Preamble

Gastier M.P. Inc. and Gastier International Inc. (hereinafter “Gastier”) recognize their legal and moral responsibility to protect the personal information (hereinafter “the information”) they hold. This information may originate from their employees or from any individual who entrusts them with personal information.

In accordance with the Act respecting the protection of personal information in the private sector (CQLR, chapter P-39.1), the person responsible for the protection of personal information is tasked with implementing and ensuring compliance with this Policy. Gastier has appointed the Director of Finance & Administration as the person responsible for the protection of personal information.

Objective

The purpose of this Policy is to provide information to individuals whose personal information is collected, used, and disclosed by Gastier.

Scope and application

This Policy applies to all Gastier clients (current, former, and prospective), as well as to individuals who work for or on behalf of our professional clients and/or suppliers, all visitors to the Gastier website, all job applicants, and any other individuals who contact Gastier.

To the extent that the information has been provided to Gastier by professional clients and/or suppliers, such parties assume certain responsibilities imposed by law.

Gastier may also collect, use, or disclose information as a subcontractor/service provider for one of its partners, in which case that partner would be responsible for processing the information. In such cases, you should refer to the privacy policy of the partner in question.

If you choose not to provide your personal information when it is required for us to provide you with information or to establish a contractual relationship, we will not be able to (i) provide you with further information about our services and products, (ii) offer you our services or products, or (iii) establish a contractual relationship with you.

Definition

Personal information generally refers to any information (regardless of its format) relating to an identifiable individual. A person may be identified directly (for example, through an identifier such as their name or identification number) or indirectly (for example, through one or more physical, physiological, genetic, psychological, economic, cultural, or social factors specific to that individual’s identity).

Examples of personal information include your name, mailing address, email address, IP address, and bank account number.

What personal information do we collect ?

• Identification information: first name, last name, mailing address, telephone number, email address, date of birth;
• Electronic information: IP address (from a computer, tablet, or smartphone), and other electronic identifiers collected through automatic collection technologies such as cookies;
• Contract-related information, such as contracts entered into with Gastier, their start and end dates, pricing and any indexation parameters, as well as purchase and contact history;
• Information about your use of our products and services, such as how you use our online services;
• Financial information, such as your bank account number and payment history;
• Traffic and location data;
• Consumption and technical information, including measurement data, information relating to your connection(s), installations, technical infrastructure, and other information related to the delivery of installation and maintenance services, to the extent that it can identify you;
• Other information provided to Gastier (as part of complaint processing, defects, or other contact requests);
• Details of other products and/or services;
• Training;
• Employment history;
• References and assessment results provided by recruitment agencies;
• Your curriculum vitae (CV);

• Information from your cover letter and your job application context.

   

Categories of individuals from whom Gastier collects personal information:

• Website visitors;
• Current, former, and prospective clients (professionals), as well as their employees and representatives;
• Current, former, and prospective suppliers, as well as their employees and representatives;
• Job applicants who access Gastier’s website and/or “Careers” web pages.

How do we collect your personal information?

Information collected directly from the individual

Gastier collects personal information that you provide directly when interacting with our services. For example, when you contact us through the contact form on our website, you may be asked to provide your name and email address.

In addition, when you contact us to ask a question or submit a business proposal, we also collect the information you voluntarily provide or that is necessary for us to respond to your inquiry or enter into an agreement with you.

Finally, when you contact us regarding employment, we collect the information you submit as part of your application.

Personal information we collect by automated means

Like most online services, we may use cookies and other technologies such as pixels, web storage, and unique advertising identifiers to collect information about your activity, browser, and device. These technologies are small text files that we store on your browser or device and that enable us to provide and improve our products and services.

You can adjust your browser or device settings to prevent or limit the acceptance of these technologies; however, doing so may prevent you from benefiting from certain features.

We and our service providers may automatically collect certain technical information from your computer or mobile device over time and across different websites when you use our website, such as your IP address, location, browser type, operating system, pages you view on our website, pages you visited immediately before and after accessing the website, and keywords you enter on our website.

This information allows us to recognize you and personalize your experience if you return to our website, and to improve it.

Personal information from other sources

Gastier may collect personal information from various third-party sources (including our current and prospective suppliers and clients, and employment or recruitment agencies), from publicly available sources (including Google and LinkedIn), and from the references you provide as part of your job application.

How do we use your personal information?

We may use personal information for the following purposes, or otherwise with the individual’s consent or as permitted or required by law:

Providing or delivering our products and services. We use your personal information to provide or deliver our products and services, for example:

• Coordinating procurement and personnel, as well as project planning and management;
• Managing information related to maintenance, outages, and repairs of installations or technical infrastructure for service delivery;
• Entering into and/or performing agreements for installation or maintenance services, and providing “software as a service” solutions;
• Enforcing or applying the website terms of use or investigating potential violations.

Managing our website. When you visit our website, we may use your personal information to manage and facilitate its use, which may include the use of cookies and similar technologies.

Managing our business activities. We use your personal information to manage our business operations, including:

• Ensuring the security of our information, as well as our systems and networks;
• Complying with legal or regulatory obligations, requirements, and guidelines;
• Facilitating the sale of one or more parts of our business or reorganizing our company;
• Meeting audit, assessment, request, or regulatory requirements.

Communicating with you, including for marketing purposes. We use your personal information to communicate with you in various ways and for multiple purposes, for example:

• Improving our products and services;
• Informing you about relevant products and services;
• Responding to requests submitted through our website contact form or one of our contact centers.

Processing job applications. When you submit a job application, we may use your personal information for the following purposes:

• Reviewing your application and assessing your suitability for the position applied for or for other roles matching your profile;
• Obtaining and verifying information or references about you from third parties;
• Informing you about job offers, events, initiatives, or publications that may be of interest to you, based on your request.

Other purposes authorized or required by law. We will not use personal information for other purposes without your consent unless authorized or required by law, for example to comply with a legal obligation or to protect the rights (including property rights) and interests of Gastier.

We may also anonymize or aggregate personal information so that it no longer allows you to be identified, directly or indirectly. We retain and use such information in anonymized form unless otherwise permitted by applicable law. We may use anonymized or aggregated information for any legitimate purpose in accordance with applicable law, including to better understand our clients and to evaluate, improve, and develop our products and services.

How do we disclose personal information?

With our subsidiaries: We may share your personal information with Gastier’s affiliated companies, including internal departments involved in evaluating your application (for example, Human Resources).

With our service providers and vendors: Third-party service providers such as our IT providers, advertising agency, recruitment agencies, and contact centers.

With our business partners: We may share your personal information with companies that market or provide products and services related to our own (for example, installers of energy and energy-efficiency products). We will obtain your consent before sharing your personal information with such companies where required by law.

Business Transactions: We may disclose and transfer personal information as part of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or shares (including in connection with bankruptcy or similar proceedings), but only to the extent that your personal information is necessary for such transactions. In such cases, we will comply with applicable legal requirements.

For legal and security purposes: We may use or disclose personal information if we deem it necessary: (1) If we determine that a violation of the Policy has occurred, to assert our rights or enforce our terms of use; (2) If we believe such disclosure is necessary to identify, contact, or bring legal action concerning the rights and property of Gastier or its affiliates; (3) To assert our rights or protect against unauthorized access to our systems or any improper use of our services or products; (4) To comply with laws, regulations, court orders, subpoenas, or other similar requests from authorities; (5) To protect your safety and that of others; (6) To assist in fraud prevention or investigations.

Other situations: We may share personal information in other situations where we notify you and obtain your prior consent (where required), or as otherwise required or permitted by law. We may also share anonymized information (including aggregated data) with third parties, provided that such information can no longer be directly or indirectly associated with a specific individual.

Transfer of your personal information outside Canda

Some of our external third-party service providers are located outside Canada, including in the European Union, and their processing of your personal information will therefore involve transferring information outside Canada. Organizations located outside Canada may not be subject to personal information protection laws that provide you with the same rights and protections as those available in Canada. As a result, your personal information may be subject to the laws of a foreign jurisdiction, including laws that permit or require the disclosure of information to law enforcement or national security authorities upon request.

How long do we retain your personal information?

Personal information will not be retained for longer than necessary to fulfill the purposes for which it was collected. The retention period may therefore vary depending on those purposes.

The information we retain will be handled in accordance with this Policy and our legal and regulatory obligations.

How do we protect personal information?

Gastier makes every effort to protect its network against unauthorized access and to ensure the confidentiality of its clients’ personal and professional information.

Gastier implements policies and practices designed to safeguard your personal information. Depending on the volume and sensitivity of the information, the purposes for which it is used, and the format in which it is stored, we implement a combination of measures to protect your personal information, including:

• Internal policies and procedures that define the roles and responsibilities of our employees throughout the information lifecycle and limit access on a “need-to-know” basis;
• Technical safeguards, where information is collected or stored electronically, such as encryption, firewalls, passwords, antivirus software, and similar measures;
• A designated privacy officer responsible for overseeing Gastier’s compliance with applicable privacy laws;
• Employee training on privacy protection and information security;
• Procedures for receiving, investigating, and responding to complaints or inquiries regarding Gastier’s information handling practices;
• Contractual safeguards to ensure that subcontractors with whom we share personal information maintain adequate security standards. For example, we generally require our subcontractors to limit their use and retention of personal information to what is necessary to provide their services and to notify us in the event of an actual or suspected privacy breach. We also seek to monitor and verify their compliance with these requirements through various means (e.g., on-site inspections where possible, audits, interviews, and certification evidence).

What are your rights regarding personnal information protection?

You may have the right to access the personal information we hold about you and to request its correction, in accordance with the laws applicable in your country of residence, subject to any exceptions set out in those laws. To access or correct your personal information, please contact us in writing using the contact details provided in the “Contact Us” section below.

Your right to withdraw consent

Where processing is based on your consent, you also have the right to withdraw your consent at any time. However, such withdrawal only has effect for the future and does not affect the validity of processing carried out prior to the withdrawal.

If you withdraw your consent, we may continue processing your personal information only if another legal basis applies.

Emails

Email communications are intended to keep you informed about Gastier’s news, products, and events, as well as other specific purposes that may arise. You may opt out of receiving promotional emails from us at any time by clicking “unsubscribe” in any email you receive.

Please note that even if you opt out of receiving commercial messages, we may still contact you in connection with our website, in accordance with applicable law (for example, to send you a customer service message or a service notification). Additionally, it may take up to ten (10) business days for your preference change to be reflected across all our records.

Minors

We do not knowingly request or collect personal information from children under the age of 14, and you may not register or conduct transactions on our website if you are under 14. If we learn that a child under 14 has provided us with personal information without verifiable parental or legal guardian consent, we will take reasonable steps to delete such information.

How can I exercise my rights regarding personnal information protection?

If you have any questions about how we process your personal information, you may contact us at rh@gastier.com.

To exercise your right of access and to prevent any unauthorized disclosure of your personal information, we may ask you to provide proof of identity. In case of doubt or uncertainty, we will first request additional information. If it is not possible to verify your identity by other means, we may also ask you to provide a copy of the front of your identity document.

The rights described above may be exercised in accordance with the requirements and restrictions provided by law. The provisions of applicable data protection laws shall therefore prevail over the description of rights set out above.

How can you contact us?

Gastier has designated Jessica DESROCHERS (Director, Human Resources, Health and Safety & Communications) as the person responsible for the protection of personal information (“PRPI”).

If you believe that your question or request regarding privacy has not been properly addressed, or if you would like more information about this Privacy Policy, you may submit a written request to the PRPI at:
jessica.desrochers@gastier.com

Policy updates

Gastier may review and update this Policy as necessary to remain current with laws and regulations, new technologies, and standards. As such, this Privacy Policy may be amended from time to time.

Please refer to the “Review Date” at the top of this page to see when it was last updated. If the changes we make are material, we will highlight them where required by applicable laws, including by email (sent to the email address specified in your account) or by means of a notice on the website before the changes take effect. We encourage you to regularly review our website to stay informed about our privacy practices.

By continuing to use our website after the revised version of this Policy has been published, you accept the changes made to this Policy.

This policy was last updated on May 28, 2026.