Privacy policy

Purpose

Empresas Dimas is committed to raising awareness among the users of its website about the personal data that may be processed.

Committed to respecting your privacy and valuing transparency, we have prepared this privacy policy to provide a clear understanding of how your personal data is processed on our website.

Please note that this document explains how personal data collected exclusively on the Empresas Dimas website is processed. Other cases of data processing, involving employees, suppliers and job applicants, among others, are covered by the internal Privacy Policy of Empresas Dimas, which data subjects may request by e-mail at [email protected].

Personal data will be processed only for as long as necessary and appropriate for the purposes that justify its collection, and the processing will always fall under one of the legal bases set forth in the General Data Protection Law (Lei Geral de Proteção de Dados, LGPD).

Empresas Dimas asks all users of its website to read this document carefully before submitting their data through the registration forms. Your registration means that you have understood how we collect and process your personal data.

For more information about the processing of your personal data, please contact us by e-mail at [email protected].

Definitions

Data subject the natural person to whom the personal data being processed refers;

Personal data information related to an identified or identifiable natural person, such as name, e-mail and telephone number, among others;

Sensitive personal data personal data on racial or ethnic origin, religious belief, political opinion, membership of a trade union or of a religious, philosophical or political organization, data concerning health or sex life, and genetic or biometric data, when linked to a natural person;

Processing any operation carried out with personal data, such as collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction;

Controller a natural or legal person, governed by public or private law, responsible for decisions regarding the processing of personal data;

Data protection officer a person appointed by the controller and the processor to act as a communication channel between the controller, the data subjects and the National Data Protection Authority (ANPD);

Processor a natural or legal person, governed by public or private law, who processes personal data on behalf of the controller;

International data transfer the transfer of personal data to a foreign country or to an international organization of which the country is a member;

National Data Protection Authority (ANPD) a federal public administration body, part of the Presidency of the Republic, whose duties, among others set forth in Law No. 13,709/2018, are to safeguard the protection of personal data; to draw up guidelines for the National Policy for the Protection of Personal Data and Privacy; to inspect and apply sanctions when data is processed in breach of the law, through administrative proceedings that ensure the right to be heard, full defense and the right of appeal; and to promote public awareness of the rules and public policies on personal data protection and of security measures.

Shared use of data the communication, dissemination, international transfer, interconnection of personal data or shared processing of personal databases by public bodies and entities in the performance of their legal duties, or between them and private entities, reciprocally, with specific authorization, for one or more types of processing permitted by those public entities, or between private entities.

Principles applicable to data processing by Empresas Dimas

Empresas Dimas, in its role as Controller, ensures full compliance with art. 6 of the General Data Protection Law, which sets out the principles governing personal data processing operations, namely:

Purpose processing for legitimate, specific and explicit purposes of which the data subject is informed, with no possibility of further processing in a manner incompatible with those purposes;

Adequacy compatibility of the processing with the purposes communicated to the data subject, according to the context of the processing;

Necessity limitation of the processing to the minimum required to achieve its purposes, covering data that is relevant, proportionate and not excessive in relation to the purposes of the processing;

Free access assurance that data subjects can easily consult, free of charge, the form and duration of the processing, as well as the completeness of their personal data;

Data quality assurance to data subjects that their data is accurate, clear, relevant and up to date, according to the need and for the fulfillment of the purpose of its processing;

Transparency assurance that data subjects receive clear, accurate and easily accessible information about the processing and the respective processing agents, subject to commercial and industrial secrecy;

Security use of technical and administrative measures able to protect personal data from unauthorized access and from accidental or unlawful destruction, loss, alteration, communication or dissemination;

Prevention adoption of measures to prevent damage from occurring as a result of the processing of personal data;

Non-discrimination impossibility of processing data for unlawful or abusive discriminatory purposes;

Accountability demonstration, by the agent, of the adoption of effective measures capable of proving observance of and compliance with personal data protection rules, including the effectiveness of those measures.

Cases in which data processing is permitted

Art. 7 of the LGPD sets out the cases in which the processing of personal data is permitted. These cases are called “legal bases” and may be used either individually or jointly to support data processing. The legal bases for data processing are:

Consent;

Compliance with a legal or regulatory obligation by the controller;

Processing and shared use of data by the public administration as necessary for the execution of public policies provided for in laws and regulations or supported by contracts, agreements or similar instruments;

Studies carried out by a research body, ensuring the anonymization of personal data whenever possible;

The performance of a contract, or of preliminary procedures related to a contract, to which the data subject is a party, at the request of the data subject;

The regular exercise of rights in judicial, administrative or arbitration proceedings;

The protection of the life or physical safety of the data subject or of a third party.

Data collected, and how and why it is collected

Personal data

Empresas Dimas processes the data entered on the website https://www.dimas.com.br/. You will provide this data directly through the “Contact”, “Work with us” and “Send my résumé” forms:

• Name;
• E-mail;
• Telephone number;
• Résumé data.

This data will be collected for the following purposes:

Contacting the website user by e-mail and/or WhatsApp;

Allowing access and applications to job opportunities at Empresas Dimas through the Solides platform;

Targeting advertising.

Cookies

Cookies are, in short, a small text file with a unique identification tag, placed on your computer by a website. This file can store various kinds of information, from the pages visited to the data voluntarily provided to the website.

Empresas Dimas also processes data provided indirectly by website users, through cookies sent to your browser, which do not allow the user to be identified and are necessary for certain purposes, namely:

Personal data retention period

The data collected on the Empresas Dimas website will be stored:

• For the period required by law;
• Until the end of the processing of personal data, that is, when the purpose has been achieved, when the data is no longer necessary or relevant to achieving the purpose, when the data subject exercises the right to request the end of the processing and the deletion of their data, or when so determined by law;
• For the period necessary to preserve the legitimate interest of Empresas Dimas, as the case may be;
• For the period necessary to safeguard the regular exercise of the rights of Empresas Dimas.

Personal data controller

Empresas Dimas will, as a rule, be the controller of your personal data. For the purposes of the applicable legislation, the controller is the party responsible for decisions regarding the processing of personal data.

Data protection officer

Empresas Dimas appoints as its Data Protection Officer the Security and Privacy Committee of Empresas Dimas, which can be contacted by e-mail at [email protected].

Sharing of your personal data

Empresas Dimas may, exceptionally, share your personal data with software and other information technology providers, for the purpose of creating registrations and taking any measures essential to the operation of the features offered on the website for communicating with the user, such as:

• Development and coding of the website;
• Taking any measures essential to the proper functioning of the features offered on the website;
• Managing the data of customers interested in our services and products in order to contact them, where applicable.

In addition, in the case of applicants for job opportunities, we may share your data with the Solides platform for candidate selection and recruitment processes.

Rights regarding your personal data

You have several rights regarding your personal data, which Empresas Dimas undertakes to ensure, including:

• Confirmation that processing exists;
• Access to the data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in non-compliance;
• Portability to another service or product provider, upon express request;
• Information on the public and private entities with which the controller has shared data.

Storage and security

Empresas Dimas is committed to the security of your personal data. The Controller takes all precautions to maintain this protection, using security systems and procedures adopted by the market to protect your data.

It should also be noted that the controller will notify the national authority and the data subject of any security incident that may entail relevant risk or damage to data subjects.

Questions | Contact

If you believe that your data has been used in a manner incompatible with this Policy or with your choices as a data subject, or if you have any other questions, comments or suggestions, please contact us by e-mail at [email protected].

Changes

Empresas Dimas reserves the right to change this Privacy Policy at any time by publishing the updated version on this page, to ensure that it reflects the actual processing of personal data carried out by us.

This Privacy Policy takes effect on September 22, 2021.