We offer you three articles that explore the concrete experiences of communities regarding missionary work. These texts were published in the spring issue of Missions des Franciscains.
Click on each image to read the English translation.
Translation by Karen Rivas Monico, trad.a.
The Mission Office of the Franciscans of the Holy Spirit Province of Canada awakens and develops the missionary spirit in the territory of the Province among the brothers and the public in general; promotes missionary projects to the brothers of the Province and the general public; leads the Franciscan Missionary Union (UMF). The U.M.F. brings together people who are committed to regularly supporting the missionary evangelization efforts of the Order of Friars Minor; publishes the magazine Missions des Franciscains and other publications which raise awareness and provoke reflection on the missions of the Franciscans and missions in general.
As a religious congregation that collects personal information through technological means in Quebec, the Corporation des Syndics Apostoliques des Frères Mineurs ou Franciscains, the Corporation des Syndics Apostoliques des Frères Mineurs ou Franciscains de la Province Saint-Joseph du Canada and L’Oeuvre Franciscaine – Les Franciscains (collectively hereinafter the “Congregation,” also known as the “Franciscans of Canada”) must publish on its website a confidentiality policy that is written in simple and clear terms.
This confidentiality policy is part of a set of policies and practices governing the Congregation’s handling of personal information, detailed information about which is also published on its website.
The following are the main questions that this confidentiality policy answers, in relation to the following elements:
When the Congregation decides to collect personal information and establishes the purposes for which it is collected, used, or communicated (whether it collects, uses, or communicates it itself or has an agent or service provider do so on its behalf), that personal information is under the control of the Congregation.
If the Congregation acts as an agent and the communication of personal information to the Congregation is necessary for the performance of the mandate, such personal information is instead under the control of the principal.
Collection for specified purposes: Privacy laws allow the Congregation to collect, for a serious and legitimate interest, personal information about another person that is relevant to the stated purpose of the file, provided that the purposes of the collection are determined before the collection takes place.
Thus, in the context of your relationship with the Congregation or when you use a digital platform, an application service, or any other virtual space controlled by the Congregation (website), you may be asked to provide certain personal information about yourself.
Categories of information from members, employees, or the public: Provided that it is necessary for the purposes determined prior to collection, the Congregation may collect personal information from its members, employees, or the public, including the following categories:
| CATEGORIES OF INFORMATION | EXAMPLES |
|---|---|
| Identification : | Full name, date of birth, sex at birth, portrait photo, government identification codes, family relationships, genealogy, height, weight, physical characteristics, etc. |
| Personal contact information: | Email address, residential or mailing address, telephone numbers, emergency contacts, residential history, etc. |
| Religious information: | Date of sacraments and ordination, role and activities within the Congregation, missionary projects, missions, pilgrimages, retreats, conferences, etc. |
| Education: | Degrees, institutions attended, fields of study, years of schooling, academic results, training, certificates, certifications, etc. |
| Financial situation: | Salary and other sources of income, credit history, bank details, billing and payment information, etc. |
| Behavior: | Participation in events and other activities, social media and website posts, etc. |
| Personal preferences: | Preferences regarding communication methods, charitable giving, donations made, donation tax receipts, pledges, newsletters, etc. |
| Technical information: | IP address, browser type and version, operating system, screen resolution, information about the device used, etc. |
| Web audience measurement: | Connection dates and times, pages visited, actions taken on a website or other interactions with online content, etc. |
| Demographics: | Age, ethnicity, nationality, language(s), membership in an identifiable group, etc. |
| Sensitive information: | Information that gives rise to a high degree of reasonable expectation of privacy, particularly because of its medical, biometric, or otherwise intimate, or due to the context of its use or communication, including criminal and/or disciplinary records, police reports, etc. |
Limitation: The Congregation will only collect your personal information that is necessary for its legitimate and specified purposes for which it is collected, and will not use or communicate this personal information for any other purpose, unless you give your additional consent or the Congregation is authorized or required to do so by applicable law.
Exceptions:You should be aware that personal information which by law is public or concerning the performance of duties within an enterprise by an individual, as well as the collection, retention, use, or disclosure of journalistic, historical or genealogical material collected, held, used or communicated for the legitimate information of the public, is excluded from the application of laws protecting privacy or certain parts of laws protecting privacy.
Consent by operation of law: Generally, privacy laws ensure that when you provide the Congregation with personal information about yourself, you consent to its use and communication to third parties for the purposes for which the information is collected, provided that you are informed at the time of collection (and subsequently upon request) of certain matters, including: (1) the purposes in question, (2) the means by which the information is collected, (3) the rights of access and correction provided for by law, (4) your right to withdraw your consent to the communication or use of the information collected; (5) the name of the third party for whom the information is being collected, if applicable, and (6) the possibility that the information may be communicated outside Quebec.
Consent for other purposes: When personal information is to be used within the Congregation for purposes other than those for which it was collected, additional consent from you as the individual concerned is generally required. When sensitive personal information is involved (information that gives rise to a high degree of reasonable expectation of privacy), this consent must be expressly given.
Refusal: If you refuse to provide personal information or to have it collected by a particular means, or to have it used or communicated for a purpose mentioned at the time of collection, please notify our person in charge of the protection of personal information. Of course, the Congregation can only comply with certain requests if you provide the personal information required to process those requests. As a result, the Congregation may be unable to respond to a request you make or carry out a mandate you entrust to it if you refuse to provide this information.
Withdrawal of consent: You may withdraw your consent to the use or communication of personal information collected about you, subject to restrictions provided for by law or contract and reasonable notice. If you wish to withdraw your consent, please notify our person in charge of the protection of personal information.
We collect personal information for the purposes listed below.
More generally, the Congregation collects personal information for the following purposes:
In addition, privacy laws generally allow the Congregation, without your consent, to use personal information for purposes other than those for which it was collected, particularly when its use is:
Personal information relevant to the Congregation will be collected by various technological or other means, such as forms, conversations (by telephone or in person), correspondence, or any other means of communication through which you contact us. More specifically, personal information may be collected by the following means, among others:
Cookies: Certain personal information may be collected using technology that includes features that identify, locate, or profile visitors to the Congregation’s website, including cookies (commonly known ascookies). Before such technology is used in relation to you, the Congregation will inform you, via a widget or other appropriate means, of the use of this technology and the means available to activate the functions that identify, locate, or profile a visitor. (A cookie is a piece of information that, when visiting a website or using a mobile application, is transmitted between a server and a web browser or device.)
Limitation on communication: In principle, no one may communicate to a third party the personal information they hold about you, unless you consent to it or the applicable privacy laws provide for it.
Categories of recipients: If necessary, the Congregation may, without your consent, communicate personal information to certain third parties, including those belonging to any of the categories of persons listed below, to the extent that such communication is necessary, in the performance of their duties, to achieve the purposes for which they received the information:
Communication outside Quebec: Your personal information may be communicated outside Quebec, where legal regimes applicable to the protection of personal information differ from those in Quebec. Such communication outside Quebec is possible, in particular, when the Congregation entrusts a person or organization outside Quebec with the task of collecting, using, disclosing, or retaining such personal information on its behalf. However, before disclosing personal information outside Quebec, the Congregation conducts a privacy impact assessment to ensure that it will be adequately protected. Nevertheless, pursuant to a legal order issued in Quebec or outside Quebec, your personal information may be made available to government authorities or law enforcement agencies in that jurisdiction, since no contract or other means can override the laws of a government administration, whether domestic or foreign.
Communication to the Congregation: Generally, privacy laws do not allow a person who operates a business to communicate personal information about you to third parties without your consent, except in certain circumstances (e.g., to their attorney, agent, or service provider under certain conditions, or to other categories of persons provided for by privacy laws applicable to the situation). If, as a business operator, you communicate personal information about an individual other than yourself to the Congregation (or its service providers and agents), you may only do so with the consent of the individual concerned or if the law allows you to do so without the consent of the individual concerned.
Reasonable measures: The Congregation takes physical, organizational, and technical security measures to ensure the protection of personal information that is collected, used, communicated, retained, or destroyed, which are reasonable considering, in particular, the sensitivity of the information, the purpose for which it is used, the amount of information, the method of storage, its distribution, format, and medium.
Scope of measures: Security measures protect personal information against, among other things, loss or theft, as well as unauthorized access, communication, copying, use, or modification, and include reasonable measures to authenticate your identity as the individual to whom the information relates.
Description of measures: We implement, among other things, the measures briefly described below.
Right of access: When the Congregation holds personal information about you, it will, at your request, confirm its existence and provide you with access to that information by allowing you to obtain a copy. At your request, any computerized personal information will be provided in the form of a written and intelligible transcript. Unless this raises serious practical difficulties, computerized personal information collected from you, and not created or inferred from personal information about you, will be provided to you, at your request, in a structured and commonly used technological format. This information shall also be communicated, at your request, to any person or organization authorized by law to collect such information. Where the applicant is a person with a disability, reasonable accommodation measures shall be taken, upon request, to enable him or her to exercise the right of access provided for in this section.
Right of rectification: In addition to the rights provided for in the first paragraph of section 40 ofthe Civil Code of Québec, you may, if the personal information concerning you is inaccurate, incomplete, or ambiguous, or if its collection, communication, or retention is not authorized by law, require the Congregation to rectify it.
Handling of questions, requests, or complaints: Any questions or requests regarding this confidentiality policy or any complaints regarding the protection of personal information under the Congregation’s control may be submitted, in accordance with the established handling process, to the Congregation’s controller, to whom the role of person in charge of the protection of personal information has been delegated. His contact information is published in this section of the Congregation’s website, among the detailed information about the policies and practices governing the Congregation’s handling of personal information.
Effective date: This confidentiality policy is effective as of the date indicated below.
Amendments: Any amendments to this confidentiality policy will be subject to a notice of amendment published on the Congregation’s website and disseminated by any means appropriate to reach the individuals concerned.
Notice of change: Unless circumstances warrant a shorter period, any change shall take effect only after a period of 15 days from the date of publication of a notice to that effect. This notice shall indicate:
Effective date of this version: October 10, 2025.
Previous version effective since November 22, 2021.
As a religious congregation that holds personal information, the Corporation des Syndics Apostoliques des Frères Mineurs ou Franciscains, the Corporation des Syndics Apostoliques des Frères Mineurs ou Franciscains de la Province Saint-Joseph du Canada and L’Oeuvre Franciscaine – Les Franciscains (collectively hereinafter the “Congregation,” also known as the “Franciscans of Canada”) must establish and implement governance policies and practices regarding personal information it holds and ensuring its protection.
The information set out below is intended to meet the requirement that detailed information explaining, in simple and clear terms, its policies and practices in this regard be published on the Congregation’s website in a manner that makes them easily accessible.
Summary:
- The Congregation is responsible for the information it collects, uses, or communicates, either directly or through agents or service providers.
- The Congregation implements governance policies and practices to ensure the protection of personal information, including its retention, destruction, and the handling of complaints.
- These policies, which are proportionate to the organization’s activities, are approved by the Information Protection Officer.
- The Information Protection Officer approves policies, supervises the destruction of personal information, and is consulted in the event of confidentiality incidents, if necessary.
- When undertaking new projects, the Congregation conducts a privacy impact assessment in collaboration with its Privacy Officer, taking into account the sensitivity and use of personal information.
: The Congregation establishes and implements policies and practices governing its governance of personal information and ensuring the protection of such information. These policies and practices include guidelines for the retention and destruction of such information, the roles and responsibilities of its staff throughout the life cycle of such information, and a process for handling complaints relating to the protection of such information. They are proportionate to the nature and scale of the Congregation’s activities and are approved by the individual who acts as the person in charge of the protection of personal information within the Congregation (the “Delegate“). Detailed information about these policies and practices is published in plain, clear language on the Congregation’s website.
: This statement primarily concerns personal information under the control of the Congregation, which corresponds to the information that the Congregation decides to collect and for which the Congregation establishes the purposes for which it is collected, used, or communicated, whether the Congregation collects, uses, or communicates it itself or whether an agent or service provider does so on its behalf.
:
| Controller | |
|---|---|
| Email: | controleur@ofmca.com |
| Address: | 6455 Louis-Riel Ave. Montreal, Quebec H1M 1P1 Canada |
The responsibilities and duties of the Delegate include the following:
: The Congregation conducts a privacy impact assessment of any project involving the acquisition, development, redesign of an information system, or electronic delivery of services that involves the collection, use, communication, retention, or destruction of personal information. For the purposes of this assessment, the Congregation consults its Delegate at the outset of the project. The privacy impact assessment is proportionate to the sensitivity of the information concerned, the purpose for which it is used, its quantity, distribution, and medium. The Congregation also ensures that this project allows computerized personal information collected from the individual concerned to be communicated to them in a structured and commonly used technological format. The Delegate may, at any stage of such a project, suggest measures to protect personal information applicable to that project, such as:
Summary:
- The Congregation publishes a clear and accessible confidentiality policy on its website.
- When collecting personal information through technological products or services, privacy settings are configured by default to provide the highest level of protection. Sensitive personal information is defined as information that requires increased protection due to its nature or context, giving rise to a high degree of reasonable expectation of privacy.
- The Congregation implements appropriate security measures to protect personal information based on its sensitivity and use. Individuals’ business contact information is not subject to the same privacy requirements.
- When using de-identified information, the organization limits the risks of identification. The Congregation maintains a record of confidentiality incidents and, in the event of an incident, takes measures to reduce the risks of harm.
- Incidents are assessed based on the sensitivity of the information and its potential consequences, and the organization informs the Commission d’accès à l’information, the Privacy Commissioner of Canada, and the individuals concerned, if necessary.
: As an organization that collects personal information by technological means, the Congregation publishes a confidentiality policy on its website, written in clear and simple terms, and disseminates it by other means appropriate for reaching the individuals concerned. It does the same for any changes to this confidentiality policy. The Congregation’s confidentiality policy is incorporated by reference into this statement and is available at the following URL:
| https://www.franciscanfriars.ca/confidentiality-policy |
|---|
: When collecting personal information by offering the public a technological product or service with privacy settings, the Congregation shall ensure that, by default, these settings provide the highest level of privacy, without any intervention by the individual concerned. As an exception, cookie settings are not covered.
: In the policies and practices referred to in this statement, personal information is “sensitive” when, by its nature or in the context of its use or communication, it gives rise to a high degree of reasonable expectation of privacy.
: The Congregation takes security measures to ensure the protection of personal information that is collected, used, communicated, retained, or destroyed, which are reasonable considering, among other things, the sensitivity of the information, the purpose for which it is used, the amount of information, its distribution, and its medium.
: The Congregation acts on the basis that applicable privacy laws allow for the exemption from their requirements regarding collection and confidentiality of information that allows contact—or facilitates contact—with an individual in the course of their employment, business, or profession, or that otherwise relates to the individual’s role within a business (such as their name, position, job title, work address, work phone or fax number, or work email address).
: When using de-identified information (i.e., information that no longer directly identifies the individual concerned), the Congregation takes reasonable measures to limit the risk of anyone identifying a natural person from that information.
Summary:
- The fact that an individual provides personal information to the Congregation generally implies consent to its use and communication.
- Any consent given must be clear, free, informed, and for specific purposes, after having been requested for each of these purposes, in simple and clear terms, and valid only for the time necessary for these purposes.
- When consent is requested in writing, it is requested separately from other information, and assistance may be provided to understand its scope.
- The Congregation collects personal information primarily from the individual, unless the individual consents to the collection from third parties or unless permitted by law.
- Collection from a third party is also permitted if it is in the individual’s interest and cannot be done in a timely manner, or to verify the accuracy of the information.
- If an individual refuses to provide personal information, the Congregation may refuse a request for goods or services, or an employment application, if the collection of such information is necessary for a contract, authorized by law, or justified on the grounds that the request is unlawful.
: By operation of law, an individual who provides personal information under the paragraph “Information at the time of collection or upon request” in section 4 of this statement consents to its use and communication for the purposes indicated at the time of collection by the Congregation.
: Consent must be express, free, informed, and given for specific purposes. It is requested for each of these purposes, in simple and clear terms, and is valid only for the time necessary to fulfill the purposes for which it was requested. When the request for consent is made in writing, it is presented separately from any other information communicated to the individual concerned. When requested, assistance is provided to help the individual understand the scope of the consent requested.
: The Congregation refrains from sending a commercial electronic message to an email address, having it sent there, or allowing it to be sent there, unless the person to whom the message is sent has expressly or tacitly consented to receive it and the message complies with regulatory requirements regarding its form and includes (1) the regulatory information identifying the person who sent it and, where applicable, the person on whose behalf it was sent, (2) information enabling the person who received it to easily communicate with either of these persons, and (3) a description of an opt-out mechanism in accordance with the laws governing such mailings.
: When the Congregation collects personal information about others, it does so in principle from the individual concerned, unless that individual consents to the collection from third parties. However, the Congregation may, without the consent of the individual concerned, collect such information from a third party if permitted by law. It may do so if it has a serious and legitimate interest and if one of the following conditions is met:
: In any of the following circumstances, the Congregation may refuse to comply with a request for goods or services or a request relating to employment because the individual making the request refuses to provide personal information:
Summary:
- When collecting personal information, the Congregation informs individuals of the purposes and means of collection, as well as their rights of access, rectification, and withdrawal of consent.
- If the information is intended for a third party or transferred outside Quebec, individuals are also informed.
- The information is provided in simple and clear terms, and additional details may be provided upon request, including the retention period and the person responsible.
- When technology enabling identification, location, or profiling is used, the Congregation informs individuals in advance.
- In the case of automated decisions, the individuals concerned are informed and may request explanations or a review.
: When the Congregation collects personal information from the individual concerned, at the time of collection and subsequently upon request, it informs them:
Where applicable, the individual concerned shall be informed of the name of the third party for whom the information is being collected, the names of the third parties or categories of third parties to whom it is necessary to communicate the information for the purposes referred to in paragraph 1 of the preceding subsection, and the possibility that the information may be communicated outside Québec.
The information that the Congregation provides to the individual concerned at the time of collection is included in “just-in-time” notices or otherwise in the Congregation’s Confidentiality policy, which is discussed in the section entitled “Confidentiality policy.”
Upon request, the individual concerned is also informed of the personal information collected from him or her, the categories of persons who have access to this information within the Congregation, the length of time this information will be retained, and the contact details of the person responsible for the protection of personal information.
The information is provided to the individual concerned in plain and clear language, regardless of the means used to collect the personal information.
: When the Congregation collects personal information from individuals using technology that includes functions to identify, locate, or profile them, it informs them in advance:
: If the Congregation collects personal information under its control from another person who operates a business or a public body, it will inform the individual concerned, at their request, of the source of that information. (This does not apply to an investigation file created for the purpose of preventing, detecting, or prosecuting a crime or offense.)
: If the Congregation uses personal information to make a decision based solely on automated processing of that information, it will inform the individual concerned no later than when it informs them of the decision. The Congregation shall give the individual concerned an opportunity to present his or her observations to a member of the Congregation’s staff who is in a position to review the decision. At the request of the individual concerned, the Congregation shall also inform him or her:
Summary:
- The Congregation determines the purposes for which personal information is collected before collecting it, ensuring that only necessary information is collected and by lawful means.
- This personal information is used only for the predetermined purposes, unless additional consent is obtained for a new purpose or certain exceptions apply, such as a purpose that is compatible with a predetermined purpose, the prevention of fraud, or the provision of a requested service.
- The Congregation identifies itself to the individual concerned and informs them of their right to withdraw their consent for any use for commercial or philanthropic prospecting purposes.
: When the Congregation collects personal information about others for serious and legitimate reasons, it determines the purposes of such collection before the information is collected.
: When collecting personal information about others, the Congregation collects only the information necessary for the purposes identified before collection. This information is collected by lawful means.
: Personal information is used within the Congregation, in principle, only for the purposes for which it was collected. Use for a new purpose generally requires consent, which must be expressly given in the case of sensitive personal information. However, applicable privacy laws generally allow personal information to be used for another purpose without the consent of the individual concerned in the following cases:
: For a purpose to be compatible within the meaning of point 1 in the previous paragraph, there must be a relevant and direct link to the purposes for which the information was collected. However, commercial or philanthropic prospecting is not considered a compatible purpose.
: In accordance with the laws governing the sending of commercial electronic messages and subject to exceptions, particularly with regard to business contact information in applicable privacy laws, if the Congregation uses personal information for commercial or philanthropic prospecting purposes, it identifies itself to the individual to whom it is addressing and informs them of their right to withdraw their consent to the use of their personal information for these purposes. When the individual concerned withdraws their consent to such use of their personal information, it ceases to be used in this manner.
Summary:
- The Congregation retains personal information only for as long as necessary to fulfill the purposes for which it was collected or to comply with the law.
- The length of time varies depending on the type of data, generally ranging from 3 to 10 years, with a minimum retention period of one year after a decision concerning the individual.
- Once the retention period has expired, the information is securely destroyed in accordance with documented procedures.
- The Congregation may anonymize personal information after use, following recognized practices to prevent re-identification.
: Personal information for which applicable privacy laws impose processing or confidentiality obligations is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable laws and regulations. The minimum and maximum retention periods for personal information vary depending on the categories of personal information and the applicable legislative and regulatory requirements. Subject to exceptions and the fact that personal information used to make a decision about an individual concerned is retained for at least one year after the decision, the retention periods are as follows for personal information that is part of the following, unless otherwise required by law or regulation:
As also indicated in the “Transparency” section above, an individual concerned is informed, upon request, of the retention period for personal information collected from him or her.
: Once the retention period for personal information has expired, the Congregation will destroy it in a secure and permanent manner, in accordance with its established procedures. The destruction of personal information will be documented and recorded to ensure traceability and accountability. The heads of the relevant departments or divisions of the Congregation will periodically identify personal information whose retention period has expired and which must be destroyed. Personal information will be destroyed in an appropriate manner, depending on the format in which it is stored; for paper documents: shredding, grinding, or incineration; for digital media: secure erasure. The destruction of personal information will be supervised by the Delegate, who will ensure that the appropriate procedures are followed and documented. This documentation will include the date of destruction, the method used, the types of personal information destroyed, and the name of the person responsible for the destruction.
: Once the purposes for which personal information was collected or used have been fulfilled, the Congregation may anonymize it if it wishes to use it for serious and legitimate purposes, subject to any retention period provided for by law. (In the policies and practices referred to in this statement, information about an individual is anonymized when it is reasonable to expect, in the circumstances, that it will no longer be possible to directly or indirectly identify that individual. Information is anonymized in accordance with generally accepted best practices and the criteria and procedures set out in the regulations.) More specifically:
: The Congregation ensures that the personal information it holds about others is up to date and accurate at the time it is used to make a decision about the individual concerned. The information used to make such a decision is retained for at least one year after the decision.
: The Congregation refrains from routinely updating the personal information it holds unless it is necessary to achieve the purposes for which it was collected.
Summary:
- The Congregation respects professional secrecy and the confidentiality of personal information.
- It communicates personal information to third parties only with the consent of the individual concerned or if permitted or required by law.
- Before transmitting information outside Quebec, the Congregation assesses privacy factors and establishes written agreements to ensure adequate protection.
- Without consent, personal information may be communicated in specific situations such as to an archival service, to an agent or service provider for processing, for commercial transactions preceded by an agreement, or to prevent danger.
- The Congregation may also communicate personal information for study, research, or statistical purposes, on an exceptional basis and in accordance with the conditions provided for by law.
The information in this section is subject to professional secrecy and confidentiality obligations, whether ethical, contractual, or otherwise.
: The Congregation does not communicate any personal information it holds about others to third parties, unless permitted or required by applicable privacy laws or unless the individual concerned consents to such communication by operation of law or otherwise. In such cases, consent must be expressly given when sensitive personal information is involved.
: Consent to the communication of personal information by a third party may be given by the individual concerned to the Congregation, which may then collect it from that third party.
: Before disclosing personal information outside Quebec for which no exception exists under applicable privacy laws, the Congregation conducts a privacy impact assessment. It takes into account the following factors, among others:
The applicable privacy laws allow communication if the assessment shows that the information would be adequately protected, in particular with regard to generally recognized principles of personal information protection. Where applicable, such communications shall be the subject of a written agreement that takes into account, in particular, the results of the assessment and, where applicable, the terms and conditions agreed upon to mitigate the risks identified in the assessment. The same applies when the Congregation entrusts a person or organization outside Quebec with the task of collecting, using, disclosing, or retaining such information on its behalf.
: Applicable privacy laws allow the Congregation, without the consent of the individual concerned, to communicate personal information it holds about others to certain persons or categories of persons, including (1) those listed in section 18 of theAct respecting the protection of personal information in the private sector (CQLR c P-39.1) (some of which have the power to communicate if they themselves, to the extent that such communication is necessary in the performance of their duties for the purposes for which they received the information), or (2) in the cases referred to in paragraphs (3)(a) to (h.1) of the Personal Information Protection and Electronic Documents Act (LC 2000, c 5), where applicable. The Congregation records any communication made under the provisions required by applicable privacy laws.
: Applicable privacy laws allow the Congregation, without the consent of the individual concerned, to communicate personal information to any person or organization if such communication is necessary for the performance of a mandate or the execution of a service or business contract that it entrusts to that person or organization. In this case, the Congregation:
A person or organization that exercises such a mandate or performs such a service or business contract is required to notify the Delegate without delay of any violation or attempted violation by any person of any of the obligations relating to the confidentiality of the information communicated and must also allow the Delegate to carry out any verification relating to such confidentiality.
: The Congregation recognizes that applicable privacy laws allow the Commission d’accès à l’information, upon written request and after consulting with the relevant professional orders, to grant a person authorization (which may be revoked or suspended by the Commission in certain specific circumstances) to receive personal information about professionals relating to their professional activities, without the consent of the professionals concerned, if it has reasonable grounds to believe that:
: Applicable privacy laws allow the Congregation, without the consent of the individual concerned, to communicate personal information contained in a file it holds on another person to an archival service, if that archive service is provided by a service provider whose purpose is to acquire, preserve, and disseminate documents for their general informational value and if that information is communicated in connection with a transfer or deposit of the Congregation’s archives.
: When the communication of personal information is necessary for the purposes of entering into a “commercial transaction” (i.e., the sale or lease of all or part of a business or its assets, a change in its legal structure through merger or otherwise, the obtaining of a loan or any other form of financing by the Congregation or a security taken to guarantee one of its obligations) to which the Congregation intends to be a party, the applicable privacy laws authorize it to communicate such information, without the consent of the individual concerned, to the other party to the transaction. Where applicable, an agreement shall be entered into in advance with the other party, stipulating in particular that the latter party undertakes:
: Applicable privacy laws also allow the Congregation to communicate personal information it holds about others, without the consent of the individuals concerned, in order to protect an identifiable person or group of persons when there are reasonable grounds to believe that there is a serious risk of death or serious injury (i.e., any physical or psychological injury that significantly impairs the physical integrity, health, or well-being of an identifiable person or group of persons) , such as a disappearance or an act of violence, including attempted suicide, threatens that person or group of persons and the nature of the threat inspires a sense of urgency. The information may then be communicated to the person or persons exposed to this danger, their representative, or any person likely to come to their aid. When disclosing information pursuant to this paragraph, the Congregation shall communicate only the information necessary for the purposes of the communication. When information is communicated in this manner by the Congregation, it shall record the communication.
: Applicable privacy laws allow the Congregation to communicate to the spouse or close relative of a deceased person personal information it holds about that person, if knowledge of that information is likely to assist the requester in the bereavement process and the deceased person has not recorded in writing his or her refusal to grant that right of access.
: Applicable privacy laws also allow the Congregation to communicate personal information to any person, without the consent of the individual concerned, if this information is contained in a document that is more than 100 years old or if more than 30 years have elapsed since the death of the individual concerned. However, unless the individual concerned consents, the Congregation will not communicate any information relating to an individual’s health until 100 years have elapsed since the date of the document.
: Under certain conditions, applicable privacy laws allow the Congregation to communicate personal information without the consent of the individuals concerned to a person or organization that wishes to use this information for study, research, or statistical purposes. Where applicable, such communication shall only be made in accordance with the requirements of applicable privacy laws, including a privacy impact assessment concluding that:
Summary:
- The Congregation allows individuals to access their personal information and obtain a copy of it, including in a structured digital format.
- Individuals may also request the correction of this personal information if it is inaccurate or processed in an unauthorized manner.
- Requests for access or correction should be addressed to the responsible Officer, who will respond within 30 days.
- Access is free of charge, but reasonable fees may apply for the reproduction or transmission of personal information.
- The Congregation may refuse to communicate personal information in certain cases, particularly if it would harm a third party, an investigation, or legal proceedings.
: When the Congregation holds personal information about another person, it will, at the request of the individual concerned, confirm the existence of that information and communicate it to the individual by providing a copy. At the request of the applicant, any computerized personal information shall be communicated in the form of a written and intelligible transcript. Unless this raises serious practical difficulties, computerized personal information collected from the applicant, and not created or inferred from personal information concerning him or her, shall, at his or her request, be communicated in a structured and commonly used technological format. Such information shall also be communicated, at his request, to any person or body authorized by law to collect such information. Where the applicant is a person with a disability, reasonable accommodation measures shall be taken, upon request, to enable him to exercise the right of access provided for in this section.
: In addition to the rights provided for in the first paragraph of section 40 of theCivil Code of Québec, any individual may, if the personal information concerning him or her is inaccurate, incomplete, or ambiguous, or if its collection, communication, or retention is not authorized by law, require the Congregation to correct it.
: Applicable privacy laws allow a person who holds personal information on behalf of the Congregation, when presented with a request for access or rectification by an individual concerned, to forward the request to the Congregation. This is not intended to limit the right of access or correction of a data subject with a personal information agent.
: Applicable privacy laws allow the Congregation, when it holds personal information on behalf of an individual who operates a business and receives a request for access or correction from an individual concerned, to forward the request to that individual who operates the business. This is not intended to limit the right of access or correction of an individual concerned to a personal information officer.
: The individual concerned by personal information may require the Congregation to cease disseminating that information or to de-index any hyperlink attached to their name that allows access to that information by technological means, when the dissemination of that information contravenes the law or a court order. They may do the same, or require that the hyperlink providing access to this information be reindexed, when the following conditions are met:
When granting the request, the Delegate shall certify in his or her written response that the dissemination of the personal information has been discontinued or that the hyperlink has been deindexed or reindexed.
: When the Congregation holds personal information about others, it takes the necessary measures to ensure that the individuals concerned can exercise their rights under sections 37 to 40 of theCivil Code of Québec and their rights under applicable privacy laws. In particular, the Congregation informs the public of the location where this personal information is accessible and the means of accessing it.
: A request, particularly for access or rectification, will only be considered if it is addressed to the Delegate, made in writing (except in cases where applicable privacy laws require that it may also be made verbally) by a person who can prove their identity as the individual concerned, as a representative, heir, successor of that individual, as the liquidator of the estate, as the beneficiary of life insurance or death benefits, as the holder of parental authority even if the minor child has died, or as the spouse or close relative of a deceased person in cases of bereavement covered by section 40.1 of theAct respecting the protection of personal information in the private sector (CQLR c P-39.1).
: When the request is not sufficiently specific or when an individual so requests, the Delegate provides assistance in identifying the information sought. This does not restrict the communication to an individual of personal information concerning him or her or its correction resulting from the provision of a service to be rendered to him or her.
: The Delegate responds in writing to the request for access or correction, diligently and no later than 30 days after the date of receipt of the request. If no response is provided within 30 days of receipt of the request, the Delegate is deemed to have refused to comply.
: Access to personal information is free of charge. However, reasonable fees may be charged to the requester for the transcription, reproduction, or transmission of such information. When the Congregation intends to charge fees, it shall inform the requester of the approximate amount payable before proceeding with the transcription, reproduction, or transmission of such information.
: When the Delegate grants a request for correction, in addition to the obligations set out in the second paragraph of section 40 of theCivil Code of Québec, he or she shall issue, free of charge, to the individual concerned who made the request, a copy of any personal information that has been modified or added or, as the case may be, a certificate of the deletion of such information.
: The Delegate shall give reasons for any refusal to grant a request and indicate the provision of the law on which the refusal is based, the remedies available to the applicant under the law, and the time limit within which they may be exercised. He or she shall also assist the applicant who so requests in understanding the refusal. If the Congregation holds information that is the subject of a request for access or correction to which it does not agree, it shall retain it for the time necessary to allow the individual concerned to exhaust the remedies provided by law.
: Applicable privacy laws allow the Congregation to refuse to communicate personal information about an individual to that individual when communication of the information would likely:
: The Congregation shall refuse to communicate to an individual personal information concerning him or her where communication would be likely to reveal personal information about a third party or the existence of such information and where such communication would be likely to cause serious harm to the third party, unless the third party consents to the communication or it is an emergency that endangers the life, health, or safety of the individual concerned.
: Subject to the cases referred to in section 40.1 of theAct respecting the protection of personal information in the private sector (relating to assistance in the grieving process), the Congregation must refuse to communicate personal information to the liquidator of the estate, the beneficiary of a life insurance policy or death benefit, or the heir or successor of the individual concerned by this information, unless the information affects communicationthe interests or rights of the person requesting it as liquidator, beneficiary, heir, or successor.
Summary:
- To file a complaint with the Congregation regarding the protection of personal information, the individual concerned is asked to read the Congregation’s Confidentiality policy and check the applicable legislation.
- The complaint must be made in writing, specify the facts, be accompanied by supporting documents, and be addressed to the Delegate.
- While the complaint is being processed, the individual concerned is asked to give the Congregation the opportunity to respond before contacting the public authorities.
- If the complaint is not satisfactorily resolved, depending on the case, it is possible to request a review of the disagreement by the Commission d’accès à l’information du Québec (Quebec Access to Information Commission) or to file a complaint with the Privacy Commissioner of Canada.
: Here is an overview of the Congregation’s process for handling complaints related to the protection of personal information.
:
| https://www.franciscanfriars.ca/confidentiality-policy |
|---|
:
:
Subscribe to receive our newsletter (published up to four times a year).
