PRIVACY POLICY

Quimetal Group is concerned about the privacy and security of our customers' data and, therefore, based on the General Personal Data Protection Law (LGPD) - Law 13,709/2018, we have prepared this privacy policy so that you, the holder of personal data, have access, with transparency, to information about the processing activities we carry, also about your rights.

This privacy policy provides relevant data privacy information, including your choices as a customer, regarding the collection, use and sharing, by the Quimetal Group, of certain information, such as your personal information.

HOW TO CONTACT QUIMETAL GROUP?

If you have general questions about your account or how to contact us, please visit our website: http://www.quimetal.com.br. For specific questions about this privacy policy, including the use of personal information, cookies and other similar technologies, please contact our Data Protection Officer (DPO) at privacidade@quimetal.com.br.

If you contact us requesting assistance, for yours and Quimetal Group’s Safety, you may need to authenticate your identity before fulfilling your request.
 

DATA COLLECTION

Quimetal Group receives and saves information about you, such as:

Information you provide us, which includes: your name, identity document (to access our facilities), signature, images (if you visit some of our facilities with video surveillance, specifically regarding Quimetal Distribution facilities). We also collect some data from customers and third parties who enter a contract with us, which include: name, marital status, profession, nationality, address, signature and copies of identification documents (RG and CPF).

Information is collected in different ways, with special relevance being collected through contracts, exchanged correspondence and other documents the holders provide us.

Information collected automatically by Quimetal Group: we collect information about your interactions with us, as well as information about your network, your network devices, your computer and other devices used to access our website or interact with our services (mobile devices and other devices/devices). Such information includes:

1. Your interactions with our emails and text messages;
2. Details about your interactions with the customer service, such as, in case of calls, your telephone number;
3. IDs or other unique device identifiers;
4. Device and software characteristics (such as configuration), connection information, statistics on page views, IP address, browser and standard data from internet server logs;
5. Information collected through the use of cookies and other technologies, including ad data. See “Cookies and Internet Advertising” section for more details.
   
   
   Information from other sources: we protect this information in accordance to the practices described in this privacy policy, in addition to respecting additional restrictions imposed by the data source. These sources vary over time, but can include:

1. Third parties that provide information about our customers (companies) from public available information (in this sharing we have access to the members of the corporate board of companies with which we have a relationship);
2. Public available sources, such as open government databases.

DATA USING

Quimetal Group uses the information to provide, manage, improve and customize our services, to promote their contracting, to charge for the services offered, to guarantee our face-to-face service format, to meet legal and regulatory obligations arising from our services, to promote the company's defense in judicial, administrative or arbitration proceedings, and to communicate with you on these and other matters. For example, we use the information to:

1. Prevent, detect and investigate potentially prohibited or illegal activities, including fraudulent activities, and provide appropriate addresses;
2. Send messages and notifications, through the registered email address, to communicate you about our services, including in relation to payment for contracted services.

These communications may be made mainly through the e-mail address registered in our systems.

DATA SHARING

Quimetal Group will share your data for specific purposes and to third parties, as described below:

Service Providers: Quimetal Group may hire other companies or third parties to provide services on its behalf or assist in the provision of services intended for you. For example, Quimetal Group engages service providers to give communication, infrastructure and IT services, to ensure yours and our security, to customize and optimize Quimetal Group' service, process payment methods and collect debts. By doing so, these service providers may have access to your personal or other information. We do not authorize these companies to use or disclose your personal data, except for the purpose of providing the services contracted by the Quimetal Group.

Partners: As described above, you may have a relationship with one or more of our partners. In that case, we may share certain information with these partners. For example, depending on which partner services you use, we may share information:

1. To ease the receipt of payment for the service provided by the Quimetal Group through the partner and the transfer of this payment to the Quimetal Group;
2. To ensure your safety as well as of our employees.

Protection of Quimetal Group and others: Quimetal Group and its service providers may share or use your personal information when Quimetal Group or such companies have reasonable grounds to believe that such disclosure is necessary to (a) meet any applicable law or regulation, legal process or governmental request, (b) enforce applicable terms of use, including investigation of potential infringement thereof, (c) detect, prevent or address suspicious or illegal activity (including payment fraud), technical or security issues or (d) protect against violation of the rights, property or safety of Quimetal Group, its users or the public, as required or permitted by law.

Ownership Transference: in face of any reorganization, restructuring, merger or sale, or transfer of assets, Quimetal Group will transfer information, including personal information, provided that the receiving party undertakes to respect your personal information in a manner consistent with our privacy.

In the run of sharing data, whenever we transfer personal information to countries outside the national territory and other regions with comprehensive data protection laws, we will ensure that the information is transferred in accordance with this privacy policy and as permitted by applicable data protection legislation.

YOUR RIGHTS AND INFORMATION

You may request access to your personal information, as well as correct or update outdated or incorrect personal information that we hold about you.

To do so, you just need to send us a communication through the email address privacy@quimetal.com.br informing which information about you we must correct or update. You may also request that Quimetal Group delete your personal information (where such deletion is possible).

To make these requests, or in case of any other questions about our privacy policy, write to our DPO - Data Protection Officer’s e-mail: privacidade@quimetal.com.br.

We respond to all requests we receive from those who want to exercise their data protection rights in accordance to their data protection laws.

Quimetal Group may reject requests that are unreasonable or not required by law, such as those that are extremely impractical, capable of requiring disproportionate technical effort or that could expose us to operational risks.

Quimetal Group may retain information as required or permitted under applicable laws and regulations, including to honor your choices, for billing or recording purposes, and to fulfill the purposes described in this Privacy Policy. Quimetal Group takes reasonable steps to securely destroy or anonymize personal information when it is no longer needed.

Quimetal Group is aware of the legal obligation of companies to eliminate personal data for the purpose for which they were obtained.

SECURITY

We take your privacy seriously and take reasonable steps and precautions to protect your personal data. We work to protect you from unauthorized access, accidental or unlawful alteration, disclosure or destruction of your personal data.

Quimetal Group employs reasonable administrative, logical and physical measures to protect your personal information, these measures are designed to provide a level of security adequate to the risks of processing your personal information, including: the use of a password protected network and firewall; antivirus tool; periodic backup of our database; and the application of the security parameters suggested and made available by Microsoft in our electronic correspondence.

We emphasize that the transmission of information over the internet has several actors and several forms of leakage, which may even come from your own computer. Therefore, we cannot guarantee the complete security of all data you send over the internet, only those that are under our control.

Furthermore, you are responsible for keeping your password used to access our systems and services confidential. This measure prevents unwanted access to your profile from happening. We will never ask you to send this password by email, SMS or any other means of contact.

CHANGES ON THIS PRIVACY STATEMENT 

Quimetal Group may periodically amend this privacy policy to comply with changes in legislation, regulatory or operational requirements. We will communicate any changes (including the date on which they will become effective) as required by law. If you do not want to acknowledge or accept any of the updates to this privacy policy, you may inform Quimetal Group through the email: privacidade@quimetal.com.br. To find out when this privacy policy was last updated, see the “Last Updated” section below.

COOKIES AND INTERNET ADVERTISING

Quimetal Group and our service providers use cookies. For example, we use these technologies to facilitate your access to our services, to recognize you each time you return, and to analyze our services. We want to inform you of our use of these technologies. Thus, this section explains what types of technologies we use, their functions, and your choices regarding their use.

1. What are cookies?

Cookies are small data files, normally stored on your device as you browse and use websites and online services. Cookies are widely used to make websites work or function more efficiently, as well as to generate reporting information and help with the personalization of the service or advertising.

Cookies are not the only kind of technologies that enable this functionality. We also use other types of similar technologies. See the items below for more information and examples.

1. Why does Quimetal Group use cookies?

Essential Cookies: These cookies are strictly necessary to provide our online service or website. For example, we may use these cookies to authenticate and identify our users when they use our websites and applications – and so that we can provide them services. Cookies also help us to prevent fraud and maintain the security of our service.

Performance and functionality cookies: These cookies are not essential, but they help us to personalize and improve your online experience with Quimetal Group. For example, they help us remember your preferences and prevent you from having to enter information that you have already provided (for example, during your access to our “follow-up”). Deleting these types of cookies may result in limited functionality of our service.

1. How should I make choices regarding cookies?

For more information about cookies set through our website, details about other types of online monitoring (including the collection of information about your online activities by third parties overtime and across third party websites) and for more information about how to make choices regarding them, send an email to (privacidade@quimetal.com.br).

LAST UPDATE: October 18th, 2021.