Privacy Statement
Privacy and Data Processing Term of Aliança Geração de Energia S.A. Institutional Website
Updated on August 05, 2024.
1. INTRODUCTION
The purpose of this Term is to demonstrate the commitment of
ALIANÇA GERAÇÃO DE ENERGIA S.A. (“We”), headquartered at Rua Matias Cardoso, nº 169, 9th floor, Santo Agostinho, in the city of Belo Horizonte/MG, CEP: 30.170-050 CNPJ: 12.009.135/0001-05
with your privacy and the protection of your Data, clearly and in accordance with the laws in force.
This Term describes the main rules on the Processing of your Data, especially Personal Data, when: (i) You make use of our functionalities through our institutional website, available at the link www.aliancaenergia.com.br (“Website“); or (ii) You interact with us outside of our digital environments, and for all purposes of this Agreement, our physical and digital environments are collectively referred to as “Our Environments.”
In order to access and use the functionalities offered in Our Environments, You declare that you have read this Term completely and carefully, being fully aware of the provisions stipulated herein and thus conferring your free and express agreement with them, including the collection of the Data mentioned herein, as well as its use for the purposes specified below.
We are always seeking to offer you services and features as efficiently as possible, constantly updating ourselves to do so. For this reason, these Terms may be adjusted at any time, and it is up to You to check it whenever possible.
SPECIAL NOTE FOR LEGAL REPRESENTATIVES
We may collect and process Personal Data from children and adolescents under the age of 18 in our environments, including Sensitive Personal Data, and there may be a need for legal consent from parents or legal representatives for a certain purpose in a specific term.
2. ABOUT DATA WE COLLECT
2.1. How We Collect Data. Data, including Personal Data, may be collected when: (i) You submit it or interact with Our Environments and features; or (ii) You provide it to us in other ways, including sharing outside of the digital environment.
What do we collect? | What do we collect it for? |
Registration data | |
Full name | (i) Identify and authenticate You; (ii) To comply with the obligations arising from the use of our services and features, including to comply with legal and regulatory provisions; (iii) Provide support to the communities surrounding our facilities, in order to ensure our commitment to the safety and socioeconomic development of the regions near our projects; (iv) To expand our relationship, informing You about important notices, news, features, content, news and other events that we consider relevant to You; (v) To allow you to enroll in free training courses, offered by Us in partnership with educational institutions; (vi) To offer the opportunity to improve personal skills in social projects made possible by Us and any partners; (vii) Protect You with respect to the prevention of fraud and associated risks, as well as compliance with legal and regulatory obligations; (viii) Aliança Energia’s facilities are monitored by security cameras to keep the environment safe for our customers, visitors, employees and partners; (ix) To expand the relationship with the community and publicize actions carried out by the Alliance; (x) Allow the registration of the holder in the hazard hunting program, whose objective is to remedy the deviations reported by registered users; (xi) Allow Aliança Energia to contact the data subject to provide support; (xii) To allow Aliança Energia to carry out an assessment of the potential of the association registered in the form to carry out actions in the communities; (xiii) Publication of events and actions on our social networks. |
CPF | |
RG | |
Date of birth | |
Gender | |
Contact phones (home or mobile) | |
Image by CCTV | |
Image at events | |
Registration data in the Danger Hunting program | |
Registration data for sending mailing | |
Registration data in the contact us | |
Personal data in the form of associations for actions in the communities | |
Images of the holder | |
Home address | |
Professional data | |
Education | (i) To enable the evaluation of your professional profile for your enrollment in free training courses, offered by Us in partnership with educational institutions. |
Profession | |
Health data | |
Special Needs | (i) Identify whether or not You have special needs in order to tailor Your participation in the free training courses offered by Us in partnership with educational institutions; (ii) Map the residents and workers of the regions neighboring our facilities who have comorbidities, in order to execute our Emergency Response Plan and meet the applicable legal and/or regulatory obligations. |
Pre-existing diseases | |
Digital identification data | |
IP Address and Logical Port of Origin | (i) Identify and authenticate You; e (ii) Comply with legal record-keeping obligations established by the Brazilian Civil Rights Framework for the Internet – Law 12.965/2014.
|
Device (OS version) | |
Geolocation | |
Timestamps of every action You take | |
What screens have you accessed | |
Session ID | |
Cookies | |
| What do we collect? | What do we collect it for? |
| Registration data | |
| Full name | (i) Identify and authenticate You; (ii) To comply with the obligations arising from the use of our services and features, including to comply with legal and regulatory provisions; (iii) Provide support to the communities surrounding our facilities, in order to ensure our commitment to the safety and socioeconomic development of the regions near our projects; (iv) To expand our relationship, informing You about important notices, news, features, content, news and other events that we consider relevant to You; (v) To allow you to enroll in free training courses, offered by Us in partnership with educational institutions; (vi) To offer the opportunity to improve personal skills in social projects made possible by Us and any partners; (vii) Protect You with respect to the prevention of fraud and associated risks, as well as compliance with legal and regulatory obligations; (viii) Aliança Energia’s facilities are monitored by security cameras to keep the environment safe for our customers, visitors, employees and partners; (ix) To expand the relationship with the community and publicize actions carried out by the Alliance; (x) Allow the registration of the holder in the hazard hunting program, whose objective is to remedy the deviations reported by registered users; (xi) Allow Aliança Energia to contact the data subject to provide support; (xii) To allow Aliança Energia to carry out an assessment of the potential of the association registered in the form to carry out actions in the communities; (xiii) Publication of events and actions on our social networks. |
| CPF | |
| RG | |
| Date of birth | |
| Gender | |
| Contact phones (home or mobile) | |
| Image by CCTV | |
| Image at events | |
| Registration data in the Danger Hunting program | |
| Registration data for sending mailing | |
| Registration data in the contact us | |
| Personal data in the form of associations for actions in the communities | |
| Images of the holder | |
| Home address | |
| Professional data | |
| Education | (i) To enable the evaluation of your professional profile for your enrollment in free training courses, offered by Us in partnership with educational institutions. |
| Profession | |
| Health data | |
| Special Needs | (i) Identify whether or not You have special needs in order to tailor Your participation in the free training courses offered by Us in partnership with educational institutions; (ii) Map the residents and workers of the regions neighboring our facilities who have comorbidities, in order to execute our Emergency Response Plan and meet the applicable legal and/or regulatory obligations. |
| Pre-existing diseases | |
| Digital identification data | |
| IP Address and Logical Port of Origin | (i) Identify and authenticate You; e (ii) Comply with legal record-keeping obligations established by the Brazilian Civil Rights Framework for the Internet – Law 12.965/2014.
|
| Device (OS version) | |
| Geolocation | |
| Timestamps of every action You take | |
| What screens have you accessed | |
| Session ID | |
| Cookies | |
2.2. Required Data. The provision of our services and features depends directly on some Data provided in the table above. If You choose not to provide some of this Data, We may be unable to perform some of Our services and functionality in Our Environments.
2.3. Updating and Veracity of Data. You are solely responsible for the accuracy, truthfulness or lack thereof in relation to the Data You provide or for its outdatedness. Please be aware that it is your responsibility to ensure accuracy or keep them up to date.
2.3.1. Similarly, We are not obliged to process or process any of Your Data if there is reason to believe that such processing or processing may impute to Us any infringement of any applicable law, or if You are using Our Environments for any unlawful, unlawful or contrary to morality purposes.
2.4. Database. The database formed through the collection of Data is our property and is under our responsibility, and its use, access and sharing, when necessary, will be done within the limits and purposes of the business described in this Term.
2.5. Technologies used. We use the following technology(s):
2.5.1. Cookies: used to improve the functionality of the Website, in accordance with the information available in the Cookie Agreement. At any time, You can block the use of Cookies through the settings of your Internet browser, in which case some functionalities of the Website may be limited.
2.5.2. All technologies used will always comply with current legislation and the provisions of this Term.
2.6. We do not use any type of solely automated decision that impacts You.
2.6. We do not use any type of solely automated decision that impacts You.
3. HOW WE SHARE DATA AND INFORMATION
3.1. Hypotheses of Data Sharing. The Data collected and the activities recorded may be shared, always respecting the sending of the minimum information necessary to achieve the purposes:
(i) With competent judicial, administrative or governmental authorities, whenever there is a legal determination, request, request or court order;
(ii) Automatically, in case of corporate transactions, such as merger, acquisition and incorporation;
(iii) With partner companies and service providers necessary for the execution of our services and functionalities, such organizations are always required to comply with security and data protection guidelines, according to item 4.4 of this Term.
3.2. Data Anonymization. For the purposes of market intelligence research, disclosure of Data to the press and advertising, the Data provided by You will be shared in an anonymized form, that is, in a way that does not allow your identification.
4. HOW WE PROTECT YOUR DATA AND HOW YOU CAN PROTECT IT TOO
4.1. It is very important that You protect Your Data from unauthorized access to Your device. It is also very important that You know that We will never send you electronic messages requesting confirmation of data or attachments that may be executed (extensions: .exe, .com, among others) or even links to eventual downloads. Our contacts are intended to bring you information about your questions and requests, as well as other information that you have requested from us in Our Environments.
4.2. Access to Personal Data, proportionality and relevance. Internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of proportionality, necessity and relevance to the objectives of our business, in addition to the commitment to confidentiality and preservation of your privacy set forth in this Term.
4.3. External Links. When You use Our Environments, You may be led, via link to other portals or platforms, which may collect your information and have their own Data Processing Policy.
4.3.1 It will be up to You to read the Privacy and Data Processing Policies of such portals or platforms outside Our Environments, and it is your responsibility to accept or reject it. We are not responsible for the Privacy and Data Processing Policies of third parties or for the content of any websites, content of services linked to environments other than ours.
4.3.2 Partner Services. We have business partners who may occasionally offer services through features or websites that can be accessed from Our Environments. The Data provided by You to these partners will be the responsibility of these partners and is subject to their own data collection and use practices.
4.4 Processing by Third Parties Under Our Guideline. If third-party companies process any Personal Data we collect on our behalf, they will comply with the conditions set forth herein and information security standards.
5. HOW WE STORE YOUR PERSONAL DATA AND ACTIVITY LOG
5.1. The Personal Data collected and the activity records are stored in a secure and controlled environment for the necessary or permitted time, depending on the processing, according to the legal basis that justifies it. Therefore, the end of the processing of your data will occur:
(i) upon verification that the purpose has been achieved or that the data are no longer necessary or relevant to the achievement of the specific purpose sought;
(ii) after the end of the processing period informed to you, the data subject;
(iii) upon request of exclusion by the data subject, if the processing modality includes this type of request;
(iv) by determination of the National Data Protection Authority (ANPD), when there is a violation of the provisions of the LGPD.
|
STORAGE PERIOD |
LEGAL BASIS |
|
As long as the relationship lasts and there is no request for erasure or revocation of consent |
Article 9, item II of the General Law for the Protection of Personal Data |
|
3 years after the end of the relationship |
Article 206, § 3, item V of the Civil Code |
|
6 months for Digital Identification Data |
Article 15 of the Brazilian Civil Rights Framework for the Internet |
5.2. However, in some cases, personal data may be retained to ensure the legal certainty of all parties involved, to comply with a legal or regulatory obligation by Aliança Energia or for our exclusive use, in the latter case, access by third parties is prohibited, provided that this data is previously anonymized.
5.3 We emphasize that, while your data is stored by Aliança Energia, you may request confirmation of this storage and even access to the data or its correction, provided that they have not been anonymized prior to the consultation for our exclusive and internal use.
5.4 For auditing, security, fraud control and rights preservation purposes, we may keep the registration history of your Data for a longer period in the event that the law or regulatory standard so establishes or for the preservation of rights.
5.5 The Data collected will be stored on our servers located in Brazil, as well as in a resource use environment or servers in the cloud (cloud computing), which may require a transfer and/or processing of this Data outside Brazil.
5.3. The Data collected will be stored on our servers located in Brazil, as well as in a resource use environment or servers in the cloud (cloud computing), which may require a transfer and/or processing of this Data outside Brazil.
6. WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM
6.1. Your Basic Rights. You may request confirmation of the existence of Personal Data processing, in addition to the display or rectification of your Personal Data, through the Service Channels, under the terms of item “7.4”.
6.2. Limitation, opposition and deletion of Data. Through the Service Channels, You may also request:
(i) Limiting the use of your Personal Data;
(v) To express their opposition and/or revoke consent to the use of their Personal Data; or
(vi) Request the deletion of your Personal Data that has been collected by Us, only in cases where the collection has taken place upon the provision of your consent.
6.2.1. If You request the deletion of your Personal Data, it may happen that the Data needs to be kept for a period longer than the deletion request, pursuant to article 16 of the General Law for the Protection of Personal Data, for (i) compliance with a legal or regulatory obligation, (ii) study by a research body, and (iii) transfer to a third party (respecting the data processing requirements set forth in the same Law). In all cases by anonymizing Personal Data, to the extent possible.
6.2.2. At the end of the maintenance period and the legal need, the Personal Data will be deleted using secure disposal methods, or used in an anonymized form for statistical purposes.
7. INFORMATION ABOUT THIS TERM
7.1. Alteration of the content and updating. You acknowledge our right to change the content of this Term at any time, according to the purpose or need, such as for the adequacy and legal compliance of a provision of law or rule that has equivalent legal force, and it is up to You to verify it whenever you access Our Environments or use our services and features.
7.1.1. If updates to this document occur and require a new collection of consent, You will be notified through the contact channels that You
7.2. Inapplicability. If any point of this Term is considered inapplicable by a Data Authority or the court, the other conditions will remain in full force and effect.
7.3. Electronic Communication. You acknowledge that all communication made by e-mail (to the addresses informed in your registration), SMS, instant communication applications or any other digital form, are also valid, effective and sufficient for the disclosure of any matter that refers to Our Environments, your Data, as well as any other subject addressed, with the exception only that which this Term provides as such.
7.4. Service Channels. In case of any doubt regarding the provisions contained in this Privacy and Data Processing Term, You may contact our Data Protection Officer directly, available through the e-mail [email protected].
7.5. Governing Law and Venue. This Term will be interpreted in accordance with Brazilian law, in the Portuguese language, and the court of the District of Belo Horizonte, State of Minas Gerais, will be elected to settle any controversy involving this document, except for the specific exception of personal, territorial or functional jurisdiction by the applicable legislation.
8. GLOSSARY
8.1. For the purposes of this Term, the following definitions and descriptions should be considered for their better understanding:
(i) Anonymization: Use of reasonable technical means available at the time of Processing, through which a piece of data loses the possibility of direct or indirect association with an individual.
(ii) Cloud Computing: Or cloud computing, is a service virtualization technology built from the interconnection of more than one server through a common information network (e.g. the Internet), with the objective of reducing costs and increasing the availability of sustained services.
(iii) Cookies: Small files sent by Our Digital Environment, saved on your devices, which store preferences and little other information, in order to customize your browsing according to your profile.
(iv) Data: Any information entered, processed, or transmitted through Our Environment.
(v) Personal Data: Data related to an identified or identifiable natural person.
(vi) Sensitive Personal Data: Personal data on racial or ethnic origin, religious belief, political opinion, membership in a union or organization of a religious, philosophical or political nature, data referring to health or sex life, genetic or biometric data, when linked to a natural person.
(vii) Solely automated decisions: These are decisions that affect a user that have been programmed to work automatically, without the need for human operation, based on automated processing of Personal Data.
(viii) Data Protection Officer (DPO): Person appointed by Us to act as a communication channel between Us, the holders of the Personal Data and the National Data Protection Authority (ANPD).
(ix) Session ID: Identification of the user session when access is made in our application.
(x) IP: Abbreviation for Internet Protocol. It is an alphanumeric set that identifies users’ devices on the Internet.
(xi) Treatment: Any operation carried out with Personal Data, such as those referring to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
