Pri­va­cy Pol­i­cy

Pro­tect­ing Your Pri­va­cy

This pri­va­cy state­ment applies to DDB Cana­da, a divi­sion of Omni­com Cana­da Corp. and its affil­i­ates, includ­ing Trib­al DDB, DDB PR, DDB Toron­to, DDB Edmon­ton, DDB Van­cou­ver, DDB Mon­tre­al, DDB Group, Tra­cy­Locke Cana­da, Track DDB, Ander­son DDB Health & Lifestyle (“DDB”, “we”, “us”, “our”) and explains how we col­lect, use and dis­close per­son­al infor­ma­tion in Cana­da. Gen­er­al­ly speak­ing, “per­son­al infor­ma­tion” is infor­ma­tion about an iden­ti­fi­able indi­vid­ual, sub­ject to more par­tic­u­lar def­i­n­i­tions or inter­pre­ta­tions under applic­a­ble law. This pri­va­cy state­ment does not apply to per­son­al infor­ma­tion about employ­ees, con­trac­tors or oth­er tem­po­rary or per­ma­nent staff, con­sul­tants, vol­un­teers or oth­er indi­vid­u­als assigned to DDB (col­lec­tive­ly, “Mem­bers of DDB”), or to any infor­ma­tion which is not per­son­al infor­ma­tion as defined in or inter­pret­ed under applic­a­ble law.

DDB offers and pro­vides mar­ket­ing, adver­tis­ing and com­mu­ni­ca­tions ser­vices and infor­ma­tion to a wide range of clients. As part of the ser­vices we pro­vide, we are some­times asked or do some­times come into pos­ses­sion of per­son­al infor­ma­tion about our clients and their cus­tomers. This pol­i­cy sets forth our gen­er­al guide­lines in deal­ing with such “per­son­al infor­ma­tion”.

Com­pli­ance with the Law

DDB will com­ply with all applic­a­ble laws in the regions with­in Cana­da in which it oper­ates.

The Infor­ma­tion We Col­lect and How We Use It

Infor­ma­tion in rela­tion to clients, their cus­tomers and oth­ers, gen­er­at­ed in the course of pro­vid­ing our ser­vices

The kinds of per­son­al infor­ma­tion we may col­lect and use in rela­tion to clients and their cus­tomers will depend upon the infor­ma­tion and ser­vices request­ed. How­ev­er, sub­ject to applic­a­ble law, it may include:

• name, address, e‑mail address, con­tact details, finan­cial, cred­it, billing and account infor­ma­tion, and oth­er inci­den­tal infor­ma­tion relat­ing to the ser­vices we pro­vide;
• infor­ma­tion mate­r­i­al to the ser­vices we pro­vide for you and your busi­ness oper­a­tions;
• infor­ma­tion about you con­tained in com­mu­ni­ca­tions with­in DDB and between us and you, whether online or offline; and
• infor­ma­tion we may col­lect with your con­sent or as per­mit­ted or required by law.

We use this infor­ma­tion:

• to offer and pro­vide ser­vices to you;
• to deal with third par­ties on your behalf or in fur­ther­ance of pro­vid­ing ser­vices to you;
• to com­mu­ni­cate with you regard­ing the ser­vices you request and to respond to your requests and inquiries; and
• as per­mit­ted or required by law or for pur­pos­es for which you oth­er­wise pro­vide your con­sent.

Infor­ma­tion in rela­tion to poten­tial Mem­bers of DDB

If you apply for a posi­tion at DDB, we will col­lect the per­son­al infor­ma­tion con­tained in, and gen­er­at­ed in rela­tion to, your appli­ca­tion pack­age, in order to eval­u­ate your appli­ca­tion and assess whether to offer you a posi­tion at DDB. For can­di­dates who are not offered or do not accept a posi­tion, we nor­mal­ly retain this infor­ma­tion for a rea­son­able peri­od in the event that an appro­pri­ate posi­tion becomes avail­able or that you re-apply to DDB. If you accept a posi­tion at DDB, the infor­ma­tion will be retained in accor­dance with our pri­va­cy pro­ce­dures applic­a­ble to the per­son­al infor­ma­tion of Mem­bers of DDB.

Infor­ma­tion about guests of and vis­i­tors to DDB

DDB col­lects infor­ma­tion about its guests and vis­i­tors. Specif­i­cal­ly, vis­i­tors to DDB’ offices may be asked to pro­vide their name, tele­phone num­ber and orga­ni­za­tion name. This infor­ma­tion is retained by DDB as long as nec­es­sary for secu­ri­ty or emer­gency pre­pared­ness pur­pos­es. DDB may also install video cam­eras in pub­­lic-access areas on its premis­es and will post signs noti­fy­ing indi­vid­u­als of the exis­tence and pur­pose of any such cam­eras. We use the infor­ma­tion we col­lect about guests of and vis­i­tors to DDB to enable us to act respon­si­bly in the event of a health or oth­er cri­sis or emer­gency and to enhance work­place secu­ri­ty.

Infor­ma­tion about our agents, ven­dors, sup­pli­ers and for­eign asso­ciates

DDB may col­lect infor­ma­tion about third-par­­ty agents, ven­dors, sup­pli­ers and for­eign asso­ciates (“Ser­vice Providers”) who pro­vide goods, ser­vices and infor­ma­tion to DDB. This infor­ma­tion would include name and con­tact infor­ma­tion as well as any infor­ma­tion (such as bank­ing infor­ma­tion) that we need to pay you for your ser­vices and oth­er rel­e­vant infor­ma­tion, such as expe­ri­ence and qual­i­fi­ca­tions of Ser­vice Providers.

We use this infor­ma­tion in order to assess suit­abil­i­ty for par­tic­u­lar assign­ments; to con­tact you, where nec­es­sary, in rela­tion to the goods, ser­vices and infor­ma­tion you are pro­vid­ing to DDB; and to pay you for your ser­vices.

How We Col­lect Infor­ma­tion About You

We typ­i­cal­ly col­lect per­son­al infor­ma­tion direct­ly from you or through our inter­ac­tion with you, in par­tic­u­lar where such infor­ma­tion is delib­er­ate­ly dis­closed to us for the pur­pos­es of pro­vid­ing par­tic­u­lar ser­vices. You may some­times pro­vide us with the per­son­al infor­ma­tion you col­lect from your cus­tomers to aid DDB in pro­vid­ing its ser­vices to you.

In rela­tion to poten­tial Mem­bers of DDB, in addi­tion to per­son­al infor­ma­tion that you pro­vide, we may col­lect per­son­al infor­ma­tion from:

• the third par­ties you pro­vide as ref­er­ences in sup­port of your appli­ca­tion; and
• indi­vid­u­als involved in the eval­u­a­tion and review process.

How We Dis­close and Share Your Infor­ma­tion

We may use and dis­close the per­son­al infor­ma­tion we col­lect about clients or oth­er indi­vid­u­als we deal with to third par­ties, includ­ing:

• where you have instruct­ed us to dis­close your per­son­al infor­ma­tion to a third par­ty for a des­ig­nat­ed pur­pose;
• where the use of the per­son­al infor­ma­tion is nec­es­sary in the course of pro­vid­ing ser­vices to you;
• where we rea­son­ably believe a third par­ty request­ing your infor­ma­tion is your agent; and
• where you con­sent or as per­mit­ted or required by law.

We may dis­close per­son­al infor­ma­tion about DDB Alum­ni in order to pro­vide an employ­ment ref­er­ence to a third par­ty where you have request­ed, or con­sent­ed to, the pro­vi­sion of the ref­er­ence.

Ser­vice Providers. DDB may also trans­fer your per­son­al infor­ma­tion to our Ser­vice Providers hired to admin­is­ter or pro­vide prod­ucts, ser­vices or infor­ma­tion on our behalf. We use rea­son­able mea­sures to require the orga­ni­za­tions with whom we share your per­son­al infor­ma­tion for these pur­pos­es to use your per­son­al infor­ma­tion only to per­form the ser­vices we have hired them to pro­vide. Note that some of the Ser­vice Providers that process or han­dle per­son­al infor­ma­tion on our behalf are locat­ed out­side of Cana­da. As a result, your per­son­al infor­ma­tion may be trans­ferred, stored and/or processed out­side Cana­da in con­nec­tion with the pur­pos­es described in this pri­va­cy state­ment Con­trac­tu­al or oth­er mea­sures we may use to pro­tect your per­son­al infor­ma­tion are sub­ject to the legal require­ments of the for­eign juris­dic­tions where your per­son­al infor­ma­tion may be trans­ferred, stored or processed, for exam­ple law­ful require­ments to dis­close infor­ma­tion to gov­ern­ment author­i­ties in those coun­tries.

Con­fi­den­tial­i­ty and Non-Dis­­­clo­­sure

DDB will hold per­son­al infor­ma­tion in strict con­fi­dence and except where required by applic­a­ble law will not dis­close the per­son­al infor­ma­tion to any per­son, oth­er than those Mem­bers of DDB who require access to the per­son­al infor­ma­tion in order for DDB to per­form the ser­vices for which they have been retained. All Mem­bers of DDB, upon their employ­ment with DDB sign a con­fi­den­tial­i­ty agree­ment pro­tect­ing the con­fi­den­tial infor­ma­tion of DDB and its clients.

Your Con­sent

We col­lect, use and dis­close your per­son­al infor­ma­tion with your con­sent or as per­mit­ted or required by law. Your con­sent may be express or implied, depend­ing on the cir­cum­stances and the sen­si­tiv­i­ty of the per­son­al infor­ma­tion in ques­tion. For exam­ple, in most cas­es, a client’s con­sent to the col­lec­tion, use and dis­clo­sure of per­son­al infor­ma­tion by DDB may be implied by the fact that the client has engaged DDB to pro­vide ser­vices, where the col­lec­tion, use and dis­clo­sure of per­son­al infor­ma­tion relates to the per­for­mance of those ser­vices by DDB. If you pro­vide per­son­al infor­ma­tion about anoth­er per­son to us, includ­ing your cus­tomers, we assume you have the con­sent of that indi­vid­ual to enable us to col­lect, use or dis­close their infor­ma­tion as described in this pol­i­cy and as instruct­ed by you. If you choose to pro­vide per­son­al infor­ma­tion to DDB, we assume that you con­sent to the col­lec­tion, use and dis­clo­sure of your per­son­al infor­ma­tion as out­lined in this pri­va­cy state­ment.

Secu­ri­ty

DDB has imple­ment­ed rea­son­able phys­i­cal, orga­ni­za­tion­al and tech­no­log­i­cal secu­ri­ty mea­sures to safe­guard the per­son­al infor­ma­tion in our cus­tody or con­trol. These include safe­guards to pro­tect per­son­al infor­ma­tion against loss or theft, as well as unau­tho­rized access, dis­clo­sure, copy­ing, use, or mod­i­fi­ca­tion. Autho­rized Mem­bers of DDB have access to your per­son­al infor­ma­tion. With regard to clients and infor­ma­tion about our client’s cus­tomers, only those Mem­bers of DDB autho­rized to have access, as deter­mined is nec­es­sary to pro­vide you with ser­vices shall be pro­vid­ed with access to such data. DDB has imple­ment­ed poli­cies and pro­ce­dures relat­ed to lim­it­ing access to pro­grams and data to rel­e­vant per­sons, and ensur­ing our oper­a­tions main­tain secu­ri­ty, envi­ron­men­tal pro­tec­tion and risk mit­i­ga­tion ini­tia­tives.

Access, Cor­rec­tion, Inquiries and Com­plaints

If you wish to request access to, or cor­rec­tion of, your per­son­al infor­ma­tion in cus­tody or con­trol of DDB, please make your request in writ­ing to our Pri­va­cy Offi­cer at the address above. We may need to ver­i­fy your iden­ti­ty before search­ing for or pro­vid­ing you with per­son­al infor­ma­tion. In some cir­cum­stances, we may not pro­vide access to your per­son­al infor­ma­tion, for exam­ple if it con­tains the per­son­al infor­ma­tion of oth­er per­sons, if it con­sti­tutes con­fi­den­tial com­mer­cial infor­ma­tion, if it is pro­tect­ed by solic­i­­tor-client priv­i­lege, or if it is oth­er­wise not prop­er­ly the sub­ject of an access request. Where the request for access is made by a cus­tomer of a client, DDB will report such request to the client pri­or to pro­vid­ing such infor­ma­tion to the cus­tomer, pro­vid­ed we con­tin­ue to be in com­pli­ance with applic­a­ble pri­va­cy leg­is­la­tion.

Since we pre­dom­i­nant­ly use per­son­al infor­ma­tion to pro­vide ser­vices, it is impor­tant that the infor­ma­tion be accu­rate and up-to-date. Please inform us as soon as pos­si­ble of any changes to your per­son­al infor­ma­tion.

If you have any ques­tions, requests or com­plaints about our per­son­al infor­ma­tion prac­tices, please con­tact our Pri­va­cy Offi­cer at Suite 1101, 33 Bloor Street W., Toron­to, On, or via tele­phone at 416–972‑7570.

Ces­sa­tion of Use

Upon receipt of a with­draw­al of con­sent, DDB will cease using such per­son­al infor­ma­tion.