Privacy policy

Groupe Gibault policy privacy

This privacy policy (hereinafter the “Policy”) governs the practices of Nouveaux Développements Groupe Gibault inc., Privilégiés Média inc., Scandina Gestion Locative inc., Développement Investiir inc., and Stuga location de chalets en ligne inc. (collectively "we" or "Gibault Group") with respect to the collection, processing and use, disclosure and retention of personal information you have provided to any entity related to Gibault Group including personal information that identifies you (hereinafter “Personal Information”).

Personal Information is any information relating to an individual who is or can be identified (an “identifiable person”). An identifiable person is a person who can be identified, directly or indirectly, including by reference to an identifier or to one or more elements specific to the physical, physiological, psychological, economic, cultural or social identity of that person, and who is protected by law in the jurisdiction in which he/she resides. In some jurisdictions, Personal Information does not include business contact information.

We are committed to protecting the privacy and security of the Personal Information that we collect, process and control. This Policy gives you notice of our practices relating to the interactions we have with you online, on the telephone or by any other medium of communication.

Please read our Policy carefully and check this page from time to time to stay informed of any modifications.

  1. Scope

The rights and obligations described in this Policy apply to all individuals, namely our employees, customers, suppliers, collaborators, partners, candidates, Internet users and users of the websites scandina.ca, stuga.ca and investiir.com (collectively the “Websites” or individually the “Website”). “) and any and all other third parties from whom Gibault Group collects Personal Information (hereinafter collectively the “Users” or “you”). Gibault Group, its employees and its partners who may have access to Personal Information must comply with the policies, procedures and practices described in this Policy.

This Policy refers to and applies to all Personal Information that we collect, whether through our Websites, forms, verbal or written communications, when you register of an account or pay for services, or otherwise from any User.

Any person who collects, processes, uses, maintains or discloses Personal Information on behalf of Gibault Group must agree to comply with the provisions of this Policy.

  1. Consent

By providing your Personal Information and by browsing the Websites, you consent to the processing, use and disclosure of your Personal Information in accordance with this Policy. Thus, you authorize us to collect, use and share the Personal Information that you provide to us, so that they are communicated or used in accordance with the purposes for which they were collected. We only collect Personal Information that is necessary.

You have the right to withdraw your consent to the communication or use of your Personal Information collected at any time. However, withdrawal of consent does not affect the lawfulness of the processing of your Personal Information before said withdrawal. If you do not consent to this Policy, please do not disclose your Personal Information, do not use the Websites or, where applicable, send an email or message to the Privacy Officer at Gibault Group using the contact details provided in the “Information” section below. Gibault Group will take the necessary measures to ensure that your Personal Information is deleted or anonymized as soon as you have exercised your right of withdrawal or opposition.

You can also contact the person responsible for the protection of Personal Information at Gibault Group for any questions you may have related to the processing and confidentiality of your Personal Information.

  1. Collection of personal information

As part of our operations and our efforts to better serve our customers and Users, we need to obtain and process information. This information includes certain offline or online data, including Personal Information. Therefore, throughout your use of our Websites and your interaction with us, you may be required to provide Personal Information that makes you an identifiable person.

For the purposes of this Policy, the Personal Information that may be collected includes identification and authentication information, including without limitation your first and last name, gender, email address, telephone number, employer, your position within your organization and your interests. Gibault Group may also collect information related to the provision and payment of services, including without imitation, your payment information as well as your transactions history.

Gibault Group may also collect, in the case of employees or applicants for employment, professional information, including, where applicable, your current company, department, position, location, resume and references regarding any application.

We generally do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services.

Indeed, we collect, and may store and share in accordance with this Policy, Personal Information about you on different occasions, including without limitation when:

  • you use one of our Websites;
  • you choose to communicate with us by email or via a Website;
  • we communicate with you as a User;
  • you register at one of our Websites, if applicable;
  • a user account is created for you;
  • you provide us with information through surveys;
  • you contact us for assistance or support;
  • one of our Websites sends us an error report;
  • one of our Websites returns data analysis reports to us.

In addition, Gibault Group may automatically collect certain technical data about your visit to the Websites, including, but not limited to, certain traffic data, the type of device you are using, data containing logs as well as clicks and usage paths on our Websites, IP address and geographic location, the User’s system, the Internet service provider, the type of Internet browser you use, the domain name, the access times, the duration of the visit, the referring URL, the marking of the date and time and exit page, and cookies, as well as information about how you use the Websites (the “Technical Data”).

When you speak with us by telephone, you may provide us with Personal Information during the call, and such Personal Information may be recorded in written notes. Such calls may also be recorded for training and quality control purposes. You will be informed at the start of the call whether it will be recorded, giving you the chance to hang up if you do not consent to such recording.

  1. Use of Personal Information

The purpose of this Policy is to protect your privacy and the Personal Information you provide to Gibault Group. Gibault Group is committed to ensuring this protection by controlling the use of all Personal Information that you disclose to it.

Gibault Group undertakes to treat the Personal Information of employees, customers and any User with the greatest care and confidentiality.

We use this Personal Information collected from you in particular to:

  • provide, update, deliver and improve our Websites and the services offered through our Websites;
  • deliver the products and services you have ordered;
  • develop new products and services;
  • send you information that is collected and used for technical, administrative or support purposes;
  • manage your customer account and provide you with customer support;
  • carry out analysis of your use of our Websites and services;
  • communicate with you by email, mail, telephone and/or mobile device about products and services that may be of interest to you;
  • manage our business;
  • respond to investigations, court orders, legal processes, or investigate, prevent or take action regarding illegal activities, suspected fraud or situations involving potential threats to the physical safety of any person or as otherwise required by the law;
  • carry out missions described during the collection of information;
  • compare your information with job offers to assist us in finding a job that will best suit your profile if you have contacted us for an application;
  • monitor and analyze usage trends and activities related to our Websites, products and services;
  • detect, investigate and prevent fraudulent or unauthorized transactions or illegal activities;
  • protect the rights and property of the Parties (as defined below);
  • link, connect or consolidate information we collect about you or with other information sources;
  • better evaluate and respond to your needs and provide you with a personalized experience based on an informed analysis, conducted by us and our authorized partners, of your usage and preferences.

We may also use your contact information to send you communications for the purpose of providing announcements, promotional offers, including information on products and services offered by Gibault Group and its affiliates, alerts, surveys and/or other information. If you do not wish to receive this promotional information and email communications from Gibault Group, we offer Users the possibility of exercising their right of withdrawal and unsubscribe. Users can (i) follow the instructions included in these communications or (ii) communicate with the person responsible for the protection of Personal Information at Gibault Group using the contact details provided in the “Information” section below.

When you provide us with your Personal Information, only employees of Gibault Group and our affiliates and our authorized partners who need access to the Personal Information in order to provide you with services related to the Websites, technical support or any services offered by Gibault Group will have access to your Personal Information and will be authorized to use it. Gibault Group undertakes to ensure that its employees and authorized partners are informed of their obligation to guarantee the security and confidentiality of your Personal Information, in the context of the communication and/or consultation thereof. Also, your Personal Information may be provided to cloud, web hosting and data processing service providers, and to third party suppliers of Gibault Group, including without limitation payment platforms and financial institutions.

Personal Information may also be used for purposes compatible with those for which it was collected and for your benefit, including without limitation for purposes of dissemination, correspondence, information or for the purpose of personalizing your experience on the Websites, answering your questions, understanding your needs, informing you of our offers and promotions, and manage cases of fraud and theft, if applicable.

Gibault Group may also anonymize your Personal Information in order to use it for research and development and continuous improvement purposes.

We use Technical Data for the purpose of reporting on the Websites and analyzing usage trends. Additionally, it allows us to detect problems with our server, manage the Websites, track users' movements, and use and collect broad demographic information. See the “Cookies” section below to find out more.

  1. Retention, sharing and cross-border transfer of Personal Information

Gibault Group keeps your Personal Information securely and confidentially as required by applicable law, all to ensure the integrity and confidentiality of your Personal Information.

When you provide Personal Information to Gibault Group, you agree that such information may be transferred electronically over the Internet to Gibault Group, and that Personal Information may also be transferred, stored, hosted and processed on behalf of Gibault Group, by a third party. Gibault Group may use private cloud servers to store your Personal Information.

Personal Information collected by Gibault Group may only be accessed or disclosed to Gibault Group personnel and third parties authorized by Gibault Group, such as its suppliers or service providers, as necessary in the course of its activities. However, some information you choose to share with us may be shared publicly, such as your username or other content you post when using interactive features of our Websites, including comments you may provide or questions that you may ask.

Technical Data may also be shared with research, analysis or strategic partners and used to improve our products and services.

We may from time to time use external suppliers and service providers to provide some of our products and services, including external payment platforms. We may therefore communicate your data to these third parties, or they may directly collect such data, in order to provide you with certain products and services at your request. In addition, we may share your Personal Information with other members of our group for the purposes of data consolidation and storage, simplified management of customer information, reporting and other internal uses, which could include cross-border data transfer.

If we must share Personal Information with third-party providers, in particular to ensure its security and protection, Gibault Group will ensure that the protection and confidentiality of this information meet the standards of this Policy and will ask these providers to comply with this Policy. Third-party vendors are only permitted to use Personal Information for the purpose of providing their services to Gibault Group, and Personal Information may not be disclosed or transferred by such third parties without Gibault Group's consent.

Gibault Group does not sell or rent its customer lists or the Personal Information it collects to third parties.

In the event that Gibault Group uses the services of a third-party provider to host and store the Personal Information it collects, such third party provider may be located in Canada, the United States, Europe, and/or any other country in which we, our affiliates or the service providers we use operate. Therefore, you hereby consent to the transfer of information, including Personal Information, to jurisdictions other than your jurisdiction of residence, where the data protection legislations may be different from those of your jurisdiction of residence, for the purposes of data hosting, and the Gibault Group will hold companies outside your jurisdiction of residence responsible, under applicable law, for any Personal Information that may be transferred to them. Gibault Group undertakes to respect all of its obligations under applicable law during any such cross-border transfer of your Personal Information.

However, despite Gibault Group's practices and procedures regarding the protection of Personal Information, please note that no method of transmission over the Internet or storage of data is completely secure, and that no security measures can prevent all potential security violations. Consequently, you agree not to hold the Gibault Group, its past, present or future employees, managers, directors, contractors, consultants, shareholders, suppliers, parent or affiliated companies, agents or representatives, predecessors, successors (hereinafter collectively the “Parties”), liable for any loss or damage, of any type, resulting directly or indirectly from the misappropriation, interception, modification, deletion, unauthorized access to Personal Information or a data breach regarding Personal Information provided through our Websites.

Gibault Group may share Personal Information with trusted partners to help us perform statistical analyses, send you communications or provide support. All such third parties are prohibited from using your Personal Information except to provide these services to Gibault Group, and are required to maintain the confidentiality of your Personal Information.

Furthermore, we could be engaged in an acquisition or merger procedure of our company, our products or services. The information we store including names, email addresses, and other information related to our services may be sold or transferred as part of such a transaction. We may also sell, assign or transfer this information in connection with the sale of all or part of our business or assets. You will be notified by email and a notice on our Websites will be posted in the event of any change relating to the ownership of our company, our assets or the use of your Personal Information.

Under applicable laws, we may be required to share Personal Information with a third party. For example, we may be required to disclose Personal Information pursuant to a court order, subpoena or warrant. Additionally, subject to applicable laws, we may voluntarily provide Personal Information to assist law enforcement in an investigation or when disclosure is necessary to protect our systems, our business or the rights of others, including for security reasons.

We will share your Personal Information only in the ways described above, to which you hereby consent, and in accordance with applicable privacy laws.

  1. Users’ rights and applicable legislation

As responsible for processing your Personal Information, Gibault Group must comply with all applicable laws and regulations regarding the protection of Personal Information depending on the jurisdiction where the User is located.

Gibault Group will collect, process, store, disclose and dispose of the Personal Information you submit to us in accordance with the privacy laws applicable in the jurisdiction where you are located, including without limitation the laws applicable in the province of Quebec and the applicable federal laws of Canada, and the laws and regulations applicable in the territory of the European Union and in the United States. Gibault Group undertakes more particularly to respect, depending on the jurisdiction of residence of the User, the Personal Information Protection and Electronic Documents Act (PIPEDA), the Act respecting the protection of personal information in the private sector, including the updates made by the Act to modernize legislative provisions as regards the protection of personal information, the General Data Protection Regulation 2016/679 (GDPR) and the California Consumer Privacy Act.

These laws give you in particular a right to information, access, rectification, erasure and portability of your Personal Information as well as the right to object to the use of your data, all in accordance with said laws.

In accordance with the aforementioned laws and regulations, you can exercise these rights at your convenience. Gibault Group will at all times respect all rights granted to its Users by applicable law.

You can exercise these rights by writing to our Privacy Officer identified in the “Information” section below. You will then be contacted within a reasonable time to verify your identity before your request is processed.

  1. Destruction or anonymization of Personal Information

Once the purposes for which Personal Information was collected or used are accomplished, we ensure that your Personal Information is destroyed or anonymized to the extent permitted by applicable law, unless you exercise your rights relating to your Personal Information in advance, according to the terms provided below. While destruction is a definitive elimination process, anonymization means that your Personal Information is modified so that it no longer allows you to be identified directly or indirectly, and this is irreversible. Destruction and anonymization are carried out in a safe and secure manner, according to recognized best practices and according to the criteria and methods determined by applicable laws.

  1. Rights of access, rectification, opposition and withdrawal

We retain Personal Information that you provide to us when you create an account on one of our Websites, or any other information that you share with us when using our Websites, for (i) the entire time your account is active or (ii) for the period necessary to fulfill the purpose for which we initially collected such Personal Information, unless otherwise required by applicable law.

Gibault Group undertakes to confirm the existence or non-existence of Personal Information concerning you, to give you access to your Personal Information in its custody or control and to make rectifications. Therefore, you can at any time request access to your Personal Information that we have in our possession. You can also, at any time, ask us to rectify or correct the Personal Information we hold. Indeed, it is your responsibility to provide us with Personal Information that is true and accurate and you must inform us of any modification to it.

You also have a right of opposition and withdrawal concerning your Personal Information, namely the possibility of requesting that your Personal Information no longer appears in a consultation, distribution or transmission file, or withdraw your consent at any time. Gibault Group undertakes to take the necessary means to ensure that your Personal Information is erased as soon as you have exercised your right of withdrawal.

Please note that we may, to the extent permitted by applicable law, not be able to respond to requests to delete your Personal Information if (i) this information has been anonymized or (ii) this is necessary to:

  • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;

  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;

  • Comply with the California Electronic Communications Privacy Act, when applicable; or

  • Comply with an existing legal obligation.

You can limit the use of your Personal Information and refuse to have your Personal Information used for certain purposes mentioned during collection.

Finally, you can, at any time, delete your customer account as well as the information associated with it.

In order to exercise these rights, we invite you to communicate in writing with our Privacy Officer identified in the “Information” section below. Any request to exercise your rights will first require that you be able to prove your identity. In all cases, we will process requests for access or rectification in accordance with applicable legislation.

  1. Obligations and undertakings of Gibault Group

Gibault Group undertakes to make all necessary efforts to fulfill its obligations regarding the protection of the Personal Information of all Users in accordance with the highest standards of personal data protection.

Gibault Group undertakes to respect all rights and obligations stipulated by applicable laws and regulations regarding the protection of personal information in the collection and processing of your personal data. More particularly with regard to Users residing in the province of Quebec, Gibault Group undertakes to:

  1. In the event of a confidentiality incident involving Personal Information (“Incident(s)”), take reasonable measures to reduce the risk of any injury to the concerned users and to prevent such incident from occurring again;

  1. Maintain a register of Incidents (“Register”), copy of which may be requested, and must be provided at request, by Quebec’s Commission d’accès à l’information (“Commission”);

  1. Promptly notify the Commission and the concerned Users in the event of an Incident that poses a risk of serious injury;

  1. Conduct a privacy impact assessment (“PIA”) before disclosing Personal Information without the consent of the concerned Users for study, research or statistics reasons;

  1. Conduct a PIA when required by applicable law, including without limitation before Personal Information is disclosed or communicated outside of the province of Quebec; and

  1. Promptly treat and execute any portability request of the Personal Information by the User.

  1. Hyperlinks and Social media

For your convenience, the Websites may include hyperlinks to external websites operated by third parties. By clicking on these hyperlinks, you will leave the Website you were browsing to those of third parties, who may be subject to different privacy policies and practices. This Policy no longer applies when you leave our Websites. Please review the privacy policies of such other websites to which you are redirected before providing Personal Information.

Our Websites may also offer sharing features, links or other tools integrated to social media networks. Your use of such functions allows you to share information with your contacts or the public, depending on your configurations or the sharing functions available on the networks used. Be sure to also review the privacy policies of the networks that provide these sharing functions to obtain more information on the purpose and scope of data collection and processing by these networks or companies.

We are not responsible for the collection, use and disclosure of Personal Information by other entities that you may access from our Websites, and we accept no liability in this regard.

  1. Cookies

Cookies are small, simple files which, as you navigate through the different pages of any website, are downloaded and stored by your browser on the hard drive of your computer or other device you use to remember information about you, such as your language preference, for example. Cookies cannot be used to run programs or deliver viruses to your computer or device. Cookies are uniquely assigned to you and can only be read by a web server in the domain that sent you the cookie.

The information stored there may be returned to our servers or to the servers of the third parties concerned during a subsequent visit, all of which will allow us to improve and personalize your experience during such subsequent visit.

We use cookies to understand your use of our Websites in order to improve its content. We may also use cookies to offer you products or services that match your interests, as identified through the Websites. If you choose to provide Personal Information through our Websites, such Personal Information may be linked to stored cookies and the information they contain.

One of the primary purposes of cookies is to provide a convenient feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize Gibault Group pages, or register with Gibault Group site or services, a cookie helps Gibault Group to recall your specific information on subsequent visits. This simplifies the process of recording your personal information. When you return to the same Gibault Group Website, the information you previously provided can be retrieved, so you can easily use the Gibault Group features that you customized.

You have the option to manage cookies on your computer, as you have the option to accept or decline them. All major web browsers automatically accept cookies, but allow you to block or delete them from your system; however, disabling cookies may restrict your use of our Websites and/or some of their features. To learn more about your ability to manage cookies, please review your browser's privacy features.

Please also note that we use Google Analytics in particular to better understand how our Users use the Websites. Google Analytics therefore has access to Personal Information that we cannot control. To learn more about how Google uses your Personal Information, please visit: https://www.google.com/intl/fr/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Please note that Gibault Group has no control and is not responsible for any use made by your browser or Google of any Personal Information, Technical Data or cookies concerning you recorded by the browser in question or collected by Google.

  1. Minors

We are committed to protecting children's privacy and encourage parents and guardians to take an active role in their children's online activities and look out for their children's interests.

We do not intentionally collect Personal Information from children under the age of fourteen (14) and do not target children under the age of fourteen (14) on our Websites. If you are under fourteen (14) years of age, you must ask your parent or guardian for permission to use the Websites.

If you are a parent and learn that your child has communicated Personal Information to us, we invite you to contact our Privacy Officer at Gibault Group using the contact details provided in the “Information” section, so that he may proceed to delete your child's Personal Information as soon as possible.

  1. Security

Gibault Group will ensure that Personal Information is stored securely using modern software that is kept up to date and that appropriate measures are put in place to ensure the security of the information and prevent unauthorized sharing. Gibault Group keeps the Personal Information compiled in a secure environment and is committed to maintaining a high level of confidentiality by integrating the latest technological innovations, as well as any appropriate physical and organizational security measures, thus ensuring confidentiality, integrity and availability of your Personal Information.

Indeed, our Websites are equipped with security features to protect the loss, misappropriation and alteration of the information under our control. Our Website servers are backed up regularly and protected by standard security systems.

When your Personal Information is transferred, stored, hosted and/or processed on behalf of Gibault Group by a third party, Gibault Group seeks to apply the most secure means of transfer and storage. However, we reiterate that no method of transmission over the Internet or electronic storage is completely secure and we cannot ensure or warrant the security of any information you transmit or provide to us, and Gibault Group’s obligation regarding such security is a best-effort obligation. Thus, in the event that an Incident occurs, we will notify any person affected by this Incident in accordance with the law and we will take all reasonable measures to reduce the risk of harm being caused in addition to taking reasonable measures to prevent other Incidents from occurring.

  1. Modification

Gibault Group reserves the right to modify this Policy at any time and for any reason it deems necessary, including, but not limited to, to comply with any changes or modifications to applicable law. In the event of any modification to this Policy, the updated version of the Policy will be published and made available without delay and will come into force immediately following its posting on the Websites. If applicable, we will notify you of significant changes in the way we treat Personal Information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our Websites and/or by updating any privacy information. Your continued use of the Websites and/or available services after any such modifications will constitute your: (a) acknowledgment of the Policy as modified; and (b) an agreement to comply with and be bound by this Policy.

The version of this Policy applicable each time you access a Website is that in effect on the date and time the User accessed it, as displayed on the concerned Website at that time.

  1. File a complaint

If you believe that your rights have not been respected or that this Policy has not been applied, you can send a complaint to our Privacy Officer identified below, or to the government authority having the jurisdiction to rule on a complaint related to the protection of Personal Information in your jurisdiction.

  1. Information

Gibault Group will act as controller of all Personal Information collected on the Websites. As responsible for processing your Personal Information, Gibault Group has appointed a Privacy Officer who will be responsible for the application of this Policy and Gibault Group's ongoing compliance with the Policy or any applicable law. If you have any questions regarding this Policy or wish to exercise any rights guaranteed to you by this Policy, please contact our Privacy Officer at the following contact details :

Alexandra Fournier

[email protected] 

102-7750 Boul. Cousineau

Saint-Hubert (Qc) J3Y 0C1

Canada

Last update : May 27, 2024