=36992"}],"version-history":[{"count":0,"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/pages\/36992\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hampstead.qc.ca\/en\/wp-json\/wp\/v2\/media?parent=36992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}