PRIVACY POLICY AND DATA PROTECTION

INTRODUCTION OF THIS POLICY

Please read this Privacy and Data Protection Policy (“Policy”) carefully to understand our practices for handling your Personal Data.

At Aliança, privacy and security are priorities and we are committed to transparency in the processing of our users/clients' personal data. Therefore, this Privacy Policy establishes how the collection, use and transfer of information from customers or other people who access or use our website is done. It also tells you how you can access and update your Personal Data, and exercise your rights relating to it.

By using our services, you understand that we will collect and use your personal information in the ways described in this Policy, under Data Protection rules (LGPD, Federal Law 13,709/2018), consumerist provisions (Federal Law 8,078/1990) and other rules of the applicable Brazilian legal system.

If you do not provide us with the necessary Personal Data (which we will indicate where applicable, for example on our forms), we may not be able to provide you with our products and/or services.

This Policy may be changed from time to time, as informed at the end of the document.

Thus, the user undertakes to read and only proceed if he agrees with the conditions established herein.

In this way, Associação Aliança de Misericórdia, hereinafter referred to simply as “Aliança”, registered with CNPJ/MF under nº 04.186.468/0001-73, in the role of Data Controller, is bound by the provisions of this Privacy Policy .

1. WHAT DO YOU NEED TO KNOW BEFORE READING THIS NOTICE?
   
   

This Privacy Notice corroborates our commitment to ethics and responsibility in the processing of personal data and applies to contributors, volunteers, benefactors, beneficiaries of our social and educational services, partners and other people who interact with us through our communication channels. .

Personal data is all information that allows your identification. For example, your name, CPF, email, phone, among others.

Sensitive Personal Data are personal data related to racial or ethnic origin, religious conviction, political opinion, union affiliation or organization of a religious, philosophical or political nature, data referring to health or sex life, genetic or biometric data, when linked to you.

Personal Data Processing means any operation, such as collecting, producing, receiving, classifying, using, accessing, reproducing, transmitting, distributing, processing, archiving, storing, eliminating, evaluating or controlling information, modifying, communicating, transferring, disseminating or extracting, carried out with personal data.

      2. HOW DO WE COLLECT YOUR DATA?

In order to establish and maintain our relationship of trust, it is important that you are aware of how we treat your Personal Data, and, mainly, how and where we collect your Data.

In order for us to provide our services, it is essential to collect some personal information. Aliança collects this data according to the relationship you establish with us. Below is a list of some examples of ways we collect this information:

• People assisted by our services and social and educational programs: Registration for service and on the waiting list for social and educational services and programs; social sheet; Enrollment/insertion to participate in services, social and educational programs or campaigns;
• Contributors/benefactors: with the data subject himself, with his consent, made at the time of donation, registering on our website or social networks, and by the telemarketing service;
• Candidates for volunteer activities: “Be a volunteer” form on this website and by the term of adhesion to volunteer work;
• Candidates for job openings: through the “Work with us” section on this website and on social networks;
• Through our website and social networks;
• Suppliers and partners: through contracts and terms of partnership.
  
  

3. WHAT PERSONAL DATA DO WE COLLECT?

 

Depending on how you interact with the Alliance (online, offline, by phone, etc.), that is, the personal data we collect varies depending on the relationship you establish with us:

• People assisted by our services and social and educational programs: name, date of birth, gender identity, identification documents, place of birth, telephone, e-mail, address, education, racial origin, family composition, socioeconomic data and experience of violations of rights and social risks. In addition, we collect other specific data related to the following:

• Served (children and teenagers): physical and mental health information, medical follow-ups performed;
• Attended (adolescents and young apprentices): physical and mental health information, CTPS, reservist number (when applicable), company where you work;
• Served (adults): professional occupation, length of pregnancy (when applicable);
• Attended (elderly people sheltered in our Projects): health information, medical follow-ups, bank details, type and quality of family and affective relationships and life history;
• Parents/guardians: professional occupation, family income, education, type and quality of family and affective relationships and life history;
• Family members of the same nucleus: professional occupation, family income, type and quality of family and affective relationships and life history;

• Contributors: name, gender, date of birth, identification documents, telephone, e-mail, address, spouse data (when applicable) and bank details or credit card or identification data at the partner company for processing the donation;
• Candidates for volunteer activity: name, gender, date of birth, identification documents, telephone, e-mail, address, level of education and academic background;
• Our site (“Contact Us” and “MAKE YOUR DONATION” forms): name, CPF, telephone, e-mail, city;
• Candidates for the job vacancy: name, surname, e-mail, data in the curriculum (attached);
• Service providers: corporate name and CNPJ, telephone, e-mail, address and bank details.
• Browsing data on our websites and apps: device IP address and other information such as device ID, model, browser, operating system; type of internet connection; approximate location (if you authorize); origin of access; and content accessed on our services.
• Financial and payment information: Information that Aliança processes to fulfill and bill an order, or that you use to make a purchase, such as your debit or credit card details (name of the cardholder, card number and expiration date) or other forms of payment (if available). In any case, Aliança, or our payment processing service providers handle financial and payment information in compliance with applicable laws, regulations and security standards. Payment card details such as the security code are not recorded.

 

4. HOW DO WE USE YOUR PERSONAL DATA?

 

It is important for you to know that we use the personal data we collect with great responsibility and security to serve different purposes, fulfilling contractual and legal obligations.

• Consumer service: We use your Personal Data to provide you with customer services, including responding to your inquiries, complaints and requests. This usually requires the use of your contact and registration Personal Data, as well as information about the product purchased and the reason for your inquiry (for example, order status, technical problem, product question or complaint, general inquiry and etc.).
  
  
• Order handling: Associação Aliança de Misericórdia uses your Personal Data to process, bill and ship your orders, inform you about the status of your orders, correct addresses, conduct identity verification and other activities to check for fraud.
• Contacts by email, WhatsApp, social networks, telephone, SMS, and/or other means;
• Execution of contracts with suppliers;
• Compliance with legal obligations.
  
  

• For clients and/or legal guardians: To monitor activities with people and families in the different social/educational programs we offer and to transfer benefits in campaigns; To schedule appointments for people in our social and educational services and programs; for granting basic baskets, materials for personal use (hygiene and cleaning); referral to other healthcare services, education, among others; preparation of reports on assistance for submission to social protection bodies (CMDCA/CRAS, etc.) and for the preparation of accountability documents before bodies, Ministries and partners, when necessary.
  
  
• In the case of children and/or adolescents assisted, they are collected from parents/guardians at the time of assistance.

In our Social Projects, assistance is provided by a social worker or psychologist, in a room that guarantees the secrecy of the information provided. It is important to note that the care forms with sensitive data on children and adolescents are the responsibility of the professional who provided the service, subject to the code of conduct and ethics that ensures confidentiality of information.

• Contributors/Benefactors/Donors: fundraising campaigns; Processing of donations with payment partner companies, such as banks, credit card companies, among others; accountability;
• Candidates for volunteer services: Application form for volunteer service
• Candidates for the job vacancy: for the control of records, registration and screening in the selection process and possible hiring;
• Navigation data: improve the operation of our website, provide greater comfort when browsing our pages, optimize and personalize our content and detect and eliminate errors.
  
  

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
   
   

Your personal data may be shared with third-party partners for the fulfillment of certain purposes, always in accordance with what authorizes the applicable legislation.

• Partners for providing services that may be made available to you;
• Public Bodies, Public Authorities or to whom we have a duty to communicate the data to compress legal and administrative obligations;
• By court order, always observing the confidentiality of information, as determined by the legislation in the case.
• Those assisted have their data shared with other assistance services for assistance, and benefactors with financial institutions for processing donations and partners for sending correspondence.
  
  

6. COOKIES AND SIMILAR TECHNOLOGIES

 

cookie is a small text file added to your device by your internet browser when you visit a website.

Cookies are used in order to improve the use of the website, for its correct functioning, to help adapt the website to your personal needs, customizing the content according to your preferences.

Our website does not use cookies that store user data and personal information.

The cookies used are only used to anonymously and statistically identify users visiting the virtual environment, enabling the organization to understand how it performs usability, and allowing the possibility of implementing improvements in its structure and functionality.

7. HOW DO WE KEEP YOUR PERSONAL DATA SECURE?
   
   

To keep your personal information safe, we use physical, electronic and managerial tools aimed at protecting your privacy.

We apply these tools taking into account the nature of the personal data collected, the context and purpose of the treatment and the risks that possible violations would generate for the rights and freedoms of the holder of the data collected and processed.

Among the measures we adopt, we highlight the following:

• Only authorized persons have access to your personal data, that is, both our employees and partner entities are committed to using the data only for the fulfillment of some purpose, being responsible under the terms of the applicable legislation;
• Access to your personal data is only done after the commitment of confidentiality;
• Your personal data is stored in a safe and suitable environment;
  
  

The Alliance is committed to adopting the best postures to avoid security incidents. However, it is necessary to point out that no virtual page is entirely safe and risk-free. It is possible that, despite all our security protocols, problems that are solely the fault of third parties may occur, such as cyber attacks by hackers, or also as a result of negligence or imprudence by the user/customer.

In case of security incidents that could generate risk or relevant damage for you or any of our users/customers, we will inform those affected and the National Data Protection Authority about what happened, in line with the provisions of the General Data Protection Law. Data.

8. WHERE DO WE STORE YOUR PERSONAL DATA? FOR HOW LONG?
   
   

Users' data and information will be treated with the utmost care and zeal, stored in a secure, encrypted environment, observing the best available technique, and only those employees authorized by Aliança will be accessible. We follow all reasonable protocols to protect your personal data.

Your personal data collected by Aliança will be used and stored for the time necessary to provide the service or to achieve the purposes listed in this Privacy Policy, considering the rights of data subjects and controllers.

In general, your data will be kept as long as the contractual relationship between you and Aliança lasts. At the end of the period of storage of personal data, these will be deleted from our databases or anonymized, except for the hypotheses legally provided for in article 16 general data protection law, namely:

Art. 16. Personal data will be deleted after the end of its treatment, within the scope and within the technical limits of activities, with authorized conservation for the following purposes:

I – Compliance with a legal or regulatory obligation by the controlling shareholder;

II – Study by research body, ensuring, whenever possible, the anonymization of personal data;

III – transfer to a third party, provided that the data processing requirements set forth in this Law are respected; or

IV – Exclusive use by the controller, access by a third party is prohibited, provided that the data is anonymised.

 

That is, personal information about you that is essential for the fulfillment of legal, judicial and administrative determinations and/or for the exercise of the right of defense in judicial and administrative proceedings will be maintained, despite the exclusion of other data.

The storage of data collected by Aliança reflects our commitment to the security and privacy of your data. We employ technical protection measures and solutions able to guarantee the confidentiality, integrity and inviolability of your data. In addition, we also have security measures appropriate to the risks and control access to stored information.

9. PRIVACY NOTICE CHANGES
   
   

The current version of the Privacy Policy was formulated and last updated on: April 6, 2021.

We reserve the right to modify this Privacy Policy at any time, mainly in terms of adaptation to any changes made to our website or in the legislative field. We recommend that you review it frequently.

Any changes will come into effect as of their publication on our website and we will always notify you of any changes that have occurred.

By using our services and providing your personal data after such changes, you consent to them.

Therefore, we recommend that you consult this document periodically and check the date of its last update.

10. QUESTIONS AND INFORMATION
    
    

Aliança provides means for you to contact us to exercise your rights, asking questions or comments about this Policy and our privacy practices, or to make a complaint.

Get in touch with us by email at dpo@aliancasocial.org or at the address of our Headquarters: Rua Avanhandava, n. 616, Bela Vista, São Paulo/SP, CEP: 06213-000, in the Compliance Sector (in person or mentioning it in correspondence), attaching proof of your identity or presenting it in a personal way (such as RG, CNH or similar).

We will receive and investigate any complaints about the way we manage Personal Data (including complaints about your rights being violated under applicable privacy laws and regulations).