General Information
This section contains information regarding the processing of the user’s personal data, whether fully or partially automated or not, carried out by the website and which may or may not be stored. The purpose is to provide guidance regarding the information collected, the reasons for collection, and how the user can update, manage, export, or delete this information.
The website’s privacy policy complies with Federal Law No. 12,965 of April 23, 2014 (Marco Civil da Internet), Federal Law No. 13,709 of August 14, 2018 (Personal Data Protection Law), and EU Regulation No. 2016/679 of April 27, 2016 (General European Regulation for the Protection of Personal Data).
This privacy policy may be updated as a result of any regulatory updates, so the user is encouraged to consult this section periodically.
User rights
The website is committed to complying with the standards set out in the European General Data Protection Regulation (GDPR), in compliance with the following principles:
- Your personal data will be processed in a lawful, fair and transparent manner (lawfulness, fairness and transparency);
- Your personal data will only be collected for specific, explicit and legitimate purposes and may not be further processed in a manner incompatible with these purposes (purpose limitation);
- Your personal data will be collected in an appropriate, relevant and limited manner to the needs of the purpose for which they are processed (data minimization);
- Your personal data will be accurate and updated whenever necessary, so that inaccurate data is deleted or rectified whenever possible (accuracy);
- Your personal data will be stored in a form that allows the identification of data subjects only for the period necessary for the purposes for which they are processed (retention limitation);
- Your personal data will be treated securely, protected from unauthorized or unlawful processing and against accidental loss, destruction or damage, adopting appropriate technical or organizational measures (integrity and confidentiality).
The website user has the following rights, granted by Federal Law No. 13,709, of August 14, 2018 (Personal Data Protection Law) and by the European General Regulation on the Protection of Personal Data (GDPR):
- Right of confirmation and access: this is the user’s right to obtain confirmation from the website as to whether or not personal data concerning them are being processed and, if so, the right to access their personal data;
- Right to rectification: this is the user’s right to obtain from the website, without undue delay, the rectification of inaccurate personal data concerning him/her;
- Right to data deletion (right to be forgotten): this is the user’s right to have their data deleted from the website;
- Right to limit data processing: this is the user’s right to limit the processing of their personal data, which can be obtained when they contest the accuracy of the data, when the processing is unlawful, when the website no longer needs the data for the proposed purposes and when they have objected to the processing of the data and in the case of unnecessary data processing;
- Right to object: this is the user’s right to, at any time, object, for reasons related to their particular situation, to the processing of personal data concerning them, and may also object to the use of their personal data for marketing profiling purposes;
- Right to data portability: this is the user’s right to receive personal data concerning them that they have provided to the website, in a structured, commonly used and machine-readable format, and the right to transmit this data to another website;
- Right not to be subject to automated decisions: this is the user’s right not to be subject to any decision taken exclusively based on automated processing, including profiling, which produces effects in their legal sphere or which significantly affects them in a similar way.
The user will be informed in case of rectification or deletion of their data.
Information Collected
3.1. Type of data collected
The personal data collected by the website is only that necessary for user identification and access to certain services offered by the website.
Furthermore, data necessary for the execution of the sales or service provision contract concluded between the website and the user regarding the services offered will be collected, without which its execution will be impossible.
Other categories of data may be collected, provided they are provided with the user’s consent, or based on legitimate interest or other legal grounds.
The user agrees to provide only their own personal data and not that of third parties.
3.2. Legal basis for the processing of personal data.
By using the website’s services, the user consents to these terms and its privacy policy.
The user has the right to withdraw their consent at any time, without compromising the lawfulness of the personal data processed prior to withdrawal. Consent can be withdrawn by email: [email protected].
Personal data necessary for the execution and fulfillment of the services contracted by the user on the website may also be collected.
Personal data will only be processed without the user’s consent based on legitimate interest or for legally established reasons, including the following:
- To comply with a legal or regulatory obligation by the controller;
- For the purpose of carrying out studies by a research body, ensuring, whenever possible, the anonymization of personal data;
- When necessary for the execution of a contract or preliminary procedures related to a contract to which the user is a party, at the request of the data subject;
- For the regular exercise of rights in judicial, administrative or arbitration proceedings, the latter under the terms of Law No. 9,307, of September 23, 1996 (Arbitration Law);
- For credit protection, including as provided for in the relevant legislation.
3.3. Purposes of processing personal data.
The user’s personal data collected by the website is intended to facilitate, expedite, and fulfill the commitments established with the user and to enforce requests made through form completion.
Personal data may also be used for commercial purposes, to personalize the content offered to the user, as well as to support the website in improving the quality and functionality of its services.
The website may also collect user data for profiling purposes, i.e., the automated processing of personal data that consists of using such data to evaluate certain personal aspects of the user, primarily to analyze or predict aspects related to their professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movement.
Registration data will be used to allow the user access to certain website content exclusive to users registered in the profiles available for that user.
Finally, data necessary for the execution of the sales or service provision contract eventually concluded between the website and the user regarding the services offered will be collected.
If the website intends to process the user’s personal data for other purposes, the user must be informed of the other purposes, which must be carried out in compliance with the same rights and obligations.
3.4. Period for retention of personal data.
The user’s personal data will be retained indefinitely, unless the user requests its deletion.
Users’ personal data may only be retained after the termination of their employment relationship in the following cases:
- To comply with a legal or regulatory obligation by the controller;
- For study by a research body, ensuring, whenever possible, the anonymization of personal data;
- For the exclusive use of the controller, access by third parties is prohibited, and the data is anonymized.
Processing of personal data (Data Controller).
The controller, responsible for processing the user’s personal data, is the individual, legal entity, or other entity that, individually or jointly with others, determines the purposes and means of processing personal data. Data controllers are directly responsible for processing the user’s personal data.
Security in the processing of the user’s personal data.
The website undertakes to apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the most advanced techniques, application costs, and the nature, scope, context, and purposes of the processing, as well as the risks, of varying probability and severity, to the user’s rights and freedoms. However, the website is exempt from liability for the sole fault of a third party, such as in the case of a hacker or cracker attack, or the sole fault of the user, for example, who transfers their data to a third party, except if the hacking occurred due to a security breach of the website. The website also undertakes to notify the user within a timely manner if any type of breach of the security of their personal data occurs that may pose a high risk to their personal rights and freedoms.
A personal data breach is a security breach that results, accidentally or unlawfully, in the destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.
Finally, the website undertakes to treat the user’s personal data confidentially, within the legal limits.
Complaint to a supervisory authority.
Without prejudice to any other administrative or judicial remedy, all data subjects have the right to lodge a complaint with a supervisory authority. The complaint may be filed with the authority at the website’s headquarters, the user’s country of habitual residence, their place of work, or the place where the alleged infringement occurred.
Data and Information collected from Google
Here is the link to the Privacy Policy and the Revocation link for Users .