Personal Information Protection Policy

1. Preamble

1.1. The Personal Information Protection Policy (the Policy) is implemented by Logisphère (the Company) in accordance with the Act to modernize legislative provisions respecting the protection of personal information (Law 25), which came into force on September 22, 2021. This law aims to modernize the regulatory framework relating to the protection of personal information.

2. Person Responsible for Implementation

2.1. The President of Logisphère is responsible for the implementation of this policy and, more generally, for the protection of personal information within the Company.

2.2. In order to strengthen the protection of personal information and promote the harmonization of practices that guide actions and influence strategies, a committee dedicated to the protection of personal information has been established.

2.3. Employees of the Company are required to cooperate in the search for documents and information that are the subject of any access request.

2.4. Employees are required to ensure the protection of personal information and confidential information.

3. Personal Information Protection Committee

3.1. The Personal Information Protection Committee is made up of the following members:

• The person responsible for the protection of personal information within the Company;
• The heads of the Company's various functions (Administration, Culture and Engagement, Business Development);
• Any other person whose expertise is required.

3.2. The person responsible for the protection of personal information acts as chair of the Committee.

3.3. Meetings are called by the chair of the Committee.

3.4. The Committee's responsibilities are as follows:

• Ensure the application of this policy and best practices regarding the protection of personal information;
• Define and approve orientations regarding the protection of personal information;
• Approve governance rules;
• Issue opinions and propose protective measures for any information system acquisition, development or redesign project;
• Plan and ensure the implementation of training activities related to the protection of personal information;
• Promote the orientations, directives and decisions issued by the Commission d'accès à l'information;
• Regularly reassess the level of protection of personal information;
• Ensure the handling of complaints related to the protection of personal information.

4. Complaints Regarding the Protection of Personal Information

4.1. Complaints regarding the protection of personal information may be submitted by email to .

4.2. Complaints will be assessed within a reasonable time by the Personal Information Protection Committee, which may follow up on them.