Last update: September 18, 2024
The Société des Marchés publics de Montréal is committed to respecting your privacy.
The present policy (“the Policy”) describes the methods and purposes for which the Société des Marchés publics de Montréal (“Marchés publics de Montréal”, “Montreal’s public markets”, “we”, “us”, “our”) collects, accesses, uses, handles, stores, protects and discloses personal information, data of a personal nature and any other information directly or indirectly related to an individual that could make it possible to identify that individual ( “Personal Information”) in the course of its conducting its activities, providing services and administering the organization (the “Activities”), in compliance with applicable laws.
The present Policy applies to the Personal Information collected about users or visitors of the Website of Montreal’s public markets or of our clients, partners, users, employees and other persons who do business with us (“you”, “Users”, “your”, “yours”).
The English version of this Policy is provided for your information. In case of discrepancy between this version and the original French, the French version shall prevail.
By virtue of participating in our Activities and using our website (the “Website”) you recognize, accept and consent to the present Policy and to any change in effect at the time of your participation. If you do not accept the Policy, please cease participating in our Activities and visiting our Website.
We collect your Personal Information in order to conduct and optimize our Activities. We handle your Personal Information solely for the express purposes for which you provide it, in compliance with the present Policy and with all applicable laws, including provisions respecting the required method of consent.
Specifically, we use your Personal Information to:
The Personal Information that you provide voluntarily
We collect your Personal Information when you directly and voluntarily send it to us, whether through our Website or in-person interaction, email, telephone, regular mail, online chat, online form, instant messaging, comments on our social media or by any other means. The Personal Information that you provide voluntarily may include:
The Personal Information that we collect
We collect your Personal Information when you participate in or use our Activities or Website, and when we receive it from third parties that assist us in optimizing our Activities. The Personal Information that we collect through third parties generally comprises data associated with your digital identity, collected in anonymized form during your online activities. Please note that these third-party sites are subject to their own policies respecting your Personal Information, and their policies may differ from ours. The data in question include:
Personal Information collected automatically by our Website
We collect certain Personal Information automatically when you visit our Website, including certain data concerning your computer or mobile device as well as data on your interaction with our Website, including your operating system, browser, make and model of device, IP address, and data on your navigation path on our Website. These data are collected automatically through the use of cookies and are not linked to your personal identity by Montreal’s public markets.
Cookies
Like many organizations operating a website, Montreal’s public markets may use cookie technology on its primary Website or any other website it owns. Cookies are small data files that are downloaded to your computer when you visit a website.
Personal Information gathered through analytical tools
When you access the Website, we collect certain data provided by third-party analytical tools or entities such as Google Analytics or your mobile service provider. These data may include sex, age, city and interests. These data are not linked to you personally and are provided to us in aggregate form by third-party analytics services.
Personal Information obtained from social media
We collect Personal Information transmitted by social media websites or applications when you engage with our accounts on such sites or applications. These sites and applications have their own policies respecting your Personal Information that may differ from ours and be applicable to you.
Please note that certain tools, guides and options are available to you for limiting the sharing of your Personal Information when you visit our Website. You can find them in your browser’s Settings.
We do not share or sell your Personal Information.
Access to your Personal Information is restricted to those employees who have the required access permissions for organizing our Activities. Your Personal Information is handled solely for the purposes described in the present Policy.
Your Personal Information may be handled using the services of technology service providers such as Microsoft, MailChimp, Adobe and other companies whose products and services are essential for our work on our Activities. This includes the suppliers of specialized advertising targeting services, who use certain data in a form that is not personally identifiable. Our service providers are required to protect your Personal Information against unauthorized access, collection, use or disclosure, and are held to the same standard for the protection of Personal Information as us. Our service providers agree in writing to preserve data confidentiality, and to refrain from using data in any manner other than the provision of services, and not to disclose your Personal Information to any third party.
In order to meet our legal obligations, we may be required to disclose the Personal Information in our possession to third parties, if expressly permitted or required by law, or if we are ordered to do so by an authority with jurisdiction, or by law, regulation, mandate, assignment or court order. We may disclose Personal Information in the course of legal proceedings, if it is necessary to do so in order to protect our rights or those of our Users.
We store your Personal Information until our Activities no longer require such storage, or until it is necessary to delete the information in order to meet our legal obligations. By consenting to the present Policy, you consent to the retention of your Personal information. We are committed to storing your Personal Information in compliance with applicable laws.
Your Personal Information is stored on electronic media and servers operated by service providers who are required to adhere to the same standard of protection of Personal Information as us, and to use security procedures that protect the integrity and confidentiality of the Personal Information. In addition, by virtue of agreements between Montreal’s public markets and their outside service providers, your Personal Information may also be hosted and/or transferred and stored on servers outside our jurisdiction in the course of providing the contracted services. By participating in our Activities, you agree to such transfers, hosting and storage of your Personal Information. In the event that we transfer Personal Information outside Quebec to our service providers so that they can collect, use, transmit or store Personal Information, we will comply with all applicable laws, for example by conducting a Privacy Impact Assessment.
We work with outside service providers specializing in data security in order to implement the best practices in information technology, cybersecurity, encryption and data management based on the principles of “least privilege” and “need to know.”
Data security measures have been implemented with respect to our Activities in order to protect against the loss, malicious use or alteration of data under our control, including your Personal Information. However, please note that no data security measure is guaranteed to be 100% effective. As a result, we cannot certify or guarantee the security of your Personal information or other data in our possession. You send us Personal Information and other data at your own risk. In compliance with applicable laws, we maintain a log of confidentiality incidents.
Right to access and correction
In compliance with applicable laws for the protection of Personal Information:
To access your Personal Information in our possession or to have any errors in such information corrected, you may submit a written request to the person responsible for protecting Personal Information indicated at the end of this Policy.
We will respond to your request promptly (no more than 30 days after receipt).
Right to withdraw consent
If you wish to withdraw your consent to the handling and storage of your Personal Information, please advise us by writing to the person responsible for protecting Personal Information indicated at the end of this Policy.
Upon receipt of your notice of withdrawal of consent, we will stop storing and/or disclosing your Personal Information within a reasonable time, which will vary depending on the Personal Information we possess and the purpose for which we collected it.
Please note that if you continue to use the Website or the Activities, it will not be possible to prevent the handling of your Personal Information. The only way to prevent all such handling is to refrain from visiting the Website, using the Activities and communicating with Les Marchés publics de Montréal.
Right to be forgotten
If the dissemination of your Personal Information (i) contravenes the law or a court order, or (ii) causes serious harm to your reputation or privacy, you can make a written request to our person responsible for protecting the Personal Information in our possession asking us to limit the disclosure of your Personal Information or that the hyperlinks associated with your name and that give access to your Personal Information be de-indexed (removed from search results). Our person responsible for protecting Personal Information will provide a written response to your request within 30 days of receipt, unless applicable government authorities extend the deadline for providing a response.
Right to portability
After receiving a written request from you, we will send, in a structured and commonly used data format, all of your digitized Personal Information that we have collected. At your request, this communication can also be sent to a person or organization authorized to collect your Personal Information.
Opposition
In some circumstances, you have the right to oppose our handling of your Personal Information that we carry out in order to meet your legitimate interests. Your rights in this matter depend, among other things, on your place of residence. To oppose the handling of your Personal Information, please send written notice to the person responsible for protecting Personal Information indicated at the end of this Policy.
Complaints
If you reside within the European Union, you have the right to file a complaint concerning the handling of your Personal Information with an authority responsible for enforcing privacy laws. The specific authority varies from country to country.
If you live outside the European Union, this Policy is governed by the applicable laws and regulations of Canada, and the Canadian authorities have exclusive jurisdiction for receiving all complaints or claims related to this Policy or to the handling of your Personal Information by Montreal’s public markets.
Verification
We reserve the right to verify the identity of persons wishing to access their Personal Information. All information collected for verification purposes will only be used for that purpose.
If you have any questions or concerns related to this Policy or to the handling of your Personal Information, or if you wish to exercise your rights or file a complaint, please contact Nicolas Fabien-Ouellet, executive director and person responsible for protecting Personal Information: confidentialite@marchespublics-mtl.com.
Among other things, the person responsible for protecting Personal Information is also responsible for approving the governance policies and practices related to the protection of Personal Information that we are required to establish and implement, and for participating in a Privacy Impact Assessment (“PIA”) when required by law.
Please note that we will make our best efforts to respond promptly to your questions, concerns or complaints.
If we discover that there has been a breach of our security measures resulting in a real risk of harm to you, we will contact you unless prohibited by law.
Amendments to this Policy
We may revise this Policy from time to time to reflect changes in our practices related to the management of Personal information and to comply with applicable legal requirements. If changes are made, the updated Policy will be posted on our Website.
Users who have provided Personal Information will be advised by email of any significant changes to this Policy.
Page Top