Privacy Policy
Lami Brasil is committed to complying with laws that protect the privacy of customer and general public data. This page is designed to provide information on how we adhere to data protection regulations, what information we collect while you navigate our communication channels, and how this information is collected, used, and protected by us, in compliance with Law No. 13,709/2018 (General Data Protection Law – “LGPD”). The use of our products, services, platforms, and other means of interaction is subject to acceptance of this Privacy Policy, including with regard to our employees.
- Sources of Personal Data Lami Brasil will have access to personal data in the following situations:
- Through interaction with a customer: When the Customer provides and inputs personal data necessary for the provision of services and use of products provided by Lami Brasil.
- Interaction with its employees: When employees and collaborators of any nature use its systems and platforms to fulfill duties and obligations arising from their contractual relationship.
- Types of Personal and Sensitive Personal Data Collected Without prejudice to the data commonly collected and processed from its employees for the purposes of their legal relationship, Lami Brasil may also collect the following personal data:
- Names and contact information, such as first and last name, email address, postal address, phone number, and other similar types of contact information, such as banking details;
- Device information, such as information about your device, including IP address, location, or provider;
- Usage and browsing history information, such as information on how the User navigates within our services, their browsing history, and which elements of Lami Brasil’s services are most used;
- Sensitive personal data, if collected by Lami Brasil, will have its purpose separately informed to the User, who must consent to Lami Brasil using it for specific purposes. In case of disagreement, the data will be automatically deleted from Lami Brasil’s databases. Lami Brasil does not collect data from minors, except with the authorization of parents or guardians. If data is collected without authorization, as soon as Lami Brasil becomes aware, it will immediately delete the collected data, in accordance with the Terms of Use and this Privacy Policy.
- Use of Collected Personal Data When collected, Lami Brasil will use personal data to:
- Provide and improve contracted services;
- Comply with a legal or regulatory obligation;
- Manage the relationship with Users;
- Configure and manage User accounts;
- Provide technical assistance, support, and training to the User;
- Contact Users;
- Conduct internal investigation and development purposes and to improve, test, and enhance the features and functions of Lami Brasil’s services;
- Provide Users with marketing, advertising, and publicity, including from Lami Brasil’s partner companies, as permitted by law;
- Meet internal and external audit requirements, including Lami Brasil’s information security obligations;
- Send email messages to: a) confirm or cancel requests made through the platform; b) communicate future changes to this policy; and c) disclose updates, changes, additions of new data sources, and platform improvements;
- Exercise Lami Brasil’s rights, including but not limited to privacy, security, networks, systems, and properties of Lami Brasil and/or third parties;
- Comply with requests from courts, law enforcement authorities, regulatory bodies, and other public institutions and governmental authorities, including but not limited to applicable rules outside the User’s country of residence;
- Exercise Lami Brasil’s rights and defend itself against potential lawsuits, as well as comply with any applicable legislation or regulation to Lami Brasil or third parties we work with, and ensure proper compliance with contracts entered into between Lami Brasil and its Users.
- Sharing of Personal Data with Third Parties The User accepts and agrees that Lami Brasil may share their personal data with the following categories of recipients:
- Companies that provide access or are responsible for the registration on which the User depends;
- Partner companies, such as third-party service providers and other companies that assist us in offering our services or that may take action on our behalf, protecting our rights, users, systems, and services;
- Third parties to whom Lami Brasil owes accountability or has authorization to disclose information by law (e.g., government agencies, regulatory agencies, the judiciary, and other public authorities);
- Third parties to participate in the sale, merger, acquisition, restructuring, joint venture, assignment, or transfer of part or all of Lami Brasil’s business, in which case the User’s data will be considered an asset and transferred in any potential transaction;
- Third parties that need the data to protect Lami Brasil’s rights;
- Any individual or legal entity to whom the User requests the portability of their data.
- International Transfer of Personal Data Lami Brasil has no intention of transferring any personal data collected from Users outside Brazil. However, if such a transfer is necessary, Users will be informed in advance via email, at which point they may accept or reject the transfer. In case of disagreement, Lami Brasil may restrict their access rights. The international transfer of data described in the General Data Protection Law (LGPD) requires guidelines to be established by the National Data Protection Authority (ANPD), and once defined, Lami Brasil commits to fully complying with them.
- Protection of Personal Data Lami Brasil uses appropriate technologies and procedures to protect any personal data collected (including administrative, technical, and physical safeguards) based on the level of risk and the service provided, with a legally responsible team to manage data securely in accordance with legal provisions, regulatory requirements, technological changes, and other relevant factors that may influence how personal data is protected. Lami Brasil employs all reasonable market efforts to ensure the security of its systems and collected data, using highly qualified and reputable internet providers, database servers, and storage, as well as SSL security certificates and software to protect against unauthorized system access, and standard methods to encrypt and anonymize collected data. This Policy represents Lami Brasil’s effort to safeguard User information. However, due to the nature of the internet, it is not possible to guarantee that malicious third parties will not succeed in improperly accessing stored information. Therefore, if this occurs, Lami Brasil will be liable within the limits provided by law. Lami Brasil, within a reasonable period to be defined by the National Data Protection Authority (“ANPD”), must notify the ANPD and the affected User of any security incident that may cause significant risk or harm to the User, including at least:
- A description of the nature of the affected personal data;
- Information about the data subjects involved;
- Details of the technical and security measures used to protect the data, respecting commercial and industrial secrets;
- The risks related to the incident;
- The reasons for any delay, if the communication was not immediate; and
- The measures that were or will be taken to reverse or mitigate the effects of the damage.
- Data Processing and Lami Brasil’s Responsibility Lami Brasil’s responsibility for data processing will be as follows:
- When personal data is provided directly by its Customers, Lami Brasil will act as a Data Operator, without interfering in the processing method indicated by the Data Controller, but in accordance with the LGPD;
- Lami Brasil will be the Data Controller of its employees’ personal data, processing them based on Contract Execution, Compliance with legal or regulatory obligations, and, in specific and determined situations, Consent. Lami Brasil may adopt different legal bases for different types of personal data processing.
- Personal Data Retention Period Lami Brasil calculates the retention period for personal data based on the following criteria:
- The period necessary to fulfill the purpose of the collection;
- The moment when the Customer/User ceases to use Lami Brasil’s services;
- The moment when consent is revoked or the data subject requests the deletion of personal data;
- The time necessary to demonstrate compliance with Lami Brasil’s duties and obligations;
- The period required by law, regulations, judicial decisions, etc.;
- Determination by the National Data Protection Authority;
- Compliance with legal or regulatory obligations by the Controller;
- Proper contract execution;
- Needs related to compliance with the legal system, as well as for potential legal disputes;
- Transfer to a third party, provided the data processing requirements set out in law are respected; or
- Exclusive use by the controller, with third-party access prohibited, and provided the data is anonymized.
- User Rights Under the Brazilian General Data Protection Law, the User will have the following rights regarding the processing of their personal data:
- Right to Confirmation: The User may confirm whether Lami Brasil processes any of their personal data;
- Right to Access: The User may make a written request to obtain details of how their information is being used, as well as a copy of said information;
- Right to Correction: The User may correct or remove any incomplete, inaccurate, or outdated data;
- Right to Anonymization, Blocking, or Deletion: The User may request the anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data processed with the consented purposes, subject to other legal provisions;
- Right to Deletion: The User may request the deletion of certain data, except those that the law authorizes to be retained;
- Right to Information: The User may request information about public and private entities with which Lami Brasil has shared their data, as well as the consequences of not consenting to the collection and processing of their personal data;
- Right to Refuse Marketing: The User may, at any time, request the cancellation of receiving advertisements and other materials through the link provided in the marketing email sent;
- Right to Portability: The User may request that their personal data be transferred to themselves or third parties, except for data that has already been anonymized and deleted by Lami Brasil;
- Right to Revoke Consent: The User may cancel any prior consent given to Lami Brasil for the use of their personal data. The User acknowledges that cancellation will not affect the use or sharing of data performed prior to the revocation request. The rights provided in this section are not absolute, and the User must contact Lami Brasil through the channel:
This email address is being protected from spambots. You need JavaScript enabled to view it. whenever they wish to exercise them. Lami Brasil commits to addressing such requests as promptly as possible and at no cost to the User, within a maximum period of 15 (fifteen) days from receipt of the request, unless a longer period is necessary due to complexity, factual, or legal reasons, in which case the User will be notified. Lami Brasil will immediately communicate to data processing agents with whom it has shared User data regarding the correction, deletion, anonymization, or blocking of data, so they can repeat the same procedure. Confirmation of the existence or access to the User’s personal data provided in this section will be provided, electronically or expressly, in a simplified format or through a clear and complete statement indicating the origin of the data, the absence of records, the criteria used, and the purpose of the processing, always respecting Lami Brasil’s commercial and industrial secrets.
- Cookies Lami Brasil and potential partners may use cookies and similar technologies to store and manage User preferences, offer targeted advertising, enable content, and collect analytical and usage data, for example. The use of cookies and other tracking technologies is standard on websites and platforms, through which information about the User’s activities on the platform, websites, or other services is collected. A cookie is a small text file placed on a computer or other device, used to identify the User, the device used, and to collect information, and may perform the following functions:
- Necessary Cookies: These are essential to allow the User to navigate a platform and use its features;
- Performance Cookies: These collect information on how the User uses Lami Brasil’s platform and serve to improve navigation and enhance the User experience. The collected information includes, for example, internet browsers and operating systems used, the domain name of the previously visited website, the number of visits, the average visit duration, and the pages viewed;
- Functional Cookies: These allow the platform to remember choices the User made (such as their username or ID, language preference, or the area or region where the User is located) and provide enhanced, more personalized features;
- Advertising Cookies: These track the User’s browsing habits and are used to provide targeted advertising. These cookies also limit the number of times you see an ad and measure the effectiveness of advertising campaigns. They also remember that the User has visited a website, and this information is shared with other organizations, such as advertisers. Lami Brasil uses necessary and performance cookies. At any time, the User may disable cookies through their browser settings, install available market plugins, or use other technologies they deem necessary. In addition to cookies, Lami Brasil uses other tracking technologies, such as:
- Web Server and Platform Logs: Lami Brasil’s servers automatically collect certain information to assist, manage, and protect the services offered, as well as to analyze usage and improve the User experience. The collected information includes:
- IP address and browser type;
- Device information, including Unique Device Identifier (UDID), MAC address, Identifier for Advertisers (IFA), and similar identifiers assigned by us or third parties;
- The device’s operating system and other technical data;
- The city, state, and country from which you are accessing Lami Brasil’s platform, including for fraud prevention;
- Information or text entered;
- Links and buttons clicked;
- Social Media Connections: Some of Lami Brasil’s services may include social media features, such as Facebook “Like” buttons, “Share” buttons, and interactive mini-programs. Lami Brasil may allow the User to use their own social media logins to access some of the services offered, in which case Lami Brasil may receive and store authentication information from those services.
- Contact Information Questions, comments, suggestions, and/or complaints regarding this Privacy Policy, as well as any need for information, changes, or deletion of personal data, may be addressed by the User directly to Lami Brasil via email:
This email address is being protected from spambots. You need JavaScript enabled to view it. . - Changes Lami Brasil seeks continuous updates and improvements, so this Privacy Policy may be updated at any time to ensure better service and protection for Users. In the event of changes affecting the purpose and duration of personal data processing, the User will be informed via the email registered in our services or through the platform itself with 30 (thirty) days’ notice. If the User disagrees with the changes, they may revoke the provided consent, becoming unable to use Lami Brasil’s services. If Lami Brasil changes its policy in the future to share data with third parties, it will send a communication with 30 (thirty) days’ notice to the User via the registered email, and the User may disagree with the sharing, in which case they will continue to use Lami Brasil’s services. Users are advised to periodically review this policy to stay updated on its content.
- Legislation and Jurisdiction This Policy will be governed, interpreted, and enforced in accordance with the laws of the Federative Republic of Brazil, regardless of conflicts with the laws of other states or countries. The São Paulo Court is competent to resolve any disputes arising from this instrument, with the waiver of any other, however privileged it may be. All rights reserved.