Privacy Notice
Braslux is committed to protecting the freedom and privacy rights of its employees, customers, suppliers, and other partners. This policy aims to follow the Brazilian General Data Protection Law (Law No. 13,709 of August 14, 2018) and other relevant data protection rules, and it explains how the company protects privacy when handling personal data.
01 - Types of Data: Personal data refers to any information that can be directly or indirectly linked to an identified or identifiable natural person (the Data Subject), such as a name, identification number, location data, or other information related to their identity.
Braslux identifies the categories of personal data it processes and the respective data subjects. The company collects only the data necessary to fulfill the specific purposes of each processing activity.
02 - Where Data Is Collected and Processed: Personal data may be collected through the company’s website, communication platforms, or physical documents used in commercial and employment interactions. Braslux’s internal processes identify where data is used and the types of processing to which it is subjected.
03 - Purpose of Data Use: Braslux uses personal data only for specific and limited purposes, such as performing service agreements, communicating with users, improving services and user experience, sending institutional information, and fulfilling mandatory legal requirements. All data processing is conducted in accordance with the defined purposes, legitimate interests, and, where applicable, the consent of the data subject. The purposes for which personal data is used are fully compliant with the Brazilian General Data Protection Law (Law No. 13,709/2018– LGPD).
04 - Data Storage: Personal data is stored in a secure environment, preferably in electronic format, and, whenever possible, protected through encryption during processing and storage. In certain cases, data may also be processed and stored in physical form, with appropriate security measures in place and the storage locations duly identified.
05 - Data Sharing: Personal data may be transferred internally or externally throughout company processes, depending on the format or medium in which it is stored (physical or electronic). Such transfers are always conducted in a manner consistent with the purposes for which the data was collected and in accordance with the provisions of the LGPD. Examples include data contained in forms, emails, contracts, and other documents.
06 - Data Deletion: Personal data will be unauthorized access and any accidental or illegal events that could lead to destruction, loss, changes, or other improper handling. Data is disposed of in accordance with applicable legal and regulatory requirements.
07 - Rights of Data Subjects: In compliance with the applicable regulations on personal data processing, Braslux respects and upholds the rights of data subjects as provided for in the LGPD. Data subjects may exercise their rights by submitting a request through the company’s designated communication channel with the Data Protection Officer (DPO).
08 - Security Controls: Braslux follows top standards in technology and information security, using both technical and organizational steps to keep personal data safe from unauthorized access and any accidental or illegal events that could lead to destruction, loss, changes, or other improper handling. Data is disposed of in accordance with applicable legal and regulatory requirements.
09 - Contact Channel: Braslux provides a direct communication channel with its Data Protection Officer (DPO) through the email address dpo@braslux.com.br.
The appointed DPO is Melinda Balbinot, and the alternate DPO is Bernardo Amarante Michel dos Santos.