Privacy Policy
1. Purpose
This policy covers:
The processing of personal information present within the Hôtel Levesque;
The lifecycle of this information (collection, processing, sharing, storage, destruction) with its systems, employees and subcontractors;
2. Legal considerations
Hôtel Levesque is headquartered in Rivière-du-Loup, Canada. Its clientele is primarily from North America, with some clients from Europe. The organization MUST comply with provincial and federal laws regarding its privacy program. The General Data Protection Regulation (GDPR) served as the basis for the company's privacy program, adapting the privacy policy to the strictest legal requirements governing the processing of personal data.
3. Data controller and data processor
The company's customers are the "Data Controllers" for most of the information that is entered into the Opera web application, website, and booking systems or that is periodically shared with employees in order to provide services.
This positions the company as a "Data Processor" for most of the information stored and processed by the organization. Some information is collected directly by the company to facilitate security, logging, and application performance. This includes information such as IP address and behavior within the organization's platform. For this information, the company acts as both the Data Controller and the Data Processor. In addition, the organization employs a variety of technologies and partners who periodically act as further Data Processors. If users have any questions or concerns regarding the processing and management of their personal information, they can contact the Privacy Officer directly.
Appropriate technical and organizational measures have been put in place to protect your information and ensure that we process and protect your information in accordance with the principles of personal data protection:
They MUST be:
Treated fairly and lawfully;
Obtained solely for one or more specified and lawful purposes and will not be processed in a manner incompatible with that or those purposes;
Adequate, relevant and not excessive in relation to the purpose(s) for which they are processed;
Accurate and updated as necessary; Processed in accordance with the rights of the data subject as defined in the following privacy regulations: “GDPR”, “PIPEDA” and “CCPA”;
They MUST NOT be:
Stored for longer than necessary;
Transferred to a country or territory other than Canada, unless we can be assured that there is an adequate level of protection of the rights and freedoms of the persons concerned;
Appropriate technical and organizational measures MUST be put in place to protect personal data against unauthorized or unlawful processing and against accidental loss, damage or destruction;
Any changes, updates, or controls put in place to protect your personal information will be communicated in writing to system users who process personal information.
4. Inventory of personal information
In order to protect data, the company maintains an accurate inventory of all personal information collected, processed or stored and transferred by the company.
5. Cookie banner
Cookies are small pieces of data that a website stores on your computer, allowing the website to remember a user based on the device they are using. This can enable a website to remember the state a user left in when they closed their browser or to track information about their experience with the website. Some cookies are used to track other analytics about a user's experience on the website, such as the pages they visited, the links they clicked, or how long they spent on a particular page.
The company uses "cookies" to track various information about your use and personal experience with their websites and does so only with your consent obtained through a "cookie" banner.
With your consent, we may track the following details regarding your experience with our website:
Tracking preferences;
Authentication and security;
Session status;
Various analyses.
6. Access your personal information
You have the right to request a copy of the personal information we hold about you and to have any inaccuracies in your personal information corrected. When you submit a request for personal information, you are entitled to:
Knowing what personal information the company processes or has processed;
To know the reason(s) and purpose(s) for the processing of their personal information;
To know if their personal information has been shared and if so, with whom and for what purposes.
7. Process for requesting access to your personal information
The process for submitting a request for access to personal information is as follows:
Requests for personal information are submitted to your organization via email.
8. How to give, refuse or withdraw consent or file complaints
Implicit consent is given to the company if:
The user uses the services offered once the "cookie" banner has been displayed;
The user has read and accepted the privacy policy on the website which is publicly accessible.
Explicit consent is refused to the company if:
The privacy policy has not been read and accepted;
The customer uses their contact details to request the withdrawal of their consent.
Note :
The company will never assume or imply consent from individuals under the age of 16.
Explicit consent can only be given freely if the person concerned is 16 years of age or older.
Children between 13 and 16 years old MUST explicitly register before their information is processed or stored for use, and we ask the parent or guardian beforehand for their consent.
Children under the age of 13 will not have their personal information processed or stored for use by the company.
Complaints regarding privacy can be sent to the following email address:
guillaume.lavoie@hotellevesque.com
9. Correct any inaccuracies in your personal information
You have the right to have any inaccuracies identified in your personal information that we collect corrected.
The company offers you the opportunity to correct inaccuracies in your personal information.
10. Right to be forgotten
You have the right to request that your information be deleted and that you be completely removed from our records, unless there is a legal basis for record-keeping, such as financial transactions and tax purposes.
11. Leak and breach notification
Anyone whose personal information has been disclosed or is included in a breach has the right to be notified within a reasonable time after the leak or breach has been discovered and the disclosed personal information has been in an unencrypted form.
Notification will be expedited if the lost personal information poses a real risk of harm to the individual. This type of personal information is called sensitive information. The person whose personal information has been disclosed will be informed of the possible consequences that could result from the breach.
Sensitive information that could pose a real risk of significant harm to an individual in the event of a leak. These impacts include, but are not limited to, the following:
Bodily injuries;
Humiliation ;
Damage to reputation or relationships;
Job loss;
Loss of business or professional opportunities;
Financial loss;
Identity theft;
Negative effects on the credit file;
Damage to or loss of property.
This policy is approved by the Privacy Officer of the Hôtel Levesque, whose business contact details are as follows:
Guillaume Lavoie, General Manager
guillaume.lavoie@hotellevesque.com
For any requests, questions or comments regarding this policy, please contact the person in charge by email.
