Personal Data Storage and Transfer Policy
1. General Provisions
1.1. This Policy describes the approach of the Administration of the
“Jaaj.Club” resource (hereinafter referred to as the “Resource” and the
“Administration”) to the collection, storage, use, and transfer of
personal data of individuals using the Resource (hereinafter referred to
as the “User”).
1.2. This Policy supplements the User Agreement and the Resource’s
Cookie Policy.
1.3. Users’ personal data is processed in accordance with applicable
law, including the laws of the Province of Quebec, Canada (in
particular, the Act respecting the protection of personal information in
the private sector, as amended by Law 25).
2. Person Responsible for the Protection of Personal Data
2.1. By default, the head of the Administration is the person
responsible for compliance with this Policy and applicable personal data
protection laws, unless another person has been appointed and separately
identified on the Resource.
2.2. Requests concerning the processing of personal data shall be
submitted in accordance with Section 11 of this Policy.
3. Categories of Personal Data Collected
3.1. Account Data. When registering on the Resource, the User is
required to provide an email address. This address is stored by the
Administration regardless of whether the User has made it available in
their public profile.
3.2. Public Profile Data. The User independently determines which
additional information to make available to other Users of the Resource,
including their name or pseudonym, as well as information about works
and books published by the User.
3.3. Payment Data. When purchasing paid books, bank card data and other
payment details are processed by a third-party payment processing
service; bank card data is not transmitted to the Administration and is
not stored on the Resource’s servers. The Administration stores
information about the fact, date, and amount of the transaction as
necessary to fulfill its obligations to the User and to comply with
accounting and tax requirements.
3.4. Technical Data. The Resource uses cookies and similar technologies
through which technical data may be collected (including IP address,
device type, and browser type). The collection and use of such data are
governed by the Resource’s Cookie Policy.
3.5. Communication Data. When the User contacts the Administration
through the contact form or by email, the information provided by the
User in such communication is processed.
4. Legal Bases and Purposes of Processing
4.1. The data referred to in Sections 3.1 and 3.3 is processed for the
purpose of performing the User Agreement (creation and administration of
the account and processing of payments).
4.2. The data referred to in Section 3.2 is processed on the basis of
the User’s consent, provided by voluntarily completing the public
profile.
4.3. The data referred to in Section 3.4 is processed in accordance with
and on the legal bases set out in the Resource’s Cookie Policy.
4.4. The data referred to in Sections 3.1 and 3.3 may also be processed
for the purpose of complying with applicable legal requirements.
5. Storage of Personal Data
5.1. The personal data referred to in Sections 3.1 and 3.3 is stored for
the duration of the User’s account and for the period necessary to
fulfill the Administration’s legal obligations after the account is
deleted (including accounting and tax requirements).
5.2. Public profile data (Section 3.2) is stored until it is modified or
deleted by the User or until the account is deleted.
6. Public Access to Profile Data
6.1. Information made publicly available by the User in their profile is
accessible to other Users of the Resource.
6.2. The User is solely responsible for choosing which information to
make publicly available and should not publish sensitive personal
information in their public profile.
6.3. The User may modify or delete information published in their public
profile at any time by making the appropriate changes in the account
settings.
7. Transfer of Personal Data to Third Parties
7.1. The Administration does not sell or exchange Users’ personal data.
7.2. The Administration transfers personal data to third parties
exclusively in the following cases: 7.2.1. to a third-party payment
processing service — for payment processing in accordance with Section
3.3; 7.2.2. to analytics service providers — in accordance with and to
the extent provided for by the Resource’s Cookie Policy; 7.2.3. to
authorized public authorities — in cases established by law.
7.3. Certain recipients of data referred to in Sections 7.2.1 and 7.2.2
may be located outside Canada. In such cases, the Administration takes
reasonable measures to ensure that the transferred data receives a level
of protection comparable to that provided under the applicable laws of
the Province of Quebec.
8. Data Security
8.1. The Administration takes reasonable technical and organizational
measures to protect personal data against unauthorized access,
alteration, disclosure, or destruction.
8.2. The Administration cannot guarantee the absolute security of data
that the User chooses to make publicly available.
8.3. In the event of a confidentiality incident that presents a risk of
serious harm to the User in connection with a breach involving their
personal data, the Administration shall notify the User and the
competent authority in the manner and within the time limits prescribed
by applicable law.
9. User Rights
9.1. With respect to their personal data, the User has the right: 9.1.1.
to access personal data processed by the Administration; 9.1.2. to
request correction of inaccurate or incomplete data; 9.1.3. to request
deletion of data in cases provided for by applicable law; 9.1.4. to
withdraw consent to the processing of data provided under Section 4.2,
without affecting the lawfulness of processing carried out before the
withdrawal; 9.1.5. to file a complaint with the Commission d’acces a
l’information du Quebec (CAI) or another competent authority.
9.2. The rights referred to in Section 9.1 may be exercised by
contacting the Administration in accordance with Section 11 of this
Policy.
10. Personal Data of Minors
10.1. In accordance with the User Agreement, the Resource is intended
for persons aged 16 or older. The Administration does not knowingly or
intentionally collect personal data from persons under that age.
11. Contact Information
11.1. For questions relating to this Policy, as well as to exercise the
rights set out in Section 9, the User may contact the Administration
through the contact form available on the Resource.
12. Changes to the Policy
12.1. The Administration may amend this Policy at any time. Changes take
effect upon their publication on the Resource.