|
|
|
|
|
|
|
|
We have a comprehensive privacy policy governing all personal information collected by Canadian Drives. This policy conforms to PIPEDA (The Personal Information Protection and Electronic Documents Act) guidelines and is based on the Canadian Standards Association (CSA) Model Code for the Protection of Personal Information (CAN/CSA-Q830-96).
|
|
|
Protecting Personal Information
|
|
|
A. Purpose: Canadian Drives recognizes the right of an individual to the protection of their personal information and the need for information management practices that adhere to national standards. We will ensure that our policies and operational guidelines, directed by the principles of the CSA Code govern the management of personal information of our members, donors, staff and volunteers.
|
|
|
B. Scope: This policy will be applied to all personal information collected, used or disclosed, about an identifiable individual during the course of commercial activities. We will ensure that any third parties that have been approved, designated or contracted to act on our behalf are aware of and in compliance with the principles set forth in our Privacy Policy.
|
|
|
C. Definitions
|
|
|
i) Personal Information – Information that can be used to identify, distinguish or contact a specific individual; including opinions, beliefs, financial information, birth date and other identifying data but does not include the name, title or business address or telephone number of an employee of an organization.
|
|
|
ii) Commercial Activity - Any particular transaction, act or conduct or any regular course of conduct that is of a commercial character, including the selling, bartering or leasing of donor, membership or other fundraising lists.
|
|
|
iii) Consent – Voluntary agreement with what is being done or proposed. Consent can be either express or implied. Express consent is given explicitly, either orally or in writing. Express consent is unequivocal and does not require any inference on the part of the organization seeking consent. Implied consent arises where consent may reasonably be inferred from the action or inaction of the individual.
|
|
|
D. The Privacy Principles: To guide us in protecting your privacy, Canadian Drives follows these 10 principles which are based on those created by the CSA and rooted in the Personal Information and Electronic Documents Act.
|
|
|
1) Accountability – We recognize our responsibility for all personal information under our control.
|
|
|
In order to ensure compliance of this Privacy Code, Canadian Drives shall designate an individual to be responsible for the implementation of and adherence to the following principles. We will also include a privacy protection clause in contracts with any third parties we deal with.
|
|
|
2) Identifying Purposes – We and those designated or contracted to act for or on our behalf, shall identify the purposes for which personal information is collected at or before the time the information is collected.
|
|
|
We will clearly define the purpose or purposes intended for personal data before we collect the information and we will make it available at the time of collection. Any personal information in our possession will only be used for the original purpose for which it was collected. Any secondary or optional uses of information by Canadian Drives will be identified and individuals will be provided with an opportunity to reject or accept such uses.
|
|
|
3) Consent – We must have your knowledge and consent for the collection, use, or disclosure of your personal information
|
|
|
We will provide a clear explanation of the intended uses of your personal information. We also recognize your right to prevent your personal information from being provided to other organizations on a reciprocal basis for the purpose of fundraising. Hence, we will not disclose any personal information without providing an opportunity for our supporters to opt-out.
Greenpeace recognizes that individuals have the right to withdraw consent to personal information use at any time. We will provide our supporters with an opportunity to opt-out of name exchanges annually.
|
|
|
4) Limiting Collection – The collection of personal information shall be limited to the purposes we have identified to you. Information shall be collected by fair and lawful means.
|
|
|
We will not collect personal information in an indiscriminate manner, nor will we collect information from other individuals associated with you such as family members or friends without your consent and knowledge, and only in situations that are deemed to be most compelling.
|
|
|
5) Limiting Use, Disclosure and Retention – We will only use or disclose your personal information with your consent (or as required by law) for the purposes for which it was collected.
|
|
|
We will ensure that consent for personal information use is applied only to purposes agreed to initially by the individual. Canadian Drives will only keep your information as long as needed for its identified purposes.
|
|
|
6) Accuracy – We will keep your personal information accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.
|
|
|
Opportunities for individuals to inquire about and review their personal information, which they have consented to provide to Canadian Drives, will be made readily available following appropriate notice. Individuals will be provided an opportunity to update or correct personal information which is outdated or inaccurate.
|
|
|
7) Safeguards – We will protect your personal information by security safeguards appropriate to the sensitivity of information.
|
|
|
Canadian Drives shall take all reasonable means necessary to ensure that all personal information under its care is protected against loss or theft, unauthorized access, disclosure, copying, use or modification. This includes but is not limited to physical, organizational and technological means.
|
|
|
8) Openness – We will make specific, understandable information readily available to you about our policies and practices relating to the management of your personal information.
|
|
|
We will ensure that our policies and procedures regarding your personal information are simple, clear and easily accessible in a variety of forms including electronically and in print.
|
|
|
9) Individual Access – We agree to ensure that upon request you shall be informed of the existence, use, and disclosure of your personal information and shall be given access to that information. You are entitled to question the accuracy and completeness of the information and have it amended as appropriate.
|
|
|
We will respond to your requests for access in a timely fashion. If, in certain circumstances, we are not able to provide certain information, we will provide you with a written explanation outlining the reasons.
|
|
|
10) Challenging Compliance (Provide recourse) – We agree to ensure that you shall be able to address a challenge concerning compliance with the above principles to the designated individual accountable for Canadian Drives’s compliance.
|
|
|
We will make every effort to respond openly to inquiries or complaints regarding our management, collection and disclosure of personal information. We will ensure that every complaint is investigated and that the appropriate actions required to rectify the situation will be taken.
|
