Privacy Policy

P2026-001
Last update : June 25, 2026

Preamble

The Société du parc Jean-Drapeau (hereinafter the "SPJD") is subject to the Act respecting Access to documents held by public bodies and the Protection of personal information (CQLR, chapter A-2.1) (hereinafter the "Act"). The SPJD recognizes the importance of respecting privacy and protecting the personal information in its custody.

This privacy policy (hereinafter the "Policy") is intended to ensure that the SPJD complies with legal requirements relating to personal information and to guarantee the right to respect for the privacy of every data subject.

1. Purpose and scope

This Policy describes how the SPJD collects, uses, discloses and retains personal information collected in the course of its activities by technological means from its subscribers and users via its website and its online stores (collectively, the "Platforms") and by email from its staff, volunteers and members of its board of directors. It applies to any form of processing of personal information, whether kept on paper or in digital format.

2. Definition

Personal information is information about a natural person that allows that person to be identified directly, by using that information alone, or indirectly, by cross-referencing it with other information. Personal information is confidential and, except as provided by the Act, may not be disclosed without the consent of the person concerned.

Personal information is sensitive where, by its nature, notably medical, biometric or otherwise intimate, or due to the context of its use or disclosure, it gives rise to a high degree of reasonable expectation of privacy.

3. Consent

When personal information is collected, the data subject will be asked, subject to statutory exceptions, to consent to the collection, use and disclosure of their personal information in accordance with the terms and conditions set out in this Policy. Consent may be withdrawn at any time, subject to obligations provided for by law.

If a person refuses to give consent or withdraws their consent to the collection and use of personal information whose processing or disclosure is necessary for the performance of the requested service, the management of the employment relationship or is required by law, this may prevent the performance of the requested service, hiring or the continuation of the employment relationship.

4. Collection of personal information

The SPJD only collects personal information that is necessary to fulfill its mission, provide services to citizens, manage the employment relationship and meet its legal or administrative obligations.

Depending on the circumstances, the SPJD collects the following personal information:

• Identity and civil status information: last name, first name, mailing address, telephone number, email address, date of birth, driver's licence number, SIN, sex, gender, photograph, images captured and recorded by surveillance cameras installed on the grounds of Parc Jean-Drapeau as well as in SPJD facilities.
• Employment-related information : membership in a professional order or association and membership number, membership in a union organization, academic and employment history, diplomas, contents of an application or curriculum vitae, salary and benefits, employee number, hiring date, employment status, vacation dates, reasons for absences, assessment of performance or contribution.
• Immigration or citizenship status information : study and/or work permit, permanent resident card or proof of citizenship.
• Health and safety information : health insurance number, allergies or other medical conditions, medical file in the event of disability.
• Financial information : billing addresses, credit card number and other information relating to the credit card, void cheque.
• Any other personal information provided by email, via a form or through the Platforms.

Business contact information, job title and functions of a person are considered public information under the Act and are therefore not confidential. A telephone number used for professional purposes is considered public information.

5. Use of personal information

Personal information collected from SPJD subscribers and users of the Platforms is used, as applicable, for the following purposes:

• Enabling the SPJD to provide the requested service, namely, as the case may be:
  • Rental of rooms or spaces for corporate or private events.
  • Registration for an event organized by the SPJD.
  • Obtaining a filming permit.
  • Processing an application in relation to the requirements of a position.
  • Processing a sponsorship request.
  • Responding to a request for information or a complaint addressed to customer service.
  • Creating and updating a client account in order to facilitate transactions, view purchase history and receive exclusive promotions.
  • Subscription to the newsletter in order to send, by electronic messages, news about the SPJD, exclusives and promotions.
• Completing the authorized transaction, including the online purchase of tickets for the beach, aquatic facilities and certain events organized by the SPJD.
• Operating the SPJD website (hereinafter the "Site").
• Producing statistics such as the number of pages viewed and the number of users; these statistics, however, do not make it possible to identify the user or access other information relating to the user personally.
• Carrying out profiling activities; in such case, the user's consent is requested.
• Ensuring the safety and security of individuals and property.

Personal information collected from staff, volunteers and members of the board of directors is used, as applicable, for the following purposes:

• Identifying an employee or a director.
• Ensuring the administrative management of the file of an employee or a director.
• Paying salary and benefits.
• Managing access and equipment provided.
• Applying internal policies, collective agreements and procedures in force.
• Protecting an employee's health and safety in the workplace and during working hours.
• Managing follow-ups relating to occupational health and safety, for example medical appointments, CNESST follow-ups and return to work.
• Sending union reminders, for example communications relating to working conditions, to employees who do not have a professional email address.
• Processing the annual recall of white-collar workers.
• Fulfilling the SPJD's legal or administrative obligations.
• Sending non-essential general communications, for example newsletters, internal events and social activities, to employees who do not have a professional email address and who have consented to receiving such communications at their personal email address.
• Producing statistics.
• Conducting surveys.

Personal information collected is accessible only to persons who are authorized to consult it in the performance of their duties, in particular those from human resources, financial resources and customer service management. Personal information is used solely for the purposes for which it was collected and is treated confidentially. The SPJD will obtain the consent of the data subject before using their personal information for any purposes other than those set out above, except as provided by the Act.

If a person chooses to voluntarily send the SPJD personal or otherwise confidential information through an unsecured technological means such as email, the SPJD will only use the information necessary to respond to the message.

6. Minors

No functionality on the Platforms specifically solicits information from minors, nor seeks to determine whether a visitor is a minor. Personal information submitted on the Platforms by minors will be treated in the same manner as information submitted by adults.

The SPJD firmly believes that parental supervision is an important factor in minors' use of the Internet. Accordingly, the SPJD asks parents to guide their minor children when they are invited to provide personal information online. The SPJD also asks minors to obtain the permission of their parents before providing information online. The SPJD does not knowingly collect personal information from children under 14 years of age without the verified consent of the holder of parental authority.

7. Disclosure to third parties

The SPJD does not rent, sell or trade personally identifiable information, for example name, address, telephone number, email address or SIN, or financial information, such as credit card numbers or a void cheque, that could allow a data subject to be identified.

The SPJD may use or disclose personal information if it believes that such use or disclosure is required for the performance of a contract entrusted to a third party, to comply with its legal obligations, to safeguard its rights, to comply with any order or request from a competent court, or for any other reason provided for in the Act authorizing or requiring the disclosure of personal information. The SPJD may disclose personal information without the consent of the person concerned only in the cases provided for in the Act.

When the SPJD retains the services of an external service provider, it only provides that service provider with the personal information necessary to perform its services. It also takes all appropriate measures to ensure that personal information is protected in accordance with the Act and is collected, used, retained and destroyed in a manner consistent with this Policy.

Certain personal information may be disclosed to third parties, in particular for the following purposes:

• Financial institutions and accountants for payroll and transaction processing.
• City of Montréal for criminal background checks.
• CNESST and insurers for the follow-up of an illness or accident file.
• Registraire des entreprises du Québec for the publication of the list of members of the board of directors.
• Judicial or government authorities where required under the law.

It is possible that certain personal information may be disclosed to third parties located outside Québec and Canada. Before making such a disclosure, the SPJD ensures that this information will benefit from adequate protection.

8. Security of personal information

The SPJD takes all necessary measures to ensure that personal information is not accessible to third parties other than authorized SPJD personnel, and only to the extent that such information is required in the performance of their duties.

Some personal information may be stored on servers located outside Québec. In such a case, the SPJD makes every effort to ensure a level of protection equivalent to that offered for data stored in Québec.

The SPJD applies high standards and uses robust security systems in the design and daily operation of the Site and its servers. The SPJD also continues its efforts to detect and block intrusions to or from its Site or to professional email inboxes. The SPJD has implemented various measures to ensure that personal information is protected against risks of loss and theft, as well as against risks of unauthorized access, disclosure, reproduction, use, modification or destruction. These measures include physical, administrative and technological security safeguards it deems reasonable having regard to the sensitivity, volume and format of the personal information collected and the methods of retention.

These security measures include, in particular:

9. Retention of personal information

Once the purposes for which the personal information was collected have been achieved, this information is destroyed or anonymized for statistical purposes, subject to the SPJD's retention rules and the Archives Act (CQLR, chapter A-21.1). However, the SPJD reserves the right to retain, for a reasonable period, certain personal information in order to comply with the Act, prevent fraud, collect outstanding amounts, resolve a claim or related issues, or cooperate in an investigation. At the end of the retention period, the destruction of personal information is carried out securely in accordance with the SPJD's internal procedures.

10. Access to personal information and right of rectification

A person may request access to the personal information concerning them, within the limits provided for by the Act, and request that it be corrected if it contains an error or is inaccurate or incomplete. They are entitled to obtain a copy of their personal information in a structured, commonly used technological format. Reasonable fees may be charged for any copy requested.

In addition, the data subject has the following rights:

• Withdraw at any time their consent to the disclosure to third parties or the use of personal information collected, notably by using the "unsubscribe" mechanism in the SPJD newsletter emails.
• Request the erasure, destruction or removal of personal information in certain circumstances; there are exceptions under which the SPJD may refuse a request for erasure or destruction, in particular where personal information is required for compliance with the law or a contractual agreement, or in connection with claims.
• Request that the processing of certain personal information be suspended, in particular to establish its accuracy or the reason for its processing.
• Ask questions about how their information was collected and used and to whom it was disclosed.
• Request the transfer of certain personal information to a third party.

Requests for access or rectification or any questions or comments relating to this Policy must be sent in writing, with proof of identity as the data subject, to the person responsible for the protection of personal information at the following contact information:

Please note that email is not a secure means of communication and should not be used to send personal information; only essential information should be disclosed.

11. Use of the Site

12. Handling complaints relating to the protection of personal information

If a person believes that personal information concerning them has been handled inappropriately or believes that the Act has not been respected with regard to them, they may file a complaint. The complaint may relate to the collection, retention, use, disclosure or destruction of personal information. Complaints are handled in strict confidence and the SPJD takes appropriate measures to deal with them within a reasonable time.

Complaints must be filed in writing at the following address:

A complaint may also be sent in writing to the Commission d'accès à l'information du Québec. Please consult the following page for this purpose: www.cai.gouv.qc.ca/english. However, the SPJD invites the data subject to first contact the person in charge of the protection of personal information.

13. Internal framework

This Policy cancels any previous confidentiality statements, directives or procedures dealing with the same subject matter that may be inconsistent with this Policy.

14. Follow-up

The person responsible for the protection of personal information is responsible for developing, implementing, monitoring and assessing this Policy.

The Policy will be reported on to the SPJD's board of directors once a year.

15. Update

This Policy will be reviewed every three years or whenever changes are necessary. In such a case, the SPJD will update the “last updated” date. In the event of substantial changes, a notice of amendment will be published in advance on the Site's home page.

Adopted by the board of directors on June 18, 2026 (CA 2026-20).