General Data Protection Law

The General Data Protection Law (LGPD – LAW No. 13,709) is Brazil’s data privacy legislation, enacted in August 2018, with an effective date starting in August 2020.

The LGPD establishes rules for the collection, storage, processing and sharing of personal data, providing greater protection and penalties for non-compliance. The purpose of the LGPD is to regulate the processing of personal data and protect it, safeguarding fundamental rights related to the protection of individuals’ freedom, privacy and private life.

LGPD principles

Transparency

Each item of personal information must be processed for specific, legitimate, explicit and disclosed purposes. Companies must explain what they will use each item of personal data for. They are not authorized to use the same data for another purpose; the personal data processed must be compatible with the purpose disclosed by the company.

Individual data subjects have the right to freely and easily consult, at no charge, all data a company holds about them. Data subjects are entitled to have the information that companies hold about them be accurate and up to date.

Security

Companies that process personal data are responsible for security and for seeking procedures, methods and technologies that protect personal data against third-party access, including unauthorized access such as hacker intrusions. Companies must take preventive measures to avoid damage arising from the processing of personal data, proving and documenting the measures adopted.

Data subject rights

Article 19 regulates confirmation of the existence of a data subject’s data and its provision in two possible forms: immediate provision in a simplified format; or provision in a complete format that must include the origin of the data, any absence of records, the criteria used and the purpose of the processing.

Data subjects have the right to request the cancellation or deletion of unnecessary or excessive data, or data processed in violation of the LGPD, as well as the correction of incomplete, inaccurate or outdated data.

Data subjects have the right to receive information about the public and private entities with which the controller has shared their data.

Data subjects have the right to object to any processing and information that do not comply with the law, as well as automated decisions that affect their interests, such as decisions intended to define their personal and professional profile.

CAVOK & LGPD

When acquiring services from CAVOK AVIAÇÃO LTDA, the client will be the controller of the personal and sensitive data, as provided for in the General Data Protection Law, of its users, employees, associates, suppliers and service providers, among others. As such, the client must, at its own expense and risk, classify, process, enter and perform any and all processing of personal data, information and data flows. The client is therefore solely responsible for making decisions regarding the processing of personal data and for complying with all Brazilian provisions, legislation and regulations and, where applicable, foreign legislation and regulations governing the rights to privacy and personal data protection, including, but not limited to, Brazilian Law No. 13,709/2018 (“Brazilian Data Protection Law”) and Brazilian Law No. 12,965/2014 (“Brazilian Civil Rights Framework for the Internet”) and, where applicable, the European Union’s General Data Protection Regulation (GDPR – Regulation No. 679/2016).

The client must seek specific legal guidance at its own expense, risk and cost to ensure compliance with applicable legislation, and is solely and fully responsible for any failure or breach of that legislation.

Security

The client is responsible for ensuring that communication between CAVOK AVIAÇÃO LTDA’s systems and the user takes place securely, ensuring that information transmitted between the endpoints is not intercepted or subjected to attacks.

Protecting, preserving and respecting the data, privacy and rights of personal and sensitive data subjects is a priority for CAVOK AVIAÇÃO LTDA. As a software-as-a-service provider, CAVOK AVIAÇÃO LTDA acts as a partner to clients in their compliance processes.

CAVOK AVIAÇÃO LTDA reiterates its concern for protecting, preserving and respecting its clients’ data, privacy and rights, always prioritizing best practices and adapting its products to meet clients’ needs in the best possible way.

Unless provided for in a service agreement, CAVOK AVIAÇÃO LTDA does not in any way use the data entered into CAVOK AVIAÇÃO LTDA’s systems. For more information about LGPD compliance in our products, please contact:

Data Protection Officer (DPO)

Name: Jonas E. de Sousa

Email: contato@cavoktecnologia.com

Phone: +55 41 985058263