Protection of Personal Information

At Vast-Auto Distribution, the protection of personal information is taken very seriously. We do everything we can to protect it and we comply with the requirements of all applicable Federal and Provincial laws relating to the protection of personal information. Notably:

1. We have designated a privacy officer who is responsible for the protection of personal information

• 1. We have processes in place to quickly and efficiently respond to any request for information or any incident reported to the prp@vastauto.com email address. An email to this address will immediately alert our person in charge, as well as members of our incident management team.

2. We have implemented a personal information protection incident management plan that meets the requirements of the applicable laws.

3. We have implemented a policy and practices relating to the protection of personal information which includes:

• 1. Identification of the personal information we store
• 2. Assessment of whether storing personal information is still necessary and then, where possible, deleting, anonymizing or securely archiving the information.
• 3. Reviews of methods, procedures and security protocols to minimize the risk of unauthorized access
• 4. Reviews of agreements with our various service providers to ensure that these providers are also in compliance with the law.
• 5. Implementation of the ability, where possible, to provide or delete personal information at the request of the concerned person, when other laws and regulatory requirements allow it.

4. We regularly review our policies and practices regarding information collection and storage, cyber security and access to our premises.

For questions regarding privacy and the protection of personal information:

Patrick Laframboise

VP innovation et TI / VP Innovation & IT