Privacy Policy – 2024

Thank you for visiting the Cofinia conseil inc website and reviewing its privacy policy (hereinafter the "Policy"). By browsing our website or using our systems or services, you acknowledge that you have read and understood this Policy and consent to your personal data and information being processed in accordance with it.

1- Objectives of the Privacy policy

Respecting privacy and protecting personal information are essential to us. Through this Policy, we are committed to protecting your personal information in accordance with applicable laws, including Law 25.


Cofinia conseil inc undertakes to collect only the personal information necessary for the execution of the mandates entrusted to it by its clients or to respond to requests made through its website. We collect, process, and share information that identifies an individual only when the individual has consented, unless permitted or required by law, in which case consent will not be necessary.

2. Effective Date

This Policy applies from September 10, 2024, and replaces the Privacy Protection Policy dated November 27, 2022.

3.Personal Information Protection Officer (PIPO)

Marie-Andrée Giroux, FCPA, President of Cofinia conseil inc, is designated as the Personal Information Protection Officer (PIPO). She is responsible for ensuring compliance with this Policy, managing privacy incidents, responding to requests from concerned individuals, and ensuring compliance with legal obligations.

For any questions, comments, or complaints regarding this Policy, you can contact Marie-Andrée Giroux:

 

  • Address : 5075 Boulevard Wilfrid Hamel, Bureau 310, Québec, G2E 5G3
  • TPhone : 581 748-9904
  • Email : magiroux@cofinia.ca

 

If you receive confirmation of the existence of inaccurate, incomplete, or ambiguous personal information about you in our files, or if their collection, communication, or retention violates the law, you have the right to request the correction of the file. 

4. Data Portability Policy and Procedure

Cofinia conseil inc is committed to providing individuals with the ability to receive a copy of their personal information in a structured, commonly used, and machine-readable format within 30 days of receiving a valid request.
The key steps in this process are:

  • Request Submission: Portability requests can be submitted by email to info@cofinia.ca.
  • Identity Verification: A valid ID or two-factor authentication method will be used to verify the identity of the requester.
  • Data Preparation: Data is prepared in a secure and standard format.
  • Secure Transfer: Data transfer is carried out using secure communication protocols to prevent unauthorized access.
  • Request Tracking Register: All requests are recorded in a tracking register, documenting the details and status of each request.

5. User Rights

In accordance with Law 25, users have several rights regarding their personal information, including:

  • Right of Access: Review the personal information held by Cofinia conseil inc.
    Right of
  • Rectification: Modify inaccurate or incomplete personal information.
  • Right of Withdrawal and De-indexing: Request the deletion of data in certain contexts.
  • Right to Portability: Obtain a copy of their personal data in a structured format.

To exercise these rights, contact us by email at: info@cofinia.ca.

Identity Verification of Requesters
To ensure that each request is legitimate, we require the presentation of valid identification or a two-factor authentication method.

6. Data Security in Transit

Cofinia conseil inc will use robust security measures to protect data in transit, including data encryption, HTTPS and TLS protocols, and strict access controls to ensure data arrives safely at its destination.

7. Employee Data Protection Training

All Cofinia conseil inc employees undergo annual data protection training, including data portability and security, tailored to their specific roles. This training ensures that all employees understand legal obligations and best practices in managing personal information.

8. Data Transfer Incident Response Plan

In the event of an incident affecting data security during transfer, Cofinia conseil inc will follow these steps:

  • Immediate notification of competent authorities and affected individuals.
  • Incident assessment to identify cause and extent.
  • Implementation of corrective measures to minimize impacts and prevent future occurrences.

9. Sharing of Personal Information with Third Parties

We do not share your personal information with companies, organizations, or individuals outside Cofinia conseil inc, except in the following cases:

  • Authorized suppliers and partners necessary for the execution of mandates.
  • Legal or regulatory obligations.

We are committed to never selling or renting your personal information to third parties.

10.Retention of Personal Information

Cofinia conseil inc retains collected data for periods determined based on their nature and usefulness in delivering our services. Data is then securely destroyed once the retention period expires.

11. Use of Cookies and Similar Technologies

Our website uses cookies and other tracking technologies to enhance user experience and analyze traffic. You can manage your cookie preferences through your browser settings.

12. Privacy Policy Updates

Cofinia conseil inc may update this Privacy Policy from time to time. Users will be informed of changes related to data portability rights and data security via the website or by email. The date of the last update will always be indicated at the beginning of the Policy.