|
|
||||||||||||||
Home About Us Training Ministries Resources Giving Missions Provincial Offices Kids Stuff Contact Us |
|
Child Evangelism Fellowship®
canada
|
Child Evangelism
Fellowship of Canada's
Personal
Information Privacy Commitment Statement
To safeguard the personal information entrusted to the Child Evangelism Fellowship® of Canada ("CEF of Canada") and to comply with the Personal Information Protection and Electronic Documents Act ("PIPEDA") and any other applicable legislation, CEF of Canada is committed to the following principles:
Accountability
Identifying purposes
Consent
Limiting collection
Limiting use,
disclosure, and retention
Accuracy
Safeguards
Openness
Individual access
Challenging
compliance
These principles
will be enacted in accordance with the
"CEF of Canada
Policy To Protect Personal Information" (the "Policy").
CEF of Canada, its
directors, officers, employees and volunteers are required to comply with
the principles and the Policy and will be given restricted access to
personal information solely to perform the services provided by CEF of
Canada.
Other persons or
organizations who act for, or on behalf of, CEF of Canada are also required
to comply with the principles and the Policy and will be given restricted
access to personal information solely to perform the services provided for
CEF of Canada.
CEF of Canada has
designated Mr. Jerry Hanson to be CEF of Canada's Personal Information
Compliance Officer. Any inquiry, request or concern related to privacy
matters should be made in writing to CEF of Canada. Mr. Hanson may be
contacted at:
Personal Information
Compliance Officer
Child Evangelism
Fellowship of Canada
PO Box 165, Stn Main
Winnipeg, MB R3C
2G9
CANADA
E-Mail: info@cefcanada.org
A copy of the Policy is shown below. A printed copy of
the Policy may be requested by mail or e-mail at the above address.
Policy To Protect
Personal Information
1. Accountability
1.1 Mr. Jerry
Hanson is the Personal Information Compliance Officer (the "Officer")
for Child Evangelism Fellowship of Canada ("CEF of Canada").
1.2 All persons,
whether employees, volunteers, or board or committee members who collect,
process, or use personal information shall be accountable for such
information to the Officer.
1.3 The Child
Evangelism Fellowship of Canada Policy To Protect Personal Information (the
"Policy") shall be made available via CEF of Canada's website (www.cefcanada.org),
or a paper copy provided upon written request.
1.4 Any personal
information transferred to a third party for processing is subject to this
Policy. The Officer shall use contractual or other appropriate means to
protect personal information at a level comparable to this Policy while a
third party is processing this information.
1.5 Personal
information to be collected, retained, or used by CEF of Canada shall be
done so only after the Officer gives written approval. This information
shall be secured according to the Officer's instructions.
1.6 Any person who
believes CEF of Canada uses personal information collected, retained, or
used for purposes other than those that person explicitly approved may
contact the Officer to register a complaint or to make any related inquiry.
1.7 Upon receiving a
complaint from any person regarding the collection, retention, or use of
personal information, the Officer shall promptly investigate the complaint
and notify the person who complained about his/her findings and corrective
action taken, if any.
1.8 Upon receiving
the response from the Officer, the person who filed the complaint may, if
he/she is not satisfied, appeal to CEF of Canada's Board of Directors to
review and determine the disposition of the complaint at issue.
1.9 The
determination of the Board of Directors shall be final and the Officer shall
abide by and implement any of its recommendations.
1.10 The Officer
shall communicate and explain this Policy and give training regarding it to
all employees and volunteers who might be in a position to collect, retain,
or use personal information.
1.11 The Officer
shall prepare and disseminate information to the public which explains CEF
of Canada's protection of personal information policies and procedures.
2. Identifying Purposes
2.1 The Officer
shall document the purpose for which personal information is collected
to comply with the openness an individual access principles outlined
below.
2.2 The Officer
shall determine the information that will be needed to fulfill the purposes
for which the information is to be collected, to comply with the limited
collection principle below.
2.3 The Officer
shall ensure that the purpose is specified at or before the time of
collecting the personal information from an individual.
2.4 The Officer
shall ensure that the information collected will not be used for any other
purpose before obtaining the individual's approval, unless the new purpose
is required by law.
2.5 The Officer
shall ensure that a person collecting personal information will be able to
explain to the individual why this is being done.
2.6 The Officer
shall ensure that limited collection, limited use, disclosure, and retention
principles are respected in identifying why personal information is to be
collected.
3. Consent
3.1 The Officer
shall ensure that the individual from whom personal information is
collected consents to this and to it being used and disclosed.
3.2 The Officer
shall ensure that the individual can reasonably understand why and how the
information will be used when the consent is given.
3.3 The Officer
shall ensure that no condition is attached to supplying benefits, because of
CEF of Canada's activities, requiring the individual to give consent for the
collection, use, or disclosure of information beyond that required to
fulfill the explicitly specified and legitimate purposes.
3.4 The Officer
shall ensure that express consent is obtained wherever possible and
appropriate. In rare circumstances where, in the Officer's opinion (having
regard to the information's sensitivity and the Policy's purpose and
intent), implied consent might be acceptable.
3.5 In obtaining
consent, the Officer shall ensure that the individual's reasonable
expectations are respected.
3.6 The Officer
shall ensure that the express consent obtained from an individual is clear
and in an appropriately verifiable form.
3.7 The Officer
shall ensure that the individual may withdraw consent at any time, subject
to legal or contractual restrictions and reasonable notice. The individual
shall promptly be informed of the withdrawal's implications.
4. Limiting Collection
4.1 The Officer
shall ensure that personal information will not be collected
indiscriminately. Both the amount and type of information collected
shall be limited to that which is necessary to fulfill the purposes
identified. The Officer shall specify the type of information to be
collected, according to the openness principle.
4.2 The Officer
shall ensure that information is collected only by fair and lawful means
without misleading or deceiving individuals as to the reason.
4.3 The Officer
shall ensure that the identifying purposes and consent principles are
followed in identifying why personal information is to be collected.
5. Limiting Use,
Disclosure, and Retention
5.1 The Officer
shall ensure that personal information shall not be used or disclosed
for purposes other than those for which it was collected, except with
the consent of the individual or as required by law, and any use of
personal information shall be properly documented.
5.2 The Officer
shall ensure that all personal information is destroyed, erased, or made
anonymous as soon as the purpose for which it was collected is no longer
relevant, or as permitted by law. There shall be an automatic review of the
need to continue retaining personal information annually. Except as required
to be retained by law, all personal information shall be deleted, erased, or
made anonymous no later than seven years after the purpose for which it was
collected has been completed.
5.3 The Officer
shall ensure that all use, disclosure, and retention decisions are made in
light of the consent principle, the identifying purposes principle and the
individual access principle.
6. Accuracy
6.1 The Officer
shall reasonably ensure that the personal information is accurate,
complete, and up to date, taking into account the individual's
interests. The Officer shall ensure that the information is sufficiently
accurate, complete, and up to date to minimize the possibility that
inappropriate information might be used to make a decision about an
individual.
6.2 The Officer
shall ensure that CEF of Canada does not routinely update personal
information, unless it is necessary to fulfill the purposes for which the
information was collected.
6.3 The Officer
shall ensure that personal information used on an ongoing basis, including
information that is disclosed to third parties, should generally be accurate
and up to date, unless limits to the requirement for accuracy are clearly
set out.
7. Safeguards
7.1 The Officer
shall ensure that CEF of Canada has security safeguards to protect
personal information against loss or theft, as well as unauthorized
access, disclosure, copying, use, or modification. He/she shall do this
regardless of the format in which CEF of Canada holds the information.
7.2 Depending on the
information's sensitivity, the Officer may permit reasonable discretion
regarding the information that has been collected: the amount, distribution,
format, and the method of storage. A higher level of protection shall
safeguard more sensitive information according to the consent principle's
considerations.
7.3 The Officer
shall ensure that the protection methods include,
(a)
physical measures, for example, locked filing cabinets and restricted
access to offices;
(b)
organizational measures, for example, security clearance and limiting access
on a "need-to-know" basis; and
(c)
technological measures, for example, the use of passwords and encryption.
7.4 The Officer
shall ensure that all employees and volunteers know the importance of
keeping personal information confidential.
7.5 The Officer
shall ensure that care is taken when personal information is disposed of or
destroyed to prevent unauthorized parties from gaining access to it.
8. Openness
8.1 The Officer
shall ensure that CEF of Canada is open about its policies and practices
regarding the management of personal information. The policies and
information about the related practices shall be available without
unreasonable effort in a format generally understandable.
8.2 The Officer
shall ensure that the information available shall include,
(a) the name
or title and address of the Officer who is accountable for CEF of Canada's
policies and practices and to whom complaints or inquiries can be forwarded;
(b) the means
of gaining access to personal information held by CEF of Canada;
(c) a
description of the type of personal information held by CEF of Canada,
including a general account of its use;
(d) a copy of
any brochures or other information that explain CEF of Canada's policies,
standards, or codes; and
(e) what
personal information is made available to related organizations (e.g.,
organizations that are affiliated).
8.3 The Officer
shall ensure the information that must be provided according to 8.2 is
available at the locations CEF of Canada operates, online, or through the
mail.
9. Individual Access
9.1 The Officer
shall ensure that, upon written request, CEF of Canada shall inform an
individual whether CEF of Canada holds personal information about
him/her. If possible, the information's source shall also be given. CEF
of Canada shall allow the individual access to this information. CEF of
Canada may, however, choose to make sensitive medical information about
its employees or volunteers available through a medical practitioner.
CEF of Canada shall also account for the use that has been made or is
being made of this information and give an account as to the third
parties to whom it has been disclosed. (Note, If the Officer believes
for valid reasons that access to personal information should be denied,
the Officer shall consult legal counsel before making such a decision.)
9.2 A person
requesting his/her personal information may be required by the Officer to
give sufficient information to permit CEF of Canada to provide an account of
the existence, use, and disclosure of personal information. Information
shall be used only for the purpose for which it was obtained.
9.3 If CEF of Canada
has supplied personal information about an individual to third parties, the
Officer shall ensure that an attempt is made to be as specific as possible.
When it is possible to give a list of organizations to which CEF of Canada
has actually disclosed information about an individual, CEF of Canada shall
provide a list of organizations to which it might have disclosed information
about the individual.
9.4 The Officer
shall ensure that CEF of Canada responds to an individual's request within a
reasonable time and at minimal or no cost to the individual. The requested
information shall be made available in a generally understandable form. For
example, CEF of Canada shall explain abbreviations or codes it uses to
record information.
9.5 The Officer
shall ensure that when an individual successfully demonstrates the
inaccuracy or incompleteness of personal information, CEF of Canada shall
amend the information as required. Depending on the information challenged,
amendment involves the correction, deletion, or addition of information.
When appropriate, the amended information shall be transmitted to third
parties having access to the information in question.
9.6 The Officer
shall ensure that when a challenge is not resolved to the individual's
satisfaction, CEF of Canada shall record the unresolved challenge's
substance. When appropriate, the unresolved challenge's existence shall be
transmitted to third parties having access to the information in question.
10. Challenging Compliance
10.1 The Officer
is authorized to address a challenge concerning compliance with the
above principles.
10.2 The Officer
shall develop procedures to receive and respond to complaints or inquiries
about the policies and practices regarding the handling of personal
information. The compliance procedures shall be easily accessible and simple
to use.
10.3 The Officer
shall inform individuals inquiring about lodging complaints that relevant
complaint procedures exist.
10.4 The Officer
shall investigate all complaints. If a complaint is found to be justified,
the Officer shall take appropriate measures, including, if necessary,
amending this Policy and general polices and practices pertaining to
personal information entrusted to CEF of Canada.
|
|
Home About Us Training Ministries Resources Giving Missions Provincial Offices Kids Stuff Contact Us |