Ecopak is firmly committed to respecting privacy and ensuring the protection of the personal information of its clients, employees, and partners. This policy explains our practices regarding the collection, use, and sharing of data in accordance with applicable laws.

Purpose of the Privacy Policy:

We are dedicated to protecting personal information and ensuring compliance with applicable legislation, including Law 25 and the GDPR where relevant. We collect personal information primarily to respond to service requests, manage job applications via our contact form, or analyze website traffic.

Effective Date:

This policy will be effective as of January 3, 2024.

Consent for Data Collection:

Before any personal data collection, we commit to obtaining informed consent from the individuals concerned, with a preference for explicit consent when required. We obtain your explicit consent for any collection of personal data, such as when submitting a form. Consent for non-essential cookies is obtained via a cookie banner where you can choose to accept or reject them.

Types of Personal Information Collected:

The data we collect may include: name, contact details, IP address, browsing information via cookies, résumés for job applications, as well as any other information necessary to respond to your requests.

Data Processing Methods:

Personal information is processed in accordance with industry best practices, with a particular emphasis on data security and protection.

Access and Control of Personal Information:

We strive to keep the information we hold up to date, accurate, and complete. Individuals have the right to access their data and request corrections when necessary.

Management of Security and Privacy Incidents:

• Incident Identification: We closely monitor systems to identify any potential incidents.
• Isolation and Containment: Any threat is immediately isolated to prevent damage.
• Notification: We promptly inform concerned parties in case of an incident.
• Risk Assessment: An evaluation is carried out to understand the extent and consequences of the incident.
• Investigation: A full investigation is conducted to determine the causes of the incident.
• Service Restoration: We restore services quickly while addressing identified vulnerabilities.
• External Communication: If necessary, the appropriate authorities and external stakeholders are informed.
• Post-Incident Analysis: We analyze incidents to learn lessons and improve our practices.
• Documentation: All steps are carefully documented to ensure traceability and compliance.
• Training and Awareness: Training sessions are organized to prevent future incidents.
• Security Policy Review: Our policies are regularly updated based on lessons learned.
• Communication Management: Information is communicated consistently both internally and externally.

We take swift action in case of data breaches, such as cyberattacks or unauthorized access to sensitive information.

Policy Changes:

We reserve the right to modify this policy from time to time. Any significant changes will be clearly communicated, and no changes that would reduce your rights will be applied without your explicit consent. We always indicate the date of the last update and provide the ability to review previous versions. In the event of significant changes, a notice will be posted on our internal platforms, and an email will be sent to the concerned parties.

Cookies and Similar Technologies:

Our site uses cookies to:

• Facilitate navigation, analyze site performance (analytical cookies), and enhance the user experience. You can choose to disable analytical cookies by adjusting your browser settings or via the cookie consent banner.

Security of Personal Information:

We implement technical and organizational security measures to protect your personal information against unauthorized access, misuse, or disclosure.

Retention of Personal Information:

We retain your personal information as long as necessary for the purposes for which it was collected unless a longer retention period is required by law.

Your Rights:

In accordance with applicable laws, you have the following rights concerning your personal information:

• Access your data
• Request the correction of inaccurate data
• Request the deletion of your data
• Withdraw your consent to the use of your data (where applicable)

To exercise your rights to access, correct, or delete your data, please contact us at [email address], clearly indicating your request.

Compliance Officer:

For any questions, comments, or complaints regarding this privacy policy, you may contact our compliance officer at the following details:

Claudy Julien 
rp.rh@ecopak.ca
450 532-2270
9072 rue de la Montagne Valcourt QC J0E 2L0