Privacy and Data Protection Policy

What is the LGPD?

The General Data Protection Law (LGPD), Law 13,709 of 14 August 2018, is the Brazilian legislation setting the rules and obligations on personal data protection in all its aspects and for every organisation. The LGPD applies to any activity involving the collection and storage of data classified as personal.

What are cookies?

Cookies are small text files sent by a website and stored in your browser. They capture information about how you behave while browsing the pages. Data you provide, such as your name, e-mail address and preferences, is thus stored and later remembered by a cookie.

What is personal data?

Law 13,709/18 defines personal data as “information relating to an identified or identifiable natural person”, that is, anything that can help identify a person may be considered personal data. In this sense, besides information such as address, full name and CPF, for example, photographs, video and audio recordings, e-mails, shopping preferences and banking details may also be regarded as personal data.

What is the purpose of processing the data?

The processing of personal data carried out by JUCERJA serves its public purpose, in pursuit of the public interest, with the aim of performing the legal powers or fulfilling the legal duties of the public service. Its specific purpose is the delivery of the services relating to the Public Registry of Commercial Companies and Related Activities, established by law to provide publicity, authenticity, security and effectiveness to legal acts (article 1 of Law 8,934/94).

How is your data stored?

JUCERJA may collect the information actively entered by the User at the time of registration and also information collected automatically when using the JUCERJA Site(s) and/or Application(s), such as the identification of the device used and the IP with the date and time of the connection, among others. Two types of personal data are therefore processed:

• Information provided by the User: JUCERJA collects all information actively entered by the User in its Site(s) and/or Application(s), such as, but not limited to, full name, identity document number, CPF/ME registration number, gender, nationality, marital status, date of birth, address, e-mail and telephone number, when the User fills in forms on the JUCERJA Site(s) and/or Application(s).
• Data collected automatically: JUCERJA also collects a range of information automatically, such as characteristics of the access device and of the browser, IP (with date and time), IP origin, information about clicks, pages visited, the pages visited next after leaving the Pages, or any search term typed on the sites or referring to them, among others.

Who do we share your data with?

Physical, electronic and managerial tools are used to protect the privacy of Personal Data. These tools are applied taking into account the nature of the Personal Data collected, the context and purpose of the processing and the risks that any breach would create for the rights and freedoms of the subject of the data collected and processed. The measures adopted include the following:

• Only authorised persons have access to Personal Data;
• Access to Personal Data is granted only after a confidentiality undertaking; and
• Personal Data is stored in a secure and reliable environment.

JUCERJA currently acts as representative and promoter of the integration between the institutions involved in business registration and licensing, in fulfilment of Law 11,598/2007, which created REDESIM — the National Network for the Simplification of Business Registration and Legalisation.

Your data may therefore be shared with the partner entities. However, sharing this data does not entail its use for any purpose other than the one described in this privacy policy.

Where the partner entities need to use your data, the agreement will include a confidentiality clause to protect it.

Personal Data Protection Officer

The Personal Data Protection Officer is responsible for ensuring that the institution complies with Law 13,709 of 2018 and with other data protection rules, making certain that personal data is always processed properly. The requirement to appoint a Personal Data Protection Officer is set out in article 41 of the LGPD.

Any questions or complaints about the processing of personal data carried out by JUCERJA must be sent to the officer, through the ombudsman, at the e-mail address ouvidoria@jucerja.rj.gov.br.

Complaints from data subjects are received by the JUCERJA ombudsman and forwarded to the Personal Data Protection Officer (DPO), who will provide clarification and take the necessary steps.

The lead and deputy Data Protection Officers of JUCERJA were appointed by JUCERJA Ordinance 1,854 of 18 May 2021: