For better understanding of this Privacy Policy, the following definitions apply:

Personal Data: Information relating to an identified or identifiable natural person.

Data Subject: A natural person to whom the personal data being processed relates.

Sensitive Personal Data: Personal data concerning racial or ethnic origin, religious belief, political opinion, membership in a trade union or religious, philosophical, or political organization, data concerning health or sexual life, genetic or biometric data when linked to a natural person.

Processing Agents: The controller and the operator. Individuals subordinate to or linked to the processing agent, such as employees, public servants, or work teams acting under the directive authority of the processing agent, are not considered controllers or operators.

Controller: A natural or legal person, public or private, responsible for the main decisions regarding the essential elements necessary to fulfill the purpose of personal data processing, including defining the nature of the personal data processed and the duration of processing.

Operator: A natural or legal person, public or private, who processes personal data on behalf of the controller.

Anonymization: The use of reasonable and available technical means at the time of processing through which data loses the possibility of being associated, directly or indirectly, with an individual.

Anonymized Data: Data relating to a data subject who cannot be identified, considering the use of reasonable and available technical means at the time of processing.

National Authority: The public administration body responsible for overseeing, implementing, and monitoring compliance with the LGPD nationwide.

Database: A structured set of personal data established in one or more locations, in electronic or physical format.

Consent: A free, informed, and unequivocal manifestation by which the data subject agrees to the processing of their personal data for a specific purpose. It is neither the only nor the main possible legal basis for enabling data processing.

Personal Data Security Incident: Any confirmed adverse event related to a breach in personal data security, such as unauthorized, accidental, or unlawful access resulting in destruction, loss, alteration, leakage, or any form of inappropriate or unlawful processing that may pose risks to the rights and freedoms of the data subject.

International Data Transfer: The transfer of personal data to a foreign country or international organization of which the country is a member.

Processing: Any operation performed with personal data, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation, control, modification, communication, transfer, dissemination, or extraction.

Shared Data Use: Communication, dissemination, international transfer, interconnection of personal data, or shared processing of personal data databases between different entities, organizations, or systems in the execution of services or in compliance with legal and contractual obligations.