Privacy Policy

Braspress Transportes Urgentes Ltda. ("Braspress") respects your privacy and is committed to protecting your personal data in accordance with applicable national legislation.

The processing and receipt of personal data described in this Privacy Policy protects our customers and the users of our websites, applications, products, and digital services.

OUR CONTACTS

Your personal data will be processed by Braspress and its subsidiaries, headquartered at Rod. Pres. Dutra-Pista Lateral, 1574 - Cumbica, Guarulhos – SP, enrolled with the CNPJ/MF (Corporate Taxpayer Registration) under No. 48.740.351/0001-65.

WHY DO WE PROCESS AND COLLECT PERSONAL DATA?

Braspress only receives and processes, directly or indirectly, your necessary personal data when:

  • There is a legitimate interest in doing so, including for the maintenance of the commercial relationship, in the provision of its services, to ensure access to its websites, applications and social networks, to prevent and detect fraud, to ensure network and information security, and to provide services or information.
  • It has obtained your consent to process your personal data for specified, explicit, and legitimate purposes; and/or.
  • It is necessary to comply with legal obligations. The purposes of the collection and processing of personal data are related to the scope of the provision of the contracted services, the analysis and promotion of the commercial relationship, the control and management of complaints about the services provided, IT security, credit recovery and commercial risk analysis.

PERMANENCE OF PERSONAL DATA

In accordance with applicable national legislation, Braspress policy is to retain data in its own databases and only for the period necessary to fulfil the purpose for which it was collected, unless if exercised, within the deadline, the right to object, the right to erasure, or the withdrawal of consent.

CUSTOMER’S RIGHTS

At any time the customer may:

  • Request access to your data: As the data subject of the personal data, you have the right to obtain confirmation as to whether or not data concerning you are subject to processing and, if applicable, to access your personal data and to access the information provided for by law.
  • Request the rectification of data if it is inaccurate or incomplete: As the data subject of the personal data, you have the right to have Braspress, without undue delay, rectify inaccurate or incomplete data concerning you.
  • Request the deletion of your personal data: As the data subject of the personal data, you have the right to request Braspress to delete your data, and it is required to delete the personal data, without undue delay, when one of the following reasons applies, namely:
    • a) The personal data is no longer necessary for the purpose for which it was received and/or processed;
    • b) You have withdrawn your consent for data processing (in cases where the processing is based on consent), and there are no other grounds for such processing;
    • c) Objects to the data processing and there are no prevailing legitimate interests justifying the processing.
  • Request the limitation of processing of your personal data: As a data subject, you have the right to request Braspress to limit the processing of your data if one of the following situations applies, namely:
    • a) Object the accuracy of the personal data, during a period that allows Braspress to verify its accuracy;
    • b) The data processing is lawful and the data subject opposes the deletion of the personal data, and instead requests limitation of their use;
    • c) Braspress no longer needs the personal data for processing purposes, but such data is required by the data subject for the purpose of declaring, exercising, or defending a right in a legal proceeding;
    • d) If the data subject opposed the processing until it is verified that the legitimate reasons of the controller prevail over those of the data subject.
  • Oppose the processing of your personal data and the right to object to automated decisions. At any time you may object to the processing of your personal data, such as when data is processed for direct marketing purposes. Braspress does not use any form of automated decision making or profiling.
  • You are entitled to the portability of your personal data. Braspress shall provide the data subject, upon request, with personal data stored in a generally used and machine-readable format, and the data subject shall be entitled to transmit data stored in such format to other entities without interference from Braspress.
  • If the processing is conditional on your consent, you have the right to withdraw it. If consent is legally required for processing personal data, the data subject has the right to withdraw consent at any time, although this right shall not affect the lawfulness of the processing carried out on the basis of the consent previously given, nor the subsequent processing of the same data based on another legal basis, such as compliance with a contract or legal obligation to which Braspress is subject. Your requests shall be processed with special care so that we can ensure the effectiveness of your rights. You may be asked to provide proof of your identity to ensure that personal data is only disclosed to its data subject. You should be aware that in certain cases (for example, due to legal requirements) your request cannot be immediately answered. In any case, you will be informed of the measures taken in this regard within one month after the request is made.

SECURITY AND CONFIDENTIALITY MEASURES

Braspress is committed to maintaining the security, confidentiality, and protection of your data through appropriate measures to ensure their protection and prevent access by unauthorized persons. We subject our security systems and policies to periodic reviews to ensure that data is safe and secure. However, the transmission of information via the Internet is not completely secure, and we cannot absolutely guarantee the security of information transmitted via our website. We also respect the confidentiality of your information, so we do not sell, distribute, or otherwise make your data commercially available to third parties.

Braspress is committed to keeping your information confidential under the terms of the Confidentiality Policy.

WITH WHOM WE SHARE

Braspress may use third-party entities that have access to the personal data of its customers. These entities, as third parties, may have access to personal data, complying with the instructions of Braspress. These entities are essentially partners or suppliers of goods and service providers, which include providers of logistics, transportation, IT, filing, backoffice support, consulting, private security, contact center, credit intermediaries, bank promoters, among others.

Braspress ensures that such third-party entities provide sufficient guarantees for the execution of adequate technical and organizational measures so that the processing will meet the requirements of the applicable law and ensure the protection of the rights of the data subjects, in compliance with the contracts entered into with such entities.

Braspress may also transmit personal data of its customers to third parties when such communications of data are necessary or appropriate (i) under applicable law, (ii) in compliance with legal obligations/judicial orders, (iii) to answer requests from public or governmental authorities, or (iv) when you have given us your consent.

SECURITY OF USER INFORMATION

Braspress will guarantee the users of its Portal, https://www.braspress.com, the privacy in the use, as well as in the collection, traffic, and storage of information. The data collected may receive non-automated processing, in which case they shall be accessed by authorized personnel qualified to use and process them, in accordance and in observance with the purposes intended with their collection.

Braspress undertakes to take all reasonable measures to maintain the absolute secrecy and strict confidentiality of Users' information, and is prohibited from assigning, transforming, providing, directly or indirectly, and/or allowing third parties to access, in any way, such information without the prior consent of the Users, unless (i) in the events provided for in this Privacy Policy; (ii) the disclosure to companies belonging to the same group as Braspress; (iii) disclosure due to judicial or competent authority order; and/or (iv) in other cases contemplated by law or regulation applicable to Braspress. If User information must be disclosed in order to comply with the law, a court order or a competent body, the Users shall be notified of this obligation, if Braspress is not legally impeded from doing so, so that they may take the appropriate protective or restorative measures. Nevertheless, such information shall be disclosed only in the strict terms and to the extent strictly required for its disclosure.

Notwithstanding the security measures adopted, Braspress shall not be responsible for any losses resulting from the violation of the obligations assumed herein due to the occurrence of a fact or situation not attributable to Braspress, such as, but not limited to, the action of third parties that use public networks or the Internet, subverting the security systems to access the Users' information, as well as the hypothesis of improper use or misuse of the Portal https://www.braspress.com by Users.

ECONOMIC GROUP, USER STRUCTURE, TYPES OF PERMISSIONS AND CHANGE LOG

Braspress works with the concept of Economic/Commercial Group whenever there is a commercial negotiation for a grouping of CNPJs, each Economic Group centralizes the negotiation in a representative called Freight Decision Maker.

There are three types of website Users, which are:

Master User: he Freight Decision Maker shall play this role on the website as soon as he/she is registered by the Commercial team in the internal Braspress system, his/her access shall be exclusive, and he/she shall be able to define through the session Manage Users and Accesses section of the website in a personalized way for each CNPJ of the economic group, who shall have access to their billing data, transactions, and creation of new users, including delegating the creation of new users to an Administrator User.

Administrator Users: Created by the Master User, they can create new users and define by the session Manage Users and Access of the website, in a personalized way, who shall have access to their billing and transaction data, only for the CNPJs to which they have access.

Common Users: Can be created and have their accesses and CNPJs defined by the Master User or Administrator Users, cannot create new users and do not have access to the Manage Users and Accesses section of the website, nor to the Change Log.

Change Log: In the Change Log session, Master Users and Administrators can view who created each access for each CNPJ of the Economic Group.

Website authentication: Each user's authentication on the website must be done by email and password, and each user must keep his/her password and, consecutively, transaction and billing data, confidential.