Hello, Data Subject! Below we clarify some points that we consider important regarding your rights related to your personal data.
Should you have any questions regarding any points discussed or not discussed in this document, or if you wish to make suggestions or report problems, please do not hesitate to contact us at the email address [email protected].
The Platform is the responsibility of and operated by LEGITIMUZ TECNOLOGIA LTDA.,
A limited liability company, registered with the CNPJ under number 52.178.446/0001-04, with headquarters in the city of Barueri/SP, at Alameda Rio Negro, No. 500 – 5th floor – Tower B – rooms 501 to 508, CEP 06.454-000, (“Legitimuz” or “We”).
We are committed to ensuring transparency in the information (“Personal Data”) that we process and, for this reason, we provide the user (“You”) with this Personal Data Subject Rights Policy (“Rights Policy”), which should be read in conjunction with our Privacy Notice.
Brazilian privacy and personal data protection laws guarantee you, the Personal Data Subject, a series of safeguards (“Data Subject Rights” or “Rights”) that place you in control of the information you provide to us. To inform you about your Rights and how to exercise them, we present below everything that applies to you:
1. How to exercise your rights?
The LEGITIMUZ have trained professionals to answer your questions and requests. To exercise your rights, you can request them by sending a message to the email address [email protected].
2. What are your rights?
Confirmation of the existence of treatment – This right allows you to request and receive confirmation regarding the collection, storage, sharing, or any other type of processing of your Personal Data.
Access to personal data – This right allows you to request and receive a free copy, in an accessible format, of the Personal Data processed by us.
Correction of incomplete, inaccurate, or outdated data – If you identify any inaccuracies or errors in your Personal Data that we process, you may request that we correct them.
Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed Personal Data –
This right allows you to request the anonymization, blocking, or deletion of your Personal Data from our database. All collected data will be anonymized, blocked, or deleted from our servers whenever possible and requested by you.
Portability –
The LEGITIMUZ This allows you, or a designated third party, to access the Personal Data that we process in a structured and interoperable format.
Revoke or not provide consent – You have the right to revoke your consent or, if applicable, not to provide it to us and be informed of the consequences of your refusal.
In some cases, the refusal may result in the inability to provide you with certain products or services.
Review of automated decisions – You have the right to request a review of decisions made solely on the basis of automated processing of personal data and to receive clear and adequate information regarding the criteria used in the decision, provided that this information does not violate any trade secrets of LEGITIMUZ.
Opposition to treatment – You also have the right to object to certain purposes of processing Personal Data, such as sending advertising, newsletters or new offers.
Deletion of Personal Data processed with consent – If you have given us your consent for a processing purpose, you may request the deletion of the Personal Data that we have stored until then.
3. How will your request be reviewed?
When we receive your request, our team will analyze it and may respond to you in two ways, determining that: (i) your request is lawful and legitimate and should therefore be granted; or (ii) your request has been denied and, for certain reasons, cannot be granted.
Don't worry, even if your request is denied, we will inform you of the reasons why it was not approved. All our responses will always be sent through the same method you used to contact us, whether email or mail.
We may need to request specific information from you to confirm your identity and ensure that you can exercise your rights. This is a security measure to ensure that your data is not disclosed to anyone who is not entitled to receive it.
If your request is accepted, we will do our best to contact our suppliers and business partners who may have access to your Personal Data so that they can also rectify, delete, or exercise any other right you have requested.
However, unfortunately we cannot guarantee the actual exercise of these rights by these third parties, who use, disclose and protect Personal Data in accordance with their respective policies.
We may store and maintain, in the form of a record, a history of the Rights requests you have made so that we can, if necessary, present it to the competent authorities as proof that we responded to the requests in a timely and appropriate manner, as established by law.
4. How quickly will it take us to respond to your request?
Once we receive your request, our team will get back to you with a response within the following timeframe:
RIGHT OF THE HOLDER TERM
Confirmation of the existence of treatment – Within 15 calendar days from receipt of the request
Access – Within 15 calendar days from receipt of the request
Correction – Within 5 business days of receiving the request
Anonymization, blocking, or deletion – Within 15 calendar days from receipt of the request
Portability – Within 15 calendar days from receipt of the request
Revocation or failure to provide consent – Within 15 calendar days from receipt of the request
Review of automated decisions – Within 15 calendar days from receipt of the request
Deletion of data processed with consent – Within 15 calendar days from receipt of the request
If we require clarification or further information regarding your request, we may send you some questions so that we can respond to your request satisfactorily. In such cases, the processing times will be suspended from the time we send our questions until we receive your response.
5. In what situations can we deny your right?
Your rights are not unlimited, and therefore, we present below some situations that may lead to the total or partial denial of them:
- preservation of trade secrets and intellectual property of LEGITIMUZ;
- Violation of the rights and freedoms of others;
- The information is anonymized and therefore is not Personal Data;
- obstruction of law and justice;
- the legitimate interests of LEGITIMUZ take precedence over those of the data subject;
- the account holder made repetitive, repeated, or excessive requests.
In any case, we will respond to requests in a timely manner and will clearly inform you of the reasons that led us to the eventual denial of your request.
6. How do I contact LEGITIMUZ?
If you have any questions, comments, or suggestions related to this Policy, you can contact the privacy team atLEGITIMUZ through the following means:
Contact email: [email protected]
7. Changes in Rights Policy
As LEGITIMUZ is always looking to improve its services, this Rights Policy may be updated. Therefore, we recommend that you periodically visit this page to be aware of any changes. If significant changes are made that require new consent, we will publish the update and request your new consent.