Privacy policy

Privacy policy

Last update: September 22, 2023

Synapse C takes the security of your personal information very seriously and commits to treat your personal information in accordance with industry standards and norms, and only for the purposes for which it is collected as described in this Policy or in a specific notice to that effect. Synapse C is committed to ensuring that all individuals accessing and/or processing such data comply with the principles of this Policy.

However, the absolute safeguarding of this data is impossible given the inherent security limits of Internet transmission. Considering risk 0 does not exist, Synapse C will apply all measures of protection and security reasonably expected to mitigate risk of confidentiality loss of personal information transmitted to Synapse C. In this sense, the website user shares personal information taking in consideration that a risk remains. Once information has been received, Synapse will treat it in accordance with the security principles described in this Policy.

1. Aims of this privacy policy:

Respect of your privacy and protection of personal information are essential to us. This is why we adopted this Policy to protect your data in accordance with the current laws.

To ensure this protection, Synapse C will not collect, process, and share any information that can serve to identify an individual without their consent, unless it is allowed or obligated by the law.

The purpose of this Policy is to inform users of why and how Synapse Cor any individual acting on its behalf, will collect and use their personal information. It is intended to be in plain language to ensure informed user consent.

For the purposes of this Policy, “personal information” means any information regarding an identifiable individual or information that allows an individual to be identified. As much as possible, we will anonymize, pseudonymize and/or aggregate it so that it can no longer be used to identify an individual.

2. Enactment

This Policy applies starting September 22, 2023 replacing any existing version.

3. Scope

This Policy applies to ourwebsiteand all forms and components it may contain.However,please note our website mayinclude links or references to third-party websites. This Policy ceases to apply when you leave our website and Synapse C is not responsible for the collection or processing of personal information by these third parties or via these external sources.

4. Individuals concerned

This Policy applies to all individuals who use our website. By using our website and its components, you acknowledge that you have read and understood this Policy and consent to have your data and personal information processed in accordance with it, where applicable..

5. Collected personal information

Synapse C may collect personal information in various forms, but it will only do so by lawful means and only for the necessary purposes disclosed or where permitted or required by law.

The personal information likely to be collected during your visit to our website is the following:

  • Data you explicitly send us by submitting a form (Measure C, Data C, contact form, newsletter subscription, document download form, etc.). Name, first name, contact information, questions and requests, newsletter subscription preferences or any other information you may choose to communicate to us in the fields on our forms.
  • Data relating to navigation on our website (browser cookies). Website interaction, location data, Google Analytics data, etc.

6. Cookies and similar technologies

Synapse C may use cookies, web beacons, pixels, log files or other technologies to collect information about visitors to its website. Some are essential to the operation of the website and its components, some are generated by your browser, and others are used for analysis purposes in order to improve our product offer.

When you connect to our website, a message will appear allowing you to authorize or refuse the collection of browser cookies, depending on their type.

For more information, please refer to our Cookie policy.

7. Data collection aims

Information is collected in accordance with the purposes and objectives set out in this Policy or in each of the forms.

  • To provide products and services:We will collect and process the data and information necessary to provide the requested service.
  • To provide and improve our products and services:The data collected through your interactions with our services may be used for purposes such as analysis, accountability to our funders and improvement of our products and services.

8. Consent modalities

We commit to obtain consent before collecting an individual’s personal information. We favor explicit consent whether it be obtained verbally, electronically, or in writing. In some instances, implicit consent can be reasonably inferred from an individual’s actions. For examples, giving a name and an address to receive a publication or a name and a phone number to receive an answer to a question is considered implicit consent regarding data collection containing personal information.

If we want to use personal information for a new purpose, we will describe the new purpose intended and will ask for consent again.

It is not always possible to obtain consent for the collection, use or disclosure of personal information, notably in the case of government requests. We will never disclose such information other than in accordance with this Policy, except as required or permitted by law.

Consent may be withdrawn at any time. If you wish to withdraw your consent, we invite you to contact our Data Protection Officer (see section 13).

9. Treatment procedures used

Synapse C takes the security of your personal information very seriously and is committed to treating your personal information in accordance with industry standards and norms, and only for the purposes for which it is collected as described in this Policy or in a specific notice to that effect. Synapse C is committed to ensuring that all individuals accessing and/or processing such data comply with the principles of this Policy.

However, the absolute safeguarding of this data is impossible given the inherent security limits of Internet transmission. Considering risk 0 does not exist, Synapse C will apply all measures of protection and security reasonably expected to mitigate risk of confidentiality loss of personal information transmitted to Synapse C. In this sense, the website user shares personal information taking in consideration that a risk remains. Once the information has been received, Synapse C will treat it in accordance with the security principles set out in this policy.

10. Personal information access and control modalities

Synapse C ensures that all personal information in its possession is as accurate, current and complete as possible for the purposes for which it is to be used.

You have the right to request access to your personal information for verification purposes and request a correction if your personal information is inaccurate. If you believe that your personal information is inaccurate or if you wish to access your personal information, you may make a request using the contact information provided at the end of this Policy (see section 13).).

To the best of our ability, we will provide you with timely access to your personal information. However, for security reasons, we may need to verify your identity.

In addition, there may be circumstances where we will not be able to provide you with access to your personal information. Notably, when access may lead to the disclosure of another person’s personal information and that person refuses to consent to its disclosure, or when legal restrictions apply. Should such a situation arise, we will advise you of the reason why we cannot provide you with access to your personal information.

If your request concerns data appearing on third-party web pages or platforms, please contact these third parties directly.

11. Sharing and reason for sharing personal information with third parties

We do not share your personal information with companies, organizations, or individuals outside of Synapse Cwith the exception of our authorized suppliers and partners who need access to the information to perform the services they provide, including, but not limited to:

  • Cloud storage
  • Hosting of our website
  • Use of technological tools enabling us to offer certain services (newsletter, forms, etc.)

Some of these suppliers may be located outside the province of Quebec. In all cases, we only use the services of reputable companies with privacy policies compatible with Quebec law.

Synapse C will not sell or rent your personal information to third parties.

We may also transmit personal information outside our organization if access to it is necessary to comply with applicable laws and regulations.

12. Retention of personal information

Synapse C retains the data collected only for the purpose for which consent was sought. Synapse C does not retain data beyond the fulfillment of the purposes for which it was collected. Only statistics or reports containing anonymized data may be stored for extended periods of time.

During the retention period, Synapse C takes all reasonable physical and technical measures to ensure the security of personal information.

Personal information is stored primarily on Microsoft’s Azure servers in Canada, but may be stored outside Canada if a third-party vendor or other entity to which we disclose personal information in accordance with this Policy is located outside Canada. In such cases, personal information may be subject to the local laws of the countries or territories in which the information is collected, used, disclosed or stored, and may be accessible to the governmental and law enforcement authorities of those countries or territories.

13. Data Protection Officer

You may access your personal information and request that it be updated, modified or deleted (withdrawal of consent) by contacting the person responsible for the protection of personal information (Data Protection Officer) at the following e-mail or postal address:

prp@synapsec.ca

or

Attention: Synapse C Data Protection Officer

5605 avenue de Gaspé, Suite 106
Montréal (Québec), H2T 2A4
Canada

You can also contact this individualfor all questions, requests, complaints, concernsor comments regarding this Policy or protection of your data in general.

14. Policy revisions

We make changes to this Policy from time to time. Any diminution of your rights under this Policy will not be enforced without your explicit consent. We always provide the date on which the last changes were made.Ifthere are significant changes, the individuals concerned will be notified.