PRIVACY POLICY ON THE PROTECTION OF PERSONAL INFORMATION

PREAMBLE
The Privacy Policy on the Protection of Personal Information (hereinafter referred to as the "Policy") outlines the practices of the Corporation de l’industrie touristique du Québec (hereinafter referred to as "The Corporation") aimed at protecting the confidentiality of personal information collected through technological means.

The Corporation is committed to informing any affected individual of a confidentiality incident involving personal information it holds that presents a risk of serious harm.

By browsing our site, you acknowledge and agree to these terms of use.

LEGAL AND ADMINISTRATIVE FRAMEWORK
• The Act Respecting Access to Documents Held by Public Bodies and the Protection of Personal Information (R.S.Q., c. A-2.1) (hereinafter referred to as the "Protection Act")
• The Charter of Human Rights and Freedoms (R.S.Q., c. C-12)
• The Civil Code of Quebec (S.Q. 1991, c. 64)

THE CORPORATION AND THE PROTECTION OF PERSONAL INFORMATION
The website www.citq.qc.ca is operated by the Corporation de l’industrie touristique du Québec, whose head office is located at 1010 rue de Sérigny, Suite 810, Longueuil, Quebec, J4K 5G7.

The site is developed by Insitu Communications and hosted by Funio Hosting, which is headquartered at 20 Place du Commerce, Montreal (Quebec) H3E 1J3.

The Corporation is one of the agents of the Ministry of Tourism for the registration of tourist accommodation establishments under the Act Respecting Tourist Accommodation. It is officially recognized by the Minister as a delegated organization to exercise certain of these powers. The Corporation is also an expert in classification and certification and, in this capacity, can provide classification, certification, and approval services for both public and private clients.

PERSON RESPONSIBLE FOR PERSONAL INFORMATION PROTECTION
Under the Protection Act, the person with the highest authority within the Corporation is typically responsible for the protection of personal information.

However, the Board of Directors has designated Mr. François Alepin, Director of Finance and Administration, as the person responsible for the protection of personal information (hereinafter referred to as "the Responsible Person").

The Responsible Person of the Corporation must take all necessary measures to ensure that staff are aware of the objectives of this Policy and comply with them.

The Responsible Person may adopt guidelines to oversee the categorization, collection, use, retention, confidentiality, and destruction of personal information.

LOGIN COOKIES
The Corporation uses various types of cookies (hereinafter referred to as "cookies") to facilitate and optimize your navigation on its website.

A cookie is a record of information placed on your computer or mobile device. Cookies do not personally identify you. However, they allow the issuer to recognize your device and collect certain information related to your browsing.

For example, the Corporation uses performance cookies such as Google Analytics and Google Tag Manager, which are tools used to measure web traffic and analyze visits to its websites. These applications also help us optimize your navigation on our website.

Using cookies, Google Analytics and Google Tag Manager collect information about your browsing on our website. This information is stored, among other places, in the United States. Google may share this information with others if required by law or for its own processing purposes. These performance cookies are anonymized.

If you wish, you can prevent Google from recording information about your browsing by installing Google Analytics opt-out plugins on your computer or other devices.

The Corporation may also use functional cookies that improve and personalize features on the website (e.g., communication, language, display resolution, etc.).

However, it does not use advertising cookies on its website.

HOW WE COLLECT PERSONAL INFORMATION IN THE CONTEXT OF OUR ONLINE SERVICES
We may collect personal information through technological means in the following situations:
• When you request registration;
• When you complete our contact form on our web page or when you contact our Information Center by phone;
• When you browse our social media platforms such as Facebook.

WHAT PERSONAL INFORMATION IS COLLECTED AND HOW WE USE IT
Personal information refers to data about an individual that can be used to identify them. This information is confidential and, except in certain cases, cannot be disclosed without the consent of the individual concerned.

Your information is used only for the purposes for which it was collected, such as for processing registration requests, managing contacts, and online payment of your annual registration fees.

In this context, the Corporation collects personal information including, but not limited to, the name and first name of the operator or their representative of the establishment, email address, establishment details, phone number, and mailing address.

We also indirectly collect personal information such as your email address, first and last name, and your public profile photo when you interact with our social media platforms like Facebook.

Finally, our partner PayPal collects banking information related to the payment for your purchases on our website for registration requests or renewals. This information is handled by our partner, who ensures its security. The Corporation does not retain any payment information from the partner.

WHAT SECURITY MEASURES ARE TAKEN TO ENSURE THE PROTECTION OF PERSONAL INFORMATION
The Corporation has implemented various physical, technological, and organizational measures to guard against unauthorized access, communication, reproduction, use, modification, and destruction of personal information, including:

• Physical measures (e.g., alarm systems, access management, locked filing cabinets, etc.);
• Technical measures to detect and block intrusions (e.g., firewalls, antivirus software, etc.);
• Organizational measures (e.g., adoption of an information security policy).

YOUR CONSENT TO THE USE OF PERSONAL INFORMATION AND YOUR RIGHT TO WITHDRAW CONSENT

When we collect, use, and disclose your personal information, it is always based on your consent and for specific purposes.

We always adhere to the purposes for which we collected your personal information. The Corporation may disclose certain personal information to third parties, such as for the online payment of your annual registration fees, to the Ministry of Tourism, Revenu Québec, or municipalities in the context of the registration request or other instances provided by the Act or our agreement with the Ministry.

If we wish to use or disclose your personal information for other purposes, we will ask for your consent.

Your consent is valid for the duration necessary to achieve these purposes. We may then retain your personal information for as long as needed to fulfill our retention obligations as described by law.

You may request to withdraw your consent to the use, disclosure, and retention of your personal information.

RETENTION AND DESTRUCTION OF COLLECTED PERSONAL INFORMATION
Your data that we collect is stored on the domain www.citq.qc.ca, which is located in Quebec. In some cases, the Corporation may also use cloud services for the processing and storage of the information it holds.

Your data may also be stored outside Canada when you interact with our Facebook or LinkedIn pages. Our agreements with our service providers stipulate that if personal information is stored outside the country, it must be protected to ensure confidentiality in compliance with legal requirements and best practices.

When the purposes for which your personal information was collected or used have been fulfilled, your information is securely and irreversibly destroyed.

COMPLAINTS, QUESTIONS, ACCESS RIGHTS, RECTIFICATION, DESTRUCTION RELATED TO YOUR PERSONAL INFORMATION, WITHDRAWAL OF YOUR CONSENT
An individual can request access to their personal information and ask to rectify, restrict, delete, or destroy personal information. They can also withdraw their consent.

To file a complaint, ask a question, or make a request related to this privacy policy, you must submit a written request via email to the person responsible for the protection of personal information:

Person Responsible for the Protection of Personal Information
Name : Alepin
First Name : François
Phone Number: 450-679-3737 ext. 224
Email : confidentialite@citq.qc.ca

EFFECTIVE DATE AND, IF APPLICABLE, THE DATE OF THE MOST RECENT MODIFICATION
This policy became effective on: 08-20-2024