1. The importance of the right to privacy.
Transat takes the privacy rights of individuals very seriously and, in this respect, takes all measures possible to ensure the protection of the personal information that we collect in providing our services. Transat may be required to exchange personal information with third parties on individuals for the purpose of administering customer accounts and files. Transat and such third parties may also exchange information on individuals that is not of a sensitive nature regarding their preferences for the purpose of offering and providing quality benefits, products, goods, and services in an efficient manner. Nevertheless, Transat will not collect, use, or disclose any personal information on an individual without his or her consent, unless compelled to do so by statute or regulation. In this regard, our primary concern is the trust that individuals place in our safeguarding the privacy of their personal information.

The purpose of this Policy is to outline our commitment regarding the protection of privacy as well as the rules we intend to follow when we collect, retain, use, or disclose personal information.

Our Policy has been formulated to satisfy and indeed, even to exceed the requirements of privacy legislation in force in Canada, specifically the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, various provincial laws regarding privacy protection, the Principles set out in the National Standard of Canada for the Protection of Personal Information (CAN/CSA-Q830-96), as well as any applicable regulations (hereinafter the “Law”). We also undertake to constantly re-assess our rules of practice and our procedures in this area and to take into account the comments of any individuals.

In order to better understand and meet the expectations of individuals regarding the protection of personal information, Transat has designated a member of senior management to act as Director, Protection of Personal Information (hereinafter “the Director”). Any person may contact the Director in order to share comments, request access to any personal information that we may have on him or her, request that corrections be made to the information, or to file a complaint. The Director shall conduct a consistent review of Transat practices and procedures to ensure compliance with this Policy and to meet customer expectations in this respect.

2. Transat’s undertakings

a. We shall collect only such personal information as is required to offer services, benefits, goods, and products to individuals;

b. We shall not disclose any personal information to a third party without the prior express or tacit consent, as applicable, of the individual, or unless bound by law to do so;

c. We shall not collect, use, or disclose any personal information on any individual without having obtained his or her prior express or tacit consent, as applicable, or unless bound by any statute or regulation to do so;

d. We may on occasion release personal information to our external agencies or mandataries for processing, to identify customers likely to be interested in benefits, products, goods, or services offered by Transat. Through contractual agreements or other comparable means, we shall ensure that your personal information is protected when processed by our mandataries and external agencies;

e. In order to increase the opportunities of Transat customers to obtain special benefits, we may occasionally exchange personal information with a third party, in the form of a list of those customers who meet certain general criteria. The lists may not contain any information of a sensitive nature, and the use of such information by the third party for any purpose other than as set forth in this Policy is strictly prohibited. Under no circumstances may personal information be disclosed without the express or tacit consent, as applicable of the individual concerned.

f. We will provide individuals with explanations on how to delete their names from any lists we exchange with third parties. Individuals may contact us at any time to have their names removed from these lists;

g. We guarantee the security and confidentiality of the information that individuals provide us with. Compliance with these standards is subject to audit and these standards may be revised where a situation warrants it;

h. If requested to reveal personal information to a third party, we shall assume responsibility for the disclosures and shall take the necessary measures to ensure that the undertakings and rules referred to in this Policy are observed by this third party;

i. We require that all organizations that provide us with administrative support services or that process information at our request comply with the undertakings and rules contained in this Policy; and

j. Any individual is entitled to take cognizance of the information we hold on him or her, subject to restrictions in the Law, and that person may require that inaccurate or incomplete information be corrected. Where applicable, we shall transmit this information to the person concerned and shall make the necessary corrections without delay.

3. Transat’s Rules regarding the Protection of Personal Information.
A. Personal information
The following is regarded as personal information: any information that is directly connected to an identifiable person including, but not limited to, his or her name, residential address, social insurance number, as well as any information relating to his or her medical condition or financial situation.

B. Responsibilities
Transat is responsible for the personal information in its possession or under its control, in particular, personal information that it entrusts to its mandataries, agents or representatives. Transat shall adopt and apply specific rules of conduct and procedures that ensure compliance with the undertakings and rules referred to in this Policy, which, inter alia, are as follows:

1. The Director shall take all measures necessary to ensure that the undertakings regarding privacy rights and the protection of personal information, as well as the rules contained in this Policy, are complied with by Transat employees and its agents, mandataries or representatives;
2. Transat shall require that all agents, mandataries, representatives and other external organizations required to provide it with administrative support services, agree, either by contract or through a certificate of compliance, to comply with the undertakings and rules referred to in this Policy. They are prohibited from using the personal information held by Transat for purposes other than those for which the information was provided to them. The aforementioned phrase “agents, mandataries, representatives, and other organizations” includes, in particular, Transat suppliers of hotel and airport services, data processing and storage companies, as well as suppliers of administrative support services
3. Transat shall implement security measures to ensure the confidentiality of personal information;
4. Transat shall issue employee directives to remind all staff of their obligation to comply with this Policy. In addition, Transat shall provide employee training to ensure that all staff understand the importance of privacy and how to ensure its protection;
5. Transat shall periodically remind third parties with whom it does business that they, their agents, mandataries or representatives must comply with the undertakings and rules referred to in this Policy; and
6. Transat has adopted procedures in order to receive and investigate complaints, and must report back to complainants as soon as possible.

C. Identification of uses for which personal information is collected

Transat may collect personal information on individuals but solely for the purposes identified in advance.

i. Transat may collect personal information for the following purposes:

(a) to check the identity of individuals, to contact them, and to communicate with them;
(b) to better understand the preferences, needs, and interests of individuals.
(c) to enable Transat to offer individuals services, benefits, products, and goods within the framework of this Policy;
(d) to comply with the statutes and regulations in force, including the information requirements of customs and immigration control, and to ensure the security and the processing of information; and
(e) to allow Transat to effectively manage its human resources.

D. Restrictions relating to the collection of personal information

Transat may collect only such personal information as is necessary for the purposes identified in this Policy. Furthermore, Transat may only collect personal information by employing legal and legitimate means.

i. Transat may collect personal information from the following sources:

(a) customers;

(b) agents, mandataries or representatives;

(c) employees; and

(d) suppliers.

ii. In responding to offers made by third parties with whom Transat may do business (whether sent to customers by these parties or by Transat), individuals may be asked to provide personal. The transmission of information by individuals to, and the collection thereof by the third parties does not constitute collection of personal information by Transat and is therefore exclusively under the control of the individuals and the third parties in question.

E. Identification of uses and disclosure of personal information

Transat may use or disclose personal information solely for the purposes identified in advance and by employing the means also thus identified. Transat may not collect, use, or disclose any personal information concerning an individual without his or her express or tacit consent, as applicable, unless required to do so by statute or regulation. Transat shall not use or disclose any personal information except for the following purposes, and in the manner indicated:

1. Personal information, that is not sensitive in nature (N.B. information will be deemed as being sensitive of the purpose of applying the present Policy where such information refers to the health or physical, mental or medical condition of an individual), regarding customers’ preferences, needs, and interests, may be used to identify those customers who are most likely to be interested in products or services offered by Transat and its agents, mandataries or representatives. Such information shall be used exclusively to enable Transat and its agents, mandataries or agents to propose services, premiums, benefits, and products that are likely to interest customers as part of a Transat promotional offer. Transat may not provide individualized customer profiles to third parties.
2. When a third party with whom Transat does business wishes to submit an offer to customers, generally the offer shall be sent to customers by Transat rather than by the party in question.
3. However, for follow-up purposes, Transat may on occasion provide a third party, with whom it does business, with a list of customers to whom an offer was transmitted. Occasionally, Transat may also provide such a party with a list of customers who meet certain general criteria involving nonsensitive information, while ensuring through contractual or other means that the third party is strictly prohibited from using the list for any purpose other than to offer customers a benefit or a privilege available exclusively to Transat customers. The use of a customer list by a third party, with whom Transat does business, for any other purpose is forbidden. Information of a sensitive nature may not be disclosed under any circumstances without the express consent of the individual.

iv. Personal information may be disclosed to agents, mandataries, representatives, or to other organizations whose services are retained by Transat. The agents, mandataries, representatives, and other organizations must sign a confidentiality agreement. They may not use the information transmitted to them except for the purposes referred to in the agreement. These parties are formally prohibited from disclosing the information in question to other third parties without the prior consent of Transat.

v. Personal information may be disclosed when required by statute or regulation.

F. Restrictions concerning the use, disclosure, and the retention of personal Information

Transat may not use or disclose personal information for any purpose other than that for which it was collected, unless the express or tacit consent, as applicable, of the individual concerned has been obtained or unless the Law requires the use of disclosure of such information. Furthermore, Transat may not retain personal information except as required to achieve the purposes identified.

G. Consent

Transat shall take all measures necessary to ensure that individuals know and understand the purposes for which it collects, uses, or discloses personal information. Transat shall obtain the consent of every individual in respect of whom it collects, uses, or discloses personal information. Indeed, depending on the circumstances and the nature of the information, such consent may be express or tacit. In certain circumstances, express consent is necessary. In other cases, consent is reasonably presumed, but is revocable on demand.

1. Transat may not collect, use, or disclose any sensitive personal information of an individual without the express consent of the person concerned, unless required to do so by statute or regulation;
2. Transat shall periodically inform individuals by correspondence, through its Web site or interactive voice response system of any change to this Policy on the protection of personal information and the right to privacy, as well as any further collection, use, or disclosure of personal information in order to obtain the appropriate consent. Transat shall use a combination of the aforementioned methods to ensure that all necessary measures are taken to contact the individuals concerned;
3. When customers fill out a survey from Transat, its agents, mandataries or representatives, concerning their preferences, needs, or interests, they will be advised of the specific reasons for which the personal information was collected, used, or disclosed. The survey shall contain a statement reminding the customer that in completing and returning the survey, he or she is consenting to the collection, use, and disclosure of information provided through the survey for the purposes identified therein.

H. Accuracy of personal information

Transat shall ensure that the necessary measures are taken to ensure that the personal information it has on individuals is up to date and accurately reflects its intended use.

1. When required, Transat shall update personal information on the basis of information conveyed to it by the individuals concerned or by Transat’s agents, mandataries or representatives;
2. Transat may not systematically update personal information unless it is necessary for achieving the purpose for which the information was collected. These updates shall be carried out in compliance with Section D above; and
3. Since it is quicker and more efficient for individuals to inform Transat of any changes to their personal information, such as their names or addresses, Transat shall ask the individuals concerned to ensure that the information they provide is up to date and accurate, and wherever possible, that they inform Transat of any changes.

I. Measures for ensuring the security of personal information

Transat ensures the protection of personal information by relying on physical, technological, and administrative security measures.

1. The security measures put in place by Transat are intended to protect personal information against loss or theft, and safeguard it from unauthorized access, disclosure, copying, use, or modification;
2. To ensure the confidentiality of personal information, Transat shall employ a) physical measures such as locked filing cabinets and restricting access to its offices; b) administrative measures such as security clearances and limiting access on a “need to know” basis for individuals, agents, mandataries, and representatives; and c) technical and technological measures. When it uses information technologies such as the Internet, Transat shall remind individuals, agents, mandataries or representatives of the importance of protecting the confidentiality of personal information; and
3. Transat shall put in place all measures necessary to ensure the destruction and safe disposal of personal information.

J. Transparency

Transat shall ensure that this Policy and the undertakings and rules of practice and procedure concerning the management of personal information set forth herein are readily accessible to anyone, especially its customers. Copies of this Policy may be obtained from the Director at any time on request. This Policy is also available on the Internet.

K. Access to personal information

Any individual making a request in writing is entitled to be informed of the existence of personal information held by Transat on him or her, of the use made of such information and of the fact that this information was provided to third parties. The individual concerned is also entitled to access such information, subject to legislative and regulatory exceptions. The individual may also contest the accuracy or completeness of information and request that corrections be made. To exercise their right of access or of correction, the individuals concerned should contact Mr. George Petsikas, Director, Protection of Personal Information, Transat at the following address: 5959 Côte-Vertu Blvd., Montreal, Quebec H4S 2E6.

1. The applicant must identify himself or herself, provide his or her employee number (where applicable) and sign the request in order to prevent fraud or the unjustified transmission of personal information to a third party. The individual concerned shall provide sufficient information to enable Transat to confirm the existence of such personal information, to inform the applicant of the use thereof and to provide access thereto;
2. Transat shall process the request for access to or correction of personal information within thirty (30) days of receiving the request. This time limit may be extended by an additional period of thirty (30) days if processing the request would unreasonably interfere with Transat activities or if circumstances or the scope of the request make it impossible to meet this deadline;
3. Generally, Transat shall grant the applicant access to the personal information on him or her, or correct the information at no charge. It may, however, be necessary to charge a reasonable fee to recover any administrative costs or when the request for access to information or correction of information is complex.
4. With regard to the correction of personal information, Transat shall do so where the applicant can establish the incomplete nature or the inaccuracy of the information. As required, correction may involve a correction, withdrawal, or the addition of information; and
5. Should the applicant be dissatisfied with the answer to a request for access to or correction of information, he or she may file a complaint with the Director.

L. Complaints concerning non-compliance with the Policy

Should an individual feel that this Policy is not being complied with or should he or she be concerned by Transat practices, the individual concerned may submit a complaint to Transat by sending it to Mr. George Petsikas, Director, Protection of Personal Information, Transat.

i. A complaint or request for an inquiry must be addressed in writing to the Director at the following address: 5959 Côte-Vertu Blvd., Montreal, Quebec H4S 2E6; and