Privacy policy

Last update: July 30, 2024

Synapse C attaches the utmost importance to the security of your personal information and is committed to processing it in accordance with industry norms and standards, only for the purposes for which it is collected as described in this Privacy Policy or in a specific notice to that effect. Synapse C is committed to ensuring that all individuals accessing and/or processing such data comply with the principles of this Policy.

However, the absolute safeguarding of this data is impossible given the inherent security limits of Internet transmission. Considering risk 0 does not exist, Synapse C will apply all measures of protection and security reasonably expected to mitigate risk of confidentiality loss of personal information transmitted to Synapse C. In this sense, the website user shares personal information taking in consideration that a risk remains. Once the information is received, Synapse C will treat it in accordance with the security principles set forth in this Privacy Policy.

1. Aims of this privacy policy:

Respect of your privacy and protection of personal information are essential to us. This is why we adopted this Policy to protect your data in accordance with the current laws.

To ensure this protection, Synapse C is committed to collecting, processing and sharing personally identifiable information only when the individual has consented, unless permitted or required by law.

The purpose of the Policy is to inform users of the purposes and manner in which Synapse C, or any person acting on its behalf, will collect and use their personal information. It is intended to be in plain language to ensure informed user consent.

For the purposes of this Policy, “personal information” means any information regarding an identifiable individual or information that allows an individual to be identified. As much as possible, we will anonymize, pseudonymize and/or aggregate it so that it can no longer be used to identify an individual.

2. Enactment

This Privacy Policy applies from 22 September 2023, replacing any existing previous version.

3. Scope

This policy applies to our website and all forms and components that may be contained on it. However, please note that our website may include links or references to third-party sites. This Policy ceases to apply when you leave our website and Synapse C is not responsible for the collection or processing of personal information by these third parties or via these external sources.

4. Individuals concerned

This policy applies to all persons who use our website. By using our website and its components, you acknowledge that you have read and understood this policy and consent to the processing of your personal data and information in accordance with it, as applicable.

5. Collected personal information

Synapse C may collect personal information in various forms, but it will only do so by lawful means and only for the necessary purposes disclosed or where permitted or required by law.

The following personal information may be collected during your visit to our website:

Data that you explicitly send us by submitting a form (Measurement C, Data C, contact form, newsletter subscription, document download form, etc.). Last name, first name, contact information, questions and requests, newsletter subscription preferences or any other information you may choose to provide to us in one of the fields of our forms.
Data relating to browsing on our website (cookies). Website interactions, location data, data from Google Analytics, etc.

6. Cookies and similar technologies

Synapse C may use cookies, web beacons, pixels, log files or other technologies to collect information about visitors to its website. Some are essential to the operation of the website and its components, some are generated by your browser, and others are used for analysis purposes in order to improve our product offer.

When you log in to our website, a message will appear allowing you to allow or refuse the collection of cookies depending on their type.

For more information, please see our cookies banner.

7. Data collection aims

The information collected is collected in accordance with the purposes and objectives set out in this privacy policy or in each of the forms.

To provide products and services: We will collect and process the data and information necessary to provide the requested service.
To provide and improve these products and services: The data collected during your interactions with our services may be used for the purpose of analyzing, reporting to our funders and improving the functioning of our products and services.

8. Consent modalities

We commit to obtain consent before collecting an individual’s personal information. We favor explicit consent whether it be obtained verbally, electronically, or in writing. In some instances, implicit consent can be reasonably inferred from an individual’s actions. For examples, giving a name and an address to receive a publication or a name and a phone number to receive an answer to a question is considered implicit consent regarding data collection containing personal information.

If we want to use personal information for a new purpose, we will describe the new purpose intended and will ask for consent again.

It is not always possible to obtain consent for the collection, use or disclosure of personal information, notably in the case of government requests. We will never disclose such information other than in accordance with this Policy, except as required or permitted by law.

Consent may be withdrawn at any time. If you wish to withdraw your consent, we invite you to contact the person responsible for the protection of personal information (see section 13).

9. Treatment procedures used

Synapse C takes the security of your personal information very seriously and commits to treat your personal information in accordance with industry standards and norms, and only for the purposes for which it is collected as described in this Policy or in a specific notice to that effect. Synapse C is committed to ensuring that all individuals accessing and/or processing such data comply with the principles of this Policy.

However, the absolute safeguarding of this data is impossible given the inherent security limits of Internet transmission. Considering risk 0 does not exist, Synapse C will apply all measures of protection and security reasonably expected to mitigate risk of confidentiality loss of personal information transmitted to Synapse C. In this sense, the website user shares personal information taking in consideration that a risk remains. Once information has been received, Synapse will treat it in accordance with the security principles described in this Policy.

10. Personal information access and control modalities

Synapse C ensures that all personal information in its possession is as accurate, current and complete as possible for the purposes for which it is used.

You have the right to request access to your personal information for verification purposes and request a correction if your personal information is inaccurate. If you believe that your personal information is inaccurate or if you wish to have access to your personal information, you may make a request using the contact information provided at the end of this Policy (see Section 13).

To the best of our ability, we will provide you with timely access to your personal information. However, for security reasons, we may need to verify your identity.

In addition, there may be circumstances where we will not be able to provide you with access to your personal information. Notably, when access may lead to the disclosure of another person’s personal information and that person refuses to consent to its disclosure, or when legal restrictions apply. Should such a situation arise, we will advise you of the reason why we cannot provide you with access to your personal information.

If your request relates to data appearing on third-party web pages or platforms, please contact those third parties directly.

11. Sharing and reason for sharing personal information with third parties

We do not share your personal information with companies, organizations, or individuals outside of Synapse C, except for our authorized vendors and partners who need access to the information to perform the services they provide to us, including, but not limited to:

Storage in cloud servers
Hosting our website
The use of technological tools that allow us to offer certain services (newsletter, forms, etc.)

Some of these suppliers may be located outside the province of Quebec. In all cases, we only use the services of reputable companies with privacy policies compatible with Quebec law.

Synapse C will not sell or rent your personal information to third parties.

We may also transmit personal information outside our organization if access to it is necessary to comply with applicable laws and regulations.

12. Retention of personal information

Synapse C retains the data collected only for the purpose for which consent was sought. Synapse C does not retain data beyond the fulfillment of the purposes for which it was collected. Only statistics or reports containing anonymized data may be stored for extended periods of time.

During the retention period, Synapse C takes all reasonable physical and technical measures to ensure the security of personal information.

Personal information is stored primarily on Microsoft’s Azure servers in Canada, but may be stored outside Canada if a third-party vendor or other entity to which we disclose personal information in accordance with this Policy is located outside Canada. In such cases, personal information may be subject to the local laws of the countries or territories in which the information is collected, used, disclosed or stored, and may be accessible to the governmental and law enforcement authorities of those countries or territories.

13. Data Protection Officer

You may access your personal information and request that it be updated, modified or deleted (withdrawal of consent) by contacting the person responsible for the protection of personal information (Data Protection Officer) at the following e-mail or postal address:

prp@synapsec.ca

Attention: Synapse C Data Protection Officer

520-1435 Saint-Alexandre Street
Montreal, Quebec, H3A 2G4
Canada

You may also contact that person with any questions, requests, complaints, concerns, or comments regarding this policy or the protection of your data in general.

14. Policy revisions

We make changes to this Policy from time to time. Any diminution of your rights under this Policy will not be enforced without your explicit consent. We always indicate the date on which the last changes were made. If the changes are significant, the persons concerned will be notified.