Privacy and data

protection policy

DEFINITIONS

LGPD: Law No. 13,709/2018, known as the General Data Protection Law, which established the regulatory framework for Data Protection in Brazil.

Personal Data: Any personal information that was collected within the national territory or shared by international transfer related to the identified or identifiable natural person. Personal data can be in any media or format, including electronic or computerized records, as well as paper-based files.

Sensitive Personal Data: Personal data on racial or ethnic origin, religious conviction, political opinion, membership of a trade union or organization of a religious, philosophical or political nature, relating to health or sexual life, genetic or biometric data, when linked to a person Natural.

Anonymized Data: data relating to the holder that cannot be identified, considering the use of reasonable technical means available at the time of processing.

Cookies: This is a small file added to your mobile device or computer by websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide a personalized access experience and provide information to website owners.

Personal Data Holder: Individual to whom the personal data that is processed by the company refers, over 18 (eighteen) years of age, who uses or visits the website(s) and/or application(s). As well as the emancipated, those fully capable of carrying out the acts of civil life, those absolutely or relatively incapable, duly represented or assisted.

User: Is the Holder of personal data.

Rights of Data Holders: Holders subject to the processing of their personal data have a series of rights, such as: confirmation of the existence of processing of their data; access to your data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary, excessive or processed data that does not comply with the provisions of the law; portability of data to another service or product provider, upon express request; revocation of consent and deletion of personal data processed with your consent where applicable; obtaining information about the shared use of your data and the possibility of not providing consent, as well as the consequences of refusal.

Processing Agent: the Controller and Operator, who carry out data processing.

Controller: natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data.

Operator: natural or legal person, governed by public or private law, who processes personal data on behalf of the controller.

Purpose: Purpose of collecting personal data.

Necessity: Necessary reason for collecting personal data, so that the purpose is achieved and avoiding unnecessary data collection.

Consent: Free and unequivocal authorization to which the Personal Data Holder agrees to the processing of their personal data for a purpose.

ANPD: National Data Protection Authority, is the public administration body responsible for ensuring, implementing and monitoring compliance with the LGPD throughout the national territory. The ANPD was established by the LGPD as a federal public administration body with technical autonomy, part of the Presidency of the Republic, defined as its nature as transitory and subject to transformation by the Executive Branch into an indirect federal public administration entity, subject to a special autonomous regime and linked to the Presidency of the Republic.

Data Protection Impact Report: Report prepared to prove the suitability of a company, product or service with the LGPD.

Data leak incident: Violation of the security measures adopted by GRUPO WEISUL that results in the leak of personal data.

International data transfer: Transfer of personal data to a foreign country (i.e., outside Brazil) or international organization of which the country is a member.

SCOPE OF THIS POLICY:

Firstly, we ask that you carefully read this Privacy and Data Protection Policy (“POLICY”) so that you understand our practices for processing your personal data (“DATA”). This POLICY is applicable to the website, application, platform or digital environment belonging and editable by WEISUL AGRÍCOLA LTDA or its group of companies (“WEISUL GROUP”, “We”, “With Us”).

This POLICY covers our online and offline DATA collection activities carried out by Us, through the channels mentioned above.

If the User (“You”) does not provide this data, we may not be able to provide You with our products and/or services or continue with selection processes in which You are interested in participating. However, we clarify that We will inform you, when applicable, when DATA collection will be necessary.

WHO WE ARE?

WEISUL AGRÍCOLA LTDA is an agribusiness company aware of its responsibility towards the environment and people. Through the smart management and technology we implement on properties, we honor our work by reinvesting resources in people, society and the land. We are completely clear that our daily dedication is focused on fulfilling the noble WEISUL mission: helping to feed the planet with confidence, respect and sustainability.

Therefore, we indicate our identification information below:

WEISUL AGRÍCOLA LTDA

CNPJ nº 05.033.730/0001-02

Rua José Francisco Bernardes, 1751

Industrial District

Camboriú/SC, 88345-200.

In certain situations, we will be responsible for collecting and processing your personal data, in which case we determine the purposes and means of processing. Therefore, we act as Data Controllers.

WHAT DATA IS COLLECTED AND HOW DO WE COLLECT IT?

We control the collection, processing and use of any personal or sensitive data that You provide and/or is collected while using the Site.

When you use the Website and/or our application, We may collect and process personal data and, eventually and if necessary, sensitive data, the provisions of which herein determine how we use data relating to the user and apply to any use of information and User data, namely:

  • Personal contact information: full name; full address, including zip code; CPF; RG; profession; date of birth; sex; phone number; email; social media.
  • Account Login Information: Any information required to grant access to your specific account profile, such as a username, password, and/or security question and answer.
  • Information, demographics and interests: information that describes your demographic data or behavioral characteristics, such as age or age group, geographic location (e.g. zip code) and favorite products.
  • Consumption information: information that allows us to understand your consumption profile, such as transactions and searches carried out on our websites and applications.
  • Website Usage/Communication Information: As You browse and interact with our Websites, We use automatic data collection technologies to collect certain information about your actions. This includes information such as which links You click, which pages or content You view and for how long, and other similar information and statistics about your interactions, such as content response times, download errors, and length of visits to certain pages. This information is captured through automated technologies, such as Cookies (Browser Cookies, Flash Cookies) and web beacons, and via Third Party tracking.
  • Technical information about your computer/mobile device: Any information about the computer system or other device that You use to access one of our websites or applications, such as the IP address, the type of operating system and the type and web browser version. If You access a GRUPO WEISUL website or application using a mobile device, such as a smartphone, the information collected will also include, where permitted, your phone's unique device ID, advertising ID, geographic location and other similar data of the mobile device.
  • Financial and payment information:Information that GRUPO WEISUL processes to fulfill and invoice an order, or that You use to make a purchase, such as your debit or credit card details (name of cardholder, number card and expiration date) or other payment methods (if available). In any case, We or our payment processing service providers handle financial and payment information in compliance with applicable laws, regulations and security standards. Payment card details such as the security code are not recorded.
  • Communications with Customer Service: Communications with Customer Service may be recorded or listened to, in accordance with applicable legislation, as well as to meet operational needs.
  • Sensitive Personal Data:We seek to process as little Sensitive Personal Data as possible. However, on some occasions the collection of this data will be necessary to carry out a certain operation, such as the purchase of products, in which it will be necessary to send financial information, which will not be recorded in Our database. When it is necessary to process your Sensitive Personal Data, you will be notified of the intended purpose, always with your prior and express consent, when this is a legal requirement.

HOW DO WE USE YOUR PERSONAL DATA?

We will use your personal data for the sole purposes described before collecting your data and obtaining your consent, and particularly for the following purposes:

  • Information sent: to help us identify you and open, run and monitor any accounts you have with us; for administration; respond to a request you have made to us; to monitor and distribute videos and other material you contribute to our Site; to provide personalized content, including promotional content, and to send you information about our Site and App.
  • Analytics: to understand how and how often You use our Site and app, and to help us improve it.
  • Content information: so that you can connect with friends and other users, to share videos and other contributions you may make, and to facilitate your use of the Site and App, for example through previously used forms and user accounts.
  • Product recommendation: to recommend products based on the user profile and information provided when registering.
  • Legal reasons or merger/acquisition: If GRUPO WEISUL or its assets are acquired by, or merged with, another company, including due to bankruptcy, we will share your Personal Data with our legal successors.
  • General purposes: GRUPO WEISUL uses your Personal Data for other general business purposes, such as maintaining your account, conducting internal or market research and measuring the effectiveness of Our advertising campaigns and Newsletters. We reserve the right, if You have accounts on Our digital platforms, to compile these accounts into a single account. We also use your Personal Data to manage and operate our communications, IT and security systems.

GRUPO WEISUL may associate any category of information with any other category of information and we will treat the combined information as Personal Data in accordance with this policy during the period in which it is combined, unless otherwise indicated. We may also use your submitted data to process personalized content that we believe

be of interest to you or to contribute to relevant advertising based on your personal data stored by Us.

We may also use Your Personal Data to comply with obligations set out in law, regulations of government bodies, tax authorities, the Judiciary, such as sentences and agreements, and/or any other competent authority. This processing may include your identification data and personal documents.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

During Our relationship, GRUPO WEISUL may share Your Personal Data with some entities:

  • Service providers: External companies that help us operate Our business, in which case only selected employees will be authorized to access your Personal Data on behalf of GRUPO WEISUL, for the purpose of carrying out specific tasks that are requested of them, based on our instructions. Furthermore, the providers with which we share your Personal Data are obliged to keep it confidential and secure.
  • Content Information: Content Information submitted through the website and/or application will be shared publicly unless otherwise indicated.  The Information you include in your public profile on the digital platform, or that you share through forums and other interactive messaging devices through Our website/application, will be shared with other users registered on these platforms. In some cases, You may have the ability to select specific recipients of Content Information (for example, when sending a private message or sharing a video with a specific individual). With prior agreement, the Content Information you share may be made public. When you accept that the digital platform has access to your geographic location, this information will be used to create the most relevant content displayed to the user through the website/application. You may also tag Your Content Information, in which case your approximate location (or any other tags you select) will be visible to the public.
  • Product recommendation:to recommend products based on Your profile and information provided when registering.
  • Credit analysis/debt collection agencies: External companies that we use to help us check your credit status (particularly for orders made by bank slip) or to collect overdue bills.
  • Empresas terceiras que usam Dados Pessoais para suas próprias finalidades de marketing: Nós não licenciamos ou vendemos seus Dados Pessoais a empresas terceiras para suas próprias finalidades de marketing. Eventualmente, caso isso ocorra, solicitaremos seu consentimento, deixando claro a Você a finalidade para a qual se destina. A identidade de referidas empresas será revelada assim que seu consentimento for solicitado.
  • Third-party companies using Personal Data for their own marketing purposes: We do not license or sell your Personal Data to third-party companies for their own marketing purposes. Eventually, if this occurs, we request your authorization, making it clear to you specifically for what purpose it is intended. The identity of those referred to will be revealed as soon as their companies request it.
  • Internet Providers:The information you send may be shared with the email service providers We use to keep you informed about news relating to Our website, application and with other third parties We collaborate with (who process your Submitted Information in accordance with our instructions), including for the purpose of providing live chat, marketing, feedback and assistance.
  • Analytical Data:Analytic information may be shared with advertisers on an aggregate, anonymous basis. We may also display anonymous, aggregated statistics through our websites or other chats, without this including your personal data.
  • Representatives or Suppliers: Your Personal Data may be shared, anonymously, to Commercial Representatives or Suppliers of WEISUL GROUP, based on the geolocation informed when registering or in the Contact request area on the website and/or application.

We do not disclose information regarding identifiable individuals to advertisers. We may, in this case, provide advertisers with an aggregate of anonymous information about Our users – for example, we may inform them that 500 men under the age of 30 clicked on their advertisements on a given day.

STORAGE OF PERSONAL DATA:

Your Personal Data will be stored by Us for as long as necessary to achieve the purposes for which it was collected or to comply with applicable legal obligations, protect our rights or comply with judicial/extrajudicial agreements.

To determine the retention period for your Personal Data, we base ourselves on the following criteria:

  • To comply with a legal, contractual or other obligation to retain Personal Data, or if it is necessary for the purposes of investigation or litigation. In this case, your data will be kept in our database for a period of 5 (five) years, counting from the end of the obligation; It is
  • To maintain accurate business and financial records. In this case, your data will be kept in our database for up to 5 years, after the contractual obligation has ended.
  • Personal Data collected from forwarding CVs through the link https://grupoweisul.vagas.solides.com.br/?page=1&locations=&title= or any email message sent to any of Our employees, the storage will consist of within a maximum period of 2 (two) years.

HOW DO WE KEEP YOUR PERSONAL DATA SAFE?

We are committed to the security of your information and Personal Data and, possibly, Sensitive Data, which are in Our possession. However, the transmission of information over the internet cannot always be considered completely secure. We cannot guarantee the security of your data when it is transmitted to Our digital platforms, so any transmission will be made solely at Your own risk.

Once we receive your information, we take appropriate security measures to prevent any unauthorized access, improper use or disclosure, unauthorized modification, or unlawful destruction or accidental loss of personal information once it is in our possession.

We ensure that any third party to which your data is transferred and disclosed complies with the section “WHO DO WE SHARE YOUR PERSONAL DATA WITH?” You must take appropriate security measures to prevent unauthorized access, improper use or disclosure, unauthorized modifications, or unlawful destruction or accidental loss of personal information.

We will inform You without undue delay of any data breach that may result in increased risks to Your rights and freedoms.

When You share any Content with us, you must be sure that you are happy to share that Content if it contains personal information that you prefer to keep to yourself.

It is also important to clarify that Your role is fundamental in keeping Your Personal Data safe. When creating an account, please be sure to choose a password that is difficult so that others cannot guess it. You are responsible for keeping this password confidential for any use of your account. If You use a shared or public computer, never choose the option to remember your login ID, email address or password and

Make sure you log out of your account whenever you leave your computer or mobile device. You must also use any privacy settings or controls that We provide on our website or application.

Our security measures are continually monitored and reviewed in accordance with the most current technological advances and organizational resources.

We adopt strict policies and procedures that determine how Personal Data should be treated here at GRUPO WEISUL. These standards aim to ensure the appropriate and lawful processing of your Personal Data.

WHAT ARE YOUR RIGHTS?

You, as the Holder of Personal and, if collected, Sensitive Data, have the following rights regarding this information, in accordance with article 18 of the LGPD:

  • Access, review, find out if we have carried out any processing with your Personal Data and request an electronic copy of the information we have about You;
  • Correct or request correction of incomplete, inaccurate or outdated Personal Data;
  • Request the anonymization, blocking or deletion of unnecessary and excessive Personal Data. Please note that, in certain circumstances, We will not be able to delete your Personal Data without also deleting your user account. It may be necessary to retain some of your Personal Data after You request its deletion, to satisfy our legal or contractual obligations or to meet business needs;
  • Request the deletion of Personal Data collected and used based on your consent;
  • Obtain information about the public or private entities with which we share your Personal Data;
  • When the processing activity requires your consent, you may refuse to consent. In this case, we will inform you of the consequences of not carrying out such activity;
  • When the processing activity requires your consent, you may revoke it at any time.
  • Request a review of solely automated decisions that affect your interests;
  • Oppose treatment carried out based on one of the hypotheses for waiving consent, provided for in the LGPD.

To meet your requests as holders, we may request a copy of your identification document. This is necessary to confirm and validate your identity, due to the existence of potentially malicious people or even in situations of homonyms. Therefore, the greater the sensitivity of the data, the greater care must be taken with the authentication and verification of the holder/requester.

Furthermore, requests involving Personal Data and/or documents from other Holders will not be met, except through a power of attorney, parental authority or other hypothesis that authorizes the exercise of another Holder's right by You. In situations where You no longer have access to the email registered on our platforms, we may also request a copy of your identification document to recover your login and password.

In specific circumstances, it is possible that your request will not be fulfilled. In these cases, We will explain the reasons for non-compliance.

CHANGES TO OUR PRIVACY POLICY:

If We change the way We treat Your Personal Data and, eventually and if collected, Sensitive Data, We will update this Policy.

We reserve the right to make changes to Our practices and this Policy at any time, the modifications of which will be communicated to You in advance. We kindly ask you to access it frequently to check for any updates or changes.

CONTACT:

To make questions, comments, complain and/or exercise any rights provided for in article 18 of the LGPD, as referred to in this Privacy and Data Protection Policy, including to discuss our data protection practices, You may contact Us via email, or send Notification to the address provided at the beginning of this Policy.

If the request is submitted by a person other than You without providing evidence that the request is legitimately made in Your name, the request will be rejected. Please note that any identifying information provided by Us will only be processed in accordance with applicable laws.

We will receive and investigate any complaints about the way We manage Personal Data (including complaints about your rights under applicable privacy laws and regulations).

Last updated March 25, 2024.