TIETOSUOJASELOSTE TIETOSUOJASELOSTE
GLOBAL CCM PRIVACY NOTICE
(last updated July 1, 2024)
Sport Maska Inc. (“CCM”, “we” or “us”) is committed to protecting the privacy and security of your personal information. This Global Privacy Notice (“Notice”) describes how we collect and use personal information about you in accordance with applicable data protection laws in the countries where CCM operates. Please read it carefully. If you are a California resident, please review Section 17, entitled “Your California Privacy Rights.” If you are a resident of Canada, please review Section 18, entitled “If You Reside in Canada.”
This Notice applies to your use of https://ccmhockey.com/en (the “Website”) regardless of whether you access or use it via a computer, mobile device or another platform. This Notice also applies to personal information we obtain through email communications, our online channels (including other websites operated by CCM, online product catalogs, mobile applications and social media websites that reference this Notice) and to personal information you provide to us through offline interactions (e.g., at a retail store, in the CCM Performance Lab or during an event) (all such online channels, the Website, and the offline interactions shall collectively be referred to herein as the “Services”).
By submitting personal information to CCM or its service providers and agents and by using our Services, you agree that we may collect, use and disclose personal information about you in accordance with this Notice and as permitted or required by law. Subject to legal and contractual requirements, you may refuse or withdraw your consent to certain of the identified purposes at any time by contacting us at https://ca.ccmhockey.com/en/Customer-Service/Contact-Us. If you refuse or withdraw your consent, we may not be able to provide you or continue to provide you with certain Services or information which may be of value to you.
PLEASE REVIEW THIS PRIVACY NOTICE BEFORE USING OUR SERVICES OR CREATING ANY USER ACCOUNT IN CONNECTION THEREWITH. IF YOU DO NOT AGREE WITH THIS NOTICE, DO NOT USE OUR SERVICES NOR CREATE ANY USER ACCOUNT. THIS NOTICE GOVERNS THE USE OF CCM SERVICES AND APPLIES TO ANY PERSONAL INFORMATION YOU MAY SUBMIT TO CCM. BY SUBMITTING ANY PERSONAL INFORMATION THROUGH OUR SERVICES, YOU AGREE TO BE BOUND BY THE TERMS OF THIS NOTICE.
TABLE OF CONTENT
1. INFORMATION ABOUT US
2. WHAT PERSONAL INFORMATION DO WE COLLECT AND FOR WHAT PURPOSES?
3. MARKETING
4. WEBSITE INFORMATION
5. CONTENT
6. EMPLOYEE INFORMATION
7. PROTECTION OF CHILDREN’S PERSONAL DATA
8. LEGAL CLAIMS
9. INFORMATION WE RECEIVE FROM THIRD PARTIES
10. SPECIAL CATEGORIES OF DATA
11. WHY ELSE DO WE USE YOUR INFORMATION
12. SHARING YOUR INFORMATION
13. WHERE WE STORE YOUR INFORMATION
14. DATA SECURITY
15. HOW LONG WILL WE KEEP YOUR INFORMATION FOR?
16. YOUR RIGHTS
17. YOUR CALIFORNIA PRIVACY RIGHTS
18. IF YOU RESIDE IN CANADA
19. CHANGES TO THIS NOTICE
20. CONTACT US
1. INFORMATION ABOUT US
1.1 Sport Maska Inc., having its registered office at 8275 Trans-Canada, Suite B110 Montreal, Quebec H4S 0B6 Canada), is the controller of data/information processing for this Website according to applicable privacy laws. For all (mobile) applications that refer to this Notice, CCM is the controller of the data processing. CCM is committed to take all responsibility for the protection and security of your personal information/data.
1.2 If you have any questions, please contact us at https://ca.ccmhockey.com/en/Customer-Service/Contact-Us.
2. WHAT PERSONAL INFORMATION DO WE COLLECT AND FOR WHAT PURPOSES?
2.1 Personal information means any information about an individual from which that person can be identified. It does not include personal information where all references to the identity of the relevant individual have been removed (anonymous personal information).
2.2 We may collect, use, store and transfer different kinds of personal information about you. Those kinds of personal information can be categorized as follows:
Identity Information includes: first name and last name, date of birth and gender (as appropriate).
Contact Information includes: email, address, phone number and phone call records.
Financial Information includes: any payment information (e.g., credit card number and related billing information).
Physiological and performance data includes: metrics used to measure your body (e.g., equipment size and temperature) and biomechanical characteristics (e.g., shot speed, shot accuracy, decision time, skating time) measured in our Performance Lab. This may also include 3D scans of parts of your body, which are generated to ensure a personalized fit and optimize the safety benefits of our state-of-the-art equipment with your consent, as appropriate.
Transaction Information includes: details about payments to you, refunds, and purchase of our products or services.
Commercial Information includes: your purchasing history and preferences.
Technical Information includes: internet protocol (IP) address and geolocation information, cookies and other technology on the devices you use to access this Website.
Internet Activity Information includes: browsing history, search history, interactions with our Website and online advertisements, and user-generated/submitted content.
Marketing and Communications Information includes: Inferences we make about you based on the above information to predict your characteristics and preferences.
Other categories of personal information as permitted or required by applicable laws, with appropriate preliminary disclosures to inform you when such categories of personal information are collected.
2.3 We have set out below, in a table format, a summary of the ways we plan to use your personal information, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Purposes for which we will use your personal information
Purpose/Activity
Type of personal information
Lawful basis for processing including basis of legitimate interest
Who do we share your personal information with for these purposes
Entering into and managing our relationship with you
(a) Identity
(b) Contact
(c) Financial
(d) Transaction
(e) Marketing and communications
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to recover sums due to us)
(c) Email marketing
(d) Customer relationship management
We share your personal information for this purpose with our trusted third parties and service providers, as needed, and as described in the sections that follow
To enable the proper functionality of our business, allowing us to serve you best
(a) Identity
(b) Contact
(c) Financial
(d) Commercial
(e) Technical
(f) Internet
(g) Marketing and communications
(a) For improvements to our operations
(b) For fraud detection
(c) For payment processing
(d) Enable our ecommerce business
(e) Shipping purposes
(a) This personal information is shared with our third party payment processor
(b) We share this information with third parties and service providers including: Salesforce Commerce cloud, Signifiyd
To better understand the performance of our products and to research and develop new products
(a) Identity
(b) Contact
(c) Physiological and performance
(a) For improvements to our operations.
We share this information with third parties and service providers such as Compusense for data processing and storage.
To enable effective marketing/advertising efforts of CCM
(a) Identity
(b) Contact
(c) Financial
(d) Transaction
(e) Commercial
(f) Technical
(g) Internet
(h) Marketing and communications
(a) For our Website analytics
(b) In order to process the product reviews you may submit
(c) To improve our marketing and advertising activities
This personal information is shared with a variety of analytics and digital marketing providers, including: Facebook, Bing, Snapchat, Yotpo, Google Analytics and Klaviyo
Other purposes that are permitted or required under applicable law.
As disclosed before the collection, unless permitted or required otherwise under applicable law.
As disclosed before the collection, unless permitted or required otherwise under applicable law.
As disclosed before the collection, unless permitted or required otherwise under applicable law.
2.4 Correspondence or interaction (for example by email, telephone, post, SMS, social media, or via our Website) between you and us, may include personal information (such as Identity Information and Contact Information) in that correspondence. This may include enquiries, reviews, follow-up comments or complaints lodged by or against you and disputes with you or your organization.
We will keep and use that information to carry out our contract with you (if applicable), to comply with any legal requirements for us to maintain certain records or carry out certain verifications, and/or for our legitimate interests in dealing with a complaint or enquiry and administering your (or your organization’s) account or order and any products or benefit from any Services that we offer, as well as to review and improve our offerings, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
3. MARKETING
3.1 We may use your Identity Information and Contact Information in order to send you information about our products and Services which you might be interested in. We may collect such information directly from you, or through a third party or service provider.
3.2 You always have the right to “opt out” of receiving our marketing materials. You can exercise the right at any time by contacting send you any marketing emails, we will always provide an unsubscribe option to allow you to unsubscribe from further commercial communications. If we to opt out of any further marketing emails. If you “opt-out” of our marketing materials you will be added to our do-not-contact list to ensure we do not accidentally send you further marketing.
If you opt-into our SMS messaging program, you provide your express written consent for us to deliver or cause to be delivered telemarketing and advertising messages from an automatic telephone dialing system at the number used when opting in. Such consent shall not be interpreted to suggest or imply that any or all such messages are in fact sent using an automatic telephone dialing system. Consent is not a direct or indirect condition of any purchase. Reply HELP for help and STOP to opt-out. Message and data rates may apply. By providing your consent, you agree to our Terms of Use and this Notice.
3.3 If you are an existing customer, we use your contact details as necessary to maintain our existing business relationship with you and may send you marketing information that promotes our products and Services (including by electronic communications) unless you request to opt out of receiving such latter electronic communications.
3.4 If you are not an existing customer, and are not acting in a professional capacity as part of a company or LLP, we will only contact you for marketing purposes with your consent (whether we have collected your details directly from you, or through a third party or service provider).
3.5 We never share your personal information with third parties for marketing purposes unless we have your “opt-in” consent to share your details with a specific third party or service provider for them to send you marketing. We do use third parties or service providers to send out our marketing, but we only allow them to use that information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
3.6 We retain your details on our marketing list until you “opt-out” at which point we add you to our do-not-contact list. We keep that do-not-contact list indefinitely to comply with our legal obligations to ensure we don’t accidentally send you any more marketing.
3.7 When we send marketing emails to you, we use “web beacons” to collect information about when you open the email, your IP address and browser or email client type, and other similar information. We do this as necessary for our legitimate interests in reviewing and considering our direct marketing activities. We keep this information to send you relevant and personalized content, to improve your general experience and to adjust the quantity of communications we send you.
3.8 We may use any of type of personal information as described in subsection 2.2 to tailor our marketing materials to your needs and interests. To achieve this objective, we may share your personal information with third parties or service providers for the purposes of Website, marketing and advertising analytics.
4. WEBSITE INFORMATION
4.1 We may collect information about you and your use of our Website via technical means such as cookies, webpage counters and other analytics tools. This may include your IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this Website. We use this as necessary for our legitimate interests in administering and improving our Website and its content, to ensure it operates effectively and securely, and to develop our business and inform our marketing strategy. We may also create aggregate statistical data from that information (for instance, overall numbers of Website visitors) which is not personal information about you.
4.2 We, or other advertisers, may also use this information to serve advertisements to you. Where those adverts are targeted, this may involve using Website information and information we (or our advertisers working on our behalf) have obtained from other entities. This won’t include information such as your name or contact details. Where our adverts are displayed to you using your information, your information is used as necessary for our legitimate interests in marketing to you.
4.3 We keep this Website information about you for a maximum of 24 months from when it is collected or the relevant cookie expires.
4.4 Our Website may, from time to time, contain links to other websites, plug-ins and applications. Clicking on those links or enabling those connections may allow other entities to collect or share data about you. We do not control these other websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the Notice of every website you visit.
5. CONTENT
5.1 This is information about you which you provide when you post content on our Website. This may include reviews, photographs, videos and other content which you post on our Website.
5.2 We may display and publish this information on our platforms as part of our contract with you or as necessary for our legitimate interests in providing content to our users in accordance with our Terms of Use.
5.3 This information is kept for as long as you have an account with us and may be retained and displayed indefinitely after you close your account.
6. EMPLOYEE INFORMATION
If you work for one of our customers, suppliers or business partners, the information we collect about you may include your contact information, details of your employment and our relationship with you. This information may be collected directly from you, or provided by your organization. Your organization should have informed you that your information would be provided to us, and directed you to this Notice. We use this as necessary for our legitimate interests in managing our relationship with your organization. If we have a business relationship with you or your organization, we may receive information about you from your organization.
7. PROTECTION OF CHILDREN’S PERSONAL DATA
7.1 The protection of children's personal data is extremely important. CCM understands that it has a responsibility to protect the privacy of children and has no intention of collecting the data of children under the age of 13.
7.2 This Website and other CCM online properties are directed to, and meant to be used by, adults. We do not knowingly collect any information from persons under the age of 13. If we have reason to believe that a child under the age of 13 has attempted to submit a registration application, this will be rejected with the notification that applications from children under the age of 13 are not accepted. If we become aware that we have collected any personal information from a child under 13, we will delete that information. We ask parents and other guardians to check on and monitor their children's Internet usage in order to protect them.
8. LEGAL CLAIMS
Where we consider there to be a risk that we may need to defend or bring legal claims or other actions that we might take to protect our rights or legal interests, we may retain your personal information as necessary for our legitimate interests in ensuring that we can properly bring or defend legal claims. We may also need to share this information with our insurers or legal advisers. How long we keep this information for will depend on the nature of the claim and how long we consider there to be a risk that we will need to defend or bring a claim.
9. INFORMATION WE RECEIVE FROM THIRD PARTIES
9.1 We may also receive information about you from the following sources:
9.1.1 Our service providers and third parties. We work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies) who may provide us with information about you, to be used as set out above.
9.1.2 Businesses we have bought. If we have acquired another business, or substantially all of its assets, which originally held your information, we will hold and use the information you provided to them, or which they otherwise held about you, in accordance with this Notice, to the extent that our use of your personal information is consistent with the purpose for which it was originally collected.
9.1.3 Our other channels. This is information we receive about you if you use any of the other websites we operate or the other services or products we provide. In this case we will have informed you and received your consent when we collected that data if we intend to share those data internally and combine it with data collected on this Website. We will also have told you for what purpose we will share and combine your data.
9.1.4 Our partners. We obtain information from the following publicly available sources: Facebook, Instagram, TikTok, YouTube, X (Twitter) as well as from private sources and partners of ours provided appropriate consents have been sought and obtained.
10. SPECIAL CATEGORIES OF DATA
Generally, we do not collect any “special categories” or more sensitive personal information about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data, as well as information about criminal convictions and offences).
However, if you decide to purchase any custom equipment (e.g., 3D printed liners for masks, helmets, and skates), we may require to scan parts of your body (e.g., feet or head), as appropriate to ensure an optimal fit and maximize the safety benefits of our state-of-the-art equipment. This type of physiological data is considered as a special category of data or sensitive personal information under applicable law in certain jurisdictions. We will ensure that such data is collected and processed in compliance with applicable law.
11. WHY ELSE DO WE USE YOUR INFORMATION
11.1 Common uses of your information. We will only use your personal information when the law allows us to do so. Although in limited circumstances we may use your information because you have specifically consented to it, we generally use your information in the ways set out in this Notice because:
11.1.1 we need to perform a contract we have entered into with you;
11.1.2 where permitted by law, it is necessary for our legitimate interests (or those of another entity) and your interests and rights do not override those interests;
11.1.3 we need to comply with a legal obligation; or
11.1.4 we need to protect your interests (or someone else’s interests) or where it is needed in the public interest (although these circumstances are likely to be rare).
11.2 Change of purpose. We will only use your personal information for the purposes for which we collected it as set out in this notice, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
12. SHARING YOUR INFORMATION
As well as any sharing listed above, we may also share your information with third parties, service providers and affiliated companies in the Sport Maska group. These entities are required to respect the security of your personal information and to treat it in accordance with the law and in a manner consistent with this Notice.
12.1 Why might we share your personal information with other entities?
We may share your personal information with other entities if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our agreements with you, or to protect the rights, property, or safety of us, our customers, or others or where we have another legitimate interest in doing so. This may include exchanging information with other companies and organiaztions for the purposes of fraud protection and credit risk reduction. We may also share your personal information with suppliers, merchants and retailers who require such information for the purpose of payment processing, order fulfillment, local delivery (for example when we fulfil your custom product order) or enabling us to properly carry out our business such that we can serve you best.
12.2 Which third parties or service providers process your personal information?
In addition to the third party merchants and retailers with whom we may share your information for the purpose of order fulfilment and local delivery, we also may need to share your personal information with third-party service providers (including contractors and designated agents) so that they can carry out their services. Such third party service providers include our email service provider, Dialog Insight; our Data Management Platform supplier, Eulérian; our payment processor, Moneris; our scan technology partner, Techmed; our local sales tax identifier, Avalara; our shipping and delivery carrier, FedEx; our social media API supplier, Full Contact; our email/sms marketing service provider, Klaviyo; our analytics and reporting service providers, Google Analytics and Compusense; our product review platform, Yotpo; our online advertising service providers, Meta, Bing, Google and Snapchat ads; our fraud detection service provider, Signifyd; and our ecommerce platform, Salesforce Commerce Cloud who use the data in order to fulfil your order and provide a more personalized and relevant experience.
12.3 When might we share your personal information with affiliated companies?
We may share your personal information with affiliated companies in the Sport Maska group as part of our regular reporting activities on company performance, in the context of a business reorganization or group restructuring exercise, and for system maintenance support and hosting of data.
12.4 How secure is your information with third parties or service providers and affiliated companies?
All our service providers and affiliated companies are required to take appropriate security measures to protect your personal information. Where service providers or affiliated parties process your personal information on our behalf as “data processors” they must do so only on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
12.5 What about other third parties?
We may share your personal information with other third parties in the context of the possible sale or restructuring of the business where necessary in connection with the purposes which your information was collected for. We may also need to share your personal information with a regulator or to otherwise comply with the law.
13. WHERE WE STORE YOUR INFORMATION
13.1 Our office headquarters are based in Canada and our main data center is located in Canada. Where required to perform our contract with you or for our wider business purposes, the information that we hold about you may be transferred to, and stored at, other destinations outside the UK and the EU. We will take all steps reasonably necessary to ensure that your personal information is treated securely and in accordance with this Notice.
13.2 Some countries or organizations outside of the UK and the EU which we may transfer your information to will have an “adequacy decision” in place, meaning the EU considers them to have an adequate data protection regime in place. These are set out on the European Commission website: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.
13.3 If we transfer data to countries or organizations outside of the UK and the EU which the EU does not consider to have an adequate data protection regime in place, we will ensure that appropriate safeguards (for example, model clauses approved by the EU or a data protection authority) are put in place where required. To obtain more details of these safeguards, please contact us https://ca.ccmhockey.com/en/Customer-Service/Contact-Us
14. DATA SECURITY
14.1 As well as the measures set out above in relation to sharing of your information, we have put in place appropriate internal security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
14.2 We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where necessary.
15. HOW LONG WILL WE KEEP YOUR INFORMATION FOR?
15.1 We have set out above indications of how long we generally keep your information. In some circumstances, it may be necessary to keep your information for longer than that in order to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
15.2 To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
15.3 In some circumstances we may anonymize your personal information as required or permitted under applicable laws so that it can no longer be associated with you, in which case applicable laws may allow us to use such information without further notice to you.
16. YOUR RIGHTS
16.1 Data protection law gives you a number of rights when it comes to personal information we hold about you. The key rights are set out below. Under certain circumstances, by law you have the right to:
16.1.1 Be informed in a clear, transparent and easily understandable way about how we use your personal information and about your rights. This is why we are providing you with the information in this notice. If you require any further information about how we use your personal information, please let us know.
16.1.2 Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
16.1.3 Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
16.1.4 Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it (for instance, we may need to continue using your personal data to comply with our legal obligations). You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
16.1.5 Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to us using your information on this basis and we do not have a compelling legitimate basis for doing so which overrides your rights, interests and freedoms (for instance, we may need it to defend a legal claim). You also have the right to object where we are processing your personal information for direct marketing purposes.
16.1.6 Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
16.1.7 Request the transfer of your personal information to another party where you provided it to us and we are using it based on your consent, or to carry out a contract with you, and we process it using automated means.
16.1.8 Withdraw consent. In the limited circumstances where we are relying on your consent (as opposed to the other bases set out above) to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another compelling legitimate interest in doing so.
16.1.9 Lodge a complaint. If you think that we are using your information in a way which breaches data protection law, you have the right to lodge a complaint with your national data protection supervisory authority.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, withdraw your consent to the processing of your personal information or request that we transfer a copy of your personal information to another party, please contact us at https://ca.ccmhockey.com/en/Customer-Service/Contact-Us
16.2 No fee required. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we are not required to provide you access to your personal information more than twice in a twelve-month period.
16.3 What we may need from you. We may need to request specific information from you to help us understand the nature of your request, to confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
16.4 Timescale. Please consider your request responsibly before submitting it. We will respond to your request as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we will let you know.
17. YOUR CALIFORNIA PRIVACY RIGHTS
17.1 Shine the Light Law. Cal. Civ. Code 1798.83 (known as the ‘Shine the Light’ law) allows California residents to request disclosure of the personal information companies share with third parties for those third parties’ direct marketing purposes. As permitted under California law, in lieu of providing this information, we have adopted a policy of permitting you to opt-out of such disclosures of your personal information. Once we process your opt-out request, we will not disclose your personal information for those third parties’ direct marketing purposes. To opt-out, please contact our customer service department.
17.2 CCPA Privacy Notice.
17.2.1 The California Consumer Privacy Act (“CCPA”) provides California residents with certain rights regarding their personal information that is collected by businesses, including the right to request that a business disclose what personal information it has collected about them, the right to request the deletion of personal information collected from them, the right to opt-out of the sale of their personal information (if the business sells personal information), and the right not to receive discriminatory treatment for exercising any of their privacy rights under the CCPA. These rights apply only to California residents. Any terms defined in the CCPA (Cal. Civ. Code Section 1798.140) have the same meaning when used in this section.
17.2.2 Right To Know. You may request that we disclose to you the following information covering the preceding 12 months:
1. the categories of personal information we have collected about you;
2. the categories of sources from which the personal information was collected;
3. the business or commercial purpose for collecting or selling personal information;
4. the categories of third parties with which we share personal information;
5. the categories of personal information about you that we have sold and the categories of third parties to which the personal information was sold;
6. the categories of personal information about you that we have disclosed for a business purpose and the categories of third parties to which the personal information was disclosed; and
7. the specific pieces of personal information we have collected about you.
If you are a California resident, you may request the disclosure of the information listed above by submitting a request at legalccm@ccmhockey.com. Such a request may be referred to as a “right to know” request. In the request, please specify whether you are seeking information about categories of personal information and/or specific pieces of personal information. Pursuant to California law, we will verify your identity before complying with any such request.
You also have the right to be informed, at or before the point of collection, as to the categories of personal information to be collected and the purposes for which the categories of personal information shall be used. We will not collect additional categories of personal information or use personal information collected for additional purposes without providing you with notice consistent with this section.
17.2.3 Right To Delete. You have the right to request that we delete any personal information about you that we have collected from you, and that we direct any service provider to delete such personal information from its records. Such a request may be referred to as a “request to delete.” However, pursuant to the CCPA, your information may not be deleted under certain circumstances, including where maintenance of your personal information is necessary to: complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, to provide a product or Service that you requested or that is reasonably anticipated within the context of your ongoing business relationship with us, or to otherwise perform a contract between us and you; detect security incidents; protect against or prosecute fraudulent or illegal activity; enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; comply with a legal obligation; or otherwise use your information internally in a lawful manner that is compatible with the context in which you provided the information. For more information about these and other situations in which we may not delete your information, please see Cal. Civ. Code Section 1798.105(d).
You may request the deletion of such personal information by submitting a request at legalccm@ccmhockey.com. In the request, please specify that you are requesting the deletion of personal information. Before deleting such personal information, we will verify your identity, as required by the CCPA. We will require you to provide personal information in order to verify your identity.
17.2.4 Authorized Agent. You may use an authorized agent to submit a right to know request or a request to delete. To use an authorized agent, you must provide the agent with signed permission. In addition, you may be required to verify your own identity with us and confirm you provided the agent with permission to submit the request. We may deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf. Such requirements, however, will not apply where you have provided the agent with power of attorney pursuant to Cal. Prob. Code Sections 4000 to 4465.
17.2.5 Right To Non-Discrimination. You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA.
17.2.6 Sale Of Personal Information. You have the right to know whether a business sells personal information. If a business sells personal information, you have the right to “opt-out” of such sales by directing the business not to sell their personal information. We do not knowingly sell personal information of minors under 13 years old.
17.2.7 Collection And Disclosure Of Personal Information. See Section 2 above, entitled “What Personal Information Do We Collect and For What Purposes,” for the categories of personal information we have collected in the last 12 months and the purposes for which the personal information is used. We also may use your personal information for a purpose described in Section 11 above, entitled “Why Else Do We Use Your Information.”
We collect this personal information directly from you or from the sources described in Section 9 above, entitled “Information We Receive from Third Parties.”
See Section 12 above, entitled “Sharing Your Information,” for more information about our sharing of personal information and the categories of third parties with which we share your personal information.
18. IF YOU RESIDE IN CANADA
This supplemental Notice for Canada (“Supplemental Notice”) contains additional information relevant to residents of Canada. This content should be read in conjunction with our Global Privacy Notice. In the case of conflict between our Global Privacy Notice and this Supplemental Notice, this Supplemental Notice shall prevail.
Consent. We will only collect, use and disclose your personal information with your consent, unless otherwise allowed by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information. You will be asked to consent expressly to any collection of personal information about you that is particularly sensitive, such as information about your financial information or your body measurements. In other cases, your consent is implied, such as when you respond to a customer satisfaction survey or speak with our representatives after having been notified that the call may be recorded.
We do not knowingly collect personal information from anyone under the age of 14 (“child” or “children”). If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to delete that information.
Cross-jurisdictional Transfers. By providing us with personal information, you acknowledge and agree that your personal information may be transferred or disclosed to other jurisdictions for processing and storage, including countries in which the CCM is represented by affiliates, branches or other offices. These other jurisdictions may have laws regarding the protection of personal information which are less stringent than the laws in your jurisdiction. Furthermore, we may disclose your personal information in these jurisdictions in response to legal process or where we believe in good faith that disclosure is required by law.
Your Legal Rights. Subject to certain exemptions, you may have some or all of the following rights in relation to the personal information we hold about you:
· Right of Access. You have the right to access the personal information we hold about you and to receive a general account of our uses of that personal information. Upon receipt of a written request from you, we will provide you with a copy of your personal information, although in certain limited circumstances, we may not be able to make all relevant personal information available to you, for example, where that personal information also relates to another individual. In such circumstances, we will, upon request, provide you with the reasons for such refusal. We will endeavour to deal with all requests for access of personal information in a timely manner. There is no pre-set limit for how many requests for access you can make in a year, but we may charge you a reasonable fee for access requests that require significant time and resources to manage where permitted under applicable laws.
· Right to Rectification. If the personal information we hold about you is inaccurate or incomplete, you are entitled to have it rectified. Where appropriate, such amended personal information will be provided to the parties to whom we are authorized to disclose your personal information. We will endeavour to deal with all requests for rectification of personal information in a timely manner.
· Right to personal information Portability. You may have the right, in certain circumstances from and after September 22, 2024, to obtain personal information you have provided us with (in a structured, commonly used, and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
19. CHANGES TO THIS NOTICE
Any changes we make to our Notice in the future will be posted on this page and, where appropriate, notified to you by e-mail or otherwise. Please check back frequently to see any updates or changes to our Notice.
20. CONTACT US
If you have any questions, please contact our Data Protection Officer:
Attn: DPO
Sport Maska Inc., 8275 Trans-Canada, Suite B110
Montreal Quebec H4S 0B6 Canada
dpo@ccmhockey.com
1-800-644-1677