We have developed this policy in accordance with Quebec’s Act 25 on the protection of personal information in the private sector to clarify our practices regarding the collection, use, and disclosure of personal information. Syri Stainless is committed to protecting the privacy of its customers, employees, suppliers, and other stakeholders.

 

Key adjustments for compliance with Act 25

Increased responsability and appointement of a privacy officer

Syri Stainless has appointed a Privacy Officer (PO). Alexandre Syri is responsible for overseeing compliance with this policy and can be contacted by email at the following address:

loi25@syri-stainless.com

 

Explicit statement of purposes for each collection

Syri Stainless will specify the purposes for which personal information is collected before or at the time of collection, in accordance with sections 5 and 6 of Bill 25. The information collected will only be used for the purposes clearly identified.

 

Changes to existing sections

Consent

We comply with the enhanced consent requirements set out in Act 25. Syri Stainless will:

• Obtain clear and explicit consent for the collection of sensitive information (e.g., personal data such as name, address, phone number, email address, financial data, and IP address).
• Provide simple and accessible means to withdraw consent at any time.

 

Minimal collection

In accordance with the principle of data minimization, Syri Stainless is committed to collecting only the information strictly necessary for the identified purposes.

 

Enhanced security measures

Syri Stainless has adopted protective measures in line with the requirements of Act 25, including:

• Anonymization or pseudonymization of data where possible.
• Adoption of an access management system based on employee roles.
• The obligation to report any confidentiality incidents to the competent authorities (CAI – Commission d’accès à l’information) and to the individuals concerned, in accordance with the law.

 

Individual rights

The rights of data subjects are respected, including:

• Right of access and rectification: Individuals may request access to their information and, if necessary, request rectification.
• Right to be forgotten: Syri Stainless will honor requests for data destruction when the identified purposes have been achieved or if retention is no longer necessary.

 

Transparency and incident management

Anyone may request information about our personal information management practices. In the event of an incident involving personal information, Syri Stainless undertakes to promptly notify the individuals concerned and the CAI if the incident presents a risk of serious harm.

 

Updating and reviewing the policy

This policy will be reviewed regularly to reflect legal and technological developments, including changes brought about by Bill 25.

 

Contact information for questions and complaints :

Personal Information Protection Officer

Adress : 70, Chemin de Joliette, St-Félix-de-Valois (Qc), J0K 2M0
Email: loi25@syri-stainless.com
Phone : 450-889-5921