Legal Notice - A2V Carbon

Legal Notice and Privacy Policy

1. Website Publishe

This website is published by:

A2V CARBON inc.
Head Office: 500-438 McGill Street, Montreal (Quebec), H2Y 2G1, Canada
Quebec Enterprise Number (NEQ): 1181670853
Share Capital: 10,000 CAD
Email: contact@a2vcarbon.com
Website: www.a2vcarbon.com
http://www.a2vcarbon.com

A2V Carbon is a validation and verification body for greenhouse gas emissions declarations

2. Activity Framework

A2V Carbon carries out its activities in accordance with the following standards:

ISO/IEC 17029
ISO 14065:2021
ISO 14064 (1, 2 and 3)
ISO 14066
IAF MD 4 and IAF MD 6
Applicable programs (including VCS)

A2V Carbon is legally responsible for validation and verification activities and opinions issued.

3. Hosting

This website is hosted by:

1&1 IONOS SE
Head Office: 7 Place de la Gare, 57200 Sarreguemines, France
SIRET: 431 303 775 00016
Phone: 0970 808 911
Website: www.ionos.fr

3bis. Website Design

This website was designed and developed by:

Roche Conseil
Website : www.rocheconseil.fr

4. Intellectual Property

The website content is protected.

Any reproduction without authorization is prohibited.

5. Limitation of Liability

A2V Carbon does not guarantee the absence of errors or omissions on the website.

The use of information is the user’s responsibility.

Privacy Policy and Data Management

6. General Principles

A2V Carbon ensures complete control of information obtained or generated in the context of its activities, in accordance with:

aux exigences ISO/IEC 17029
ISO 14065 requirements
ISO 14065 requirements

The confidentiality, integrity, and availability of data are ensured by documented organizational and technical measures.

7. Data Collected

Data collected may include:

identification data
professional data
technical data (logs, IP, cookies)

They are collected solely for:

interactions with users
contractual activities
normative and regulatory obligations

8. Processing Purposes

Data is used exclusively for:

managing relationships with users and clients
conducting validation and verification activities
compliance with normative, regulatory, and accreditation requirements

9. Information Confidentiality

All information is considered confidential, including:

client data
information from assignments
technical documents and evidence

Confidentiality is ensured by:

legally binding contractual commitments
confidentiality obligations for personnel and service providers
data access restrictions

10. Document and Record Management

A2V Carbon implements a structured document management system covering:

Quality Manual
procedures
programs
records

Each document is:

identified by a number and version
approved before distribution
controlled in a secure system

Records include in particular:

client data
audit evidence
decisions and opinions
complaints and corrective actions

11. Data Security and Access

Data access is strictly controlled:

individual named access
“need-to-know” principle
read-only access for most users
immediate revocation of access upon departure

Data is stored on secure systems with:

restricted write permissions
minimal access traceability
protection against unauthorized modification

12. Information Systems

Personal data collected in the context of A2V Carbon’s activities is stored on an internal server operated and managed by the organization’s Information Systems Department (ISD). These systems are configured to ensure:

data availability
information integrity
client data confidentiality

Any major system modification is subject to:

prior validation
impact analysis
traceability

13. Use of Information Technologies (IT)

In the context of remote activities:

tools are selected to ensure security and confidentiality
exchanges are protected against unauthorized access
alternatives are implemented if conditions are not met

14. Backup and Business Continuity

A2V Carbon ensures the continuity of its activities through:

automatic daily backup
storage on multiple separate media
external backup
periodic restoration tests

In case of incident:

data restoration within 24h target
maintenance of critical activities

15. Data Integrity

Data is protected against any alteration:

finalized deliverables in non-modifiable format
secure read-only storage
prohibition of modification without formalized procedure

16. Data Retention

Data is retained:

minimum 6 years
or according to the requirements of applicable programs

Deletion is suspended in case of:

complaint or appeal
accreditation audit
litigation
investigation

17. External Documents and Monitoring

A2V Carbon keeps up-to-date applicable external documents:

ISO standards
Standards Council of Canada requirements
VCS standards and other programs

Continuous monitoring is carried out and impacts are analyzed and tracked.

18. Data Disclosure

Data may be disclosed only:

in case of legal obligation
within the framework of accreditation evaluations
within the framework of applicable programs
with client consent

The client is informed in advance unless legally constrained.

19. Accreditation Body Access

A2V Carbon may allow access to information to:

the accreditation body
its assessors
authorized observers

This access is strictly regulated and subject to confidentiality.

20. Individual Rights

Users have the following rights:

access
rectification
deletion
objection
restriction

Contact : contact@a2vcarbon.com

21. Cookies

The website may use cookies for:

technical operation
audience measurement

22. Impartiality and Independence

A2V Carbon guarantees:

absence of conflict of interest
absence of consulting activity
strict separation of roles

These principles are integrated into the management system.

23. Publication of Information

A2V Carbon informs the client in advance of any information intended to be made public.

No publication is made outside contractual, normative, or legal requirements.

24. International Data Transfers

Given A2V Carbon’s organization and international scope of intervention, personal data and information related to validation and verification assignments may be processed, stored, or accessed in several jurisdictions, including:

in Canada, where A2V Carbon’s head office is located;
within the European Union, particularly in France, where certain operational activities are conducted;
in any other country in which A2V Carbon is required to operate in the context of its validation and verification activities.

These transfers may result from:

the organization’s internal structure (teams, functions, support);
the use of secure information systems and digital tools;
the execution of international assignments involving clients, sites, or stakeholders located in different countries;
requirements related to applicable programs or accreditation bodies, particularly the Standards Council of Canada.

A2V Carbon ensures that any data transfer is carried out under conditions guaranteeing an adequate level of protection, in accordance with applicable regulations, including:

Regulation (EU) 2016/679 (GDPR) for data originating from the European Union;
applicable Canadian laws regarding personal information protection;
any applicable local regulations in countries of operation.

For this purpose, A2V Carbon implements, when required:

appropriate contractual safeguards (standard contractual clauses or equivalent);
technical and organizational measures ensuring the confidentiality, integrity, and security of data;
strict access restrictions based on the “need-to-know” principle;
prior assessment of risks related to international transfers.

When data is transferred to countries that do not benefit from an adequacy decision recognized by competent authorities, A2V Carbon ensures that appropriate safeguards are put in place

In all cases, data is processed in accordance with the principles of:

confidentiality
security
purpose limitation
data minimization

as defined in A2V Carbon’s management system and applicable normative requirements.

25. Updates

This document is updated:

in case of normative changes
in case of management system changes
in case of management system changes