Privacy Policy

Security Policy Privacy




1. INTRODUCTION



We, from the CONSERVAS ODERICH SA (“ODERICH”), registered with the CNPJ/MF under number: 97.191.902/0005 -18, through this Policy, we sign our commitment to the privacy, security and protection of your Personal Data, seeking to maintain a transparent relationship with You, the holder of Personal Data, following the provisions of the General Law for the Protection of Personal Data (LGPD) and any other legislation dealing with confidentiality and protection of Personal Data, as well as other related laws.


The scope of this Policy is to inform the holders of Personal Data about how ODERICH uses, treats, shares and protects their Personal Data. This Policy is effective on the date of its official publication on the website https://www.oderich.com.br/.


2. WHAT PERSONAL DATA WE COLLECT AND FOR WHAT PURPOSES?


This Policy refers to the processing of two types of personal data: (a) those provided by the Owner (You); and (b) those collected automatically.


2.1. Data provided directly by You:


2.2. Personal Data collected automatically: when accessing the websites mentioned in this Policy, we may automatically collect information according to the use of the websites carried out by You. The information collected may be: Cookies, identifiers of the device used to access the websites, location information, etc.


The purposes of data collection are:


I – personalization of services;
II – sending newsletter and email marketing;
III – mapping user activities on our sites.


After your authorization to collect and use Cookies, You can, whenever you want, disable part or all of our cookies, as well as configure Cookies in the settings of your device or internet browser.


2.3. Sensitive personal data will not be collected, that is, those dealing with racial or ethnic origin, religious conviction, political ideology, membership in unions or organizations of a religious, philosophical or political nature, health or sexual life, genetic or biometric data. If some of these data are collected, ODERICH will proceed to the immediate exclusion of the collected data.


3. WHAT ARE THE LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA?


The legal bases of the LGPD that we use are:


The. Legitimate interest – when we conclude that there is a significant interest in the processing of your personal data for the development of our activities, as long as this treatment generates some kind of benefit for You or if You have already interacted with us at another time;
B. Consent – when You expressly authorize, freely and spontaneously, that your data be processed for a specific and clearly informed purpose at the time collection of consent. Please remember that it is possible to withdraw your consent whenever You wish, so that we will immediately stop processing Your data from the revocation of consent onwards;
ç. Compliance with legal obligation – when we process your data because the law requires us to do so;
d. Enforcement of contracts – when we have some kind of contractual obligation to You


In this way, all of our personal data processing activities have a legal basis on which they are based, among those permitted by law. More information about the legal bases that we use for specific personal data processing operations can be obtained from our contact channels, informed at the end of this Policy.



4. WHO DO WE SHARE YOUR PERSONAL DATA WITH?


We may share your Personal Data with regulatory bodies or public authorities to comply with legal or regulatory requirements. Furthermore, your Personal Data may be shared with ODERICHs suppliers, service providers and business partners, but only for the fulfillment of certain purposes.


In this way, your Personal Data will be shared only to meet the purposes set out in this Policy, always in compliance with current legislation, preventing the use of your Personal Data for purposes other than those necessary for our operations.

Also, when this sharing is carried out, rights and duties are materialized between us and the companies that receive your Personal Data.



5. HOW LONG WILL WE PROCESS AND STORE YOUR PERSONAL DATA?


We store your personal data until the purpose (information in item “2” above) for which it was collected is achieved. Furthermore, we may keep your Personal Data to comply with legal, regulatory obligations or for obligations arising from contractual instruments.



6. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?


We treat your Personal Data with transparency and, therefore, You can contact us to exercise your rights, based on provisions in the LGPD, whenever you want:


Confirmation and Access
Allows You to verify that the ODERICH handles your Personal Data and, if so, request a copy of the Personal Data we hold about You.


Correction
Allows You to request correction of your incomplete, inaccurate or outdated Personal Data.


Anonymizing, blocking or deleting
Allows You to ask us to: (a) anonymize Your data so that it can no longer be related to You and therefore is no longer Personal Data; (b) block your Data, temporarily suspending your ability to Treat Us; and (c) delete your Data, in which case we will delete all your Data without the possibility of reversal, except as provided by law.


Portability
You have the right to request the portability of your Personal Data to another service or product provider upon your express request, subject to commercial and industrial secrets, in accordance with future regulations of the National Data Protection Authority (ANPD).


Sharing information
You have the right to know the public and private entities with which ODERICH makes shared use of data, as provided for in this Policy.


Information on opt-out and withdrawal of consent
It allows You to have clear and complete information about the possibility and consequences of not providing consent, as well as withdrawing Your consent in relation to Treatment activities that are based on this Legal Basis.


Opposition
The law authorizes the Processing of Personal Data even without your consent or a contract with us. In this case, it is necessary to demonstrate that there are legitimate reasons to treat your Data, such as, for example, preventing fraud or improving our communication with You. If You do not agree with this Treatment, you may object to it, requesting interruption.


We will endeavor to fulfill your request within a reasonable time (and at any time or event required by law). Please note that these rights do not always apply and that there are certain exceptions to these. We will also need to confirm your identity before acting on certain requests as a precaution when providing information and Personal Data.



7. WHAT SECURITY MEASURES ARE ADOPTED FOR THE PROCESSING OF PERSONAL DATA?


The ODERICH uses in its operations technical and organizational measures, which enable the protection of your Personal Data preventing unauthorized access and possible consequences of incidents such as destruction, loss or loss of your data.


The measures used by the ODERICH consider the nature of the Personal Data processed, as well as the purpose of the processing and the risks inherent to that processing operation of data.


Among the security measures adopted by us, we highlight the following:


- Our users data is stored in a secure environment;
- We limit access to our users data so that unauthorized third parties cannot access them;
- We use SSL (Secure Socket Layer) certificate, so that data transmission between users devices and our servers happens in an encrypted form;
- We keep records of all those who have, in any way, contact with our data.


Internally, our users data are accessed only by duly authorized professionals, respecting the principles of proportionality, necessity and relevance for our purposes, in addition to the commitment to confidentiality and preservation of privacy under the terms of this Policy.



8. FORMS OF CONTACT


If You have any further questions about our notices, data protection and how we use your personal data, You may also contact our Privacy team at any time via email at dpo@oderich.com.br.


The ODERICH has appointed Vinícius Oderich as our Data Protection Officer (DPO) for the processing of personal data, and can be contacted through from the email given above. Requests sent to the e-mail address in question will be analyzed by the committee together with our Data Manager, who will respond to the request with the approval of this professional.


If You prefer to contact us through any physical means, You may send correspondence to the address listed in item 1 of this Policy.



9. REVIEW AND APPLICABLE LEGISLATION TO THIS POLICY


This Policy may be revised periodically and you will be informed of any changes. Any dispute arising based on this Policy will be resolved in accordance with the General Data Protection Law and other Brazilian legislation.


If you have any doubts about the conditions established in this Policy or any document of the ODERICH, please contact us through the aforementioned service channels .


If any provision of this Privacy Policy is considered illegal or illegitimate by the authority of the location where you reside or your Internet connection, the other conditions will remain in full force and effect.