Privacy policy.

1. Scope of the policy

This policy applies to any person ("you") who:

• visits our website;
• contacts us through a form (e.g. information request, getting in touch);
• submits an application (unsolicited or in response to a posting);
• subscribes to our communications (e.g. newsletter, events, content).

This policy does not apply to third-party sites accessible through links on our site. We invite you to review their own policies.

2. Definition of personal information

Personal information is any information that concerns a natural person and makes it possible to identify them directly or indirectly.

3. Personal information we collect

We collect only the personal information that is necessary, depending on the nature of your interaction with us.

3.1 Information provided directly

Depending on the situation, you may provide us with:

• first and last name;
• email address;
• phone number;
• organization name (if applicable);
• any information provided in a message or request;
• résumé, diplomas, experience and recruitment-related information (if you apply).

3.2 Information collected automatically

During your browsing, certain technical information may be collected, in particular:

• IP address;
• browser and device type;
• pages viewed and time spent viewing;
• site traffic data.

This information may be collected through cookies or equivalent technologies (see section 9).

4. Purposes of collection

We use personal information in order to:

• respond to your information or contact requests;
• provide you with the information or documents requested;
• process an application, schedule an interview and manage recruitment;
• improve the browsing experience on our site;
• ensure the security of the site and prevent abusive uses;
• comply with our legal and regulatory obligations.

5. Legal bases and consent

We collect, use or disclose your personal information:

• with your consent (express or implied depending on the context);
• or where the law permits or requires it.

You may withdraw your consent at any time, subject to certain legal or contractual obligations. (See section 10.)

6. Disclosure of personal information

We do not sell or rent your personal information.

Your personal information may be disclosed only:

• to authorized members of our staff (on a need-to-know basis);
• to service providers (hosting, management tools, cloud platforms), only where necessary and with adequate protective measures;
• to the competent authorities when required by law.

We require our providers to protect the confidentiality of personal information and to use it only for the agreed purposes.

7. Retention and destruction

We retain your personal information only for as long as necessary for the purposes described in this policy, or as required by applicable legal requirements.

Upon expiry of the applicable timeframes, personal information is:

• securely destroyed; or
• anonymized where required.

8. Hosting and transfers outside Québec

In certain cases, our technological tools and providers may host personal information outside Québec.

When this occurs, we assess the privacy-related factors and put in place the measures necessary to ensure adequate protection, in accordance with applicable requirements.

9. Browsing cookies

Our site may use cookies in order to:

• ensure the proper functioning of the site;
• analyze traffic and improve the user experience;
• maintain security and prevent abusive uses.

You can configure your browser to refuse or delete cookies. However, certain features may be affected.

10. Your rights

In accordance with applicable laws, you may request:

• access to your personal information;
• the rectification of inaccurate or incomplete information;
• the withdrawal of your consent (in certain circumstances);
• information on how your data is used or disclosed.

We will respond to any request within a maximum of 30 days, except where otherwise provided by law.

11. Personal Information Protection Officer

Optisigma has designated a Personal Information Protection Officer, in accordance with Law 25.

To exercise your rights or ask a question:

12. Security measures

We apply administrative, technical and organizational protective measures proportionate to the sensitivity of the personal information, including in particular:

• access control based on the principle of least privilege;
• strong authentication;
• logging and monitoring;
• encryption and protection of cloud environments;
• staff awareness.

These measures are part of our information security management system.

13. Management of privacy incidents

Any incident involving unauthorized access, loss or disclosure of personal information is managed according to an internal procedure. When required, we proceed with:

• the documentation of the incident;
• the appropriate corrective measures;
• the notifications required by Law 25.

14. Applicant consent

By submitting their application, the applicant acknowledges having reviewed this privacy policy and expressly consents to the collection, use, disclosure, retention and destruction of their personal information by the organization, in accordance with the Act respecting the protection of personal information in the private sector (Law 25).

The personal information collected is used solely for the purposes of evaluating the application, managing the recruitment process and, where applicable, establishing an employment file. The applicant acknowledges that this information may be disclosed to authorized persons within the organization or to its partners involved in the recruitment process, to the extent necessary for these purposes.

The applicant understands that they may, subject to applicable legal obligations, request access to their personal information, its rectification or the withdrawal of their consent by contacting the organization's Personal Information Protection Officer.

15. Updates to the policy

This policy may be amended at any time in order to reflect:

• the evolution of laws;
• changes in practices;
• technological adjustments.

The version in force is the one published on our website, as of the date indicated at the top of the page.