Introduction

Protecting your privacy is important to the Jewish General Hospital Foundation. For this reason, we have implemented safeguards and sound management practices to maintain the confidentiality and security of your personal information in accordance with applicable laws.

This privacy policy describes our practices regarding the collection, use, processing, disclosure, and retention of Personal Information (as defined below) of our donors, volunteers and users.

We comply with the most stringent laws and ethical standards applicable to the Foundation when handling all information, particularly personal information.

It is important to note that the protections afforded by the Act respecting the protection of personal information in the private sector apply only to the personal information of natural persons, i.e. human beings. Thus, information concerning any legal entity (organization, company, partnership, etc.) is not protected by the provisions of this law.

The Foundation wishes to point out that regardless of the source of the donation, the related information will be treated with the same level of protection and confidentiality. However, the consent requirements for the collection, use and communication of information concerning legal entities will be adjusted accordingly.

At any time you may contact our Data Protection Officer (DPO) at the following address:

Email: protection@jghfoundation.org

Address:
Jewish General Hospital Foundation
3755, Côte Ste-Catherine Road, A-104
Montreal, QC H3T 1E2

Personal identifiable information (PII) is defined as any information concerning a natural person from which this person may be identified either directly or indirectly.

The Foundation can collect, conserve, use, and transfer different types of PII concerning you. They are as follows:

We do not collect any personal information about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, health information (except as voluntarily provided) or genetic and biometric information.

However, we do collect certain information that, depending on the context, may be considered sensitive information, including:

The Foundation collects your PII through a number of ways:

We keep track of your donations and, in some cases, your communications with us so that we can properly follow up on them.

We will only use your PII where we are permitted to do so by law. Most commonly, we use your PII in the following circumstances:

While we try to avoid sharing your PII with third parties, we may use Service Providers or other trusted third parties to perform various services on our behalf, such as IT management and security, marketing, data analysis, hosting and storage. We have defined below the instances in which such sharing may occur:

Donor, volunteer and user PII will not be used or disclosed for purposes other than those for which it was collected, except with the consent of our donors and volunteers or as required by law.

In the course of our operations, the Foundation may share your PII only with third parties who have signed an agreement containing an obligation to implement the Foundation’s Privacy Policy and whose privacy protections are similar to that of the Foundation’s. This is done only as necessary for our legitimate interests.

Please note that some of our third party business partners are located outside the province of Quebec, and as such, your information may be communicated outside the borders of the province of Quebec.

At no time do we ever sell PII to third parties or exchange donor lists.

The Foundation has the appropriate and necessary safeguards in place to ensure that your PII is as secure as possible. We ensure that any third parties we use to process your PII do the same, and that they only process your PII on our instructions. Third parties will also be subject to a duty of confidentiality.

When you use your credit or debit card to make a donation with us, we ensure that this transaction is secure and compliant with the Payment Card Industry Data Security Standard (PCI-DSS). We do not store any credit or debit card numbers or your 3 or 4-digit security code in our systems.

From time to time, we may include on our website references or links to websites, products or services provided by third parties. The Third Party Services, which are not operated or controlled by the Foundation, are governed by privacy policies entirely separate from and independent of our own. We therefore assume no responsibility for the content and activities of these sites. This Policy applies solely to the Foundation’s website and the activities we carry out. This Policy does not extend to Third Party Services or sites.

The Foundation undertakes to take all reasonable steps to ensure a high level of confidentiality and security of PII in accordance with technological standards appropriate to its sector of activity.

Notwithstanding the foregoing, you declare that you understand and acknowledge that no computer system offers absolute security and that there is always a degree of risk involved in transmitting personal information over the public network that is the Internet.

You therefore agree that the Foundation cannot be held responsible for any breach of confidentiality, hacking, virus, loss, theft, misuse or alteration of your PII transmitted or hosted on its systems or those of a third party. You also waive any claim in this regard, except in the case of gross negligence or wilful misconduct on the part of the Foundation. Accordingly, you agree to indemnify and hold harmless the Foundation and its officers, directors, affiliates and business partners from and against any and all damages of any kind, whether direct or indirect, incidental, special or consequential, arising out of on in connection with the use of your PII.

In the event of a breach of confidentiality or security of your PII that presents a high risk to your rights and freedom, you will be notified of the breach as soon as possible, and the Foundation will take the necessary steps to preserve the confidentiality and security of your PII.

We are committed to protecting the privacy of children and do not knowingly solicit personal information from children under the age of 14 without parental or guardian consent. If a child provides personal information without a parent’s or guardian’s consent, the parent or guardian may contact us and request that we delete that information.

Information collected by the Foundation is stored in various ways. Some PII is stored physically or electronically at the Foundation.

Other information in digital format is hosted or communicated to data hosting service providers, some of which are located outside of Quebec.

We retain your PII only as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting or reporting requirements.

In determining the appropriate retention period for PII, we take into account the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your PII, the purposes for which we process your PII and the possibility of achieving those purposes by other means, as well as applicable legal requirements.

The Foundation offers its donors and volunteers the opportunity to limit or cancel communications they receive from the Foundation. To change or withdraw your consent, or to verify, change or modify the PII you have provided us, please contact our DPO.

As a data subject, you may exercise the rights set out below by communicating with our DPO in writing. At all times, you reserve the right to:

* Please note, however, that certain legal and/or ethical obligations may require us to retain your PII for a predetermined period of time. The Foundation has no control over the retention duration and is legally obliged to comply with these laws. Once the retention period has expired, the Foundation will proceed with the deletion of your PII as soon as possible in response to your request.

We may ask you for specific information to help us confirm your identity and guarantee your right of access to your PII (or to exercise one of your rights). This is a security measure to ensure that PII is not disclosed to anyone who is not entitled to receive it. We may also contact you to request further information in relation to your request in order to speed up our response.

To limit or cancel the communications you receive from the Foundation, or to change or withdraw your consent, or to verify, change or correct the PII you have provided us, please contact our DPO.

If you have any questions, comments or concerns about this Privacy Policy, or if you choose any of the following options:

You can reach our DPO and the Foundation undertakes to respond within a delay of 30 days upon receipt of your message.