Law 25 & Data Processing
Our compliance framework and data processing commitments.
Last updated: June 19, 2026
1. Applicable regulatory frameworks
Law 25 (Quebec): primary reference framework (transparency, consent, governance, incident reporting). PIPEDA (Canada): commercial activities in Canada. GDPR (EU): may apply to individuals located in the EU; write to [email protected] to exercise your rights.
2. Privacy Officer
In accordance with Law 25, we have designated an officer: [email protected].
3. Principles we apply
Collection limitation, transparency, valid consent, privacy by default, and reasonable technical and organizational security measures.
4. Your rights
Depending on your residence and the applicable framework: access, correction, deletion, withdrawal of consent, portability, complaint. To exercise a right: [email protected].
5. Assessment of transfers outside Quebec
Before any transfer outside Quebec, we conduct a privacy impact assessment in accordance with Law 25. Some providers process data in the US (see the Privacy Policy).
6. Confidentiality incidents
In the event of an incident presenting a risk of serious harm, we contain it, notify affected individuals and the Commission d'accès à l'information du Québec, and record it in a register.
7. Data Processing Agreement (sub-processing)
When we process personal information on behalf of a client (agency or broker), the client is the controller and UnicyVinci acts as processor. We commit to: process information only on the client's documented instructions; ensure confidentiality; apply appropriate security measures; engage only sub-processors offering sufficient guarantees (see the list in the Privacy Policy); assist the client in handling data subject requests and incident notifications; and delete or return the information at the end of the contract, subject to legal obligations. A written data processing agreement is available on request at [email protected].
8. Complaints
Address your complaint first to our officer ([email protected]). You may also file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
9. Contact us
[email protected] — Unicy, Montreal, Quebec, Canada