Greenlegis is a software development and consulting/auditing services company that handles sensitive client information. Therefore, the implementation and maintenance of an Integrated Management System – IMS is strategic. Furthermore, ensuring information protection and security is a fundamental business requirement.
The purpose of the IMS is to ensure the continuous adequacy, efficiency and effectiveness of the management and support of information security, the achievement of the highest quality in deliveries, the promotion of environmental responsibility, and the assurance of health and safety of our workers and contractors, meeting commercial, legal, statutory, regulatory and contractual requirements.
Therefore, the Greenlegis Board, through this Integrated Management System – IMS policy, commits to:
- 1Pursue the continuous improvement and excellence of the integrated management system regarding: information security, data privacy, quality of products and services provided, environment, and occupational health and safety;
- 2Apply practices aimed at preventing pollution and adverse socioeconomic impacts in its processes and services, as well as preventing work-related injuries, illnesses and other health problems, providing safe and healthy working conditions;
- 3Preserve the confidentiality, integrity and availability of information and personal data (throughout its life cycle), through the application of a risk management process, providing assurance to stakeholders that risks are properly managed;
- 4Observe the principles of purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability when processing personal data;
- 5Meet the needs of customers and other stakeholders through information security and data privacy, promoting continuous growth in economic productivity with competitive costs, quality and the constant updating of objectives and goals that are technically and economically viable;
- 6Comply with all applicable legal requirements and other requirements subscribed to its business and the integrated management system;
- 7Promote consultation and worker participation;
- 8Maintain a responsible and open communication channel with all customers and stakeholders.
Rev. 01, 01/31/2025
LGPD
The Brazilian General Data Protection Law - LGPD establishes rules for the processing of personal data by companies and organizations, with the aim of guaranteeing your privacy and security, regulating how this data is collected, stored, used and shared.
The privacy and security of customers' personal data is a constant concern of GreenLegis, and therefore we are in compliance with the Brazilian General Data Protection Law - LGPD and NBR ISO 27701 - Requirements and guidelines for Information Privacy Management.
We have a team specialized in data protection and information security, composed of a DPO - Data Protection Officer and the Information Security and Privacy Committee.
Contact channel for the data subject
GreenLegis provides a channel for any questions or requests regarding the collection and processing of your personal data, our privacy policy, cookie policy and your choices. Contact us at privacidade@greenlegis.com.br, providing:
Greenlegis DPO - Data Protection Officer: Nilson Júnior
General Privacy Directive
GreenLegis Serviços em Sustentabilidade Ltda., a private legal entity registered under CNPJ/MF 24.578.995/0001-30, headquartered at Rua Gonçalves Dias 874, Suite 1201, Belo Horizonte / MG, ZIP: 30.140-091, ("GreenLegis"), is committed to your privacy.
This General Privacy Directive governs the Processing of Personal Data carried out by us during your visit to our institutional website ("Website"). For the purposes of this Directive, any reference to "we", "our", "us" means GreenLegis.
Your trust is very important to us, so we are committed to safeguarding your privacy and protecting your data. This General Privacy Directive clarifies how Greenlegis collects, uses and shares your personal information in connection with the website, software, channels or service linked to this Privacy Statement.
We have great concern for your Privacy, whether as a customer and/or simple visitor of our website, always seeking the highest level of protection for the personal data we process.
Attention
Before using our website, carefully and fully read the terms of this Privacy Policy. We understand that the continuity of your access constitutes tacit agreement with the terms stipulated herein, including the eventual collection of the Personal Data mentioned. If you do not agree with the provisions of this Privacy Policy, you should stop accessing our Website.
However, please let us know if you disagree so we can clarify or improve it.
We have prepared this General Privacy Directive so you understand our practices related to the collection and processing of your personal data, your rights and our commitments.
DEFINITIONS
- Processing agents
- the Controller and the Processor;
- Anonymization
- use of reasonable technical means available at the time of Processing, through which data loses the possibility of association, directly or indirectly, with an individual;
- Controller
- natural or legal person, of public or private law, responsible for decisions regarding the Processing of Personal Data;
- Personal Data
- any information related to an identified or identifiable natural person, directly or indirectly. Examples of Personal Data include: name, tax ID, address, email, financial data, geolocation, among others. This concept includes Sensitive Personal Data;
- Sensitive Personal Data
- special category of Personal Data referring to racial or ethnic origin, religious belief, political opinion, union membership or membership in religious, philosophical or political organizations, data referring to health or sex life, genetic or biometric data, when linked to a natural person;
- Processor
- natural or legal person, of public or private law, that processes Personal Data on behalf of the Controller;
- Data Subject
- the natural person to whom the Personal Data refers;
- Processing
- any operation carried out with Personal Data, such as those referring to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction;
- User(s)
- any individual who uses or has access to our website, persons interested in becoming one of our employees, and customers/individuals who contact us.
Who is the controller of my personal data?
GreenLegis is the CONTROLLER of your personal data collected and processed by our services, as a website visitor, customer and contracting company.
This Policy does not apply to the Greenlegis system, in cases where we process personal data as a PROCESSOR, on behalf of our customers who contract our system or module(s). In such cases, processing will only be carried out according to the instructions established by our customers (then controllers) and in accordance with applicable legislation.
If you are an employee, former employee or supplier of one of our customers, please contact them directly to learn more about the processing of your Personal Data.
Who does it apply to?
This Policy applies when you contact us, when you are interested in becoming one of our employees, or when you browse our website, including personal data collected through our channels, forms, social networks and customer service. Our users may, in certain cases, choose the types of data we collect, use and share, as described in this Policy.
What data is collected and what is its origin?
Data actively provided by you or collected by us is considered confidential. We are committed to adopting all technical and administrative measures capable of protecting your personal data.
In general, when you use our website or interact with us in any way (e.g. requesting information or support, submitting forms, etc.), various information is collected:
- Contact information
name, phone number, WhatsApp, email address, position, company and department in which you work.
- Organization and contact information
your employer or organizations of which you are a member and similar data.
- Social media and online content
content of communications, suggestions, questions, comments, feedback and other information you send us, that you provide when you contact or interact with us on social networks such as Facebook, Instagram, LinkedIn and similar.
- Data for contracting our system
data of the legal representative and contact person responsible for contracting (full name, email, tax ID, address, phone), company, business ID, financial data.
- Device and browser information
network information, device and browser identifiers, advertising identifiers, cookies and similar data.
- Usage information and browsing history
usage metrics, content interactions and user journey history.
- Location data
your device location, your residence and similar location data.
- Demographic information
country, preferred language, age, date of birth, marital status, gender and similar data.
- Career-related information
data contained in the resume submitted by the user. Other additional data may be requested during the recruitment process.
Sensitive Personal Data
For the processing purposes of this Policy, there is the Processing of Sensitive Personal Data. In the rare and specific cases where this occurs, processing is based on specific terms previously made available to Users, by means of their specific consent or based on express legal authorization.
Children and/or Adolescents
Our website and our system are not intended for children and adolescents, that is, individuals under 18 years of age.
We do not deliberately collect Personal Data from children and adolescents. If the User is under 18 years of age, they should not use our website nor provide us with any Personal Data.
If we become aware that we have collected Personal Data from a child or adolescent, we will take reasonable measures to delete the Personal Data in question.
Processing Purposes
We process the Personal Data collected in strict observance of the terms of the Brazilian General Data Protection Law (Law No. 13,709/18) and other applicable legislation for purposes related to communications with Users and the functionality of our Website.
In this context, the Processing of Personal Data is necessary to:
Most of the time the processing of your Personal Data is based on our legitimate interests related to the contracting of our services or based on your consent, when requested.
| Legal Basis | Processing Purpose |
|---|---|
| Compliance with legal/regulatory obligation | 1. Meet requirements of regulatory bodies; 2. Comply with legal obligations. |
| Contract execution or contractual obligations | 1. Provide our services; 2. Identify you for communication purposes; 3. Communicate with you, whether for sales or billing. |
| Legitimate interest | 1. Send you personalized offers; 2. Manage and analyze our customer base; 3. Conduct satisfaction questionnaires; 4. Build relevant research databases. |
| With your consent | For other purposes, provided you have consented. |
If you would like to know more details about how your personal data will be processed by us based on the described purposes, please contact us at privacidade@greenlegis.com.br.
Transfer/Sharing of Data
Any sharing of information is done strictly to the extent necessary and following strict standards of security and confidentiality, in compliance with privacy protection laws and regulations.
It may be necessary to use third-party datacenters for cloud hosting purposes and consequently the storage and processing of personal data.
We may share your information in the following cases:
- Internal sectors of GreenLegis, in order to operate, execute, improve, understand, customize and provide support;
- Authorities, government entities or other third parties, for the protection of our interests in any type of conflict;
- By judicial order or by request of competent administrative authorities;
In other cases, we will send a notification to request your consent.
Data Transfer Outside Brazil
Some transfers may occur abroad, notably to companies providing cloud data storage services, on servers located outside Brazil.
Regardless of where your information is processed, we will ensure that data is transferred according to this Privacy Policy and that adequate contractual, technical and organizational measures are observed.
Information Security
Once we collect your information, we will use strict procedures and the best security and technology resources to protect your Personal Data against loss, theft and unauthorized access, such as:
How long is my personal data kept?
Your Personal Data will be kept for the period necessary to satisfy the purposes for which it was collected, as described in this policy, or to comply with applicable legal requirements.
From the moment the purpose is achieved or the data is no longer necessary, it will be eliminated within the technical limits of the activities, with conservation authorized in situations provided for in current legislation.
If you use our products, your account information will be kept while the account is active. If you request cancellation, your information will be deleted within 60 days of cancellation.
You can obtain more details via email at privacidade@greenlegis.com.br, including requesting deletion at any time.
What are my rights as a personal data subject?
You may contact us at any time to:
- ✓Confirm the existence of processing of your personal data
- ✓Obtain information on how to access your personal data
- ✓Carry out/request correction of incomplete, inaccurate or outdated data
- ✓Anonymization, blocking or deletion of unnecessary or excessive data
- ✓Portability of data to another service provider
- ✓Request the deletion of data processed with your consent
- ✓Know with which entities we share your data
- ✓Information about the possibility of not providing consent
- ✓Revocation of consent for the processing of your personal data
- ✓Other rights of the data subject according to current legislation
To exercise any of your rights, please contact us at privacidade@greenlegis.com.br.
Cookie Policy
When you visit our site, a "cookie" is inserted in your browser through the Google Analytics software, to identify how many times you return to our address.
Cookies are mechanisms through which websites store information in your browser that help and personalize your access.
Necessary Cookies
Indispensable for the Website to function. Cannot be turned off without affecting the main activities.
Analytical Cookies
Provide information about how sites are being used to improve your experience.
Marketing Cookies
Provide information about content interaction, helping to understand the effectiveness of campaigns.
| Cookie | Domain | Duration | Function |
|---|---|---|---|
| _GRECAPTCHA | 5 months and 27 days | Identify bots to protect the site. | |
| _ga | 2 years | Stores information to recognize unique visitors. | |
| _gid | 1 day | Information about how visitors use the site. | |
| rdtrk | RD Station | 1 year | List of pages accessed before contact. |
| _trf.src | RD Station | 1 year | Information about traffic source. |
| bscookie | 1 year | LinkedIn Analytics | |
| lang | LinkedIn Ads | session | LinkedIn Analytics |
| AnalyticsSyncHistory | 1 month | LinkedIn Analytics | |
| NID | 6 months | Google ADS | |
| _glc_au | 1 year | Google AdSense, advertising effectiveness. |
You may choose to refuse or disable Cookies on your first access to the website or later through your browser settings.
To disable cookies in your browser, follow the instructions for the main browsers:
Marketing-related choices
If you interact with our materials and content, we will collect the data provided by you to address your legitimate interest in getting to know us.
If you decide that you no longer wish to receive such communications, you may cancel your subscription at any time, following the instructions provided in such communications.
Questions about your privacy?
Any questions about this Privacy Policy may be addressed via email at privacidade@greenlegis.com.br. We will be available on business days from 9 AM to 6 PM and will respond as soon as possible.
Changes to this Privacy Policy
This Policy may be changed at any time, and using our website after a change constitutes, to the extent permitted by law, tacit consent to the new Policy.
We recommend that you periodically review our Privacy Policy to stay updated with the most recent information.