Privacy & Cookies Policies

As a company based in the province of Quebec (Canada) that collects personal information through technological means in the course of its activities, Vista Properties Limited (the "Company," "we," or "our"), registered in the Quebec business registry under no. 1142863340, must publish a privacy policy and notices about any changes to this policy on its website in clear and simple terms.

In accordance with the Act respecting the protection of personal information in the private sector (RLRQ c P-39.1), as amended by the Act to modernize legislative provisions as regards the protection of personal information (LQ 2021, c. 25), the Company has implemented measures to protect your personal information.

This Privacy Policy (the "Policy") governs our privacy practices regarding the personal information you voluntarily share with us during your visit to our website, located at http://vistaprops.com/fr (the "Website"), when communicating with us via social media, or when you contact us by any other means (e.g., phone, email, etc.).

What: We only collect the personal information necessary to identify you for the purposes outlined in this Policy.

How and Why: When you use our Website or communicate with us by any means, personal information may be collected via cookies, for purposes such as ensuring the functionality of the Website, facilitating its use, measuring its performance, and for other purposes outlined in this Policy.

Who: Within the Company, only employees from the communications department, the human resources department (when applying for a job), and members of the administration, when necessary, have access to the collected personal information.

Where: Your personal information is stored on the servers of our Website provider, located in Quebec. Please note that your personal information is not shared outside of Quebec, except for certain cookies that may transmit personal information outside of Quebec.

Your Rights: You have the right to withdraw your consent to the use or disclosure of your personal information and to request access to or correction of your personal information that we hold, subject to your legal or contractual obligations.

The Company collects your personal information through one or more of the technological means mentioned on this page, including through your use of the Website, which leads to the collection of personal information via cookies, with your consent. Additionally, personal information may be collected when you communicate with the Company, whether by phone call, email, or social media (e.g., LinkedIn).

Only employees from the communications department, the human resources department (when submitting a job application), and members of the administration, when necessary, have access to the collected personal information.

Please note that access to your personal information is restricted to those for whom such access is absolutely necessary for the performance of their duties within the Company.

In the course of its activities, including establishing or maintaining business relationships, the Company may collect and process certain types of information in different collection situations. This information is not always personal data but may become or be considered personal data if it can be used to identify you, either on its own or in combination with other information.

The collection situations and categories of personal information are listed below:

• Personal information collected when you communicate with the company
• When you email us, we collect your name, email address, and any other personal information you voluntarily provide. For example, if you send us your resume to apply for a job with the Company, we collect the personal information contained in your resume.
• When you contact us by phone, depending on the nature of your request, we collect your name, phone number, and any other personal information you voluntarily provide.
• When you contact us through social media, we collect the personal information voluntarily provided in your message, as well as your first and last name. If you contact us via LinkedIn to submit a job application, we also collect the personal information that you make public on your LinkedIn account, such as your employment history.

For the provision of services offered by the Company, other personal information may be collected from you by other means. However, we will ensure that we obtain your explicit consent for such personal information collections at that time.

When you access the Website, a server automatically collects the following personal information:

• Your IP address
• The browser you are using (Chrome, Microsoft Edge, Firefox, Brave, etc.)
• Your operating system (Windows, Mac OS, etc.)
• The domain name of your Internet service provider
• The date and time of your visit to the Site
• The pages you visit on the Site
• The website address from which you accessed the Site

When you browse the Website, cookies (also known as connection cookies) are generated during each visit. Cookies are data files installed on your computer by the websites you visit, allowing for the exchange of data between your computer and the visited websites. Some of these cookies may transmit personal information outside of Quebec.

We collect the above-mentioned personal information for the following purposes:

• To communicate with you, for example, to respond to an inquiry you submitted to the Company, or to offer you a job or obtain more information regarding your application 
• To promote the services offered by the Company
• To assess any application submitted to the Company
• To promote the Website
• To ensure the functionality of the Website, facilitate its use, and measure its performance
• To comply with applicable legal and regulatory requirements regarding the protection of personal information
• To protect your rights (e.g., to ensure that unauthorized third parties do not access your personal information)

We will notify you and ensure that we obtain any necessary consent for the collection, use, or disclosure of your personal information for any purpose other than those listed above, if applicable.

Due to the use of the aforementioned cookies, we use the personal information of our visitors for profiling and identification purposes. However, please note that the collection and use of personal information for these purposes are disabled by default. You can enable these functions by authorizing the collection of personal information for profiling and identification purposes by approving the option in the pop-up window that appears when you access our Website.

We share the personal information identified in the section titled "Personal information collected on the Website" of this Policy with our cloud hosting service provider and website management and administration service provider.

The information collected by the cookies mentioned above related to communication cookies is disclosed to the entities and for the purposes identified in that section. We may also disclose your personal information without your consent in situations where it is permitted or required by applicable law, or with your consent.

It is possible that your personal information will be disclosed outside of Quebec. Please note that prior to disclosing any of your personal information outside of Quebec, we conduct a privacy impact assessment, a process that allows us to consider all factors that may affect your privacy in order to determine if your personal information will be adequately protected.

Additionally, we enter into contracts or agreements that include appropriate security measures to protect your personal information. Please note that if your personal information is disclosed outside of Quebec, it will be subject to the laws of the jurisdiction to which your information is disclosed.

Any person who uses the Website or communicates with the Company consents to the collection, use, and disclosure of their personal information for the purposes communicated and to the entities mentioned above (if applicable), in accordance with the terms of this Policy. However, as previously mentioned, in certain situations, we may request your explicit consent for the processing of your personal information, particularly through specific consent forms.

In accordance with our secure retention and destruction procedures for personal information, we retain personal information only for as long as necessary to fulfill the stated purposes and to comply with our legal obligations. After that period, your personal information will be securely and confidentially destroyed or anonymized for use in serious and legitimate purposes. Anonymization is a process by which personal information is irreversibly altered so that it can no longer identify the individual to whom it relates (meaning the information loses its status as personal data).

We adopt physical, technological, and administrative protection measures to safeguard your personal information and reduce the risks of unauthorized and/or illegal access, use, disclosure, and destruction.

Without limiting the generality of the foregoing, we:

• Limit the personal information we collect. We only collect the personal information necessary to fulfill the purposes identified in this Policy.
• Monitor digital access to your personal information. This includes logging activities related to such information.
• Maintain a retention schedule to ensure your personal information is promptly destroyed once its purposes have been fulfilled or any applicable legal retention period has expired.
• Keep a record of confidentiality incidents in accordance with applicable laws. If a confidentiality incident occurs that poses a serious risk of harm to you, we will take the necessary steps to inform you in compliance with the relevant legislation.
• Use secure infrastructure and technological tools, such as firewalls.
• Ensure that individuals who have access to your personal information within the company receive adequate privacy and personal data protection training and offer multiple annual training sessions to maintain this level of awareness.
• Use strong passwords to access software or platforms containing personal information, including two-factor authentication.

However, no method of internet transmission or any other technological means or electronic storage is 100% secure. We cannot guarantee or ensure the security of the information you transmit to us. There will always be risks associated with the communication of personal information. We also cannot guarantee that such information will not be accessed, obtained, disclosed, modified, or destroyed as a result of a breach of our physical, technical, or administrative protection measures. If you have reason to believe that your personal information has been compromised, please contact us using the details provided below.

Subject to applicable legislation and your contractual obligations, you may withdraw or modify your consent to the use or disclosure of your personal information. However, if you withdraw your consent for certain uses or disclosures of your personal information, we may no longer be able to provide certain services to you, or the quality of our services may be affected. We will inform you of the consequences of your decision before accepting your request to withdraw consent.

To exercise your right to withdraw consent to the disclosure or use of your personal information, please follow the procedures outlined in the "Procedure for access requests, correction, and withdrawal of consent" section of this Policy.

You have the right to access your personal information. In this regard, you may request that we:

• Inform you of the existence of personal information about you;
• Provide you with communication of the personal information we hold about you;
• Allow you to review the personal information we keep about you by making it available for consultation either in person during normal business hours or remotely, and provide you with a copy; and Starting on September 22, 2024, provide you with any information collected from you (excluding personal information created or inferred from personal information about you) in a structured and commonly used technological format. You may also request, starting on September 22, 2024, that we transmit your personal information to any person or organization authorized by law to collect such information.

Reasonable fees may be charged for the transcription, reproduction, or transmission of your personal information. We will inform you of these fees before proceeding with the transcription, reproduction, or transmission of your personal information.

To exercise your right of access, please follow the steps outlined in the section titled "Procedure for access requests, rectification, and withdrawal of consent" in this Policy.

You may also submit a request to correct your personal information. You can request a correction if:

• Your personal information is inaccurate;
• Your personal information is incomplete;
• Your personal information is ambiguous;
• The collection, disclosure, or retention of your personal information was not authorized by law.

You may also request that we destroy any personal information collected or retained if its collection, disclosure, or retention was not authorized by law.

If we grant your correction request, you may ask us to provide a copy of any modified or added personal information or, if applicable, a certification of the removal of your personal information.

To exercise your right to correction, please follow the steps outlined in the "Procedure for access, correction, and withdrawal of consent" section of this Policy.

To be considered, any request for access, correction, or withdrawal of consent must be submitted in writing to the Personal Information Protection Officer by emailing consentement@vistaprops.com. You will need to verify your identity before we can process your request.

We are legally required to respond (either favorably or unfavorably) to any access or correction request within 30 days of receiving it and confirming your identity.

We may refuse any request in accordance with applicable personal information protection laws.

You can file a complaint about our governance practices or personal information protection with the Personal Information Protection Officer by emailing consentement@vistaprops.com.

We may update this Policy from time to time in accordance with applicable laws. We will notify you of any changes to this Policy by indicating the date of the most recent update at the beginning of the document. If we have your email address, we will also send you a notification identifying any changes made to this Policy.

Your consent via the pop-up window and your continued use of the Website, or providing us with personal information after the updates to this Policy, constitutes your acceptance of the changes to this Policy, subject to the provisions of the law.

The Company is not responsible for any information that may be collected, used, or disclosed by any third-party websites you visit. The Company expressly disclaims any responsibility related to such collection, use, disclosure, or retention by a third party.

If you have any questions or comments about this Policy or our practices regarding your personal information, you can contact the Personal Information Protection Officer by emailing consentement@vistaprops.com.