PRIVACY POLICY

Personal Information Protection Policy

Impact Tourism , is the responsible entity and has created the following Privacy Policy to describe how Impact Tourism uses information it collects. This Privacy Policy applies to the ImpactTourism.ca website. It explains how information is collected, used, and disclosed by Impact Tourism with respect to your access and use of the website https://ImpactTourism.ca

By using the ImpactTourism.ca website you consent to the data practices described in this statement.

We recommend that you read this Privacy Policy in full to ensure you are fully informed. If you have any questions about this Privacy Policy or Impact Tourism’s data collection, use, and disclosure practices, please contact using our online contact form.

  1. DEFINITIONS

“Editor” means the individual accepting the terms of this Agreement or the entity such individual represents, as applicable.

“Editor Data” means data and other information made available to Impact Tourism through the use of the Impact Tourism Services under this Agreement.

“End User” means an end user of ImpactTourism.ca site

“End User Data” means all personal information of an end user including name, emails, phone numbers and other personal data related to the use of Impact Tourism Services (device data, timestamps, location, etc.).

“Impact Tourism Properties” means the ImpactTourism.ca.

“Impact Tourism Services” means the services provided by Impact Tourism to End User and Editor under this Agreement through ImpactTourism.ca website, including all programs, features, functions, content and report formats, and subsequent updates or upgrades of any of the foregoing made generally available by Impact Tourism.

  1. DATA WE COLLECT

Data provided by Editor

  1. Account Registration. When we register you for an Account, we might ask for your contact information, including items such as name, company name, address, email address, and telephone number.
  2. Communications. If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

Data provided by End Users

  1. Communications. If the End User contacts us directly, we may receive additional information about you such as name, email address, the contents of the message and/or attachments he/she may send us, and any other information he/she may choose to provide.

The personal information that the End User is asked to provide to Impact Tourism, and the reasons why he/she is asked to provide it, will be made clear at the point we ask him/her to provide such personal information.

Data we collect when Editors or the End Users use of Impact Tourism Services

  1. Cookies. We only use essential cookies that help us provide you with the service.
        1. First-party cookies. The data we collect includes internet protocol (IP) addresses, browser type, web pages, operating system, date/time stamp. To collect this information, a cookie is set on your computer or device when you visit Impact Tourism Properties. Cookies contain a small amount of information that allows our web servers to recognize you. We store information that we collect through cookies. We might also use the services provided by Impact Tourism (ImpactTourism.ca) to comply with the legal obligations brought by GDPR such as managing your consents, requests and company data (including this privacy policy). Impact Tourism sets up a cookie / cookies on your computer or device when you visit Impact Tourism Property. The data ImpactTourism.ca collects include: internet protocol (IP) addresses, browser type, web pages, operating system, date/time stamp.
  1. HOW WE USE THE DATA

We use the data we collect in various ways presented below grouped by the legal basis for processing:

We need the data to perform the contract with you

  1. Provide, operate and maintain Impact Tourism Services
  2. Provide you with customer support and reply to your requests made through the contact form

The processing is our legitimate interest and it is not overridden by your rights

  1. Find and prevent fraud
  2. Understand how Editors and End Users use Impact Tourism Services
  3. Develop new content, features, and functionality
  4. For compliance purposes, including enforcing our Terms of Service or other legal rights or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

We need to comply with a legal obligation

  1. Collect and manage your consents
  2. Record your requests and the communication between you and Impact Tourism regarding your data

4. THIRD PARTY PROCESSORS

We are committed to reducing at the minimum the Third-Party Processors that we use to lower the risks of your data being exposed. We also assess and review each one of them in order to make sure they have similar and compliant privacy policies. A complete list of data processors can be found under the Third – Party Processors section.

  1. HOW WE SHARE YOUR DATA

As a rule, we do not share your data with any third-party. However, we may share your data in the following cases:

  1. Business Transfers. Information may be disclosed and otherwise transferred to any potential acquirer, successor, or assignee as part of any proposed merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
  2. As Required By Law and Similar Disclosures. We may also share information to (i) satisfy any applicable law, regulation, legal process, or governmental request; (ii) enforce this Privacy Policy and our Terms of Service, including investigation of potential violations hereof; (iii) detect, prevent, or otherwise address fraud, security, or technical issues; (iv) respond to your requests; or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
  3. With Your Consent. We Impact Tourism ask for consent to collect, use or disclose client personal information, except in specific circumstances where collection, use or disclosure without consent is authorized or required by law.Impact Tourism may assume your consent in cases where you volunteer information for an obvious purpose. Impact Tourism assume your consent to continue to use and, where applicable, disclose personal information that we have already collected, for the purpose for which the information was collected. Impact Tourism ask for your express consent for some purposes and may not be able to provide certain services if you are unwilling to provide consent to the collection, use or disclosure of certain personal information. Where express consent is needed, Impact Tourism will normally ask clients to provide their consent orally (in person, by telephone), or in writing (by signing a consent form).In cases that do not involve sensitive personal information, we may rely on “opt-out” consent. For example, Impact Tourism may disclose your contact information to other organizations that Impact Tourism believe may be of interest to you, unless you request that we do not disclose your information. You can do this by checking the appropriate box on our application form or by telephoning our volunteers at +1-587-516-1155.A client may withdraw consent to the use and disclosure of personal information at any time, unless the personal information is necessary for Impact Tourism to fulfil our legal obligations. Impact Tourism will respect your decision, but Impact Tourism may not be able to provide you with certain products and services if Impact Tourism do not have the necessary personal information. Impact Tourism may collect, use or disclose client personal information without consent only as authorized by law. For example, Impact Tourism may not request consent when the collection, use or disclosure is to determine suitability for an honour or award, or in an emergency that threatens life, health or safety.
  1. SECURITY

Impact Tourism takes reasonable precautions such as policy-based access control to protect Data in our possession from loss, misuse, and unauthorized access. Impact Tourism follows generally accepted industry standards to protect the Data, both during transmission and once received by Impact Tourism. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

  1. DATA RETENTION

We make every reasonable effort to ensure that personal information is accurate and complete. We rely on individuals to notify us if there is a change to their personal information that may affect their relationship with our organization. If you are aware of an error in our information about you, please let us know and we will correct it on request wherever possible. In some cases we may ask for a written request for correction.

We protect personal information in a manner appropriate for the sensitivity of the information. We make every reasonable effort to prevent any loss, misuse, disclosure or modification of personal information, as well as any unauthorized access to personal information.

We use appropriate security measures when destroying personal information, including shredding paper records and permanently deleting electronic records.

We retain personal information only as long as is reasonable to fulfil the purposes for which the information was collected or for legal or business purposes.

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

  1. CHILDREN UNDER 16

Our service is not directed to children under sixteen and does not knowingly collect personally identifiable information from children under the age of sixteen. If you are under the age of sixteen, you must ask your parent or guardian for permission to use this website. If we learn that we have collected personal information of a child under sixteen, we will take the appropriate steps to delete such information from our files as soon as possible. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you can alert by using our online contact form.

  1. ACCOUNT & DATA DELETION

As an End User, you cannot create an account with ImpactTourism.ca In case you contacted us through the contact form and would like to have your data deleted, please contact us at privacy@ImpactTourism.ca.

If you are a registered Editor, you can request data deletion by emailing us at privacy@ImpactTourism.ca.

  1. ACCESS TO YOUR DATA

Individuals have a right to access their own personal information in a record that is in the custody or under the control of Impact Tourism, subject to some exceptions. For example, organizations are required under the Alberta Personal Information Protection Act to refuse to provide access to information that would reveal personal information about another individual.

If we refuse a request in whole or in part, we will provide the reasons for the refusal. In some cases where exceptions to access apply, we may withhold that information and provide you with the remainder of the record.

You may make a request for access to your personal information by writing to Executive Director of Impact Tourism, designated position of title to ensure compliance with PIPA. You must provide sufficient information in your request to allow us to identify the information you are seeking.

You may also request information about our use of your personal information and any disclosure of that information to persons outside our organization. In addition, you may request a correction of an error or omission in your personal information.

We will respond to your request within 90 calendar days, unless an extension is granted. We may charge a reasonable fee to provide information, but not to make a correction. We do not charge fees when the request is for personal employee information. We will advise you of any fees that may apply before beginning to process your request.

If you are a registered Editor or an End User that contacted us, you may request certain information we have about you by emailing us at privacy@ImpactTourism.ca

To protect your privacy and security, we also take reasonable steps to verify your identity before updating or removing your information. The information you provide us may be archived or stored periodically by us according to backup processes conducted in the ordinary course of business for disaster recovery purposes.

  1. INTERNATIONAL DATA TRANSFERS

As a Canadian volunteer operated enterprise serving users across the world and delivering Impact Tourism Services through the use of Third-Party processors, we may transfer personal information to countries other than the country in which the data was originally collected. When we transfer your personal information to other countries, we will protect that information as follows:

  1. Data is kept in Canada. Whenever is possible/feasible, we select data processors or specific options inside the data processors’ services in order to keep data inside Canada.
  2. Transfer data to countries with similar data privacy rules. We only select data processors that resides or store data in one of the countries from EU clear listed as it may be updated from time to time. In case of US data processors, we verified their Privacy Shield certification before engaging them.

A full list of data processors we use, a link to their privacy policy and, where known, the country where they store the data is provided under Third-Party Processors section.

  1. YOUR DATA PROTECTION RIGHTS

Please be advised that in case you allow Impact Tourism to collect and process certain personal data from you, you have the following rights:

  1. Right of Access. You have the right to obtain from us confirmation as to whether or not personal data concerning you are processed, and, where that is the case, you have the right to request and get access to that personal data.
  2. Right to Rectification. You have the right to obtain from us the rectification of inaccurate personal data and you have the right to provide additional personal data to complete any incomplete personal data.
  3. Right to Erasure (“Right to be Forgotten”). In certain cases, you have the right to obtain from us the erasure of your personal data.
  4. Right to Restriction of Processing. You have the right to obtain from us restriction of processing, applicable for a certain period and/or for certain situations.
  5. Right to Data Portability. You have the right to receive from us in a structured format your personal data and you have the right to (let) transmit such personal data to another controller.
  6. Right to Object. In certain cases, you have the right to object to processing of your personal data, including with regards to profiling. You have the right to object at further processing of your personal data in so far as such data have been collected for direct marketing purposes.
  7. Right to be Not Subject to Automated Individual Decision-Making. You have the right to not be subject to a decision based solely on automated processing.
  8. VIII.Right to Filing Complaints. You have the right to file complaints with the applicable data protection authority on our processing of your personal data.
  9. Right to Compensation of Damages. In case we breach applicable legislation on processing of your personal data, you have the right to claim damages from us for any damages such breach may cause with you.

For further information see https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/In case you like to get in contact with us in relation to any of the above mentioned rights or any other personal data issues, please use the data privacy tool in the bottom left corner or email us at privacy@ImpactTourism.ca

  1. CHANGES TO THIS STATEMENT

Impact Tourism will occasionally update this Privacy Policy to reflect company and customer feedback. Impact Tourism encourages you to periodically review it to be informed of how Impact Tourism is protecting your information. For any questions please contact us at privacy@ImpactTourism.ca

  1. CONTACT US

If you have any questions regarding these Privacy Policy, please contact us by email at privacy@ImpactTourism.ca

© 2018-2019 Impact Tourism. All rights reserved.

Last Updated 1st of May, 2019

YOUR DATA PROTECTION RIGHTS

Please be advised that in case you allow Impact Tourism to collect and process certain personal data from you, you have the following rights:

  1. Right of Access. You have the right to obtain from us confirmation as to whether or not personal data concerning you are processed, and, where that is the case, you have the right to request and get access to that personal data.
  2. Right to Rectification. You have the right to obtain from us the rectification of inaccurate personal data and you have the right to provide additional personal data to complete any incomplete personal data.
  3. Right to Erasure (“Right to be Forgotten”). In certain cases, you have the right to obtain from us the erasure of your personal data.
  4. Right to Restriction of Processing. You have the right to obtain from us restriction of processing, applicable for a certain period and/or for certain situations.
  5. Right to Data Portability. You have the right to receive from us in a structured format your personal data and you have the right to (let) transmit such personal data to another controller.
  6. Right to Object. In certain cases, you have the right to object to processing of your personal data, including with regards to profiling. You have the right to object at further processing of your personal data in so far as such data have been collected for direct marketing purposes.
  7. Right to be Not Subject to Automated Individual Decision-Making. You have the right to not be subject to a decision based solely on automated processing.
  8. VIII.Right to Filing Complaints. You have the right to file complaints with the applicable data protection authority on our processing of your personal data.
  9. Right to Compensation of Damages. In case we breach applicable legislation on processing of your personal data, you have the right to claim damages from us for any damages such breach may cause with you.

For further information see https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/ In case you like to get in contact with us in relation to any of the above-mentioned rights or any other personal data issues, please use the data privacy tool in the bottom left corner or email us at privacy@ImpactTourism.ca