LGPD
The XMACNA is prepared to comply with Law No. 13.709 dated 2018.
According to the provisions of the law:
A) The XMACNA has a Data Protection Officer (DPO). This person is generally responsible for all issues involving this legislation in the company. You can contact the DPO via email lgpd@xmacna.ai. The current Data Officer is Wanderson Martins de Carvalho.
B) Our Privacy Policy is public and available on the website. You can also access it by clicking here.
C) If you notice any non-compliance, are a victim of any leak incident involving our services, or cause such leak incident, immediately notify the Data Officer by email lgpd@xmacna.ai.
D) Users, as foreseen by legislation, may request information regarding data collected and its processing. To do so, please request via email lgpd@xmacna.ai.
E) XMACNA only collects data necessary to provide the offered services. You can request revocation of consent for data processing at any time via e-mail lgpd@xmacna.ai, in this case, service provision will be interrupted.
F) Data processing occurs during service provision. User identification and contact data are kept to execute our communication policy.
G) The data collected by XMACNA are stored in two specific databases, namely:
-
Microsoft Azure: the database that supports our web systems.
Data may occasionally be shared with third-party service providers, which can be consulted in our privacy policy.
i) According to Art. 9 of the LGPD, "the data subject has the right to easy access to information about the processing of their data, which must be made available clearly, adequately and prominently regarding, among other features provided in regulations to meet the principle of free access:
I - specific purpose of the processing;
II - form and duration of the processing, respecting commercial and industrial secrets;
III - identification of the controller;
IV - contact information of the controller;
V - information about the shared use of data by the controller and its purpose;
VI - responsibilities of the agents who will carry out the processing; and
VII - rights of the data subject, with explicit mention of the rights contained in art. 18 of this Law.
j) According to Art. 18 of the LGPD, the data subject has the right to obtain from the controller, regarding the data processed by the controller about the data subject, at any time and upon request:
- Confirmation of the existence of processing;
- Access to the data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data under this Law;
- Portability of the data to another service or product provider, upon express request, according to regulations from the national authority, respecting commercial and industrial secrets;
- Deletion of personal data processed with the consent of the data subject, except in cases provided in art. 16 of this Law;
- Information about public and private entities with whom the controller shared data;
- Information about the possibility of not providing consent and the consequences of refusal;
- Revocation of consent, under § 5º of art. 8º of this Law.
§ 1º The data subject has the right to file complaints regarding their data against the controller before the national authority.
§ 2º The data subject may object to processing based on one of the consent exemption hypotheses, in case of non-compliance with this Law.
§ 3º The rights set forth in this article will be exercised by an express request from the data subject or a legally authorized representative to the data controller.
§ 4º In case of impossibility of immediate adoption of the measure referred to in § 3º of this article, the controller shall send a response to the data subject which may:
I - communicate that it is not the data controller and indicate, whenever possible, the responsible agent; or
II - indicate the factual or legal reasons preventing immediate adoption of the measure.
§ 5º The request referred to in § 3º of this article will be fulfilled free of charge for the data subject, within the deadlines and conditions established by regulation.
§ 6º The controller shall immediately inform the data processors with whom it has shared data about corrections, deletions, anonymizations, or blocking of data, so they can perform the same procedures, except in cases where such communication is demonstrably impossible or requires disproportionate effort.
§ 7º Portability of personal data referred to in item V of the main paragraph of this article does not include data already anonymized by the controller.
§ 8º The right referred to in § 1º of this article may also be exercised before consumer protection agencies.
Talk to Hermes First
Talk to those who really know Everything about XMACNA
Before you send your message, why not chat with Hermes? Our Digital Employee knows everything about Xmacna and is ready to answer your questions instantly.
Talking to Hermes is like speaking directly with us, since it is integrated with all our knowledge and operations. Experience this fast and efficient interaction right now!