Protection of Personal Information

This page will provide you with information and policies related to the protection of Personal Information, as adopted by Larochelle Groupe Conseil:

Privacy management program

Privacy Officer at Larochelle

Policy on the protection and disclosure of Personal Information

Policy on the protection and disclosure of Personal Information on candidates for a position

Complaint handling process

Privacy management program

Overview of our privacy management program

1. Larochelle’s commitment

First, we appointed an experienced professional to oversee the development, implementation, and maintenance of our privacy management program. Our employees have been trained on the policies, processes, and procedures in place.

Our internal governance structure fosters a culture of privacy. In addition to the individual appointed to oversee the development, implementation, and maintenance of our privacy management program, other professionals are also involved in managing personal information.

The person responsible for privacy protection:

ensures that the program’s control measures are applied
coordinates control measures with appropriate individuals
is responsible for the ongoing assessment and revision of the program’s control measures
represents Larochelle in the event of an investigation following a complaint
promotes respect for privacy within our organization.

Our in-house verification program ensures the compliance of our policies regarding the protection of personal information.

2. Program’s control measures

a) Inventory of personal information

We have reviewed the personal information in our possession and the way it has been managed. We are aware of the personal information we possess and by using a specific process, we will determine whether it is essential to retain. The types of personal information collected and the conditions under which it is saved are documented. As well, we know what kind of consent we must obtain from those involved and how the information is protected.

b) Policies, processes, and procedures

We have developed and documented policies, processes, and internal procedures accessible to employees to:

(i) collect, use, and communicate personal information including meet consent and notification requirements. Our employees understand their obligation to inform individuals of the reason for which they collect, use, and communicate personal information and obtain their consent.

(ii) access and correct personal information and correction: our employees know that individuals have the right to access their personal information and are aware of the timeframes that must be respected to make corrections.

(iii) ensure the responsible use of information and information technologies, including administrative, physical, and technological security control measures as well as the appropriate control access. We have put in place appropriate security measures. Our filing cabinets are locked, and our electronic databases are protected by access control and encryption measures. Access control is based on job positions and is used to limit access to information. Therefore, our employees only have access to the personal information they require to carry out their work at Larochelle.

(iv) ensure the safe storage and destruction of personal information collected in keeping with regulations established based on recommended industry practices.

(v) have the option to lodge a complaint for failure to comply with our principles. Larochelle has adopted an internal policy for a person wishing to lodge a complaint related to our organization’s management practices of personal information =.

c) Risk assessment

In the case of any new initiative related to the collection, use and communication of new personal information, Larochelle assesses the risk of security threats.

d) Training and awareness

Our employees are trained in the protection of privacy and made aware of its importance. Our employees attend annual awareness courses adapted to their role. With the help of an external firm, these courses are updated to account for new threats related to the protection of personal information. These courses are compulsory for all employees.

e) Intervention/management protocol in the event of a breach or incident

In the event of a privacy incident or breach, our procedure favours a collaborative approach based on involving the appropriate employees.

f) Management of service providers

Our data processing service vendors only have access to the personal information collected by Larochelle required to carry out contractually assigned tasks. Control measures have been implemented to limit access to information and protect it.

Ongoing evaluation and revision

Larochelle controls, evaluates, and revises its privacy management framework to ensure that it remains relevant and efficient.

1. Monitoring and revision plan

This plan includes a schedule for the revision of all policies and other control measures of the program.

2. The program’s control measures

Our ongoing process makes it possible to:

• identify new threats and risks;

• take into account the latest findings related to complaints or following audits;

• identify new services requiring the collection, use, or increased communication of personal information;

• confirm the effectiveness of our plan for heightened awareness and the level of compliance with our policies and procedures.

Based on the results of its evaluation process, Larochelle determines if updates or revisions to the program’s control measures are required. Employees are made aware of all changes to the program. The individual responsible for the protection of personal information takes appropriate measures to:

a) constantly update the inventory of personal information, ensuring that it is current, and identify and evaluate new collection requirements.

b) review and revise policies as needed following an audit evaluation after a breach or complaint, or a new direction or practice revision.

c) address evaluated impact on privacy and assess security threats and risks following new initiatives within the organization.

d) review and modify courses addressing heightened awareness annually.

e) review and adapt intervention/management protocols in the event of a breach or incident and implement recommendations and lessons learned in the wake of incidents.

f) review and, if needed, fine-tune requirements with service providers.

Privacy Officer at Larochelle

Nathalie Fontana, Senior Director, Human Capital and Administration
nathalie.fontana@larochellegc.com
Phone: 514 848-1881, Qc 418 317-0663, poste 260

Policy on the protection and disclosure of Personal Information for Users of the larochellegc.com website (“Policy”)

Larochelle Groupe Conseil (“Larochelle”) takes the availability, integrity and confidentiality of Personal Information of its website’s users (“Users”) seriously. This Policy will be revised on occasion, to reflect changes in the way we use Personal Information. The latest version is dated August 28, 2023.

For the purpose of this Policy, “Personal Information” refers to any information which makes it possible to identify a natural person directly or indirectly.

This Policy summarizes Larochelle’s guidelines regarding the collection, use, disclosure, retention and destruction of our Users’ Personal Information, which constitute the lifecycle of Personal Information at Larochelle.

The availability, integrity and confidentiality of Personal Information are crucial at Larochelle

At Larochelle, the relationships we establish with our Users are rooted in trust. We are committed to protecting the Personal Information of our Users. Only authorized Larochelle employees can access your Personal Information. Our business processes and IT systems are designed to prevent the unauthorized or improper use, publication, modification or destruction of your Personal Information. When we ask you for Personal Information, we explain to you the reason for our request and ask for your consent.

Larochelle collects Personal Information required for the management of the eBooks it publishes, as well as to respond to general inquiries and address requests it receives; Larochelle respects the principle of necessity. Larochelle protects the Personal Information collected throughout its lifecycle and has a process for its destruction. We do not hold on to our Users’ Personal Information indefinitely.

What Personal Information do we obtain from our Users?

We generally collect the following Personal Information from our Users:

Telephone number, email address, IP address and location.

How do we collect your Personal Information?

We obtain Personal Information directly from Users when they contact us either by mail or electronically.

Why do we collect and use your Personal Information?

Before collecting your Personal Information, we explain to you our reasons for obtaining this information and ask for your consent. If we need your Personal Information for another purpose, we will contact you to explain our reason and obtain your consent. Reasons for which we collect and use your Personal Information may include:

Verifying your identity and confirming the information that you have provided in order to prevent and detect fraud ;
Contacting you by email or telephone ;
Responding to your inquiries or concerns ;
Complying with regulatory requirements ;
Enhancing or personalizing user experience.

You can, at any time, notify us that your Personal Information can no longer be taken into account for future communications.

Why do we share your Personal Information?

Further to one or more of the reasons set forth in the section on the purposes for which we collect, use and disclose your Personal Information, Larochelle will share your Personal Information with another employee or organization when it is necessary and appropriate to do so, and in the following situations:

Our employees

Only authorized Larochelle employees who need to know your Personal Information in order to carry out their duties will have access to it. We are specifically referring to employees in the Sales and Communications sectors.

Our service providers

Third parties providing services, on Larochelle’s behalf, like services relating to our websites: hosting, maintenance, and other services to us. These third parties may have access to, or process personal information as part of providing those services for us. Our contracts with them require them to maintain the confidentiality of such information.

Legal obligations

There may be situations wherein we collect, use or disclose your Personal Information without advising you or obtaining your consent if we are required to do so by law or lawful authority. For example, we could disclose your Personal Information as part of a lawsuit to comply with a legal disclosure obligation or a court order.

We could also disclose your Personal Information to any party involved in business agreements such as a sale, acquisition, transfer or merger of the company, or other.

How is Personal Information secured?

We have adopted policies to protect your Personal Information against unauthorized access, disclosure or destruction. We have implemented, among others, administrative, material and technological protective measures using security software, passwords and firewalls to block unauthorized access to computers. Our employees are trained in the confidential handling of Personal Information.

However, no online transmission or storage of your Personal Information is totally secure. Internet developments relating to the security and protection of your Personal Information are beyond our control.

While we take every measure to protect your Personal Information, we cannot 100% guarantee the security of data transmitted electronically.

How is your Personal Information stored and destroyed?

Your Personal Information is physically stored in Larochelle’s offices, on our servers and/or in a cloud environment. When we no longer require your Personal Information for the purposes set forth in this Policy, or for any other legally authorized purpose, we will dispose of it in a secure manner.

What are your rights?

You have the right to:

View and modify your consent preferences relating specifically to your Personal Information ;
See how we use cookies, web beacons and similar technologies ;
Share your communication preferences with us ;
Object to the use or disclosure of your Personal Information for specific reasons ;
View your Personal Information and request modifications if it is inaccurate. To do so, you must submit a written request, providing details that will allow us to identify you, and specifying the information to be corrected. Send your request to the Sales Department at the following address: ventes@larochellegc.com. This service is generally provided free of charge.
To obtain the communication of your computerized personal information in a structured and commonly used technological format. At the request of the concerned person, the information may also be communicated to any person or organization authorized by law to collect it. The person responsible for the protection of personal information will respond to a request diligently within a reasonable time frame.

Consent

By contacting Larochelle, whether for the eBooks it publishes, general inquiries it receives or requests for mandates, you agree to the collection, use and disclosure of your Personal Information for the purposes set forth in the section outlining why we collect, use your Personal information and why do we share your Personal Information.

As required by law, we will ask for your consent before using your Personal Information for any purposes other than those covered by your initial consent.

You can revoke your consent at any time, subject to legal restrictions. Withdrawing your consent could impact our ability to contact you in the future.

Questions, concerns and updates of your Personal Information

Viewing, correcting or updating your Personal Information ;
Submitting questions or raising concerns regarding this Policy or any other matter relating to the collection, use, protection, retention or sharing of your Personal Information by Larochelle ;
Revoking your consent to the use or sharing of your Personal Information by Larochelle.

Please address all requests of this nature to: ventes@larochellegc.com

Policy on the protection and disclosure of Personal Information on candidates for a position (“Candidates’ Policy“)

For the purpose of this Policy, “Personal Information” refers to any information which, used on its own or combined with other information, makes it possible to identify a person.

The availability, integrity and confidentiality of Personal Information are crucial at Larochelle

Larochelle only collects Personal Information required for the management of the files of Candidates for positions to be filled. Larochelle respects the principle of necessity.

Larochelle protects the Personal Information collected throughout its lifecycle and has a process for its destruction. We do not hold on to our Users’ Personal Information indefinitely.

What Personal Information do we obtain from the Candidates?

We generally collect the following Personal Information from the Candidates:

Postal address;
Telephone number and email address.

How do we collect your Personal Information?

We obtain Personal Information directly from the Candidates when they submit a job application online or on paper and from any related document such as a cover letter or CV. We also collect your Personal Information in order to contact you after you have submitted your job application.

With the Candidates’ consent, their Personal Information can also be provided by external suppliers.

Why do we collect and use your Personal Information?

Before collecting your Personal Information, we explain to you our reasons for obtaining this information and ask for your consent. If we need your Personal Information for another purpose, we will contact you to explain our reason and obtain your consent. The data collected may be used to assess a candidate’s eligibility. Reasons for which we collect and use your Personal Information may include:

Verifying your identity and confirming the information that you have provided in order to prevent and detect fraud;
Contacting you by email or telephone regarding your job application;
Responding to your inquiries or concerns;
Complying with regulatory requirements, ensuring that you can legally work in Canada, for example ;
Analyzing data to carry out a market study;
Enhancing or personalizing user experience.

You can, at any time, notify us that your Personal Information can no longer be taken into account for future communications.

If you are applying for a job, we will keep your Personal Information on file to consider you for other positions that may be of interest to you at Larochelle. However, you may advise us, at any time, that you no longer wish to be considered for positions other than the one for which you applied. If your candidacy is retained, your Personal Information will be used for your employee file.

Why do we share your Personal Information?

Our employees
Only authorized Larochelle employees who need to know your Personal Information in order to carry out their duties will have access to it. We are referring to employees in the Recruitment, Human Resources and Sales sectors as well as executives and/or managers involved in the interviews.

Our clients
Since Larochelle is a consulting firm, at times, we may need to communicate your CV to clients in order to obtain a mandate. For all other requests dealing with your personnal information, we will obtain your consent previously.

Our service providers
Third parties providing services, such as secure data storage, on Larochelle’s behalf, will have access to your Personal Information.

Legal obligations
There may be situations wherein we collect, use or disclose your Personal Information without advising you or obtaining your consent if we are required to do so by law or lawful authority. For example, we could disclose your Personal Information as part of a lawsuit to comply with a legal disclosure obligation or a court order.

We could also disclose your Personal Information to any party involved in business agreements such as a sale, acquisition, transfer or merger of the company, or other.

How is Personal Information secured?

While we take every measure to protect your Personal Information, we cannot 100% guarantee the security of data transmitted electronically.

How is your Personal Information stored and destroyed?

What are your rights?

You have the right to:

View and modify your consent preferences relating specifically to your Personal Information ;
See how we use cookies, web beacons and similar technologies ;
Share your communication preferences with us ;
Object to the use or disclosure of your Personal Information for specific reasons ;
View your Personal Information and request modifications if it is inaccurate. To do so, you must submit a written request, providing details that will allow us to identify you, and specifying the information to be corrected. Send your request to the Recruitment Department at the following address: recrutement@larochellegc.com. This service is generally provided free of charge.
To obtain the communication of your computerized personal information in a structured and commonly used technological format. At the request of the concerned person, the information may also be communicated to any person or organization authorized by law to collect it. The person responsible for the protection of personal information will respond to a request diligently within a reasonable time frame.

Consent

By submitting your candidacy, in any form whatsoever, you consent to the collection, use or sharing of your Personal Information set forth in the section outlining why we collect, use your Personal information and why do we share your Personal Information.

As required by law, we will ask for your consent before using your Personal Information for any purposes other than those covered by your initial consent.

You can revoke your consent at any time, subject to legal restrictions. Withdrawing your consent could impact our ability to contact you in the future or to consider you for a job in Larochelle.

Questions, concerns and updates of your Personal Information

Viewing, correcting or updating your Personal Information ;
Submitting questions or raising concerns regarding this Policy or any other matter relating to the collection, use, protection, retention or sharing of your Personal Information by Larochelle ;
Revoking your consent to the use or sharing of your Personal Information by Larochelle.Please address all requests of this nature to: recrutement@larochellegc.com

Complaint handling process

If you believe that you have been a victim of identity theft, notify us immediately. We are committed to respecting the confidentiality, integrity and availability of the Personal Information we collect, use, retain and share within the framework of our activities. To learn more about our confidentiality policy, see the Policy on the Protection and Disclosure of Personal Information for Users of our Website, which is published on our website.

Telephone spoofing

Fraudulent companies occasionally use company phone numbers to trick our clients. In this practice, known as telephone spoofing, the fraudster modifies the number or name displayed on the called party’s phone, leading them to believe that the call is legitimate. If you have reason to believe that someone is pretending to be a Larochelle employee, we urge you to contact the Centre antifraude du Canada online or by calling 1-888-495-8501. Provide the Centre with as much information as possible, including the date and time of the call, the telephone number displayed, the telephone number of the call recipient and the name of the service provider.

Bear in mind that the number on your call display is not necessarily that of the caller. Furthermore, you should know that Larochelle will never ask for your Personal Information by phone.

For any questions or concerns, write to us at: info@larochellegc.com

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.