No user is required to divulge any personal information whatsoever to gain access to the BPR website (hereafter called “the site”). BPR does offer, however, through the site, certain specific services and advantages which require a user to provide personal information if he or she wishes to take advantage of them. This is the case, in particular, when a user wishes to register for a distribution list in order to receive information about BPR, or when a user wishes to apply for a position.
If a user chooses to transmit to BPR personal information by completing a form designed for this purpose and submitting it via the site, BPR will use the information solely to respond to the user’s request and to deal with it. Electronic messages are treated with the same confidentiality measures as are letters by mail.
Because personal information created, received or retained by BPR is subject to theLoi sur l'accès aux documents des organismes publics et sur la protection des renseignements personnels (L.R.Q., c. A-2.1) – the law pertaining to access to documents of public organizations and to protection of personal information – any natural person has right of access and, in some cases, to correction with regard to information that concerns them and is held by BPR. This information is retained for the period prescribed by the BPR records retention schedule, in application of the Loi sur les archives (L.R.Q., c. A-21.1).
BPR does not sell, rent, exchange, lend or give out any personal information it receives via electronic means, unless the sender of such information has given consent or BPR is not constrained by law or by the decision of an appropriate court.
When a user accesses the site, an exchange of data occurs automatically between the user’s computer and BPR’s electronic information system. These data are:
- the Internet domain name, Internet protocol address, type of browser and operating system of the computer through which the user accesses the site;
- the date and time of access;
- the pages browsed;
- the address of the referring website, if appropriate.
This exchange of data is indispensable in order for the BPR server to transmit files compatible with the kind of computer equipment employed by the user. These data are retained in a report file and permit compilation of statistics and technical information having to do with use of the site. They do not, however, permit personal identification of the user. BPR does not attempt to establish the personal identity of a user, unless it detects an action not congruent with the conditions of use of the site.
Generally speaking, the site does not use “cookie files” (or “cookies”). The user may configure his or her Internet browser in a manner that will prevent installation of such files (cookies) on the hard drive of his or her computer. If the user does this, he or she will not, however, be able to access certain services or documents offered on the site.
The site does not have any zone termed “secure” which would allow the establishment of a separate and confidential dialogue between the user’s computer and BPR’s electronic information system. Generally speaking, no transmission of data through an Internet network can be entirely protected from misappropriation or malicious use. Consequently, BPR does not guarantee that the information sent to it via email or the Internet for its use will reach it without having been falsified, consulted or altered, or without having its integrity or authenticity having been otherwise called into question, or even that the information will reach its destination. The commitment of BPR with regard to protection of personal information is related only to the treatment of information that is actually in its possession.