OXYGEN MOBILE APPLICATION PRIVACY NOTICE

CGI pays particular attention to provide a high level of protection to the processing of your personal data. Transparency regarding the conditions of processing of your personal data is therefore taken very seriously and we are delighted to share with you how we process your personal data.

COLLECTION AND USE OF PERSONAL DATA

 Application connection

 For authentication and security purposes, when you log in to the Oxygen Mobile Application, your name and company email will be collected and processed to allow you to access the Application and connection logs will be generated. This information is stored by CGI for three months.

All personal data collected during use of the Oxygen Mobile Application is hosted in Canada on the CGI data centers.

Participation in the challenges

When you voluntary sign up for a challenge on the Oxygen Mobile Application, your personal data (first name, last name, company email, BU, professional contact information, login data, activity data) are collected and processed by CGI. Your personal data is collected for the specific needs of reporting and metrics analysis.

Camera Access and Photos

 The app requires the voluntary collection of images and other information from your device’s camera and photos. This feature is mainly used to populate the avatars of your profile as well as any other feature within a Challenge that might require an avatar being populated with a personalized image.

 

 

Voluntary disclosure of health application data

You have the option of synchronizing your personal health applications (e.g., iHealth) with the Oxygen Mobile Application to share your health data. Synchronization between these health applications and the Oxygen Application is not activated by default and your data will not be shared.

The Oxygen Application never sends any data to third party health mobile applications without your consent.

COOKIE AND LOG USAGE

We use cookies and other technologies, including log files, to collect information about the Oxygen Mobile Application’s usage as described below. This information is used to analyze trends, manage the Application, identify activities, and collect Application information. The cookies we use identify you only as a number. More details on the use of various technologies are provided below.

Category  Cookie/Log Name  Cookie Usage  Expiry 
Performance  

ASP.NET_SessionId, ASPXANONYMOUS, .ASPXAUTH, .DOTNETNUKE, language, authentication

 CMS pre-setting cookie helps users start their session on the Oxygen Portal Automatic cleansing at the end of the browsing session 
Authentication Authentication, CCLSGN Supports a unique identifier with CGI’s active directory and the use of a virtual coach Automatic cleansing at the end of the browsing session
Authentication Account creation date log (time & date)
Last activity log time (time & date)
Last access log (time & date)		 Measures traffic and provides access information to portal administrators Cleansing after three months
Authentication Participation log Register for measuring participation in CGI's internal activities No automatic cleansing is setup. Cleansing is performed when the member leaves CGI
User Navigation slider5362, xxxx_Viewed_xx, DNNEventsxxxx Helps users navigate articles on the Oxygen Portal Automatic cleansing at the end of the browsing session
Cookie-based measuring __utmc, __utma, __utmh, __utmt, __utmz, _ga, _gat, _gid Measures traffic on the portal with Google Analytics Automatic cleansing at the end of the browsing session

CGI may review server logs for security reasons, such as to detect network intrusions. In the event of a criminal act, server log data—which includes visitors’ IP addresses—could be used to trace and identify an individual. In such cases, raw log data would be shared with agencies authorized to investigate such security breaches. Logs and cookies do not automatically link the information collected to any personal information you voluntarily provide in or through the Application.

 

DISCLOSURE OF PERSONAL DATA

CGI does not share your information with any third party. CGI may disclose your Personal Data to administrative, judicial or governmental authorities, state agencies or public bodies, strictly in accordance with Applicable Data Protection Legislation and Local Legislation, and after careful review, the legality of any order to disclose data. CGI will challenge the order if there are grounds under the law of the country of destination to do so.

SECURITY MEASURES TO PROTECT YOUR PERSONAL DATA

To protect all personal data that you transmit when using the Application, we apply physical, technical and administrative security measures to prevent the unauthorized access, use, and disclosure of information. The Application uses the HTTPS protocol to ensure the confidentiality and integrity of data sent to and received from the Application. 

YOUR RIGHTS

You have the right to access your personal data. For legitimate purposes, you can rectify or oppose to the processing of your personal data. You are also entitled to ask for receiving your personal data in a structured and standard format. In case of any such request or complaint, please send an email to privacy@cgi.com. In any case, where CGI would not address properly your request, you have the right to lodge a complaint with the competent data protection authority

 

PRIVACY NOTICE UPDATES

By using this Mobile Application, you consent to the collection, use, and disclosure of your personal information as described in this Notice. CGI invites you to review this Notice on a regular basis and reserves the right to change it at any time without notice.