This Privacy Policy (“Policy”) of Abralatas – Brazilian Association of Aluminum Can Manufacturers, an association headquartered at Saus Quadra 01 Bloco M Sala 1201, CEP: 70070-935, Brasília/DF, registered with the CNPJ/ME under no. 05.769.475/0001-60 (“We” or “Abralatas”) aims to clarify our practices regarding the collection, use, storage and sharing of Personal Data of people (“User” or “You”) who access our institutional website www.Abralatas.org.br (“Site”).

1. 1. Updates. This Privacy Policy may be amended whenever Abralatas deems it necessary. You will find the date of the last update at the beginning of this document.

1. 1. Definitions and General Provisions.
      
      1. 1. Processing. Processing of Personal Data means any operation that may be carried out with your Personal Data, such as collection, use, sharing, storage, deletion.
      1. 1. Personal Data. This means any data that identifies or could identify a person.
      1. 1. Sensitive Personal Data. This means Personal Data on racial or ethnic origin, religious conviction, political opinion, membership of a trade union or religious, philosophical or political organization, data relating to health or sex life, genetic or biometric data.
      1. 1. Applicable Legislation. All Personal Data Processing carried out by Abralatas complies with the terms of Law No. 13,709/18 (“LGPD”).
      1. 1. Third Party Platforms. Please note that the Site contains links to other third-party websites and online services (such as our profile on social networks like LinkedIn and Youtube) and the use of such websites and services is subject to the terms of use and privacy policy of such third parties. This Privacy Policy does not address the privacy and data protection practices of third parties.

1. 1. Why we process your personal data. We value your privacy. Therefore, all data and information about you is treated as confidential and we will only use it for the purposes described here. The table below indicates the purposes for which We process your personal data.

Personal Data Category	Purpose
Navigation data	In order for us to (i) comply with applicable law, and (ii) improve the functionality of the Site, We process server log information that may include information such as the device’s internet protocol (IP) address, access dates and times, features of the Site or pages viewed, and other system activity, operating system, browser type, interaction with the Site.
Data from Cookies and similar technologies	We use cookies, as indicated in our Cookie Policy available at [=].
Contact details	In order for You to be able to contact us through one of our service channels, including to request the exercise of Your rights provided for in chapter 6 of this Policy, We process the Personal Data You provide Us with. We may also send you communications about Abralatas that we believe may be of interest to you.
Job applicant data	So that you can take part in selection processes, we process information included in your CV if you send it to one of our service channels. We ask that you do not provide Sensitive Personal Data in your CV, unless the characteristics of the vacancy make this information necessary.

4. 4. Sharing of Personal Data with Third Parties. Abralatas reserves the right to provide your Personal Data to third parties, including your interactions, in the cases indicated below. Please note that we will only share your information if strictly necessary.

Third parties with whom we may share User Personal Data	Purposes
Service providers	For service providers, in particular those who operate the technical infrastructure, in particular suppliers who host, store, generate and keep the Site running, as well as the Abralatas database.
Authorities	We will share your Personal Data when we believe it is necessary for compliance with a legal obligation under applicable law or to respond to a judicial decision, such as a search warrant, court order or subpoena.
Third	To enable the sale, in part or in whole, of the business or our assets or shares (including in connection with bankruptcy or similar proceedings), or as part of any reorganization or restructuring of the business, merger, demerger or takeover, so that we may share some of your Personal Data with third parties who are part of the business, such as accountants, auditors, financial advisors and lawyers. In this event, we will take the necessary steps to ensure that your privacy rights continue to be protected in accordance with this Privacy Policy.
Others	We may share your Personal Data if we believe it is necessary for: (i) our legitimate interest or that of a third party, provided that we consider that such interest does not infringe your fundamental rights and freedoms and the protection of your Personal Data is necessary; (ii) national security, (iii) compliance with the law, (iii) the regular exercise of rights in legal proceedings, (iv) criminal investigation, (v) the safety of any person, and/or (vi) to prevent death or imminent physical harm.

5. 5. Rights of Personal Data Subjects. Without prejudice to other rights provided for in this Privacy Policy, You have the rights indicated in the table below.

Rights
Access	At any time You may request a copy of Your data stored in our systems. You may request a copy of: (1) the categories and specific Personal Data we collect about You; (2) the categories and specific sources from which the Personal Data is collected; (3) the purpose for collecting your Personal Data; and (4) the categories and specific third parties with whom we share your Personal Data.
Correction and Update	Request that your Personal Data be corrected and updated. If applicable, we will inform the third parties with whom your Personal Data has been shared of the correction and update.
Portability	Request transfer of your Personal Data from the database to a third party.
Revocation of Consent	Revoking your consent. In the event that revoking your consent entails any consequences in relation to browsing the Site and using our services, You will be informed in advance of these possible consequences.
Objection	To object to the Processing of your Personal Data if you suspect that it is not being Processed in accordance with the terms of this Policy.
Anonymization, blocking or deletion	Request anonymization, blocking and/or deletion of your Personal Data when it is unnecessary, excessive or processed in disagreement with the LGPD or this Policy. We may keep your Personal Data if necessary to (i) comply with applicable law; or (ii) fulfill a contract or exercise our rights in judicial, administrative or arbitration proceedings. Except in the cases mentioned, we will delete or keep your data anonymized (we will use the technique available at the time).
Request Review of Automated Decisions	The Site does not currently process data with automated decisions, however, in the event that it does, You have the right to request a review of decisions made solely on the basis of automated Processing of your Personal Data (for example, calculation of risk or probability, or similar, performed by Processing Personal Data using rules, calculations, instructions, algorithms, statistical analysis, artificial intelligence, machine learning, or other computational technique).

Jurisdiction. This document shall be governed by and construed in accordance with the laws of the Federative Republic of Brazil. The Court of Brasília, Federal District, is hereby elected as the competent court to settle any questions arising from this document, expressly waiving any other, however privileged.

Proof of your identity and/or that of your proxy is required so that we can guarantee the exercise of your rights. This is a security measure to ensure that Personal Data is not disclosed to anyone who is not entitled to receive it.

Abralatas has an appointed Personal Data Protection Officer, who is available to deal with requests, complaints or queries, which should be sent to abralatas@abralatas.org.br. We will reply as soon as possible.

International Transfer of Personal Data. We may use the services of renowned companies based outside Brazil for data storage services, which sometimes means that your Personal Data may be stored abroad. Abralatas will require its business partners to adopt legal measures to protect your Personal Data with at least a level of protection similar to that provided for in Brazilian law and in this Privacy Policy.

Information security. Our servers are protected and controlled to guarantee security. We adopt technical security measures and our database can only be accessed by previously authorized persons.

How long is the data stored for? We will only keep data and information for as long as it is necessary or relevant for the purposes described in this Privacy Policy, or for periods predetermined by law.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purpose for Processing your Personal Data and whether we can achieve those purposes through other means, subject to applicable legal requirements.