Privacy policy

Policy on Governance and the Protection of Personal Information (Hereinafter: the Policy)

Date of adoption:

Legal reference: Art. 3.2 of the Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1)

Preamble

The Gisèle Faubert Foundation Inc. (Hereinafter: the Foundation) is committed to protecting your personal information and to being transparent about the personal information it holds.

The objective of this Policy is to clearly explain how we collect and process your personal information when we hold it after you have provided it to us in connection with our business activities.

We use the information we collect in accordance with the Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1), which is considered to be substantially similar to Canada’s Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5; PIPEDA).

The purpose of this Policy is to establish specific rules regarding the protection of personal information.

This Policy is established in accordance with sections 3.2 and 8.2 of the Act respecting the protection of personal information in the private sector and supplements the obligations set forth therein.

This Policy contains

Who We Are and What We Do
The information we may collect about you
How we collect your personal information
How we may use your personal information
Limiting the disclosure of your personal information to third parties
How long we retain your personal information
The security of your personal information
Roles and responsibilities of staff members
Your rights regarding your personal information
How to contact us
Rules applicable to witnesses
Procedures for the retention and destruction of personal information
Changes to our Policy
Complaint treatment Procedure
Accountability

Please feel free to contact the Foundation’s Data Protection Officer (DPO) if you need additional information:

By email to the address dg@fondationgiselefaubert.com,
By phone au (450) 691-1761, ou
By mail at the following contact information:
Christine Labonté, Executive Director
Privacy Officer
Gisèle Faubert Foundation
1049 Boulevard Saint-Jean-Baptiste
CP 29, Succursale Bureau-Chef
Mercier (Québec) J6R 2K6

The Foundation adheres to the highest ethical standards when handling all information, particularly personal information.

By agreeing to provide us with personal information (through our website, by completing a donation, purchase, or event registration form via email, in person, or by phone), you agree that such information will be processed in accordance with this Policy, and you authorize the Gisèle Faubert Foundation, its third parties, and its service providers to process your personal information for the purposes set forth below.

This Policy does not apply to third-party websites that you may access by clicking on links on our website. The Foundation assumes no responsibility for such third-party websites. If you follow a link to a third-party website, that website will have its own privacy policies, which you should review before submitting any personal information.

1- WHO WE ARE AND WHAT WE DO

The Gisèle Faubert Foundation Inc. (the Foundation) is a public not-for-profit organization (NPO) incorporated under the Act respecting not-for-profit organizations and certain legal persons (S.C. 2009, c. 23). The Foundation is recognized as a registered charity (No. 868787946 RR 0001) by the Canada Revenue Agency.

Deeply rooted in its community since 1999, the Foundation helps children with any illness or disorder thrive by providing financial support to eligible families. It has also expanded its mission to include building and operating a hospice to provide residents of the 65 municipalities in Western Montérégie with a calm, serene, and welcoming place to spend their final days with dignity.

All services are provided free of charge by the Foundation thanks to the generosity of its donors and partners.

The Foundation hopes to engage the community and collaborate with stakeholders in Western Montérégie to support its mission.

2- PERSONAL INFORMATION WE MAY COLLECT ABOUT YOU

Please click here to view the detailed table regarding the collection and use of personal information.

If you provide us with personal information about other individuals (such as your customers, directors, officers, or shareholders), you must ensure that you have properly notified them that you are providing their information to us and that you have obtained their consent to such disclosure;

Where applicable, evidence of consent provided to us (date, time, method), in circumstances where such consent is required for the processing of personal information;

We do not knowingly collect information from children or other individuals under the age of fourteen (14). If you are a minor under the age of fourteen (14), please do not provide us with any personal information without the express consent of a parent or guardian. If you are a parent or guardian and you know that your children have provided us with personal information, please contact us. If we learn that we have collected personal information from minors without verifying parental consent, we will take steps to delete that information.

3- HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

You share your personal information with us as follows:

When you sign up for events, workshops, conferences, training sessions, and newsletters;
When you sign up for fundraising activities;
When you make a donation to the Gisèle Faubert Foundation, regardless of the form of your donation;
When you register as a volunteer with the Gisèle Faubert Foundation;
You also share with us information that is publicly available, particularly on public platforms, including our website;
When you apply for a job or position;
When you or a family member is staying at the hospice—both when filling out the admission form and during the course of care;
Personal information may be collected through technological means, including via our website or by email. This policy does not apply to third-party websites, including those that can be accessed by clicking on links that may appear on the websites mentioned above.

4- HOW MIGHT WE USE YOUR PERSONAL INFORMATION?

We will use personal information for the purposes for which it was collected, and we may use it in any of the ways described below, with your consent or, where applicable, without your consent, in cases permitted by law. In each case, we indicate the reasons why we use your personal information:

In order to provide our services and conduct our business, to administer and perform our services, including to fulfill our obligations under any agreement entered into between you and us;
To make our website easier to use, ensure that the content is relevant, and ensure that the content on our website is displayed in the most effective way for you and your device;
For marketing and philanthropic development purposes—to provide details about new services, information about developments within our organization and our sector, and invitations to seminars and events when an individual has chosen to receive such information;
For recruitment purposes—to enable us to process job applications and assess whether an individual meets the requirements for a position at the Foundation for which they may be applying;
To comply with our legal, regulatory, or risk management obligations.
To prevent fraud and/or conduct other background checks that may be required at any time under applicable law or regulations and/or best practices (if false or inaccurate information is provided or if fraud is detected or suspected, information may be shared with fraud prevention organizations and may be recorded by us or by such organizations). When we process special categories of personal information, we may also rely on compelling public interest grounds (prevention or detection of crimes) or legally valid claims;
To enforce our rights, to comply with our legal or regulatory obligations regarding the disclosure of information, or to protect the rights of third parties.
To ensure that we are paid—to collect payments owed to us and, if necessary, to enforce such collections by engaging debt collection agencies or taking other legal measures (including initiating legal proceedings).
In order to reorganize or modify our organization—if we undertake a reorganization (for example, by merging, consolidating, or divesting part of our organization’s mission), we may need to transfer some or all of the personal information to an applicable third party (or its advisors) as part of any due diligence process or transfer to the entity resulting from a reorganization or to that third party for the same purposes as those set forth in this Privacy and Personal Information Protection Policy or for the purpose of analyzing any proposed reorganization. In such a situation, we will take all possible measures to ensure the protection and security of personal information.

5- LIMITATIONS ON THE DISCLOSURE OF YOUR PERSONAL INFORMATION TO THIRD PARTIES

We use personal information solely for the purpose of achieving the primary objective and the applicable legitimate purpose for which it was collected, or for purposes compatible with that primary objective. Furthermore, in the course of its activities, the Foundation may transfer the personal information we collect to any entity within the Foundation’s network, where it may be processed by such an entity. We may also share personal information with certain third parties, including the following:

Volunteers of the Foundation for the purposes of recruiting staff and volunteers and soliciting financial or other contributions;
Third-party service providers and/or partners who perform a contract or assignment on behalf of the Foundation, including those who provide us with fundraising, database analysis, website, application development, hosting, maintenance, and other services. These third parties may have access to or process personal information in connection with the services they provide to us. We limit the information we provide to these service providers to only what is reasonably necessary to enable them to perform their duties, and the contracts we have entered into with these service providers require them to maintain the confidentiality of such information;
Government authorities and law enforcement agencies when required by applicable laws. For clarity, we may disclose personal information and other information if we are required to do so by law, including tax laws, or if we believe in good faith that such disclosure is necessary to comply with applicable laws, in response to a court order, subpoena, or government search warrant, or otherwise to cooperate with such government authorities and law enforcement agencies;
The Foundation uses third-party websites, such as Google, Facebook, Instagram, and LinkedIn, to promote its content and offers;
When you visit our website, these third parties may use cookies, web beacons, or other similar technologies on your hard drive to collect or receive information about your browsing activity on the website and elsewhere on the Internet. These technologies enable the delivery of relevant, targeted advertisements based on your interests. You can view and delete these cookies if you wish. You therefore have full control over them. We recommend that you check your browser settings to make the appropriate changes.

If you want third-party websites to store cookies on your hard drive in order to provide you with targeted advertising, you can enable this option.

For more information, please see our Cookie Policy in Section 11 of this policy.

6- HOW LONG WE RETAIN YOUR PERSONAL INFORMATION

We will retain personal information only for as long as necessary to fulfill the purposes set forth in this Policy and to comply with our legal and regulatory obligations.

Personal information must be destroyed once the purpose for which it was collected has been fulfilled. Certain restrictions may apply in order to comply with ethical, contractual, or legal obligations.

Personal information may also be anonymized for serious and legitimate purposes. The anonymization process must ensure that it is impossible to re-identify an individual, even by cross-referencing the information with other sources.

To learn more about how long we retain personal information, please contact us at:

By email to the address dg@fondationgiselefaubert.com,
By phone au (450) 691-1761, ou
By mail at the following contact information:
Christine Labonté, Executive Director
Privacy Officer
Gisèle Faubert Foundation
1049 Boulevard Saint-Jean-Baptiste
CP 29, Succursale Bureau-Chef
Mercier (Québec) J6R 2K6

7- THE SECURITY OF YOUR PERSONAL INFORMATION

The Foundation uses customer relationship management (CRM) software to manage, maintain, and nurture all of the organizations’ relationships and interactions with their clients, donors, and current and potential partners. For legal and tax purposes, documents and personal information may also be stored in our locked facilities, to which access is restricted to our employees. The Gisèle Faubert Foundation does not transfer or disclose any of its data—whether confidential or not—outside the province of Quebec.

We also adhere to the most rigorous standards generally recommended in the industry to protect the information submitted to us, both during transmission and after we have received it. We maintain appropriate physical, technical, and administrative safeguards to protect personal information from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, misuse, or any other unlawful form of processing of the personal information in our possession. We have taken steps to ensure that the only staff members who have access to your personal information are those who need to know it or whose duties reasonably require such information.

Measures taken to ensure the confidentiality and security of information

Access to personal information is limited to those who need it to perform their duties
Restricted access to offices and computer equipment
Raising staff awareness of security and the confidentiality of personal information, and obtaining a commitment from employees and volunteers to respect personal information;
Specific contractual measures for the protection of personal information, when required
Information Security Policy,
Procedure in the event of a privacy incident
Periodic system audits by a security firm, including peripheral devices (laptops and tablets);

However, no method of transmission over the Internet or means of electronic storage can be completely foolproof. Therefore, you are providing us with your personal information with the understanding that certain risks exist.

If a privacy incident involving your personal information were to occur, we are committed to notifying you as soon as possible after we become aware of the incident. We will take reasonable steps to minimize the risk of harm and prevent similar incidents from occurring in the future.

If you have reason to believe that personal information has been compromised, please contact us by:

By email to the address dg@fondationgiselefaubert.com,
By phone au (450) 691-1761, ou
By mail at the following contact information:
Christine Labonté, Executive Director
Privacy Officer
Gisèle Faubert Foundation
1049 Boulevard Saint-Jean-Baptiste
CP 29, Succursale Bureau-Chef
Mercier (Québec) J6R 2K6

8- ROLES AND RESPONSIBILITIES OF STAFF MEMBERS

The organization’s senior management is responsible for implementing this Policy and serves as the RPRP.

This Policy applies to all Foundation staff members, consultants, and agents. It covers all personal information, regardless of the medium or format in which it is accessible (written, graphic, audio, visual, electronic, or other).

Personal information is any information that relates to a natural person and allows that person to be identified.
The RPRP ensures compliance with and enforcement of the Act respecting the protection of personal information in the private sector (RLRQ, c. P-39.1), as well as the policies and practices regarding the protection of personal information.

The responsibility for protecting personal information rests with anyone who, in the course of their duties, under a contract, or as part of a mandate within the Foundation, collects, holds, uses, or discloses personal information.

Any person covered by this Policy must:

Implement and comply with all protective measures that have been put in place;
Collect only the personal information necessary to perform their duties;
Obtain the consent of the individual concerned, when required by law;
Under no circumstances should you disclose personal information to a third party, unless the individual consents or the law permits it;
Cooperate, if required, with any inquiry regarding personal information;
Immediately notify the RPRP if it has reason to believe that a privacy incident involving personal information has occurred; it must take reasonable measures to mitigate the risk of harm and immediately notify the RPRP;
A “privacy incident” is defined as:
- access to personal information that is not authorized by law;
- the use of personal information without legal authorization;
- the disclosure of personal information without legal authorization;
- the loss of personal information or any other breach of the protection of such information.

9- YOUR RIGHTS REGARDING YOUR PERSONAL INFORMATION

Under certain circumstances and in accordance with applicable privacy laws, an individual has the following rights:

Access: the right to know whether we hold or process personal information and, if so, to request access to that personal information. The individual may also receive a copy of the personal information we hold;

Accuracy: We are required to take reasonable measures to ensure that the personal information in our possession is accurate and up to date;
Correction: The right to request that we correct any incomplete or inaccurate personal information we hold;

Modification or Withdrawal of Consent: Any individual may modify or withdraw their consent regarding the collection, use, disclosure, and retention of their personal information, subject to certain limitations necessary to comply with contractual and legal obligations.

De-indexing: the right to request that the dissemination of their personal information be stopped or that any hyperlink associated with their name that provides access to such information be de-indexed if such dissemination causes them harm or violates the law or a court order (right to erasure or the right to be forgotten);

Anonymization: the fact that our organization may, instead of destroying personal information, anonymize it for use, but only for serious and legitimate purposes (e.g., retaining information required for a potential tax audit);

The right to be informed when you are the subject of a decision based solely on automated processing;

Finally, it is also possible to file a complaint with the Commission on Access to Information.

To exercise any of these rights, please contact the person responsible for personal information, whose contact information is available in the “How to Contact Us” section.

10- HOW CAN YOU CONTACT US?

If you have any questions or comments regarding this Policy or your personal information, wish to exercise your rights, file a complaint, or obtain information about our policies and practices regarding our service providers, please contact the RPRP at:

By email to the address dg@fondationgiselefaubert.com,
By phone au (450) 691-1761, ou
By mail at the following contact information:
Christine Labonté, Executive Director
Privacy Officer
Gisèle Faubert Foundation
1049 Boulevard Saint-Jean-Baptiste
CP 29, Succursale Bureau-Chef
Mercier (Québec) J6R 2K6

11- COOKIE POLICY

CONSENT

By using our website, fondationgiselefaubert.org, you consent to the use of cookies in accordance with this Cookie Policy. You will have seen a prompt regarding this on your first visit to this website; although it does not usually appear on subsequent visits, you may withdraw your consent at any time by following the instructions below.

DISABLE COOKIES

When the organization that sets the cookie provides an automatic opt-out tool for that cookie or those cookies, we list the name of that organization, the category of cookies it sets, and a link to its automatic opt-out tool. In all other cases, we list the names of the cookies themselves and their sources as of the date of this Cookie Policy so that you can easily identify and disable them if you wish using your browser settings.

If you do not consent to the use of these cookies, please disable them by following the instructions for your browser on the following website (All About Cookies) or use an automatic disabling tool, if available. However, some services may not function as well if cookies are disabled.

After your initial visit to this website, we may change the cookies we use. This cookie policy will always let you know who sets cookies, for what purpose, and how to disable them if you check it from time to time.

WHAT TYPES OF COOKIES DOES THE GISÈLE FAUBERT FOUNDATION USE?

The types of cookies used by the Gisèle Faubert Foundation and its vendors are described below.

COOKIES STRICTLY NECESSARY

These cookies are essential for allowing you to navigate the website and access its features.

Without these cookies, the services you request (such as navigating from one page to another) cannot be provided.

PERFORMANCE COOKIES

We use analytics cookies to analyze how our visitors use our website and to monitor the website’s performance. This allows us to ensure a high-quality experience by personalizing our offerings and quickly identifying and resolving any issues. For example, we may use performance cookies to track which pages are most popular, to determine which linking methods between pages are most effective, and to identify why certain pages display error messages. We may also use these cookies to target content or services on the site based on their relevance to you, as determined by your use of the website. Neither we nor our service providers link the information collected by these cookies to your personal information.

WEBSITE FUNCTIONALITY COOKIES

We use cookies to provide you with certain features. For example, to remember the choices you make (such as your username, language, or region) or to recognize the platform you’re using to access the site and provide you with enhanced and more personalized features. These cookies are not used to track your browsing activity on other websites.

TARGETING COOKIES

Targeting cookies (or advertising cookies) collect information about your browsing habits and are used to better tailor advertising to you and your interests. They are used by third-party services, such as the “Like” or “Share” buttons. The “AddThis” cookies mentioned above are also examples of targeting cookies. Third parties provide these services in exchange for recognition that you have visited our website.

When you use the LinkedIn, Facebook, or other available sharing buttons, you will be redirected to a page controlled by those companies, which may place cookies (including targeting cookies), and you will be subject to the cookie policies of LinkedIn, Facebook, or another relevant website, respectively.

USE OF IP ADDRESSES AND DIGITAL LOGS

We may also use your IP address and browser type to help diagnose problems with our server, to administer our website, and to improve the service we provide to you. An IP address is a numerical code that identifies your computer on the Internet. Your IP address may also be used to collect aggregate demographic information.

We may check IP addresses to determine the domain you are coming from (e.g., google.com) in order to gain a better understanding of our users’ demographics. Information collected through these types of cookies and technologies is not combined with information about you from any other source and will not be used to identify you.

THE COOKIE POLICY DOES NOT COVER THIRD-PARTY WEBSITES

Please note that this cookie policy does not apply to the privacy practices of third-party websites that may be linked to or accessible from this website, and that we are not responsible for such practices.

CHANGES TO THE POLICY ON COOKIES

We may update this cookie policy, and we encourage you to review it from time to time to stay informed about how we use cookies.

This Cookie Policy was last updated on September 13, 2023.

12- PROCEDURES FOR THE RETENTION AND DESTRUCTION OF PERSONAL INFORMATION

a) Objective

This paragraph sets forth the procedures for the agency to close, retain, and destroy information.

b) Definitions

“Record Closure Date” means the date on which the purposes for which a record was created are fulfilled and from which the record’s retention period is calculated.

“Record destruction date” means the date on which a record is destroyed.

c) Review and close the case

When a file is closed, the person in charge of the file determines the file’s closure date and its destruction date. For files concerning donors and potential donors, it is agreed that the file must be destroyed ten (10) years after the date of their last donation or their last consent to the use of their personal information, whichever is later.

Before closing a file and sending a physical document or other item related to the file to an external storage facility or a shredding service, the person responsible for the file must take steps to remove from the file any paper copies of documents that have been scanned or otherwise saved in the organization’s electronic library.

The organization maintains records identifying closed files, including the date of closure and, if applicable, the date of destruction.

d) Retention of closed files

Closed files that have not been destroyed are stored in a physical location to maintain the confidentiality of the individuals concerned and to protect them from damage or loss. They may also be stored on the following digital media (e.g., network, SharePoint).

e) Destruction of records

When the case manager closes the case and if the case is ready for destruction (see article below), the destruction date is determined in accordance with the Foundation’s policy, unless the case manager determines that a different destruction date would be more appropriate.

The organization retains closed files for as long as necessary to meet risk management requirements. It is prudent to retain a closed file only for the period determined by taking into account any applicable legal requirements. A closed file must be destroyed as soon as the specified retention period expires.

The destruction date must be suspended in the following cases directly or indirectly related to: a) an actual or potential claim against the organization, b) a request for disclosure of information regarding the relevant file or donor, c) government audits and investigations. This may be requested by the file manager and must be approved by the RPRP.

These procedures must be implemented in a manner that ensures the confidentiality of personal information and compliance with applicable federal and provincial privacy laws.

The Foundation maintains a record of destroyed files that includes the name of the person concerned, the nature of the file, the file number, the date the file was closed, the date the file was destroyed, and the name of the person responsible for the file.

The Foundation destroys information contained on any medium whatsoever.

13- CHANGES TO OUR POLICY

The Foundation may amend this policy. In such cases, a notice of amendment will be posted on our website. The notice must include the main changes made and the effective date of those changes.

All users are deemed to have read, accepted, and acknowledged the validity of this policy and any amendments thereto.

The Policy, the document management summary table, the classification plan, and the retention schedule may be slightly modified by the RPRP. Any modifications made by the RPRP take effect immediately and remain in effect, provided that the report required under paragraph 14 is submitted and the board of directors subsequently upholds the modifications.

We may change the content of our websites and our use of cookies without notice; consequently, our Privacy Policy and our Cookie Policy may be updated from time to time in the future. We therefore encourage you to review them each time you visit the website to stay informed about how we handle personal information.

This policy was last updated on September 13, 2023.

14- COMPLAINT PROCESSING PROCEDURE

This procedure is intended to ensure that complaints are handled appropriately, consistently, and promptly. It applies to anyone who is dissatisfied with how their personal information has been handled.

a) Purpose of the procedure

The complaint-handling procedure is designed to be fair and transparent. It also aims to uphold the quality of services and provide everyone with the opportunity to voice their dissatisfaction.

This procedure governs the receipt of complaints, the issuance of acknowledgments of receipt, the creation of complaint files, and the compilation of received complaints, all with the aim of listening to customers and ensuring continuous improvement.

b) Responsable

The Foundation’s Executive Management is responsible for implementing this procedure. It acts as the point of contact and ensures that staff receive adequate training in this regard. The person in charge must also provide employees with all the information necessary to comply with this policy.
The person in charge’s primary responsibilities are:

Ensure compliance with this policy;
Ensure that an acknowledgment of receipt is sent to the complainant;
Investigate the allegations made by the complainant;
Reply to the complainant.

Furthermore, when a complaint is filed against senior management, the president oversees its handling and serves as the person in charge for that purpose.

c) Complaint

A complaint consists of either:

When an individual who feels wronged expresses dissatisfaction with the Foundation;
By establishing that harm was suffered as a result of an event, situation, act, or omission related to the service provided by the Foundation;
By expressly requesting a corrective measure.

Any informal action taken to resolve a specific problem does not constitute a complaint, provided that the problem is addressed to the individual’s satisfaction as part of the Foundation’s regular activities.

d) Statement of the complaint

A person who files a complaint in order to have it addressed must submit it in writing and send it to:

By email : dg@fondationgiselefaubert.com, ou
By mail at the following contact information:
Christine Labonté, Executive Director
Privacy Officer
Gisèle Faubert Foundation
1049 Boulevard Saint-Jean-Baptiste
CP 29, Succursale Bureau-Chef
Mercier (Québec) J6R 2K6

The communication must include the following:

The complainant’s name;
His address;
His phone number;
Their email address or fax number, if applicable;
The complainant’s capacity: In his or her own name, as a guardian, or as a holder of parental authority;
The grounds for the complaint as submitted.

Any employee who receives a complaint must forward it, upon receipt, to the person responsible for implementing the procedure.

Any employee who receives a verbal complaint must inform the complainant of this Policy and Procedure and ask the complainant to submit the complaint to the Foundation in writing.

d) Acknowledgment of receipt

The person in charge must acknowledge receipt of the complaint within five (5) business days of receiving it.

The acknowledgment of receipt must include the following information:

A description of the complaint received, specifying the allegation against the Gisèle Faubert Foundation, the harm caused, or the corrective action requested;
The name and contact information of the person responsible for handling the complaint;
In the case of an incomplete complaint, a notice requesting additional information will be issued, to which the complainant must respond within a specified time frame—five (5) business days—failing which the complaint will be deemed withdrawn.

f) Creating the complaint file

To ensure fair and transparent handling, a separate file is created for each complaint. The file includes the following:

The written complaint;
The outcome of the complaint handling process (the analysis and related documents);
A written and reasoned final response to the complainant.

g) Handling a complaint

An anonymous complaint is considered not to have been received.

All complaints are handled confidentially.

The complaint must be processed within a reasonable time frame, specifically within twenty (20) days of receiving all the information necessary to review it. In the exceptional event that a complaint cannot be processed within the specified timeframe, the complainant must be informed of the reasons for the delay and the steps the organization has taken to date in processing the complaint. The complainant must also be notified of the timeframe within which the decision will be communicated to them.

Once the complaint has been reviewed and the analysis completed, the person in charge must provide the complainant with a final, written, and reasoned response setting forth the conclusions or, where applicable, the corrective measures taken.

The manager monitors the situation to ensure that the measures taken are effective and modifies the procedures as needed.

h) Additional information regarding complaint

If you have any questions or comments regarding the handling of complaints, please contact the person in charge directly:

By email to the address dg@fondationgiselefaubert.com,
By phone au (450) 691-1761, ou
By mail at the following contact information:
Christine Labonté, Executive Director
Privacy Officer
Gisèle Faubert Foundation
1049 Boulevard Saint-Jean-Baptiste
CP 29, Succursale Bureau-Chef
Mercier (Québec) J6R 2K6

15- REPORT BY THE OFFICER RESPONSIBLE FOR THE PROTECTION OF PERSONAL INFORMATION

The RPRP reports to the board of directors at the meeting following such an event:

Any changes he made to the document management summary table, the classification plan, and the retention schedule;
Privacy incidents that occurred during the year;
Complaints received and processed.