PRIVACY POLICY
In carrying out its activities, CEENTAA Associação Cultural e Ambiental will need to collect some personal data from its users. Examples of this are your name and email address.
As a data controller, CEENTAA processes and protects personal data with respect to them and in accordance with the rules and principles contained in the GDPR – General Data Protection Regulation - Regulation 2016/679 of April 27, with effect from May 25, 2018.
For what purposes are the data subject's personal data collected?
The data collected through the Member Area or by registering for activities through the website are the name and email address and are intended exclusively for user registration and sending informative emails and newsletters about the event or the association's activity.
Does CEENTAA use the personal data collected for direct marketing?
Yes, through e-mail or newsletter, for which explicit, unequivocal and informed consent is required, by checking the option indicated on the website. The website does not sell or trade personal data with third parties.
Who has access to personal data?
CEENTAA does not disclose any personal data of its users to third parties without their consent, except when required by law.
What are the rights of data subjects?
The data subject has the following rights, which he or she may exercise at any time: access to data; rectification, erasure, limitation on processing, portability and opposition to processing.
The data subject also has the right to a response from the controller, in this case within 30 days.
The request to exercise rights must be sent to the email geral.ceentaa@gmail.com.
If CEENTAA does not respond to the request or does not respond, the holder may complain directly to the supervisory entity, CNPD – National Data Protection Commission - www.cnpd.br.
CEENTAA reserves the right to update or modify its Privacy Policy at any time, in particular, in order to adapt it to legislative changes.
Definitions:
Personal Data (art. 4, 1) - “information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers or one or more specific elements of physical, physiological, genetic, mental, economic, cultural or social of that natural person”
Data processing (art. 4, 1) – “An operation or set of operations carried out on personal data or on sets of personal data, by automated or non-automated means, such as collection, recording, organization, structuring, conservation, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, broadcast or any other form of availability, comparison or interconnection, limitation, erasure or destruction.”
Data holder – individual person to whom the personal data refers.