PRIO S.A. ensures the privacy and protection of the personal data of all its employees, third parties, suppliers, shareholders and other holders who have any type of relationship with us.

Therefore, this Privacy Notice aims to inform you how we process your personal data, reaffirming our commitment to maintaining relationships of transparency and trust.

What types of personal data are processed?

Depending on the type of relationship you have with us, we collect your personal data and sensitive personal data to operate our activities, according to the categories listed below:

a. Registration and identification data: such as name, date of birth, personal qualifications, address, ID, CPF, image;

b. Financial data: such as bank details (branch and account number) and remuneration;

c. Contact details: such as email address and telephone number;

d. Professional data: such as profession, place of work, position, professional history, academic qualifications, political affiliations;

e. Health data: such as health history, medical certificates and reports;

f. Biometric data: such as facial recognition.

Why and how do we process your personal data?

We process personal data for legitimate purposes and in accordance with the legal assumptions provided for in the General Data Protection Law (LGPD), for the following purposes:

(I) Due to employment relationships for the formalization, administration, performance and/or termination of employment contracts, also including internship and apprenticeship contracts, as well as for compliance with legal and contractual obligations arising from these relationships;

(II) Still within the scope of labor relations, to carry out different internal processes of the Company, such as: management of benefits and travel, making payments, management of access rights and security in a cyber environment, carrying out training, generating reports, executing internal audits and investigating complaints and reports;

(III) For the purposes of recruiting and selecting potential candidates for job and internship vacancies provided by PRIO;

(IV) For contract management and relationships with suppliers, service providers and customers, in related interactions and transactions;

(V) To verify facts related to other third parties, such as those associated with social responsibility projects, donations, and sponsorships;

(VI) To comply with legal, contractual, and regulatory obligations;

(VII) To exercise rights in judicial and arbitration actions, as well as in administrative processes;

(VII) To conduct or analyze the feasibility of transactions, including corporate reorganizations, mergers, acquisitions, spin-offs, establishment of entities, consortia, and joint ventures, as well as the assignment, transfer, or alienation of shares;

(XI) To manage incidents and payments for indemnities or other payments deemed necessary to remedy or mitigate such incidents;

(X) To ensure the health and safety of employees, service providers, and visitors in PRIO’s physical spaces, as well as the integrity of its assets.

Your data will be retained only for the necessary and permitted period to fulfill the intended purposes, in a secure and controlled environment, observing applicable security standards and in a format that facilitates the exercise of your rights under the LGPD.

The elimination of your data will occur after the end of its processing, through a secure disposal method, and may be retained for the following purposes:

(I) to comply with legal or regulatory obligations;

(II) for research purposes by research organizations, ensuring, whenever possible, the anonymization of personal data;

(III) transfer to third parties, provided that the data processing requirements set forth in the LGPD are respected;

(IV) for the exclusive use of the controller, prohibiting access by third parties, provided that the data is anonymized.

Why and how do we use cookies?

A cookie is a small text file that is stored on your device when you visit a website and allows it to recognize your device for better efficiency while browsing our pages. When you access our site, we provide a cookie preferences center where you can allow or disallow cookie functionalities to be activated.

More specifically, we use cookies and other tracking technologies for the following purposes:

  • Functional cookies: allow the site to provide enhanced functionality and personalization. They may be set by us or by external providers whose services we add to our pages. If you do not allow these cookies, some of these functionalities, or even all, may not work properly.
  • Advertising cookies: may be set through our site by our advertising partners. They can be used by these companies to build a profile about your interests and show you relevant ads on other websites. They do not directly store personal information but are based on the unique identification of your browser and internet device. If you do not allow these cookies, you will see less targeted advertising.
  • Performance cookies: allow us to count visits and sources of traffic, so we can measure and improve the performance of our website. They help us know which pages are the most and least popular and see how visitors move around the website. All information collected by these cookies is aggregated and thus anonymous. If you do not allow these cookies, we will not know when you visited our site.
  • Social media cookies: are set by a number of social media services that we add to the website to enable you to share our content with your friends and acquaintances. They can track your browsing on other websites and create a profile about your interests. This may affect the content and messages you see on other websites you visit. If you do not allow these cookies, you may not be able to use or see these sharing tools.
  • Strictly necessary cookies: are necessary for the website to function and cannot be turned off in our systems. They are usually set in response to actions taken by you that correspond to a request for services, such as setting your privacy preferences, logging in, or filling out forms. You can configure your browser to block or alert you about these cookies, but some parts of the website will not work. These cookies do not store any personally identifiable information.

Who can we share your personal data with?

We may share your personal data with our controlled entities, business partners, service providers, and suppliers, based both in Brazil and abroad. In these cases, sharing is guided by obligations and responsibilities established in contractual clauses, requiring the adoption of technical and organizational information security measures to ensure compliance with privacy and personal data protection laws. When there is an international transfer, this will be carried out to countries or organizations that provide a level of personal data protection appropriate to the General Data Protection Law or through guarantees of compliance with privacy standards through contractual clauses and/or global corporate standards.

In some circumstances, we may be required to share personal data with public bodies, government agencies, and regulatory agencies by means of an express request or legal provision.

How do we protect your personal data?

Your privacy is one of our main concerns and for this reason we have adopted technical and organizational measures aimed at protecting your personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication or dissemination.

Your data is only accessed by authorized employees and for the exercise of their activities related to the purposes of processing, and they are obliged to maintain the duty of confidentiality and compliance with the privacy and data protection guidelines established by us.

We will make every effort to ensure that all applicable personal data protection measures are constantly updated and aligned with the best market practices and applicable legislation.

What are your rights regarding your personal data?

As provided in Article 18 of the General Data Protection Law (LGPD), you, as the data subject, have the right to obtain from us:

  • Confirmation of the existence of processing;
  • Access to the data;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion of unnecessary, excessive, or improperly processed data in accordance with the provisions of the LGPD;
  • Portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrecy;
  • Deletion of personal data processed with your consent, subject to the exceptions provided by law;
  • Information on the public and private entities with which PRIO has shared data;
  • Information about the possibility of not providing consent and the consequences of refusal;
  • Revocation of consent;
  • Request for review of decisions made solely based on automated processing of personal data that affect your interests, including decisions aimed at defining your personal, professional, consumption, and credit profile or aspects of your personality.

The exercise of your rights is free of charge, and you can exercise it through our Privacy Channel (Access Link). When making your request, additional data and documents may be requested to confirm your identity or the accuracy of the information, ensuring greater security for the process.