Data Privacy Statement

Security and privacy are basic principles of our company!

We also believe that transparency is fundamental in handling information and we are committed to complying with the requirements of Law 13,709/2018, known as the General Data Protection Law (LGPD).

Therefore, we are committed to the privacy of our customers, employees, suppliers, visitors, business partners and anyone who accesses our website and facilities or who eventually sends us personal data as a result of our relationship.

Thus, this notice describes how we obtain, store, use, share and handle your personal information. By them we understand the set of data of an individual, which allows identifying them, directly or indirectly, from the information collected in the context of our commercial and professional relationship.

The principles set out in this privacy notice apply to any personal information that you provide to SULFIX and/or that we collect about you from other sources.

Information We Collect

When we need your personal information, we usually ask you directly at some point in our relationship, where we make you aware of the reason for the request, in other words, the so-called legal bases.

HOLDER PERSONAL DATA PURPOSE TREATMENT AUTHORIZING REQUIRIMENT (LEGAL BASIS)
WEBSITE USERS IP address and location Access Cookies Notice Performance and Cookies Analytics: Consent (Art. 7º, I, Law n. 13.709/2018)
WEBSITE USERS Name
E-mail		 Contact,
AnswerQuestions		 Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018))
EMPLOYEE, CUSTOMERS, LEGAL REPRESENTATIVES Name
Surname
E-mail
Phone
CPF (ITIN – Individual Taxpayer Identification Number) or ID		 1 – Prospection

2 – Quotation

3 – Fullfilment of Contractual Obligations

4 – Credit Analysis

5 – Resolve Complaints and Clarify Doubts

 1 – Public Data: Consent (Art. 7º, I, §4º, Law n. 13.709/2018). Previous Contacts made at Fairs: Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018);

2 – Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018);

3 – Contract;

4 – Credit Protection (Art. 7º, X, Law n. 13.709/2018);

5 – Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018)
SUPLIERS EMPLOYEES, SERVICE PROVIDERS Name
Surname
E-mail
Phone
CPF (ITIN – Individual Taxpayer Identification Number) or ID		 1 – Quotation

2- Fullfilment of Contractual Obligations

 Fulfillment of a contract or preliminary procedures related to a contract to which the holder is a party, at the request of the holder. (Art. 7º, V, Law n. 13.709/2018)
CARRIER EMPLOYEES Name
Surname
ID
Driving License Signature		 Goods Transport Control from Customers Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018))
VISITORS AND SERVICE PROVIDERS Name
ID
CPF (ITIN – Individual Taxpayer Identification Number) Driving License Vehicle		 Release Access at the Company Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018))
THIRD-PARTY SERVICE PROVIDER 1 – Name
Surname
CPF (ITIN – Individual Taxpayer Identification Number)
ID
Phone
Date of Birth

2 – Biometry

3 – Images

 1 – Controle de Prestadores de Serviço Terceirizados

2 – Controle de Acesso às dependências físicas da empresa

3 – Gerenciar segurança das dependências físicas através de monitoramento por câmeras

 1 – Contract fulfillment (Art. 7°, V, Law n. 13.709/2018);

2 – Ensuring the prevention of fraud and the security of the holder, in the processes of identification and authentication of registration in electronic systems, safeguarding the rights mentioned in art. 9 of this Law and except in the event that the holder’s fundamental rights and freedoms that require the protection of personal data prevail (Art. 11, II, g, Law n. 13.709/2018);

3 – Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018)
SERVICE PROVIDERS 1 – Name
Surname
CPF (ITIN – Individual Taxpayer Identification Number)
ID
Driving License
E-mail
Phone
Address
Filiation
Photo
Date of Birth
Bank Data

2 – Biometry

3 – Images

 1 – Fullfilment of Contractual Obligations

2 – Restricted access to the Company

3 – Management Security of the Company through camera monitoring

 1 – Contract fulfillment (Art. 7°, V, Law n. 13.709/2018);

2 – Ensuring the prevention of fraud and the security of the holder, in the processes of identification and authentication of registration in electronic systems, safeguarding the rights mentioned in art. 9 of this Law and except in the event that the holder’s fundamental rights and freedoms that require the protection of personal data prevail (Art. 11, II, g, Law n. 13.709/2018);

3 – Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018)
NEIGHBORS Name and e-mail Community Survey to Check for Disturbances Legitimate Interest of the Controller (Art. 7º, IX, Law n. 13.709/2018)

Information About Others That You Provide to Us

If you provide us with personal information about another individual, you must ensure that you have the right to disclose it to us, thereby ensuring that we can collect, use and disclose it for the purposes described above, holding SULFIX harmless of any obligation to collect and manage consent, if required.

You must take reasonable steps to ensure that the individual concerned is aware of the contents of this Privacy Notice.

Sharing Personal Data with Third Parties

We use and disclose personal information for the main purpose for which it was collected and in accordance with different legal bases of processing, as presented.

We also share personal data with third parties to perform some services, such as analyzing website performance, cloud storage, maintenance and monitoring of our databases and website users.

We may also use your information to:

  • Our professional advisers, including lawyers, accountants and auditors to perform services for us;
  • Government in the hypotheses provided for in legislation.

Our partners and service providers are subject to the duty of confidentiality, privacy and data protection beyond the rules legally imposed on them.

Your Rights as a Personal Data Holder

Transparency and free access to the processing of your personal data are priorities for SULFIX. In addition to the information provided in this Privacy Notice, you can also exercise the rights provided for in the General Data Protection Law, including:

  • Confirmation of the existence of personal data processing;
  • Access to personal data;
  • Blocking, anonymization or deletion of data that is unnecessary, excessive or treated in violation of the GDPR;
  • Revocation of consent, in the applicable cases;
  • Correction of incomplete, inaccurate or outdated personal data;
  • Elimination of personal data processed with consent or unnecessary, excessive or when it understands that a point of the GDPR has not been met;
  • Information about the hypotheses and with which companies, partners and other institutions we may share or receive personal data concerning you;
  • Information about the denial of consent and its consequences, when applicable;
  • Filing a complaint with SULFIX or the applicable Data Protection Authority, if the Personal Data Holder has reason to assume that any of his Personal Data protection rights have been violated;
  • Review of automated decisions, where applicable.

All requests will be treated free of charge, and will be subject to a prior assessment of their identity and the feasibility of the service, in order to guarantee that the information is being provided to the effective holder and to comply with any obligations and specificities of the service of said requests.

IMPORTANT !

During the process of evaluating your identity, we may request the collection of some additional data, but always respecting the purpose, need and suitability!

Quality of Your Personal Information

We take reasonable steps to ensure that your personal information is accurate, complete and up to date. If any of the personal information we hold about you is inaccurate, incomplete or out of date, please contact us immediately and we will take reasonable steps to correct this information.

Maintenance of Your Personal Information

We retain your personal information for as long as necessary to provide the requested services or for other essential purposes, such as complying with our legal or regulatory obligations and exercising rights in judicial, administrative or arbitral proceedings, in accordance with our Data Retention Policy.

Security of Your Personal Information

We protect your personal information in any way against misuse, loss, unauthorized access, modification and disclosure.

Physical security is maintained on our premises with locks, keys, access control and security cameras.

We also maintain computer and network security, such as antivirus, firewalls (internet security measures), anti-spam filter, tool against data loss, encryption when necessary and possible, and other security systems, such as users, logins and passwords to control access to our computer system, VPN, double authentication factor.

Updates to Our Privacy Notice

We may need to update our privacy notice to comply with laws or to reflect changes in our business practices. Any updates will be posted on our website, and we encourage you to check our website periodically to ensure you understand our current policy.

Contact us

To access your personal information, make complaints or other specific communications about your privacy, please contact our data officer.

E-mail: dpo@sulfix.com.br