1. Objectives

This Policy aims to establish guidelines, responsibilities, and necessary information for the Personal Data Subject regarding how PROTECTA DEFESA E SEGURANÇA (Protecta) handles Personal Data, the rights of the data subject and how to exercise them, as well as the security measures we adopt to handle Personal Data.

2. Scope

This Policy applies to all employees and individuals accessing Protecta® portals and websites.

3. Definitions

• Personal Data: Information that identifies a person, either directly or indirectly.
• General Data Protection Law (LGPD): Law establishing rules for processing personal data, including its collection, storage, sharing, and use.
• Registration Data: Name, email, phone, and gender. These data are collected when you make a request on our website.
• Financial Data: Banking details and payment methods. These data are collected when you make a purchase.
• Browsing Data: Interaction data collected automatically without direct user input, such as IP address and cookies.
• Professional Information: Data provided in résumés, such as name, ID numbers, academic background, professional experience, social media profiles, state, city, and areas of interest.
• Employee Data: Personal data collected to meet legal obligations, fulfill employment contracts, and manage internal employee matters.

4. Data Sharing

Due to the nature of the access platforms, whether public websites or restricted platforms for employees, suppliers, and clients, data may be shared:

i. With the company providing development and support services for the Protecta® website to manage and maintain its quality and security;
ii. With an acquiring party, service providers, or third parties involved in the consideration, negotiation, or conclusion of a transaction in which we are acquired, merged with another company, or sell, liquidate, or transfer all or part of our assets; and
iii. With government authorities, regulatory agencies, or other public authorities to whom we are accountable.

5. International Transfers

Protecta® does not directly transfer personal data collected in Brazil to other countries. However, third-party services we use may conduct transfers to other countries. We use third-party services that aim to adopt adequate standards of privacy and personal data protection, especially in compliance with the guidelines of the National Data Protection Authority ("ANPD").

6. Data Storage

Protecta® retains data for as long as necessary to fulfill the purposes for which they were collected, including to meet legal, contractual, accounting, or regulatory requirements or requests from competent authorities.

7. Data Subject Rights

Protecta® respects and guarantees the data subject the ability to exercise the following rights:

i. Confirmation of the existence of data processing;
ii. Access to the data;
iii. Correction of incomplete, inaccurate, or outdated data;
iv. Anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data;
v. Data portability to another service or product provider, upon explicit request, in accordance with the National Authority's regulations, observing trade and industrial secrets;
vi. Deletion of personal data processed with consent, except in cases provided by law (Article 16 of the LGPD);
vii. Information on public and private entities with which data has been shared;
viii. Information on the possibility of refusing consent and the consequences of such refusal;
ix. Revocation of consent as per Article 8(5) of the LGPD.
x. Para solicitar acesso a dados pessoais tratados.

8. Data Protection Officer

Protecta® has appointed CLA - Cliffton Larson Allen Brasil Consultoria Empresarial e Tecnologia da Informação ("CLA Brasil") as the Data Protection Officer, with Claudio Mello de Castro as the Data Protection Officer and Mariana Laselva as the Deputy Data Protection Officer. Contact email: [email protected].

Protecta® may modify or update the information in this policy. We recommend that the data subject periodically access our policy to stay informed about potential changes.

RECORDS

IDENTIFICATION	STORAGE	ACCESS	RETRIEVAL	RETENTION	DISPOSAL
PRIVACY POLICY	https://coplatex.shar epoint.com/sites/Pro grama-de-Integridade	SGQ	CHRONOLOGICAL	24 MONTHS	DELETE

 

Due to Law No. 13.709/2018 – LGPD, document PC-0002 signed by the listed signatories is stored in an electronic folder with restricted access for the compliance department, while a faithful copy of the document is available for public access.Due to Law No. 13.709/2018 – LGPD, document PC-0002 signed by the listed signatories is stored in an electronic folder with restricted access for the compliance department, while a faithful copy of the document is available for public access.