Privacy and Data Protection Policy of SDPM MINING CONSULTING
Creation Date: [13/04/2020]
Update Date: [15/06/2023]
1. Introduction
SDPM MINING CONSULTING, a company with CNPJ 70.960.083/0001-46, is committed to respecting and protecting the privacy of personal data collected from its clients, employees, and other stakeholders. This Privacy and Data Protection Policy (“Policy”) establishes the guidelines and practices adopted by the company in accordance with the General Data Protection Law (LGPD) to ensure the privacy and security of personal information.
2. Principles
SDPM MINING CONSULTING adheres to the following principles regarding the processing of personal data:
2.1. Legality: The processing of personal data will be conducted in compliance with applicable laws, including LGPD and other relevant regulations.
2.2. Purpose: Personal data will be collected for specific purposes, which will be informed to data subjects at the time of collection, and will not be used for incompatible purposes.
2.3. Necessity: Only necessary personal data will be collected to fulfill the established purposes, avoiding excessive or unnecessary collection of information.
2.4. Data Quality: SDPM MINING CONSULTING will take reasonable measures to ensure the accuracy, relevance, and currency of the collected personal data.
2.5. Transparency: Measures will be implemented to provide data subjects with clear, accurate, and easily understandable information about the processing of their personal data, including the purpose, legal basis, rights of data subjects, and procedures to exercise those rights.
2.6. Security: Appropriate technical and organizational measures will be implemented to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure.
2.7. Access and Retention: Data subjects have the right to access their personal information, request its deletion or correction, subject to legal exceptions and the minimum retention period required.
2.8. Accountability: SDPM MINING CONSULTING assumes responsibility for compliance with this Policy and the protection of personal data under its responsibility.
3. Data Collection and Processing
SDPM MINING CONSULTING collects and processes personal data in accordance with the purposes previously informed to data subjects, such as:
– Customer, employee, and supplier registration;
– Project and contract management;
– Payment processing and billing;
– Marketing communications and relevant information dissemination;
– Customer support and requests handling.
The collection of personal data occurs lawfully, with the consent of the data subject or when there is a legal basis for processing, such as the fulfillment of contractual or legal obligations.
4. Data Sharing
SDPM MINING CONSULTING may share personal data with third parties only when necessary to fulfill the purposes informed to data subjects. These third parties are subject to contractual obligations and appropriate security measures to ensure the protection of personal data.
5. Data Subjects’ Rights
SDPM MINING CONSULTING acknowledges and respects the rights of data subjects under the LGPD. Accordingly, data subjects have the right to:
– Access their personal data and obtain information about the processing carried out by the company;
– Correct incorrect or outdated personal data;
– Delete personal data, except in cases where the maintenance of such data is necessary to fulfill legal or contractual obligations;
– Withdraw consent previously given for the processing of personal data;
– Obtain information about the sharing of data with third parties;
– Request data portability, where applicable;
– Object to automated decisions that affect their interests.
6. Information Security
SDPM MINING CONSULTING implements technical and organizational security measures to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
– Data encryption;
– Physical and logical access controls;
– Monitoring and logging of activities;
–
Employee training and awareness;
– Internal policies and procedures.
7. Processing of Sensitive Data
SDPM MINING CONSULTING may process sensitive data only when explicit consent is given by the data subject or when permitted by law, for specific and justified purposes.
8. Final Provisions
This Privacy and Data Protection Policy is governed by Brazilian laws and may be periodically updated as necessary. Data subjects are encouraged to regularly review this Policy to stay informed about SDPM MINING CONSULTING’s practices regarding the protection of personal data.
For any questions or requests related to this Policy, data subjects can contact SDPM MINING CONSULTING through the provided channels of communication.
SDPM MINING CONSULTING
Rua Modesto Carvalho de Araújo, 262, Bairro Belvedere Belo Horizonte, MG, Brasil CEP 30320-410
Tel. Empresarial: (31) 3017-8366
contato@sdpm.com.br
Update Date: [15/06/2023]
