When you visit the https://boutique.sanctuairesainteanne.org/ website or create an online account (collectively referred to as the “website”), when you buy products or services on the website, when you communicate with us, and when you accept to receive emails from Name of company, you are accepting the terms and conditions described herein.
This policy does not apply to third-party websites. Therefore, Shrine of Sainte-Anne-de-Beaupré will not be held responsible for their privacy policies, procedures or practices.
1. Collecting Personal Information
We collect your personal information in several different ways, including when you enter your personal information on our website, when you buy products or services, when you create an account, when you communicate with us by telephone or email, when you post to our social media accounts, etc. Depending on the circumstances, personal information may include your first name, last name, email address, mailing address, telephone number, profile picture or password. If you choose to not share your personal information, you may not be able to access some sections to the website.
Please note that we will never ask for sensitive information (such as information about your race or ethnicity, political opinions, religious or philosophical beliefs, union membership, sexual orientation and activity, or information about your health), and we ask that you please do not share this kind of sensitive information with us.
The legal basis for processing personal information essentially rests on the fact that processing said data is required to make the website available to users, and that said data processing is carried out in our legitimate interests, which are described in more detail in the section Using and Sharing Personal Information. We may also process personal information with your consent, which we will ask for as required.
2. Using and Sharing Personal Information
We take measures to ensure that the only employees able to access your personal information are those who are required to in order to carry out their responsibilities. We use and share your personal information for the following purposes:
To operate, maintain, improve and provide the website’s functions, to provide you with the information and services you request, to respond to comments and questions, and to provide support to users of the website;
To understand and analyze our user’s usage trends and preferences, to improve the website and to develop new products, new services and new functions;
To communicate with you in compliance with applicable laws;
And for any other purpose permitted or required by law.
When we disclose your personal information to third parties, we take reasonable steps to ensure that the rules stated herein are respected and that the third parties provide satisfactory guarantee that they can implement adequate technical and organizational measures for the protection of your information. Below we have listed our third-party service providers who are likely to process your personal information (with links to their privacy policies):
Google Analytics: https://www.google.com/analytics/terms/us.html
In the event of the transfer of ownership, sale, merger, liquidation, restructuring or takeover of Shrine of Sainte-Anne-de-Beaupré, in whole or in part, your personal information may be transferred as part of the transaction.
3. Retaining Personal Information
Your personal information may be stored and processed in any country where we have facilities or employ third-party service providers. When you use the website, you consent to the transfer of your personal information to countries that are not your country of residence. Data protection laws may differ from one country to another. When this kind of data is held outside of Canada, it is subject to the laws of the country where it is held and may have to be shared with the country’s governments, courts, law enforcement agencies and regulatory bodies, in accordance with applicable law. Nonetheless, our personal information practises will continue to be governed by this policy and, if required, we will comply with the requirements of the General Data Protection Regulation (GDPR) to provide sufficient protection when transferring personal information from a country located in the European Union or the European Economic Area to a third country.
We have established several physical, administrative and technical protection measures designed to conserve the privacy and security of the personal information we hold. However, no security measures are absolute nor fully secure. You hereby accept the responsibility for all activities conducted from your account and password on our website whether these activities are conducted by you or someone else.
We retain your personal information solely for the reasonable period required for the relevant purposes stated herein and to comply with our legal and statutory obligations. For more information regarding the retention period of your personal information, please contact us following the instructions provided in the “Contact” section.
4. Rights with Respect to Personal Information
In some circumstances and in accordance with GDPR and other applicable privacy protection laws, an individual has the following rights:
Access: the right to ask if we are processing data, and if we are, to ask for access to said personal information. This enables the individual to receive a copy of the personal information we hold and certain other information about them;
Correction: the right to request that any incomplete or incorrect personal information we hold be corrected;
Deletion: the right to ask us to delete or remove personal information in some circumstances. There are exceptions where we may refuse a request for deletion, for example, when personal information is required by the law or in connection with claims;
Restriction/limitation: the right to ask us to suspend the processing of certain personal information, for example, to establish its accuracy or the reason for its processing;
Transfer: the right to request the transfer of certain personal information to a third party;
Objection/opposition: an individual may challenge when we are processing personal information on grounds of legitimate interest (or those of a third party) or for direct marketing purposes. However, we may be entitled to continue processing data;
Automated decisions: the right to contest any automated decisions made where this has legal consequences or a similar significant effect, and to ask for it to be reconsidered;
Consent: the right to withdraw consent when we are processing personal information with consent.
An individual also has the right to file a complaint with a data protection supervisory authority, in particular in the country/province/state where you normally reside, where we are based, or where an alleged infringement of data protection law has taken place.
To exercise any of these rights, please contact us using the contact details in the “Contact” section below. Please note that we may ask you to provide proof of your identity before responding to your request. This identification information will be used solely for this purpose.
6. Protecting Children’s Privacy
The website is not destined for children under the age of 16, and we do not knowingly collect personal information on children under the age of 16 without the consent of their parent or guardian. If you are under the age of 16, please do not use the website or access it at any time or in any manner. If we come to learn that personal information about a child under the age of 16 has been collected by the website without the verifiable consent of the child’s parent or guardian, we will take the required steps to erase said information. If you are a parent or guardian and you discover that your child under the age of 16 has provided us with their personal information, you can let us know by following the instructions in the “Contact” section and asking us to erase said information from our systems.
If you have any questions or comments about this policy or your personal information, if you would like to ask to access or correct your personal information, exercise your applicable rights, make a complaint or obtain information about our policies and practices regarding our service providers located outside of Canada, you can contact our privacy protection officer by mail or email at the following addresses:
Shrine of Sainte-Anne-de-Beaupré
10018 Avenue Royale, Sainte-Anne-de-Beaupré, QC G0A 3C0
Email : firstname.lastname@example.org
[Last updated: 2020-07-28]