LGPD

Virtú Ambiental is a consulting firm specializing in comprehensive environmental solutions, which combines technical expertise, innovation and commitment to sustainability. We recognize the importance of privacy and the protection of the personal data of all those who interact with us, whether visitors to our website, customers, partners or employees.

This document details our Personal Data Protection Policy, reaffirming our commitment to compliance with Federal Law No. 13,709/2018, known as the General Law for the Protection of Personal Data (LGPD). Our goal is to ensure transparency about how we collect, use, store, and protect your personal information, ensuring respect for your rights and privacy.

Virtú Ambiental, with a website address https://virtuambiental.com/, acts as the Controller of the personal data provided to us, being responsible for decisions regarding the processing of such data.

Our operations include, but are not limited to:

• Environmental consulting
• Environmental licensing
• Environmental engineering
• Environmental monitoring
• Expert technical advice

For any questions related to the protection of personal data or to exercise your rights, please contact us via e-mail: contato@virtuambiental.com.

Virtú Ambiental may collect the following types of personal data:

Contact and Identification Data:

• Full name
• Email Address
• Phone Number
• Subject/Message (sent via "Contact Us" forms)
• Resume (CV) and professional information (submitted via "Work with us" forms)
• Internet Protocol (IP) Address
• Browser data (type, version)
• Location data (if provided on media, such as EXIF GPS)

Restricted Area Access Data:

• Email Address
• Password

Browsing and Interaction Data:

• Cookies (as detailed in Section 9)
• Interaction information with embedded third-party content (videos, images, articles)

Data Collected in the Provision of Services:

• Information necessary for the environmental licensing process, as required by regulatory agencies. This data is treated under strict confidentiality and according to confidentiality agreements.
• Contact details for communication and update on projects.

Direct Communication Data:

• Information provided in emails and phone calls for the purposes of contact, business proposals, or customer service.

We collect your personal data in the following ways:

• Through Forms on the Website: When you complete and submit "Contact Us" or "Work with Us" forms on our website.
• During Login to the Clients Sandbox: By logging into your account in the Clients Area, you can use platforms such as Power BI to view projects.
• Via Direct Contact: In communications by email, telephone or other forms of direct contact for prospecting, service or support.
• During the Provision of Environmental Consulting Services: To comply with the contractual terms and legal requirements of environmental projects.
• Automatically via Cookies and Tracking Technologies: When browsing our website, we collect browsing data and preferences through cookies, according to your permission and your browser settings.
• Feedback: When you leave feedback on our website.

Virtú Ambiental processes personal data based on the following legal hypotheses of the LGPD:

• Consent: When you provide us with your data in a free, informed and unambiguous way, such as by submitting forms on the website.
• Performance of Contract: To fulfill obligations arising from a service agreement with you or to carry out preliminary procedures related to a future contract.
• Legal or Regulatory Obligation: To meet legal or regulatory determinations, such as the provision of data for environmental licensing processes required by competent agencies.
• Legitimate Interest: For the purposes of support, improvement of our services, website security (such as spam detection) and relevant communication, provided that your fundamental rights and freedoms prevail.

Your personal data is used for the following purposes:

• Responding to Inquiries and Demands: To respond to requests submitted through contact forms, emails, or telephone.
• Processing Applications: Evaluating and following up on resumes submitted through the "Work with Us" form.
• Provision of Environmental Consulting Services: Perform the contracted services, manage projects and comply with contractual obligations.
• Communication for Project Updates: Keep you informed about the progress and status of projects and contracted services.
• Compliance with Legal Obligations: Comply with regulatory and other applicable legal requirements.
• Improve Website Experience: Analyze website usage to improve content, navigability, and functionality.
• Spam Detection and Prevention: To protect our website and our users from malicious activity.

Virtú Ambiental values the confidentiality of your data and, as a general rule, does not share your personal data with third parties without your explicit consent, except in the following situations and always in compliance with the LGPD:

• Partners and Service Providers: We may share data with partners and suppliers that are essential for the execution of our work, such as website hosting services, communication platforms, or analytical tools. All our partners are evaluated for their compliance with the LGPD and are required to maintain the confidentiality and security of the data.
• Legal Obligations: Where required by law or by court/administrative order, we may be required to disclose personal data to competent authorities.
• Restricted Access Platforms: For customers who use our restricted area, which can be powered by tools such as Power BI, accessible data is managed with privacy and security terms aligned with the LGPD. Access is restricted and controlled.
• Environmental Licensing Processes: Data necessary to obtain environmental licenses and permits may be shared with the competent environmental agencies, always within the limits of the applicable legislation and confidentiality agreements.

In all cases of sharing, Virtú Ambiental ensures that the data is treated with the utmost security and confidentiality, and that the parties involved are committed to protecting their information in accordance with the LGPD.

Virtú Ambiental stores your personal data only for as long as necessary to fulfill the purposes for which it was collected, to meet legal or regulatory requirements, or for the regular exercise of rights. Retention periods may vary:

• Comments: Comments and their metadata are retained indefinitely, to allow for automatic recognition and approval of subsequent comments, and to assist in moderation.
• Data from "Contact Us" and "Work with Us" Forms: The data submitted by these forms is forwarded by email to internal managers and is not currently stored in a persistent database on the website. The information contained in the emails is retained for as long as necessary to process the application or application.
• Login Data (Restricted Area): It is kept as long as your account is active and you are an active customer. After the end of the service contract, the access data can be deactivated.
• Project and Customer Data: Data collected during the provision of consulting services is retained for up to 1 (one) year after the end of the project, in secure environments separate from the website, for the purposes of history, auditing and compliance with any post-contractual obligations.
• Cookies: The duration of cookies varies according to their purpose, as detailed in Section 9.
• User Profile Data (if any): The personal information provided in the user profile is kept indefinitely, allowing the user to edit or delete it at any time (with the exception of the username).
• Data for Legal Obligations: Retained for the time determined by applicable law.

Our website uses cookies to improve your browsing experience and for operational purposes. Cookies are small text files that are stored on your device (computer, tablet, mobile phone) when you visit a website.

Types and Purposes of Cookies Used:

Essential/Functional Cookies:

• Comment Cookies: When you leave a comment, you can choose to save your name, email and website in cookies. This is for your convenience, so you do not have to fill in your details again when making another comment. These cookies last for 1 (one) year.
• Session (Login) Cookies: If you have an account and access this website, a temporary cookie is created to determine whether your browser accepts cookies. It does not contain any personal data and is discarded when you close your browser.
• Login Cookies: When you log in to your account on the website, we also create a number of cookies to save your account details and your screen display choices. Login cookies are kept for two (2) days and screen options cookies for one (1) year. If you select "Remember Me", your login will be retained for two (2) weeks. If you log out of your account, login cookies will be removed.
• Article Editing Cookies: If you edit or publish an article, an additional cookie is saved in your browser. This cookie does not include any personal data and simply indicates the post ID for the article you just edited. It expires after 1 (one) day.

Third-Party Cookies (Gravatar): An anonymized string of characters created from your email address (also called a hash) may be sent to Gravatar to verify that you use the service. Gravatar's privacy policy is available at: https://automattic.com/privacy/. After your comment is approved, your profile picture will be publicly visible next to your comment.

Cookie Management: You have the option to manage or refuse cookies at any time by changing your browser settings. However, by disabling certain cookies, some functionalities of the website may not operate properly. For more information on how to control cookies, please refer to the "Help" function of your browser.

If you upload images to our website, we ask that you refrain from uploading those that contain embedded location data (EXIF GPS). Visitors to the website may download these images and extract your location data, which could compromise your privacy. Virtú Ambiental is not responsible for the collection and use of such data by third parties if you choose to submit images with this information.

Articles on our website may include embedded content from other websites, such as YouTube videos, images, external blog articles, etc. Embedded content from other websites behaves exactly the same as if the visitor were visiting the original website.

These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged in to the website. Virtú Ambiental has no control over the privacy practices of these third-party websites. We encourage you to review the privacy policies of any external website you visit.

Virtú Ambiental implements reasonable technical and administrative security measures to protect the personal data we collect from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Use of encryption technologies (SSL/TLS) to protect the transmission of data between your browser and our server.
• Access Controls: Limiting access to personal data to only those employees and partners who need that information to perform their duties and who are subject to confidentiality obligations.
• Infrastructure Protection: Our hosting provider adopts strict security policies, including backup and disaster recovery, to ensure data integrity and availability.
• Monitoring and Auditing: Continuous monitoring of our systems to identify and mitigate potential security vulnerabilities.
• Secure Deletion: For data managed via the WordPress platform, deletion is performed through the administrative functionalities that aim to permanently remove the data.

While we strive to protect your personal data, it is important to remember that no data transmission over the internet is 100% secure. We encourage you to also take steps to protect your information, such as using strong passwords and not sharing it.

As a personal data subject, you have the following rights guaranteed by the LGPD:

• Right of Access: Obtain confirmation that your data is being processed and, if so, have access to it.
• Right to Rectification: Request the correction of incomplete, inaccurate or outdated data.
• Right to Be Forgotten (Deletion): Request the deletion of your personal data, except in the cases provided for by law (for example, compliance with a legal obligation).
• Right to Portability: Request the transfer of your data to another service or product provider, upon express request.
• Right to Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the revocation.
• Right to Object: Oppose the processing of your data when there is non-compliance with the LGPD.
• Right to Information: Obtain information about the public and private entities with which the controller has shared data.
• Right to Review of Automated Decisions: Request the review of decisions made solely on the basis of automated processing of personal data that affect your interests.

How to Exercise Your Rights: To exercise any of these rights, you may contact us at the email: contato@virtuambiental.com. We will endeavor to comply with your request within a reasonable timeframe, in compliance with applicable law. We may request additional information to verify your identity before processing your request.

For any questions, requests or additional information about this Personal Data Protection Policy or how your data is processed by Virtú Ambiental, please contact our data protection officer (DPO) through the following channel:

E-mail: contato@virtuambiental.com

We are available to assist in whatever is necessary and ensure the fulfillment of your rights.

Virtú Ambiental reserves the right to update this Personal Data Protection Policy at any time as necessary to reflect new data processing practices, legislative changes, or improvements to our services.

We encourage you to check this policy periodically to stay informed about how we protect your information. The date of the last update will always be indicated in the footer of this document. Significant changes will be communicated appropriately.

This Personal Data Protection Policy was prepared in strict compliance with Law No. 13,709/2018, the General Law for the Protection of Personal Data (LGPD), and other legislation relevant to data protection in Brazil. Virtú Ambiental is committed to ensuring that all its data processing operations are in full alignment with the principles and requirements of the LGPD.

Last updated date: May 24, 2024