IT, Cybersecurity & AI

Privacy and Data Protection Policy

SynergyAG is committed to safeguarding personal, sensitive, and proprietary information in accordance with applicable privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial laws. This policy outlines the types of data covered under privacy protections, employee responsibilities, and the  procedures for secure data handling, retention, and disposal.

This policy applies to all confidential or identifiable information collected, stored, or used in the course of SynergyAG’s operations. Protected data includes, but is not limited to:

• Employee records such as health information, compensation details, and emergency contacts
• Client and vendor data, including contracts, service logs, and business correspondence
• Company data such as strategic plans, internal communications, and proprietary documents
• System access credentials, including login information and authentication data
• Any data housed in physical records, emails, cloud platforms, internal systems, or spreadsheets

Employee Responsibilities

Employees play a critical role in protecting SynergyAG’s data assets. All employees must:

• Keep both physical and digital records secure at all times
• Use strong, unique passwords and comply with IT protocols (e.g., two-factor authentication, encrypted storage)
• Log out of systems and lock computers or devices when unattended
• Immediately report any suspected data breach or unauthorized access to

HR@synergy.ag or a manager

• Avoid transmitting or storing confidential information on unauthorized devices, apps, or external platforms