What do you need to know

Definitions

LGPD: General Data Protection Law 13709/2018;

Data Subject: Natural person to whom the personal data that are the object of processing refer (Customers, employees, etc.)

Personal Data: any information that identifies a data subject directly or indirectly;

Sensitive Data: personal data on racial or ethnic origin, religious conviction, political opinion, affiliation to a union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data, when linked to a person Natural;

Controller: Natural or legal person responsible for decisions regarding the processing of personal data;

Operator: Natural or legal person that processes data on behalf of the controller;

What is LGPD

The General Data Protection Law came to bring even more transparency, security and privacy of your personal data in the activities of collection, storage, processing and sharing. Conductor, through its policies, processes and controls, reaffirms its commitment to the security and privacy of the personal data of its customers, employees and service providers.

Privacy Policies

Conductor carries out all personal data processing operations considering the highest levels of security and privacy. For more details, see our personal data protection and privacy policies.

Do you know your rights?

In addition to ensuring data security and privacy, the LGPD guarantees rights for the holders of personal data. On the Conductor Privacy Portal, you can exercise your right of ownership.

Confirmation of data processing: You can confirm whether there is any type of processing with your personal data. Access to personal data: You may have access to all personal data that Conductor holds about you; Deletion of data: You can request anonymization or exclusion of your data from the treatment base, as long as they do not violate other legal provisions. Correction of data: You can request correction of your personal data at any time;

Data portability: You can request the transfer of your personal data; Blocking of data processing: You can request the blocking or revocation of consent, permanently or temporarily, of any processing activity with your personal data, provided that such demands do not violate other applicable laws and third-party rights;

Processing of personal data

Conductor carries out personal data processing operations as Controller and Operator.

Conductor, as Controller, handles the personal data processing of its employees. In this case, Conductor itself carries out the processing operations considering all the guidelines established in the data privacy policy and other rules or procedures adopted by Conductor.

Conductor, as an Operator, handles data processing on behalf of its customers, adopting all the guidelines defined for carrying out processing operations, ensuring the highest standard of security and privacy of personal data, through policies, processes and controls adopted by Conductor .

Consent

It is the expression of interest of the holder who agrees with the processing of their personal data for a specific purpose;

Data retention period

Personal data collected by Conductor, or received through the controllers, are stored by us only for the period necessary to comply with legal obligations!

About the use of Cookies

Cookie é um mecanismo que nos ajuda a entender a forma com que o usuário interage com o conteúdo contido nos sites da Conductor facilitando visitas posteriores, ou seja, guardando as suas preferências e escolhas ajudando a tornar a sua experiência de navegação a mais agradável possível.

Policies

Privacy Policy

The purpose of the Privacy Policy is to demonstrate Conductor’s commitment to protecting the personal data of data subjects processed through the company’s websites, blogs and applications, observing the terms of the laws in force, in particular the General Data Protection Law 13.709/ 2018, better known as LGPD.

This document defines the guidelines and practices adopted by Conductor for handling Personal Data, in this document you will find the principles and guidelines for the protection of personal data, processing agents, management and governance of privacy;

Link to access the complete policy: https://conductor.com.br/en/privacypolicy/

Cyber Security Policy

Conductor has a Cyber Security Policy, in order to apply the principles and guidelines for protecting the information of the institution and customers against cyber threats and attacks, promoting the continuous improvement of data security and business continuity, enabling the maintenance of confidentiality , integrity and availability of information under the company’s responsibility. Link to access the complete policy: https://conductor.com.br/politica-de-seguranc%cc%a7a-cibernetica/

Supplier Code of Ethics and Conduct

The supplier code of ethics and conduct aims to reflect Conductor’s mission, vision and values. We believe that our suppliers are an extension of Conductor, which is why we reinforce, through this manual of good conduct practices, our commitment, values and ethical principles that guide the business relationship with third parties.

Link to access the complete policy: https://conductor.com.br/codigo-de-etica-e-conduta-de-fornecedores/

Responsible for Personal Data Processing

Our DPO: Thiago Cunha.

The Personal Data Processing Officer or DPO (Data Protection Officer), is responsible for ensuring that Conductor adheres to all the requirements of the General Law for the Protection of Personal Data (LGPD). All questions and queries about privacy and the protection of personal data at Conductor can be sent to our Supervisor through our request area (Click Here).

Frequent
questions

What is personal data?

Are any data that identify the holder, directly or indirectly. Examples: name, surname, address, email, phone number, mobile number, identification card number, location data, IP address, Cookies.

What is sensitive data?

These are any data on racial or ethnic origin, religious conviction, political opinion, affiliation to a union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data, when linked to a natural person.

What is treatment activity?

For LGPD it is any activity carried out using personal data that: I – have been collected in the national territory or; II – has as its objective the offer or supply of goods or; III – services or the processing of data from individuals located in the national territory;

How can I send requests to the Supervisor - DPO?

You can make requests, complaints or clarify doubts through the “Talk to us” area of this Privacy Portal.

Should I submit requests to Conductor?

It depends. If you are an employee, a former employee or even a candidate for an employee vacancy, you can send service requests through the “Talk to us” channel.

If you are the holder of a credit, debit or multiple card, your request, complaint or question should be directed to the card issuer. To do this, look for the requests section on the issuer’s Privacy Portal and register your request.

What is the deadline for fulfilling requests?

Requests will be attended to within 15 days of receipt of the request.