Privacy Policy

Published 8 November 2025, Updated 22 February 2026

Privacy Policy for AirSupervision System
Last updated: December 16th, 2025



2 Preamble

The Act to modernize legislative provisions concerning the protection of personal information ¹ (hereinafter referred to as “Law 25”) updates the framework applicable to the protection of personal information.

Initially introduced as Bill 64, Law 25 was adopted by the National Assembly of Québec (Canada) in September 2021 and its new provisions came into effect in September 2022.

AirSupervision is now required to adopt and enforce a privacy policy when collecting personal information by technological means.

This document presents the Privacy Policy for the use of the AirSupervision system (hereinafter the “Policy”), owner and manager of this system, to ensure the confidentiality of your personal information.

This privacy policy applies only to the system used by registered institutions, called “AirSupervision” ² (hereinafter the “system”) accessible to staff, students and members.

AirSupervision recognizes the importance of the confidentiality and sensitivity of your personal information and takes reasonable and appropriate measures to protect it against accidental loss and unauthorized access, use, modification and disclosure of your personal information.

By using the system, you acknowledge that your personal information is processed in accordance with this Privacy Policy and the privacy policy of the registered institution responsible for the data, in compliance with applicable law.


3 Legal and regulatory framework for personal information protection

Where applicable, AirSupervision aligns its practices with generally recognized data protection principles, including those reflected in the General Data Protection Regulation (GDPR).

3.1 Designer and editor
This system has been set up and edited by:
AirSupervision
Email: support@airsupervision.com
This system is hosted by:
AirSupervision
5800, route de l’aéroport, St-Hubert J3Y8Y9, Quebec

3.2 Protection of personal data
AirSupervision undertakes to respect the rules for protecting the privacy of individuals using its system.

By accessing and using the system, the user acknowledges having read all the legal notices and general conditions of use.
During the consultation of the system, you may be asked to voluntarily provide certain personal data, such as your name, email address or postal address. This information is useful for accessing certain sections (or services) of the system.
You are free not to provide us with this data. However, the sections requiring this information will not be accessible to you, in addition to the impossibility of accessing all the services and training programs offered by AirSupervision.

In accordance with applicable privacy legislation, including Québec’s Act respecting the protection of personal information in the private sector, individuals have the right to access, rectify, and request correction of their personal information, subject to applicable legal conditions.

3.3 Information on the Collection of Personal Information
You have the right to withdraw your consent to the collection, at any time, without affecting the lawfulness of the processing based on the consent made before its withdrawal.

You have the right to lodge a complaint with a supervisory authority, the Commission d’accès à l’information du Québec.

AirSupervision will keep the data for a period not exceeding that necessary in relation to the purposes for which they are processed, or for sufficient time to allow you to access the information if it has been used to make a decision that concerns you or your account. Information we no longer need will be destroyed or de-identified.


4 Collection of Personal Information

AirSupervision collects and processes only the personal information strictly necessary for the technical operation, security, and administration of the system.

Such information may include, in particular:

• account identification information (first name, last name, email address, user identifier, role);
• communication information required for the delivery of system notifications and messages;
• technical information automatically generated through the use of the system, such as connection logs, IP address, browser type, operating system, and access timestamps;
• information relating to user preferences and settings required for the proper functioning of the platform.

This information is used exclusively for purposes of security, access management, technical support, service continuity, and compliance with applicable legal obligations.

AirSupervision does not determine the purposes related to personal information of a pedagogical, administrative, academic, or regulatory nature, which remain the exclusive responsibility of the registered institutions.

Personal information processed by AirSupervision in connection with the operation of the system is processed solely in its capacity as a technology service provider, in accordance with the documented instructions of the registered institutions.


5 Use of Personal Information

Personal information processed through the AirSupervision system is used by registered institutions in accordance with their operational, educational, administrative, and regulatory purposes, as defined in their own privacy policies and applicable law.
AirSupervision processes personal information solely as a technology service provider, for the purposes of operating, securing, maintaining, and supporting the system, and does not use such information for its own independent purposes.

5.1 Use of Artificial Intelligence (AI) Systems
AirSupervision is a configurable system platform that may offer optional artificial intelligence (AI)–assisted features, depending on system configuration and institutional choices.

The activation, configuration, and use of AI features within AirSupervision are controlled by each registered institution through system settings and are subject to the institution’s own policies, approvals, and applicable legal requirements.

Where enabled, AI features within AirSupervision:

• Are used strictly as decision-support tools
• Do not make autonomous decisions
• Do not replace human judgment, professional responsibility, or organizational authority
• Do not constitute official records, evaluations, certifications, or regulatory determinations

AirSupervision is designed so that, where AI features are enabled, no personal information, and no data that directly or indirectly identifies a natural person, is transmitted to external AI service providers. Data submitted for AI processing is limited to de-identified, anonymized, aggregated, or operational metrics that cannot reasonably be used to identify an individual.

AI-generated outputs are provided for informational purposes only and must always be reviewed and validated by users in accordance with applicable regulations, institutional policies, and official records.

Each institution remains responsible for ensuring that the use of AI features within AirSupervision complies with its institutional privacy policy and, where applicable, the completion of a Privacy Impact Assessment (PIA).


6 Disclosure of Personal Information

6.1 Responsibility of registered institutions
Registered institutions using the AirSupervision system act as the data controllers with respect to personal information processed through the platform.
They are solely responsible for determining the purposes, legal bases, recipients, and conditions under which personal information may be disclosed, in accordance with applicable laws and their own privacy policies.


6.2 Role of AirSupervision
AirSupervision acts exclusively as a technology service provider.
It does not independently disclose personal information and does not determine the recipients or purposes of any disclosure.

Personal information may be processed or transmitted by AirSupervision only:

• on documented instructions from a registered institution;
• to the extent necessary to operate, maintain, secure, and support the system;
• to comply with applicable legal obligations when acting on behalf of, or in cooperation with, the registered institution.

6.3 Service providers and third parties
Where personal information is disclosed to third-party service providers, such disclosure is initiated and authorized by the registered institution.
AirSupervision ensures that service providers acting under its control are contractually bound to confidentiality, data protection, and security obligations consistent with applicable law.


6.4 Legal and regulatory requirements
Where required by law, personal information may be disclosed in response to a valid legal request.
In such cases, AirSupervision acts in coordination with the registered institution and does not make independent determinations regarding the scope or lawfulness of the disclosure, except where legally required to do so.

AirSupervision does not use personal information for its own purposes and does not disclose personal information except as instructed by registered institutions or as required by applicable law.


7 Cookies

When you visit a website, it may store or retrieve information on your browser, mainly in the form of cookies.

AirSupervision uses cookies on its system only to facilitate navigation. These cookies do not contain any personal information, they are only temporary random numbers which can not be used to identify you.

You can set your browser to block cookies by setting your Internet browser, but this may affect your experience and limit access to certain features. You can destroy cookies at any time by deleting your browsing history.

By using AirSupervision’s system, you agree that AirSupervision may place cookies on your device.


8 Automatically exchanged data

When you access the system, your computer and our server automatically exchange data. This exchange is necessary for the server to send you a file compatible with the computer equipment you are using. The data exchanged are as follows:

• identification of your Internet service provider;
• your IP address (a numeric address that accurately locates a computer connected to the Internet, for example: 123.45.67.890);
• resulting from the analysis of the IP address, the city and the country where you established the connection;
• the type of browser (e.g. Chrome, Firefox, Edge) and operating system (e.g. Windows, Mac OS) you are using;
• the pages you visit;
• the date and time you access these pages;
• the address of the referring site, if you are accessing the system from another website.

Most of the information transmitted automatically between computers does not reveal your identity. It is collected only because of technological requirements inherent in system browsing.

AirSupervision stores this data for statistical purposes. They are used to count the number of visits and to know the most visited pages, the technology used by visitors, the addresses of referring sites and the country of origin of visitors.


9 Protection of Personal Information and Security Measures

AirSupervision has implemented appropriate and reasonable physical, organizational, contractual and technological security measures to protect personal informations against loss or theft and against access, disclosure, copying, use or modification not authorized by law or contrary to its Privacy Policy.

AirSupervision has taken steps to ensure that only those staff members who absolutely must have access to your personal information in the course of their duties are authorized to access it.

All individuals using the system must, among other things:

• Do not leave the computer screen unattended while viewing confidential information and always disconnect from this secure section when they are away from their computer.
• Do not copy or print the system Items unless the section of the system they wish to copy or print expressly permits it, or otherwise without express permission.
• Ensure that none of their security information is leaked to anyone, as they will be responsible for any activities that occur when a person logs in using their security credentials.
• For questions regarding the operation of the AirSupervision platform, you may contact support@airsupervision.com. Requests relating to personal information must be addressed to the registered institution responsible for the data.

Persons working for or on behalf of AirSupervision must, in particular:

• Make reasonable efforts to minimize the risk of unintentional disclosure of personal information;
• Take special precautions to ensure that personal information is not spied on, heard, accessed or lost when working on premises other than AirSupervision’s offices; and
• Take reasonable steps to protect personal information as it moves from one location to another.

Subcontractors with access to personal information in AirSupervision’s custody or control are informed of this policy and other applicable policies and processes to ensure the security and protection of personal information. All subcontractors must agree in writing to agree to comply with applicable policies, processes and laws.


10 Request for access to or correction of personal information
AirSupervision acts as a technology service provider. Requests for access to or correction of personal information must be submitted to the registered institution responsible for the data, in accordance with that institution’s privacy policy and applicable law.

AirSupervision provides technical tools to support institutions in fulfilling their legal obligations but does not process such requests directly.


11 External sites

AirSupervision’s system contains links to external sites. AirSupervision is not responsible for the content of these sites or their privacy practices, and invites you to read their privacy policy.


12 Dissemination and updating of the policy

The person responsible for the protection of personal information, assisted by the Access to Information and Privacy Committee, ensures that AirSupervision’s system policy is disseminated and updated.


13 Responsibility for enforcement and policy review

The general direction is responsible for the implementation of the policy and its revision.


14 Entry into force

This policy is approved by the Access to Information and Privacy Committee. It shall enter into force on the day of its adoption by the Board of Directors.
² AirSupervision system: https://www.airsupervision.com/


If there are any questions regarding this privacy policy you may contact:
the person responsible for access to documents and the protection of personal information
support@airsupervision.com