1. INTRODUCTION: WHY A PRIVACY POLICY
- 1. Hi! Thank you for connecting to the Institute REDI (Respect, Equity, Diversity and Inclusion)! Through this document (“Privacy Policy”), you will have access to all information possibilities for processing your personal data by REDI. Therefore, we recommend that you read this Policy carefully.
- 1.1. You must know our Privacy Policy to browse our website, answer our forms and if communicate with us, considering that these activities may possibly involve data processing.
- 1.1.1 The Privacy Policy establishes the conditions under which the REDI performs data processing while browsing the website REDI and filling in contact forms / links, as well as information about your rights as a data subject.
- 1.1.2. This Privacy Policy indicates how to collect, access and use of this information, by “ Respect, Equity, Diversity and Inclusion ”(REDI) in STEM, owner of intellectual property on the website, content and other digital assets or not, related to the website of the REDI, in its relationship with individuals or legal entities.
- 1.2. In addition, for the User to be able to access and use (either by simple navigation, filling out forms, sending messages or others), it is necessary to accept, freely and expressly, this Privacy Policy. In this way, the User can decide for the use or not of the Website / Page with much more awareness and transparency.
2. PERSONAL DATA THAT REDI COLLECTS
- 2.1. For the purposes of this Policy and applicable laws, REDI understands as personal data any information that identifies the User or allow its identification. On the other hand, anonymized data or aggregates are not considered personal data.
- 2.2. All the data requested by REDI is of some use, related to the Services provided for the sole purpose of defining the audience and optimizing the website/page.
- 2.3. REDI may collect the following data, which User already gave consent through these Policies and acceptance expressed:
- 2.3.1. Navigation-related data: data such as access to REDI page, geolocation and IP address for the purpose of create website access statistics, which remain stored for 26 (twenty six) months.
- 2.3.2. Public data: personal data whose access is public, or that have been made manifestly public by their owner, including any sensitive data contained in those documents and publicly accessible content (as defined by the Brazilian legislation, such as those that reveal religious, political or sexuality, philosophical belief, participation in political movements or health or genetic information).
- 2.3.3. Registration data: data such as name, surname, e-mail, phone number, email address, city of residence, age and company / institute where the user works, as detailed bellow.
- 2.3.4. Anonymous data: REDI can request information and User opinions that will not identify you.
3. HOW REDI COLLECTS USER'S PERSONAL DATA
- 3.1. REDI collects the User's personal data using the following ways:
- 3.1.1. When the User sends a contact message: at that time basic identification data is collected, such as name, e-mail, subject and message, with the sole intention of making the contact, enabling REDI to respond to the message sent.
- 3.1.2. When the User requests materials from REDI: at this moment basic identification data is collected, such as name, email, age, institution and company where the user works and how it arrived at REDI, in order to effect the delivery of requested materials and generate leads.
- 3.1.3. Through forms: at this moment information such as name, date of birth, email or any others that identify the User/Partner are collected. Responses to questions on the form will remove all information from identification and will be stored on an encrypted website and protected by a password owned by the Institute REDI (Google Drive), which will be accessible only by the study team.
4. FOR WHAT PURPOSES REDI USES USER PERSONNEL DATA
- 4.1. REDI handles the personal data of Users for the following purposes:
- 4.1.1. Provide and customize REDI Services and improve continuously the browsing experience of its Users.
- 4.1.2. Generate statistical analysis and provide customized experiences for the User with website optimization.
- 4.1.3. Lead generation and audience definition.
- 4.1.4. Respond to court requests (e.g. court order, search warrant or subpoena), if required by law or by court decision, and comply with applicable law requirements.
- 4.1.5. Other purposes, in the form and within the limits of consent correspondent granted by the User, and within the limit of what is permitted or required by law.
5. IN WHICH CASES DOES REDI SHARE USERS PERSONAL DATA
- 5.1. REDI will share data collected only to achieve the purposes below:
- 5.1.1. Assist in offering or operating the Platform and Services.
- 5.1.2. Analyse and solve technical and related fraud and security problems.
- 5.1.3. Enable and improve the provision of the Services, being that in such cases the processing of personal data will take place in compliance with the terms of this Policy and with the same security level indicated by it.
- 5.1.5. Respond to legal requests and comply with requirements of applicable laws, situations in which data may be shared by REDI with government officials and judicial authorities, or any other related authority.
6. COOKIES
- 6.1. Technologies like "cookies" - a small data file - They are NOT used during User navigation.
7. STORAGE AND SECURITY OF PERSONAL DATA
- 7.1. When handling User data, REDI will endeavour to store and keep them safe, respecting current legislation.
- 7.2. REDI allows Users' personal data to be accessed by its members, employees and other third parties only to the necessary extent to carry out their activities, in according to express instructions and under contractual obligation to confidentiality of the processed data. With this, we seek to protect your data against unauthorized access, accidental or unlawful destruction, loss, alteration of communication or any inadequate or illicit treatment.
- 7.3. As for the security adopted by REDI’s hosting server there is native implementation of HTTPS certificate for protection of Connection, Password Protection of Directories and Error Pages, Web File Manager, Hotlink Protection, IP Block Manager, URL redirection via htacces. Server monitored 24/7/365.
- 7.4. Backup and Validation of Pages: Automated Application Diary and Database, with CodeGuard Professional. Deployment of Google Search Console and Analytics for compliance validation and usage statistics. Implementation of Recaptcha for validation of data insertion.
8. TRANSFER TO OTHER COUNTRIES
- 8.1. REDI as a company aligned with practices and current technologies information, and in relation to the data processed on its website, store Users' personal data on servers located outside national territory. In such cases, Users authorize personal data is storage in accordance with the rules set out in this Policy.
- 8.2. In the cases mentioned above, REDI undertakes to respect applicable law to ensure data protection of Users, through practices such as the celebration of appropriate contractual arrangements.
9. USERS 'RIGHTS
- 9.1. REDI will adopt appropriate technical and organizational measures to fulfil its obligations regarding the rights of Users as holders of personal data. In this sense, REDI undertakes to make their rights as viable as possible as provided by law, such as the following:
- 9.1.1. Confirmation: right to be informed about the existence of treatment.
- 9.1.2. Access: right to request access to personal data treated by REDI.
- 9.1.3. Correction: right to request data change personal data treated by REDI whenever they are incomplete, inaccurate or outdated.
- 9.1.4. Restriction: right to request anonymization, blocking or the elimination of unnecessary, excessive or processed data by the REDI not complying with data protection legislation personal.
- 9.1.5. Deletion: right to request data deletion data processed by REDI with the User's consent.
- 9.1.6. Information: right to be informed about public entities and private organizations with which REDI shared data, on the possibility of not providing consent and on the consequences of this denial.
- 9.1.7. Revocation of consent: right to revoke the consent at any time through expressed manifestation, by free and facilitated procedure.
- 9.1.8. Review of automated decisions: possibility of review of decisions made by REDI based on treatment automated process of personal data that affects your interests.
- 9.2. The User must contact REDI through the e-mail [email protected] below if you are interested in exercising any of the rights listed above.
- 9.3. In relation to the request to delete personal data from Users, REDI will comply with requests to delete personal data upon request or under legal obligations. In that case, these data will be permanently deleted, hypotheses of mandatory record keeping provided for by law, and cases where such maintenance is permitted by law.
10. GENERAL PROVISIONS
- 10.1. This Privacy Policy consists of the valid and effective version information about the treatment of Users' personal data by REDI. This version is responsible for governing all relations between Users and REDI, except when services are used have their own Privacy Policies, respecting the rights acquired, perfect legal acts and res judicata.
- 10.1.1 The version of the Privacy Policy in force will always be the most recent. To identify the version date in effect, the User you should check the “Modified in” section at the top of this document.
- 10.2. REDI reserves the right to update and modify periodically any of your legal documents, including this Privacy Policy.
- 10.2.4. If the User does not agree with this Policy, he must interrupt navigation of the REDI website, as well as refrain from fill in available forms.
- 10.3. The provisions of this Privacy Policy will remain in effect with any form of termination, which occurred for any reason, of so as to continue to have an effect on the parties for as long as subsequent legal relationships.
- 10.4. If there are any doubts about this instrument or about what it encompasses, the User can contact via email [email protected]
- 10.5. THE USER ACKNOWLEDGES THAT THE PECULIARITIES ABOUT THE COLLECTION, USE AND SHARING OF DATA FROM THE REDI ARE SUFFICIENTLY DESCRIBED IN THIS POLICY AND THAT REDI DULY DID INFORMATION DUTY.
- 10.6. AFTER CAREFULLY READING THIS POLICY, THE USER CONSENT IN A FREE, INFORMED, UNEQUIVOCAL AND EXPRESSED WAY THIS POLICY AND ACCEPTS ALL ITS PROVISIONS.