Privacy Policy

1. OBJECTIVE

The Privacy and Data Protection Policy aims to inform the data subjects about the measures used by Grupo Bertolini for the collection, storage, use, or any other operation of personal data processing carried out on Grupo Bertolini websites, as well as when purchasing our products on third-party online stores.

Grupo Bertolini is committed to privacy and the protection of personal data, and therefore establishes with data subjects the commitment to comply with Brazilian Personal Data and Privacy Legislation – Law No. 13,709/2018. 

2. SCOPE

To all individuals who interact and share their data with the companies of the Bertolini SA Group.

3. ACRONYMS AND DEFINITIONS

LGPA – General Data Protection Law
DPO – Data Protection Officer

4. WHO CONTROLS YOUR PERSONAL DATA?

Grupo Bertolini, through its headquarters BERTOLINI S/A, registered under CNPJ 87.556.650/0001-04, with administrative office at Rua Pedro Dalla Costa 565, Annex Building I – Bairro Pradel, in Bento Gonçalves/RS, Brazil, CEP 95.708-260, acts as the controller of your personal data on this website. Grupo Bertolini is composed of the following companies:

1. BERTOLINI TUBES – CNPJ 87,556,650/0013-30, Rua Pedro Dalla Costa, 565 Pavilion A, Pradel neighborhood, in the municipality of Bento Goncalves/RS; ZIP Code: 95,708-260; 
2. EVVIVA BRANCH – CNPJ 87,556,650/0014-10, Rua Pedro Dalla Costa, 565 Pavilion B, Pradel neighborhood, in the municipality of Bento Goncalves/RS; ZIP Code: 95,708-260;
3. BERTOLINI STEEL FURNITURE – CNPJ 87,556,650/0015-10; Highway Br-259, no. KM51, Pavilion A, Santa Helena, in the municipality of Colatina/ES. 
4. STORAGE SYSTEMS BRANCH – CNPJ 87,556,650/0016-82, Highway Br-259, no. KM51, Pavilion B, Santa Helena, in the municipality of Colatina/ES. 
5. LOGBER LOGISTICS AND CARGO TRANSPORTATION LTDA. – CNPJ 12.157.760/0001-96; Rua Pedro Dalla Costa, 3162 Annex Building I, Pradel neighborhood, in the municipality of Bento Goncalves/RS; CEP: 95.708-260;

Grupo Bertolini processes your personal information to comply with legal, statutory, and contractual obligations and to provide our products and services. We will never collect unnecessary personal data and will not process your data in any other way except as specified in this notice.

The Privacy and Data Protection Notice does not apply to third-party applications or websites you may use, including any applications or websites linked to our products and services. Please review the terms and policies of third-party applications or websites before using or contracting them.

By clicking the acceptance button, you acknowledge the terms and conditions of this Privacy and Data Protection Notice, providing your free, informed, and unequivocal consent for the processing of your personal data for the purposes specified herein.

5. DATA COLLECTED BY GRUPO BERTOLINI SA

The information collected on the website depends on the user’s interaction with the site. The data collected and the purposes are as follows:  

• Name;
• E-mail;
• Full address;
• Mobile phone; 
• Business phone;
• Field of activity;
• Position;
• CPF (Brazil only);
• Profession; 
• Institution and/or linked company;
• Profile ID;
• User password;
• Cookies (according to the cookie policy available on the website of each of our brands).

If products are purchased in physical stores or on third-party websites, the information will be received solely to process the purchase and issue tax documents. In these situations, the data collected by Bertolini are: 

• Name
• CPF (Brazil only)
• Address
• Telephone

6. HOW PERSONAL DATA IS COLLECTED

1. Through Data Collection Forms

   When provided by data subjects, personal data are collected, stored, used, and processed by Grupo Bertolini through this website when performing the following actions:

   • Providing information for website registration;
   • Contact form for sending messages on the website; 
   • Newsletter subscription form; 
   • Contact form for requesting quotes and scheduling;
   • Form for sending service quotations; 
   • Contact form for tracking online orders;
   • Through WhatsApp contact button; 
   • Submission of resumes and job application registrations;

   Data subjects are responsible for the accuracy of the information provided to Grupo Bertolini. When providing third-party personal data, data subjects must ensure they have authorization, and Grupo Bertolini is not responsible for such actions.

2. Through Google Analytics

   Google Analytics is used to analyze the behavior of visitors to Grupo Bertolini’s website. The data collected is used to track the number of visits, their origin, average time spent on the site, devices used, among others. Some of these data are also used for marketing purposes, including remarketing and demographic or interest reports.

   To change how Google Analytics collects and uses your personal information, you can install the browser add-on to disable Google Analytics at https://tools.google.com/dlpage/gaoptout . 

3. Information collected from other sources

   Personal information about the user may be collected from other sources, such as service providers and partners, when they have legal permission to share personal information. For example, if you register for services through another website, that site may provide us with your personal information.

4. When purchasing products in physical stores or online

   When you purchase products in physical stores or online, Grupo Bertolini is not directly responsible for collecting the data but receives it to process the purchase and issue tax documents, as well as to comply with regulatory obligations.

7. HOW YOUR PERSONAL DATA IS USED

Grupo Bertolini will not disclose, share, or sell your data without your consent, unless required by law. We retain your data only for the time necessary and for the purposes specified in this notice. Whenever you consent, we will provide promotional and marketing offers; consent to these offers can be withdrawn at any time.  

Grupo Bertolini does not collect sensitive personal data through its website. If data subjects voluntarily provide sensitive personal data, for example, in message fields, they expressly consent to the processing of this data in accordance with this Privacy and Data Protection Notice. 

Sensitive personal data eventually collected by other means by Grupo Bertolini will be processed for the specific purpose informed and authorized by the data subjects. 

While using Grupo Bertolini’s website, if data subjects are redirected via link to another site, they should check the privacy policy of the visited site. Grupo Bertolini is not responsible for the collection and use of personal data or the content of third-party sites.

8. PURPOSE OF USING PERSONAL DATA

Grupo Bertolini commits to using the personal data collected from data subjects for the following purposes:

1. 1. • Conducting statistics on the activities and behavior of data subjects;
      • Adding content to the website and Grupo Bertolini’s activities; 
      • Publishing Grupo Bertolini content, as well as events organized and/or promoted by Grupo Bertolini; 
      • Managing registrations for events organized and/or promoted by Grupo Bertolini;
      • Managing user subscriptions to news clipping available on the website;
      • Registering data subjects in the mailing list;
      • Sending institutional communications;
      • Institutional marketing promotion;
      • Recruitment of professionals and/or interns;
      • Safeguarding rights and obligations related to Grupo Bertolini’s legitimate interest;

The legal basis for the processing of personal data is consent for the collection, storage, and processing of data to meet the purposes proposed by GRUPO BERTOLINI, and it is voluntary. If data subjects decide not to consent to the collection of data, the only consequence will be the non-provision of services and/or facilities offered by Grupo Bertolini.

For the acquisition of Grupo Bertolini products, the legal basis is that necessary for the execution of a contract or preliminary procedures to the contract. 

While navigating this website, Grupo Bertolini will not process personal data without your consent, except in legal circumstances where it is necessary or mandatory, including: 

1. 1. • compliance with legal or regulatory obligations;
      • execution of a contract;
      • regular exercise of rights in judicial, administrative, or arbitral processes; 

Grupo Bertolini guarantees that it does not commercialize the personal data of data subjects. However, personal data may be shared with external agents contracted by Grupo Bertolini for the provision of technical services and/or support for the group’s activities, exclusively to achieve the purposes specified herein. 

Respecting the personal data of data subjects, Grupo Bertolini requires external agents to process data in accordance with their own confidentiality and security parameters, observing this Privacy and Data Protection Notice.

9. USER RIGHTS

As the controller of the personal data of the Grupo Bertolini website users, the General Data Protection Law establishes a series of rights for data subjects, which are as follows:

1. 1. • Confirmation of the existence of processing;
      • Access to data;
      • Correction of incomplete, inaccurate, or outdated data;
      • Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
      • Data portability, observing trade and industrial secrets;
      • Deletion of personal data processed with the consent of the data subject;
      • Information on public and private entities with which the controller shared data;
      • Information about the possibility of not providing consent and the consequences of refusal;
      • Revocation of consent.

         

Data subjects may also object to the processing of their data for legitimate reasons, as well as request anonymization, blocking, or deletion of data they consider unnecessary and/or excessive. 

If desired, data subjects can request to be removed from the Grupo Bertolini website mailing list and stop receiving any informational emails.

To exercise their rights, data subjects must send an email or letter with their request to the contact information provided in item 11 – Contact Information (below). 

When a request is received to exercise any of the above rights, the data subject may be asked to verify their identity before the request is processed to ensure that the data is protected and kept secure.

When products and/or services are acquired in physical stores or online commerce, the rights listed above must be exercised directly with these third parties, who are the main controllers of the data collected on those occasions. Data subjects should ensure they read the specific privacy notices related to purchases from third-party commerce.

10. DATA STORAGE

Grupo Bertolini stores the personal data of data subjects securely, only for the period necessary to carry out the operations established herein, in compliance with Brazilian legislation, including the Brazilian Civil Rights Framework for the Internet, which requires storing internet access records for six (6) months.

Customer-related data is stored for the duration provided in the contract and/or the company’s General Terms and Conditions. 

In the case of data storage resulting from newsletter subscriptions, Grupo Bertolini will store the provided data for this purpose until the respective unsubscription request from the data subject. 

Data storage will comply with this Privacy Notice and/or any instruments agreed with the data subjects. However, data may be stored for a longer period for legal reasons or by court order. 

Data processed for website access (cookies) are described in the cookie notice, according to the cookie policy available on each of our brand websites. 

It is important to highlight that the Controller may be required to retain Personal Data for a longer period whenever obliged to do so to comply with a legal obligation or an order from an authority. 

Once the retention period expires, or when the data subject revokes consent, Personal Data will be deleted. Thus, the right to access, delete, correct, or port data cannot be enforced after the retention period expires and/or after consent is revoked. 

Under personal data protection legislation, data subjects may revoke consent previously granted to Grupo Bertolini for processing their personal data. This right must be exercised through the channels provided in item 11 – Contact Information (below). 

Grupo Bertolini stores data on its own and/or contracted partner servers, located in Brazil and/or abroad, and also on cloud servers (cloud computing), meaning personal data of data subjects may be transferred and processed outside Brazil.

11. SECURITY

Grupo Bertolini is committed to securing the processing of users’ personal data through the implementation of advanced information technology mechanisms, which adopt technical, physical, and logical security procedures normally used in the market. These procedures aim to protect personal data against loss, misuse, alteration, destruction, or leakage. 

Any Grupo Bertolini member who has access to collected information is informed about its confidential nature and commits to acting in accordance with this Policy. 

Data of data subjects is stored encrypted. Information is protected with SSL (Secure Socket Layer) technology so that when it travels between our servers and the user’s computer, it remains confidential. This technology prevents the information from being transmitted or accessed by third parties – to be validated with the website provider. 

Data subjects should adopt necessary preventive measures when using the internet, including using antivirus software, personal access passwords, and other technical and managerial measures to prevent failures, intrusions, or other issues when accessing the tools provided by the company. Grupo Bertolini is not responsible for damages resulting exclusively from the actions of data subjects and/or third parties.

12. DATA PROTECTION OFFICER AND CONTACT INFORMATION

The identity and information of the Data Protection Officer (DPO) of Grupo Bertolini are provided below:

Officer: Sheila Pastore

Email: [email protected] 

Any complaints or communications from DATA SUBJECTS must be directed to the Officer identified above. The Officer is duly authorized by GRUPO BERTOLINI to provide clarifications and/or take measures regarding the processing of personal data by Grupo Bertolini.

13. CHANGES TO THIS NOTICE 

This Privacy and Data Protection Notice may be modified at any time, with prior communication through the Grupo Bertolini website (https://www.bertolini.com.br )

14. RESPONSIBILITIES AND AUTHORITIES

The responsibilities and authorities for the execution of this policy are as follows:

15. REVISION HISTORY | APPLIED CONTROLS