Snapshot 111235
Normalized text
Scripts and page chrome removed; this is what change detection compares.
top of the page DATA PRIVACY POLICY OF REALCLOUD Document History List of acronyms Contents 1. Privacy Policy 2. Object 3. Scope 4. Principles 5. Activities 6. Responsibility 7. Compliance and acceptance 8. References Version 1.0 | March-2022 | Draft Version 1.1 | October-2022 | Inclusion of Activities Version 1.2 | July-2023 | Text revision LGPD General Data Privacy Law CF Federal Constitution (current 1988) Constitutional Amendment DPO Data Protection Officer PII Personally Identifiable Information 1. Privacy Policy 2. Object 3. Scope 4. Principles 4.1 Data collection 4.2 Transparency 4.3 Treatment 4.4 Security and confidentiality 4.5 Risk management 5. Activities 5.1 Purpose of data collection 5.2 User information collected 5.3 How information is collected 5.4 Treatment and revocation 5.5 Sharing with third parties 5.6 Risks and procedures 5.7 Data privacy culture 5.8. Changes to the Privacy Policy 6. Responsibility 7. Compliance and acceptance 8. References RealCloud adopts a data privacy policy pertinent to the area in which it operates, in compliance with the General Data Privacy Law through the principles described below. For RealCloud, privacy and security are priorities and we are committed to the principles and compliance with the General Data Privacy Law of our employees, suppliers, customers and third parties on behalf of the company, hereinafter referred to as user(s), in relation to the digital or non-digital systems used by RealCloud. This RealCloud Data Privacy Policy establishes the principles of data collection, transparency, processing, security and confidentiality, risk management and activities relating to the use of information made available by the company. By using our services, the user understands and consents that we collect and use personal information, in a very restricted manner, in the ways described in this Policy, guided by the rules of the Federal Constitution of 1988 (art. 5, LXXIX; and art. 22, XXX - included by EC 115/2022), the Data Protection rules (LGPD, Federal Law 13.709/2018), the consumer provisions of Federal Law 8078/1990 and the other applicable rules of the Brazilian legal system. 4.1 Data collection The purpose of the processing is to obtain data that is legitimate, specific, explicit and informed to the data subject, without the possibility of further processing that is incompatible with those purposes. 4.2 Transparency Ensuring that data subjects are provided with clear, precise and easily accessible information about the processing and the respective processors. 4.3 Data processing Limitation of processing to the minimum necessary for the fulfillment of its purposes, covering data that is relevant, proportionate and not excessive in relation to the purposes of data processing; being stored securely and only for as long as necessary. 4.4 Security and confidentiality Personal data will be processed in a way that guarantees due security, confidentiality and integrity, providing protection to prevent access to personal data and equipment used for its processing, or the use thereof, by unauthorized persons. 4.5 Risk management The purpose of identifying risks is to list all the risks that have been identified and that could have a negative impact on the process' compliance with the General Data Protection Act. 5.1 Purpose of data collection This data privacy policy is based on personal data that is the property of the individual. It expresses the citizen's right to control and protect their personal and intimate data, the purpose of which is collected with the user's consent, and is used only for the necessary time compatible with the purpose for which it was collected. 5.2 User information collected The personal data collected and the sensitive data, Personally Identifiable Information (PII), makes it possible for the user to be identifiable through the information collected. For the purposes of data collected from non-employees and external to RealCloud, it refers by definition to the user's associated personal data, which is not sensitive, since the business basis of this data custodian is a company that only does business with other companies. 5.3 How information is collected The form of personal data collected will be through the use of forms, preferably in an online system, where the field for filling in the data is done through a registration, with the consent of the holder, and the data will only be necessary and will be available for use, by those entitled to do so, for the time necessary to allow the operation and communication between this company and the user. 5.4 Treatment and revocation Users have the right to control the collection and retention of their personal data, ensuring that each person has ownership of it. We use this policy with respect to preferences, whether for repository, sharing, or revocation of the same, as permitted or requested by users. For sensitive user information, such as health and financial information, additional data protection, such as anonymization, is required. 5.5 Sharing with third parties The sharing of a user's data in an information database with third parties to the RealCloud company can only take place with the consent of the data subjects, informing them with whom it will be shared and how it will be used. 5.6 Risks and procedures The information security policy prioritizes the privacy and protection of the data of RealCloud's users and employees, and any improper access to personal data; loss of personal data; insecure storage of data; leakage or fraud, any security incident or unauthorized sharing, storage, or processing of data must be reported to the DPO, who will take the appropriate legal measures regarding this policy through corrective and disciplinary actions. 5.7 Data privacy culture The DPO is responsible for guiding the company's other employees in order to promote education, coordinating periodic training sessions on the privacy and protection of personal data, disseminating the culture of the risks inherent in allowing the collection, storage and processing of personal data. In addition, RealCloud employees and third parties have a confidentiality and data privacy clause in their respective employment and service contracts. 5.8. Changes to the Privacy Policy Any change or exception to this data privacy policy must be communicated immediately and widely to each user. The Data Protection Officer is an actor appointed by RealCloud, as mentioned by the LGPD, whose position is central to the data protection governance structure and to this Data Privacy Policy. The DPO is the key contact for ensuring compliance with this policy at RealCloud. RealCloud makes itself available for contact through the service channel relating to this Data Privacy Policy via the electronic mailbox lgpd@realcloud.com.br in order to resolve any doubts and requests of any nature relating to the privacy of user data. This Data Privacy Policy Statement complies with Law 13.709 / 2018 and is approved by the legal representative(s) of RealCloud Sistemas Ltda. General Data Privacy Law (LGPD) - Federal Law 13.709/2018 - Brazil Constitutional Amendment 115/2022 Consumer Defense Code Law 8078/1990 bottom of the page EN PT Verificado pela Leadster