The Agricultural Management Institute (AMI) is a non-profit corporation incorporated under the laws of Ontario. AMI respects the privacy and confidentiality of our stakeholders’ personal information.
“collection”, – the act of gathering, acquiring or obtaining personal information from any source, including from third parties, by any means.
“consent” – voluntary agreement with what is being done or proposed. Consent can be either express or implied. Express consent is given explicitly, either orally or in writing. Express consent is unequivocal and does not require any inference on the part of the persons seeking the consent. Implied consent arises where consent may reasonably be inferred from the action or inaction of the individual.
“personal information” – means information about an identifiable individual, but does not include the name, title or business address or telephone number of an employee of an organization.
The AMI Privacy Compliance Officer is responsible for AMI’s compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA). See below for contact information.
AMI is responsible for all personal information in its possession or custody, including information that has been transferred to it through any third party. It is the responsibility of AMI to ensure that a written contract with any third party will afford a comparable level of protection while personal information is being processed or accessed by such third party.
Access to personal information shall be on a need-to-know basis.
AMI requires personal information about you in order to manage our business and provide our services to our clients. We collect personal information only for the following purposes:
The collection of personal information shall be limited to that which is necessary for the purposes identified by AMI. The information shall be collected by fair and lawful means. Personal information shall not be collected indiscriminately. Both the amount and the type of information collected shall be limited to that which is necessary to fulfill the purposes identified.
AMI obtains consent to the collection, use and disclosure of personal information and the purpose for which such information is collected, used or disclosed by AMI shall either be obvious by the very nature of the transaction or shall be stated by AMI at the time such consent is obtained.
An individual may decline to consent or revoke their consent to the collection and use of their personal information for all or any purposes but if the individual does so decline or revoke their consent in respect of the personal information required for the processing of an application or for assessing or updating credit worthiness of the individual the assessment of their application may be terminated.
An individual may opt not to have their personal information used for the purpose of receiving communication about AMI programs which may be of interest or for the purpose of regular AMI communications. An individual who wishes to decline or revoke their consent for their personal information to be used for such communication purposes should contact the AMI Privacy Compliance Officer. See below for contact information.
Personal information shall not be used by AMI employees or representatives for purposes other than as required in the performance of their employment duties and as identified either implicitly or explicitly at the time of its collection.
The following are situations where we may share some personal information about you with others:
AMI retains personal information only for so long as is necessary to fulfill the purpose for which it was collected and to meet its legal and contractual obligations. Given the nature of grant and contribution agreements some personal information may be held indefinitely.
Upon request, an individual shall be informed of the existence, use and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
AMI attempts to maintain information collected and keep it as up to date and as complete as possible. However, AMI relies on an individual to disclose all material information and to inform it of any changes.
An individual may request access and, if applicable, request that AMI correct information in its possession. The individual or a person authorized in writing on the individual’s behalf may, with satisfactory identification and proof of entitlement, make this request in writing to the AMI Privacy Compliance Officer. See Contact Information below. The right to access is not absolute.
There are restrictions on the grant of access in PIPEDA where it would reveal personal information about a third party that cannot be severed from the information about the individual making the request, and in certain other circumstances there needs to be notification of governmental institutions before release. Access may also be refused where the information is protected by solicitor-client privilege; where revealing the information would also reveal confidential commercial information; where revealing the information could reasonably be expected to threaten the life or security of another individual; if the information was collected during an investigation of a breach of an agreement or a contravention of the laws of Canada or a province on the expectation that the knowledge or consent of the individual would compromise the availability or accuracy of the information; or where the information was generated in the course of a formal dispute resolution process.
Upon such a request, AMI shall inform an individual whether or not AMI holds personal information about the individual. When disclosure is made to the individual, the organization shall provide an account of the use that has been made or is being made of the information and an account of the third parties to which the information has been disclosed. Before providing any information to the requestor, AMI shall verify and satisfy itself as to the individual’s identity.
Where the request for access is with respect to personal information collected, used or disclosed in the course of serving an applicant or other third party, the applicant or other third party shall immediately be provided with a copy of the request.
AMI shall respond to an individual’s request within 30 days and at minimal or no cost to the individual. AMI may require a reasonable payment for the information provided only if it has informed the individual in advance of the approximate cost and the individual has advised AMI that the request is not being withdrawn.
When an individual successfully demonstrates the inaccuracy or incompleteness of personal information, AMI shall amend the information as required. Depending upon the nature of the information challenged, amendment could involve the correction, deletion or addition of information. Where appropriate, the amended information shall be transmitted to third parties having access to the information in question.
When a challenge is not resolved to the satisfaction of the individual, the substance of the unresolved challenge shall be recorded by the AMI Privacy Compliance Officer. When appropriate, the existence of the unresolved challenge should be transmitted to third parties having access to the information in question.
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.
The security safeguards shall protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. The nature of the safeguards will vary according to the sensitivity of the information. AMI will monitor security developments and re-assess the risks at regular intervals.
The methods of protection will include physical measures, organizational measures and technological measures. All personal information shall be handled on a “need-to-know” basis and each employee, agent or independent contractor of AMI shall be responsible for the protection of the personal information used in his or her job function.
Care shall be used in the disposal or destruction of personal information to prevent unauthorized parties from gaining access to the information.
An individual shall be able to address a challenge concerning compliance with the above privacy principles to the AMI Privacy Compliance Privacy Officer.
The individual accountable for AMI compliance is the AMI Privacy Compliance Privacy Officer. See below for contact information.
If a complaint is found to be justified through either the internal or external compliant review process, AMI will take appropriate measures, including amending its policies and practices if necessary.
Where the complaint arises out of a client matter, the client shall be informed immediately of such measures.
From time to time the AMI Privacy Compliance Privacy Officer may make changes to this policy to adapt to changing business conditions and for other reasons. In the event that in the opinion of the Privacy Officer, acting reasonably, such changes will allow AMI to make materially greater use and/or disclosure of any personal information, the individuals affected by the changes will be clearly and concisely notified of the changes and their proposed effect, and provided with an opportunity to withdraw their consent to the collection, use and/or disclosure of their personal information.
Contact the AMI Privacy Compliance Officer at:
Agricultural Management Institute
Attn: Privacy Compliance Officer
Address: 200-120 Research Lane
Phone: (519) 822-6618
Fax: (519) 821-7361