Exergy’s Commitment to Privacy
2.2 Identifying Purposes
The purposes for which personal information is collected will be identified at or before the time the information is collected unless privacy legislation permits otherwise.
Individual’s consent will be obtained for the collection, use or disclosure of personal information, except where exemption is provided under the law. Certain privacy legislation differentiates between personal information related to the employment relationship and other personal information. The respective privacy legislation provides for personal employee information to be treated differently from other personal information in that it can be collected, used and disclosed in administering an employment relationship, or potential employment relationship, without the consent of the individual. Exergy will seek to obtain an individual’s consent to use and disclose personal information at the time it is collected. We may seek an individual’s express consent in writing or by e-mail, or consent may be implied when an individual provides us with personal information.
On giving reasonable written notice to Exergy, an individual may withdraw consent to the collection, use or disclosure of their personal information at any time. Exergy’s Privacy Officer will inform the individual of the likely consequences to the individual of withdrawing their consent.
2.4 Limiting Collection
The collection of personal information will be limited to that which is necessary for the purposes identified.
2.5 Limiting Use, Disclosure and Retention
Personal information will only be used or disclosed for the purposes for which it was collected, unless otherwise consented by the employee or when permitted or required by law. Personal information will be retained only as long as necessary to fulfill the purposes for which it was collected.
Exergy will maintain reasonable controls and practices to ensure that personal information is retained only as long as necessary and destroy the information once it is no longer relevant, required to be retained by law, or necessary for the purposes identified.
Personal information will be maintained as accurate, complete and up-to-date as necessary to fulfill the purposes for which it was collected. Exergy will not necessarily update personal information routinely, but rather will update it only when it is necessary to fulfill the purposes identified. It is the responsibility of the individual to make Exergy aware of any incorrect personal information or changes to it.
Security safeguards appropriate to the sensitivity level of the personal information shall be used
to protect the information from loss, theft, and unauthorized access, use, disclosure or modification.
Exergy will provide information to individuals concerning its policies and procedures relating to the management of personal information under our control.
2.9 Individual’s Access
Upon a written request addressed to Exergy’s Privacy Officer, an individual will be informed of the existence, use and disclosure of their personal information and may be provided access to that information as required and permitted by law. Upon submitting a request for access to personal information, the individual will be required to provide proof of identification in order to permit Exergy to authorize access to the personal information.
Exergy may refuse to provide access to personal information if disclosure of the information would reveal confidential commercial information, the information could reveal personal information about another individual, the information could reasonably be expected to threaten the life or security of another individual, or where the information is protected by legal privilege.
2.10 Challenging Compliance
Individuals are encouraged to first attempt to resolve a complaint following Exergy’s complaint procedures; however, individuals have the right to submit a written complaint to the Information and Privacy Commissioner specific to their province or territory.
3.0 Privacy Officer Contact Information
The role of Exergy’s Privacy Officer is to ensure compliance with privacy legislation, respond to requests for access and correction of personal information, and to work with the Information and Privacy Commissioner during the investigation of a privacy complaint against the organization.
Exergy’s Privacy Officer is:
President, Chief Executive Officer
#308, 1228 Kensington Road NW
Calgary, Alberta, Canada T2N 3P7
Telephone: +1 403 670 0060
Fax: +1 403 670 0064