This privacy statement applies to DDB Canada, a division of Omnicom Canada Corp. and its affiliates, including Tribal DDB, DDB PR, DDB Toronto, DDB Edmonton, DDB Vancouver, DDB Montreal, DDB Group, TracyLocke Canada, Track DDB, Anderson DDB Health & Lifestyle (“DDB”, “we”, “us”, “our”) and explains how we collect, use and disclose personal information in Canada. Generally speaking, “personal information” is information about an identifiable individual, subject to more particular definitions or interpretations under applicable law. This privacy statement does not apply to personal information about employees, contractors or other temporary or permanent staff, consultants, volunteers or other individuals assigned to DDB (collectively, “Members of DDB”), or to any information which is not personal information as defined in or interpreted under applicable law.
DDB offers and provides marketing, advertising and communications services and information to a wide range of clients. As part of the services we provide, we are sometimes asked or do sometimes come into possession of personal information about our clients and their customers. This policy sets forth our general guidelines in dealing with such “personal information”.
DDB will comply with all applicable laws in the regions within Canada in which it operates.
Information in relation to clients, their customers and others, generated in the course of providing our services
The kinds of personal information we may collect and use in relation to clients and their customers will depend upon the information and services requested. However, subject to applicable law, it may include:
We use this information:
Information in relation to potential Members of DDB
If you apply for a position at DDB, we will collect the personal information contained in, and generated in relation to, your application package, in order to evaluate your application and assess whether to offer you a position at DDB. For candidates who are not offered or do not accept a position, we normally retain this information for a reasonable period in the event that an appropriate position becomes available or that you re-apply to DDB. If you accept a position at DDB, the information will be retained in accordance with our privacy procedures applicable to the personal information of Members of DDB.
Information about guests of and visitors to DDB
DDB collects information about its guests and visitors. Specifically, visitors to DDB’ offices may be asked to provide their name, telephone number and organization name. This information is retained by DDB as long as necessary for security or emergency preparedness purposes. DDB may also install video cameras in public-access areas on its premises and will post signs notifying individuals of the existence and purpose of any such cameras. We use the information we collect about guests of and visitors to DDB to enable us to act responsibly in the event of a health or other crisis or emergency and to enhance workplace security.
Information about our agents, vendors, suppliers and foreign associates
DDB may collect information about third-party agents, vendors, suppliers and foreign associates (“Service Providers”) who provide goods, services and information to DDB. This information would include name and contact information as well as any information (such as banking information) that we need to pay you for your services and other relevant information, such as experience and qualifications of Service Providers.
We use this information in order to assess suitability for particular assignments; to contact you, where necessary, in relation to the goods, services and information you are providing to DDB; and to pay you for your services.
We typically collect personal information directly from you or through our interaction with you, in particular where such information is deliberately disclosed to us for the purposes of providing particular services. You may sometimes provide us with the personal information you collect from your customers to aid DDB in providing its services to you.
In relation to potential Members of DDB, in addition to personal information that you provide, we may collect personal information from:
We may use and disclose the personal information we collect about clients or other individuals we deal with to third parties, including:
We may disclose personal information about DDB Alumni in order to provide an employment reference to a third party where you have requested, or consented to, the provision of the reference.
Service Providers. DDB may also transfer your personal information to our Service Providers hired to administer or provide products, services or information on our behalf. We use reasonable measures to require the organizations with whom we share your personal information for these purposes to use your personal information only to perform the services we have hired them to provide. Note that some of the Service Providers that process or handle personal information on our behalf are located outside of Canada. As a result, your personal information may be transferred, stored and/or processed outside Canada in connection with the purposes described in this privacy statement Contractual or other measures we may use to protect your personal information are subject to the legal requirements of the foreign jurisdictions where your personal information may be transferred, stored or processed, for example lawful requirements to disclose information to government authorities in those countries.
DDB will hold personal information in strict confidence and except where required by applicable law will not disclose the personal information to any person, other than those Members of DDB who require access to the personal information in order for DDB to perform the services for which they have been retained. All Members of DDB, upon their employment with DDB sign a confidentiality agreement protecting the confidential information of DDB and its clients.
We collect, use and disclose your personal information with your consent or as permitted or required by law. Your consent may be express or implied, depending on the circumstances and the sensitivity of the personal information in question. For example, in most cases, a client’s consent to the collection, use and disclosure of personal information by DDB may be implied by the fact that the client has engaged DDB to provide services, where the collection, use and disclosure of personal information relates to the performance of those services by DDB. If you provide personal information about another person to us, including your customers, we assume you have the consent of that individual to enable us to collect, use or disclose their information as described in this policy and as instructed by you. If you choose to provide personal information to DDB, we assume that you consent to the collection, use and disclosure of your personal information as outlined in this privacy statement.
DDB has implemented reasonable physical, organizational and technological security measures to safeguard the personal information in our custody or control. These include safeguards to protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. Authorized Members of DDB have access to your personal information. With regard to clients and information about our client’s customers, only those Members of DDB authorized to have access, as determined is necessary to provide you with services shall be provided with access to such data. DDB has implemented policies and procedures related to limiting access to programs and data to relevant persons, and ensuring our operations maintain security, environmental protection and risk mitigation initiatives.
If you wish to request access to, or correction of, your personal information in custody or control of DDB, please make your request in writing to our Privacy Officer at the address above. We may need to verify your identity before searching for or providing you with personal information. In some circumstances, we may not provide access to your personal information, for example if it contains the personal information of other persons, if it constitutes confidential commercial information, if it is protected by solicitor-client privilege, or if it is otherwise not properly the subject of an access request. Where the request for access is made by a customer of a client, DDB will report such request to the client prior to providing such information to the customer, provided we continue to be in compliance with applicable privacy legislation.
Since we predominantly use personal information to provide services, it is important that the information be accurate and up-to-date. Please inform us as soon as possible of any changes to your personal information.
If you have any questions, requests or complaints about our personal information practices, please contact our Privacy Officer at Suite 1101, 33 Bloor Street W., Toronto, On, or via telephone at 416–972-7570.
Upon receipt of a withdrawal of consent, DDB will cease using such personal information.