CADO Privacy Policy
(Effective April 2025)
As a data controller, the Civil Aviation Decarbonization Organization (CADO) (“CADO”, "we"), with corporation number 1680570-1 with its registered office at SS135-800 rue du Square-Victoria, Montreal, QC, H3C 0B4, Canada, would like to thank you for visiting our website (the “Website”) and for your interest in our services and products.
CADO is fully committed to protecting the privacy interests of individuals who provide us with personal data about themselves and to ensuring compliance with applicable data protection laws notably the Canada Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the Quebec Act Respecting the Protection of Personal Information in the private sector.
Your privacy is important to us, and we want you to feel comfortable when visiting our site. We take steps to ensure that your personal data, (i.e. any information relating to an identified or identifiable natural person) collected, processed and used in connection with your visit to our Website will be protected from unauthorized access, misuse, loss and destruction. We permit the anonymous use of the Website, or the use of the site under a pseudonym as far as technically possible and reasonable.
This Data Protection Policy may be updated from time to time. We therefore ask you to consult it regularly.
We have created this Data Protection Policy to explain how and why specific types of personal data are collected from users of this Website, are processed and used. This Data Protection Policy also provides an overview of the appropriate protection measures taken to safeguard your personal data.
What is the purpose and scope of this Data Protection Policy?
This Data Protection Policy applies to all personal data collected, processed and used by CADO when you visit the website located at www.saf-registry.org and any webpages accessible that do not indicate that the visitor is leaving (or has left) this Website. It does not apply to websites controlled by third parties to which the website may contain links (“third-party websites") or any CADO affiliate websites, which have their own data protection policies.
Please check the data protection policies of third-party sites, as CADO is not responsible for the content or privacy measures of third-party sites and has no control over them.
The content of this Data Protection Policy may also be subject to any additional conditions or disclaimers or other contractual terms that you have entered into with CADO, as well as any applicable and binding laws and regulations.
What information do we collect from you and for what purposes?
When you visit the Website, our web server automatically records details of your visit (for example your IP address, the website from which you linked to our Website, the type of browser software used, the individual sub-pages of the Website that you actually accessed, the date and duration of your visit).
While using the Website, we do not collect or store your personal data. You may nevertheless be asked to submit your personal data such as name, e-mail address and phone number in order for you to raise an inquiry, subscribe to newsletters alerts or other forms of marketing, or for us to contact you.
CADO shall only collect, process and use your personal data as reasonably necessary for the purpose of:
- addressing your enquiries
- sending you marketing materials as subscribed to by you
- observing any legal, governmental or regulatory requirements of any relevant jurisdiction
- registration and accessing of the SAF Registry
It is not mandatory that you provide us with your personal data, provided that you acknowledge that if you do not provide us with your personal data, we may not be able to provide you with our products and services.
On what legal basis do we process the data, and for how long do we store your personal data?
Your personal data is processed in accordance with the above-mentioned purposes for the completion of (pre-) contractual measures and to pursue our business purposes. We shall rely on your consent where mandatory. We may also process your personal data based on our obligation to comply with applicable legal or regulatory requirements.
We store your personal data for as long as we need it to achieve these objectives. As soon as we no longer need your personal data for the purposes mentioned, we will delete the personal data from our systems, unless we are legally obliged to store it.
How do we use tracking technologies?
CADO uses tracking technologies such as cookies and tags. For details on how we use cookies and similar technologies, please refer to our cookies policy.
Who do we share your information with?
We will keep any personal data held by us confidential. For the purposes set out above, CADO may share your personal data with affiliates and representatives of CADO, and third parties such as marketing agencies or web analytics service providers within and outside of your country of residence.
Our affiliates, representatives and third parties who have access to the personal data collected, processed and used via the Website are obliged to observe data protection regulations.
We may also share your personal data with government agencies and institutions, regulators, etc. in accordance with the applicable laws, regulations, a court order or an official request, or in accordance with and for the purposes of official (regulatory) policies or similar procedures as required or permitted by applicable law.
Personal data may be transferred to CADO affiliates located in countries outside your country of residence, whose laws may offer a lower level of data protection. CADO shall then implement appropriate data protection measures as to ensure an appropriate level of protection.
How do we handle electronic messages sent to and from CADO?
All electronic messages sent to and from CADO are protected by appropriate technical and organizational measures within our systems, and may only be accessed by individuals not directly involved in the communication in specific, justified cases according to the applicable laws and regulations (e.g. a court ruling, suspected criminal behavior, breach of supervisory obligations); they are only accessed by certain individuals in defined functions (e.g. legal, compliance, risk). Each part of the procedure and the search criteria used are logged.
What should you bear in mind when sending data over the internet?
The internet is generally not considered to be a secure environment, and information sent via the internet (such as to or from the Website, or as an electronic message) may be intercepted by unauthorized third parties, which may lead to divulging information, changes to content or technical failure. Even if both the sender and the recipient are located in the same country, data sent via the internet may be transmitted across international borders and forwarded to a country where the level of privacy is lower than in your country of residence.
Please note that we do not accept any responsibility or liability for the security of your data while it is being transmitted via the internet to CADO. To protect your privacy, we remind you that you can use other means of communication with CADO where appropriate.
How can you exercise your rights as a user?
Where permitted by law, you have the right to:
- Request information about your personal data, including information such as the source and categories of data, reasons for processing, recipients (or categories of recipients) and the retention period;
- Request to update or correct your personal data if such data is inaccurate;
- Request that your personal data be deleted from our systems, once it is no longer required for the above-mentioned purposes.
Please contact us if you have any questions or comments regarding privacy or to exercise your aforementioned rights:
Data Protection Office – write to CADO, c/o SS135-800 rue du Square-Victoria, Montreal, QC, H3C 0B4, Canada.