Privacy Policy

Casablanca will have access to personal data in the following situations:

• Through interaction with a customer: When the Customer provides and assigns personal data necessary for the provision of services and use of the products provided by Casablanca.

Interaction with your employees: When your employees and collaborators of any nature use their systems and platforms to fulfill the duties and obligations arising from the contractual relationship they have.

Without prejudice to the data commonly collected and processed from its employees for the purposes of the legal relationship they have, Casablanca may still collect the following personal data:

• Names and contact details such as first and last name, email address, postal address, telephone number and other similar types of contact details such as bank details;
• Device information, such as information about your device, such as IP address, location, or provider;
• Usage information and browsing history, such as information about how the User navigates within our services, their browsing history and which elements of Casablanca's services are most used;

The sensitive personal data that may be collected by Casablanca will have their purpose separately informed to the User, who must consent to Casablanca using them in a specific way, and in case of disagreement, the data will be automatically deleted from Casablanca's databases.

Casablanca does not collect data from minors, except with the authorization of the parents or guardians, if they are collected without authorization, as soon as Casablanca becomes aware, it will immediately delete the data collected, in accordance with the rules of the Terms of Use and this Privacy Policy.

When collected, Casablanca will use personal data to:

• Provide and improve the contracted services;
• Comply with a legal or regulatory obligation;
• Manage the relationship with Users;
• Configure and administer User accounts;
• Provide technical assistance, support and training to the User;
• Contact Users;
• Internal research and development purposes and to improve, test and refine the features and functions of Casablanca's services;
• Provide Users with marketing, advertising, advertising, including from Casablanca Partner companies, as permitted by law;
• Meet internal and external audit requirements, including Casablanca's information security obligations;
• Send messages by electronic mail to:
• a) confirm or cancel requests through the use of the platform;
• b) communicate future changes that this policy may undergo; and
• c) disclose updates, changes, additions of new data sources and improvements to the platform.
• To exercise Casablanca's rights, including but not limited to the privacy, security, networks, systems and properties of Casablanca and/or third parties;
• Comply with requests from courts, law enforcement authorities, regulatory bodies and other public institutions and government authorities, including, but not limited to, any rules in force outside the user's country of residence;

The exercise of Casablanca's rights and to defend itself against any legal claims, as well as for compliance with any legislation or regulation applicable to Casablanca or third parties with whom we work, as well as for the exercise of good performance of contracts signed between Casablanca and its users.

The User accepts and agrees that Casablanca shares their personal data with the following categories of recipients:

• Companies that provide access or are responsible for the registration on which the user is dependent;
• Partner companies, such as third-party service providers and other companies that assist us in providing our services or who may take action on our behalf, protecting our rights, users, systems and services;
• Third parties to which Casablanca owes satisfaction or is authorized to disclose information by law (Example: government agencies, regulatory agencies, the judiciary and other public authorities);
• Third parties in order to participate in the sale, merger, acquisition, restructuring, joint venture, assignment, transfer of part or all of Casablanca's business, in which case the User's data will be considered an asset and transferred in an eventual negotiation;
• Third parties who need the data to protect Casablanca's rights;
• Any natural or legal person for which the User requests the portability of their data.

Casablanca does not intend to carry out the transfer of any personal data of the User captured outside Brazil, provided that if the hypotheses listed below are not met, Users will be previously informed by email, at which time the User may accept or not the transfer, and in case of disagreement, you may have your access rights blocked by Casablanca.

The international transfer of data described in the General Data Protection Law (LGPD) lacks the designation of guidelines to be established by the National Authority for the Protection of Personal Data (ANPD), whereas, when defined, Casablanca will undertake to comply with them in their entirety.

Casablanca uses appropriate technologies and procedures to protect any personal data collected (including administrative, technical and physical protections) according to the level of risk and the service provided, having a legally responsible team to deal with the secure management of the data in line with legal provisions, regulatory requirements, technology changes, among other relevant factors that may influence the way to protect personal data.

Casablanca uses all reasonable market efforts to ensure the security of its systems and the data collected, using highly qualified and reputable Internet providers and database and storage servers, as well as security certificates (SSL) and protection software. against unauthorized access to systems, as well as standard methods for encrypting and anonymizing collected data.

This Policy represents Casablanca's effort to protect User information. However, due to the very nature of the Internet, it is not possible to guarantee that malicious third parties will not succeed in improperly accessing the stored information, which is why, if this occurs, Casablanca will be liable within the limits provided by law.

Casablanca, within a reasonable period to be defined by the National Data Protection Authority (“ANPD”), shall notify the ANPD and the affected User of the occurrence of a security incident that may cause significant risk or damage to the affected User, mentioning, in the Minimum:

• a description of the nature of the personal data affected;
• information about the holders involved;
• indication of the technical and security measures used for data protection, observing commercial and industrial secrets;
• the risks related to the incident;
• the reasons for the delay, in case the communication was not immediate; and
• the measures that have been or will be adopted to reverse or mitigate the effects of the loss.

Casablanca will be responsible for handling it as follows:

• When dealing with personal data provided directly by its Customers, Casablanca will be the Operator, and will act without interference in the form of treatment indicated by the Controller, but under the terms of the LGPD;
• Casablanca will be the Controller of the Personal Data of its employees, treating them based on the Execution of Contracts, Compliance with legal or regulatory obligations, and also, in specific and determined situations, Consent.

Casablanca may adopt different legal bases for different processing of personal data.

Casablanca calculates the retention period of personal data according to the following criteria:

• Period necessary to fulfill the purpose of the collection;
• The moment the Customer/User ceases to use Casablanca's services;
• The moment when there is a revocation of consent or a request for deletion of personal data by the Holder;
• The time required to demonstrate compliance with Casablanca's duties and obligations;
• The necessary period provided for by law, regulations, court decisions, etc.;
• Determination of the National Data Protection Authority;
• Compliance with a legal or regulatory obligation by the Controller;
• Perfect execution of the contract;
• Needs related to compliance with the legal system, as well as for any legal disputes;
• Transfer to a third party, provided that the data processing requirements established by law are complied with; or
• Exclusive use of the controller, its access by a third party is prohibited, and provided that the data is anonymized.

According to the Brazilian General Data Protection Law, the User will have the following rights regarding the treatment of their personal data:

• Right of Confirmation: the User will be able to confirm whether Casablanca processes any of his/her personal data;
• Right of Access: the User may make a written request to obtain details of how their information is being used, as well as to have a copy of said information;
• Right to Correction: the User may correct or remove any data that is incomplete, inaccurate or outdated;
• Right to Anonymization, Blocking or Deletion: The User may request the anonymization, blocking or deletion of unnecessary, excessive or treated data in disagreement with the purposes for which consent has been given, observing, for that purpose, other rules of the legal system;
• Right of Deletion: the User may request the deletion of some data, except those in which the law authorizes its conservation;
• Right to Information: The User may request information from the public and private entities with which Casablanca has shared their data, as well as the consequences if they choose not to consent to the collection and processing of their personal data;
• Right to Refuse Marketing: The User may, at any time, request the cancellation of receiving advertisements and other materials through the link provided in the marketing email sent.
• Right of Portability: The User may request that their personal data be transferred to themselves or third parties, except for those that have already been anonymized and deleted by Casablanca.
• Right to Withdraw Consent: The User may withdraw any consent previously granted to Casablanca to use his or her personal data. The User is aware that the cancellation will not affect the use or sharing of data carried out prior to the request for revocation of consent.

The rights provided for in this chapter are not absolute, and the User must, whenever he wants to exercise them, contact Casablanca through the channel: Este endereço de email está sendo protegido de spambots. Você precisa do JavaScript ativado para vê-lo.

Casablanca undertakes to respond to such requests as soon as possible and at no cost to the User, limited to a maximum period of 15 (fifteen) days from receipt of the request, unless a longer period is required to respond due to complexity, reasons of fact or law, opportunity in which the User will be communicated.

Casablanca will immediately inform the processing agents with whom it has shared User data about the correction, elimination, anonymization or blocking of data, so that they can repeat the same procedure.

Confirmation of the existence or access to the User's personal data provided for in this chapter will be provided, electronically or expressly, in a simplified format or by means of a clear and complete statement, indicating the origin of the data, the inexistence of registration, the criteria used and the purpose of the treatment, always observing the commercial and industrial secrets of Casablanca.

Casablanca and any partners may use cookies and other similar technologies to store and manage User preferences, offer targeted advertising, enable content and collect analytical and usage data, for example. The use of cookies and other tracking technologies is a standard on websites and platforms, through which information about the User's activities on the platform, websites or other services is collected.

A cookie is a small text file, placed on a computer or other device, used to identify the User, device used and to collect information and can perform the following functions:

• Necessary Cookies: they are essential to allow the User to browse a platform and use its features.
• Performance Cookies: they collect information on how the User uses the Casablanca platform and serve to improve your navigation and enhance your experience. The information collected includes, for example, the internet browsers and operating systems used, the domain name of the website previously visited, the number of visits, the average duration of the visit and the pages viewed.
• Functional Cookies: they allow the platform to remember choices the User has made (such as their username or ID, language preference or the area or region the User is in) and provide enhanced and more personal features.
• Advertising Cookies: they track the User's browsing habits and are used to deliver targeted advertising. These cookies also limit the number of times you see an ad and measure the effectiveness of advertising campaigns. They also remind you that the User has already visited a website and this information is shared with other organizations, such as advertisers.

Casablanca uses necessary and performance cookies.

At any time, the User may disable Cookies through the settings of his browser, installing plug-ins available on the market, or even making use of other technologies that he deems necessary.

In addition to cookies, Casablanca uses other tracking technologies, such as:

Web Server and Platform Records: Casablanca's servers automatically collect certain information to assist, administer and protect the services offered, as well as to analyze usage and improve the User experience. The information collected includes:

• IP address and browser type;
• Device Information, including the Unique Device Identifier (UDID), MAC address, Identifier for Advertisers (IFA) and similar identifiers assigned by us or a third party;
• The device's operating system and other technical data;
• The city, state and country from where you are accessing the BRASIL RISK platform, including for fraud prevention;
• Typed information or texts;
• Clicked links and buttons;

Social Media Connections: Some of Casablanca's services may include social media features such as Facebook “Like” buttons and widgets; “Share” button and interactive mini-programs.

Casablanca may allow the User to choose to use the logins of its own social networks to access some of the services offered, in which case Casablanca may receive and store authentication information for these services.

Doubts, comments, suggestions and/or complaints regarding this Privacy Policy, as well as any need for information, alteration or deletion of personal data, may be made by the User directly to Casablanca, por e-mail: Este endereço de email está sendo protegido de spambots. Você precisa do JavaScript ativado para vê-lo.

Casablanca seeks constant updates and improvements, so this Privacy Policy may be updated at any time, always aiming at a better provision and protection to users.

In the event of changes that reach the purpose and duration of the processing of the User's personal data, the User will be informed through the email registered in our services or through the platform itself in advance of 30 (thirty) days. If there is disagreement with the changes, the User may revoke the consent provided, being unable to use the services of Casablanca.

If, in the future, Casablanca changes its policy in order to share data with third parties, it will send a notice 30 (thirty) days in advance to the user via the registered user's e-mail, who may disagree with the sharing, at which time will continue to use Casablanca's services.

Users are advised to periodically read this policy in order to keep up to date with its content.

This Policy will be governed, interpreted and executed in accordance with the laws of the Federative Republic of Brazil, regardless of the conflicts of these laws with the laws of other states or countries, and the São Paulo Forum is competent to resolve any doubts arising from this instrument, with waiver of any other, however privileged it may be.

All rights reserved.