Personal data protection policy

Personal data protection policy for users of www.cristalmusique.ca

Preamble

Cristal Musique is a company incorporated in 2022 whose mandate is to contribute to the well-being of people through, among other things, therapeutic musical instruments made of quartz crystal. (Sales, fabrication and therapeutic concerts)

As a company providing products and services, we collect and use information to fulfill our commitments. We attach great importance to privacy, and respect for confidentiality is a fundamental aspect of our dealings with our customers. We adhere to the highest ethical standards when handling all information, including personal information.

This personal data protection policy aims to detail in an understandable, simple and in-depth manner the processes carried out on your personal data as well as the rights you benefit from to manage your personal information and protect your privacy. By sending us personal information (via our website, by e-mail, in person or by telephone), you consent to it being processed in accordance with the terms set out in this Personal Data Protection Policy, and you grant Cristal Musique permission to process your personal information for the purposes mentioned below.

  1. Identity and contact details of the Data Controller

Cristal Musique, whose head office is based at 33 Erablière Ouest street in Saint-Hippolyte, Quebec, J8A 1A3, is the "processing manager" of your personal data collected on the site www.cristalmusique.ca and when using our services, in accordance with the regulations in force concerning personal data and the Law modernizing the legislative provisions regarding the protection of personal information in the private sector, also known as Law 25. In other words, Cristal Musique is the entity that decides how your personal information is processed or may be processed. The name of the person responsible for personal information within the company is Mylène Lacasse, contact at [email protected] or 450-438-5843.

  1. Personal information collected

When you browse our site or interact with us, we may collect various personal information about you.

We may collect and manage different types of personal information in the course of our business, including:

  • identity information, such as your first and last name;
  • contact information, such as your name, address, email address and telephone number;
  • billing and financial information, such as your billing address, bank account details or payment data;
  • information regarding the products and services we have provided to you;
  • information about website usage and other technical information, for example, details of your visits to our sites, your interaction with our advertising and online content, and information collected through cookies and others tracking technologies;
  • any other personal information that you provide to us.

Please note that if you provide us with personal information about other individuals, you must ensure that you have properly informed those individuals that you are transmitting their information to us and that you have obtained their consent for such transmission of information. Where applicable, you must have proof of such consent (date, time, means), in situations where such consent is necessary for the processing of personal information.

  1. Collection of personal information

We collect your personal information directly from you and during our interactions with you in connection with the services we provide to you.

  1. Use of your personal information

We use your personal information to provide and improve our services to you.

We may use your personal information in the various ways mentioned below, with your consent or, if necessary, on another legal basis in accordance with the General Data Protection Regulation (“GDPR”). In each case, we specify the reasons for which we use your personal information:

  • To provide our services to you and to carry out our business, to manage and carry out our services, including to carry out our obligations arising from any agreements entered into between you and us. Legal basis under the GDPR: conclusion and execution of a contract;
  • To respond to inquiries or other requests from people visiting our website. Legal basis under the GDPR: execution of a contract;
  • To make our websites easier to use and to ensure that content is relevant and presented in the most effective way for you and your device. Legal basis under GDPR: legitimate interests;
  • To prevent fraud and/or carry out other background checks which may be necessarily required at any time under applicable law or regulation and/or good practice (if false or inaccurate information is provided or if fraud is detected or suspected, the information may be transmitted to fraud prevention organizations and may be recorded by us or by these organizations). Legal basis under GDPR: legitimate interest (to cooperate with law enforcement authorities and regulators, to ensure an acceptable risk profile and help prevent crime and fraud). When processing personal information of specific characters, we may also rely on reasons of public importance (prevention or detection of crimes) or legal claims;
  • To assert our rights, to fulfill our legal or regulatory obligations regarding the provision of information and/or to protect the rights of third parties. Legal basis under the GDPR: compliance with a legal obligation;
  • To secure our compensation - to collect payments due and, if necessary, to enforce such collections by using debt collection agencies or taking other legal measures (including legal proceedings). Legal basis under the GDPR: execution of a contract;
  • To reorganize or change our business - if we undergo a reorganization (for example, by merger, consolidation or sale of part of our business), we may need to transfer some or all of the personal information to an applicable third party (or its advisors) as part of any due diligence process or transfer to this entity resulting from a reorganization or to this third party for the same purposes as those defined in this Personal Information Protection Policy or for the analysis of any proposal reorganization. Legal basis under GDPR: legitimate interests (to enable us to change our business).

  1. Period of retention of personal information

We will only keep your personal information for as long as necessary for the purposes set out in this Personal Information Protection Policy and to comply with our legal and regulatory obligations.

  1. Protection of personal information

We comply with widely accepted industry standards to safeguard the information entrusted to us, both during transmission and after we receive it. We implement appropriate physical, technical and administrative security measures to safeguard personal information against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, misuse or other form of processing. illegal personal information in our possession. We have taken steps to ensure that only staff members subject to an obligation of confidentiality who need access to your personal information or whose duties reasonably require this information have access to it.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee or ensure the security of any information you transmit or provide to us, and you do so at your own risk. We also cannot guarantee that this information will not be accessed, retrieved, disclosed, modified or destroyed as a result of a breach of our physical, technical or administrative safeguards. If you believe your personal information has been compromised, please contact us.

  1. The rights held by an individual with regard to their personal information

You have a number of rights regarding your personal information.

In certain situations and in accordance with applicable data protection laws, an individual has the following rights:

  • Access: the right to ask whether we are processing information and, if so, to access personal information. Subject to applicable laws and, where applicable, payment of a certain fee, the individual may obtain a copy of the personal information we hold and other information relating to them;
  • Accuracy: we are obliged to take reasonable steps to ensure that the personal information in our possession is accurate, complete, non-misleading and up-to-date;
  • Rectification: the right to request correction of any incomplete or inaccurate personal information we hold.

Additionally, in certain situations, you have the following rights:

  • Withdraw your consent to the disclosure or use of personal information collected at any time.

Additionally, under the GDPR, you may exercise the following additional rights:

  • Erasure: the right to ask us to erase, destroy or remove personal information in certain circumstances. There are certain exceptions where we may refuse a request for erasure or destruction, including where the personal information is necessary to comply with the law or a contract between the parties, or in connection with claims;
  • Restriction: the right to ask us to suspend the processing of certain personal information, in particular to establish its accuracy or the reason for its processing;
  • Transfer: the right to request the transfer of certain personal information to another party;
  • Object: the right to object to the processing of personal information on the basis of a legitimate interest (or that of a third party) or for certain direct marketing purposes. However, we may have the right to continue processing the information;
  • Automated decisions: the right to challenge any automated decision where such decision has a significant legal or similar impact, and the right to request that it be reviewed;
  • Consent: where we have obtained consent to the processing of personal information, the right to withdraw this consent in situations provided for by law.

Finally, it is also possible to file a complaint with a data protection supervisory authority, in particular in the country, province or state where you usually reside, where we are located or where an alleged violation of the data protection laws have been committed.

To exercise any of these rights, please contact us.

  1. Update of this Personal Data Protection Policy

We may change the content of our website without notice and therefore our Privacy Policy may be amended from time to time in the future. We therefore encourage you to review it each time you visit the Website to stay informed about how we treat personal information.

This policy was last updated in November 2023.