Privacy Policy

We are CORTESA.
We are very pleased to welcome you to CORTESA!

So that you can understand how we will process the data we collect, we provide a brief summary below.

RIGHTS OF PERSONAL DATA SUBJECTS

You are the data subjects (natural persons) to whom the personal data collected by Us refers.

Brazilian legislation grants certain rights to individuals regarding their personal data. Therefore, We ensure transparency and access control to personal data subjects, providing them with the best possible experience while using the Platform. The rights of personal data subjects are as follows:

  1. a) Right to confirmation of processing – the right to request confirmation of the existence of processing of your personal data through clear information about the origin of the data, the existence or absence of records, the criteria used, and the purpose of the processing;
  2. b) Right of access – the right to be informed and to request access to personal data processed by Us;
  3. c) Right to rectification – the right to request that We change or update your personal data when it is incorrect or incomplete;
  4. d) Right to deletion – the right to request the deletion of your personal data collected by Us;
  5. e) Right to restriction – the right to request that We temporarily or permanently cease processing all or part of your personal data;
  6. f) Right to object – the right to object, at any time, (i) to the processing of your personal data for reasons related to your particular situation and (ii) to the processing of your personal data for direct marketing purposes;
  7. g) Right to data portability – the right to request the transfer of such personal data for use in third-party services;
  8. h) Right to copy – the right to request a copy of your personal data in electronic format.

INFORMATION / PERSONAL DATA COLLECTED AND ITS PURPOSE

In the table below, we present which data will be collected, its category, and purpose.

Collected Data Classificação
Full name Registration data
Email
Phone number
Profession
Residential ZIP code
Date of birth
Gender
Marital status

Os dados coletados serão utilizados com as seguintes finalidades:

Collected Data Purpose
Registration data Identification in order to:
Contact you;
Formalize contracts.

To ensure that all information is clearly understood, we present our Privacy Policy in a transparent and accessible manner, as shown below:
WE HIGHLIGHT THAT IT IS EXTREMELY IMPORTANT TO FULLY UNDERSTAND AND READ THIS DOCUMENT IN ITS ENTIRETY.
– GENERAL TERMS 

1.1. General

This Privacy Policy was designed to communicate our practices regarding the processing (including collection, storage, use, processing, and sharing) of your personal data by Us.

CORTESA is owned by METALÚRGICA CORTESA LTDA, a private legal entity headquartered at Rua Henrique Coelho Neto, No. 1358, Vargem Grande District, ZIP Code 83.321-030, in Pinhais, State of Paraná, registered with the CNPJ/MF under No. 76.673.151/0001-72, which, for all purposes, shall be considered the Data Controller of the personal data provided by You.

1.2. What Personal Data Is

Personal data is information that can be used to identify You individually.

1.3. Authorization for Information Collection

By registering on Our platforms, You must accept and authorize the collection of information through the “I have read and agree to the terms” button, under the terms of this Privacy Policy.

1.3.1.

You may withdraw your consent to the provisions of this Privacy Policy at any time by notifying CORTESA via email at lgpd@cortesa.com.br.

1.4. Regulation

We operate in accordance with Brazilian legislation, including and especially Law No. 12,965/2014 (Brazilian Civil Rights Framework for the Internet) and Law No. 13,709/2018 (General Data Protection Law – LGPD), as well as other applicable laws.

1.5. Contact

If you have any questions or suggestions about this Privacy Policy or any other information, you may contact CORTESA’s Data Protection Officer via email at lgpd@cortesa.com.br.

1.6. Information Control

This Policy describes which personal data may be collected when you register on Our platforms, how such information may be used, and the precautions taken against unauthorized access or use.

– PERSONAL DATA COLLECTED –

2.1.

We may collect, store, and use the following information and/or personal data:

a) Full name;
b) Email;
c) Phone number;
d) Full name;
e) Profession;
f) Residential ZIP code;
g) Date of birth;
h) Gender;
i) Marital status.

2.2.

We may also collect, store, and use the following information:

a) Details of access to CORTESA platforms and the features you accessed;
b) Information about the access device used, including hardware model, operating system and version, file names and versions, preferred language, unique device identifier, advertising identifiers, serial number, device movement information, and network information;
c) Server log information, which may include data such as the device’s IP address;
d) Browser click mapping, browsing data, statistical and demographic data, among others;
e) Application click mapping and browsing data.

2.3. Native Applications

Native applications may store usage data, images, videos, texts, system access passwords, and biometric data, which are not shared with Us.

– SHARING OF COLLECTED PERSONAL DATA –

3.1. Exceptions for Sharing Personal Data

We do not disclose to third parties any personal data provided by You through Our platform, except:

a) When We are required to disclose or share collected data to comply with a court order or for fraud prevention or other crimes, as well as in response to a request for information by competent authorities, if We understand that disclosure is in accordance with or required by applicable laws, regulations, or legal procedures;

b) To protect the rights, assets, or security of Our Platforms;

c) With law enforcement agents and/or government authorities, if it is understood that their actions are inconsistent with the provisions of our terms of use, or to protect Our rights, property, or safety, or those of You or others;

d) Through Your own action;

e) In cases of partial or total sale of the business or its assets, or as part of any business reorganization, restructuring, merger, spin-off, or incorporation, whereby We may share Your information with third parties involved in such transactions, taking the necessary measures to ensure that privacy rights continue to be protected in accordance with this Policy.

3.2. Authorization for Contact and Disclosure

You authorize CORTESA to contact you using any of the contact methods provided during registration.

– ACCESS AND CORRECTION OF PERSONAL DATA –

4.1. Access and Rectification

You have the right to access your personal data under Our control by contacting the administrators via email at lgpd@cortesa.com.br. Requests will be answered during business hours within 15 (fifteen) days, together with a description of the form, purpose, and duration of data processing, which may be sent by email or letter, in accordance with Article 9 of the LGPD.

4.2. Deletion

You have the right to request the deletion of your personal data stored by CORTESA at any time, except in cases where there is a legal obligation or court order to maintain data storage, in accordance with Articles 18, XVI, and 16 of the LGPD.

4.3. Accuracy of Information

It is Your responsibility to keep your information updated. In case of inaccuracies, We may update or delete such information, except when retention is necessary for legitimate commercial or legal purposes.

4.4. Necessary Protection Measures

We take the necessary security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

4.5. Password Protection

You are also responsible for taking appropriate measures to protect your passwords, usernames, and other special access credentials to your personal registration on CORTESA Platforms.

– NOTIFICATION OF CHANGES TO THE PRIVACY POLICY 

5.1. Changes to the Privacy Policy

We may change this Privacy Policy from time to time. The use of information collected is subject to the Privacy Policy in effect at the time. If We make changes in the way personal information is used, We will notify You by email.

5.2. Unnotified Adjustments

Minor adjustments to this Privacy Policy may occur without significantly affecting how We process collected information and therefore do not need to be communicated.

– COMMUNICATION –

6.1. Sending Communications

By registering, You agree that We may send notifications, advertisements, service updates, and important information about the use of CORTESA products to your email.

6.1.1. Opt-Out Option

When receiving an email from CORTESA, You will have the option to stop receiving such messages by using the opt-out option or by sending a request via email.

6.2. Anti-Spam Policy

CORTESA takes the necessary measures to prevent the sending of unsolicited emails.

6.3. Confidentiality

Maximum confidentiality is ensured in the handling of phone and email lists during regular administrative activities.

– PERSONAL DATA SECURITY –

7.1. Storage

Your account’s personal data and all registration information are stored and transmitted securely. Only authorized employees may access your personal information and are subject to confidentiality obligations and strict respect for your privacy under this Policy.

7.2. Information Security

All CORTESA transactions are encrypted and subject to data backup, monitoring tools, security policies, and access controls for employees, using updated security software.

7.3. Notification

If We become aware of any security breach, including hacking, data leaks, or any other information security incident, We will notify national authorities and affected users and provide as much detail as possible regarding the nature and extent of the breach and the compromised data, within a reasonable timeframe, in accordance with Article 48, §1 of the LGPD.

7.4. Data Retention Period

We will store your data for as long as your registration remains active.

7.5. Data Protection Officer

“Marianne Edda S. Barci” is designated as CORTESA’s Data Protection Officer and may be contacted via email at lgpd@cortesa.com.br, pursuant to Article 41 of the LGPD (Law No. 13,709/2018).

– GENERAL PROVISIONS –

8.1. User Responsibility

You shall be responsible for indemnifying Us for all costs and damages that may arise as a result of your violation of this Privacy Policy.

8.2. Cooperation with Authorities

We fully cooperate with any authorities or courts that request disclosure of the identity or location of any person who has provided registration data on CORTESA Platforms and violates the provisions of this Policy.

8.3. Limitation of Liability

This Privacy Policy addresses only the use and disclosure of information collected by Our Platforms. If You disclose your information to third-party websites, different rules may apply to the use of your information.

– COOKIES –

9.1. What Cookies Are

A cookie is a piece of information stored locally on your computer or device that contains information about your activities on the Internet.

9.2. Cookies Used

Cookies may be used in different ways. We may use:

a) Performance Cookies: These cookies collect anonymous information about how You use Our Platform to optimize it. The information collected by these cookies never contains personal details that allow identification.

b) Functional Cookies: These cookies are used by Us to provide certain functionalities and improve your experience while using the Platform.

c) Advertising Cookies: These cookies collect information about browsing habits to make advertising more relevant to You.

9.3. Access to Cookies

Access to cookies ends when You close the browser. You are given the option to accept or refuse cookies.

9.4. Consent for Cookie Use

Your acceptance is required before the session begins for cookies to be used.

9.5. Option Without Cookies

The data subject may choose to refuse the use of cookies. If You choose not to accept them, your access to most platform functionalities will not be compromised. However, You may not be able to fully use the services offered.

APPLICABLE LAW AND JURISDICTION 

10.1 These Terms of Use are governed by Brazilian law, and the courts of the District of Curitiba/PR are designated as competent to resolve any disputes arising from them, to the exclusion of any other, however privileged it may be or become, with priority always given to attempts at resolution through conciliation or mediation.

Created on July 28, 2021.