VITACON PRIVACY NOTICE

Hello!

Welcome to Vitacon’s electronic portal.

Please note that when you enter our portal, you are entrusting us with your personal data and information. That’s why we’re committed to maintaining that trust.

 

Our Privacy Notice will explain to you, in a clear and accessible way, what personal data will be collected from you, with whom it will be shared and where it will be stored.

 

Jamila Helena de Araújo, has been appointed as our Data Officer. Thus, she is able to carry out all the functions and duties of the position, provided for in the General Personal Data Protection Law (LGPD).

 

If you wish to exercise any of your rights under the LGPD, simply send an e-mail to dpo@vitacon.com.br.

 

By accessing and browsing our portal, you accept our Notice and are aware of and in full agreement with how we will use your personal information.

 

To make it easier for you to understand, please note that our Privacy Notice is organized as follows:

 

1	Information collected
2	How we use your data
3	Data Sharing
4	Subjects’ rights
5	Protecting your information
6	Update on our Notice
7	Applicable legislation

The following table sets out the main activities involving the collection of your personal information, according to the main purposes, data subjects affected, legal hypotheses and categories of personal data collected for you to interact with us:

 

     a). Information provided by you:

• Registration data: when you register on our site, you provide us with the following information: name, telephone number and e-mail address.
• Authentication information: in order to provide a safe browsing environment, we may request the following identification and authentication information: e-mail and telephone number.

 

     b). Automatically generated information:

• Access logs: the organization automatically collects access logs to the application, which may include the IP address used to access our site, with date and time. This data is mandatory, as determined by Law No. 12,295/2014, also known as the Brazilian Civil Rights Framework for the Internet but will only be provided to third parties with your express authorization, or due to a court decision.
• Communication with the organization: when you communicate with the organization, we collect information about your communication, including metadata such as: IP address, date, time and content of communications, such as any information you choose to provide.
• Website management: to do this, we use cookies, i.e. text files generated and stored in your browser or device by websites, applications, and online advertisements, as explained in section 3.

We value your privacy very highly and that is precisely why all data and information about you is treated with the utmost confidentiality and used only for the purposes described herein, and known and authorized by you:

 

PURPOSE	SUBJECTS AFFECTED	LEGAL HYPOTHESIS	CATEGORY OF PERSONAL DATA
Allow you to access and use all the features of our portal	Subjects and their legal representatives	Legitimate interest (Art. 7, item IX)	Registration and identification
Complying with legal obligations (complying with requests to exercise rights)	Subjects and their legal representatives	Compliance with a legal obligation (art. 7, item II)	Registration and identification; Information about subject interaction with processing agents
Send messages, alerts, notifications and updates regarding support or service provided, products, services, promotions, news, updates, events and other matters that may interest you.	Subjects and their legal representatives	Legitimate interest (Art. 7, item IX)	Registration and identification
Detection and prevention of fraud, spam and security incidents	Subjects and their legal representatives	Compliance with a legal obligation (art. 7, item II)	Registration and identification
Verify or authenticate the information you provide, including by comparing it to data collected from other sources	Subjects and their legal representatives	Execution of contracts (art. 7, item V)	Registration and identification
For any purpose that you authorize at the time of data collection	Subjects and their legal representatives	Consent (Art. 7, item 1)	Registration and identification

 

We may use data for purposes other than those set out in this Privacy Notice, but all of these will be within your legitimate expectations. Any use of your data for purposes that do not comply with this prerogative will be made with your prior authorization.

 

    a). Storage of personal data:

 

We store your personal data securely, according to the security standards applicable to the hypothesis, and in a way that favors the means to exercise your rights under the LGPD.

 

   b). Deletion of personal data:

 

All personal data collected will be deleted from our servers upon your request, by a free and easy procedure, or when they are no longer necessary or relevant to the provision of our services, unless there is any other reason for maintaining them, such as any legal obligation to retain data or the need to preserve them to protect the rights of the organization, under the terms of articles 15 and 16 of the LGPD.

To improve your experience on our website and provide personalized services, we use cookies.

 

• We use necessary cookies, based on the legal assumption of legitimate interest, which cannot be deactivated in our systems. These cookies enable essential functionalities for the provision of services, such as security, identity verification and network management. Although they are necessary, you can block these cookies directly in your browser, but this may compromise your experience and impair the functioning of the website.

 

• We also use analytical or performance cookies, which make it possible to collect data and information about how users use our site, which pages they visit most often on our site, the occurrence of errors or information about the performance of the site itself.

 

• We collect functionality cookies, which allow us to remember your preferences and choices (such as your username or your language).

 

• We also collect advertising cookies, which target ads according to your interests and limit the number of times the ad appears.

 

With the exception of necessary cookies, which are essential for the operation of the website, the installation of other types of cookies is subject to your consent! This way, you can review your permissions and accept, change, or cancel them at any time.

 

Our website does not collect cookies automatically. However, you are not obliged to authorize the use of all of them. However, please be aware that our website may not function properly if all cookies are disabled. For this reason, if you want to have a complete experience of our online platform, we suggest that you authorize the collection of all cookies.

To find out more about the collection of cookies, please visit our Cookie Policy.

All the information we store about you may be considered assets in the case of negotiations in which the organization is a party. In this sense, we reserve the right, for example, to include your data among the company’s assets if it is sold, acquired or merged with another company. By means of this Privacy Notice, you are aware of this possibility.

The organization must provide its data and information if requested by court order.

We may share your personal data with public or private organizations, respecting the provisions of the LGPD, in particular the principle of necessity, and always in a manner compatible with the purpose(s) for which it was collected, as provided for in your contract.

When we share your personal data with data operators, we will require that your data is handled in accordance with our instructions, which includes storing it securely, retaining it only for the period instructed and not sharing it subsequently with other organizations without our prior express authorization.

The LGPD establishes that the data subject has the right to obtain from the controller, in relation to their personal information processed by it, at any time and upon request:

 

• Confirmation of the existence of treatment;
• Access to data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• Data portability;
• Deletion of personal data processed with your consent;
• Information on public and private entities with which the controller has shared data;
• Information about the possibility of not giving your consent and the consequences of not doing so;
• Revocation of consent.

 

If data subjects wish to exercise any of their rights under the law, or have any questions regarding this documentation, they can simply send an e-mail to dpo@vitacon.com.br.

All your data is confidential and only authorized persons will have access to it. We make every reasonable effort to ensure the security of our systems and your data. Our servers are located in different places to guarantee stability and security and can only be accessed through previously authorized communication channels.

All your information will be encrypted whenever possible if this does not make it impossible for the platform to use it. You can request a copy of your data stored in our systems at any time. We will keep data and information only until it is necessary or relevant for the purposes described in this Privacy Notice, or in the case of periods predetermined by Law, or until it is necessary to maintain the legitimate interests of the organization.

It is important to clarify that we cannot guarantee that all your data on our platform will be free from unauthorized access, especially if the credentials required to access our application are shared improperly.

We therefore recommend that you keep your password in a safe place and that you do not share it with third parties. You undertake to notify the organization immediately by secure means of any unauthorized use of your account, as well as unauthorized access to it by third parties.

We reserve the right to update our Privacy Notice as often as necessary in order to provide you with more secure information and improve your experience.

This document is governed by and must be interpreted in accordance with the laws and normative acts that make up the Brazilian legal system.

• Jamila Helena de Araújo, has been appointed as Vitacon’s Data Officer and is thus able to carry out all the duties and functions of the position provided for in the LGPD.
   

  Vitacon Participações S.A.

  Address: Rua Haddock Lobo, 347 – 2nd and 3rd floor

  Jardins – São Paulo, SP

  Phone: (11) 3039-7101

  Contact: dpo@vitacon.com.br

   

  DPONET (Substitute Data Controller)

  Address: Avenida Perimetral, W/No. – Distrito Industrial Luiz Pedro Caffer –

  Square W/No., Lot 1A, Block 1, Groudn Floor – Pompeia/SP – Zip code 17.586-220

  E-mail: atendimento@dponet.com.br