MARCHESAN is committed to transparency, privacy, and data security for its customers and other business partners.

This Statement aims to clarify all interested parties (including customers, suppliers, and other business partners) about the processing of personal data carried out by MARCHESAN IMPLEMENTOS E MÁQUINAS AGRÍCOLAS "TATU" S.A., a company registered under CNPJ number 52.311.289/0001-63, headquartered at Av. Marchesan, 1,979, Industrial District, Matão Municipality, State of São Paulo, ZIP Code 15.994-900 (hereinafter referred to as "MARCHESAN").

PROCESSING OF PERSONAL DATA

This refers to all activities involving Personal Data, including collection, access, communication, reproduction, processing, storage, and disposal.

Personal Data, in turn, refers to any information related to an identified or identifiable natural person. The Data Subject of Personal Data is you, the natural person to whom the Personal Data relates.

Please be aware that our commitment is to act in compliance with current personal data protection legislation and provide important and up-to-date information about the processing of your personal data.

WHAT PERSONAL DATA IS COLLECTED AND FOR WHAT PURPOSES ARE THE COLLECTED PERSONAL DATA USED

When you interact with us, whether physically or virtually, we may collect your Personal Data to fulfill a specific purpose and allow us to meet our obligations and responsibilities properly. In the list below, you will find which Personal Data we collect, how, and for what purposes:

Customer Registration: we may collect Personal Data (name, CPF (Brazilian Taxpayer Registry), email, residential address, billing address, and phone number) for your service during registration. These data are used to fulfill our obligations to our customers, offer new products/services, handle technical support inquiries, answer questions, provide technical assistance and/or maintenance services, and issue invoices for the purchase of products/services.

Technical Delivery: we may collect Personal Data (name, CPF, email, residential address, billing address, and phone number) for billing purposes after the technical delivery and for recording the technical delivery operation, formalized through the acceptance agreement signature and the filling out of the Technical Field Report (RTC).

Business Proposal: upon receiving a price request, we generate a business proposal. To finalize the business proposal, it is necessary to collect some Personal Data (name, email, location, and phone number). The Personal Data requested to fulfill the purpose(s) described above are collected through a specific form that should be completed by the Data Subject or by a duly authorized person.

Satisfaction Surveys: based on our order database (purchase history), we create a customer satisfaction survey, which includes (name, phone number, location, and date of purchase) and is conducted through the SurveyMonkey system.

Newsletter: also known as a newsletter, it is a regular publication by the company to its customers and potential customers. The only data collected for this purpose is the email address, through a specific form on our website. You can unsubscribe from receiving the newsletter via the opt-out link in the newsletter email or at any time by requesting it through our designated channels (listed below).

Therefore, all the personal data requested are essential for the relationship between the Parties, and failure to fill out or incorrect completion of the form(s) may hinder, delay, or even prevent us from fulfilling our obligations and responsibilities properly.

STORAGE OF PERSONAL DATA

The collected Personal Data are stored in a secure and controlled environment, which may be on our servers located in Brazil, as well as in a cloud computing environment, which may require the transfer and/or processing of your data outside of Brazil. These transfers involve only companies that demonstrate compliance with applicable laws, maintaining a level of compliance similar to or more stringent than that provided for by Brazilian law.

We store Personal Data only for the time necessary to fulfill the purposes for which they were collected or for compliance with any legal or regulatory obligations or for the preservation of rights.

Upon request or upon the expiration of the maintenance period and legal necessity, Personal Data will be deleted using secure disposal methods or used in an anonymized form for statistical purposes.

SHARING OF DATA

In most cases, the Personal Data provided to MARCHESAN will be used internally by our employees for the sale of our products and/or provision of contracted services.

However, in some situations, we may need to share your Personal Data with third parties, including but not limited to suppliers providing essential services to the company, resellers, as well as competent judicial, administrative, or governmental authorities, whenever there is a legal requirement, request, or order to that effect.

We carefully evaluate our partners and service providers and enter into confidentiality, information security, and Personal Data protection contractual obligations with them to protect you.

RIGHTS OF DATA SUBJECTS

The Data Subject of Personal Data processed by MARCHESAN or by any natural or legal person has the following rights:
Information on sharing: the right to request information about third parties with whom we share your Personal Data, limiting such disclosure to information that does not violate our intellectual property or business secrets;
Confirmation and access to data: the right to confirmation of the existence of processing and, consequently, the right to access all Personal Data in your ownership being collected and processed;
Rectification: the right to correct incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion: the right to request that your data be anonymized, blocked, or deleted;
Portability: the right to request that we provide your Personal Data in a structured and interoperable format for transfer to a third party, respecting our intellectual property or business secrets;
Withdrawal of consent: the right to withdraw your consent for any purpose you have consented to. This withdrawal will not affect the legality of any processing carried out previously. If you withdraw your consent for purposes essential to the regular operation of our environments and services, they may become unavailable to you; and
Objection: the right to object to the processing of your Personal Data if you disagree with any purpose.

Request: for your safety, whenever you make a request to exercise your rights (which may be exercised by you through a request to our Data Processing Officer, as provided at the end of this Statement), we may request additional information to verify your identity, to prevent fraud.

Non-compliance with requests: we may choose not to fulfill a request to exercise rights if compliance violates our intellectual property or business secrets or if there is a legal or regulatory obligation to retain Personal Data. Furthermore, we may choose not to fulfill your request if we need to retain Personal Data to enable our defense or that of third parties in disputes of any nature.

Responses to requests: We commit to responding to all requests in a reasonable time frame and always in compliance with applicable law.

INFORMATION SECURITY

MARCHESAN uses the best security protocols, including well-known firewall technologies and access restrictions, to preserve the privacy of Personal Data but also recommends individual protection measures.

To maintain the security and protection of your Personal Data provided during registration or purchases, we recommend that, under no circumstances, you share your login and password with third parties.

On public computers, make sure you log out of your account to prevent unauthorized access and use of information without your knowledge.

INFORMATION ABOUT THIS STATEMENT

This Statement shall be governed, interpreted, and enforced in accordance with the laws of the Federative Republic of Brazil, especially Law No. 13,709/2018 (General Data Protection Law - LGPD).

You acknowledge our right to change the content of this Statement at any time, as needed or for the intended purpose, and it is your responsibility to check it whenever you access our environments. In case of significant updates to the Statement, you will be notified through the contact information you provide us.

If any provision of this Statement is deemed unenforceable by a Data Authority or a court, the other conditions will remain in full force and effect.

Last Update: August 31, 2023.

CUSTOMER SERVICE CHANNELS AND DPO CONTACT

If the Data Subject wishes to exercise any of their rights related to personal data protection, in accordance with current legislation, or obtain more information about any point of this Statement, they may contact MARCHESAN through the Data Processing Officer (DPO) as follows:

Data Processing Officer:

Luiz Marcelo Valsani
Manager of Risk and Internal Controls

Contact:

Av. Marchesan, 1979 | ZIP Code: 15994-900 / Matão – SP
Phone: (16) 3382-8348
Email: dpo@marchesan.com.br

COOKIES AND GOOGLE ANALYTICS

In some Personal Data processing activities, we may use the following technologies:

Cookies: a small file added to the user's device or computer to provide a personalized access experience to the Platform. The only cookies we use are called "session cookies," stored in the computer's temporary memory and deleted as soon as the user ends online navigation. It is worth noting that this item does not collect data from the user's computer and usually stores data in the form of an identifier without collecting any personal data.

Google Analytics: MARCHESAN uses a tool called "Google Analytics" to collect information about the use of the platform. Google Analytics collects information such as how users visit this platform, which pages they visit, and when they visit these pages, as well as other websites they used before coming to this platform. MARCHESAN uses the information obtained from Google Analytics solely to improve this platform and its services. Google Analytics only collects the IP address assigned to the user and the date of the visit to this platform, rather than their name or other identifying information. However, for MARCHESAN's website, the "IP Anonymization" is applied, partially deleting data from the reporting records.

Although Google Analytics places a permanent cookie on the user's web browser to identify them as a unique user the next time they visit this platform, the cookie cannot be used by anyone other than Google. The use and sharing of information collected by Google Analytics about visits to this platform are restricted and regulated by Google Analytics' terms of use and privacy policy. Users can prevent Google Analytics from identifying them when they return to the platform by disabling cookies in their browser.