Our Privacy and Personal Information Protection Policy

ESKA Inc. (“ESKA”) places great importance on protecting the personal information entrusted to it. This policy is intended to clearly and transparently explain how ESKA collects, uses, discloses, retains, and protects personal information, particularly in connection with its business activities, its relationships with customers, employees, applicants, suppliers, and partners, as well as through the use of its website.

This policy has been established in accordance with applicable personal information protection requirements, including those set out in Quebec’s Act to modernize legislative provisions as regards the protection of personal information (Law 25).

1. Personal Information We May Collect

Depending on the nature of your relationship with ESKA and the services or features used, various types of personal information may be collected, including:

• Identification and contact information: name, address, telephone number, and email address;
• Employment or recruitment information: résumé, employment history, qualifications, information required for the hiring process and, where applicable, information related to employment administration;
• Financial information: information required for payroll processing, payments, or the administration of certain contractual relationships;
• Technology and browsing information: IP address, data relating to your browsing activity on our website, information about the device used, and data collected through cookies or similar technologies, where such technologies are used;
• Information you choose to provide to us when you contact us, complete a form, submit a request or comment, or use a feature of our website.

ESKA limits the collection of personal information to information that is necessary or relevant for the purposes for which it is collected.

2. Use of Personal Information

Personal information collected may be used, in particular, to:

• respond to requests and communications addressed to us;
• administer our relationships with customers, employees, applicants, suppliers, and partners;
• manage recruitment and hiring processes;
• manage the company’s administrative, financial, and operational activities;
• provide, administer, and improve our products and services;
• ensure the operation, security, and improvement of our website;
• comply with our contractual, legal, and regulatory obligations;
• prevent, detect, or address situations that may compromise the security or integrity of our systems and operations.

Where required by law, ESKA will obtain appropriate consent before collecting, using, or disclosing personal information.

3. Retention and Protection of Personal Information

ESKA implements reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, modification, loss, theft, or disclosure.

These safeguards may include:

• access control and restriction mechanisms;
• cybersecurity and system protection measures;
• practices designed to maintain the confidentiality of information;
• awareness and training for individuals who may have access to personal information.

Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected, or for the period required or permitted by applicable laws.

When personal information is no longer required, ESKA takes appropriate measures to ensure its destruction or anonymization, where permitted by law.

4. Disclosure of Information to Third Parties

Where necessary, ESKA may disclose certain personal information to service providers or partners that assist ESKA with its operations, for example in the areas of technology, payroll, administration, or other professional services.

When personal information is disclosed to a third party, ESKA takes reasonable measures to ensure that the information is handled confidentially and in accordance with applicable requirements.

Personal information may also be disclosed where required or permitted by law, including to comply with a legal, regulatory, or judicial obligation, or to protect the rights and safety of ESKA, its employees, its customers, or other individuals.

ESKA does not sell the personal information it collects.

5. Your Rights

You have various rights regarding the personal information held by ESKA, subject to the exceptions and conditions provided for under applicable laws.

You may, in particular:

• request access to the personal information we hold about you;
• request the correction of information that is inaccurate, incomplete, or outdated;
• withdraw your consent where the processing of the information is based on your consent, subject to legal obligations that may require us to retain or process certain information;
• ask any questions regarding how your personal information is collected, used, disclosed, or retained.

To exercise your rights or obtain additional information, please contact our Privacy Officer.

6. Confidentiality Incidents

ESKA takes necessary measures to prevent incidents that could compromise the confidentiality of personal information.

If a confidentiality incident occurs, ESKA will assess the situation and take appropriate measures to limit the consequences and reduce the risks to the individuals concerned.

Where the situation meets the criteria established by applicable legislation, particularly where an incident presents a risk of serious injury, ESKA will notify the individuals concerned within the required timeframes and make the necessary reports to the Commission d’accès à l’information du Québec.

7. Privacy Officer

ESKA has designated an individual responsible for the protection of personal information to oversee the application of this policy and respond to questions and requests relating to the protection of personal information.

For any questions, access requests, or correction requests concerning your personal information, you may contact:

Name: Fritz Gerald Louis
Title: Privacy Officer and COO
Email: fglouis@eskawater.com
Telephone: 450.662.3579
Address: 3700 Francis Hugues, Laval, QC, H7L 5A9

8. Cookies and Similar Technologies

Our website may use cookies and other similar technologies to ensure its proper operation, remember certain preferences, measure website usage and, where applicable and with the required authorizations, improve your experience.

You can generally modify your browser settings to control or disable certain cookies. However, some website features may be affected by these choices.

Cookie consent options may also be presented to you when you visit our website.

9. Third-Party Websites

Our website may contain links to websites operated by third parties. These websites may have their own personal information protection practices and policies.

ESKA is not responsible for the privacy practices or content of these external websites. We recommend reviewing their privacy policies before providing them with personal information.

10. Updates to This Policy

ESKA may modify this policy when necessary to reflect changes in its practices, activities, or applicable legal and regulatory requirements.

Any significant changes will be published on this page. The date of the most recent update will be indicated so that you can identify the version of the policy currently in effect.