Data Protection Policy

 

Policy Intent

 

This policy aims to specify Maison Marie-Rollet’s commitments regarding personal data protection, preservation, and management. As required by Law 25, it is crucial that all organizations define clear guidelines to reinforce personal data security.

Maison Marie-Rollet ensures compliance with all rights legislation, data protection laws, and applicable regulations regarding personal data collection, use, retainment, and destruction.

 

Application Scope

 

The current policy targets all personal data retained by the organization as part of its operations.

This encompasses the personal data of the organization personnel, as well as the personal data of its beneficiaries, providers, donors, administrators, and partners.

 

Implementation

 

The Personal Data Manager, the Committee on Access to Information and Protection of Personal Information, and the board members are responsible for implementing the policy.

All members of the team must sign a confidentiality agreement as part of their professional duties.

 

Our Commitment

 

Maison Marie-Rollet undertakes the following:

  • Retaining only the necessary personal data and ensuring its safe destruction once it is no longer needed.
  • Ensuring the protection of the data by applying the implemented measures.
  • Obtaining the informed consent of the owner of the personal data before collecting, using, or disclosing it.
  • Ensuring the quick and confidential processing of complaints, as well as the weekly updating of incident records.

 

 

Complaint Processing

 

Anyone who wishes to file a complaint, relating to a confidentiality breach, may do so by sending an email with their name, contact information, and complaint motives to the Personal Data Manager.

protection.renseignements.personnels@maisonmr.com

Complaint processing is confidential. We undertake to respond within 30 days following the reception of the complaint by email. Once the complaint has been received, the Committee on Access to Information and Protection of Personal Information will meet to discuss it. The Commission for Access to Information will be contacted, if needed.