Privacy Policy

PRIVACY POLICY

Effective as of March 25, 2025

1. Purpose

This Privacy Policy (the “Policy”) aims to establish and inform guidelines on the processing of personal data carried out by Chicarino, Quaresma, Tanaka & Dias Advogados (CQTD) in its institutional activities, reinforcing the organization’s commitment to privacy and information security, in accordance with the General Personal Data Protection Law (LGPD) – Law No. 13,709/2018 and the regulations published by the National Data Protection Authority (ANPD).

We are the law firm Chicarino, Quaresma, Tanaka e Dias Sociedade de Advogados, registered with the National Register of Legal Entities of the Ministry of Finance under No. 33.507.778/0001-40, headquartered in the city of São Paulo, state of São Paulo, at Rua Funchal, no. 573, suites 31 and 32, Vila Olímpia, CEP 04551-910, and we act as controllers of your personal data, as defined by applicable law (“We” or “CQTD”).

Your personal data is processed solely and exclusively on the legal basis of the execution of the service agreement, or any other agreement, signed between you, or the company where you work, and us, under the terms of this Policy.

Alternatively, this Policy also seeks your consent for the collection of your Personal Data when you visit our website.

You, the owner of personal data, will be referred to as “You” in this Policy.

2. Scope

This Policy applies to all persons whose personal data is processed by CQTD, including:

• Employees, former employees, dependents, candidates, and partners;

• Customers and their legal representatives who have or have had a legal relationship with CQTD;

• Suppliers with whom CQTD maintains or has maintained a business relationship; and

• Visitors, users who register to receive the newsletter on the CQTD website, users who interact with the CQTD profile on social media, and anyone who accesses the CQTD premises.

3. Personal data collected

The CQTD may collect the following types of personal data, depending on the relationship between the data subject and the organization:

• Visitation and interaction data: When you visit our website, we will collect cookies from your computer (for more information about cookies, see the “Cookies” section below), your clicks on the page and browsing interactions, your location via IP address, browser type, type of device you use to access the website, your device’s operating system, and your screen resolution.

• Newsletter data: When you subscribe to one of our newsletters, you will provide us with the data explicitly requested at the time of subscription, such as your name and email address. In addition, we will collect your interactions with the newsletters sent (opening and clicks on links in the email in question).

• Form Data: When you fill out a form we send you, or when you provide us with personal data that we request, we will use the data for the specific purpose indicated at the time the form or request is made available, in addition to the other purposes indicated in this Policy.

• Customer Data: Any data you decide to share with us during the provision of our legal services.

• Registration and identification data: Name, CPF (Individual Taxpayer ID), RG (ID), address, telephone number, email address, job title, and company.

• Financial data: Bank details required for payments and billing.

4. Purpose and legal basis for processing

CQTD processes personal data for the following purposes:

5. Cookies

The CQTD website uses cookies to improve the user experience and collect statistical data on the use of the platform. The types of cookies used include:

• Essential cookies: Necessary for the functioning of the website, these cannot be disabled.

• Analytical cookies: Used to monitor performance and optimize navigation.

• Third-party cookies: Related to traffic analysis tools and integration with social networks.

6. Collection

CQTD collects personal data through the following interactions:

• Registration of customers and suppliers, in person or electronically.

• Submission of forms via the website to receive newsletters.

• Selection processes for hiring employees.

• Control of access to CQTD premises.

7. Storage

CQTD keeps data stored securely, using systems protected by access controls, encryption, and cybersecurity measures.

All information is stored on encrypted Microsoft SharePoint and Prodrive servers, in the first case, physically located in the United States of America. The Brazilian company AEnova monitors our systems and can access them as data operators. We suggest that you contact these companies’ privacy policies if you want to know how they treat your personal data. All machines that have access to your data are encrypted and protected with firewalls and antivirus software.

8. Sharing

CQTD may share personal data with:

• Service providers: Security, technical support, and data hosting companies.

• Regulatory agencies: When required by law or court order.

By subscribing to and using our newsletter, you will interact with RD STATION, which allows us to collect the data mentioned in the second point of item 3 above, and which will also collect this data for its own purposes. We use operating and work systems provided by Microsoft, which also collects your data for its own purposes. We recommend that you access and read the privacy policies of these services if you want to understand how your data is used by them.

9. Deletion

Personal data is deleted when it reaches the end of its operational or legal necessity, following LGPD guidelines, or after five (5) years, whichever is shorter. Data may be anonymized for statistical or archival purposes, as applicable.

10. Protection

CQTD adopts strict data protection practices, including:

• Restricted access control.

• Encryption.

• Continuous monitoring against cyber threats.

• Cybersecurity Policy.

11. Rights of data subjects

You may exercise your rights under the LGPD, including:

• Confirmation of the existence of data processing.

• Access and correction of incorrect or outdated data.

• Anonymization, blocking, or deletion of unnecessary data.

• Revocation of consent, when applicable.

• Information about the sharing of your data.

To exercise any of these rights, please contact us at: contato@cqtd.com.br

12. Contact

For questions and requests related to this Privacy Notice, please contact:

• Email: contato@cqtd.com.br

13. Personal Data Processing Officer

The CQTD Personal Data Processing Officer is responsible for ensuring compliance with the LGPD. To contact them, please use the email address above. This Privacy Notice will be updated whenever necessary to ensure its adherence to current legislation and best data protection practices.