PRIVACY STATEMENT
ENESA ENGENHARIA S.A. is committed to transparency, privacy and security of its customers’ data throughout the interaction process with us and to provide transparency to how we use, store or delete your information, we detail our Privacy terms below.
Customer registration data is not disclosed to third parties, except when necessary for the delivery process, for billing or compliance with tax and regulatory obligations relating to the services provided by ENESA ENGENHARIA S.A..
The nomenclature ENESA ENGENHARIA S.A. refers to the company ENESA ENGENHARIA, registered with the CNPJ/MF under no. 48.785.828/0001-29 and headquartered at Avenida das Nações Unidas no. 13.797, Block III, 20th floor, Vila Gertrudes, São Paulo / SP, CEP 04794-000.
For the purposes of this Declaration, personal data (“Personal Data”) is considered to be all information related to an identified or identifiable natural person.
What Personal Data is processed by ENESA ENGENHARIA S.A.?
ENESA ENGENHAIA S.A. may process your Personal Data when provided directly by you, your company or a client of ENESA ENGENHARIA S.A., for example when they hire us to perform any of the services offered by our company or when you apply for a vacancy working with us.
The Personal Data collected may include, but is not limited to: name, ID, CPF, address, telephone, email, date of birth, financial information, professional information, among others.
The types of Personal Data collected may vary depending on the nature of the services we provide to you, our client or how you use our website. In some rare circumstances, we may also collect other special categories of personal data about you, such as sensitive data, either because you have provided that data to us or because we are obliged to collect it as a result of legal requirements imposed on us.
Also, when you visit our website, we collect certain Personal Data automatically from your device. The data we collect automatically includes information such as your IP address, device type, unique device identification number, browser type, broad geographic location and other technical information, further detailed in our cookie policy. We also collect information about how your device interacted with our website, including the pages accessed and links clicked.
For what purposes does ENESA ENGENHARIA S.A. process Personal Data?
We process Personal Data for various purposes, in particular to provide services to you or our customers and also to promote the services of the ENESA ENGENHARIA S.A. portfolio.
Additionally, we may use your Personal Data in internal processes aimed at anti-money laundering consultations, due diligence checks related to services, security procedures, promotion of services and communications, as well as continuous improvement of the ENESA ENGENHARIA website and platforms ENESA ENGENHARIA S.A..
ENESA ENGENHARIA S.A. may also process your data for the following business purposes, which are not exhaustive:
- Audit related to interactions with holders in relation to the professional services that ENESA provides;
- Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and take appropriate action as a result of any detected activity;
- Perform professional services for our clients, further detailed in our Client privacy policy.
- Carry out internal research for technological development and demonstration;
- Conduct financial, accounting and reputation research;
- Undertake activities to verify or maintain the quality or security of our services, as well as improve, update or improve our services.
What are your rights as a holder of Personal Data?
As a holder of Personal Data you have the following rights:
- Confirmation of the existence of processing of your Personal Data;
- Information about which Personal Data is processed by ENESA ENGENHARIA S.A. and for how long;
- Access to your Personal Data;
- Information about the purposes for which your Personal Data is processed;
- Request correction of incomplete, inaccurate or outdated data;
- Request the anonymization, blocking or deletion of data that you deem unnecessary, excessive or treated in non-compliance with the LGPD;
- Request, when possible, the portability of Personal Data to another service or product provider;
- Request the deletion of Personal Data processed based on your consent or when they no longer meet the purpose for which they were collected;
- Request information from public and private entities with which ENESA ENGENHARIA S.A. shared your data;
- Information about the possibility of not providing consent and the consequences of refusal, when this is the legal basis used by ENESA ENGENHARIA S.A. for the processing of your data;
- Revocation of consent;
- Request the review of decisions made solely based on automated processing of personal data that affect your interests; and
- Right to lodge a complaint with the National Personal Data Protection Authority (“ANPD”).
To exercise the rights mentioned above or request any clarification regarding the processing of Personal Data by ENESA ENGENHARIA S.A., please contact our Data Officer via e-mail contato@enesa.com.br.
Sharing of Personal Data
ENESA ENGENHARIA S.A. may share your Personal Data with companies affiliated to the ENESA Group with customers, suppliers, business partners, authorities and service providers, always in compliance with fundamental rights and the protection of Personal Data, as described in the LGPD.
For this sharing, rights and duties are established between the parties in order to prevent the processing of Personal Data in non-compliance with applicable laws, and it is required that everyone involved carry out the processing of personal data with security and confidentiality, and only for the period determined by law or agreement, obligations in force even after the end of the relationship between the parties.
International Transfer of Personal Data
ENESA ENGENHARIA S.A. operates in other countries and certain aspects of infrastructure are centralized, including information technology services shared among member companies. Furthermore, when engagements with ENESA ENGENHARIA S.A. customers span more than one jurisdiction, certain information will need to be accessed by all those within the ENESA ENGENHARIA S.A. organization who are working on the matter. Therefore, in these cases your Personal Data will be transferred and stored outside the country.
Storage of Personal Data
ENESA ENGENHARIA S.A. has appropriate technical and organizational measures to protect Personal Data, such as information classification, data backup and restoration and identity and access management.
Personal Data is protected against unauthorized access, unlawful processing or disclosure, as well as accidental loss, modification or destruction. This applies regardless of whether such data is processed electronically or physically.
Our policy is to keep Personal Data only as long as it is necessary for legitimate and informed purposes. The retention and storage periods for Personal Data vary and are defined in accordance with regulatory and legal requirements.
Final dispositions
This Statement will be updated periodically to reflect changes in our practices and services. When we post changes to this Statement, we will revise the last updated date at the top of the document.
We recommend that you check this page from time to time to inform yourself of any changes in the way we process Personal Data.
Legislation and forum
This policy will be governed, interpreted and executed in accordance with the Laws of the Federative Republic of Brazil, especially Law No. 13,709/2018, regardless of the Laws of other states or countries, with the Customer’s home court being competent to resolve any doubts arising from this document.
Other important information about the terms and conditions of use of this website is available under Conditions of Use.