Privacy Policy

For ART IT, ensuring the privacy, confidentiality and protection of the personal data it processes, protecting this information from loss, inappropriate use and unauthorized access is of enormous importance.

For this reason, through this document, you want to transparently explain how you collect, store, share and use such information, as well as describe the controls and choices available to data subjects, in order to build a link of trust and security with your customers, service providers, suppliers, business partners and users in general.

1. Terms and Definitions used in this Policy
  • Legal Basis: legal basis that makes the processing of personal data for a specific purpose by ART IT legitimate.

  • Consent: is the Holder's express and unequivocal authorization for ART IT to process their personal data.

  • Personal Data: any data from which information can be extracted, individually or jointly, that (i) identifies an individual/Holder; and/or (ii) through which a Holder's identification or contact information may be derived. Personal Data may be in any media or format, including electronic or computerized records, as well as paper-based files, and does not include a telephone number, cell phone number, address or work email address.

  • Purpose: the purpose, the end that ART IT wishes to achieve with that Personal Data Processing.

  • Privacy Policy: this document, which contains ART IT's guidelines for processing Personal Data.

  • Processing: any and all operations carried out with Personal Data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation, control, modification, communication, transfer, dissemination or extraction.

  • Necessity: the justification for which ART IT carries out the Processing of Personal Data.

  • Products/Services: all events, websites, products and/or services managed, maintained, created or marketed by ART IT, including, but not limited to, its websites, applications, blogs, ART IT platform, webinars, training, lives, etc.

  • Holder: natural person to whom the Personal Data processed by ART IT relates.

  • User: natural person at least 18 (eighteen) years old or emancipated, in the use and enjoyment of their full mental capacity for acts of civil life, who visits or makes use of ART IT products and/or services.

2. Collection of Personal Data

ART IT collects personal data in the following ways:

  • By sending through the ART IT website: ART IT receives and processes all information provided to it through forms on its website;

  • By sending text or voice messages: ART IT receives and processes all information provided to it via text or voice for the purpose of filling out a job opportunity form, sending a curriculum vitae, requesting a commercial proposal or for any other purpose;

  • Participation in Selection Processes: ART IT receives and processes all information provided to it through registrations in its selection processes, whether in person or not.

  • Through our relationship: Based on the data you provide and the information you collect during the relationship maintained, as well as that accessed from other sources, ART IT can generate new information about you;

  • Use of ART IT software and services: Eventually, ART IT activates certain attributes of its software that will capture and store information about the use of its software;

  • Third parties: ART IT receives certain information through third parties, including partners with whom it works. ART IT uses this data only if the holder of the data has authorized third parties to share it or if he or she has a legitimate interest in using it.

3. Data Collected and Purposes of Processing

ART IT has listed below the categories of data that it may collect, explaining the reasons why it processes such data and the associated legal bases on which it is based and which legally allow it to process them.

  1. Consent is collected when the user first accesses the ART IT software, or via clear and specific requests. If any individual chooses not to give their consent, data collection will not occur.

  2. Website is the place on the world wide web where ART IT information is organized and can be located by you. Our domain, which is nothing more than our online address, is: https://artit.com.br

  3. It should be noted that all marketing emails sent by ART IT have an unsubscribe link if the recipient does not wish to receive any more messages of this type.

  4. Sensitive data are: racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union, data related to health or sexual orientation, as well as biometric or genetic data.

4. Collection of Sensitive Personal Data

Regarding sensitive data, ART IT will also only begin collecting it after obtaining the person's explicit consent and for a defined purpose. However, when it is essential in situations linked to: a legal obligation; public policies; to studies via research bodies; to a right, in contract or process; To prevent fraud against the holder, ART IT may process this data even without the person's explicit consent.

5. Legal Basis of Processing
ART IT uses, as a legal basis to carry out the processing of personal data that it is willing to carry out, consent, compliance with legal obligations and contracts. These have the following meaning:

Consent is understood as a clear and unequivocal declaration by a person who agrees with the use of their data for the purposes proposed by the company. Ex: “I agree to provide my personal data (a) CPF, ID, name and surname, place of birth and nationality, age and date of birth and affiliation; (b) addresses, physical and electronic, telephone numbers (c) position I hold in the organization; (d) information about the places I have worked or lived in; (e) company I work for and have worked in the past; (f) my habits and customs (g) my qualifications and skills (h) my voice and image biometric information, to that ART IT can use them in the best way it sees fit, including contacting me or answering any questions or interests in the products/services that I have.”

Contracts, in which a person's data can be processed in two cases: the first is to fulfill an obligation provided for in the contract, and the second when the data processing serves to validate and enter into force of an agreement.

Legal Obligation: In this case, the processing of personal data is justified by requirements of other laws. These are scenarios where a company needs to use or store personal data to comply with legal obligations.

6. Storage of Personal Data

ART IT will store the information collected on partner servers and on cloud servers of service providers contracted by ART IT, both with exclusive administration by ART IT. The providers of these services are evaluated to provide the security expected by ART IT, so that all personal data processed by ART IT is kept confidential, complete and accessible, when necessary.

ART IT uses and requires its partners to use reasonable market and legally required means to preserve the privacy of the data collected. Therefore, adopt the following precautions:

i. When necessary, ART IT uses standard and market methods to encrypt and anonymize the data collected;

ii. ART IT has protection against unauthorized access to its systems;

iii. Those who come into contact with the information are contractually committed to maintaining absolute confidentiality regarding any personal data to which they have access, under penalty of liability, under Brazilian legislation.

ART IT adopts its best efforts to preserve the privacy of user data. However, no website is completely secure and ART IT cannot fully guarantee that all information that passes through the pages is not the target of unauthorized access perpetrated through methods developed to obtain information improperly.

For this reason, we encourage users to take appropriate measures to protect themselves, such as keeping all created usernames and passwords confidential.

7. Data Sharing

ART IT may disclose personal data collected with third parties in the following situations and within the limits authorized by law:

i. For administrative purposes such as research, planning, service development, security and risk management;

ii. In the event of a merger, spin-off, acquisition or incorporation of ART IT;

iii. For the purpose of delivering the product and/or service contract with ART IT; iv. When necessary to comply with a legal obligation, determination of a competent authority or court decision.

Under these conditions, you will take all precautions to ensure that the third party processes your data in accordance with ART IT's definitions. These definitions will be set out in contracts, imposing mutual obligations and responsibilities for the security and protection of your information, as well as established penalties, to ensure that none of your rights are violated.

Our partners are companies that provide us with specialized labor to carry out the most diverse processes within our companies and also provide us with infrastructure and technology. These are the companies that help us keep our operational environment running 24 hours a day, every day, to meet your needs.

8. Legal Hypotheses for Data Disclosure

In certain circumstances, ART IT may disclose collected personal data, to the extent necessary or appropriate, to government agencies, consultants and other third parties for the purpose of complying with applicable law, court subpoena, or if ART IT believes in good faith that such action is necessary to:

i. Comply with legislation that requires such disclosure;

ii. Investigate, prevent, or take action regarding suspected or actual illegal activities or to cooperate with public bodies or to protect national security;

iii. Execution of your contracts;

iv. Investigate and defend against any third party claims or allegations;

v. Protect the security or integrity of services (e.g. sharing with companies that are experiencing similar threats);

vi. Exercise or protect the rights, property and security of ART IT and its affiliates;

vii. Protect the rights and personal safety of its employees, users or the public;

viii. In the event of sale, purchase, merger, reorganization, liquidation or dissolution of ART IT.

ART IT will inform the respective users/holders about any legal demands that result in the disclosure of personal information, unless such notification is prohibited by law or prohibited by court order or, even, if the request is emergency. ART IT may contest these demands if it deems that the requests are excessive, vague or made by incompetent authorities.

9. Data Retention

ART IT will retain all data provided, including Personal Data, as long as the user/holder's registration is active and as necessary to provide its services for the period necessary to carry out the declared purpose for which the personal data was collected, including but not limited to the security of processing, compliance with legal and regulatory obligations, the prevention of disputes regarding processing, and for the exercise of the right to defense.

You will also retain it for legitimate and essential business purposes, such as maintaining the performance of your software, making business decisions about data-driven features and offerings.

At the request of the data subject, ART IT will delete or anonymize their personal data, so that they do not identify them, except in cases where it is legally permitted or mandatory for ART IT to keep them identifiable, including situations such as the following:

In cases where there is any problem relating to the individual, such as a pending credit or an unresolved complaint or dispute, ART IT will retain the necessary personal data until the problem is resolved;

If ART IT is obliged to keep personal data to comply with its legal, tax, auditing and accounting obligations, it will retain the necessary personal data for the period required by applicable legislation;

Whenever necessary for ART IT's legitimate business interests, such as fraud prevention or to maintain the security of its users.

10. Disposal of Personal Data
11. Rights of the Holder

ART IT recognizes the rights of holders and guarantees the possibility of inquiry about the following situations:

i. confirmation of the existence of treatment;

ii. the requirement for access to data;

iii. the correction of incomplete, inaccurate or outdated data;

iv. the anonymization, blocking or deletion of unnecessary, excessive or non-compliant data, if applicable;

v. portability to others, upon express request from the holder;

vi. the deletion of data processed with the holder's consent, if requested by him/her;

vii. obtaining information about public or private entities with which ART IT shared your data, if legally permitted;

viii. information about the possibility of not providing your consent, as well as being informed about the consequences in case of refusal;

ix. the revocation of consent.

ART IT is available to comply with the rights of data holders through a request from the holder to be sent to the email address dpo@artit.com.br

In the event of a request for the deletion of personal data from the ART IT database, if it is found that there is a need to maintain such personal data, due to legal, contractual and regulatory obligations, this will be informed to the holder and the request will be denied.

12. Cookies

Cookies are files or information that may be stored on your devices when you use or access the website or ART IT products/services. Generally, a cookie contains the name of the website that originated it, its lifetime and a value, which is generated randomly.

ART IT uses cookies to facilitate use and provide greater adaptability of the content of its pages to the interests and needs of the owners. Cookies can also be used to speed up your activities and future experiences on products/services.

At any time, the user can, through their internet browser, decide to be notified about the reception of cookies, as well as block their entry into their system.

Refusal to use cookies on the ART IT website may result in the impossibility of accessing some of its areas or receiving personalized information.

13. Contact of the Person Responsible for Processing Personal Data

ART IT appointed Mr. Anderson Pettirossi Xavier as person in charge of processing personal data, who is available to resolve any queries or requests from data subjects or competent authorities via the email address dpo@artit.com.br

14. Legislation and Election Forum

This Policy will be governed, interpreted and executed in accordance with the Laws of the Federative Republic of Brazil, especially Law No. 13,709/2018, regardless of the laws of other states or countries, with the Campinas-SP court being competent to resolve any doubts arising from this document.

15. Revisions to this Policy

This ART IT Privacy Policy will be reviewed at least once every 12 (twelve) months, in accordance with its own internal rite. In case of relevant changes, users/holders will be informed about their republication when accessing our website: www.artit.com.br.

16. How to contact us

Thank you for reading the ART IT Privacy Policy. If you have any questions regarding this Policy, please contact our Data Protection Officer at the following address: dpo@artit.com.br