Data Protection

Law 25 · PIPEDA · GDPR · CCPA

Details of the legal obligations applicable to RĒSUNIX inc. regarding the protection of personal data.

Privacy Officer

Name: Stéphane Parent Title: Privacy Officer Company: RĒSUNIX inc. Email: privacy@resunix.ca Address: 2588 Patrick st., Terrebonne, QC, Canada, J6W 5R6

Quebec — Law 25

The Act to modernize legislative provisions respecting the protection of personal information (Law 25, S.Q. 2021, c. 25) is the primary law applicable to RĒSUNIX inc. As its registered office is in Quebec, the Civil Code of Quebec (C.C.Q.) constitutes the general legal reference framework.

Key obligations met

  • Designated officer: Stéphane Parent
  • Collection limited to declared purposes (art. 8)
  • Explicit consent required (art. 13-14)
  • Retention limited to 2 years (art. 23)
  • Secure destruction upon expiry (art. 23)
  • No transfer outside Quebec (art. 17)
  • Privacy incident procedure (art. 3.5)
  • Incident register maintained
  • Rights of access, rectification, deletion, portability (art. 27-28)
  • Response time: 30 calendar days (art. 30)

Recourse

Commission d'accès à l'information du Québec (CAI)
www.cai.gouv.qc.ca · 1-888-528-7741

Civil Code of Quebec — Privacy

Articles 35 to 41 of the Civil Code of Quebec (C.C.Q.) guarantee respect for the privacy of every person. RĒSUNIX inc. respects these fundamental provisions:

  • Art. 35 C.C.Q. — Every person has a right to the respect of their private life
  • Art. 36 C.C.Q. — Acts that may constitute an invasion of privacy — RĒSUNIX does not engage in them
  • Art. 37 C.C.Q. — File compiled on a person — access and rectification guaranteed
  • Art. 40 C.C.Q. — Accuracy of information — RĒSUNIX is committed to this

Canada — PIPEDA

The Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5) applies to RĒSUNIX inc.'s interprovincial and international commercial activities.

Key obligations met

  • 10 fair information principles (PIPEDA Schedule 1)
  • Accountability — designated officer
  • Identified, limited and explicit purposes
  • Valid consent obtained
  • Collection limited to what is necessary
  • Accuracy of information
  • Appropriate safeguards
  • Openness of practices
  • Individual access guaranteed

Recourse

Office of the Privacy Commissioner of Canada (OPC)
www.priv.gc.ca · 1-800-282-1376

European Union — GDPR

The General Data Protection Regulation (GDPR, EU Regulation 2016/679) applies when individuals located in the European Union submit information to RĒSUNIX inc.

Key obligations met

  • Legal basis for processing defined (GDPR art. 6)
  • Rights guaranteed: access, rectification, erasure, portability, objection (GDPR art. 15-21)
  • No transfer outside the EU without adequate safeguards
  • Response time: 30 calendar days
  • Incident notification: 72 hours (GDPR art. 33)

Exercise your rights (EU)

privacy@resunix.ca

United States — CCPA

The California Consumer Privacy Act (CCPA, Cal. Civ. Code § 1798.100 et seq.) applies to California residents who interact with RĒSUNIX inc.

Rights guaranteed to California residents

  • Right to know what information is collected
  • Right to request deletion
  • Right to opt out of sale — RĒSUNIX inc. does not sell any personal information
  • Right to non-discrimination

Exercise your rights (CCPA)

privacy@resunix.ca

Last updated: August 2026