Website Privacy Policy

At CGI, we are transparent about how we use your personal data when visiting our website (the “Website”). The purpose of this website privacy policy (the “Policy”) is to inform you about our practices in connection with the collection, use and disclosure of the personal data you make available to us. Furthermore, this Policy describes the type of data that may be collected by our use of cookies and other technologies across our Website.

This Policy applies to www.cgi.com and any authorized sub-sites that expressly adopt, display or link back to this Policy.

For California residents, see the CGI Notice for California Consumers.

Collection and use of personal information
We may collect personal data that you voluntarily provide to us when:

  • You request information about our services;
  • You submit questions to us;
  • You subscribe to our services; and
  • You choose to submit your resume in relation to career opportunities posted on our Website.

The personal data provided by you may be used to communicate with you in connection with your various inquiries and subscriptions or to consider you for employment purposes, and will be kept for the time period in which it is necessary for the purpose it was collected.

Disclosure of personal data
Your personal data may be shared outside of the country where you are located, with relevant CGI affiliates in charge of dealing with your inquiries, subscriptions or applications. The list of CGI affiliates and country of location is available from https://www.cgi.com/offices.

Where such transfers take place, CGI has implemented internal privacy policies and processes that ensure a high level of protection of your personal information across CGI affiliates, irrespective of where the personal information originates or is processed.

We may also share data provided by you with service providers that we retain to perform services on our behalf, such as third party content providers that facilitate event registrations, support displaying CGI videos, and enable sharing of CGI content in social media. These providers are contractually limited from using or disclosing the data except as is necessary to provide services to us or to comply with legal requirements. In addition, we may share personal information at your discretion, such as when you enroll in a webinar or pay for a service. Furthermore, we may disclose data about you where we are required or permitted by law to do so.

Our security measures to protect personal data
We maintain reasonable physical, technical and administrative safeguards to help protect against the unauthorized access, use and disclosure of personal data you voluntarily provide to us.

It should be noted that we cannot be held responsible for any personal data you share or post on public spaces, such as our blogs. Such public spaces may be consulted or viewed by anyone visiting our Website and, as such, falls outside the scope of this Policy.

Access, review and correction
You have the right to access your personal data. For legitimate purposes, you can rectify or oppose to the processing of your personal data. You also are entitled to ask to receive your personal data in a structured and standard format. In case of any such request or complaint, please send an email to privacy@cgi.com or write to CGI's Chief Data Protection Office (Legal Department) CGI Inc., 1350 René-Lévesque Blvd. West, Montréal, Canada, QC H3G 1T4.

To the extent permitted by applicable law, where CGI would not address properly your request, you have the right to lodge a complaint with the competent data protection authority.

Use of technology: cookies and logs

Cookies
We may collect data in connection with your visit to our Website through the use of cookies. Cookies are identifiers that are transferred to your computer’s hard drive through your web browser to enable our systems to recognize your browser. We may also collect data that your browser sends us, such as your IP address, browser type, location, language, access time and referring Web site addresses.

Such data may be used to analyze trends, to administer the site, to track your movements around the site and to gather demographic data about our visitor base as a whole. The data gathered by these cookies is in the form of aggregated anonymous data.

We use different types of cookies as summarized below:

Strictly necessary cookies

These cookies are strictly necessary to offer you the basic functionalities of our Website, to deliver the services you have specifically asked for, and to remember your settings, such as detection of your language preferences in English or French.

Name Purpose Retention period
JSESSIONID General purpose platform session cookie, used by sites written in JSP. Usually used to maintain an anonymous user session by the server. SESSION
OptanonConsent This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor. PERSISTENT
OptanonAlertBoxClosed This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information. PERSISTENT
_jobFilters This cookie used to retain values for careers advance search drop-down for the user after page refresh or browser back option. PERSISTENT
language There are many different types of cookies associated with this name, and a more detailed look at how it is used on a particular website is generally recommended. However, in most cases it will likely be used to store language preferences, potentially to serve up content in the stored language. The ICC category given here is based on this usage. PERSISTENT
cookie-agreed-version Stores cookie consent module version 365 Days
cookie-agreed Stores the user's cookie consent state for the current domain 365 Days
cookie-agreed-categories Stores the user's cookie consent category states for the current domain 365 Days
Functional cookies

Cookies that allow a CGI website to ‘remember’ choices made by site visitors in the past, such as (but not limited to) log-in information (user name and password), geographic location (for such things as weather reports and time zones), accessibility configurations, and language preferences.

Name Purpose Retention period
__cfduid This domain is owned by HubSpot. This particular domain for the company ensures that all HubSpot features and functionality are added to the site correctly. PERSISTENT
hubspotutk This cookie name is associated with websites built on the HubSpot platform. HubSpot report that its purpose is user authentication. As a persistent rather than a session cookie it cannot be classified as Strictly Necessary. PERSISTENT
__hssrc This cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics. PERSISTENT
_gat This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes. PERSISTENT
__hstc This cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics. PERSISTENT
__hssc This cookie name is associated with websites built on the HubSpot platform. It is reported by them as being used for website analytics. PERSISTENT
AKA_A2 This cookie is generally provided by Akamai and is used for the Advanced Acceleration feature, which enables DNS Prefetch and HTTP2 Push. PERSISTENT
_gat_UA-399437-1 This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. PERSISTENT
_gid This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. PERSISTENT
_ga This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners. PERSISTENT
__cfduid This domain is owned by HubSpot. This particular domain for the company ensures that all HubSpot features and functionality are added to the site correctly. PERSISTENT
Statistics cookies

Cookies that allow a CGI website to ‘remember’ choices made by site visitors in the past, such as (but not limited to) log-in information (user name and password), geographic location (for such things as weather reports and time zones), accessibility configurations, and language preferences.

Name Purpose Retention period
IDE This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange PERSISTENT
test_cookie This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange PERSISTENT
GPS YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. PERSISTENT
VISITOR_INFO1_LIVE This cookie is used as a unique identifier to track viewing of videos PERSISTENT
YSC YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. SESSION
uuid This domain is owned by MediaMath Inc. a US based digital advertising business. PERSISTENT
lang This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. SESSION
lissc This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. PERSISTENT
UserMatchHistory This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. PERSISTENT
bcookie This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. PERSISTENT
bscookie This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. PERSISTENT
lidc This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain. PERSISTENT
__cfduid This domain is owned by AddToAny. The main business activity is: Social Sharing Services and Tracking PERSISTENT
__cfduid This domain is owned by HubSpot. This company provides a range of online marketing and sales technology and services. PERSISTENT
__cfduid This domain is owned by HubSpot. The company provides a range of online marketing and sales technology and services. PERSISTENT
lang This domain is owned by Twitter. The main business activity is: Social Networking Services. Where twitter acts as a third party host, it collects data through a range of plug-ins and integrations, that is primarily used for tracking and targeting. Twitter does not currently provide information on the use of specific cookies. SESSION
__cfduid This domain is owned by HubSpot to create Lead Flows for marketing and sales purposes. PERSISTENT
Marketing cookies

These are persistent cookies, usually of third-party provenance, and are used by advertisers to deliver relevant content or to limit exposure to certain ads. CGI does not generally use these cookies.

Name Purpose Retention period
No cookies has been found.

You may choose to disable all or certain cookies on your computer by modifying your web browser. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit the tutorials provided by your web browser provider such as:

Please note that if you choose to disable cookies, this may impact the performance of the Website during your visit.

Logs
CGI may also use logs to collect data about visitors’ use of the Website. CGI may review server logs for security purposes, for example, to detect intrusions into our network. Server log data, which contains visitors' IP addresses, could in instances of criminal malfeasance be used to trace and identify individuals. In such instances, raw data logs would be shared with appropriate investigative bodies authorized to investigate such breaches of security. Like cookies, logs do not cross reference the data automatically collected with any type of personal data that is voluntarily offered by you on or through this Website.

Links to non-CGI websites and third-party applications
This Website may contain links to third-party websites and third-party applications that are not affiliated with CGI (such as YouTube and Vimeo for videos, Google for Maps, ShareThis for social sharing, Twitter and Facebook feeds, Digicast for webcasts, and more). CGI does not in any way endorse or make any representations about such third-party websites and applications. As such, CGI is not responsible for the privacy practices or content of such third-party websites and applications that are subject to their own privacy policies. If you choose to access such links, we encourage you to review all third-party site privacy policies before submitting any of your data.

Changes
CGI reserves the right to make changes to this Policy from time to time without notice.

Privacy questions
For additional information about our online privacy practices, please contact us at privacy@cgi.com.