Privacy Policy

Introduction

As a responsible organization, La Tablée des Chefs pays the greatest attention to the protection of personal information (PI) of its employees, donors, clients, and partners by implementing procedures and technical solutions that comply with cybersecurity standards and applicable regulations, including Law 25, which modernizes legislative provisions regarding the protection of personal information in Quebec.

This policy is published on La Tablée des Chefs’ websites and is reviewed regularly. This publication aims to inform stakeholders of how their personal information is managed and of their rights regarding personal information processed by La Tablée des Chefs.

Scope

This general policy applies to all entities of La Tablée des Chefs located in the province of Quebec that process personal information hosted or stored in Quebec.

“Personal information” (PI) refers to any information relating to a natural person that allows that person to be identified, directly or indirectly. This definition applies to information collected and retained by La Tablée des Chefs or by a third-party partner, regardless of the medium or the form in which it is accessible.

Note: Personal information relating to the exercise of a function within a company (name, title, position, professional email address, and telephone number, etc.) is not covered by this policy or by the law modernizing provisions respecting the protection of personal information in Quebec.

1.  Personal Information

1.1 Personal Information Collected

The categories of personal information collected by La Tablée des Chefs are listed below (non-exhaustive list):

  • Identification information: last name, first name, mailing address, mobile phone number, personal email address, nationality, age group, date of birth, marital status, avatar, photo, awards or recognitions, postal code, country or city of birth, etc.
  • Application and employment information (employees, volunteers): Social Insurance Number (SIN), résumé, educational background, level of education, school, experience, letters of recommendation, references, professional background, criminal background, hobbies, areas of interest, community involvement, membership in clubs or charitable organizations (other than political or religious), educational program, academic records, test/exam results, high school diplomas, grades/cumulative GPA, interview information, etc.
  • Banking information: credit card numbers, account details, money transfer details, etc.
  • IT and digital activity information: IP address, MAC address, logs, type of device, etc.
  • Account information: role and permissions, settings and preferences, login information, etc.
  • Browsing cookies: cookies are small files that may be downloaded onto a visitor’s device when visiting and using La Tablée des Chefs’ website. They allow devices to be recognized and store information about user preferences or past actions. La Tablée des Chefs uses cookies to store user preferences, optimize website design, and for commercial and promotional purposes. Cookies also help identify the most popular sections of the website and enable us to provide content that better meets users’ needs while improving our service. Finally, some cookies are strictly necessary for technical purposes. They facilitate navigation and improve the usability of websites and applications.

1.2 Purpose of Collection and Processing of Personal Information

When you consent to the collection of personal information, La Tablée des Chefs collects and processes your personal information for the following purposes:

Business development and commercial transactions

  • Personalizing the website
  • Use of services offered by La Tablée des Chefs
  • Donor marketing and segmentation
  • Marketing and segmentation of donors
  • Transaction management: orders, shipping, invoicing, payment
  • Sending commercial communications relating to our organization or selected partner organizations
  • Notifications or newsletters

Recruitment

  • Verification of background and diplomas, criminal background checks, conducting interviews, organizing recruitment events, reference checks, collecting information on candidates who have applied for job postings, identifying and attracting qualified candidates
  • Managing profiles, applications, and communications with La Tablée des Chefs
  • Sending messages regarding positions that may interest candidates

Analysis, research, and development

  • Optimization of IT resources, research and development, including improving our products, websites, applications, services, and user experience, as well as other research and analysis purposes to improve our products, services, activities, operations, and processes

Audit, reporting, and investigations

  • Statistics, internal investigations, reporting on ethical and compliance incidents, management of conflicts of interest, compliance with export controls, dispute management, legal obligations, and mandate management

Legal compliance

  • Compliance with legal obligations, responding to authorities, court decisions, or document disclosure requests

Protection

  • When necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, potential threats to individuals, violations of policies, terms, or other regulations

Personal information is used only for the purposes mentioned above.

It may also be used for another purpose where that purpose remains consistent with the original purpose and the information provided to the data subject.

1.3 Lifecycle of Personal Information

Retention and updating of personal information

Personal information is retained as long as necessary for the purposes for which it was collected or, where applicable, to comply with La Tablée des Chefs’ legal and contractual obligations.

A procedure for updating personal information is implemented to ensure its accuracy or its destruction or anonymization once the purpose has been fulfilled.

1.3.1 Information on the Collection of Personal Information

La Tablée des Chefs must inform donors and users of the following:

  • The purposes for which the information is collected
  • How the information is collected
  • The rights of access and rectification provided by law
  • Their right to withdraw consent to the disclosure or use of the collected information

Information is collected:

  • Through the privacy policy published on La Tablée des Chefs’ websites
  • Through general and specific terms agreed upon when entering into a contractual transaction
  • When obtaining user consent during the creation of a donor account
  • At the time of a donation (online link, etc.)

Note: Personal information may be used for other purposes without the individual’s consent:

  • When its use is for purposes compatible with those for which it was collected
  • When its use is clearly in the interest of the individual
  • When its use is necessary for study, research, or statistical production and is de-identified

1.3.2 Consent to the Disclosure of Personal Information

Except where otherwise provided by law, consent must be explicit, free, informed, and given for the purposes defined above.

Consent is collected through a checkbox.

Consent is collected separately for each purpose.

Consent is valid only for the time necessary to achieve the purposes for which it was requested.

For minors:

  • Under 14 years old: consent is given by the holder of parental authority or guardian
  • 14 years and older: consent may be given by the minor, the parent, or the guardian

Exemption from consent

Consent is not required in the following cases:

  • Disclosure for statistical, research, or analytical purposes
  • Other cases provided by law (e.g., disclosure to a prosecutor, enforcement of Quebec law, application of a collective agreement, emergencies involving danger, etc.)

1.3.3 Communication of Personal Information Outside Quebec

Personal information collected may be stored, processed, and transferred to any country or region where La Tablée des Chefs operates to use such information in accordance with this policy.

In the event of transfer outside Quebec, the person responsible for personal information protection must conduct and document a privacy impact assessment (PIA) to ensure an adequate level of protection and confidentiality.

1.3.4 Protection of Personal Information

According to La Tablée des Chefs’ information security policy, all personal information considered confidential must be secured or anonymized using an appropriate management model and procedures depending on the medium.

La Tablée des Chefs complies with regulations and standards relating to personal information protection and information system security.

Security assessments are conducted to ensure the robustness of the privacy and cybersecurity management system.

Technical, organizational, and operational measures are implemented in the event of an incident, including:

  • Identification of personal and sensitive data
  • Risk analysis
  • Human resources measures (onboarding, retention, training)
  • Information systems security governance
  • Identity and personal information management policies
  • Technical measures (protection, detection, encryption)
  • Protection and recovery measures
  • Physical security (servers, computers)

2. Rights of the Data Subject and Complaint Management

2.1 Rights of the Data Subject

Through the person responsible for personal information protection, each department must be able to respond to:

  • Withdrawal of consent for use or disclosure
  • Right of access and rectification
  • Right to be forgotten (data deletion and de-indexing where applicable)
  • Right to data portability in a structured, commonly used, and readable format

2.2 Contact and Complaint Management

In accordance with the law, any person wishing to access, modify, or complain about the handling of their personal information may contact:

  • Name: Geneviève Lafitte
  • Email: admin@tableedeschefs.org
  • Address: 679 rue Adoncour, Longueuil (Quebec), J4G 2M6
  • Phone: 450-748-1638 ext. 302

Additional provisions:

  • Requests are free of charge
  • Requests are recorded
  • Identity verification is required
  • A response must be provided within 30 days; otherwise, the request is deemed refused