.webp)
Privacy Policy
1. General information
This Privacy Policy contains information about how we process, in whole or in part, whether automatically or not, the personal data of users who access our website. Its purpose is to inform interested parties about the types of data that are collected, the reasons for the collection and how the user can update, manage or delete this information.
This Privacy Policy was prepared in accordance with Federal Law No. 12,965 of April 23, 2014 (Marco Civil da Internet), with Federal Law No. 13,709 of August 14, 2018 (Law on the Protection of Personal Data) and with EU Regulation No. 2016/679 of April 27, 2016 (General European Regulation on the Protection of Personal Data - GDPR).
This Privacy Policy may be updated as a result of any regulatory update, which is why the user is invited to periodically consult this section.
2. User rights
The website undertakes to comply with the standards set out in the GDPR, in compliance with the following principles:
- The user's personal data will be processed in a lawful, fair and transparent manner (lawfulness, fairness and transparency);
- The user's personal data will be collected only for specific, explicit and legitimate purposes and may not be subsequently processed in a manner incompatible with these purposes (purpose limitation);
- The user's personal data will be collected in an appropriate, relevant and limited manner to the needs of the purpose for which they are processed (data minimization);
- The user's personal data will be accurate and updated whenever necessary, so that inaccurate data is deleted or rectified whenever possible (accuracy);
- The user's personal data will be stored in a form that allows the identification of the data subjects only for the period necessary for the purposes for which they are processed (limitation of storage);
- The user's personal data will be processed securely, protected from unauthorized or unlawful processing and against accidental loss, destruction or damage, adopting appropriate technical or organizational measures (integrity and confidentiality).
The website user has the following rights, granted by the Personal Data Protection Law and the GDPR:
- Right of confirmation and access: this is the user's right to obtain confirmation from the website as to whether or not personal data concerning him/her are being processed and, if this is the case, the right to access his/her personal data;
- Right of rectification: this is the user's right to obtain from the website, without undue delay, the rectification of inaccurate personal data concerning him/her;
- Right to erasure of data (right to be forgotten): this is the user's right to have their data deleted from the website;
- Right to limit data processing: this is the user's right to limit the processing of their personal data, which can be obtained when they dispute the accuracy of the data, when the processing is unlawful, when the website no longer needs the data for the proposed purposes and when they have objected to the processing of the data and in the case of unnecessary data processing;
- Right to object: this is the user's right to, at any time, object for reasons related to their particular situation, to the processing of personal data concerning them, and may also object to the use of their personal data for the definition of a marketing profile (profiling);
- Right to data portability: this is the user's right to receive personal data concerning them that they have provided to the website, in a structured, commonly used and machine-readable format, and the right to transmit this data to another website;
- Right not to be subject to automated decisions: this is the user's right not to be subject to any decision taken exclusively based on automated processing, including profiling, that produces effects in their legal sphere or that significantly affects them in a similar way.
The user may exercise their rights by means of written communication sent to the website with the subject "RGDP-", specifying:
- Full name or company name, CPF (Individual Taxpayer Registry, from the Brazilian Federal Revenue Service) or CNPJ (National Corporate Taxpayer Registry, from the Brazilian Federal Revenue Service) number and email address of the user and, if applicable, of their representative;
- Right that they wish to exercise with the website;
- Date of the request and user's signature;
- Any document that can demonstrate or justify the exercise of your right.
The request must be sent to the email: contato@copass.com.br, or by mail, to the following address:
COPASS LTDA
Rua XV de Novembro, 964, 3rd floor, Centro - Curitiba - PR
CEP: 80060-000
The user will be informed in case of rectification or deletion of their data.
3. Duty not to provide data to third parties
The collection of user data will be in accordance with the provisions of this Privacy Policy and will depend on the user's consent, which is only dispensable in the cases provided for in art. 11, item II, of the Personal Data Protection Law.
4. Types of data collected
4.1.1 User identification data for registration
The use by the user of certain features of the website will depend on registration, and in these cases, the following user data will be collected and stored:
- name
- birht date
- e-mail address
- CPF number
- CNPJ number
4.1.2 Collection of data not expressly provided for
Other types of data not expressly provided for in this Privacy Policy may occasionally be collected, provided that they are provided with the user's consent, or that the collection is permitted or required by law.
4.1.3 Legal basis for processing personal data
By using the website services, the user is consenting to this Privacy Policy.
The user has the right to withdraw his/her consent at any time, without compromising the lawfulness of the processing of his/her personal data prior to withdrawal. The withdrawal of consent may be done by email: atendimento@cpapstore.com.br, or by mail sent to the following address:
Rodovia Visconde de Porto Seguro, 2660 - Sitio Recreio dos cafezais - Valinhos - SP
CEP: 13278-327
The consent of those who are relatively or absolutely incapable, especially children under 16 (sixteen) years of age, may only be given, respectively, if duly assisted or represented.
The processing of personal data without the user's consent will only be carried out due to legitimate interest or for the cases provided for by law, that is, among others, the following:
- for compliance with a legal or regulatory obligation by the controller;
- for studies to be conducted by a research body, ensuring, whenever possible, the anonymization of personal data;
- when necessary for the execution of a contract or preliminary procedures related to a contract to which the user is a party, at the request of the data subject;
- for the regular exercise of rights in judicial, administrative or arbitration proceedings, the latter under the terms of Law No. 9,307 of September 23, 1996 (Arbitration Law);
- for the protection of the life or physical safety of the data subject or third party;
- for the protection of health, in a procedure carried out by health professionals or health entities;
- when necessary to meet the legitimate interests of the controller or third party, except in the case where the fundamental rights and freedoms of the data subject prevail, which require the protection of personal data;
- for credit protection, including as provided for in the relevant legislation.
4.1.4 Purposes of processing personal data
The user's personal data collected by the website is intended to facilitate, expedite and fulfill the commitments established with the user and to fulfill the requests made by filling out forms.
Personal data may also be used for commercial purposes, to personalize the content offered to the user, as well as to provide support to the website to improve the quality and operation of its services.
The website collects user data for profiling purposes, i.e., automated processing of personal data that consists of using this data to evaluate certain personal aspects of the user, mainly to analyze or predict characteristics related to their professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movement.
Registration data will be used to allow the user to access certain content on the website, which is exclusive to registered users.
The processing of personal data for purposes not provided for in this Privacy Policy will only occur after prior communication to the user, and in any case, the rights and obligations provided for herein will remain applicable.
4.1.5 Purposes of processing personal data
The user's personal data will not be shared with third parties. They will therefore only be processed by this website.
5 Processing of personal data
5.1 From the person responsible for data processing (data controller)
The controller, responsible for the processing of the user's personal data, is the natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of processing personal data.
On this website, the controller of the personal data collected is Copasscofee and COPASS LTDA, represented by José Passarini Neto, who can be contacted by email: contato@copass.com.br or at the address:
Rua XV de Novembro, 964, 3rd floor, Centro - Curitiba - PR, 80060-000
The controller will be directly responsible for the processing of the user's personal data.
5.2 From the data protection officer (data protection officer)
The data protection officer is the professional responsible for informing, advising and monitoring the person responsible for processing the data, as well as the employees who process the data, regarding the application's obligations under the GDPR, the Personal Data Protection Law and other data protection provisions present in national and international legislation, in cooperation with the competent supervisory authority.
In this application, the data protection officer is COPASS LTDA, which can be contacted by email: contato@coopass.com.br
6. Security in the processing of the user's personal data
The website undertakes to apply technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, alteration, communication or dissemination of such data.
To guarantee security, solutions will be adopted that take into account: appropriate techniques; application costs; the nature, scope, context and purposes of the processing; and the risks to the rights and freedoms of the user.
However, the website is exempt from liability for the exclusive fault of a third party, such as in the case of a hacker or cracker attack, or the exclusive fault of the user, such as in the case where the user transfers his/her data to a third party. The website also undertakes to notify the user within an appropriate timeframe in the event of any type of breach of the security of his/her personal data that may pose a high risk to his/her personal rights and freedoms.
A personal data breach is a security breach that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Finally, the website undertakes to treat the user's personal data confidentially, within the legal limits.
7. Browsing data (cookies)
Cookies are small text files sent by the application to the user's computer and stored there, with information related to website navigation.
Through cookies, small amounts of information are stored by the user's browser so that our server can read them later. For example, data about the device used by the user, as well as their location and time of access to the website, can be stored.
Cookies do not allow any file or information to be extracted from the user's hard drive, and it is also not possible for them to access personal information that does not originate from the user or from the way in which they use the website's resources.
It is important to note that not all cookies contain information that allows the user to be identified, and certain types of cookies may be used simply to ensure that the website loads correctly or for its features to work as expected.
Any information stored in cookies that allows a user to be identified is considered personal data. Therefore, all the rules set forth in this Privacy Policy also apply to them.
7.1. Application Cookies
Website cookies are those sent to the user's computer or device and administrator exclusively by the application.
The information collected through these cookies is used to improve and personalize the user's experience, and some cookies may, for example, be used to remember the user's preferences and choices, as well as to offer personalized content.
This browsing data may also be shared with potential partners of the website, seeking to improve the products and services offered to the user.
7.2. Managing cookies and browser settings
The user may object to the application's recording of cookies by simply deactivating this option in their own browser or device.
However, deactivating cookies may affect the availability of some tools and features of the application, compromising its correct and expected operation. Another possible consequence is the removal of any user preferences that may have been saved, which may harm their experience.
Below are some links to the help and support pages of the most commonly used browsers, which can be accessed by users interested in obtaining more information about managing cookies in their browser:
Internet Explorer:
https://support.microsoft.com/pt-br/help/17442/windows-internet-explorer-delete-manage-cookies
Safari:
https://support.apple.com/pt-br/guide/safari/sfri11471/mac
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=pt-BR&hlrm=pt
Mozilla Firefox:
https://support.mozilla.org/pt-BR/kb/ative-e-desativado-os-cookies-que-os-sites-usam
Opera:
https://www.opera.com/help/tutorials/security/privacy/
8. Complaint to a supervisory authority
This version of this Privacy Policy was last updated on: 01/09/2023.
The publisher reserves the right to modify the application and these rules at any time, especially to adapt them to the developments of the COPASSCOFFEE website, whether by making new features available or by deleting or modifying existing ones.
The user must always be aware of the updates to this policy, checking it on this website whenever convenient.
By using the service after any changes, the user demonstrates his/her agreement with the new rules. If you disagree with any of the changes, you must immediately request the cancellation of your account and submit your objection to customer service, if you so wish.
9. Applicable law and jurisdiction
For the resolution of disputes arising from this instrument, Brazilian law will be fully applied.
Any disputes must be filed with the courts of the district where COPASS LTDA. is headquartered.