Privacy policy

Last update : November 18 2024

1. Context
The purpose of this policy is to protect personal information and to define how Fortaress collects, uses, communicates, stores, deletes or otherwise manages it. It also aims to inform any person concerned about how Fortaress processes their personal information. It also applies to the processing of personal information obtained by Fortaress using technological means.

2. Application and definition
This policy concerns Fortaress and all persons who act on its behalf, such as its directors, employees, consultants, volunteers or other service providers. It also applies to the Fortaress website.
It concerns all categories of personal data processed by Fortaress, whether it concerns the data of its current or potential customers, its consultants, its employees, its members or any other person (such as Internet users who visit its websites or others).
Personal information is defined, for the purposes of this document, as information which relates to a natural person and which allows them to be identified, directly or indirectly. This may be, for example, a person’s name, address, email address, telephone number, gender or banking information, or information related to their health, origin ethnicity, language, etc.

3. Consent, collection and usage
As part of its activities, Fortaress may collect different types of information, for different purposes. The types of information that Fortaress may collect, their use (or intended purpose) as well as the means by which the information is collected are indicated below.

Fortaress applies the following general principles regarding the collection, use and communication of personal information:

Consent :
Fortaress collects personal information directly and with the consent of the person concerned, except in legal exceptions. Consent may be implied if the individual provides their personal information after reading this policy for the purposes it indicates. This policy and its contents are available to the data subject when personal information is collected.

Collection :
Fortaress only collects information that is relevant to its activities. In addition, it only collects the amount of information necessary to achieve its goal.
Fortaress informs you that its services are not intended for minors, and overall, Fortaress does not deliberately collect personal data relating to minors.

The personal data collected may be, but not limited to:
Identity information (full name, birth date, SSN, etc.)
Address
Email
Phone number

Possession and use :
Fortaress ensures the relevance and accuracy of the information it possesses when it uses it to make a decision concerning the person concerned.
Fortaress may only use personal information for the purposes mentioned here or at the time of collection. If Fortaress wants to use them otherwise, it must request new consent from the person concerned, which must be explicit if the information is sensitive.
Fortaress must ensure that access to personal information is restricted to employees and people within its organization who have the right to consult it and for whom this information is relevant to their professional activities.
Fortaress may also obtain personal information using technological means such as web forms or cookies embedded in a website managed by Fortaress.

4. Conservation and destruction of personal information
Fortaress undertakes to respect the retention period of your personal information that it has established for each purpose for which it was collected, in accordance with the law. If the processing of your personal information is no longer justified by a legitimate business interest, we will erase or anonymize it, or if this is not feasible (for example, if your personal information is archived in backups), then we will keep your personal information secure and prevent it from being used until it can be erased.

5. Your rights
To exercise their rights of access, rectification or withdrawal of consent, the person concerned must send a written request to the personal information protection manager of Fortaress, at the email address mentioned in the last section of this policy.
Under the law, the persons concerned may request from Fortaress access to their personal information and its correction if it is erroneous, incomplete or ambiguous. They may also demand that any personal information concerning them that is kept by Fortaress be deleted.
The person responsible for the protection of personal information at Fortaress is required to respond in writing to these requests within 30 days following the date of receipt of the request. Any refusal must be explained and supported by the applicable legal provision. In these cases, the response must mention the remedies provided by law and the time limit for using them. The manager must accompany the applicant to make him understand the refusal if necessary.
Subject to applicable legal and contractual restrictions, data subjects may withdraw their consent to the communication or use of the information collected.
Fortaress also allows them to know what personal information it holds on them, for how long it is kept and to have a copy of it.

6. Complaint handling
Any person who wishes to make a complaint relating to the application of this policy or, more generally, to the protection of their personal information by Fortaress, must do so in writing by contacting the person responsible for the protection of personal information at the email address indicated in the last section of this policy.
Fortaress asks the complainant to provide their name, contact details, including a telephone number, as well as the subject and reasons for their complaint, being specific enough so that it can be examined. Fortaress undertakes to respect the confidentiality of any complaint received and to provide a response within 30 days.

7. Data hosting
Your personal information is currently hosted in Quebec (Canada), but some information may be hosted in the United States by service providers. Your personal information hosted in the United States is governed by other rules for the protection of personal information, since it is subject to local laws in force and may be communicated to governments, courts or supervisory or regulatory authorities of this country, in accordance with these laws.

8. Data security
Fortaress cares about protecting the personal information it processes, and takes appropriate security measures to this end. Despite our efforts, we cannot promise or guarantee that your information shared with Fortaress will be completely protected or that your information on the Platform will not be exposed, revealed, altered or deleted following the violation of any of our physical, administrative or technical measures.
As indicated above regarding the restriction of access to personal data, Fortaress has adopted appropriate measures to limit the rights of use of its information systems so that only employees who need them are authorized to access it.

9. Privacy policy approval and updates
This policy is approved by the personal information protection manager of Fortaress. It may be amended from time to time to maintain compliance with the law and to reflect any changes to the process for collecting personal information.

10. Contact
Si vous avez des questions ou des préoccupations concernant notre politique de confidentialité, ou souhaitez exercer l’un ou l’autre des droits mentionnés dans la présente politique, veuillez contacter notre responsable de la protection des renseignements personnels en utilisant les coordonnées suivantes :

Responsable de la protection des renseignements personnels
Stéphane Auger

gestionrp@equipemicrofix.com

1-855-305-9939

3395, boulevard de la Piniere, bureau 210

Terrebonne, Québec, Canada