PRIVACY POLICY
1. GENERAL INFORMATION
At AMCEL, privacy and security are priorities and we are committed to transparent handling of our users'/customers' personal data. Therefore, this Privacy Policy sets out how the collection, use and transfer of information from customers or other people who access or use our website is carried out. Any information that users provide will be collected and stored in accordance with strict security and confidentiality standards, pursuant to law 13.709/2018 – General Data Protection Law and law 12.965/2004 – Civil Rights Framework for the Internet.
AMCEL, unless it receives a legal or judicial determination, undertakes never to transfer to third parties or use the information for purposes other than those for which it was collected, the company will always prioritize ethics and compliance with current legislation in the country.
This Privacy Policy may be updated as a result of any regulatory update, which is why the holder is invited to periodically consult this section.
2. WHAT IS PERSONAL DATA?
The Brazilian legislation, LGPD, defines, in its article 5, item I, what is personal data as all that refers to an identified or identifiable natural person. In practice, the term includes all that data that makes it possible to identify a person directly or the combination of data that can unequivocally identify the holder.
Also as determined in article 5, item II clearly lists what the legislation understands as sensitive personal data. Sensitive data, therefore, are data on racial or ethnic origin, religious conviction, political opinion, membership of a trade union or organization of a religious, philosophical or political nature, data relating to health or sex life, genetic or biometric data, when linked to a natural person.
3. RIGHTS OF THE HOLDER
AMCEL is committed to complying with the rules provided for in Law 13.709/2018 – General Data Protection Law, in compliance with the following principles:
• The personal data of the holder will be for legitimate, specific, explicit and informed purposes to the holder, without the possibility of further processing in a way incompatible with these purposes. (Principle of Purpose); (Principle of Purpose) ;
• The holder's personal data will be collected in an appropriate way for the purposes informed to the holder, according to the treatment context. (Principle of Adequacy) ;
• The data subject's personal data will be collected in a relevant way and limited to the needs of the purpose for which they are processed. (Principle of Necessity) ;
• The personal data of the holders will be collected and guaranteed to the holders, facilitated and free consultation on the form and duration of treatment, as well as on the completeness of their data. (Principle of Free Access);
• The holder's personal data will be accurate and updated whenever necessary, so that inaccurate data are deleted or rectified whenever possible. (Principle of Transparency) ;
• The personal data of the holders will be collected and guaranteed, to the holders, clear, accurate and easily accessible information, including on the processing agents, except for commercial and industrial secrets. (Principle of Transparency) ;
• The holder's personal data will be treated securely, protected from unauthorized or unlawful processing and against accidental loss, destruction or damage, adopting the appropriate technical or organizational measures. (Principle of Security) ;
• The data subject's personal data will be processed, using, by the controller, all measures to prevent the occurrence of damages due to this treatment. (Principle of Prevention);
• The holder's personal data will not be processed for discriminatory, illegal or abusive purposes. (Principle of Non-Discrimination);
• The data subject's personal data will be processed, by the controller, in a way capable of demonstrating the measures adopted in order to prove compliance with and compliance with the relevant data protection rules. (Principle of Responsibility and Accountability).
Furthermore, the holder has the following rights conferred by the LGPD. Are they:
• Right of confirmation and access: it is the right of the holder to obtain confirmation that the personal data concerning him are or are not the object of treatment and, if applicable, the right to access his personal data;
• Right of rectification: is the right of the data subject to obtain, from the controller, without undue delay, the rectification of inaccurate personal data concerning him;
• Right to data erasure (right to forgetfulness): is the right of the holder to have their data erased from the controller's database, except when they have to comply with some legal basis;
• Right to limit the processing of data: it is the right of the holder to limit the processing of his personal data, being able to obtain it when he contests the accuracy of the data, when the treatment is illegal, when the controller no longer needs the data for the purposes proposals and when you have objected to the processing of data and in case of processing of unnecessary data;
• Right of opposition: it is the right of the holder to oppose at any time for reasons related to his particular situation the processing of personal data concerning him, being able to oppose the use of his personal data to define a marketing profile;
• Right to data portability: is the right of the holder to receive the personal data concerning him and that he has provided to the controller,in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller;
• Right not to be subjected to automated decisions: it is the right of the holder not to be subject to any decision made exclusively on the basis of automated processing, including the definition of profiles, that produces effects in their legal sphere or that significantly affects them in a similar way.
- The holder may exercise his rights, by means of written communication, specifying the rights he wishes to exercise before the controller.
- The request must be sent to the email lgpd@amcel.com.br.
- The user will be informed in the event of rectification or deletion of their data, within 15 (fifteen) days from the date of the request.
4. WHAT PERSONAL DATA DO WE PROCESS?
We process the personal data necessary to manage the business relationship with our customers, the dissemination of our social projects, contractual relationships between providers and employees.
AMCEL processes data from minors and adolescents, always respecting the legal bases of the employer and employee relationship.
5. LEGAL FOUNDATION FOR TREATMENT OF COLLECTED PERSONAL DATA
We may process your personal data:
1 - In case we have your explicit consent;
2 - To satisfy our obligations to comply with local laws and regulations;
3 - For legitimate interests, respecting all the rights of the holders;
4 - When necessary for the execution of a contract or preliminary procedures in the relations between contractors and contractors, at the request of the data subject;
5 - For the regular exercise of rights in judicial, administrative or arbitration proceedings, the latter under the terms of Law No. 9,307/1996 (Arbitration Law);
6 - For credit protection, including when provided for in the relevant legislation;
7 - The personal data requested represents the minimum necessary in order to comply with legal and/or contractual requirements.
6. WHAT IS THE TIME FOR STORING THE PERSONAL DATA COLLECTED?
The personal data collected will be stored for the period necessary for the provision of the service or fulfillment of the purposes set out in this document and legal obligations, as provided in item I, article 15, of the LGPD.
7. SECURITY OF PROCESSED PERSONAL DATA
AMCEL undertakes to apply all technical and organizational measures capable of protecting the personal data collected from unauthorized access and from situations of destruction, loss, alteration, communication or dissemination of such data.
To guarantee security, solutions will be adopted that take into account: adequate techniques, application costs, the nature, scope, context and purposes of the treatment, and the risks to the rights and freedoms of the data subject.
However, AMCEL disclaims liability for the sole fault of third parties and the owner.
AMCEL also undertakes to notify the data subject within an adequate period of time in the event of any breach of the security of their personal data that may pose a high risk to their personal rights and freedoms.
The breach of personal data is a breach of security that accidentally or unlawfully causes the destruction, loss, unauthorized disclosure or access to personal data transmitted, stored or subjected to any other type of treatment.
The personal data stored are treated guaranteeing the confidentiality, integrity and availability of information, within legal limits.
8. SECURITY OF PROCESSED PERSONAL DATA
Your personal data is processed exclusively for the aforementioned purposes.
The personal data processed may be shared with the following people and companies:
• Authorized third-party agents, service providers and/or sub-providers of AMCEL;
• A competent public authority, government, regulatory or tax agency, where it is necessary to comply with a legal or regulatory obligation to which the relevant AMCEL company(ies) is(are) subject or as permitted by applicable local law;
• Other companies that are part of the AMCEL group of companies, including those that may be located outside your region and Brazil.
In the case where personal data is transferred to companies that are part of the AMCEL Group and/or to authorized third-party agents, service providers and/or sub-providers that may be located inside or outside your region, we take organizational, contractual and legal measures to ensure that personal data is processed solely for the purposes mentioned above, and that adequate levels of protection have been implemented in order to safeguard personal data.
The international transfer of data can only be carried out to another country or territory in question or to the international organization when they ensure an adequate level of protection of data subjects.
If there is not this adequate level of protection, AMCEL undertakes to guarantee the protection of your data in accordance with the strictest rules, through specific contractual clauses for the given transfer. Such as: standard contractual clauses, global corporate norms, regularly issued seals, certificates and code of conduct.
9. RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA - CONTROLLER
The controller/responsible for the processing of the holder's personal data is a natural or legal person, public authority or other body that, individually or together with others, determines the purposes and means of processing personal data.
In the present case, the person responsible for processing the personal data collected is the company AMCEL – Amapá Florestal e Celulose S.A,which can be contacted by email: lgpd@amcel.com.br
The person responsible for processing the data will be directly in charge of processing the personal data of the data subjects.
10. DATA PROTECTION OFFICER (DPO)
The data protection officer (DPO) is the professional in charge of informing, advising and controlling the person responsible for processing the data, as well as the workers who process the data, regarding the obligations determined by the LGPD, GDPR and other data protection provisions present in national and international legislation, in cooperation with the competent supervisory authority.
In the case of AMCEL, the data protection officer (DPO) is Eduardo Lima Marques Junior, who can be contacted via e-mail lgpd@amcel.com.br or by cell phone (96) 99157-2794.
11. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy was last updated on Mar/04/2021.
AMCEL reserves the right to modify this Privacy Policy at any time, so it is recommended that the holder review it frequently.
The changes and clarifications will take effect immediately after their publication on the company's website. When changes are made, the holders will be notified through a popup when accessing the company's website.
12. CONTACT INFORMATION
If you have any questions about our Privacy Policy, we are available through the contacts below: