This document aims to record the free, informed, and unequivocal expression by which the GRANTOR agrees to the processing of their personal data for a specific purpose, in accordance with Law No. 13,709/2018 – General Data Protection Law (LGPD).
Acceptance of the Terms of Data Collection and Storage of Leads is absolutely essential for the continuation of communication between the parties and to ensure that both comply with the legal requirements for the protection of the exchanged data.
On one side,
SPO Tecnologia LTDA, CNPJ: 28.070.056/0001-31, e-mail: [protected-email=cHBhLmNldG9wc0BvdGF0bm9j], phone: +55 (51) 98048-1282, hereinafter referred to as the ASSIGNEE.
On the other side,
ANY INDIVIDUAL OR LEGAL ENTITY, identified through the information provided in the Leads, hereinafter referred to as the GRANTOR or GRANTORS,
Hereby declares, freely and unequivocally, agreement with the collection of data for the purposes of production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction, as set forth in this term:
1. Personal Data
The ASSIGNEE is hereby authorized to perform and make decisions regarding the processing of the following personal data of the GRANTORS:
- Full name;
- Phone and/or WhatsApp numbers;
- E-mail address;
- Verbal and written communications exchanged between the Data Subject and the Controller.
2. Purpose of Data Processing
The processing of personal data listed in this term is intended to:
- Allow the ASSIGNEE to identify and contact the GRANTORS for clarification purposes related to the client;
- Enable the ASSIGNEE to contact the GRANTORS for general communication and/or relationship purposes.
3. Data Sharing
The ASSIGNEE is authorized to share the personal data of the GRANTOR with other data processing agents, if necessary for the purposes listed in this document, provided that the principles of good faith, purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, accountability, and auditability are respected.
4. Data Security
The ASSIGNEE is responsible for maintaining appropriate technical and administrative security measures to protect personal data from unauthorized access and from accidental or unlawful situations of destruction, loss, alteration, disclosure, or any form of inappropriate or illegal processing.
In accordance with Article 48 of Law No. 13,709/2018, the Controller shall notify the Data Subjects and the National Data Protection Authority (ANPD) of any security incidents that may pose a risk or cause significant harm to the GRANTOR.
5. Termination of Data Processing
The ASSIGNEE may retain and process the GRANTOR’s personal data for as long as necessary to fulfill the purposes stated in this term. Anonymized data, which cannot be linked to an individual, may be retained indefinitely.
The GRANTOR may, at any time, request via e-mail or written correspondence that the ASSIGNEE delete any non-anonymized personal data.
The GRANTOR acknowledges that upon deletion of such data, the ASSIGNEE may no longer be able to provide services or programs.
6. Rights of the Data Subject
The GRANTOR has the right to obtain from the ASSIGNEE, at any time and upon request, access to the following regarding their processed data:
- Confirmation of the existence of data processing;
- Access to the data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data as defined in Law No. 13,709/2018;
- Deletion of personal data processed with consent of the GRANTOR, except in the cases provided for in Article 16 of Law No. 13,709/2018;
- Information about public and private entities with which the ASSIGNEE has shared data;
- Information about the option to refuse consent and the consequences of such refusal;
- Revocation of consent, in accordance with §5 of Article 8 of Law No. 13,709/2018.
7. Data Breaches or Unauthorized Access
The parties may reach an agreement on any damages caused by a data breach or unauthorized access. If no agreement is reached, the ASSIGNEE acknowledges that they may be subject to the penalties provided for in Article 52 of Law No. 13,709/2018.
8. Data Retention Period
The ASSIGNEE is allowed to retain and use the personal data of the GRANTOR for the entire duration necessary to fulfill the purposes set forth in this term, and thereafter, for compliance with legal obligations or requirements imposed by oversight authorities, pursuant to Article 16 of Law No. 13,709/2018.
The GRANTOR acknowledges that their data may remain stored for the fulfillment of these purposes, extended for as long as deemed necessary, unless deletion is expressly requested.
9. Right to Withdraw Consent
This consent may be withdrawn by the GRANTOR at any time, through a written request sent via e-mail or correspondence to the ASSIGNEE, in accordance with Article 8, §5, of Law No. 13,709/2018.
Jurisdiction
This Data Collection and Storage Term is governed by the laws of the Federative Republic of Brazil, specifically the Brazilian Internet Civil Framework (Law No. 12,965/2014) and the General Data Protection Law (Law No. 13,709/2018). The parties submit exclusively to the jurisdiction of the courts of Tupandi/RS, expressly waiving any other jurisdiction, however privileged it may be.
10. Contact Details
For questions and/or comments about our Privacy Policy and this declaration, please contact us using the details below:
SPO Tecnologia LTDA
CNPJ: 28.070.056/0001-31
Website: https://spotec.app
E-mail: [protected-email=cHBhLmNldG9wc0BvdGF0bm9j]
Phone: +55 (51) 98048-1282