LGPD – General Data Protection Law

The General Law for the Protection of Personal Data (LGPD – Law No. 13,709/18), popularly known as “LGPD”, is the legal rule that aims to protect Personal Data related to the natural person (“Data Subject”), seeking to ensure transparency and security about the way their Personal Data is treated by third parties.

The LGPD must be complied with by any person, individual or legal entity, acting in the public or private sphere, who carries out Personal Data Processing activities (in physical or virtual media) in Brazilian territory, whether to offer goods or services or to carry out any Processing of Personal Data of Data Subjects located in Brazil.

Personal Data is information related to a natural person that allows to be directly identified or, if associated with other data, to make this identification possible, such as name, RG/CPF, address, e-mail, telephone, profession, IP address and geolocation.

To find out what all Personal Data collected by Aliança Energia is, access our Privacy Term.

According to the LGPD, Processing means any operation carried out with Personal Data, such as the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction of Personal Data.

Thus, we can say that simple access to the Personal Data of a Data Subject is enough for the Processing to be configured.

We, through the application of technologies and innovation, always seek to meet the privacy of the Data Subjects and maximum transparency in the data processing process. With the LGPD, we reinforce this commitment, committing ourselves during Personal Data Processing activities to comply with all the obligations defined in the LGPD.

We are constantly evolving towards the adequacy of all our processes, providing adequate security of Personal Data, giving you a transparent view of the Processing and ensuring the exercise of your rights as a Personal Data Subject.

Sensitive Personal Data are Personal Data that, due to their nature, require even greater caution in their treatment, since they may reveal data about creed, race, political opinion, health, among other information linked to a natural person, as provided for in article 5, II of the LGPD.

As a result of our social commitment, we may collect certain Sensitive Personal Data, always in accordance with the purposes established in our Privacy Term.

In observance of the principle of necessity, we undertake to collect only the data necessary to achieve the informed purpose

Anonymized data are those data where it is not possible to identify or make identifiable the natural person, as they lose the possibility of direct or indirect association with the Holder, that is, they are not characterized as Personal Data.

We may collect Personal Data when you voluntarily provide it, for example, those related to your registration information and in the course of projects and activities carried out by us, whether in physical or digital media.

When you visit Aliança Energia’s websites, your digital identification data is also processed, and it may be automatically collected, as a result of your browsing, if you accept our Cookie Term.

Personal Data may be stored on mobile media, electronic devices or in physical files owned by us.

In addition, Personal Data may also be stored on servers installed in Brazil or abroad through the use of cloud computing services.

In any scenario, we will undertake the necessary efforts to ensure the confidentiality and security of Personal Data.

The National Data Protection Authority – ANPD is a federal public administration body linked to the Presidency of the Republic, which, among other duties, is responsible for ensuring the protection of Personal Data, inspecting and applying administrative sanctions to those who disrespect the LGPD, receiving complaints from Data Subjects and stimulating knowledge about Personal Data protection.

Our Personal Data Officer is the focal point in communications between us, the ANPD and you. In addition to guiding our employees on Data Protection rules, it will ensure that the requests related to Personal Data that you make are met.

You can contact our Officer directly via email [email protected] .

You have the basic rights of Intimacy, Freedom and Privacy, in addition to the specific rights provided for in the LGPD, as listed below:

• Access: You have the right to know which of your Personal Data we process.
• Confirmation of the existence of Processing: you have the right to know if we carry out any Processing activity with your Personal Data.
• Correction: You have the right to request from us that we correct your Personal Data that is incorrect, inaccurate and/or outdated.
• Erasure: You have the right to request the deletion of your Personal Data.
• Sharing Information: You have the right to know with whom we share your Personal Data.
• Limitation: You have the right to request the anonymization or blocking of your unnecessary or excessive Personal Data.
• Objection to Processing: You have the right to object at any time to the Processing of your Personal Data.
• Portability: You have the right to request that your Personal Data under our processing be transferred to another company designated by you.
• Revocation and information about consequences: you have the right to revoke your consent for the purposes of processing Personal Data linked to it, as well as to be informed of any consequences in the provision of services arising from the request for revocation. You can exercise your rights by filling out a specific form.

In order to provide all clarifications and enable the exercise of your rights, as the case may be, remember to inform, clearly and objectively: (i) your identification as requested, (ii) what the request was, and (iii) the right you would like to exercise.

We remind you that limiting the processing of some of your Personal Data, through the exercise of rights such as requests for blocking, deletion or revocation of consent, may result in losses in the use of some features offered by us to you. However, don’t worry, we will let you know when this is the case, leaving the decision on whether to proceed with the request at your discretion.

The retention periods for Personal Data vary depending on the reasons for which we process your data.

We keep your Personal Data only for as long as necessary to fulfil the purposes of processing and our legal obligations.

Depending on the nature of the Personal Data, different storage periods may apply, established by regulatory authorities, a legal obligation arising from law or for the preservation of rights, in or out of court.

You can obtain more information about how we treat and protect your Personal Data through our Privacy Statement.

To support certain activities and always in order to ensure the best service to you, we may subcontract third-party service providers or establish actions in partnerships. These third parties are called sub-processors or partners. To ensure compliance in the protection of your Personal Data to which these sub-processors or partners may have access, we have contracts defining their obligations and liability in the event of any irregularities in the processing of your Personal Data.

We are always monitoring the compliance of these sub-processors or partners. Therefore, do not worry, as we will only allow the secure processing of your Personal Data, in addition to ensuring that we will only share the data strictly necessary for the achievement of a certain purpose and for the time necessary for this to occur.

We have internal terms on Information Security, Privacy and Data Protection, as well as conducting periodic training with our employees. In addition, our facilities have strict security and access controls, combined with secure processes throughout our operation.

Do you have any more questions? We can help. Send your question to our contact channels and we will be happy to answer it!

Aliança Energia thanks you for your attention!