UNIPAR CARBOCLORO'S PRIVACY POLICY — STANDARD FOR WEBSITES AND APPLICATIONS — PRIVACY POLICY This website (the "Website") is operated and managed by UNIPAR, as the data controller company ("Unipar", "Us" or "We".
This policy describes how Unipar, directly or through its affiliates, addresses personal information of the users ("user", or "You") in compliance with Act No. 13.709/18 (General Data Protection Regulation – "GDPR"), and how such data is used, shared and may be accessed, modified or deleted. As an evidence of its commitment in relation to privacy, Unipar defined this policy within the broader scope of a privacy management model to ensure its full compliance as basis for company's mindset. All the personal information provided by you, through this Website, shall be used exclusively for the purposes described below.
Which categories of personal information does Unipar collect about me and how is this data collected?
"Personal information" means any information related to You. Unipar shall collect, address and use the following categories and types of personal information about You: - Identification data, such as your first and last names, social security or passport numbers; - Personal details such as birthdate and gender; - Contact information, such as your email address, home address, telephone numbers and the state of residence;
- Professional information, such as the company and department where your work, your title, commercial address, commercial telephone numbers, name of the institution you graduated from; and - Details about your preferences, such as the type of content you are interest in, areas of interest, your research profile in our website;
- Details about your use of our services or of the Website, such as contact details if you contact us regarding any issues related to our services in the Website, how you interact with our services, the logs related to each session, including IP addresses, date and time of access;
- Details related to your social media profiles, if you decide to share content of the Website in these channels using plug-ins (e.g., Facebook, Twitter, etc.). Certain information published by the user in their social media will be collected by the Website and managed for the corresponding functions. Using plug-ins implies sharing the corresponding actions and information in the respective social media; our services, the logs related to each session, when you log into your account.
- Browsing information. When you navigate in the Website, Unipar uses certain technologies (cookies, more information below) that automatically collect certain informative elements related to the method the user chooses to use our services, such as IP addresses or other exclusive device codes (computer, mobile device or other devices), used by the user to navigate the website, date and time of access; identification as a registered user or otherwise; technical information that may include the user's URL of origin; information about the browser; language used. This information help us continually improve our services, as well as to track the accuracy of the Website operations, and are not intended to be linked to the user's identification details. However, the browsing data may identify the user when compared to their personal information or identification.
- Your personal information is collected from the following sources:
- - data directly provided by the user when filling out the registration fields or forms in the Website, or when contacting us; and - information obtained by automatic tracking systems to be used by the Website and its services.
To which purposes does Unipar use this personal information?
Unipar will use personal information for the following purposes:
- To allow you to register at the Website;
- - To provide the services available through the Website;
- - To manage and reply requests and contacts;
- - To allow users to book visits to some of Unipar's facilities, using the Open Plant Program;
- - To allow the user to download informative documents, such as those of the PVC area;
- - To assist the user in their experience in the Website, answering questions and suggesting contents;
- - To technically manage the Website and its operating functions, including technical troubleshooting, statistical analyses, tests and researches;
- - To prevent or detect fraudulent activities or undue use that may be harmful to our Website or that may threaten the security of the transactions;
- - To comply with the legal requirements set forth in the Brazilian laws and regulations, as well as per court orders or decisions, or requests by authorities;
- - To protect the cyber security of the users, the Website, and the services;
- - To defend Unipar in court or in any administrative sphere, for example, in case of violations by web users, or to exercise and protect Unipar's rights and property;
- - To respond to user requests (for example, management of requests for information);
- - To send to the users communications related to Unipar's activities.
Why does Unipar have to collect, handle and use my personal information?
We will handle your personal information in strict compliance with the provisions of the applicable laws, especially of Act No. 13.709/18 (General Data Protection Regulation or GDPR). Our personal information handling activities are grounded on the legal basis set forth in the GDPR, which are explained below.
When you register to book a visit using the Open Plant Program, or when you contact us with subjects related to Unipar, we handle your personal information to perform under an agreement or a preliminary procedure related to an agreement between you and Unipar, as provided in article 7, V of the GDPR. We also handle your personal information based on our lawful interests, as provided in article 7, IX of the GDPR. Our lawful interest is to ensure the provision of complete information to the users about Unipar and its activities.
We may also handle your personal information based on your consent, as provided in article 7, I of the GDPR. This occurs when you request documents related to the PVC area by filling out a simple registration. Ultimately, if so required, Unipar may handle users' personal information to comply with the law and exercise its rights or those of third parties, as provided in article 7, II and VI.
Who may Unipar share my personal information with?
To achieve the purposes described in this privacy policy, some companies may be involved in data handling activities, both as controllers, accountable for handling such data, or as operators, and for that purpose, Unipar may share your personal information with third parties, as described below. However, as provided in our internal policies, we limited the third parties with access to personal information to those actually required to do so. For the purposes described herein, we may share your personal information with:
- Consultants and technology and IT companies authorized to manage the Website and provide the services related to the Website, databank hosts and service providers; - Regulating authorities and other third parties, if so required to comply with our legal obligations or to exercise our rights or those of third parties; - Purchasing companies, within the context of an acquisition or any other asset sale operation or corporate operation involving Unipar;
- Operators. As long as it is necessary to achieve the handling purposes indicated in this privacy policy, Unipar may share your personal information with third parties, belonging to the Unipar economic group, or independent third parties, to handle personal information in accordance with our specific instructions, on behalf of Unipar ("Operators"). The Operators may handle information to manage our database, to support IT systems, and to provide support to Unipar's organizational activities, and shall be subject to contractual obligations of implementing technical and organizational measures to ensure security and protect the personal information, and the commitment of handling such information only as provided in Unipar's relevant instructions.
Some third parties that have access to personal information may be located in other countries, or may handle the information outside Brazil. The level of data protection in other countries may not be equivalent to the level of protection in Brazil. For that reason, we only transfer your personal information to countries ranked by the National Data Protection Authority ("NDPA") as bearing a suitable level of protection, or we shall take effective measures to make sure all recipients of personal information implement a suitable level of data protection. We do that, for example, by contractual means, executing international personal information transfer agreements, according to the standard clauses and in compliance with the provisions of the GDPR.
Personal information management
The provision of personal user registration information is voluntary and optional. Users may freely decide not to provide information for contractual purposes, as well as to delete their registration at any time. In addition, the user may opt-out, at any time, from the Unipar's institutional communications, clicking on the Communications Opt-out link found in all Unipar communications. If the user does not provide registration details, or if they opt-out of Unipar's communications, the user will no longer have access to part of the functionalities and contents available in the Website, but the management is a choice of the users, and we shall respect their choices.
Security
Unipar adopts technical and organizational security measures to protect user information against non-authorized use or access.
Regarding information that can be accessed from a specific user account, Unipar informs the password is one of the protection mechanism of the accounts, therefore, we suggest you use a secure password, stored in a safe place, limiting access to it in your own computer and browser, and disconnecting once you are no longer using the Website. For how long does Unipar keep my personal information? Unipar handles personal information only for the purposes described in this privacy policy.
All personal information are kept and deleted in accordance with Unipar's data withholding policy, insofar as they are required for the purposes of treatment, and shall be excluded: (i) as soon as the reason for their use no longer exists; or (ii) if the term is set forth by the Law. Unipar also handles this information until the date of forfeiture set forth in the applicable laws for potential actions related thereto. User information is handled within Unipar's facilities, those of its affiliates, and in the site where the servers are located. For additional information, please contact Unipar using the channels listed below.
Cookies
To improve your browsing experience in the Website, Unipar uses "cookies" A cookie is a small file, usually comprising letters and numbers, downloaded to a computer when the user logs into specific sites. The "cookies" allow the website to acknowledge the user's computer, track their browsing in several pages of a specific website, and identify the users that return to the website. "Cookies" do not contain personal identifying information, but the personal information Unipar records about the user may be bound to information contained in the "cookies" and obtained from them.
"Cookies" may be technical, analytical and profile cookies:
a) Technical "cookies" are used to carry out and facilitate your browsing, to provide and allow the use of Website services. "Cookies" allow the, in case of a new access, for example, not to re-enter information such as their username to log in.
B) Analytical "cookies" are used to assess and track how the website is used (for example, number of log-ins and pages viewed), to allow Unipar to make constructive changes in the website, regarding its operation and browsing.
C) Profile "cookies" are used to track your browsing in the Website and create profiles about your preferences, habits, choices, etc. These "cookies" may be used to send advertising messages in accordance with the preferences already shown in your online browsing. Unipar uses session "cookies" to control the pages, making it possible for the user to surf through many pages of the website in a fast and easy manner, without the need to re-process each new area that is visited.
Enabling or disabling cookies The users may authorize Unipar to use cookies. If the user does not authorize it, they must configure their browser to refuse any undesired cookies. Please note that refusing/disabling cookies may limit the usability and easy browsing in the Website. Underage user information This Website is not intended to users with less than 18 years of age, and Unipar does not collect personal information from such users intentionally. If any information about underage users are stored unintentionally, Unipar will delete such information as soon as possible, upon a request of the relevant users.
Within the activities described herein, does Unipar make decisions based exclusively on the automated handling of personal information?
No, Unipar does not make decisions exclusively based on the automated handling of your personal information in the activities described in this Term. Which rights do I have regarding my personal information? All tenants of personal information have rights related to their personal information, and Unipar respects these rights, as provided in the GDPR. As provided in the applicable laws, the user rights shall be exercised so as to also protect Unipar's industrial and commercial secret, as well as those of third parties and their essential rights. You are entitled to the following rights in relation to your personal information:
(i) The right to verify the treatment and the right of access You have the right of obtain a confirmation of the existence of any handling activity of your personal information. If Unipar handles your personal information, you have the right to access, that is, to obtain a simplified or full statement about the categories of personal information handled, the origin of such information, and the purpose of the relevant handling. In case of handling of your personal information based on your consent or on an agreement executed between you and Unipar, you also have the right to obtain a full copy of the personal information that is being handled, based on consent or agreement.
(ii) Right of correction You have the right to request the correction of incomplete, inaccurate or out of date details about you.
(iii) Right to anonymization, blocking or deletion In certain cases, when your personal information is no longer necessary, in excess or treated in non-conformity with the GDPR, you have the right to request anonymization, blocking or deletion of such information.
(iv) Right to data portability In certain cases, as defined and required by the NDPA, and always respecting Unipar's commercial and industrial secrets, you have the right to the portability of your personal information to another company.
(v) Right to deletion
In the cases where your information is handled based on your consent, you have the right to request the deletion of such personal information, except for the cases where Unipar has the right to withhold the data, as provided in the GDPR.
(vi) Right to information about the shared usage of data You have the right to obtain information about the public and private entities with which Unipar shared the use of your personal information.
(vii) Right to refuse and revoke your consent Every time we request your consent to handle your personal information, you have the right to refuse to consent. We will always inform you about this right and about the consequences if you choose not to consent our data handling activity. In addition, whenever you consent handling of your personal information for a specific purpose, you may revoke this consent at any time, whereby all handling activities carried through until the date of revocation shall be considered valid.
(viii) Right of petition before the NDPA You have the right to file a petition against Unipar before the National Data Protection Authority – NDPA regarding your personal information. (ix) Right of opposing an unlawful handling You have the right to contest any handling activity of your personal information that breaches any provisions of the GDPR.
(x) Right for the revision of decisions based exclusively on automated handling You have the right to request a revision of decisions made exclusively based on automated handling of personal information, that may affect your interests, including any decisions with the purpose of defining your personal, professional, consumption and credit profiles, or any aspects of your personality. In order to exercise any of these rights, please contact us as to indicated in the item below (Who can I contact regarding this subject?).
Who can I contact regarding this subject?
If you have any doubts, questions or concerns related to this privacy policy, or if you want to exercise your rights as the tenant of such rights, you may contact of Unipar's Foreman. To contact Unipar's Foreman, please send an email to: – E-mail: lgpd-encarregado@bhy.7b0.myftpupload.com Changes in the privacy policy For legal and/or organizational reasons, this privacy policy may undergo changes. We therefore suggest the most recent version of this privacy policy is verified regularly. If Unipar makes any changes it deems important, the users will be warned through the Website. Links to third-party websites During any browsing activity, you may see contents that belong to third-party websites. Unipar may not access or control the cookies or other functions used by third-party websites, and the procedures of such external websites are not regulated by our privacy policy. Therefore, you must contact and/or refer directly to the relevant third party to obtain additional information about their own privacy protection procedures.