Effective Date: December 2, 2019
What information is collected by us?
Information Voluntarily Provided
We may collect or record personal information which you voluntarily provide through completing forms on our Website, through questions or information you send to us via the Website, or through other means of communication between you and us. The categories of personal information you provide may include:
- First and last name;
- Job title and company name;
- Email address;
- Phone number;
- Mailing address;
- Password to register with us;
- Your personal and professional interests;
- Any other identifier that permits us to make contact with you;
In addition to the foregoing categories of information, we may collect the following additional categories of personal information voluntarily provided by you on behalf of a subcontractor business who desires to work with us on projects:
- Name of business;
- Description of business activities;
- Location(s) of business activities;
- Years in business;
- Number of employees;
- Financial information including volume of business and average value of subcontracts;
- Union affiliation;
- Bonding information;
We also collect personal information from our employees and from job applicants in connection with administration of our human resources programs and functions, including, with respect to: job applications and hiring programs, compensation and benefit programs, performance appraisals, training, access to our facilities and computer networks, employee profiles, employee directories, human resource recordkeeping, and other employment related purposes. It is our policy to keep all past and present employee information private from disclosure to third parties. There are certain business related exceptions and they are: to comply with requests from governmental or regulatory authorities; inquiries from third parties with a signed authorization from the employee to release the information, except in situations where limited verbal verifications are acceptable; and third parties with which we have contractual agreements to assist in administration of company sponsored benefits. Prospective employers, government agencies, financial institutions, and residential property managers routinely contact us requesting information on a former or current employee’s work history and salary. All such requests of this type shall be referred to and completed on a confidential basis by the human resources department or payroll department.
Information Collected Automatically from Website Visits
We collect, store and use information about your visits to the Website and about your computer, tablet, mobile or other device through which you access the Website. This includes the following information:
- technical information, including the Internet protocol (IP) address, browser type, internet service provider, device identifier, your login information, time zone setting, browser plug-in types and versions, operating system and platform, and geographical location;
- information about your visits and use of the Website, including the full Uniform Resource Locators (URL), clickstream to, through and from our Website, pages you viewed and searched for, page response times, length of visits to certain pages, referral source/exit pages, page interaction information (such as scrolling, clicks and mouse-overs), and Website navigation and search terms used.
How do we use the information we collect?
We will use the information you voluntarily provide to us for legitimate business reasons, including:
- To respond to your questions and comments.
- To provide you with information and materials that you request from us.
- To update you on services and products and benefits we offer.
- To send you information regarding changes to our policies, other terms and conditions and other information.
- With respect to employment information submitted via our “careers” section, to assess your credentials for prospective employment opportunities.
- With respect to subcontractor information submitted via our “subcontractor” form, to review and consider your subcontractor organization for potential future subcontracting opportunities.
We will use the information we collect automatically from Website visits for legitimate business reasons where doing to will not unduly affect your rights, including:
- To provide an make improvements to the Website, Website maintenance, support, reporting and hosting of data, and troubleshooting;
- To ensure that the Website is secure;
- To analyze how users interact with the Website;
- To address any issues you may experience with the Website;
- To enhance your experience on our Website;
We may use any or all of the information above to administer and manage our business in general, and in the context of a business reorganization, acquisition, and/or merger.
We may also use any or all of the information above to comply with regulations and/or the law.
Legal Basis for Collecting and Processing your Information
The legal grounds for us processing your personal information for the purposes set out above will typically be because:
- you provided your consent;
- it is necessary for our contractual relationship;
- the processing is necessary for us to comply with our legal or regulatory obligations; and/or
- the processing is in our legitimate interest (for example, to develop our business and subcontractor network, to improve our offerings, to protect the security and integrity of our systems, and to provide you with customer service, etc.).
Sometimes you provide us with sensitive information about you (e.g., employment information) and your business (e.g., financial information and union affiliations). Your provision of this sensitive information is entirely voluntary and is only collected and used for the explicit purposes as described (e.g., to consider your job application for employment opportunities, to consider your subcontracting company for future projects).
If you do not wish to provide us with your personal data and processing such data is necessary for the performance of a contract with you and to fulfil our contractual obligations to you, we may not be able to perform our obligations under the contract between us. Where you provide consent, you can withdraw your consent at any time and free of charge, but without affecting the lawfulness of processing based on consent before its withdrawal. You can update your details or change your privacy preferences by contacting us through your usual Vestacon contact or as provided in “Contact Us” section below.
Updating Your Information and Opting Out
To review, correct, update, delete, object or otherwise limit our use of your personal information that has been provided to us, or request portability and/or details of your personal information that is held by us, please contact your usual Vestacon contact or contact us using the contact information listed below in the “Contact Us” section and clearly describe your request.
You may unsubscribe from marketing communications at any time by clicking the “Unsubscribe” button available at the bottom of any electronic communication we may send to you. You may also unsubscribe from any medium of communication by contacting us using the information set out in the “Contact Us” section below.
Disclosures of Your Personal Data to Third Parties
We may share your personal information with our group companies, affiliates, subsidiaries or contractors as necessary to carry out the purposes for which the information was supplied or collected (i.e., to provide the services and products you have requested from us). Personal information will also be shared with our third party service providers and business partners who assist with the running of the Website and our services and products including hosting providers, email service providers and payment processing partners. Our third party service providers and business partners are subject to security and confidentiality obligations and are only permitted to process your personal information for specified purposes and in accordance with our instructions.
In addition, we may disclose information about you when we believe that such use or disclosure is reasonably necessary to: comply with any legal or regulatory obligation; establish, exercise or defend the rights of Vestacon, our staff, customers or others; and protect our rights, property or safety, or the rights, property or safety of our users, or others.
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. We use appropriate measures to safeguard personally identifiable information, which measures are appropriate to the type of information maintained, and follow applicable laws regarding the safeguarding of any such information under our control. No method of transmission over the Internet, or method of electronic storage, can be 100% secure. Therefore, we cannot guarantee the absolute security of your information. The internet by its nature is a public forum, and we encourage you to use caution when disclosing information online. Often, you are in the best situation to protect yourself online.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
If you require any further information about how long we retain your personal data, please contact us by using the information set out in the “Contact Us” section below.
We respond to all requests that we receive from individuals who wish to exercise their data protection rights in accordance with applicable data protection laws. You can contact us using the information set out in the “Contact Us” section below.
Rights that you may have depending on the country in which you live, include:
- Accessing, correcting, updating, or requesting deletion of your information.
- Objecting to processing of your information, asking us to restrict processing of your information, or requesting the portability of your information.
- Opting out from receiving marketing communications that we send you at any time. You may update your email preferences by changing the settings in your account.
- Withdrawing your consent at any time if we have collected and processed your information with your consent. Withdrawing your consent will not affect the lawfulness of any processing that we conducted prior to your withdrawal, nor will it affect processing of your information conducted in reliance on lawful processing grounds other than consent.
- Complaining to a data protection authority about our collection and use of your information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the European Union are available at the following link: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. Also, please note that we may refuse a request for blocking and/or deletion where the processing is necessary to comply with a legal obligation or necessary for the establishment, exercise or defence of legal claims.
We may collect data in connection with your use of our Website using small files commonly known as “cookies”. A cookie is a small amount of data which often includes a unique identifier that is sent to your computer or mobile phone (your “device”) from the Website and is stored on your device’s browser or hard drive. We may also collect data that your browser sends to us, such as your IP address, browser type, location, language, access time and referring website addresses. Such data may be used to analyze trends, to administer the Website, to track your movements around the Website and to gather demographic data about our visitor base as a whole. The data gathered by these cookies is in the form of aggregated anonymous data.
We currently use the following cookies:
CSRF stands for Cross Site Request Forgery. This cookie is a security enhancement for Expression Engine (confirms that form submissions are genuine).
Keeps track of the last 5 pages visited on the Website and allows to redirect after logging in, form submissions, etc.
IP Addresses and Aggregate Information
An Internet Protocol (“IP”) address is associated with your computer’s connection to the internet. We may use your IP address to help diagnose problems with our server, to administer the Website and to maintain contact with you as you navigate through the Website. Your computer’s IP address also may be used to provide you with information based upon your navigation through the Website. Aggregate information is used to measure the visitors’ interest in, and use of, various areas of the Website and the various programs that we administer. We will rely upon aggregate information, which is information that does not identify you, such as statistical and navigational information. With this aggregate information, we may undertake statistical and other summary analyses of the visitors’ behaviours and characteristics. Although we may share this aggregate information with third parties, none of this information will allow anyone to identify you, or to determine anything else personal about you.
Links to Third Party Websites and Third Party Applications
This Website may contain links to third party websites. These third party websites are operated by companies that are outside of our control, and your activities at those third party websites will be governed by the policies and practices of those third parties. Vestacon does not in any way endorse or make any representations about such third-party websites and applications. As such, Vestacon is not responsible for the privacy practices or content of such third-party websites and applications that are subject to their own privacy policies. If you choose to access such links, we encourage you to review all third-party site privacy policies before submitting any of your data.
We occasionally use a variety of new technologies and social media options to communicate and interact with customers, potential customers, employees, potential employees, subcontractors and potential subcontractors. These sites and applications include popular social networking and media sites, open source software communities and more. To better engage the public in ongoing dialog, certain of our businesses use certain third-party platforms including, but not limited to, Facebook, Twitter, LinkedIn, and Instagram. Third-Party Websites and Applications are Web-based technologies that are not exclusively operated or controlled by us. When interacting on those websites, you may reveal certain personal information to us or to third parties. Other than when used by our employees for the purpose of responding to a specific message or request, we will not use, share, or retain your personal information.
We do not sell our services to children and the Website is not intended for or directed at children under the age of 18 years. As such, our Website is designed for adult user interaction. We do not intentionally collect personally identifiable information from children under the age of 18. If you believe that we may have collected personal information from someone under the age of 18 (or the applicable age of consent) without proper consent, please let us know using the methods described in this policy.
Revisions to the Policy
Vestacon Limited, 3 Bradwick Drive, Vaughan, Ontario, Canada, L4K 2T4