It is also designed to help individuals understand how their private information is managed at Maxwell Paper Canada, Inc. (“Maxwell”).
Maxwell Paper Canada is committed to protecting and respecting the personal information of its customers, employees, business partners, and all other entities it interacts with in accordance with PIPEDA. This policy will provide guidelines to ensure that Maxwell Paper Canada remains compliant with PIPEDA requirements.
Breach of security safeguards – The loss of, unauthorized access to, or unauthorized disclosure of personal information resulting from a breach of an organization’s security safeguards, or from a failure to establish those safeguards.
Personal information – Information about an identifiable individual.
Security safeguards – Security safeguards include the following:
Physical measures, for example, locking filing cabinets and restricted access to offices;
Organizational measures, for example, security clearances and limiting access on a “need-to-know” basis; and
Technological measures, for example, the use of passwords and encryption.
Significant harm – Includes bodily harm, humiliation, damage to reputation or relationships, loss of employment, business or professional opportunities, financial loss, identity theft, negative effects on the credit record, and damage to or loss of property
All definitions sourced from the PIPEDA website reference above.
Limiting Use, Disclosure and Retention
Accuracy of Information
Access to Information
Maxwell is responsible for maintaining and protecting the information under its control. Accountability for this function within our organization is held by:
Senior Manager, IT & Security at Maxwell Paper Canada, Inc.
Maxwell will identify the purposes for which information is collected at or before the time the information is collected. Generally, Maxwell collects information for the following purposes:
In the day-to-day business transactions;
To manage and develop Maxwell’s business and operations, including personnel and employment matters; and
To meet legal and regulatory requirements.
However, there may be other circumstances that require such information to be collected and used. Maxwell collects the following information from individuals during the course of normal commercial activities. The information obtained includes name, business title, rank, function and general contact information, levels of interest for our services and topics, and transaction activity with Maxwell. This information is used primarily to determine an individual’s entitlement to Maxwell’s services. In addition, this information may be used to:
Inform individuals about Maxwell’s products and services that we believe may be of interest to them.
Better understand an individual’s interests in our products and services.
Develop, enhance or improve products and services.
Maxwell routinely collects anonymous, non-personal information through our Web servers. This is information that is not associated with or traced back to a specific individual. Gathered electronically, this information includes the type of Web browser used, the level of encryption a browser supports and the Internet Protocol address. This information may be used for research and analytical purposes, to examine how the Web site is being used and to determine how it can be improved.
Maxwell is recording and monitoring all calls for training and quality assurance purposes.
If the caller objects to the recording, Maxwell will provide the caller with an alternate method.
Session cookie – Stored temporarily in your computer’s memory. A session cookie is destroyed as soon as you close your browser.
Persistent cookie – A more permanent line of text that gets saved to your hard drive.
We use session cookies on all Maxwell Web sites to allow you to gain access to the site. Persistent cookies are used to store your encrypted user ID and password, so that you won’t have to type it in each time that you access our site. A persistent cookie is only set if you click on “Remember my sign-in information.”
Maxwell will not require you to consent to the collection, use or disclosure of information beyond that required to provide our products or services to you.
After having provided consent, an individual has the right to withdraw consent at any time by providing 30 days written notice to firstname.lastname@example.org. If your request requires that we delete your registration information, we will no longer be able to provide you with the services or products for which you have subscribed. Cancellation will be subject to the terms and conditions of the subscription or services provided, as applicable.
In limited circumstances, Maxwell may use or disclose information without the knowledge or consent of the individual, for example, for purposes of debt collection, breaches of agreements, as required by governmental bodies acting with authority, or as authorized or required by applicable legislation.
LIMITING USE, DISCLOSURE AND RETENTION
Maxwell does not use information for purposes other than those for which it was collected, except with an individual’s consent or as required by law. Once information is no longer required to fulfill the identified purposes or other legal requirements, it will be destroyed, deleted or made anonymous.
Maxwell sometimes uses the services of external firms to assist us in communicating with individuals (e.g., surveys and mail distribution) or as a means of providing more effective and efficient services to these individuals (e.g., technology support). Our external suppliers are contractually obligated to keep the information confidential, to use the information only for the purpose requested and to destroy the information when it is no longer required.
Customer information is shared with external service providers only to the extent required for the provision of such services. Furthermore, Maxwell does not sell information to a third-party organization. Information is retained only as long as necessary for the fulfillment of the purposes stated in this policy.
ACCURACY OF INFORMATION
Information is kept as accurate, complete and up to date as necessary for the purposes for which it is to be used. Individuals are encouraged to provide updates to their information as changes occur, to enable us to continue to provide services to them.
The information of customers can be reviewed and modified either directly on-line or by contacting our Web site administrator.
ACCESS TO INFORMATION
Individuals may request a copy of their information held at Maxwell by submitting a written request to the Senior Manager, IT & Security at the address below in the Challenging Compliance. Acceptable proof of identification is required before such information is given out. If you feel the information we have about you is inaccurate, you may request that it be reviewed and, if inaccurate, changed, by contacting the Privacy and Security Senior Manager.
An individual can challenge compliance with the above policy by providing written details of the challenge to the Senior Manager, IT & Security via:
Mail at: Maxwell Paper Canada – Privacy Attention: Senior Manager IT and Security PO Box 22039 Belleville Ontario K8N 5V7