Privacy policy

Personal information protection policy

(Last modified: October 23, 2023)

This personal information protection policy sets out how the Industrial Medicine Clinic, CMIL, collects, uses, communicates, stores and destroys your personal information. For ease of reading, we will use the expressions “we” or “the clinic” from time to time other in Politics.

We may provide you with additional information regarding the processing of your personal information, in certain cases, at the time of collecting your personal information. We may also obtain your specific consent in certain cases in relation to your application. the collection, use, disclosure and retention of your personal information.

The Policy applies to personal information and sensitive personal informationthat we collect, regardless of the manner, whether, for example, in person, by telephone or via our website.

Definition:

A personal information or RP hereinafter, is information which concerns a natural person and which makes it possible to identify it directly or indirectly. À example title, last name, first name, date of birth.

Sensitive Personal Information or Sensitive Personal Information hereinafter, is information which, when given, its nature or the context of its use, arouses a reasonably higher level of expectation than regarding privacy. À For example, a medical record, medical notes, medical test results, medication lists.

By agreeing to this Policy or providing us with personal information after having had the opportunity to do so. To consult the Policy or any other additional notice, you agree that your personal information will be processed in accordance with this policy. the Policy and the additional notice if applicable.

1. About us

Here is our full credentials:

Laurentides Industrial Medicine Clinic (CMIL)

352 boul. Curé-Labelle, suite 200

Fabreville, Laval (Quebec) H7P 2P1

Phone: 450-624-9990

For any questions regarding our Policy, the way in which we process your personal information or to exercise your rights regarding your personal information, you should contact: the person responsible for the protection of personal information, Ms. Danielle Michaud.

You can contact the person responsible for the protection of personal information by email:

cmil@cmideslaurentides.ca

or by post to the address mentioned above.

This Policy applies to: our employees, our professionals, our subcontractors, our suppliers, our consultants, our principals and or requesters of services.

2. Important definitions

In the Policy, we mean:

« Privacy Incident » (i) unauthorized access to your privacy policy by law personal information; (ii) the use of personal information not authorized by law; (iii) the unauthorized communication of personal information by law; or (iv) the loss of personal information or any other damage to your property. the protection of such information.

« Personal information »»any information which concerns a natural person and allows, directly or indirectly, to identify it.

3. How will we process your Personal Information

How do we collect personal information?

By telephone, by email, by fax, by questionnaire completed by the person or online.

What personal information do we collect?

RP : last name, first name, date of birth, telephone number, address, social insurance number (employees only).
Sensitive PR: medical file, CNESST file, disability management file, medical test results, legal file.

From whom do we collect your personal information?

To the service requester;

To the person who was the subject of a request for services;

With public or private organizations if necessary to complete a mandate, with the written authorization of the person concerned.

Why do we collect your personal information?

For identification;
To give a medical opinionTo issue a medical-administrative opinion;
To enable the administrative management of our mandates;For the management of our employees;
For accounting management;
For communication with users and constituents;For the management of administrative or clinical questionnaires.

What happens if you don't consent to your decision? collecting your personal information?

The RP required to be completed; Identification purposes are essential for the opening and handling of our medical evaluation mandates.
The RP and the Sensitive RPthat we may collect, upon request, for the purpose of validating and completing a medical opinion will be subject to ;a request for specific authorization from the person concerned.

Who will have access to your personal information?

Our employees and healthcare professionals.
The following service providers:CDL Laboratoires, Biron medical laboratory, Radiologix or other medical service referents (medical imaging, pharmacy or other stakeholders relevant to the provision of services).
Requesters for services according to the nature of the mandate and the laws in force.
These third parties also have Privacy Policies. that comply with applicable laws.

How will we share your personal information with third parties?

We keep personal information for the time necessary to do so. the achievement of the ends for which they were created. requested. The retention time therefore depends on the reason for the service in question.
The clinic destroys paper documents irreversibly and securely. Documents that must be kept according to the applicable rules or laws in force are saved on reliable servers, encoded and stored separately. restricted use.

What are the risks associated with processing your personal information?

We are aware of the importance of protecting sensitive information (RP and Sensitive RP) that is transmitted to us.

With this in mind, we strive to maintain high standards with regard to our products. the Protection of Personal Information all stages of our processes.

We raise awareness among our staff and professionals through the following activities:

-Training and upgrading regular update regarding the protection of RP and Sensitive RP.
-Referencing and supervision always available for the implementation of the protection of RP and Sensitive RP in the exercise of our activities.

However, no method of electronic storage or transmission can be guaranteed to be secure. infallible.

Where will we keep your personal information?

We have put in place physical, organizational, technical and IT protections to ensure the protection of personal information at all times. our offices located in Laval.

4.What technology products do we use?

We use Office 365 Business Premium software and a hosted cloud server. by Microsoft (One Drive). SharePoint and Teams are also used. Our employees are assigned a password and access to RP and Sensitive RP are supervised by management of privacy protection and including security parameters. set to day regularly.

Our emails containing PI and Sensitive PI are encrypted by Microsoft Azure. Office Protect has been implemented put in place to improve our cybersecurity.

Management of navigation cookies

Our website is equipped with connection cookies. A cookie (also called a “cookie”) is a piece of information that is transmitted by the server to the browser when you visit our website.

These cookies can be deactivated or reactivated by visitors by changing the preferences in your Internet browser settings or via the consent pop-up cookies on the website.

5.Safety measures and inherent risks

We follow safety standards. in our industry to protect the information we collect and receive. More specifically, we have appropriate physical, IT technical and administrative safeguards in place to protect your personal information against a confidentiality incident.

Despite these measures, taking into account the risks inherent in their use. However, we cannot ensure or guarantee the security of the use of computer systems. and confidentiality information that you transmit or provide to us, and you do so at your own discretion. your own risk. If you have reason to believe that personal information has been stolen, compromise, please contact us at coodata indicated in Article 1 of the Policy.

6. How and under what conditions will we communicate your personal information to you? for security purposes public or prosecution of offenses

6.1.In case of serious risk of death or serious injury

We may disclose personal information that we hold in order to protect a person or group of people when there is reasonable cause to believe that there is a serious risk of death or serious injury, linked in particular a disappearance or an act of violence, including a suicide attempt, threatens this person or group and the nature of the threat inspires a sense of urgency.

The information can then be communicated to the the person(s) exposed to this risk, their representative or their representative anyone who could help them. Only information necessary for the purposes pursued by the communication will be communicated.

6.2 Law enforcement

We may also communicate information to the Director of Criminal and Penal Prosecutions or to a person or a group responsible for to prevent, detect or repress crime or law offenses when the information is necessary for the purposes of prosecuting an offense under the law. a law applicable in Quebec.

Finally, we will be able to communicate information to you; a police force when it is necessary to planning or the execution of an intervention adapted to the characteristics of a person or the situation, in one or other of the following cases: 1° the police force intervenes, at our request, to provide us with help or support in connection with the services we provide to you. a person; 2° we act in consultation or in partnership with the police force within the framework of mixed practices of psychosocial and police interventions.

7. Is your personal information transferred to outside Quebec?

Your personal information may be transferred to another company. outside of Quebec in the event that the service requester is outside the province of Quebec.

8.What are your rights? regarding your personal information?

You have the right to access your personal information and to have it corrected if it is inaccurate. To do this, you must make a written request, with confirmation of identity. (RP) to have access to the personal information we hold and request that rectifications be made, if necessary, subject to applicable laws.RP

The complaint must include the following:

Name and surname of the complainant;
Home address;
Telephone number;
Email address if available;
Reasons for the complaint, description of the damage if applicable and expected corrective action.

The complaint must be sent to: the person responsible for the protection of personal information:

Danielle Michaud

Laurentides Industrial Medicine Clinic (CMIL)

352 boul. Curé-Labelle, suite 200

Fabreville, Laval (Quebec) H7P 2P1

Phone: 450-624-9990

cmil@cmideslaurentides.ca

The complaint will be treated confidentially. An accused The receipt will be sent to you. and a reasoned and written response will be produced within 30 days of the request. fewer exceptional reasons which will be communicated to you.

*Legal framework relating to your sector of activity:

Rèpractice areas, College of Physicians of Québec

Law on industrial accidents and occupational illnesses

Act respecting the protection of personal information in the private sector

Act respecting the protection of personal information in the public sector

Act modernizing legislative provisions relating to the protection of personal information (Law 25)