Welcome to Gala Systems’ Website ( [https://www.galasystems.com/en/](https://www.galasystems.com/en/) ). By browsing our Website, you agree to the following Terms and Conditions of use. If that is not your intention, then please do not access or use this Website.
"Gala Systems" specializes in the field of mechanical engineering. As such, we carry out a large number of projects, each one more diversified than the other, with challenges that are as innovative as they are unique.
In the course of its activities, Gala Systems may come into contact with your Personal Information. Gala Systems takes the protection of your privacy and the security of your Personal Information very seriously. The purpose of this Policy is to help you understand our practices regarding the collection, use, disclosure, retention, and destruction of Personal Information.
This Policy, therefore, applies to Gala Systems Website: [https://www.galasystems.com/en/](https://www.galasystems.com/en/)
Acceptance of the Policy is an essential condition for the use of all Gala Systems services, except under the conditions specified by the law. By providing us with Personal Information (via our Website, job boards, e-mail, in person, or by telephone), you agree to its processing in accordance with this Policy, and you authorize Gala Systems to use such information for the purposes set forth herein.
Furthermore, please note that this Gala Systems Website, including any content appearing on or accessible through the site, is protected by copyright. Any adaptation or distribution is prohibited unless prior written authorization to do so has been obtained from an authorized representative, and this, for a specific use and duration.
2. PURPOSE OF THE POLICY
This Policy is intended to protect Personal Information. The **Loi sur la protection des renseignements personnels dans le secteur privé** (Act respecting the protection of personal information in the private sector) defines Personal Information as any information concerning a natural person and allowing, directly or indirectly, that person to be identified ("Personal Information").
It can, therefore, be any information about an identifiable individual or information that allows an individual to be identified. Personal Information may include your last name, first name, address, telephone number, e-mail address, or any other personal or demographic information.
When collecting Personal Information and subsequently upon request, Gala Systems informs you of the purposes for which the Personal Information is collected, the means by which the Personal Information is collected, legal rights of access and rectification, your right to withdraw your consent to the disclosure or use of the Personal Information collected.
3. RESPONSIBILITIES RELATING TO PROTECTION OF PERSONAL INFORMATION
Gala Systems is responsible for protecting the Personal Information it holds. As such, Gala Systems has established and implemented policies and practices to govern the handling and protection of Personal Information, including this Policy. These include the framework applicable to the retention and destruction of Personal Information, the roles and responsibilities of its staff members throughout the lifecycle of such Personal Information, and a process for handling complaints relating to the protection of such Personal Information.
Gala Systems has, therefore, appointed Philippe Laforest as Privacy Officer to ensure compliance with and implementation of the Loi sur la protection des renseignements personnels dans le secteur privé.
In this Policy, the term "Privacy Officer" refers to the person designated as such, as well as to any person to whom he or she may have delegated this function in whole or in part in writing, as applicable.
If you have any questions, requests, or other inquiries regarding the interpretation or application of this Policy, please contact the Privacy Officer using the following contact details:
Name: Philippe Laforest
Phone: 450 678 7226
Please note that the Privacy Officer has approved all policies and practices. Gala Systems undertakes to publish detailed information about these policies and practices in clear and plain terms on its Website and to update them from time to time.
4. NATURE OF PERSONAL INFORMATION COLLECTED
Gala Systems may collect Personal Information for a variety of purposes. Gala Systems only collects Personal Information that is necessary for the purposes identified in this Policy.
a. Website consultation and online forms
Consultation of our Website does not require prior registration or identification. You do not need to provide any personal data (last name, first name, address, etc.). We do not record any personal data for the simple purpose of consulting the Website.
Some of the electronic tools we use to better respond to your questions involve the collection of Personal Information to contact you, for example through forms on Gala Systems Websites.
You may be required to complete forms online on our Website to receive Gala Systems newsletter or to send us your application. By using our online forms, you agree that we may collect Personal Information for the purpose of contacting you again (name and contact information, including email and/or phone number). For these purposes, we encourage you to complete the mandatory fields marked with an asterisk (*) on our forms. Completion of non-mandatory fields is optional and remains at your discretion, particularly with regard to receiving our newsletter.
Please note that this Policy does not apply to the various links and/or third-party links on our Websites, including, but not limited to, search results and purchase of goods and services through third-party payment platforms, credit card companies, and other providers. These sites are owned and operated by independent companies over which we have no control and which are not covered by this Policy. We are not responsible for their content or for the collection and use of their information.
b. Processing applications
In the course of its activities, Gala Systems is required to evaluate applications from a number of individuals for positions to be filled. Applications include the candidate's first and last name, contact information, and CV. Applications may also include names, first names, and contact information of past job references, and psychometric test results when these are part of the recruitment process.
This Personal Information is collected through our Websites, email addresses, phone numbers, job boards, and partner recruitment agencies.
c. Services and billing
In order to provide you with an estimate for your project or for any service you may require, we may ask you for your mailing address and contact information (phone number, email address).
When you consent to receive our services, you also consent to the collection of the Personal Information required to provide them. This includes the collection of banking information required to bill our services (e.g., cheque, credit card number, bank transfer).
This Personal Information may be collected via our Website, by telephone, electronically, or in person by one of our authorized employees.
5. PERSONAL INFORMATION MANAGEMENT PRINCIPLES
a. Terms and conditions
Gala Systems ensures that all Personal Information is processed according to a pre-established life cycle.
Please note that Gala Systems does not establish a file on a natural person unless it has a serious and legitimate interest in doing so. It will only collect Personal Information that is relevant to the stated purpose of the file and does not disclose it to third parties or use it for purposes that are inconsistent with those for which the file was compiled. Nor will Gala Systems otherwise violate the privacy or reputation of the person concerned in the creation or use of the file.
Prior to making a decision concerning the individual concerned, Gala Systems shall ensure that the Personal Information held on that individual is up-to-date and accurate at the time it is used. The Personal Information used to make such a decision is kept for at least one year following the decision.
Gala Systems shall inform individuals of their right to access and rectify their Personal Information and shall inform them of how to exercise those rights when required by law, within the prescribed time.
b. Who can access your Personal Information?
Access to Personal Information within Gala Systems will be limited to those employees who need the information to perform their duties. These employees will treat Personal Information as strictly confidential and will not provide access to such Personal Information to any unauthorized person. The level of access to Personal Information will be granted to employees on a need-to-know basis.
The management of Personal Information throughout its life cycle, including its retention or destruction, is carried out by Gala Systems employees or by any person authorized to do so in accordance with the terms of the Loi sur la protection des renseignements personnels dans le secteur privé.
c. How do we protect your Personal Information?
In any organization, failure to protect Personal Information can increase the risk of privacy breaches. Such breaches can lead to a variety of issues, such as damaging the person's reputation or enabling fraud or identity theft.
Gala Systems, therefore, takes reasonable security measures to ensure the protection of Personal Information that is collected, used, disclosed, retained, or destroyed.
We will protect Personal Information against loss or theft, unauthorized access, use or disclosure, alteration or destruction, through appropriate administrative, technical, and physical security and protection measures.
The level of protection afforded to Personal Information depends on the following:
- The degree of sensitivity of the Personal Information;
- The quantity, distribution, and format of information;
- The method of storage.
We use secure networks to store data to limit hacking or data leakage.
While we strive to use appropriate means to protect your Personal Information, we cannot guarantee its absolute security. Only communications or transactions made through a data encryption system are systematically secured. We, therefore, do not recommend using your email software to transmit Personal Information to Gala Systems.
We have procedures in place to deal with any alleged violations that we will notify you and any relevant regulatory body when we are legally required to do so.
Moreover, Gala Systems will only disclose Personal Information outside Quebec if a privacy impact assessment shows that the Personal Information would benefit from adequate protection, particularly with regard to generally accepted Personal Information protection principles. Any such disclosure shall be subject to a written agreement taking into account the results of the evaluation and, where appropriate, the agreed upon terms and conditions to mitigate the risks identified in the assessment. The same applies when Gala Systems assigns a person or organization outside Quebec with the task of collecting, using, communicating, or retaining such Personal Information on its behalf.
Except as provided by law, Gala Systems must obtain valid consent from the person concerned before collecting, using, or disclosing any Personal Information. When obtaining your consent, Gala Systems ensures that it is manifest, free, informed, and given for specific purposes. Whenever possible, you will be asked for your consent for each of these purposes, in clear and plain terms.
Wherever possible, we try to obtain your consent before collecting your Personal Information. The form of consent may vary depending on the circumstances and the type of Personal Information sought. Consent may be expressed or implied and may be provided directly by the individual.
When the request for consent is made in writing, it will be presented separately from any other information communicated to the person concerned. When requested, Gala Systems will assist the individual in understanding the scope of the requested consent.
We prefer to obtain express consent, whether verbally, electronically, or in writing. Implied consent may be reasonably inferred from an individual's action or inaction, for example, providing a name and address to submit an application, or a name and telephone number to obtain an answer to a question. In determining the appropriate type of consent, we take into account the sensitivity of the Personal Information in question, the purposes for which it is collected, and the reasonable expectations of the individual. If we wish to use Personal Information for a new purpose, we will describe the intended use and ask for consent again.
When we wish to use or disclose sensitive Personal Information, we must obtain your express consent.
Personal Information is considered sensitive within the meaning of this Policy and the Loi sur la protection des renseignements personnels dans le secteur privé when, due to its medical, biometric, or other intimate nature, or due to the context of its use or communication, it raises a high degree of reasonable expectation of privacy.
Furthermore, Gala Systems does not collect Personal Information from minors under the age of 14 without the consent of a parent or guardian. By continuing to use Gala Systems Website or any of Gala Systems services, you confirm that you are 14 years of age or older or that you have parental or guardian consent to the collection of Personal Information on behalf of the person concerned.
Consent is valid only for the time necessary to achieve the purposes for which it was requested.
We use your Personal Information only for the purposes for which it was collected or for a use consistent with those purposes, unless you have the consent of the individual concerned.
Personal Information may, however, be used for another purpose by Gala Systems without the consent of the person concerned only in the following cases:
- Where its use is for purposes consistent with those for which it was collected, in so far as there is a relevant and direct link to the purposes for which the Personal Information was collected;
- Where its use is clearly to the benefit of the person concerned;
- Where its use is necessary for the prevention and detection of fraud or the assessment and improvement of protection and security measures;
- Where its use is necessary for the purpose of supplying or delivering a product or service requested by the person concerned;
- Where its use is necessary for study, research, or statistical purposes and it is de-identified.
If Gala Systems uses Personal Information for commercial or philanthropic prospecting purposes, it must identify itself to the person to whom it is addressed and inform him or her of his or her right to withdraw consent to the use of his or her Personal Information for these purposes. When the person concerned withdraws his or her consent to the use of Personal Information concerning him or her for commercial or philanthropic prospecting purposes, Gala Systems will cease to use such information in this way.
We will not disclose to a third party any Personal Information that we hold about another person unless the person concerned consents to such disclosure or unless it is required by law.
Consent to the disclosure of Personal Information by a third party may be given by the person concerned to Gala Systems for collection from that third party.
Gala Systems may, without the consent of the person concerned, disclose Personal Information to any person or organization if such disclosure is necessary for the exercise of a mandate or the execution of a service or business contract that it entrusts to such person or organization. Gala Systems will then entrust the mandate or contract in writing, and will indicate therein the measures that the mandatary or the executor of the contract must take to ensure the protection of the confidential nature of the Personal Information communicated, to ensure that this Personal Information is only used in the exercise of its mandate or the execution of its contract and that it is not retained after its expiry, subject to the measures provided for by law.
A person or an organization exercising a mandate or performing such a service or business contract shall promptly notify the Privacy Officer of any breach or attempted breach by any person of any of the obligations relating to the confidentiality of the Personal Information communicated and shall also allow the Privacy Officer to carry out any verification relating to such confidentiality.
a. Disclosure as part of a commercial transaction
Gala Systems may be required to disclose Personal Information when it is necessary for the purpose of entering into a commercial transaction to which it is a party. A business transaction is defined in this Policy as the disposition or lease of all or part of Gala Systems or its assets, a change in its legal structure by merger or otherwise, obtaining a loan or other form of financing by it, or security interest taken to guarantee any of these obligations.
In this situation, Gala Systems may then communicate such Personal Information to the other party to the transaction, without the consent of the person concerned.
Where applicable, Gala Systems will have concluded an agreement with the other party beforehand, stipulating, in particular, that the latter party undertakes:
- To use the Personal Information solely for the purposes of concluding the commercial transaction;
- Not to communicate the Personal Information without the consent of the person concerned, unless authorized to do so by law;
- To take the necessary measures to ensure the protection of the confidential nature of the Personal Information;
- To destroy the Personal Information if the commercial transaction is not concluded or if the use of the Personal Information is no longer necessary for the purpose of concluding the business transaction.
Likewise, when Gala Systems enters into a commercial transaction and wishes to continue to use or disclose Personal Information, Gala Systems will only use or disclose such Personal Information in accordance with the law. Within a reasonable period of time following the conclusion of a business transaction through which Gala Systems obtains Personal Information, Gala Systems will notify the person concerned that it now holds Personal Information about him or her as a result of said business transaction.
b. Disclosure for study, research and statistical purposes
Under certain conditions, Gala Systems may disclose Personal Information without the consent of the persons concerned to a person or organization that wishes to use this Personal Information for study, research, or statistical purposes.
Beforehand, Gala Systems shall carry out an assessment of the factors relating to privacy. This assessment must conclude that:
- The purpose of the study, research, or statistical production can only be achieved if the Personal Information is disclosed in a form that identifies the persons concerned;
- It is unreasonable to require the person or organization to obtain the consent of the individuals concerned;
- The purpose of the study, research, or production of statistics takes precedence, in terms of public interest, over the impact of the disclosure and use of Personal Information on the privacy of the persons concerned;
- Personal Information is used in such a way as to ensure confidentiality;
- Only necessary Personal Information is disclosed.
Gala Systems will refuse any request that does not comply with the terms of the Loi sur la protection des renseignements personnels dans le secteur privé from a person or organization wishing to use Personal Information for study, research, or statistical purposes.
If Gala Systems discloses such Personal Information in accordance with this Policy, it must first enter into an agreement with the person or organization to whom it discloses such Personal Information stipulating, among other things, that such Personal Information:
- May only be made accessible to persons to whom knowledge of it is necessary for the exercise of their duties and who have signed a confidentiality agreement;
- May not be used for purposes other than those specified in the detailed presentation of research activities;
- May not be matched with any other information file not included in the detailed presentation of research activities;
- May not be communicated, published, or otherwise disseminated in a form that identifies the persons concerned.
This agreement must also:
- Provide for the information to be communicated to the persons concerned when their Personal Information is used to contact them for the purpose of participating in the study or research;
- Provide for measures to ensure the protection of Personal Information;
- Set a retention period for Personal Information;
- Provide for the obligation to notify the person disclosing the Personal Information of its destruction;
- Provide that the person disclosing the Personal Information and the Commission d'accès à l'information du Québec must be notified without delay of:
- Failure to comply with any condition set out in the agreement;
- Any breach of the protection measures set out in the agreement;
- Any event likely to compromise the confidentiality of Personal Information.
The aforementioned agreement is then forwarded to the Commission d'accès à l'information du Québec, and takes effect 30 days after it is received by the latter.
Gala Systems retains Personal Information only as long as necessary for the purposes set out in this Policy. In particular, we comply with all legal requirements for the retention of Personal Information in terms of duration.
For example, sensitive Personal Information that we retain during the recruitment process will be retained during that process and then destroyed. The Personal Information that we use to re-contact you following your information request is used for the time we need it to re-contact you and then retained for internal statistics. If necessary, the Personal Information in question will then be anonymized in the appropriate manner according to the corresponding needs of these internal statistics.
Our methods of retaining Personal Information are adapted to the nature of the information and the medium on which it is stored. Gala Systems shall take the reasonable steps necessary to ensure the retention of all Personal Information it holds.
Gala Systems takes reasonable measures to limit the risk of anyone identifying a natural person with de-identified information. Under the Loi sur la protection des renseignements personnels dans le secteur privé, Personal Information is de-identified when it can no longer be used to directly identify the person concerned.
10. ANONYMIZATION AND DESTRUCTION
When the purposes for which Personal Information was collected or used have been fulfilled, Gala Systems destroys or anonymizes it in order to use it for serious and legitimate purposes, subject to a retention period stipulated by law. Personal Information anonymized in accordance with this Policy will be anonymized in accordance with generally accepted best practices and in accordance with the criteria and procedures determined by Gala Systems' legal obligations. For the purposes of this Policy, anonymizing Personal Information means making it reasonably foreseeable in the circumstances that Personal Information concerning a natural person no longer makes it possible to directly or indirectly identify that person, in the circumstances referred to, and irreversibly.
11. RIGHTS RELATING TO PERSONAL INFORMATION
a. Right of access by persons concerned
At the request of any person concerned, Gala Systems will confirm the existence of Personal Information about him or her, if it holds such Personal Information, and will provide him or her with a copy in the form of a written and intelligible transcript. It also informs the individual, upon request, of the Personal Information collected from him or her, the categories of persons who have access to this Personal Information within Gala Systems, the duration of the retention of this Personal Information, and the contact information of the Privacy Officer. Gala Systems communicates the information to the person concerned in simple and plain terms, regardless of the means used to collect the Personal Information. Where the requesting party is a person with a disability, reasonable accommodations will be made, upon request, to enable him or her to exercise his or her right of access as set out in this Policy.
i. Exceptions to the right of access
Notwithstanding the foregoing, when Gala Systems holds a file that it has compiled on a person concerned, it may refuse to allow that person to consult it only if this would cause serious harm to his or her health and provided that Gala Systems offers the person the opportunity to designate a health professional of his or her choice to receive communication of such Personal Information and to communicate it to that professional. In addition, Gala Systems may refuse to disclose Personal Information to an individual where disclosure of the Personal Information could reasonably be expected to:
- Interfere with an investigation conducted by its internal security department for the purpose of preventing, detecting or suppressing crime or violations of the law or, on its behalf, by an external department with the same purpose or a security guard agency or investigation agency licensee issued in accordance with the Loi sur la sécurité privée (Private Security Act);
- Have an effect on legal proceedings in which Gala Systems or the person concerned has an interest.
Gala Systems refuses to disclose Personal Information concerning a person when its disclosure would likely reveal Personal Information about a third party or the existence of such Personal Information, and such disclosure would be likely to seriously harm the third party, unless the third party consents to its disclosure or unless it is an emergency endangering the life, health or safety of the person concerned. Gala Systems refuses to disclose Personal Information to the testamentary executor, the beneficiary of a life insurance policy or death benefit, the heir or successor of the person concerned by such Personal Information, unless such disclosure would jeopardize the interests and rights of the person requesting it as executor, beneficiary, heir or successor. However, Gala Systems may communicate to the spouse or close relative of a deceased person any Personal Information it holds concerning that person, if knowledge of this Personal Information is likely to help the applicant in his or her grieving process and if the deceased person has not recorded in writing his or her refusal to grant this right of access.
b. Right to rectification
At the request of any person concerned, Gala Systems will rectify Personal Information concerning him or her that is inaccurate, incomplete or equivocal, or if its collection, disclosure or retention is not authorized by law. When the Privacy Officer agrees to a request for rectification, he will issue to the person who made the request, free of charge, a copy of any Personal Information amended or added, or, as the case may be, an attestation of the deletion of such Personal Information. The Privacy Officer immediately notifies any person who has received Personal Information in the previous six months of the rectification and, where applicable, the person from whom the Personal Information was received. The same applies to the request for rectification, if it is contested.
c. Right of withdrawal
At the request of any person concerned, Gala Systems will cease to disseminate Personal Information or will de-index any hyperlink attached to its name allowing access to it by technological means where the dissemination of such Personal Information contravenes the law or a court order. At the request of any person concerned, Gala Systems will do the same, or will ensure that the hyperlink allowing access to this Personal Information is re-indexed when the following conditions are met:
- The dissemination of this Personal Information causes serious harm to the person concerned in terms of his or her right to respect for his or her reputation or privacy;
- This prejudice clearly outweighs the public interest in knowing this Personal Information or the interest of any person in expressing him/herself freely;
- The requested cessation of dissemination, reindexing or de-indexing does not exceed what is necessary to avoid the perpetuation of the harm.
In assessing the above criteria, Gala Systems takes into account, among other things, whether the person concerned is a public figure, whether the Personal Information concerns the person while he or she is a minor, whether it is up-to-date or accurate, its sensitivity, the general context in which it is disseminated, the time elapsed between its disclosure and the request made by the person concerned under this Policy, and, if the Personal Information concerns criminal or penal proceedings, obtaining a pardon or the application of a restriction on access to court records.
d. Request to exercise one of these rights
In order to make a request for access to or rectification of Personal Information, a person must make such a request in writing to the Privacy Officer, providing proof of his or her identity as the person concerned or in one or more of the following capacities in relation to the person concerned:
- Heir or successor;
- Liquidator of the succession;
- Beneficiary of life insurance or death benefit;
- Holder of parental authority even if the minor child is deceased;
- The spouse or close relative of a deceased person, if knowledge of this Personal Information is likely to help the applicant in his or her grieving process and if the deceased person has not recorded in writing his or her refusal to grant this right of access.
When the request is not specific enough or when requested by an individual, the Privacy Officer shall assist in identifying the Personal Information sought. The foregoing shall not be construed as restricting the disclosure to a person of Personal Information concerning him or her or its rectification resulting from the rendering of a service to him or her. The Privacy Officer will reply in writing to the request for access or rectification, with due diligence and no later than 30 days from the date of receipt of the request. If no reply is received within 30 days of receipt of the request, the Privacy Officer is deemed to have refused to grant the request. When Gala Systems holds Personal Information that is the subject of a request for access or rectification and does not grant the request, it retains the information for the time required to allow the person concerned to exhaust the remedies provided by law. The Privacy Officer shall give reasons for any refusal to grant a request, and indicate the provision of the law upon which the refusal is based, the remedies available to the applicant under the Loi sur la protection des renseignements personnels dans le secteur privé, and the time within which they may be exercised. He also assists the applicant, at his or her request, in understanding the refusal. A request for withdrawal under this Policy follows the same procedure as for a request for access or correction, with the necessary adaptations. If the request is granted, the Privacy Officer certifies, in its written response, that the disclosure of the Personal Information or the de-indexing or reindexation of the hyperlink has ceased.
e. Applicable fees
Access to Personal Information at Gala Systems is free of charge. However, Gala Systems may charge a reasonable fee for the transcription, reproduction or transmission of such Personal Information. When Gala Systems intends to charge a fee under this Policy, it shall inform the applicant of the approximate amount payable before proceeding with the transcription, reproduction or transmission of such Personal Information.
12. PRIVACY INCIDENT
Gala Systems takes the protection of Personal Information very seriously. If Gala Systems has reason to believe that a Privacy Incident involving Personal Information held by Gala Systems has occurred, Gala Systems will take reasonable measures to minimize the risk of harm and to prevent similar Privacy Incidents from occurring in the future.
For the purposes of this Policy, a "Privacy Incident" is defined as the unauthorized access, use or disclosure of Personal Information, the loss of Personal Information, or any other breach of its protection.
If the Privacy Incident presents a risk of serious harm, Gala Systems undertakes to diligently notify the Commission d'accès à l'information du Québec. Gala Systems also undertakes to notify any person whose Personal Information is affected by the Privacy Incident, if applicable, as well as any person or organization likely to reduce this risk, by communicating only the Personal Information necessary for this purpose without the consent of the person concerned. In the latter case, the Manager will record the communication.
Notwithstanding the foregoing, a person whose Personal Information is affected by the Privacy Incident will not be notified if this is likely to impede an investigation by a person or organization which, under the law, is responsible for preventing, detecting, or suppressing crime or breaches of the law.
When Gala Systems assesses jointly with the Privacy Officer the risk of harm being caused to a person whose Personal Information is affected by a Privacy Incident, it considers in particular the sensitivity of the Personal Information concerned, the apprehended consequences of its use, and the likelihood that it will be used for harmful purposes.
Moreover, Gala Systems maintains a register of Privacy Incidents.
13. REMEDIES AND COMPLAINTS
For any complaint relating to the interpretation or application of this Policy or concerning your Personal Information in connection with Gala Systems, we invite you to proceed by means of a written request addressed to the Privacy Officer. Your complaint will be processed as soon as possible, and Gala Systems will take reasonable measures to address the situation.
On the other hand, any interested person may submit to the Commission d'accès à l'information du Québec a request for examination of a disagreement relating to the application of a legislative provision relating to access to or rectification of Personal Information or relating to the application of section 28.1 of the Loi sur la protection des renseignements personnels dans le secteur privé.
Gala Systems, when it holds Personal Information about others, may ask the Commission d'accès à l'information du Québec to authorize it to disregard requests that are manifestly abusive due to their number, repetitive or systematic nature, or requests that, in the opinion of the Commission d'accès à l'information du Québec, are not consistent with the purpose of the Loi sur la protection des renseignements personnels dans le secteur privé. Gala Systems may also ask the Commission d'accès à l'information du Québec to circumscribe the requester's request or to extend the deadline within which Gala Systems must respond.
Gala Systems will forward any such request to the Commission d'accès à l'information du Québec no later than 30 days from the date of receipt of the applicant's last request. Gala Systems cooperates with the Commission d'accès à l'information du Québec and provides it with the information it requires under the law in a timely manner.