1. Purpose
We at M&C LTDA. value you and your personal data and, more than that, we recognize the importance of your privacy. To that end, we have taken a number of measures in accordance with the Brazilian General Data Protection Law (LGPD) and, in this document, we show how we process and protect your data. The purpose of this document is to inform anyone who uses our website or any of our products, services or any other resource, technology or feature that we offer how their data is processed.
2. Who we are
We are established in the City of Campinas, State of São Paulo, at Rua Dr. Antônio Álvares Lobo, no. 660, Room 64, Postal Code 13020-110, and we are a company registered under CNPJ number 68.716.930/0001-80, acting as controller when processing your personal data. Our Support team is responsible for receiving requests from data subjects (you), providing clarifications and taking action regarding data protection, and can be contacted at email@marciorosa.com.
3. Definitions
The following definitions of the terms used in this document are taken from article 5 of the Brazilian General Data Protection Law (LGPD) or from its interpretation:
- Personal data: information related to an identified or identifiable natural person.
- Sensitive personal data: personal data on racial or ethnic origin, religious belief, political opinion, membership of a trade union or of a religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data, when linked to a natural person.
- Anonymized data: data relating to a data subject who cannot be identified, considering the use of reasonable technical means available at the time of its processing.
- Data subject: the natural person to whom the personal data being processed refers.
- Processing agents: the controller and the processor.
- Controller: a natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of personal data.
- Processor: a natural or legal person, governed by public or private law, who processes personal data on behalf of the controller.
- Data Protection Officer (DPO): a person appointed by the controller and processor to act as a communication channel between the controller, the data subjects and the National Data Protection Authority (ANPD).
- Processing: any operation carried out with personal data, such as those relating to the collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of the information, modification, communication, transfer, dissemination or extraction.
- Legal bases: the justifications provided for in the LGPD for the processing of personal data according to each processing activity.
- International data transfer: transfer of personal data to a foreign country or to an international organization of which the country is a member.
- Shared use of data: communication, dissemination, international transfer, interconnection of personal data or shared processing of personal databases by public bodies and entities in the fulfillment of their legal duties, or between these and private entities, reciprocally, with specific authorization, for one or more types of processing permitted by these public entities, or between private entities.
- Consent: a free, informed and unequivocal expression by which the data subject agrees to the processing of their personal data for a specific purpose.
- National authority (ANPD): the public administration body responsible for overseeing, implementing and enforcing compliance with this Law throughout the national territory.
4. What data do we collect and why?
We process your personal data in accordance with the legal bases provided for in the LGPD and keep your data for the period necessary for us to achieve the purpose(s) specified in this Notice. Below are the personal data and their purposes: Personal data Purpose E.g.: IP address Record access to the platform Full name, CPF (taxpayer ID), credit card number Complete the purchase Full name, CPF and e-mail address Issue the invoice Cookies According to each type described in the Cookie Notice Please note that if you have consented to receive our marketing communications, you may withdraw this consent at any time and you will stop receiving them. To do so, simply send an e-mail to the address given in item 2, stating that you no longer wish to receive communications, or simply click “unsubscribe” at the end of the e-mail.
5. How do we collect your personal data?
Your personal data is provided directly by you or indirectly through the use of partners' systems, platforms or applications.
6. How long will your personal data be stored?
Your personal data will only be kept by us if we have a valid legal basis that justifies storing it. Data used for marketing will be kept until you ask us (“unsubscribe”) to stop sending you our communications, as stated above.
7. Cookies
To learn what cookies are, which ones we use and how they are used, see our Cookie Notice.
8. What are your rights and how can they be exercised?
You have the right to obtain, in relation to the data we process about you, at any time and upon request:
- Confirmation that processing exists;
- Access to the data;
- Correction of incomplete, inaccurate or out-of-date data;
- Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of Law No. 13,709/2018 (LGPD);
- Portability of the data to another service or product provider, upon express request, in accordance with the regulations of the national authority, subject to commercial and industrial secrets;
- Deletion of personal data processed with the consent of the data subject, except in the cases provided for in art. 16 of the LGPD;
- Information about the public and private entities with which the controller has shared data;
- Information about the possibility of not giving consent and about the consequences of refusing;
- Withdrawal of consent, under § 5 of art. 8 of the LGPD;
- The right to petition the national authority against the controller in relation to your data.
To exercise your rights, you must send an e-mail to our Support team through the channel given in item 2, stating first which right you wish to exercise and in relation to which data. The data required may vary according to the right being exercised and the processing activity, so we may ask for other data so that we can respond to you and, where applicable, fulfill your request. We always strive to respond as quickly as possible, within 15 days, following the parameter established by the LGPD in its art. 19, II. However, your request may not always be fulfilled, as it may not be applicable under the law. If that is the case, it will be duly justified on the basis of the legislation.
9. With whom do we share your personal data?
We only share your personal data for the purposes specified in this Notice or when there is a legal requirement. Your data will be shared with the systems, platforms and/or applications necessary to carry out our activities and in accordance with the purpose provided for each processing of personal data. If you authorize the inclusion of your telephone number in a group on the WhatsApp application, it is expressly stated and clarified that an intrinsic characteristic of that application (“WhatsApp”) is that, once a telephone number is added to a message group, the telephone number and the personal identification (name and photo) used by the user in that same application become accessible to the other users who are also members of the same group, community or similar. This consent may be withdrawn at any time through the contact channel available in this notice, and the withdrawal will result in the removal of the data subject from that application group.
9.1. Embedded media from other websites Items on this website may include embedded content such as, for example, videos, images, articles, etc. Embedded content from other websites behaves in exactly the same way as if you were visiting the other website. These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with this embedded content, if you have an account on that website and are logged in to it.
10. International transfers
We use some products or services (or parts of them) that are hosted outside Brazil, which means that we may transfer any information you send us abroad. This happens because personal data needs to be stored in the cloud, where the servers may be located in other countries.
11. What are the consequences of not providing your data?
You are not obliged to provide your personal data to us. However, since this data is necessary for the performance of the contract you have with us, for our communication or for any other specific purpose stated, we will not be able to carry out these operations without your data. The same applies to the exercise of your rights under the LGPD. In other words, if you do not provide the personal data necessary to confirm your identity, we will not be able to respond to your request.
12. Right to lodge a complaint with the National Authority
We will only process your personal data in accordance with this Privacy Notice and with the LGPD. If, however, you wish to lodge a complaint about our processing activities in relation to your personal data, you have the right to petition (see the section What are your rights?) the National Authority.
13. Changes to this Privacy Notice
This Notice may be revised at any time in order to keep it up to date with applicable legislation and with the company's own organization. We therefore recommend that you consult this document periodically and check the date of the last update.