1. Purpose
We, at M&C SOFTWARE LTDA., value you and your personal data, and more than that, we recognize the importance of your privacy. In this sense, we have taken measures following the General Data Protection Law (LGPD) and, in this document, we demonstrate how we treat and protect your data. This document aims to inform those who use our website or any of our products, services, or any other resource, technology, or functionality we offer about how their data is processed.
2. Who we are
We are established at Av. Antônio Artioli, 570 - Swiss Park. Swiss Park Office, Flims Building, block B1, 1st floor, suite 119, Campinas - SP, and we are a company registered under CNPJ number: 449.310.009/0001-98, acting as a controller when processing your personal data. Our Support is responsible for receiving requests from data subjects (you), providing clarifications, and taking measures regarding data protection, and can be contacted at email@marciorosa.com
3. Definitions
The following definitions of terms used in this document are extracted from Article 5 of the General Data Protection Law (LGPD) or based on its interpretation:
- Personal data: information related to an identified or identifiable natural person.
- Sensitive personal data: personal data concerning racial or ethnic origin, religious conviction, political opinion, union membership or membership in a religious, philosophical, or political organization, data referring to health or sexual life, genetic or biometric data, when linked to a natural person.
- Anonymized data: data relating to a subject who cannot be identified, considering the use of reasonable technical means available at the time of its processing.
- Subject: natural person to whom the personal data being processed refers.
- Processing agents: the controller and the processor.
- Controller: natural or legal person, of public or private law, who is responsible for decisions regarding the processing of personal data.
- Processor: natural or legal person, of public or private law, who carries out the processing of personal data on behalf of the controller.
- Data Protection Officer (DPO): person appointed by the controller and processor to act as a communication channel between the controller, the data subjects, and the National Data Protection Authority (ANPD).
- Processing: any operation performed with personal data, such as those referring to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.
- Legal bases: justifications provided in the LGPD for the processing of personal data according to each processing activity.
- International data transfer: transfer of personal data to a foreign country or international body of which the country is a member.
- Shared use of data: communication, dissemination, international transfer, interconnection of personal data, or shared treatment of personal databases by public bodies and entities in the fulfillment of their legal competencies, or between these and private entities, reciprocally, with specific authorization, for one or more types of processing permitted by these public entities, or between private entities.
- Consent: free, informed, and unambiguous manifestation by which the subject agrees to the processing of their personal data for a determined purpose.
- National Authority (ANPD): public administration body responsible for ensuring, implementing, and supervising compliance with this Law throughout the national territory.
4. What data do we collect and why?
We process your personal data in accordance with the legal bases provided in the LGPD and keep your data for the period necessary for us to achieve the purpose(s) specified in this Notice. Below are the personal data and their purposes: Personal data | Purpose (Ex: IP Address | Record access to the platform; Full name, CPF, credit card number | Finalize the purchase; Full name, CPF and email address | Invoice issuance; Cookies | According to each type described in the Cookie Notice). We emphasize that if you consented to receive our marketing communications, you may revoke this consent at any time and will stop receiving them. To do so, simply send an email to the address provided in item 2, indicating your desire to no longer receive communications, or simply click "unsubscribe" at the end of the email.
5. How do we collect your personal data?
Your personal data is provided directly by you or indirectly through the use of partner systems, platforms, or applications.
6. How long will your personal data be stored?
Your personal data will only be kept by us if we have a valid legal basis that justifies its storage. Data used for marketing will be kept until you request us ("unsubscription") to no longer receive our communications, as informed above.
7. Cookies
To learn about what cookies are and how they are used, check our Cookie Notice.
8. What are your rights and how can they be exercised?
You have the right to obtain, in relation to the data we process about you, at any time and upon request:
- Confirmation of the existence of processing;
- Access to data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary, excessive, or data processed in non-compliance with the provisions of Law No. 13.709/2018 (LGPD);
- Portability of data to another service or product provider, upon express request, in accordance with the regulation of the national authority, observing commercial and industrial secrets;
- Deletion of personal data processed with the subject's consent, except in the hypotheses provided for in Art. 16 of the LGPD;
- Information on public and private entities with which the controller has shared data use;
- Information on the possibility of not providing consent and on the consequences of refusal;
- Revocation of consent, under the terms of § 5 of Art. 8 of the LGPD;
- Right to petition in relation to your data against the controller before the national authority.
To exercise your rights, you must send an email to our Support at the channel informed in item 2, initially containing the information of which right you want to exercise and regarding which data. Data may vary according to the right to be exercised and the processing activity, so we may request other data so that we can respond and, if applicable, fulfill your request. We always strive to respond as quickly as possible within 15 days, following the parameter established by the LGPD in its Art. 19, II. However, your request may not always be met if it is not applicable according to legal provisions. If this is the case, it will be duly justified based on the legislation.
9. Who do we share your personal data with?
We only share your personal data for the purposes specified in this Notice or when there is a legal requirement. Your data will be shared with systems, platforms, and/or applications necessary for the execution of our activities and in accordance with the purpose intended for each processing of personal data. In the case of authorization to include your phone number in a group in the WhatsApp application, it is expressly stated and clarified that the referred application ("WhatsApp") has as an intrinsic characteristic that, upon including a phone number in a message group, the phone number and personal identification (name and photo) used by the user in that same application become accessible and available to other users who are also members of the same group, community, or similar. This consent may be revoked at any time through the contact method available in this notice, it being certain that revocation will result in the exclusion of the subject from the referred application group.
9.1. Embedded media from other sites. Items on this site may include embedded content such as videos, images, articles, etc. Embedded content from other sites behaves exactly the same way as if you were visiting the other site. These sites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with this embedded content if you have an account on that site and are logged into it.
10. International transfers
We use some products or services (or parts of them) that are hosted outside Brazil, which means we may transfer any information sent to us by you abroad. This happens due to the need for cloud storage of personal data, where servers may be in other countries.
11. What are the consequences of not providing your data?
You are not required to provide your personal data to us. However, as these data are necessary for the contract you have with us to be executed, for our communication, or any other specific purpose informed, we will not be able to perform these operations without your data. The same applies regarding the exercise of your rights provided for in the LGPD. That is, if you do not provide the personal data necessary to confirm your identity, we will not be able to respond to your request.
12. Right to file a complaint with the National Authority
We will only process your personal data in compliance with this Privacy Notice and in accordance with the LGPD. If, however, you wish to file a complaint about our processing activities regarding your personal data, you have the right to petition (see section "What are your rights?") before the National Authority.
13. Changes to this Privacy Notice
This Notice may be revised at any time with the aim of keeping it current with applicable legislation and the company's own organization. Therefore, we recommend that you consult this document periodically and check the date of the last update.