PRIVACY POLICY FOR THE “SIGRA” APP

Updated on: 04/03/2023

The Ambiensys Group values your privacy and security of your data and is aware of its legal requirements. Therefore, this Privacy Policy informs you how “SIGRA” Application (“App”) process your personal data, what your rights are and how you can exercise them.

APP OWNER AND DATA PROCESSOR

AMBIENSYS GESTÃO AMBIENTAL LTDA., a private legal entity, registered under CNPJ no. 01.679.569/0001-98, with headquarters at Avenida Cândido de Abreu, 70, room 41, 4th floor, Centro Cívico, Curitiba, State of Paraná, Brazil, Zip Code 80530-000.

DATA PROTECTION OFFICER’S CONTACT INFO:

E-mail: dpo@ambiensys.com.br

DATA COLLECTION

The App collects personal data based on specific purposes and legal bases. See them below:

1) For registration and access to App’s features:

Data collected:

• Full name;
• Identity number.;
• Individual Taxpayer Registry (CPF);
• Address;
• Job title;
• E-mail address;
• Phone number.;
• User’s picture.

Legal Basis (Brazilian General Data Protection Law – Law No. 13,709/2018):

Contract execution (Art. 7º, VI)

2) Manifesto de Transporte de Resíduos’s (Waste Ground Transportation Manifest’s) emission within the App:

Data collected:

• Full name;
• Individual Taxpayer Registry (CPF);
• Address;
• E-mail address.

Legal Basis (Brazilian General Data Protection Law – Law No. 13,709/2018):

Legal obligation (Art. 7º, II)

DATA RETENTION AND ELIMINATION

The Ambiensys Group may keep personal data collected through the App for as long as the purposes presented in this Policy persist, if there are legal or contractual provisions that justify their retention or if you consent to it. In other cases, data that cannot be anonymized will be eliminated.

SECURITY OF DATA

The Ambiensys Group adopts reasonable measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction, using mechanisms such as encryption and access control.

DATA SHARING

As a data processor, the Ambiensys Group may share personal information with contractor companies, in order to enable continuity of its services, respecting, in all cases, the purposes already mentioned in this Policy.

In addition, App usage data may be shared with third parties to provide support in correcting bugs or malfunctions on the App, ensuring that these third parties also have an equal or greater degree of data protection for the shared information.

ADVERTISING

The App does not display personalized advertisements to users.

DATA SUBJECT’S RIGHTS

You may exercise your rights as a data subject at any time. Here are some of them:

• Confirm the existence of processing of personal data;
• Access the data we have about you;
• Request correction or updating of your data;
• Request anonymization, blocking or elimination of unnecessary data;
• Request portability of your data to another provider, observing commercial and industrial secrets;
• Revoke your consent, when data is processed based on this legal authorization, and request its deletion;
• Know the effects of not providing your consent for the collection of any data.

You can exercise most of these rights within the App itself. If this is not possible, you can contact our DPO at dpo@ambiensys.com.br.

POLICY UPDATES

This Policy may be periodically reviewed or updated to keep it compliant with applicable legislation, as well as with the best practices in privacy and data protection. The Ambiensys Group will inform you whenever this Policy undergoes changes.

Av. Cândido de Abreu, 70 - 4º Andar - Centro Cívico, Curitiba - PR, CEP 80.530-000. Tel. (41) 3083-8300 www.ambiensys.com.br