Privacy Notice

Santo Antonio Sugarcane Mill (“Company”, “we”, “us” or “our”) carries out the processing of your personal data in accordance with this Privacy Notice and in compliance with the relevant data protection legislation, in particular Law No. 13,709/2018 – General Data Protection Law (“LGPD”). This notice provides the necessary information about your rights and obligations, and explains how, why and when we process your personal data.

Santo Antonio Mill is established at Barão de Jaraguá Street 195, Jaraguá neighborhood, CEP 57022- 140 Maceió, AL, and is a company registered under number 12.718.011/0001-90. We act as a controller when processing your personal data.

This policy is intended for our company’s customers as well as the general public who contact and interact with our customer service representatives, systems, portals, blogs and social networks.

The Company handles your personal information to fulfill our contractual legal obligations and to provide you with our products and services. We will never collect unnecessary personal data, and we will not treat your information in any ways other than as specified in this Notice.

The personal data we collect is:

• Name
• E-mail
• Telephone Number
• Address
• Preferred way of contact
• Observations (in the contacts you make with us)

We collect information in the following ways:

• Online forms on our website
• Phone or WhatsApp contact
• E-mail

We take your privacy very seriously! Therefore, we will not disclose or share your data without your prior consent, with the exception of legal compliance or court order, in which case you, the data subject, will be duly informed. We keep your data for the period necessary for us to achieve the purpose(s) specified in this Notice. If you receive marketing and promotional offers from us, you may request to be removed from our mailing list at any time.

The purposes and reasons for processing your personal data are detailed below:

• Identification of the user, based on legitimate interest;
• Compliance with the legal obligations of record keeping established by the Marco Civil da Internet (Law No. 12,965/2014);
• Allowing access to the products and services offered through the website, as well as replying to messages sent in our contact form on our website, based on legitimate interest;
• Scheduling a visit to your company to perform tasks provided in a contract, based on contract execution;
• Evaluating and forwarding commercial proposals, based on legitimate interest;
• Occasionally sending marketing information of interest to you. Such information will not be intrusive and is handled based on our legitimate interests.

You may opt out of receiving this information at any time.

You have the right to access any personal information we hold about you, and may also request information about:

• What personal data we hold about you
• The purposes of processing
• The categories of personal data concerned
• The recipients to whom the personal data has been/will be disclosed
• How long we intend to store your personal data
• If we do not collect data directly from you, information about the source

If you believe that we have any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will endeavor to do so as soon as possible, unless there is a valid reason not to do so. Should the latter situation occur you will be duly notified.

You also have the right to request the erasure of your personal data or to restrict processing (where applicable) in accordance with data protection legislation, as well as the right to object to any direct marketing. Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use. For the time being, we do not perform any automated decision making from your personal data.

If we receive a request from you to exercise any of the above rights, we may ask you to confirm your identity before we act on your request. This confirmation is necessary for us to ensure that your data is protected and kept secure.

We share your data only and exclusively for the purposes listed in this Notice. Therefore, this sharing is performed in the following cases:

The Company uses the third parties listed below to provide the services indicated. Please note that all operators acting on our behalf only handle your data in accordance with our instructions and fully comply with this Privacy Notice, as well as with data protection legislation and any other appropriate confidentiality and security measures.

We take your privacy seriously and take all reasonable steps and precautions to protect your personal data. We work hard to protect you, and your personal data, from unauthorized access, accidental or unlawful alteration, disclosure or destruction of your personal data, and have several layers of security measures in place, including:

• Firewall
• Antivirus
• Daily backup
• Centralized access management
• VNP Connection

Personal Data in Brazil is protected by the General Data Protection Law, but some other countries may not necessarily have the same high standard of protection for your personal data.

The Data collected will be stored on servers located in Brazil, we do not transfer or host data outside Brazil.

You are not required to provide your personal data to us. However, since this information is necessary for us to provide the quote on the products and services you have selected, bill and deliver them, as well as respond to your contact messages, we will not be able to offer some/all of our services without your data.

As noted in the “How We Use Your Personal Data” section of this Notice, we occasionally handle your personal data on the legal basis of legitimate interest. In this case, we conduct a thorough assessment of these legitimate interests through appropriate procedure and documentation (Legitimate Interests Assessment – LIA) to ensure that we meet your expectations, always based on proportionate and appropriate treatment of your data.

The Company may revise this Privacy Policy from time to time. The most current version of the policy will govern our processing of your personal data and will always be available on our webportal. The last date of change to the Privacy Policy will always be indicated at the end of this document.

We keep your personal data only as long as it is necessary for our purposes, and have strict review and retention policies in place to fulfill these obligations. We are required by Brazilian tax law to keep your personal data used in invoices for a minimum of 5 years, after which time your data will be deleted.

For direct marketing and technical support history, we will keep this data for a period of ten years, or until you exercise your right to object and/or withdraw your consent.

Finally, browsing data will be kept in compliance with the deadlines provided for in the Marco Civil da Internet (Law No. 12,965/2014), as well as any specific legislation.

The Company only handles your personal data in accordance with this Privacy Notice and in accordance with the relevant data protection legislation. Should you have any questions, comments or even requests related to the processing of your personal data, we have a specialized team ready to assist you! This contact should be made directly through the channel:

DPO = Jean Boudoy
dpo@usinasantoantonio.com.br

The Company’s Privacy Notice is governed, interpreted and executed in accordance with national legislation, especially in compliance with Law No. 13,709/2018 (General Law of Protection of Personal Data – LGPD) and is intended to demonstrate its commitment to its associates and other stakeholders.

For any claim or controversy resulting from the use and interpretation of any content made available through this webportal, the courts of Maceió, AL are elected.