The present Policy regulates the general conditions for the collection, use, storage, handling and protection of data on sites, platforms and Internet applications of Votorantim Participações S. A. and its subsidiaries or direct and/or indirect affiliates (VPAR), in accordance with Act 12.965/2014 (Brazilian Civil Rights Framework for the Internet).
The acceptance of this policy is essential for the use of the services and functions of VPAR sites, platforms and internet applications.
I - Data Collection
VPAR is fully committed to the privacy of the information that may be collected on its sites, platforms and Internet applications.
VPAR´s fundamental managing principle is based on the good moral character and reputation of its professionals and it pledges itself to guarantee, to the maximum extent, its ethical and transparent conduct in handling the information of users of its sites, platforms and Internet applications.
The collection of data on the VPAR sites, platforms and Internet applications is carried out with the following aims:
- To be highly efficient in the provision of its services and providing the adequate support to carry out its corporate objective;
- To match the appearance and content to the user´s preferences in order to provide him or her with the fastest , most user friendly and efficient access;
- To authenticate accesses;
- To seek adequate security for the services offered and means of identification in the case of improper or illegal uses;
- To resolve problems and create notification related to the use of VPAR sites, platforms and Internet applications;
- To publicize promotional actions on the VPAR sites, platforms and Internet applications or other VPAR initiatives, always providing ways allowing the user to cancel the receipt of promotional e-mails (opt out);
- To publicize promotional actions of partner companies that adopt privacy protection measures similar to the present policy, with the prior consent of the user;
- To check statistical information.
II - Collected Data
To carry out the above objectives, the VPAR sites, platforms and Internet applications may collect some data based on information:
- That the user himself or herself has freely provided, through the creation of accounts or the insertion of references related to the user in any context of the VPAR sites, platforms and Internet applications;
- In the way the user navigates the VPAR sites, platforms and Internet applications, as well as on the registration of access and general interactions on the VPAR sites, platforms and Internet applications. This kind of information may include data:
- On the device and systems/navigators that the user uses to access the VPAR sites, platforms and Internet applications, including the Internet protocol address (IP number);
- Likely to identify all and any use and interaction in the context of the VPAR sites, platforms and Internet applications;
- Relating to the time of each action by the user on the VPAR sites, platforms and Internet applications (date and time);
- Relating to the location of the user.
- Provided by external tools or platforms provided by partners and related to the navigator or user account (cookies or anonymous identification methods).
III - Storing, Handling and Protection of Data
The data collected through the VPAR sites, platforms and Internet applications is stored, handled and protected through the best practices of hosting, processing, backup and cryptography, according to its respective critical level.
The collected data is maintained in secret.
However, the user should take note that no Internet security system is guaranteed against undesirable invasions, and VPAR´s commitment is limited to the adoption of recommended protection measures, according to the current state of the technique.
Due to the structural features of the Internet, the data collected may be stored or handled abroad.
IV - Data Sharing
The VPAR sites, platforms and Internet applications only share data: (i) with other companies that are members of the same economic group or controlled by VPAR; (ii) in the circumstances foreseen in this clause; or (iii) with the prior authorization of the user.
The VPAR sites, platforms and Internet applications may use outsourced service providers for the storage or handling of data, providing a contract that assures its secrecy and confidentiality is adopted.
The VPAR sites, platforms and Internet applications may also share data with third parties through a legal order or application by the public prosecutor´s office, police or administrative authority within the terms of article 15, paragraph 3, of Act 12.965/14, or, also, if necessary to comply with any other government law or regulation.
V - Management, Correction and Exclusion of Data
VPAR is not responsible for the content or correction, veracity, authenticity, completeness and updating of the data provided by users of its sites, platforms or Internet applications, even in the case of any undue use of information published by users or frauds arising from the abuse of passwords.
It is the exclusive responsibility of the user to provide only information that is correct, true, authentic, complete and up to date, as well as to ensure the secrecy of his/her password, when applicable, and not to divulge it to third parties.
VPAR has an attendance channel for users and to denounce false/incorrect data published on its sites, platforms and Internet applications through the electronic address email@example.com. This channel can also be used to send any complaints or allegations.
At the express request of the user, via an e-mail sent to firstname.lastname@example.org, VPAR may exclude from its sites, platforms and Internet applications personal data related to the applicant, closing his/her account/profile, when applicable, except in the case where it is obliged to maintain registrations or data foreseen in law or through a legal order, application by the public prosecutor´s office, police or administrative authority within the terms of article art. 7, X, of Act 12.965/14.
VI - Right of editing and exclusion of content
However, this condition does not mean that VPAR is obliged, except within the terms of art. 15, paragraph 3 of Act 12.965/14, where requests for editing or removal are usually made through a legal order or application by the public prosecutor´s office, police or administrative authority.
VII - Spam
The VPAR sites, platforms and Internet applications will make the best efforts to avoid the sending of unsolicited e-mails.
Cooperate by sending complaints to email@example.com should you receive any unsolicited or potential invasive e-mail in the name of VPAR.
VIII - Links
The VPAR sites, platforms and Internet applications may contain connections and links to other Internet sites.
IX - Alterations in Policy
X - Applicable law and competent court