Privacy and Information Security Policy - July 2024
1. Policy Objective
This policy demonstrates Destination Québec cité’s commitment to information security and the protection of personal and confidential information.
Destination Québec cité is both a regional tourist association and a department of the City of Québec, a public organization subject to the Act respecting access to documents held by public bodies and the protection of personal information (CQLR, Section A-2.1), and the Act to establish a legal framework for information technology (CQLR, Section C-1.1).
Regarding personal or private information as well as collection, use, disclosure, retention and access standards, Destination Québec cité adheres to the City of Québec Privacy and Information Security Policy.
2. Policy Guidelines
2.1 Protection of personal and confidential information
Destination Québec cité, which considers it paramount to protect privacy and the personal and confidential information that it collects and retains, is committed to compliance with the provisions, values, and fundamental principles established by applicable legislation. It ensures implementation of the measures necessary to guarantee transparency and respect for the confidentiality of the information provided to it when services are requested.
2.2 Information security
Destination Québec cité undertakes to implement a set of technological, organizational, human, legal, and ethical measures to ensure the security of information, notably:
- Information availability, where information is accessible in a timely manner, as required by authorized individuals
- Information integrity, where information is not destroyed or altered in any way without authorization, in accordance with Destination Québec cité’s retention schedule, and the medium bearing such information provides the desired stability and durability
- Information confidentiality, where disclosure is limited only to authorized individuals
- Identification and authentication to confirm, when required, the identity of an individual or the identification of a document or device
- Irrevocability to ensure that an action, exchange, or document is clearly and undeniably attributed to the entity that generated it
- Compliance with legal, regulatory, and business requirements to which Destination Québec cité is subject
3. Definitions
3.1 Personal information
Any information that involves an individual and can identify them, subject to any exceptions provided by applicable laws. Such information may be of a personal nature, such as the individual’s address, phone number, health status, lifestyle, or financial situation.
3.2 Confidential information
Any information that involves a building or corporate body and relates to information that its author or owner deems confidential due to its financial, commercial, or strategic nature, unless laws applicable to the public sector provide, by way of exception, that such information held by Destination Québec cité is public.
3.3 Information security
Protection resulting from all security measures that are implemented to ensure the confidentiality, integrity, and availability of the information that Destination Québec cité holds based on the sensitivity and value of such information, the risks to which it is exposed, and the obligations to which it is subject.
4. Consent and the Collection and Retention of Personal and Confidential Information
4.1 Consent and collection method
Destination Québec cité collects information in a fully transparent manner with the free and informed consent of users and only in cases where the information collected is required to provide a desired service. In accordance with applicable laws, when Destination Québec cité collects personal and confidential information, it clearly indicates the purposes for which the information is being collected and requests the user’s consent to use such information. Destination Québec cité must obtain consent again to use previously collected information for another purpose
None of Destination Québec cité’s services or activities may be intended for minors. For family activities, personal information is collected from parents or with the consent of the child’s parents or representative. Information is collected primarily through forms, Destination Québec cité’s website, telephone conversations, opinion surveys, and questionnaires.
4.2 Collected information
Depending on the service provided, Destination Québec cité may collect and retain any of the following information: last name, first name, mailing address, electronic address, telephone numbers, fax number, and date of birth. Information relating to cultural or recreational activities or family circumstances may also be collected and retained.
When you provide Destination Québec cité with personal information in order to use the services offered on this website, you consent to the collection, disclosure, and retention of that information by Destination Québec cité, its suppliers, service providers, and business partners. Destination Québec cité’s suppliers, service providers, and business partners agree to respect and comply with all applicable laws, regulations, and directives in effect regarding the collection, disclosure, use, retention, and processing of confidential information.
4.3 Collection of technical information during use of the website or online services
Destination Québec cité collects technical information such as IP addresses, pages visited, searches, dates and times of connection, the type of Web browser or computer system used, and names of website domains used to link up to the quebec-cite.com site.
The Destination Québec cité website uses cookies, which are small text files that are sent to your browser when you visit a website. Your browser then returns a cookie to the domain from which it was sent. Cookies send behavioural statistics about visitors to the Destination Québec cité website to help it personalize content and improve the website.
Please note that the configuration of the site issuing a cookie will determine the period during which the cookie will be saved on your computer. If the use of cookies concerns you, please consult your browser’s help section to find out how to deactivate them. Note that certain site functions may not be available without cookies.
4.4. Information about Google Analytics
Cookie data is sent to Google to produce reports, analyze site use, and improve visitors’ online experience. This site uses a number of Google Analytics functions through specific cookies that let Destination Québec cité match statistics for visits to this site with other data in its possession. Google Analytics use includes the following functions: remarketing, creation of reports on Display Network impressions, reports and statistics on demographic data and interests, and tracking using DoubleClick cookies. These functions authorize Google Analytics to gather data through Google advertising cookies and anonymous identifiers. You can deactivate these functions by visiting this site or by downloading this extension.
4.5. Information about social media and advertising network information
Destination Québec cité shares information on its site use with certain partners, social media companies, and advertising networks that can combine it with other information you have provided or they have collected during your use of their services to offer targeted ads based on your interests (remarketing) and specific information (e.g., gender, age group, general interests).
4.6. Purpose of collecting information
When Destination Québec cité collects and retains personal and confidential information, its objective is to offer users secure, personalized service in accordance with applicable laws and the City of Québec’s security rules. Destination Québec cité uses the personal, confidential, or technical information that it collects for the following purposes:
- Verify the identity of users
- Ensure that users and Destination Québec cité are protected against fraud
- Produce statistics
- Improve available services
- Target advertising based on your interests
- Promote and advertise the Québec City region all over the world and customize the website
- Conduct studies and research on the tourism industry and verify the effectiveness of marketing strategies
- Contact winners of contests and draws
- Send electronic newsletters, as well as guides and brochures by regular mail
- Announce events and send invitations
5. Information Security
Destination Québec cité uses information technology extensively to support its business processes in order to offer service delivery consistent with its service statement. All personal and confidential information collected is retained in a secure environment in accordance with the City of Québec’s policy. Destination Québec cité staff and agents are required to respect the confidentiality of information. Destination Québec cité implements appropriate, useful, and necessary security and access management measures based on the sensitivity of the information handled. Only individuals who require access to information to perform their duties can access this information. Destination Québec cité integrates technological innovations to ensure the confidentiality, integrity, and availability of transactions and information in its various modes of service delivery.
6. Responsibility of Users
Users are responsible for the information that they provide to Destination Québec cité and for maintaining the confidentiality of their identification and authentication information (e.g., user codes, access codes, passwords, access cards). Destination Québec cité cannot be held liable for unauthorized use caused by users.
Users must also ensure that the system or equipment they use to transmit or receive information from Destination Québec cité is sufficiently secure, and must exercise vigilance. Destination Québec cité may not be held liable for unauthorized access to information resulting from negligence or vulnerabilities present in the equipment or systems of users.
7. Incident Reports
Destination Québec cité undertakes to inform users of incidents that affect the protection of personal information.
8. Links with Other Sites
The Destination Québec cité website contains hyperlinks to other sites. Information exchanged on such sites is not protected by this privacy and security policy, but is subject to the policies of the external sites. Destination Québec cité is not responsible for the content on such sites and does not endorse them. Destination Québec cité may not be held liable for any damage of any kind whatsoever that results from the navigation or use of such sites.
9. Chatbot Terms of Use
Last updated: June 2024
The Destination Québec cité chatbot is available 24/7 to answer any questions visitors may have about their trip to Québec City.
The chatbot provides assistance in both French and English. By default, the chatbot greets users in French, but switches languages when a user asks a question in English, making it easy to obtain answers in either language over the course of the conversation.
Destination Québec cité is committed to protecting the privacy of personal information in accordance with the Act respecting access to documents held by public bodies and the protection of personal information and the Act respecting access to documents held by public bodies and the protection of personal information. While information shared with the chatbot remains confidential, users are advised not to disclose personal information.
Conversations with the chatbot are systematically recorded for analytical, quality, and training purposes. Destination Québec cité keeps the transcripts for a period of four hundred days. For general inquiries or if the chatbot is unable to answer a question, please contact us.
10. Cookies
Additional information
If you have questions, comments or complaints about compliance with this policy, please contact us.
Updated: 2024/07/02