Policy
Frastell is committed to protecting the privacy of personal information of tenants, employees, contractors and other individuals served by or providing service to Frastell and the Ownership. We value the trust of those we deal with and recognize that maintaining this trust requires that we be transparent and accountable in how we treat personal information.
During the course of our day-to-day activities, we frequently gather and use personal information. Anyone from whom we collect such information should expect that it will be carefully protected and that any use of or other dealing with this information is subject to consent. Our privacy practices and designed to achieve this.
Definition of Personal Information
Personal information is any factual information than can be used to distinguish, identify or contact a specific individual. This information can include an individual's opinions or beliefs, as well as facts about, or related to, the individual. Exceptions: business contact information and certain publicly available information, such as name, addresses and telephone numbers as published in telephone directories, are not considered personal information.
Privacy Practices
Personal information gathered by our organization is kept in confidence. Our personnel are authorized to access personal information based only on their need to deal with information for the reason(s) for which it was obtained. The information is not disclosed or shared more widely than is necessary to achieve the purpose for which it was gathered.
We ensure the integrity of this information is maintained and to prevent it's being lost or destroyed. We collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in light of circumstances.
Upon written request, individuals will be informed of the existence, use and disclosure of all their personal information held by Frastell.
Model Code for the Protection of Personal Information. Any complaints regarding Frastell's adherence to these principles should be made with the President & CEO.
Appendix A
Ten Privacy Principles
Frastell has adopted the principles of the Canadian Standards Association Model Code for the Protection of Personal Information to ensure that all information is properly collected, used only for the purposes of for which is was collected, and disposed of in a safe and timely manner when no longer needed. These principals are:
- Accountability
- Identifying Purposes
- Consent
- Limiting Collection
- Limiting Use, Disclosure and Retention
- Accuracy
- Safeguards
- Openness
- Individual Access
- Challenging Compliance
Accountability
Frastell is responsible for maintaining and protecting the personal information under its control.
Identifying Purposes
Upon written request Frastell shall identify the purposes for which it is collection personal information. Persons collecting personal information on behalf of Frastell should be able to explain to individuals the purposes for which the information is being collected.
Consent
Individuals shall be informed and their consent obtained for the collection, use and disclosure of their personal information, except where otherwise required or permitted by law. When it is appropriate, the written consent of the individual shall be obtained.
Limiting Collection
Frastell shall only collect the personal information that is required to meet the purposes identified by Frastell. All such information shall be collected by fair and lawful means.
Limiting Use, Disclosure and Retention
Personal information shall only be used or disclosed for the purpose(s) for which it was collected unless the individual has otherwise consented, or when it is required or permitted by law. Personal information shall only be retained for the period of time required to fulfill the purposes for which it was collected.
Accuracy
Personal information shall be maintained in as accurate, complete and up-to-date form as is necessary to fulfill the purposes for which it was collected.
Safeguards
Adequate security safeguards shall protect personal information. Safeguards include physical measures such as locked file and or offices, such as the use of passwords and encryption.
Frastell shall work to ensure that its employees are aware of the importance of maintaining the confidentiality of personal information.
Openness
Frastell shall make available upon written request to individuals on whom it may keep records, all relevant information about Frastell practices that apply to the management of their personal information.
Individual Access
Upon written request, an individual shall be informed of the existence, use and disclosure of their personal information and be given access to it, except when prohibited by law. Individuals may verify the accuracy and completeness of this information, and may request that it be amended, if appropriate.
Challenging Compliance
An individual may challenge Frastell's compliance with these Ten Privacy Principles by directing their written questions, concerns or complaints to Frastell's President.