PRIVACY POLICY

The personal information we collect is generally in one or more of the following categories.

• For individuals who use our products and services, including our Website, we may collect information from you or from your use of our products or services or from your activities on the site
  Information we may be required to collect by your government, including identity information and fishing activity. For example, if you are in Canada, we may provide information such as fisher identification number, preferred language, and first and last name of the captain to the Canadian Department of Fisheries and Oceans.
• Information you submit to us through your use of our products or services:
  • Through applications such as ELOGS, we may collect your first and last name, email address, encrypted password, phone number, fishing licence number, vessel name, vessel registration number, ELOGS key, information about your role (for example, fisher or fishery manager). We may also collect other personal information that you voluntarily provide us in the available user-defined fields.
  • When you participate in our Test Crew program, we may collect your first and last name, email address province or territory, fishing area, what species you fish for, your fishing season, and type of device used.
• Catch Data, i.e. fishing areas, which may include messages, materials, data, text, commercial information, sounds, photos, videos, graphics, code or applications that contain personal information.
• Information we automatically collect: log data and information relating to your use of our products and services.
  Like most websites and other Internet services, we may collect certain technical and device information about your use of our website. Such information may include your Internet protocol address, information about your device, browser and operating system, and the date and time of your visit.
  We may also use “cookies” or enlist third party services which use cookies to track your preferences and activities on our website. Cookies are small data files transferred to your computer’s hard-drive by a website. They keep a record of your preferences, making your subsequent visits to the site more efficient. With your consent, we may also use them to identify you, and for locating, tracking or profiling purposes. Cookies or similar technologies may be stored locally on mobile devices or on computer servers operated or controlled by our third-party service providers. We may employ third party service providers to place advertisements about our products, Services and applications on other websites. The use of cookies or other similar technologies by such third parties is governed by their privacy policies. You may limit the automatic collection of certain information on our Website by deciding not to activate the cookies using your browser options. Please be aware that disabling cookies may prevent you from using specific features on our Website. You can also visit www.allaboutcookies.org for an overview of how to manage cookies on most common browsers.
• Other Interactions. For individuals who otherwise interact with us, whether in person, by phone or email, through social media or otherwise, including individuals who might be interested in acquiring our products or services, who sign-up to receive newsletters or other communications, or who respond to surveys and questionnaires, we may collect information that you provide to us during these interactions. This information may include your name, e-mail address other contact information, and how we originally obtained your contact information (for example, at an event). With your express consent only, we may record interactions such as phone calls.

We collect, use and disclose your personal information with your consent or as permitted or required by law. Subject to applicable laws, your consent may be express or implied, depending on the circumstances and the sensitivity of the personal information in question. If you choose to provide personal information to us, we assume that you consent to the collection, use and disclosure of your personal information as outlined in this privacy policy.

Typically, we will seek your consent at the time your personal information is collected. Where we want to use your personal information for a purpose not previously identified to you at the time of collection, we will seek your consent prior to our use of such information for this new purpose.

You may withdraw your consent to our collection, use or disclosure of your personal information at any time by contacting us using the contact information in the “Contact Us” section below. However, before we implement the withdrawal of consent, we may require proof of your identity. In some cases, withdrawal of your consent may mean that we will no longer be able to provide certain products or services.

If you provide personal information about another individual to us, it is your responsibility to obtain the consent of that individual to enable us to collect, use and disclose his or her information as described in this privacy policy.

We may use your personal information and other information for purposes such as:

• to provide you with our products and services and to support your use of our products and services. Applicable legal basis under the General Data Protection Regulation (“GDPR”): performance of a contract;
• to protect the security or integrity, to help us address problems with and improve the Website, and/or our products and services. Applicable legal basis under the GDPR: legitimate interest;
• to request feedback and otherwise contact you about your use of the Website and/or our products and services. Applicable legal basis under the GDPR: consent;
• to notify you about important changes to our Website and/or our products and services. Applicable legal basis under the GDPR: performance of a contract;
• for our internal business purposes, such as to analyze trends and statistics, for audits, to develop new products, to enhance our websites, to improve our products and services, to identify usage trends and to determine the effectiveness of our promotional campaigns. Applicable legal basis under the GDPR: legitimate interest;
• to prevent, detect and investigate activity and transactions that are suspicious, fraudulent, or violate our Terms and Conditions. Applicable legal basis under the GDPR: legal obligation;
• to contact you if necessary regarding your transactions with us, changes to our terms, conditions, and policies and/or for other administrative purposes. Applicable legal basis under the GDPR: performance of a contract;
• in an emergency situation to protect your personal safety or that of site visitors or any third party. Applicable legal basis under the GDPR: legal obligation;
• with your consent when required, to communicate with you and to send you information by email, postal mail, telephone, text message, or other means about our products, services, contests, and promotions;
• to comply with our obligations under applicable laws; Applicable legal basis under the GDPR: legal obligation; or
• as otherwise required or authorized by law.

We may use your personal information and other information for purposes for which we have obtained your consent, and for such other purposes as may be permitted or required by applicable law.

We rely on third party services providers to perform a variety of services on our behalf, including without limitation, vendors, consultants and credit card or payment processing companies (“Service Providers”). When we engage Service Providers who manage customer information on our behalf and/or perform services on our behalf, such as conducting surveys, sending communications or helping prevent fraudulent transactions, we may share your personal information with such Service Providers under the requirement that such personal information is used only to provide services to us.

Please find below a non-exhaustive list of the Service Providers we use, as well as links to their respective privacy policies:

• Mailchimp (for marketing emails): https://www.intuit.com/privacy/statement/
• Pipedrive (for customer relations management): https://www.pipedrive.com/en/privacy
• WordPress (to manage certain sections of our website): https://en-ca.wordpress.org/about/privacy/
• Stripe: (online payment process service provider): https://stripe.com/fr-ca/privacy. Note that we collect information such as payment status (payment success/failure), subscription status (active/inactive), duration of subscription, end date of description, and Stripe customer ID.

We do not collect payment card information. If you make an online payment using a payment card, such as a credit card or debit card, you are connected directly to Stripe and your payment card information is collected and processed by that service provider.

If we provide your information to service providers, then we require that the service providers maintain the confidentiality of your personal information and keep your personal information secure. We also require that they only use your personal information for the limited purposes for which it is provided. When our service providers no longer need your personal information for those limited purposes, we require that they dispose of the personal information. We do not authorize the service providers to disclose your personal information to unauthorized parties or to use your personal information for their direct marketing purposes. If you would like more information about our service providers, please contact us using the contact information in the “Contact Us” section below.

Additionally, we may use and disclose your information when we believe such use or disclosure is permitted, necessary or appropriate:

• (a) under applicable law, including laws outside your country of residence;
• (b) to comply with legal processes;
• (c) to respond to requests from public and government authorities
• (d) to enforce the terms of the agreements for our products and services;
• (e) to protect our operations or those of any of our affiliates or subsidiaries;
• (f) to protect our rights, privacy, safety or property, and/or those of our affiliates, you or others; and
• (g) to allow us to pursue available remedies or limit the damages that we may sustain. In addition, we may transfer your personal information and other information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, brands, affiliates, subsidiaries or other assets.

If we otherwise intend to disclose your personal information to a third party, we will identify that third party and the purpose for the disclosure, and obtain your consent.

We will take steps to ensure that your personal information is kept as accurate, complete and up-to-date as reasonably necessary. We will not routinely update your personal information, unless such a process is necessary. We expect you, from time to time, to supply us with updates to your personal information, when required.

However, to make sure that the information we hold on you is accurate and up to date, please inform us immediately of any change in your personal information.

On written request and subject to proof of identity, you may consult the personal information that we have collected, used or disclosed, and ask that any necessary corrections be made, where applicable, as authorized or required by law.

In addition, under certain circumstances, you have the following rights:

• Withdrawal of your consent. You may withdraw your consent to the disclosure or use of the personal information collected;
• If applicable, you may have the right to request that personal information held about you no longer be disclosed;
• Where applicable, you may have the right to request information about the use of any automated decision system and the impact it may have on you.

Under the GDPR, if you are located within the European Union (“EU”), you may be entitled to additional rights, including: (i) the right to withdraw consent to processing where consent is the basis of processing; (ii) the right to object to unlawful data processing, under certain conditions; (iii) the right to erasure of Personal Information about you, under certain conditions; (iv) the right to demand that we restrict processing of your Personal Information, under certain conditions, if you believe we have exceeded the legitimate basis for processing, processing is no longer necessary, or believe your Personal Information is inaccurate; (v) the right to data portability of Personal Information concerning you that you provided us in a structured, commonly used, and machine-readable format, under certain conditions; (vi) the right to object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you, under certain conditions. If you want to learn more about your rights under the GDPR, you can visit the European Commission’s page on Data Protection at: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.

You also have the right to lodge a complaint with the relevant data protection authority.

We may require that you provide sufficient identification to fulfill your request to access or correct your personal information. Any such identifying information will be used only for this purpose.

For Canadian users using the site and the services to submit catch data within Canada only: you have the right to the correction of, access to, and protection of your personal information under the Privacy Act. If you have any concerns about the Department of Fisheries and Oceans’ treatment of your personal information, you may contact the Department’s Access to Information and Privacy Coordinator. If you are not satisfied with the outcome, you may then file a complaint with the Privacy Commissioner of Canada. Personal information collected through the ELOGS application is described in the Personal Information Bank (PIB) DFO PPU 410. For more information, visit Info Source at www.infosource.gc.ca.

Your personal information may be stored and processed in Canada and in any country where we have facilities or in which we engage third party service providers. As a result, your personal information may be transferred to countries outside your country of residence, which may have different data protection rules than in your country. While such information is outside of your country, it is subject to the laws of the country in which it is located, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country. However, our practices regarding your personal information will at all times continue to be governed by this Privacy Policy and, if applicable, we will comply with the GDPR requirements providing adequate protection for the transfer of personal information from the EU to third country, such as standard contractual clauses.