PRIVACY AND PERSONAL DATA PROTECTION POLICY

Version 07/2022 – last update 07/13/2022.

 

We at ITGCON cherish the privacy of the data reported in our site. Our privacy and personal data protection policy is based on transparency. See below how we treat the personal data entrusted to us by customers, partners, suppliers and other individuals or legal entities that relate to us.

ITGCON Integration and Consulting in Systems, registered with CNPJ nº 30,062,008/0001-43, as the Controller of personal data, makes public its privacy and personal data protection policy.

 

What data do we collect?

When relating to ITGCON Integration and Consulting in Systems, we collect personal data in the following situations:

 

• To request information about ITGCON Integration and Consulting in Systems. In this case, we collect the following personal data: full name, company name, CNPJ, Position, contact telephone number, e-mail and address.

 

• In the requirements to become customers, partners, suppliers and other individuals or legal entities that relate to us. In this case, we collect the following personal data: full name, CNPJ, mailing address, e-mail, mobile phone, landline

 

• Navigational information - We track and store visits to our website through Google Analytics by inserting a 'cookie' in the browser. Data such as:

 

• number of hits, duration of each visit to the site and pages, time, location, referral sources, most viewed pages, IP address and browser type, among others.

 

• User behaviors in sent Marketing Emails are also tracked, such as number of clicks, piece views, messages and opt-out requests

User history and profile - We store the messages sent through the forms, segments of action, among others, requested in each action, as well as the content downloaded on our pages and landing pages

 

What is the purpose of data collection?

We collect data for the following purposes:

• For people who only request information about ITGCON Integration and Consulting in Systems, the collection of personal data has the purpose of registering for contact with the data subject;

• For people who intend to become customers, partners, suppliers and other individuals or legal entities that relate to us, the personal data collected are for the purposes of registration and to comply with the legislation in force in our segment, for purposes: corporate, commercial , social security, labor and tax.

• For direct marketing purposes with information about our products and services with prior consent with an option to opt out of such communications.

​

How do we collect your data?

When you interact with us by providing your personal data via email, letter, telephone, filling in the form maintained on our website, applying for a job or when signing up to receive newsletters.

 

Consent of the data subject

By filling out the form on our website, before submitting the data, we ask for your consent and inform you for what purposes your data will be processed. Consent is free, however, without the consent of the data subject, the data form will not be sent to ITGCON Systems Integration and Consulting. In this way, in accordance with the General Data Protection Law, your data will only be collected and processed with prior and express consent.

ITGCON Systems Integration and Consulting will only process personal data for the specific purpose expressed through the consent of the data subject, within the commitment of transparency and good faith that ITGCON Systems Integration and Consulting maintains in the treatment of personal data.

Upon supply, you will have access to this Privacy Policy and the Processing of Personal Data before giving your consent, where you will have access to your rights, and how to exercise them, as the data subject.

At any time and at no cost, you can revoke your consent to the processing of personal data, because in our interactions via email, the holder can always, by means of a simple click, revoke the sentiment given previously, or he can do so. sending an email to our DPO – Data Protection Officer, except for cases provided for by law or a contract signed with ITGCON Systems Integration and Consulting where the consent of the data subject is not required.

 

What are your rights?

We guarantee those who entrust us with consent for the processing of personal data, as Data Controller:

• a confirmation of the existence of treatment;

• access to data;

• a correction of incomplete, inaccurate or out-of-date data;

• the anonymization, blocking or deletion of data in disagreement, limits or treated with the provisions of the LGPD;

• the portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;

• deletion of personal data processed with the consent of the data subject;

• information from the public and private entities with which the pilot made use of data;

• Information about the possibility of not providing consent and about the consequences of denial; and

• revocation of consent given.

 

How can you exercise your proprietary rights?

To request rights related to your personal data, click and fill in the form or contact the DPO – Data Protection Officer, Mr. Nelson Nunes, by e-mail dpo@itgcon.com.br, or by telephone: 4210-1808 extension 1293.

In order to guarantee the security and correct identification of the applicant, we will take confirmatory measures before providing any type of personal data.

 

How and for how long will your data be stored?

The personal data we collect will be used and stored for the time necessary to carry out the purposes described in this policy or in the collection form completed by the data subject, contemplating the rights of data subjects and controllers.

If the data collection resulted in a commercial agreement, the terms of this agreement will determine how long your personal data will be stored. In the silence of this, your personal data will be deleted from our databases or will be anonymized, except to know to:

• compliance with a legal or regulatory obligation by the controller;

• study by a research body, guaranteeing, whenever possible, the anonymization of personal data;

• transfer to a third party, provided that the data processing requirements set out in the LGPD are complied with; or

• exclusive use of the controller, its access by a third party being prohibited, and provided that the data is anonymized.

The storage of personal data collected by us is carried out with security and privacy, through measures and technical protection solutions to guarantee the confidentiality, integrity and inviolability of your personal data, as we adopt measures to mitigate risks and with access control to the data stored by us.

 

What do we do to keep your data safe?

We adopt strict criteria to keep your personal data safe, through physical and electronic controls, which we list below:

• Only persons authorized by us have access to your personal data;

• Data stored in physical, paper or other media, will be in our files, whose access is only authorized for the purposes provided for in the legislation or in the consent form of the data subject;

• Data stored in digital media will be protected by access passwords, only released individually and in a personalized way, and after the user's commitment to confidentiality.

Although we have a firm commitment to the protection of personal data, with the adoption of the best practices at our disposal, it is important to note that no physical or virtual environment can be considered entirely safe and risk-free.

In this sense, despite all our efforts and commitment to the security and protection of personal data, we are subject to cyber attacks by hackers, or as a result of the negligence or recklessness of the user himself. In these situations, we will communicate, as soon as we become aware of what happened, to those affected and to the National Data Protection Authority in accordance with the provisions of the General Data Protection Law.

 

Who can your data be shared with?

The data collected by us are not shared with third parties, except in the case of the data subject who has become a client of ITGCON  Systems Integration and Consulting, whose personal data (full name, e-mail and contact telephone number) will only be shared with our partners after express authorization from the data subject or by legal determination or court order, with competent judicial, administrative or governmental authorities.

 

International data transfer

When your personal data is transferred by us or shared with third parties located, or who have facilities located in foreign countries, your personal data will be subject to the General Data Protection Law and other Brazilian data protection legislation. Therefore, we are committed to adopting cybersecurity and data protection standards, in our best efforts to guarantee and comply with legislative requirements.

By agreeing to this Privacy and Personal Data Protection Policy, you agree to this sharing, which will take place according to the purposes described in this term.

 

Cookies or browsing data

When we make use of Cookies, which are text files sent by the platform to your computer and stored on it, which contain information related to website navigation, we aim to improve the user experience. Therefore, when you consent to the use of Cookies, you declare that you know and accept the use of a navigation data collection system with the use of Cookies on your device.

Whenever you browse our website, at any time, and at no cost, you can change permissions, block or refuse Cookies. In this case, after revoking the consent of certain Cookies, it may prevent the correct functioning of some features that we maintain on our website.

Cookies can be managed through your browser, in settings, privacy and security area. You can find more information about cookies in our Cookies List.

 

Amendment of this Privacy Policy

Our Privacy and Personal Data Protection Policy may be regularly updated and adapted to legal requirements or to improve the process. Whenever we carry out a review or update, you will be able to easily identify it, as in the preamble of the term we highlight the version and date of the last update, so we recommend that you review it frequently.

Changes to our privacy policy or protection of personal data will take effect from the date of publication on our website. In this way, by using our services and/or providing your personal data after such modifications, you consent to them.

 

Responsibility

ITGCON Integration and Consulting in Systems provides for the liability of agents who work in the data processing processes, in accordance with articles 42 to 45 of Law 13.709/2018 General Data Protection Law.

We are committed to the holders, for the personal data entrusted to us, the zeal to make our Privacy Policy and Personal Data Protection a habit, so that we can comply with it in all its terms.

 

Disclaimer

Even with all our commitment and effort to protect the personal data entrusted to us and with the implementation of high security standards, in order to avoid incidents, as we have already described, we understand that we are not entirely risk free. Therefore, we are not responsible for:

consequences arising from the negligence, recklessness or malpractice of users in relation to their individual data; malicious actions by third parties, hacker attacks, unless proven culpable or deliberate conduct that can be attributed to ITGCON Systems Integration and Consulting;

untruthfulness of the data entered in our personal data collection forms. In this sense, we are not responsible for false information or data or entered in bad faith, which are the sole responsibility of the person who made the insertion.

 

DPO – Data Protection Officer – Data Protection Officer

Below we provide the name and contact details of our Data Protection Officer, so that you can exercise your rights as a holder or to resolve doubts about our Privacy and Data Protection Policy.

Nelson Nunes, e-mail: dpo@itgcon.com.br, telephone 4210-1808 extension 1293.

 

Legislation and forum

This Policy will be defined, interpreted by the competent Republic and in accordance with the Federative Law of Brazil, especially Law No. 13.7. document.

​