With the aim of ensuring free access, transparency, protection, and privacy for our users and visitors (“Users”), COLÉGIO DEGRAUS presents this Privacy Policy (“Privacy Policy”), whose purpose is to protect the personal data collected, stored, or processed by the companies within the COLÉGIO DEGRAUS group.
We emphasize that the COLÉGIO DEGRAUS Privacy Policy follows the legal principles established by the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD), as well as recommended data protection practices.
For the purposes of this Privacy Policy, the following institutions shall be considered companies:
• COLÉGIO DEGRAUS EIRELI – CNPJ: 07.706.853/0001-92
• CENTRO EDUCATIVO DE ENSINO MÉDIO DEGRAU – CNPJ: 07.706.868/0001-50
• ÁGORA CENTRO DE EDUCAÇÃO E CULTURA – CNPJ: 34.615.232/0001-76
I – LEGAL DEFINITIONS
For the purposes of this Policy, the following definitions apply:
Client/Contracting Party: any individual who contracts services or purchases products from COLÉGIO DEGRAUS.
Personal Data: information relating to an identified or identifiable natural person;
Sensitive Data: personal data concerning racial or ethnic origin, religious beliefs, political opinions, membership in a trade union or religious, philosophical, or political organization, data relating to health or sexual life, and genetic or biometric data when linked to a natural person;
Data Subject: the natural person to whom the personal data being processed relates;
Controller and Processor: companies within the COLÉGIO DEGRAUS group;
Data Protection Officer: the department responsible for communication between the controller, data subjects, and the national authority – tecnologia@degrausnet.com.br
Processing: any operation performed on personal data, including collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination, or extraction;
Consent: the freely given, informed, and unambiguous indication by which the data subject agrees to the processing of their personal data for a specific purpose;
Blocking or Deletion: the temporary suspension of data processing or the deletion of stored data.
International Data Transfer: the transfer of personal data to companies within the COLÉGIO DEGRAUS group.
Accordingly, we have prepared the following questions and answers regarding data collection and processing so that you can understand how we process, use, and store your data, as well as your rights as a data subject.
II – COLLECTION OF PERSONAL DATA
1. What personal registration information is collected?
You share registration, financial, and sensitive data with us, including, in the case of individuals and legal representatives: full name; preferred name; CPF number; RG identification number; date of birth; telephone number; credit card number; and email address.
In the case of legal entities, you share registration, financial, and sensitive data with us, including: corporate name, trade name, CNPJ number, State and Municipal Registration numbers, telephone number, credit card number, email address, and information concerning their legal representatives.
2. For what purposes is personal data used?
The information collected will be used to:
(i) enable transactions carried out in person, through representatives, or electronically for the contracting and acquisition of services;
(ii) enable the delivery of purchased products (teaching materials and others), ensuring that they arrive safely at the address provided;
(iii) enable the performance of contracted services, including when information must be provided to government agencies (federal, state, and municipal) and other competent entities (quasi-governmental, parafiscal, trade union, and private entities);
(iv) develop internal controls concerning requests, interests, and behavior, and improve the provision of services, products, and content;
(iv) expand and improve promotional initiatives;
(v) send email messages about new services and information concerning products and services (the User may request removal from the advertising mailing list at any time).
3. Will the data be shared with third parties?
The information collected may be shared with companies belonging to or associated with the Colégio Degraus group, or with third parties that assist in managing the organization. This sharing is necessary to provide services to Users and serves the legitimate interest of COLÉGIO DEGRAUS in fulfilling this purpose, particularly in relation to government agencies (federal, state, and municipal) and other competent entities (quasi-governmental, parafiscal, trade union, and private entities). Third parties receiving the collected data agree to comply with the strict confidentiality standards of Colégio Degraus and use the data solely to provide services to Colégio Degraus.
The data may also be shared in the following circumstances: (i) pursuant to legal provisions or court orders; (ii) in the event of the sale, transfer, merger, or full or partial acquisition of Colégio Degraus or its assets by third parties; and (iii) where there is suspected criminal or fraudulent conduct and the competent authorities request such information.
4. What are my rights?
At any time, the User may request information from Colégio Degraus concerning their personal data, including: (i) confirmation that their data is being processed; (ii) access to the data; (iii) correction of their data; (iv) blocking or deletion of the data; (v) data portability; (vi) withdrawal of consent; among other rights.
To request the information listed above, the User must submit a formal request through our privacy channel: tecnologia@degrausnet.com.br
For more information about your rights, please refer to the Brazilian General Data Protection Law: http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm
5. How long does the COMPANY have to respond to requests from data subjects?
Colégio Degraus will have 15 (fifteen) days from receipt of the User’s request to provide the information.
Information containing trade or industrial secrets will not be shared with Users.
6. How can I exercise my rights?
The data subject may request the cancellation of their account on the Website at any time by sending an email to tecnologia@email.com.br requesting the deletion of their registration.
If visitors, Users, and/or data subjects have any questions, complaints, or requests concerning this Privacy Policy, they may contact Colégio Degraus by email at tecnologia@degrausnet.com.br
7. What are my responsibilities as a User?
You are responsible for providing truthful information. Furthermore, the contracting information used through electronic means is the sole responsibility of the User, who agrees not to disclose or allow third parties to use such information and shall also be responsible for the consequences of any misuse.
**By using our digital platforms, entering into contracts through electronic or remote means, and/or communicating with us, you agree to the processing of your information, including international data transfers where necessary.
8. What security measures are used?
Colégio Degraus adopts recommended technical measures to protect the personal data provided by Users, seeking to prevent unauthorized access to or use of such personal data, and maintains a preventive anti-fraud system.
9. What are cookies and what are they used for?
Cookies are small pieces of information installed on the computer or similar device used to access the internet. They remain active for a limited period and help store and, in some cases, track information concerning use of the Website.
Colégio Degraus primarily uses cookies to:
(i) monitor the interests, behavior, and demographics of Website visitors and Users;
(ii) analyze the pages visited and searches performed by visitors and Users in order to improve the Website’s commercial and promotional initiatives;
(iii) measure the effectiveness of promotions; and
(iv) collect information about the number of visitors and Users accessing the Website.
10. What should I know about cookies?
Cookies or similar systems installed by third parties may be found on the Website’s pages. This Policy, however, applies only to the use of cookies by COLÉGIO DEGRAUS or third parties providing services on its behalf. Cookies and other technologies used by third-party advertisers and partners are the full and exclusive responsibility of the respective parties.
Most internet browsers accept cookies automatically, but visitors and Users may configure their browsers to block or remove cookies. However, blocking or removing the cookies used on the Website may prevent visitors and Users from taking full advantage of its features.
11. How can I block cookies?
To block or remove cookies, follow the procedures provided by each browser manufacturer, such as:
Google Chrome: (https://support.google.com/chrome/answer/95647?hl=pt-BR)
Edge: (http://windows.microsoft.com/pt-br/internet-explorer/delete-managecookies#ie=ie-11)
Firefox: (https://support.mozilla.org/pt-BR/kb/ativando-e-desativando-cookies)
Safari: (http://safari.helpmax.net/ps/privacidade-e-seguranca/como-remover-cookies/)
The procedures listed above are provided by the browser manufacturers’ official websites. Colégio Degraus shall not be liable for any loss or damage experienced by visitors or Users as a result of following these procedures.
12. What other important information should I be aware of?
(i) The “Website” or remote access channels may contain links to other websites and applications not operated by Colégio Degraus, including links from advertisers and partners. Colégio Degraus does not control, recommend, or endorse third-party websites or applications and is not responsible for their content, products, services, policies, or privacy practices. Such websites and applications may send their own cookies to the visitor’s or User’s device, collect data independently, or request personal data, and they may or may not have their own privacy policies.
(ii) Colégio Degraus uses industry-established standards to protect the confidentiality of personal information and electronic data. Although modern forms of protection are used, Colégio Degraus may still be subject to actions against the security of its systems. Accordingly, Colégio Degraus shall not be liable for unlawful interception, breaches of its systems or databases by unauthorized persons, or the improper use of information obtained through such means.
(iii) Data retention periods vary depending on the type of information. If you have any questions, please contact the privacy department.
(iv) The personal data collected will not be sold, rented, or otherwise shared, except as expressly provided in this Privacy Policy, without the User’s consent.
This Privacy Policy may be updated at any time. Any changes will always be made available on the Website so that Users are fully informed.
Publication date: September 2, 2022.
