CAFÉ COM PÔNEIS' PRIVACY AND SECURITY POLICY

About Café com Pôneis

Hello! We are Café com Pôneis, a small company located in Brazil, in the city of Irati/PR, registered with the CNPJ/MF under number 32.611.338/0001-76. Feel free to call us 'Café com Pôneis'! We are a company that works in the creation of digital arts, illustrations, comics, animations, designs, and many other contents. This Privacy Policy refers to our website (https://www.cafecomponeis.com), as well as the digital forms created by us through Google Forms to collect individual information and preferential terms referring to the arts and designs that they wish to contract with Café com Pôneis.

How Do We Handle Personal Data?

Café com Pôneis undertakes to respect the Personal Data, Privacy and Security of Users, always cautiously taking the necessary measures to guarantee their protection, respecting all applicable laws that provide for data protection, including, but not limited to, Law nº 13.709 (General Personal Data Protection Law – LGPD). Thus, when initiating a contact with Café com Pôneis, we want to ensure that you, as a user, understand how and why the personal information shared with our company is treated, and, above all, what are your rights as a data subject and how you can exercise them. This Privacy and Security Policy is the main document regarding the privacy of data shared with Café com Pôneis. Here, you will find details on how Café com Pôneis performs the collection, processing, treatment, storage and sharing of data that you enter or produce during your interaction with the company, with the Site or with one of the Forms. All other documents governing the relationship between Users and Café com Pôneis are an integral and inseparable part of this General Privacy and Security Policy. Please read this Privacy Policy carefully, as by using our services or voluntarily providing your information, you acknowledge that you have read this Privacy Policy.

How to Contact Us

If you want to contact us to discuss any provision of this Policy, as well as to request the deletion or correction of the data processed by Café com Pôneis, just send us an email to calena@cafecomponeis.com, including, in the subject, the reason for contact. After contacting us, we will analyze your questions or requests and get back to you in 15 (fifteen) business days.

Definitions

Data: Any identifying or non-identifying information; or that can identify a natural person or not; and/or any information that identifies or may identify a legal entity; anonymized information and or statistics. Personal data are included in the definition.

Anonymization: Any information that does not allow a data subject to be identified directly or indirectly.

Personal Data: Any information that identifies or may identify a natural person; data of a natural person, a living individual who can be identified from this data (or from this and other information that we have or that we may come to have).

Usage Data: Data collected automatically, generated from the use of the website.

Treatment: Any activity carried out with personal data, such as collection, production, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication or transfer.

Cookies: Small pieces of data stored on your device (for example, data from previously visited websites or links).

Data Controller: Natural or legal person, public or private, who is responsible for decisions regarding the processing of personal data.

Data Operator: Natural or legal person, public or private, who processes personal data on behalf of the controller.

Treatment Agents: Set of which the controller and the operator are part. For the purposes of this Privacy and Security Policy, Café com Pôneis is part of the Data Processing Agents, as it exercises both roles, Controller and Operator, as it collects, processes, uses, shares and stores User Personal Data.

Consent: Free, informed and unequivocal manifestation by which the holder agrees with the processing of his personal data for a specific purpose, previously informed in a clear way. It is one of the Legal Bases allowed by the LGPD.

Legal Bases: These are hypotheses that authorize the processing of data. Each of them is a fair and lawful motivation, and already pre-designed by the LGPD, which the agent can use to support their data processing activities. It is essential that for each personal data processing activity there is a legal basis supporting it.

Data Collected and Purposes

Use of Data

Café com Pôneis may collect personal data to: enable our communication through telephone, WhatsApp, e-mail, among others; enable the scheduling of meetings and the presentation of service provision proposals, as well as for the eventual formalization of a service provision relationship between the User and Café com Pôneis; to present and manage information regarding the use of service provision plans offered by Café com Pôneis, as well as for invoicing and collection of resulting financial expenses; for notifications about changes to this General Privacy and Security Policy, as well as all other documents that govern the relationship between Café com Pôneis and you; to improve services and your experience in contact with our content and services; to comply with legal obligation or applicable legislation; for sending informational content and publicizing events, always in a measured way and according to your preferences and habits; to guarantee your safety and that of Café com Pôneis, such as in defense of Café com Pôneis' rights in judicial or administrative proceedings and compliance with this Policy. In general, we process your personal data to offer or provide contracted artistic services.

Collected Data

Café com Pôneis may collect the following personal data from Users of its website and forms:

Data provided voluntarily: Name, Individual registration, General record, e-mail, telephone number, complete address with zip code, nationality, gender or name preferences, age (to access an art portfolio with restricted access to civil majority), bank details. All of this data entered by you can be confirmed through comparison with public or private databases, in order to guarantee the security of both parties and avoid fraud or any illegal activities.

Data collected automatically: Access device characteristics such as model and operating system and DRM ID; browser features; IP (with date and time); origin of the IP; interactions carried out and profile of use of the Site and Blog, such as information about clicks on pages accessed, pages accessed after leaving the platform and time spent viewing each page; device network connection type; Cookies; geolocation information; logged-in user's e-mail address; among others. For such collection, we will use some standard technologies, such as cookies. The Data collected automatically is used mainly for the purpose of improving your browsing experience and use of the Café com Pôneis website. Café com Pôneis may also use this automatically collected data for the purpose of sending informative content and publicizing events, always prioritizing respect for privacy and other fundamental rights, always seeking to improve your experience and never acting in an undesirable way, so that the use of this information is restricted to the purposes indicated in this document.

Data Sharing with Third Parties

Café com Pôneis has as a principle the confidentiality and security of the information of the Users of its Site and its Forms and has them as a priority in its business – so that we only share your personal data in accordance with the protection standards provided for in the LGPD and preserving your privacy, for the purposes set forth in this Privacy Policy. Thus, Café com Pôneis undertakes not to disclose, share, give access, facilitate access, rent, sell, exchange or, in any other way, make such information available to other Users, and third parties, under any pretext, except in cases expressly authorized by you and indicated here in.

Service Providers

Café com Pôneis may hire third-party companies to provide internal services and to help provide services to Users. Third-party companies that may gain access to your data to carry out activities on behalf of Café com Pôneis are:

Google: Café com Pôneis uses Google services for management, creation, communication, among other specific features of each product, including, but not limited to, Gmail, Calendar, Drive, Documents, Spreadsheets, Meet and Presentations. Privacy Policy: https://policies.google.com/privacy

Discord: Café com Pôneis uses Discord services for communication, presentation of ideas and sharing of information regarding possible works to be developed. Privacy Policy: https://discord.com/privacy

WhatsApp: Café com Pôneis uses WhatsApp services for management, communication, meeting and sharing of information regarding the work performed, between client and company. Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

PayPal: Café com Pôneis uses PayPal services to carry out payment methods for contracted services, without interference and storage of bank data by Café com Pôneis. The entire financial transaction will take place in the form and digital security offered by PayPal. Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

Thus, the User is aware and accepts, from now on, that this data is shared.

Other Forms of Sharing

Exceptionally, Café com Pôneis may also share your data with third parties, in compliance with regulations or in good faith, in the following cases: compliance with the law, court order or other legal procedure and the regulations to which Café com Pôneis is subject; compliance with court orders and/or defense of Café com Pôneis' rights in judicial or administrative proceedings; contracting data processing services from third parties (operators); execution of Café com Pôneis contracts; investigation or defense against any third party claims or allegations against Café com Pôneis; protection of security or integrity of Café com Pôneis services; enforcement or protection of the rights and security of Café com Pôneis of Users, collaborators or third parties; business succession, such as mergers, acquisitions and incorporations; holder request; investigate, prevent or take action regarding suspected or actual illegal activities or to cooperate with public bodies; exercise or protect the rights and safety of Café com Pôneis, Users, possible employees or third parties. Café com Pôneis may contest any demand for access to data, at its sole discretion, when it deems that requests are excessive, vague, or made by incompetent authorities.

Legal Basis for Data Processing

Café com Pôneis collects and processes personal data only when it has, at least, a legal basis that duly supports such processing activity. The legal bases for data processing carried out by Café com Pôneis include:

Consent: Provided expressly at the time of providing the data, and by consenting to any data processing activity carried out by Café com Pôneis, you declare that you have read and are aware of this Privacy Policy.

Execution of contract: When contracting the provision of services by Café com Pôneis, for all activities necessary to provide the services made available in our contract.

Regular Exercise of Rights: Café com Pôneis will be able to rely on this legal basis to exercise its rights in judicial, administrative and arbitration proceedings.

Compliance with legal obligation: Café com Pôneis will be supported under the protection of this legal basis whenever the activity of processing your data has the purpose of complying with a legal or regulatory obligation.

Whenever this document undergoes modifications that impact a change in the processing of personal data, you will be informed so that you can give your consent again. Other legal bases may authorize Café com Pôneis to process your data even without express consent to do so.

Data Storage Time

Café com Pôneis will store and process your data until it is verified that the purpose for which they were collected has been achieved or that the data is no longer necessary or relevant to achieve the specific purpose sought. We, at Café com Pôneis, will store your data securely, serving all the purposes described in this Privacy Policy, and such data may remain stored for up to 5 (five) years after the end of our relationship. The retention periods of each category of personal data are defined by Café com Pôneis according to the specific characteristics of each treatment, including the nature of the data, the purposes for the treatment, the existing legal or regulatory obligations, among other relevant criteria for this definition. However, in some cases, we may store your personal data, regardless of consent or any request for deletion, for audit purposes, compliance with legal or regulatory obligations or regular exercise of rights, even after the end of your relationship with Café com Pôneis.

Your Rights as a Data Holder

Whenever Café com Pôneis acts as controller of personal data, it will make every effort to guarantee the exercise of your rights. You, as holder of the personal data we process in this Policy, have the right to obtain:

• confirmation of the existence of treatment

• data access

• copy of all your personal data held by Café com Pôneis

• correction of incomplete, inaccurate or outdated data

• anonymization, blocking or deletion of data that is unnecessary, excessive or treated in violation of the provisions of the LGPD

• portability of data to another service or product provider, upon express request, observing commercial and industrial secrets

• elimination of personal data processed with your consent

• information from public and private entities with which Café com Pôneis shared data

• information about the possibility of not giving consent and about the consequences of the refusal

• revocation of consent

• review of automated decisions that affect you

It is important to point out that the request to interrupt the use of all or some of your Personal Data, or limit the use thereof by Café com Pôneis, may jeopardize the scope of the purpose that justified the collection of the Data and the communication of Café com Pôneis with you. The revocation of consent will not prevent Café com Pôneis from processing your Data, and the processing may occur in relation to other data that are not personal or when there are other legal bases for the treatment, provided for in the Personal Data protection legislation.

Security Measures

Concerned about information security, we designed our website in secure and encrypted hosting, with SSL security offered by the platform itself. Even with its greatest efforts and dedication to security, the current state of technology does not allow Café com Pôneis to create an absolutely inviolable and safe database against attacks, and Café com Pôneis uses all the compatible protection with its performance and size. Café com Pôneis adopts advanced technological resources compatible with its performance to guarantee the security of all its Data collected and stored. In order to protect your data, we at Café com Pôneis use digital security measures, such as access controls, authentication with double verification factor, firewall device, among other mechanisms, adopting a series of technical and preventive measures and good security practices. In order to prevent anonymity as much as possible, in cases of violation of User rights, Café com Pôneis will keep in its database all information relating to User access to the Platform, including, but not limited to, IP address, pages accessed, the times and dates of access and the access device used. These records may be used in internal or public investigations to investigate practices that may cause any damage to Café com Pôneis, other Users and third parties, including the commission of crimes in virtual environments.

Changes to the Privacy Policy

Whenever there are changes in the activities of data processing by Café com Pôneis and every time the laws in force undergo changes that reflect this Policy, it will be duly updated. Updates will become valid, effective and binding only after being communicated to you via notifications or email communication.