Privacy policy and data processing
1. Identification of the responsible person:
Verano Engenharia Com. Imp. e Exp. Ltda, hereinafter referred to as “The Company” or “Company,” with CNPJ .52.136.249/0001-22, is responsible for processing all personal data collected through the website www.verano.com.br. If you need to contact the company regarding the processing of your personal data, you can do so via email at info@verano.com.br.
The purpose of this policy is to comply with the provisions of the General Personal Data Protection Law (LGPD), Law No. 13,709/2018, and other consistent rules governing the constitutional right of citizens to authorize the processing of their personal data, as well as to know, update, and rectify the information collected about them in databases or files of public and private entities.
The company takes the necessary precautions to protect the information of users and visitors to the Verano.com.br website in accordance with Brazilian and non-Brazilian laws, as applicable to the matter.
2. Purposes of processing:
The company collects personal data from users and visitors to the Verano.com.br website for the following purposes:
(i) send commercial information and advice related to the products and services offered by the company;
(ii) to ensure and improve the usability of the service, provide technical support, perform maintenance, updates, incidents of presence, inconvenience, requirements, complaints, and claims;
(iii) for administrative purposes, such as quotations, payments, payments, payments, payments, management services, management services, payment, payment, among others;
(iv) send information about news, announcements, newsletters;
(v) carry out business intelligence activities, create tailored offers, customer prospects, research, and market trends. It is important to note that the information received by users and visitors under the above cannot be used by them for advertising, promotional, or commercial purposes of any kind, or for any other activity unrelated to the Verano.com.br website, unless expressly authorized by the owner of the information.
3. Title consent:
The company requests permission from users and visitors to the Verano.com.br website to use their personal data provided at the time of registration, or any other data provided to the Company at any time, according to the type of link or database, in order to facilitate the relationship that is established or intended to be established, provision of requested services, access to some of the services, events, information, among others.
By granting their authorization, the holder accepts that the personal data provided will be used in accordance with the purposes set out in the previous paragraph and in the company’s personal data processing policy.
The data subject’s authorization is granted freely, voluntarily, knowingly, and expressly, and may be revoked at any time by the data subject through a procedure set forth in the company’s personal data processing policy.
4. Sensitive data:
The COMPANY will not collect or process sensitive data, understood as data that affects the intimacy or privacy of the data subject, such as information about health, sexual orientation, religion, political affiliation, among others.
5. The rights of data subjects:
If the data subject wishes to exercise any of their rights, they must send their request, clearly and in detail explaining the reason for their request, the facts supporting it, their contact information, the documents they wish to enforce, and their “s)” (s) to the email info.verano.com.br or through the contact form available on the website http://www.verano.com.br/entre-em-contato/envie-sua-mensagem.
If the application is incomplete, the interested party is required to remedy the deficiencies within three (3) days of receiving the request to do so. If, three (3) months after the date of the request, the applicant has not provided the required information, the application is considered withdrawn. If the person receiving the request is not competent to resolve it, they must transfer it to the competent person within a maximum of thirty (30) working days and inform the person concerned of the situation. Requests are processed within a maximum of three (3) working days from the date of receipt.
When it is not possible to attend the consultation within this period, the Company will inform the interested party, stating the reasons for the delay and indicating the date on which their consultation will be attended to, which in no case may exceed thirty (30) working days after the end of the first term. With regard to complaints, the Owner or the person responsible may only submit a complaint to the competent authority once the consultation or complaint procedure before the Company or the Data Controller has been exhausted, as applicable.
The request for withdrawal or deletion shall not proceed when there is a contractual obligation to keep it in the database of Verano Engenharia Com. Imp. e Exp. Ltda.
6. International transfer:
The company will not transfer users’ personal data internationally to third countries. All data will be stored and processed within Brazil.
7. Data security:
The COMPANY undertakes to implement appropriate technical and administrative measures to ensure the protection of data subjects’ personal data in order to prevent unauthorized access, loss, destruction, alteration, or improper disclosure of such data.
To this end, security tools that meet industry standards are used, such as firewalls, intrusion detection systems, monitoring and access control systems, among others.
In addition, the COMPANY constantly trains and raises awareness among its staff about the importance of personal data protection and its proper handling, in order to ensure the confidentiality, integrity, and availability of information.
On the other hand, the COMPANY will conduct periodic reviews of its security measures to ensure that they are always up to date and effective. However, due to the very nature of information technologies and systems, there may be risks that cannot be fully mitigated, and therefore the COMPANY shall not be liable for any damages resulting from the breach of security measures, unless such breach was caused by the COMPANY’s negligence or failure to fulfill its legal and contractual obligations regarding the protection of personal data.
8 - Retention period:
Users’ personal data will remain in effect for 5 years to fulfill the uses and purposes described in the Privacy Policies or Terms and Conditions.
In addition to the above, it is important to mention that, once the retention period has expired, personal data will be removed from the COMPANY’s databases in a secure and definitive manner, unless there is any legal obligation to prevent its deletion.
Furthermore, when the data subject requests the deletion of their personal data before the set deadline, this request must be complied with, provided that there is no legal obligation to prevent its deletion and that the deletion of the data does not affect the rights of third parties or the legitimate interests of the Company or third parties.
It is the responsibility of the owners to ensure the accuracy and updating of the personal data provided to the COMPANY and, in the event of any change, they must immediately notify the Company so that the Company can make the corresponding updates.
9. Confidentiality:
The company undertakes not to sell, rent, or share the personal information of data subjects, except in the cases provided for in this personal data processing policy.
In this regard, the company may share the personal information of data subjects with third parties, provided that such transfer is intended to provide the services offered by the Company.
In this regard, the Company may share the information. The owners of the information expressly authorize the Company to transfer, in whole or in part, responsibility for the processing of users’ personal information to companies controlled by, controlling, and/or affiliated with the Company and to the Conditions it deems relevant.
The company undertakes to take the necessary measures to protect the confidentiality agreed with the owners of the information.
In any case, the company must ensure the proper handling of the personal information of data subjects, in accordance with applicable legal provisions and this policy for the processing of personal data.
10. Changes to the data processing policy:
This privacy policy and DATA PROCESSING may be modified due to the commercial dynamics of the company and the commercial and legal conditions of the company’s environment. Changes will be communicated to users and visitors by email and, in no case, will diminish efforts based on the effectiveness of the processing of personal information for which it is responsible.
11. Contact for information requests or exercising rights:
The contact for requests for information or exercising rights related to the processing of personal data is via the email address info@.verano.com.br or the contact form on our website.
Users may exercise their rights of access, updating, rectification, deletion, and other rights provided for in the applicable rules on personal data protection.
They may also submit any questions or complaints regarding the protection of their personal data through the aforementioned contact channels.
12 - Cookies:
The COMPANY’s website uses cookies to improve the user experience and provide personalized information about procedures and developments that may be of interest to you.
These cookies allow you to understand the user’s needs, tastes, and preferences in order to offer relevant and useful benefits through the platform.
It is guaranteed that the information collected through cookies will only be used for internal purposes and will not be shared with third parties, in accordance with privacy and personal data processing policies.