Privacy Policy

ENZROSSI SOFTWARE SOLUTIONS LTDA. ("EnzRossi" or "Company"), registered with CNPJ no. 54.763.387/0001-67, headquartered at Av. Bento Munhoz da Rocha Netto, 632, Rooms 201 and 204, Ed. Torre Norte SLJ 2, Industrial Zone, CEP 87.030-010, Maringá-PR, has prepared this Privacy Policy ("Policy") to explain how we handle personal data.

This Policy describes how personal data from customers, service providers, and third parties is collected, accessed, stored, used, protected, and shared. EnzRossi is committed to transparency and ethics in all its operations, including with the entities it interacts with.

This Policy may be updated over time to reflect changes in internal procedures or legal requirements.

Processing

Any operation performed with personal data, collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation, modification, communication, transfer, dissemination, or extraction.

Cookies

Small files sent by websites, saved on your device, that store preferences and other information to personalize your browsing experience.

Holder / User

The natural person to whom the personal data being processed belongs, such as customers, visitors, and others who interact on the website.

Personal Data

All information related to an identified or identifiable natural person.

Anonymization

Use of reasonable technical means by which data loses the possibility of direct or indirect association with an individual.

Purpose

The reason personal data will be processed. Must be legitimate, specific, explicit, and communicated to the holder.

Controller

The natural or legal person responsible for decisions about the processing of personal data.

Operator

The natural or legal person that processes personal data on behalf of the controller.

Data Protection Officer

Person appointed by the controller and operator to act as a communication channel between the controller, data subjects, and the National Data Protection Authority (ANPD).

LGPD

Law No. 13,709 of August 14, 2018 (General Personal Data Protection Law). Governs the processing of personal data in Brazil to protect fundamental rights of freedom and privacy.

Any personal data you provide will be handled with the highest levels of security and used only for the purposes described here. The data collected depends on the process involved.

Beyond what you provide directly, we may also collect the following:

• Mobile device data and browser type/version
• Log data and IP address
• Messages sent via website chat, email, or WhatsApp
• Cookie data (described in Section 6)

In addition to the purposes above, we may process your data to:

• Support our business operations
• Comply with legal obligations, court orders, or regulatory requirements
• Produce institutional content, campaigns, and advertising materials

Cookies are small files sent by websites and saved on your device. They store preferences and other information to personalize your browsing experience.

By accepting the cookie banner or using the EnzRossi website, you allow us to use cookies to monitor your usage.

6.1 Necessary Cookies

Required for the website to function. They allow you to navigate and use basic features.

6.2 Analytical Cookies

Help us understand visitor behavior. Data is anonymous and used only for statistical purposes.

6.3 Functionality Cookies

Store your preferences so you don't need to reconfigure the site on each visit. Disabling them may affect certain features.

6.4 Managing Your Cookie Preferences

You're not required to accept cookies. You can block them, review permissions, or manage them directly through your browser:

• Firefox
• Chrome
• Safari
• Internet Explorer

We never sell or share your personal data for profit. We may share data only when necessary to provide our services, and only with:

• Judicial or governmental authorities, when required by court order or applicable law, and only to the extent necessary
• Professional consultants, such as accounting, legal, and auditing partners who support our operations
• Partner companies and suppliers, to carry out activities directly related to EnzRossi's services

Sharing with third parties occurs only for a legitimate, specific purpose communicated to you in advance.

Your data is stored only for as long as needed to fulfill the purpose it was collected for, or as required by law or contract.

Regardless of consent or deletion requests, the LGPD permits us to retain data when necessary to:

• Comply with a legal or regulatory obligation
• Transfer to a third party in compliance with data protection law
• Keep anonymized data for our own internal use, with no third-party access

EnzRossi uses security standards to protect your data from destruction, loss, alteration, or unauthorized dissemination. Our measures include:

• Protection against unauthorized access to internal systems and directories
• Physical access controls for locations where personal data is stored
• Requirements for partner companies and suppliers to comply with the LGPD and maintain strict confidentiality

Under applicable data protection law, you may request the following at any time by contacting the Data Controller:

• Confirmation that your data is being processed
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of your data to another service provider, subject to applicable regulations
• Deletion or anonymization of data processed based on your consent (except where law requires otherwise)
• Information about third parties with whom your data has been shared
• Information about the consequences of not providing consent
• Revocation of consent, where applicable

To exercise your rights or ask questions about how your personal data is handled, contact our Data Protection Officer:

Date of preparation

May 15, 2024

Last revision

July 1, 2024

Version

1.1