Privacy Notice

1. Privacy Notice - Introduction

The purpose of this Notice is to inform you about the privacy practices of CDPQ Infra Inc. and its subsidiaries regarding the confidentiality and protection of your personal information collected by technological means. 

This Notice has been developed in accordance with our other policies and guidelines.

2. What is personal information?

The term "personal information" means any information about an individual that can directly or indirectly identify them. This includes a name, an online tracking identifier, such as an IP address, or one or more specific characteristics relating to their identity.

3. What does this Notice apply to?

This Notice applies to the websites of CDPQ Infra and its subsidiaries as well as to our online services, unless we have provided you with a specific policy or guidelines for a particular product, service or activity. 

4. Your consent

We collect, use and disclose your personal information with your consent or as permitted or required by law. How we obtain your consent depends on the circumstances and the sensitivity of the information collected. Therefore, depending on the context or our legal obligations, your consent may be express or implied. 

In general, we will ask for your consent at the time we collect your personal information. 

If you provide us with personal information about another person, you are responsible for obtaining that person's consent so that we can process their information in accordance with this Notice.

5. What personal information do we collect?

5.1. Information collected

The personal information we collect generally falls into one or more of the following categories:

As some services are shared with or provided by our parent company, La Caisse, we invite you to consult the Notice of Information Respecting the Protection of Personal Information: Privacy and Data Protection | La Caisse

5.2. Cookies

Our website uses cookies to optimize your experience on our website. These are files that are installed on your computer's hard drive or browser to collect information such as your preferred language, browsing history and browser type and version. Some of these cookies are essential for the site to function properly, while others are used for statistical purposes and to improve our services. Except for those necessary for the site to operate, you can choose what types of cookies you accept when you arrive on the site.

Instructions for this are provided by each browser's website.

For more information, please see the Cookies Notice.

5.3. Analytics tools and other third-party technologies

We use analytics tools and other third-party technologies, such as Google Analytics.

For more information on this subject, please see our Cookies Notice.

6. For what purpose and on what legal grounds do we use your personal information?

We may use your personal information and other information for the purposes set out below:

• To respond to your questions and inquiries
• To process your application for various job opportunities at CDPQ Infra
• To compile statistics and indicators on satisfaction and the performance of our online services
• To detect and prevent fraud
• To comply with our legal and regulatory obligations, e.g., in the event of a complaint or injunction
• For any other purpose, with your consent
• For purposes permitted or required by applicable laws

We do not use the information we collect to promote third-party products or services, nor to display targeted advertising for CDPQ Infra on websites or services offered by third parties.

7. How do we share your personal information with other people or organizations?

We may provide your information to our service providers. In such cases, we take steps to ensure that the rules and principles set out in this Notice are followed, and require service providers to maintain the confidentiality and security of your personal information.

We also require them to use your personal information only for the purposes for which it was provided. When our service providers no longer need your personal information for these limited purposes, we require them to destroy it.

In certain circumstances, we may allow our service providers to retain information for legally permitted purposes or in aggregated, anonymous or statistical form that does not identify you.

We do not allow service providers to disclose your personal information to unauthorized parties or to use your personal information for direct marketing purposes.

If you would like more information about our service providers, please contact us using the details provided in the Contact us section below.

For your information, below is a list of the categories of our third-party service providers that may process your personal information:

• Service providers that help manage our IT and back office systems, or provide platforms and portals for administration
• Our Québec regulators and other law enforcement agencies in Canada, the United States, Europe or other countries
• Agencies and organizations dedicated to preventing fraud
• Our advisors (who may be legal representatives for you, us or a third-party claimant) and other professional services firms (including our auditors)
• Marketing execution, webinar and customer satisfaction service providers acting on our behalf that facilitate online events, provide marketing communications and collect feedback from our customers on our service levels

The list of subcontractors is available upon request.

In addition, we may use and disclose your personal information when we believe that such use or disclosure is permitted, necessary or appropriate:

• Under applicable laws, including laws outside your country of residence, to comply with legal proceedings or to respond to requests from public and government authorities 
• To protect our operations or those of our affiliates 
• To protect our rights, safety or property, and/or that of our affiliates, yourself or others 
• To enable us to pursue available remedies or limit the damages we may incur
• In the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or part of our business, brands, affiliates, subsidiaries or other assets

8. Retention of personal information

We will use, disclose or retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to the extent permitted or required by law.

If you would like more information about how long your personal information will be retained, please contact us using the details provided in the Contact us section below.

9. Information security

We have implemented physical, organizational, contractual and technological security measures to protect your personal information and other information from loss or theft, unauthorized access, disclosure, copying, use or modification.

We have taken steps to ensure that the only personnel authorized to access your personal information are those whose duties reasonably require access to such information.

Despite the measures described above, no method of transmitting or storing information is completely secure or error-free. We therefore cannot guarantee absolute security.

If you have any reason to believe that your interaction with us is no longer secure (e.g., if you think the security of the information you have provided to us has been compromised), please contact us immediately using the contact details provided in the Contact us section below.

10. What are your rights?

You may exercise various rights with respect to your personal information. The rights granted to you may vary depending on your geographic location and applicable laws. This section provides an overview of these rights and how they can be exercised. We will take the necessary steps to ensure that your personal information is accurate, complete and up to date. We will not systematically update your personal information unless such a process is necessary. 

Right of access 

You have the right to request confirmation as to whether your personal information is being processed, and, if it is, you have the right to access such personal information.

This right does not apply to information that may have been created or inferred from personal information collected from you.

Right of rectification

You have the right to obtain the rectification of personal information held by CDPQ Infra that is inaccurate, incomplete or ambiguous as soon as possible.

Right to withdraw your consent

You have the right, for legitimate reasons relating to your particular situation, to withdraw your consent to the processing of personal information concerning you, as well as to refuse to activate any intended identification, tracking or profiling features.

Right to portability of personal information

Unless there are significant practical difficulties, you have the right to receive the personal information you have provided to CDPQ Infra in a structured, commonly used format. At your request, this information is also disclosed to any person or body legally authorized to collect such information.

Rights in the event of the use of automated decision-making systems

In some cases, you may request information about the use of any automated decision-making system and how it may impact you. 

10.1. Procedure for submitting a request

To exercise your rights, you must submit a written request to the Privacy Officer using the contact details provided in the Contact us section below. 

CDPQ Infra has a maximum period of one month from the receipt of all relevant information to respond to your request.

You also have the right to lodge a complaint with the competent data protection authority.

11. International and interprovincial transfer

Your personal information is usually stored in Québec or elsewhere in Canada. For legitimate legal or business purposes, we may need to transfer or authorize access to your personal information to parties based outside the country. In such cases, CDPQ Infra will ensure that the protection and confidentiality of such information comply with this Notice and applicable law, and such parties based outside the country will be required to contractually agree to comply with and abide by them.

12. Third-party websites and services

This Notice does not extend to websites or products or services provided by third parties not acting on our behalf. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy notices or policies before using their websites, products or services.