DSV Northstar Seed Ltd.

General information
This privacy policy is based on the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal private-sector privacy law. Depending on where you live or access our website, substantially similar provincial private-sector privacy laws, including those in Alberta, British Columbia and Quebec, may also apply. Where Deutsche Saatveredelung AG processes personal information in connection with its activities in Germany, the EU General Data Protection Regulation (GDPR) may additionally apply.

The following information provides an easy-to-navigate overview of what happens to your personal information when you visit this website. The term “personal information” means information about an identifiable individual. For detailed information about privacy and data protection, please consult the Privacy Policy set out below.

Collection of personal information on this website

Who is responsible for the collection and handling of personal information on this website?
Personal information on this website is handled by the website operators. Their contact information is available under the section “Information about the organizations responsible for personal information” in this Privacy Policy.

How do we collect your information?
We collect personal information that you provide to us. This may include, for example, information you enter into our contact form.

Other information is collected automatically by our IT systems or after you have provided meaningful consent during your website visit. This information mainly includes technical data, such as browser type, operating system and the time the website was accessed. It is collected automatically when you access this website.

How do we collect your information?
We collect personal information that you provide to us. This may include, for example, information you enter into our contact form.

Other information is collected automatically by our IT systems or after you have provided meaningful consent during your website visit. This information mainly includes technical data, such as browser type, operating system and the time the website was accessed. It is collected automatically when you access this website.

What privacy rights do you have?
Subject to applicable Canadian privacy law, you may request access to personal information under our control, ask that inaccurate information be corrected, withdraw consent where processing is based on consent, and challenge our compliance with applicable privacy requirements. You may also complain to the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator. Requests may be subject to limited exceptions permitted by law.

Please contact us at any time if you have questions about these rights or any other privacy-related matter.

Analytics tools and third-party tools
Your browsing behaviour may be statistically analysed when you visit this website. Such analysis is performed primarily using analytics programs described below.

For detailed information about these analytics programs, please consult the Privacy Policy below.

We host the content of our website with the following provider:

External Hosting
This website is hosted externally. Personal information collected through this website may be stored on the host’s servers. This may include IP addresses, contact requests, metadata and communications, contract and contact information, names, website access data and other information generated through use of the website.

External hosting is used to provide the website, respond to requests and support existing or potential customer relationships. We collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, with meaningful consent where required by PIPEDA or applicable provincial law. Information may be processed outside Canada as described under “International transfers and processing outside Canada”.

Our host will process personal information only as needed to provide its services and in accordance with our contractual instructions, subject to applicable law.

We are using the following host(s):

neusta webservices
Turiner Str. 21
50668 Köln

Service provider arrangements
We have entered into a written service provider agreement for the use of the provider named above. The agreement requires the provider to process personal information only for the agreed purposes, apply appropriate safeguards and provide a level of protection comparable to that required under applicable Canadian privacy law.

Privacy and data protection
The operators of this website take the protection of your personal information very seriously. We handle personal information confidentially and in accordance with PIPEDA, applicable provincial privacy laws and this Privacy Policy. We maintain a privacy management program appropriate to our activities, designate privacy officers, train relevant personnel, review service providers and apply administrative, technical and physical safeguards that reflect the sensitivity, amount, format and location of the information.

When you use this website, different categories of personal information may be collected. Personal information is information about an identifiable individual. This Privacy Policy explains what we collect, why we collect it, how it is used and disclosed, and how it is protected.

Please note that transmitting information over the Internet, including by e-mail, may involve security risks. It is not possible to guarantee complete protection against access by unauthorized third parties.

Information about the organizations responsible for personal information
The organizations responsible for personal information handled through this website are:

Deutsche Saatveredelung AG
Weissenburger Straße 5 
D-59557 Lippstadt

Phone: +49 2941 296 0
E-mail: info@dsv-saaten.de 

DSV Northstar Seed Ltd.
Box 2220, Neepawa, Manitoba
Canada

Phone: +1 204 476 5241
E-mail: info@dsv-northstar.com 

DSV Northstar Seed Ltd. is responsible for Canadian business enquiries and customer relationships. Deutsche Saatveredelung AG operates and technically administers the website. Each organization is accountable for personal information under its control. Where they jointly determine the purposes and means of a particular activity, they coordinate their privacy responsibilities and support the exercise of your rights.

Retention period
Unless a more specific retention period is stated in this Privacy Policy, personal information is retained only for as long as necessary to fulfil the identified purposes and to meet legal, accounting or business requirements. Retention periods are reviewed in light of the sensitivity of the information, the reason for collection, contractual requirements and applicable limitation periods. When information is no longer required, it is securely deleted, destroyed or anonymized. If you withdraw consent, we will stop the related collection, use or disclosure, subject to legal or contractual restrictions and reasonable notice. We may retain minimal suppression records to respect an opt-out and records of security breaches for the period required by law.

General information on purposes, consent and authority for processing
Under PIPEDA, we may collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances. We identify those purposes at or before collection and obtain meaningful consent unless an exception in applicable law permits handling without consent. Consent may be express or implied depending on the sensitivity of the information and your reasonable expectations. We apply the principles of accountability, identifying purposes, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access and challenging compliance. If a breach of security safeguards creates a real risk of significant harm, the organization in control will report the breach to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, and records of all breaches will be maintained as required by law. Where processing by Deutsche Saatveredelung AG is also subject to the GDPR, the applicable GDPR legal basis is described in the relevant section of this Privacy Policy.

Designation of privacy officers
We have designated privacy officers who are responsible for overseeing compliance with applicable privacy requirements.

E-mail: datenschutz@dsv-saaten.de 

E-mail: dataprotection@dsv-northstar.com 

International transfers and processing outside Canada
We use group companies and service providers located in Canada, Germany, other European countries and the United States. Personal information may therefore be transferred to, stored in or accessed from jurisdictions outside your province or outside Canada, where it may be subject to the laws of those jurisdictions and may be accessible to courts, law-enforcement or national-security authorities. Under PIPEDA, we remain accountable for personal information transferred to service providers for processing. Before engaging a provider, we consider the sensitivity of the information, the purposes of processing, the countries involved, access controls, subcontractors and the foreign legal environment. Contracts require confidentiality, appropriate security, incident reporting, assistance with access and correction requests, and deletion or return of information when services end.

Where EU data protection law applies to transfers by Deutsche Saatveredelung AG, transfers to the United States may additionally rely on an applicable EU-U.S. Data Privacy Framework certification, European Commission standard contractual clauses or another lawful EU transfer mechanism. These mechanisms supplement, but do not replace, our accountability and transparency obligations under Canadian privacy law.

Recipients of personal information
In the course of our activities, we work with group companies, hosting providers, communications providers, analytics providers, logistics providers, payment providers and other external parties. We disclose personal information only for identified and reasonable purposes, with consent where required, to fulfil a requested service or contract, or where disclosure is otherwise permitted or required by law. Service providers are contractually required to protect personal information, restrict access to personnel who need it, notify us of relevant security incidents and use the information only for the services they provide to us. Where more than one organization is accountable for an activity, the parties allocate and coordinate their responsibilities and cooperate in responding to privacy requests.

Withdrawal of consent
Where we rely on consent, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal does not affect handling that occurred before the withdrawal. We will explain any significant consequences of withdrawing consent, such as being unable to provide a requested service.

Right to challenge processing and object to direct marketing
YOU MAY CHALLENGE OUR COMPLIANCE WITH PIPEDA OR OTHER APPLICABLE PRIVACY LAW AND ASK US TO REVIEW A COLLECTION, USE OR DISCLOSURE OF YOUR PERSONAL INFORMATION. WHERE AN ACTIVITY IS BASED ON CONSENT, YOU MAY WITHDRAW THAT CONSENT, SUBJECT TO LEGAL OR CONTRACTUAL RESTRICTIONS AND REASONABLE NOTICE. WE WILL INVESTIGATE PRIVACY CONCERNS AND, WHERE APPROPRIATE, CORRECT OUR PRACTICES OR THE INFORMATION INVOLVED.

IF WE SEND COMMERCIAL ELECTRONIC MESSAGES, YOU MAY WITHDRAW YOUR CONSENT OR USE THE UNSUBSCRIBE MECHANISM PROVIDED IN THE MESSAGE. IN ACCORDANCE WITH CANADA’S ANTI-SPAM LEGISLATION (CASL), WE WILL GIVE EFFECT TO A VALID UNSUBSCRIBE REQUEST WITHOUT DELAY AND NO LATER THAN 10 BUSINESS DAYS. WE MAY RETAIN MINIMAL INFORMATION ON A SUPPRESSION LIST SO THAT WE CAN RESPECT YOUR REQUEST.

Right to file a complaint with a privacy regulator
You may first raise a concern with our privacy officers. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada. If a substantially similar provincial privacy law applies, you may also contact the competent provincial privacy regulator. Where processing by Deutsche Saatveredelung AG is subject to the GDPR, you may also complain to the competent European supervisory authority.

The relevant supervisory authorities include:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2 – 4
40213 Düsseldorf

Telefon: 0211 384 24-0
E-Mail: poststelle@ldi.nrw.de 

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec
K1A 1H3

Phone: 819-994-5444 or toll-free 1-800-282-1376

Access to and transfer of personal information
Subject to legal exceptions, you may request access to personal information under our control and information about how it has been used and disclosed. We will respond with due diligence and normally within 30 days, at minimal or no cost. The response period may be extended where permitted by law, in which case we will notify you of the extension and your complaint rights. If access is refused in whole or in part, we will explain the permitted reason and the available recourse, unless the law prohibits us from doing so. PIPEDA does not create a general right to data portability, but we may provide information in a commonly used electronic format or transfer it to another organization where this is technically feasible and appropriate.

Access, correction and deletion of information
You may ask whether we hold personal information about you, request access to it, and challenge its accuracy or completeness. Where appropriate, we will correct or annotate inaccurate information and notify relevant third parties. You may also ask us to delete information that is no longer required or that is handled on the basis of consent you have withdrawn, subject to legal, contractual and record-retention requirements.

Request to limit use or disclosure
You may ask us to limit or stop a particular use or disclosure of your personal information. We will review the request in light of applicable law, the purposes for which the information was collected and any legal or contractual obligations. Limitations may apply in the following circumstances:

• If you dispute the accuracy or completeness of personal information, we will review the issue and, where appropriate, limit use of the disputed information while the review is ongoing.
• If consent is withdrawn or information is being handled for a purpose that is no longer appropriate, we will stop the relevant use or disclosure unless continued handling is permitted or required by law.
• If we no longer need information for its original purpose but must retain it for legal claims, compliance or record-keeping, we may restrict access and use it only for those limited purposes.
• If you challenge our compliance or object to direct marketing, we will review the matter and suspend or stop the relevant activity where appropriate while the issue is being resolved.

Where use or disclosure has been limited, personal information will generally be retained securely and used only with your consent, to meet legal obligations, to establish, exercise or defend legal claims, to protect another person, or for another purpose permitted by law.

SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Unsolicited commercial electronic messages
We object to the use of contact information published in our legal notice or elsewhere on this website for unsolicited advertising. Commercial electronic messages are sent only where permitted by CASL, including where valid express or implied consent exists or an exemption applies. Messages will identify the sender and any person on whose behalf the message is sent, provide contact information that remains valid for at least 60 days, and include a clear and functioning unsubscribe mechanism that does not require further action beyond the unsubscribe request. Valid unsubscribe requests will be processed without delay and no later than 10 business days.

Cookies
Our websites and pages use technologies commonly referred to as “cookies.” Cookies are small data files stored on your device. Some are stored temporarily for the duration of a session (session cookies), while others remain on your device until they expire or are deleted (persistent cookies). Depending on their function and the information they contain, cookies and similar technologies may involve personal information.

Cookies may be set by us (first-party cookies) or by third-party providers (third-party cookies). Third-party cookies and similar technologies can enable the integration of services such as videos, analytics, social media functions or payment services.

Cookies have different functions. Some are necessary for website operation, security or a feature you request. Others may be used to measure website use, personalize content or support advertising.

We use strictly necessary cookies and similar technologies where they are required to provide a requested service, maintain security or operate the website for purposes a reasonable person would consider appropriate. Where cookies or similar technologies collect personal information for analytics, personalization or advertising, we obtain meaningful consent as required by PIPEDA and applicable provincial law. Non-essential technologies are not activated before the required choice is made. Consent requests explain the relevant purposes, important third parties and consequences in clear language, and refusing non-essential technologies does not prevent access to the core website. Consent may be withdrawn at any time through the consent settings.

You can configure your browser to notify you when cookies are set, allow cookies only in certain cases, block cookies generally or delete them automatically when the browser closes. You can also manage non-essential technologies through our consent-management tool. Disabling cookies may limit some website functions.

Which cookies and services are used on this website can be found in this privacy policy.

Consent management with Usercentrics
This website uses Usercentrics consent-management technology to obtain, manage and document your choices concerning cookies and similar technologies. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/ (referred to as “Usercentrics”).

When you visit our website, the following information may be transferred to Usercentrics:

• Your declaration(s) of consent or your revocation of your declaration(s) of consent
• Your IP address
• Information about your browser
• Information about your device
• The date and time you visited our website
• Geolocation

Usercentrics stores a cookie or similar identifier in your browser so that your consent choices and withdrawals can be recognized. Consent records are retained only for as long as necessary to demonstrate and administer your choices and to meet legal requirements. You may delete the Usercentrics cookie or change your settings at any time; mandatory retention obligations remain unaffected.

We use Usercentrics to meet our accountability and transparency obligations, obtain meaningful consent where required and maintain records of consent choices. Consent records may include the date and time, the selected categories, the applicable policy or configuration version and a technical identifier needed to demonstrate the choice. The collection and use of personal information for this purpose is limited to what is reasonably necessary and is not used for unrelated advertising.

Service provider arrangements
We have entered into a written service provider agreement with Usercentrics. The agreement requires Usercentrics to handle personal information only for the agreed purposes, follow our instructions, apply appropriate safeguards and provide a level of protection comparable to that required under applicable Canadian privacy law.

Server log files

The provider of this website automatically collects and stores information in server log files that your browser transmits to us. The information includes:

• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This information is not routinely combined with unrelated data sources.

Server log information is collected and used for reasonable purposes such as secure and reliable website operation, troubleshooting, fraud prevention and technical optimization. Depending on the context and sensitivity of the information, this handling is based on meaningful consent or on purposes that are reasonable and within users’ reasonable expectations under PIPEDA. Access to logs is restricted, logs are protected against unauthorized alteration and disclosure, and they are deleted or anonymized when no longer needed for security, operational or legal purposes.

Contact form
If you submit an enquiry through our contact form, we collect the information entered in the form and any contact information you provide to respond to your request and handle follow-up questions. Information may be shared with the relevant DSV group company or service provider only as described in this Privacy Policy.

We use this information to take steps at your request, administer a contract, respond effectively to enquiries and provide requested information. We obtain meaningful consent where required and limit collection, use and disclosure to purposes that a reasonable person would consider appropriate in the circumstances.

Information entered into the contact form is retained until the enquiry has been resolved and the information is no longer required, unless a longer period is necessary for a contract, legal claim or statutory record-retention obligation. You may withdraw consent where applicable, subject to legal or contractual restrictions.

Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, we collect and use your request and the related personal information, such as your name, contact details and message, to respond and manage any follow-up. We disclose it only as described in this Privacy Policy or where required by law.

We use contact-request information to take steps at your request, perform or administer a contract, respond effectively to enquiries and protect our legitimate business operations, provided that the purposes are reasonable under PIPEDA. Where meaningful consent is required, you may withdraw it at any time subject to legal or contractual restrictions.

Information received through contact requests is retained until the request has been completed and the information is no longer required, unless a longer period is needed for a contract, legal claim or statutory record-retention obligation.

Communication via WhatsApp
For communication with customers and other third parties, we may use the WhatsApp instant-messaging service. For users outside the European Region, the service is provided by WhatsApp LLC in the United States. WhatsApp’s own terms and privacy policy apply to your use of the service.

WhatsApp communications are generally protected by end-to-end encryption in transit. WhatsApp nevertheless processes metadata generated during communications, such as sender and recipient information, device information and time of communication. Personal information may be processed in the United States and other countries and may be available to foreign authorities under applicable law. Further information is available in WhatsApp’s privacy policy: https://www.whatsapp.com/legal/privacy-policy.

Using WhatsApp is optional. We use it to communicate efficiently with customers, interested parties and business partners for reasonable purposes and with meaningful consent where required. You may choose another communication channel at any time.

WhatsApp communication content retained by us is deleted when the request has been completed and the information is no longer required, unless a longer period is needed for a contract, legal claim or statutory record-retention obligation. You may withdraw consent where applicable.

Where EU law applies to a transfer by Deutsche Saatveredelung AG, an applicable EU-U.S. Data Privacy Framework certification may be relevant. For personal information subject to PIPEDA, we remain accountable for cross-border processing and use contractual, organizational and technical safeguards appropriate to the sensitivity of the information.

We use WhatsApp in the “WhatsApp Business” variant.

Cross-border processing is governed by applicable service agreements and safeguards. European Commission standard contractual clauses may also apply where information is exported from the European Economic Area. These mechanisms do not limit our obligations under Canadian privacy law. Details are available at: https://www.whatsapp.com/legal/business-data-transfer-addendum?lang=en.

Matomo
This website uses the open-source web analysis service Matomo.

Matomo allows us to collect and analyse information about how visitors use our website, for example the time and region of page views, technical log information and interactions such as clicks or purchases. The information is used to understand website performance and improve our services.

Where Matomo processes information that identifies or can reasonably be associated with a visitor, we use it only for identified and reasonable purposes and obtain meaningful consent where required by PIPEDA or applicable provincial law. Consent can be withdrawn through the privacy settings. If Matomo is configured without cookies, with IP anonymization and without creating identifiable profiles, we limit the information to what is necessary for aggregate website measurement. We do not use Matomo to build profiles based on sensitive information or to target advertising to children, and we periodically review whether the configuration remains consistent with the information provided to visitors.

IP anonymization
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.

Analysis without cookies
We have configured Matomo in such a way that Matomo will not store cookies in your browser.

Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

Newsletter data
If you subscribe to the newsletter offered on this website, we require an e-mail address and information needed to verify your subscription and consent. Additional information is collected only voluntarily. Commercial electronic messages are sent in accordance with CASL. A request for express consent identifies the sender, the purpose of the messages and the available withdrawal method, and we retain records sufficient to demonstrate the consent. Each newsletter contains the required sender identification, valid contact information and a functioning unsubscribe mechanism. The newsletter service provider is described below.

Brevo
This website uses Brevo to send newsletters. The provider is Sendinblue, a simplified joint-stock company trading as Brevo, 9-17 rue Salneuve, 75017 Paris, France.

Brevo is used to organize and analyse newsletter distribution. Subscription information may be processed on servers located outside Canada, including in the European Union. We remain accountable for personal information transferred to Brevo and use contractual safeguards appropriate to the information.

Newsletter analysis by Brevo
If newsletter analytics are enabled and disclosed to you, Brevo may allow us to determine whether a message was opened and which links were clicked. This information helps us assess campaign performance.

Brevo may also measure whether a defined action occurred after a message was opened or a link was clicked, such as a purchase. Such conversion tracking is used only where it is consistent with the consent and information provided to you.

Brevo can segment newsletter recipients according to information supplied voluntarily or generated from permitted interactions. We use segmentation only for identified and reasonable purposes and do not use sensitive information for marketing profiles without express consent.

You may withdraw your consent and unsubscribe at any time using the link in each newsletter or the option on the website. We will process a valid unsubscribe request without delay and no later than 10 business days, as required by CASL.

For detailed information about Brevo, please visit: https://www.brevo.com/products/marketing-platform/email-marketing/.

Consent and legal requirements
Newsletter subscriptions and related marketing are based on valid express or implied consent under CASL and meaningful consent under applicable privacy law. We maintain records needed to demonstrate consent. You may withdraw consent at any time by unsubscribing, without affecting handling that occurred before withdrawal.

Storage period
Information provided for newsletter distribution is retained until you unsubscribe or the newsletter service is discontinued, unless a longer period is required for another lawful purpose. Information held for unrelated purposes is not affected.

After you unsubscribe, we or the newsletter provider may retain your e-mail address on a suppression list so that future commercial electronic messages are not sent. The suppression information is used only for compliance and is retained for as long as reasonably necessary to respect your request. You may contact us if you believe continued retention is no longer appropriate.

For more information, please consult Brevo’s privacy and data protection information at: https://www.brevo.com/legal/privacypolicy/ and https://www.brevo.com/legal/termsofuse/.

Service provider arrangements
We have entered into a written service provider agreement with Brevo. The agreement requires Brevo to handle personal information only for the agreed purposes, follow documented instructions, apply appropriate safeguards and provide a level of protection comparable to that required under applicable Canadian privacy law.

YouTube with privacy-enhanced mode
This website integrates videos from YouTube. For users in Canada, YouTube and related Google services are generally provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

When you visit a page on which YouTube is integrated and activate the video, a connection to YouTube’s servers is established. YouTube receives information about the page visited. If you are signed in to your YouTube account, YouTube may associate your activity with your profile. You can reduce this association by signing out before viewing the video.

We use YouTube’s privacy-enhanced mode where available. According to YouTube, videos played in this mode are not used to personalize browsing on YouTube and advertisements are not personalized. Cookies may not be set before playback, but local-storage elements or other technologies may be used and may contain identifiers. Details are available at: https://support.google.com/youtube/answer/171780.

After activating a YouTube video, further data processing operations may be triggered over which we have no influence.

YouTube is used to present online content in an accessible and engaging way. Because activation may involve identifiers, device access or transfers outside Canada, the YouTube connection and related non-essential technologies are blocked until meaningful consent has been provided where required. The consent interface identifies the service and the principal consequences of activation. Consent may be withdrawn at any time through the privacy settings, although information already processed by Google is governed by Google’s own privacy practices.

For more information about Google’s handling of personal information, see: https://policies.google.com/privacy?hl=en-CA.

Google LLC participates in the EU-U.S. Data Privacy Framework for eligible transfers subject to EU law. For personal information subject to PIPEDA, we remain accountable for cross-border processing and use contractual, organizational and technical safeguards appropriate to the sensitivity of the information.

This website integrates videos from YouTube. For users in Canada, YouTube and related Google services are generally provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

When you visit a page on which YouTube is integrated and activate the video, a connection to YouTube’s servers is established. YouTube receives information about the page visited. If you are signed in to your YouTube account, YouTube may associate your activity with your profile. You can reduce this association by signing out before viewing the video.

We use YouTube’s privacy-enhanced mode where available. According to YouTube, videos played in this mode are not used to personalize browsing on YouTube and advertisements are not personalized. Cookies may not be set before playback, but local-storage elements or other technologies may be used and may contain identifiers. Details are available at: https://support.google.com/youtube/answer/171780.

After activating a YouTube video, further data processing operations may be triggered over which we have no influence.

YouTube is used to present online content in an accessible and engaging way. Because activation may involve identifiers, device access or transfers outside Canada, the YouTube connection and related non-essential technologies are blocked until meaningful consent has been provided where required. The consent interface identifies the service and the principal consequences of activation. Consent may be withdrawn at any time through the privacy settings, although information already processed by Google is governed by Google’s own privacy practices.

For more information about Google’s handling of personal information, see: https://policies.google.com/privacy?hl=en-CA.

Google LLC participates in the EU-U.S. Data Privacy Framework for eligible transfers subject to EU law. For personal information subject to PIPEDA, we remain accountable for cross-border processing and use contractual, organizational and technical safeguards appropriate to the sensitivity of the information.

OpenStreetMap
We are using the mapping service provided by OpenStreetMap (OSM).

We integrate OpenStreetMap on our own (tile) server. When calling up the map material, there is consequently no connection to the servers of third parties.

We use OpenStreetMap to present locations and help visitors find the places identified on our website. This is a reasonable business purpose under PIPEDA. If the implementation stores information on your device or otherwise collects personal information beyond what is necessary to display the map, meaningful consent is obtained where required.

Processing of customer and contract information
We collect, use and disclose customer and contract information to establish, administer and modify contractual relationships, provide requested services, process orders and handle billing. We limit collection to information that is necessary for these purposes and handle it in accordance with PIPEDA and applicable provincial privacy law.

Customer information is deleted, destroyed or anonymized after the order or business relationship has ended and applicable legal, accounting and limitation periods have expired.

Disclosure when concluding online-store, retail and shipment contracts
When you order goods, we disclose the personal information necessary for delivery to the selected carrier and the information necessary for payment to the payment service provider. These disclosures are made to fulfil the requested transaction and for purposes a reasonable person would consider appropriate. Providers receive only the categories of information needed for their function and are required to apply appropriate confidentiality and security measures. If we ask for consent to provide your e-mail address to a carrier for optional shipment notifications, you may withdraw that consent at any time. Transactional communications and commercial electronic messages are handled in accordance with CASL.

Data processing
We use online conference tools to communicate with customers and other business contacts. If you communicate with us by video or audio conference, the tool provider and we may collect and use information such as your e-mail address or telephone number, meeting duration, participation times, number of participants and other communication metadata.

The provider also processes technical information needed to operate the conference, including IP address, device and operating-system information, client version, camera and audio-device details, and connection type.

Content exchanged, uploaded or otherwise made available through the tool may be stored on the provider’s servers. This may include recordings, chat messages, voicemail, photographs, videos, files, whiteboards and other information shared during the conference.

We do not have full control over processing performed independently by the conference-tool provider. Further information is available in the provider’s privacy policy listed below.

Purposes and consent
Conference tools are used to communicate with prospective or existing customers, administer contracts and provide requested services. These are identified and reasonable purposes under PIPEDA. We obtain meaningful consent where required, and we will not record a conference without providing appropriate notice and obtaining any consent required by law. Meeting organizers should avoid sharing unnecessary or sensitive information, and participants may disable their camera or microphone where the meeting format permits. Recordings, transcripts and chat exports are retained only for an identified purpose and are protected according to their sensitivity. Consent may be withdrawn subject to legal or contractual restrictions.

Duration of storage
Information collected directly by us through conference tools is deleted when it is no longer required for the identified purpose, subject to legal, contractual and record-retention obligations. Cookies or local data stored on your device remain until deleted by you or expire.

We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.

Conference tools used
We employ the following conference tools:

Microsoft Teams
We use Microsoft Teams. The provider is the Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.

Microsoft may process information in Canada, the United States and other jurisdictions. Where EU law applies, an EU-U.S. Data Privacy Framework certification or European Commission standard contractual clauses may be relevant. For personal information subject to PIPEDA, we remain accountable and use contractual, organizational and technical safeguards appropriate to the sensitivity of the information.

Service provider arrangements
We have entered into a written service provider agreement for Microsoft Teams. The agreement requires the provider to handle personal information only for the agreed purposes, follow applicable instructions, apply appropriate safeguards and provide a level of protection comparable to that required under applicable Canadian privacy law.

This Privacy Policy applies to the following social media presence

Processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, X and others may analyse user behaviour when you visit their websites or a website with integrated social-media content, such as buttons, embedded posts or advertisements.

If you are signed in to a social-media account and visit one of our social-media pages, the platform operator may associate the visit with your account. Personal information may also be collected when you are not signed in or do not have an account, for example through cookies, device identifiers or IP addresses.

Platform operators may use the information they collect to create profiles about preferences and interests and to display interest-based advertising on and outside their services. Advertising may be shown across devices associated with an account or identifier.

We cannot fully track or control the processing performed independently by social-media platforms. Additional activities may be described in each platform’s terms and privacy policy.

Purposes and consent
We maintain social-media profiles to communicate with customers, provide information and maintain an online presence. We use personal information obtained through those profiles only for identified and reasonable purposes under PIPEDA and obtain meaningful consent where required. Platform operators determine their own purposes and must identify the consent or other authority on which they rely.

Responsibility and exercise of rights
When you visit one of our social-media pages, we are responsible for personal information under our control, while the platform operator is responsible for its own collection, use and disclosure. Certain analytics or page-insight arrangements may allocate responsibilities between us and the platform. You may contact either us or the platform regarding the information each organization controls.

Because we do not control all platform processing, our ability to respond may be limited to information available to us and the settings provided by the platform.

Retention period
Personal information collected directly by us through social media is retained only for as long as necessary for the identified purpose and applicable legal or business requirements. If you withdraw consent where applicable, we will stop the related activity subject to legal or contractual restrictions. Platform cookies and information stored by platform operators are governed by their own retention policies.

We do not control how long platform operators retain information for their own purposes. Please consult the relevant platform privacy policy for details.

Your privacy rights
Subject to applicable law, you may request access to personal information under our control, challenge its accuracy, withdraw consent where applicable and challenge our compliance. For information controlled by a social-media platform, you should also use the platform’s privacy settings and contact channels. You may complain to the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator.

Facebook
We have a Facebook profile. For users in Canada, Facebook is generally provided by Meta Platforms, Inc., United States (referred to as “Meta”). Meta may transfer information to the United States and other countries.

Where Meta’s Page Controller Addendum or a similar page-insights arrangement applies, it describes how responsibilities are allocated for certain analytics. The arrangement does not limit your rights under applicable Canadian privacy law. It is available at: https://www.facebook.com/legal/terms/page_controller_addendum.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Information may be processed outside Canada. We remain accountable for personal information transferred for processing and use contractual and other safeguards appropriate to the information. Where EU law applies to transfers by Deutsche Saatveredelung AG, European Commission standard contractual clauses may also apply. Details are available at: https://www.facebook.com/legal/EU_data_transfer_addendum.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

Meta participates in the EU-U.S. Data Privacy Framework for eligible transfers subject to EU law. For personal information subject to PIPEDA, Canadian accountability, transparency and safeguarding requirements continue to apply.

X (formerly Twitter)
We use the X short-message service. For users in Canada, the provider is X Corp., 1355 Market Street, Suite 900, San Francisco, California 94103, USA.

You can customize your X (formerly Twitter) privacy settings in your user account. Click on the following link and log in: https://x.com/settings/account/personalization.

Information may be processed in the United States and other jurisdictions. We remain accountable for personal information transferred for processing and use contractual and other safeguards appropriate to the information. Where EU law applies, X’s transfer terms may additionally apply. Details are available at: https://gdpr.x.com/en/controller-to-controller-transfers.html.

For details, see the X (formerly Twitter) Privacy Policy: https://twitter.com/en/privacy.

Instagram
We have an Instagram profile. For users in Canada, Instagram is generally provided by Meta Platforms, Inc., United States.

Information may be processed outside Canada. We remain accountable for personal information transferred for processing and use contractual and other safeguards appropriate to the information. Where EU law applies to transfers by Deutsche Saatveredelung AG, European Commission standard contractual clauses may also apply. Details are available at: https://www.facebook.com/legal/EU_data_transfer_addendum.

For details on how they handle your personal information, see the Instagram Privacy Policy: https://privacycenter.instagram.com/policy/.

Meta participates in the EU-U.S. Data Privacy Framework for eligible transfers subject to EU law. For personal information subject to PIPEDA, Canadian accountability, transparency and safeguarding requirements continue to apply.

LinkedIn
We have a LinkedIn profile. For users residing outside the European Union, European Economic Area and Switzerland, LinkedIn services are generally provided by LinkedIn Corporation, United States. LinkedIn may use cookies and similar technologies for advertising and analytics.

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Information may be processed in the United States and other jurisdictions. We remain accountable for personal information transferred for processing and use contractual and other safeguards appropriate to the information. Where EU law applies, LinkedIn’s data-processing and transfer terms may additionally apply. Details are available at: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

LinkedIn participates in the EU-U.S. Data Privacy Framework for eligible transfers subject to EU law. For personal information subject to PIPEDA, Canadian accountability, transparency and safeguarding requirements continue to apply.