PeopleDBA Consulting Privacy and Data Protection Policy
Version: 2024v1 | Publication: August 21, 2024
PeopleDBA Consulting recognizes the importance of privacy and personal data protection. In compliance with the General Data Protection Law (Law No. 13.709/2018 - LGPD), we present our personal data processing policy.
This document describes how we collect, store, use, share and protect your information, demonstrating our commitment to the security and confidentiality of your data.
We recommend reading this document in full to understand which personal data we process, the purposes, security measures and your rights as a data subject.
PeopleDBA Consulting Commitment
PeopleDBA Consulting is committed to protecting the personal data under its responsibility, employing security measures and best practices to ensure the confidentiality, integrity and availability of information. We recognize the risks related to the processing of sensitive personal data and, therefore, we give special attention to this information.
The guidelines established here must be followed by all employees, partners and third parties who, on behalf of PeopleDBA Consulting, have access to personal data, regardless of the form of engagement or means of access.
All PeopleDBA Consulting contracts and policies must refer to this Privacy and Data Protection Policy, ensuring compliance with the principles described here.
Definitions
I. Personal Data: Information related to an identified or identifiable natural person.
II. Sensitive Personal Data: Personal data about racial or ethnic origin, religious belief, political opinion, membership of a union or of a religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data, when linked to a natural person.
III. Anonymized Data: Data relating to a data subject that cannot be identified, considering the use of reasonable and available technical means at the time of its processing.
IV. Database: Structured set of personal data, established in one or several locations, in electronic or physical support.
V. Data Subject: Natural person to whom the personal data being processed refer.
VI. Controller: Natural or legal person, under public or private law, who is responsible for decisions regarding the processing of personal data.
VII. Processor: Natural or legal person, under public or private law, who processes personal data on behalf of the controller.
VIII. Processing: Any operation carried out with personal data, such as those relating to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.
IX. Consent: Free, informed and unambiguous expression by which the data subject agrees to the processing of their personal data for a specific purpose.
X. Deletion: Exclusion of data or a set of data stored in a database, regardless of the procedure used.
XI. Shared Use of Data: Communication, dissemination, international transfer, interconnection of personal data or shared processing of personal databases by public bodies and entities in the fulfillment of their legal powers, or between them and private entities, reciprocally, with specific authorization, for one or more types of processing permitted by these public entities, or between private entities.
Principles
PeopleDBA Consulting is committed to processing personal data in accordance with the following principles:
Purpose: We process personal data only for legitimate, specific, explicit purposes informed to the data subject, without the possibility of further processing incompatible with these purposes.
Adequacy: We process personal data in a manner compatible with the purposes informed to the data subject and in accordance with the context of the processing.
Necessity: We limit the processing of personal data to the minimum necessary to achieve its purposes, covering relevant, proportional and non excessive data.
Free Access: We guarantee data subjects easy and free consultation on the form and duration of processing, as well as on the completeness of their data.
Data Quality: We guarantee data subjects the accuracy, clarity, relevance and updating of data, according to the need and for the fulfillment of the purpose of the processing.
Transparency: We provide data subjects with clear, accurate and easily accessible information about the processing and the respective processing agents, subject to commercial and industrial secrets.
Security: We use technical and administrative measures capable of protecting personal data from unauthorized access and from accidental or unlawful situations of destruction, loss, alteration, communication or dissemination.
Prevention: We adopt measures to prevent the occurrence of damage due to the processing of personal data.
Non Discrimination: We guarantee that personal data is not used for unlawful or abusive discriminatory purposes.
Accountability: We assume responsibility for compliance with the principles of the LGPD, committing to demonstrate the adoption of effective measures for the protection of personal data.
Personal Data Security
PeopleDBA Consulting implements information security measures to protect the personal data under its responsibility, including:
Access Controls: We implement access control policies to ensure that only authorized persons have access to personal data.
Protection against Unauthorized Access: We use firewalls, encryption and other security technologies to protect personal data against unauthorized access.
Vulnerability Management: We perform regular vulnerability scans on our systems and applications to identify and fix possible security flaws.
Training and Awareness: We offer regular training to our employees on information security and personal data protection.
Collection and Processing of Personal Data
PeopleDBA Consulting collects and processes personal data for the following purposes:
* Provision of Services: We collect and process personal data to provide the services contracted by our clients, including software manufacturing, Hadoop Big Data services, ETL routine maintenance, AWS creation and maintenance, cloud services, process mapping, data monitoring and infrastructure.
Marketing and Communication: With your consent, we may use your personal data to send newsletters, informational materials and other marketing materials about our services.
Improvement of Our Services: We may collect and analyze data on how you use our services to improve your experience and develop new features.
Compliance with Legal Obligations: We may collect and process personal data to comply with legal and regulatory obligations.
Sharing of Personal Data
PeopleDBA Consulting may share personal data with third parties in the following situations:
Service Providers: We share personal data with outsourced companies that assist us in providing services, such as data hosting companies, email marketing platforms and information security solution providers.
Compliance with Legal Obligations: We may share personal data to comply with court orders, requests from government authorities or other legal obligations.
Protection of Rights: We may share personal data to protect the rights, property or safety of PeopleDBA Consulting, our clients, employees or third parties.
We ensure that the third parties with whom we share personal data are obliged to protect the confidentiality and security of the information, in accordance with this Privacy Policy and applicable legislation.
Data Subject Rights
PeopleDBA Consulting guarantees the following rights to personal data subjects:
* Confirmation and Access: You have the right to confirm whether we process your personal data and to request access to it.
Correction: You have the right to request the correction of your personal data if it is incomplete, inaccurate or outdated.
Anonymization, Blocking or Deletion: You have the right to request the anonymization, blocking or deletion of your personal data, except in cases of mandatory retention by law.
Portability: You have the right to request the portability of your personal data to another service or product provider, upon express request.
Information about Sharing: You have the right to request information about the public and private entities with which we share your personal data.
Revocation of Consent: You have the right to revoke your consent to the processing of your personal data at any time.
Objection: You have the right to object to the processing of your personal data if you disagree with the legal basis used.
Personal Data Officer
PeopleDBA Consulting has appointed a Data Protection Officer (DPO) to act as a communication channel between the company, data subjects and the National Data Protection Authority (ANPD). The DPO is responsible for:
Advising the company on the application of the LGPD.
Responding to requests from data subjects.
Collaborating with the ANPD.
You can contact our DPO through the following email address: contato@peopledba.com
General Provisions
This Privacy and Data Protection Policy may be updated periodically. The most recent version will always be available on our website.
If you have any questions or requests related to the protection of personal data, please contact us through the email contato@peopledba.com.
