Introduction

The sustainability of the DGT group's business, including DGT Serviços de Consultoria Ltda., DGT Transformação Digital Ltda., and DGTL Tecnologia Serviços Ltda., and our success is based on our values and ethical principles as expressed in our code of ethics

DGT GROUP DATA PRIVACY POLICY.

DGT undertakes to protect your privacy by prioritizing the security of the Personal Data you shared with us and, to this end, will follow the guidelines of the Brazilian General Data Protection Law (Federal Law No. 13.709/2018 – "LGPD"), which is reasonably consistent with the European GDPR, below indicated for the processing of personal data shared with us.

This Privacy Policy describes the purpose and form of processing your Personal Data, such as collection, sharing, retention, and deletion periods.

If you have additional questions or requests, don't hesitate to get in touch with our Data Protection Officer at the e-mail address: jsmoscati@dgt- consultoria.com.br

This Policy may be updated at any time by DGT upon making available on the website.

WHAT PERSONAL DATA DO WE PROCESS

During your experience on our website, during the services we provide to your company, or in our relationships with our customers, possible customers, employees,candidates, and suppliers, we may collect different types of personal data for the purpose of its conference, monitoring, and control.

Below is what personal data we may collect and in what situations it is collected:

1. a) Data for commercial registration purposes, such as name, address, telephone, and e-mail, for support and promotion of commercial activities;
2. b) Data on resumes: name, telephone, e-mail, resume, and position of our employees and candidates;
3. c) Browsing data: IP address, cookies, information about the device used for navigation; and
4. d) Data for compliance with our contractual and legal obligations.

HOW WE USE COOKIES

We only use essential cookies on our website. That is, those for the operation of the website.

DATA SHARING

DGT may share personal data with different government authorities, institutions or agencies (or similar), service providers acting on behalf of DGT, and third-party service providers who process personal data on behalf of DGT (such as cloud service providers and software services), partners and companies, to fulfill our contractual obligations.

Whenever we share personal data, we will limit it to the minimum necessary and with companies that adhere to our security standards. We will not allow our service providers to use such data for purposes other than contractors.

Where third parties process personal data, DGT will ensure that third parties always do so in line with the provisions of the LGPD.

Where applicable, we will share your Personal Data properly anonymized and discard it following this Policy.

If your Personal Data is shared internationally for a technical reason of ‘hosting’; or other technical issues, in this case, DGT will take the necessary safeguards for your Personal Data to have the same level of protection as we have here and, where necessary, and we will use the international data transfer mechanism required by the applicable data protection standards.

OUR COMMITMENT TO OUR EMPLOYEES AND COLLABORATORS.

DGT uses reasonable means as legally required to preserve the privacy of the personal data it collects.

To provide the security and confidentiality of your Personal Data, we limit access to it only to those who need to know them to perform their functions.

All those individuals who process Personal Data based on the Data Controller instructions, i.e., when DGT is the operator; or when DGT is the controller, are subject to a duty of confidentiality and are required to follow this Policy and our Information Security policy.

DURATION OF TREATMENT

The personal data processed by DGT will be deleted, except if we need to keep it for compliance with a legal or regulatory obligation.

In the case of business relationships and legitimate interest, the Personal Data will be deleted within 5 years after the intention to have a relationship or relationship’s end.

YOUR RIGHTS

Under the LGPD, DGT shall respond to the following by request:

1. I – confirmation of the existence of treatment;
2. II – access to data;
3. III – correction of incomplete, inaccurate, or outdated data;
4. IV – anonymization, blocking, or deletion of unnecessary, excessive, or processed data in non-compliance with the provisions of the Law;
5. V – portability of the data to another service provider or product, upon express request and keeping the trade secrets, following the applicable regulations;
6. VI – deletion of personal data processed with the consent of the holder, except in the case of compliance with a legal or regulatory obligation;
7. VII – information of the public and private entities with which the controller shared the data;
8. VIII – information on the possibility of not providing consent and on the consequences of the negative;
9. IX – withdrawal of consent, according to the Law.

OUR CONTACT

If you have questions about this Policy, exercise any right to personal data, or to report omitted cases in this Policy, don’t hesitate to get in touch with our DPO at the jsmoscati@dgt-consultoria.com.br