FR | EN
 

Governance policy - Law 25

Privacy Governance Rules

General
In the pursuit of its mission, Ovation must collect, use, retain and share personal information about its users. This personal information is confidential, and Ovation is responsible for maintaining its confidentiality and complying with its obligations under the Act. As such, Ovation takes all necessary security measures to ensure all personal information is protected.

Relevant sharing of personal information with our third-party partners (Venues)
At Ovation, our suppliers and authorized third-party partners are an integral part of our network and organizational structure. In this case, Ovation shares users personal information with its suppliers and authorized partners who need access to this information :
  • For data storage on CLOUD servers
  • For external processing purposes compliant with security and confidentiality obligations (e.g. payment processing)
  • For operational reasons with venues associated to transactions

Ovation will not sell or rent your personal information to any unauthorized third party.

Roles and responsibilities of staff and third-party partners (Venues)
Development and technical assistance teams

Development and technical support staff use personal information to :
  • Operate and continually improve our products and services
  • Provide rich, interactive and personalized experiences
  • Develop new products based on customer needs
  • Ensure service security and detect fraudulent activity
  • Detect and prevent fraud, ensure ticket validity

Marketing and customer service teams
Marketing and customer service personnel use personal information to :
  • Diagnose and resolve product and/or service issues
  • Provide support and assistance
  • Offer relevant and personalized products and services
  • Process transactions and/or resolve disputes
  • Analyze operations and improve decision-making processes
  • Comply with legal requirements regarding audience age
  • Study market trends and interests

Handling complaints
Any person who has reason to believe that his or her personal information has been handled inappropriately may file a complaint with the person responsible for protecting personal information. Complaints must be made in writing and sent to privacy@ovation.qc.ca.

The complaint will be analyzed and handled confidentially and within a reasonable time. The person responsible will send a written response to the plaintiff.

Training and awareness activities
Ovation offers training and awareness activities concerning secure data protection to its entire workforce. These activities focus on recognizing personal information, the shared responsibility in protecting personal information, identifying situations where personal information is required for operations, and applying best practices.

Adequate protection of personal information collected or used in surveys
Ovation is responsible for ensuring all personal information it collects and uses as part of a survey is handled ethically, securely and in compliance with regulations.

If Ovation needs to carry out a survey involving personal information, it must assess the following :
  • The actual need for the survey
  • The specific measures that will ensure all personal information collected or used during the survey is protected :
    • Have an agreement with the third-party entity conducting the survey, if applicable
    • Foresee the information to be sent to respondents
    • Provide mechanisms to ensure all personal information collected as part of the survey is destroyed or anonymized as soon as the survey's purposes have been achieved.
  • The ethical aspect of the survey, given its nature, the people involved, the sensitivity of the personal information collected and its use.

Retaining and destroying personal information
Ovation retains data collected according to its function, nature and usefulness for our products and services. During the retention period, Ovation takes all necessary steps to ensure the data containing personal information is secure and protected.

Personal information is stored at Drummondville and Longueuil in highly secured servers. Personal information may therefore be stored outside your country of residence, if an authorized entity to whom we disclose personal information is located outside the country.

Once the retention period has expired, personal information is irreversibly destroyed. Only statistics or reports containing non-identifiable and anonymized data may be kept for longer periods.

See privacy policy