This privacy policy is applicable to the ConectPec app for mobile devices,
together with any related services operated by Agência Boz
(collectively, the “Application”). Agência Boz is hereinafter referred
to as the “Service Provider”.
Data Controller Information
Agência Boz acts as the Data Controller responsible for the processing
of your personal data.
Name: Agência Boz
Address: Av. João Gualberto, 1881 – 14º Andar, Sala 1408
Curitiba – PR, CEP 80.030-001
Email: contato@agenciaboz.com.br
For data protection inquiries and to exercise your GDPR rights,
please contact the Data Controller using the contact information above.
What information does the Application obtain and how is it used?
The Application and related services acquire the information you
supply when you download, access, or register for the service.
Registration with the Service Provider is not mandatory. However,
you might not be able to use some of the features offered by the
service unless you register.The Service Provider may also use the information you provide to send
important information, required notices, and, where permitted by law,
marketing communications.
Legal basis for processing your personal data
Where the GDPR applies, the Service Provider relies on one or more
lawful bases to process your personal data, including:
Contract performance:
processing necessary to provide the Application or fulfil a
contract with you.
Consent:
where you have given explicit consent to processing, including
for marketing, analytics, or optional features. You may withdraw
consent at any time without affecting processing that occurred
before withdrawal.
Legitimate interests:
where processing is necessary for the Service Provider’s specific
legitimate interests, such as maintaining network and information
security, preventing fraud and abuse, or improving the
Application’s core functionality through analytics, provided
those interests are not overridden by your data protection rights
or fundamental freedoms.
Legal obligation:
to comply with laws or government requests.
Cookies and similar technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels,
and similar technologies to support functionality, analytics, and
service delivery. Where required by law, the Service Provider will
obtain your consent before using non-essential tracking technologies.
Automated decision-making and profiling
If the Application uses automated decision-making, including profiling,
that produces legal effects concerning you or similarly significantly
affects you, you have the right to request human review, express your
point of view, and contest the decision.Information about the logic involved and the likely consequences of
that processing will be provided where required by law.
What information does the Application collect automatically?
In addition, the Application may collect certain information
automatically, including, but not limited to, the type of mobile
device you use, your mobile device’s unique device ID, the IP address
of your mobile device, your mobile operating system, the type of
mobile Internet browsers you use, and information about the way you
use the Application.
Does the Application collect precise real time location information of the device?
This Application does not gather precise information about the
location of your mobile device.
Does the Application use Artificial Intelligence (AI) technologies?
The Application does not use Artificial Intelligence (AI) technologies
to process your data or provide features.
Do third parties see and/or have access to information obtained by the Application?
Only aggregated, anonymized data is periodically transmitted to
external services to aid the Service Provider in improving the
Application and their service.The Service Provider may share your information with third parties
in the ways that are described in this privacy statement.
International Data Transfers
The Service Provider or its third-party service providers may transfer
personal data outside the European Economic Area (EEA). Where such
transfers occur, the Service Provider will use an appropriate transfer
mechanism required by GDPR Chapter V.
Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs) approved by the European
Commission
Other safeguards or derogations recognized under GDPR Chapter V,
including consent where legally permitted
Third-party services
Please note that the Application utilizes third-party services that
have their own Privacy Policy about handling data.
The Service Provider may disclose User Provided and Automatically
Collected Information:
as required by law, such as to comply with a subpoena, or similar
legal process;
when they believe in good faith that disclosure is necessary to
protect their rights, protect your safety or the safety of others,
investigate fraud, or respond to a government request;
with their trusted services providers who work on their behalf,
do not have an independent use of the information the Service
Provider discloses to them, and have agreed to adhere to the rules
set forth in this privacy statement.
Where the GDPR applies, the Service Provider enters into Data
Processing Agreements (DPAs) with third-party service providers that
process personal data on its behalf, as required by Article 28 of the
GDPR.
What are my opt-out rights?
You can stop further collection of information from your mobile device
by uninstalling the Application. Uninstalling will stop the Application
from collecting data from your device, but it does not automatically
delete information that has already been transmitted to the Service
Provider or to third parties.To request deletion of your personal data, withdraw consent, or
exercise any of your rights, contact the Service Provider at
contato@agenciaboz.com.br
.
What is the data retention policy and how can you manage your information?
The Service Provider retains personal data based on its necessity
for the stated purposes:
User Provided Data:
Retained for the duration of your use of the Application plus
12 months thereafter, unless longer retention is required by law.
Automatically Collected Data:
Retained for up to 24 months from collection, unless longer
retention is required for legal compliance or security purposes.
Aggregated and Anonymized Data:
Retained indefinitely as it no longer identifies you.
Data required for legal compliance:
Retained as long as required by applicable law.
How does the Application address children’s privacy?
The Application is not intended for children under 16 years of age,
or where a higher age of digital consent is established under
applicable law.The Service Provider does not knowingly solicit data from children
or market the Application to them.
How is your information kept secure?
The Service Provider is committed to safeguarding the confidentiality
of your information. The Service Provider implements physical,
electronic, and procedural safeguards to protect information it
processes and maintains.
Data Breach Notification
In the event of a personal data breach that poses a risk to your
rights and freedoms, the Service Provider will notify the relevant
supervisory authority within 72 hours of becoming aware of the breach,
as required by applicable law.
How will you be informed of changes to this Privacy Policy?
The Service Provider may update this Privacy Policy from time to time.
The Service Provider will notify you of material changes by posting
the updated Privacy Policy with an effective date.Previous versions of this Privacy Policy will be maintained and made
available upon request by contacting the Service Provider at
contato@agenciaboz.com.br
.
What are your GDPR data protection rights?
Under the GDPR, you have the following rights:
Right of Access: You can request access to your personal data.
Right to Rectification: You can request correction of inaccurate data.
Right to Erasure: You can request deletion of your personal data.
Right to Restrict Processing: You can request that the Data Controller limits how they use your data.
Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
Right to Object: You can object to certain processing.
Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent.
Rights Regarding Automated Decision-Making: You have rights related to automated decisions that affect you.
What are your California privacy rights (CCPA/CPRA)?
If you are a resident of California, the California Consumer Privacy
Act (CCPA) and the California Privacy Rights Act (CPRA) provide you
with additional rights regarding your personal information:
Right to Know
Right to Delete
Right to Correct
Right to Opt-Out
Right to Limit Use of Sensitive Personal Information
Right to Non-Discrimination
How do you give your consent?
Where processing is based on consent, you provide that consent by
affirmatively opting in to the relevant feature or action.
How can you contact the Data Controller?
If you have any questions regarding privacy while using the
Application, or have questions about the practices, please contact
the Service Provider via email at
contato@agenciaboz.com.br
.
