EXTERNAL PRIVACY POLICY
1. Purpose
This Privacy Policy covers the processing of personal data of users, partners, clients, and suppliers of OMC GROUP. The purpose of this policy is to:
Inform you which of your personal data we collect, the reasons for such collection, and with whom we may share it;
Clarify how we use the personal data you share with us through our web platform;
Inform you about your rights regarding the personal data we collect and process, and explain how we protect your privacy.
2. OMC GROUP Privacy Statement
The following provisions apply to all our services:
OMC GROUP does not sell, share, or grant any information provided to it by individuals or entities subject to this Privacy Policy, except as provided herein.
If you have any questions about how OMC GROUP uses the information provided to us and such questions are not addressed in this Privacy Policy, please contact us before providing any information through other channels.
Furthermore, if you do not agree with the terms described here, we ask that you discontinue access and/or use of our website and inform us of your reason for disagreement by using the email provided above.
3. Third-Party Services
This Privacy Policy applies solely to information provided to OMC GROUP. Our services may occasionally incorporate services provided by third parties, and therefore, the information provided to us may be shared with them. However, if a client chooses to use a product/service offered by third parties or incorporate it into OMC GROUP’s services independently, the client will be exclusively subject to the third party’s Privacy Policy for that product/service, which may contain provisions that differ from those found in this document.
4. Data Collected and Purposes
a. Data You Provide to Us:
Contact tab (“Fale Conosco”): Full name, phone number, email address, city, and state.
Work With Us tab (“Trabalhe Conosco”): Full name, email, phone number, and address, through registration on the Candidate Portal, as well as any other data you choose to share through your résumé.
Whistleblower Channel (“Ouvidoria”): Although anonymous reporting is available, if you wish, you may provide identifying information such as name, email, phone number, and any other relevant data.
Commercial relationships: When contracting our services, purchasing our products, or entering into business partnerships, we may require personal data such as full name, address, ID number (RG), Taxpayer ID (CPF), and email.
b. Data We Collect About You:
We may collect information about your computer or device, including your IP address, location, operating system, browser information, details about your visit, browsing history, and how you use our website. These types of data are collected through cookies and related technologies. Upon first accessing our website from certain jurisdictions, including Brazil, you will receive a notification that cookies and similar technologies are in use. By clicking “Accept,” you indicate that you understand and agree to the use of these technologies.
General Provisions:
You are fully responsible for the accuracy of the data you provide for the purposes described herein.
OMC GROUP is not obliged to process any of your data if there are reasons to believe such processing may result in a violation of applicable laws, or if you are using our services, products, and website for illegal, unlawful, or immoral purposes.
The database formed through the collection of data is owned and controlled by OMC GROUP. Its use, access, and sharing will occur strictly within the business purposes and limits described in this Policy.
5. With Whom We Share Your Data
OMC GROUP is authorized to share your personal data with other data processing agents if necessary for the purposes listed in this document, in accordance with the principles and guarantees established by Law No. 13.709/18 (LGPD), as per Article 7, §5 of the law.
OMC GROUP uses reliable third-party services and technologies that follow acceptable security standards and are bound by confidentiality and data protection obligations. Your data will be shared with such third parties as described below, always in accordance with this Policy and applicable law:
Cloud Storage Providers – Third-party cloud service providers that host data processed by OMC GROUP. In these cases, your data remains stored and processed by OMC GROUP.
Government Authorities – Administrative agencies and competent authorities, to (i) comply with legal or regulatory obligations, or (ii) take or prompt legal, judicial, or administrative measures to defend our rights under this Policy, including in any legal or administrative proceedings. “Government Authorities” include law enforcement, data protection authorities, public entities, and/or other governmental organizations.
Business Partners – To (i) perform or enhance our services; (ii) expand our business; and/or (iii) develop new business opportunities.
Corporate Transactions – Your data may also be shared in the event of corporate movements such as mergers, acquisitions, or incorporations involving OMC GROUP.
No Sharing: OMC GROUP does not share your personal data with any third parties other than those mentioned above. If you are contacted by unidentified third parties, please reach out to our DPO through the contact channel provided in this Policy, and we will assist you in investigating the incident.
6. Where We Store, Process, and Transfer Your Data
Your data may be transferred, stored, and processed in Brazil by OMC GROUP or, in some cases, by our partners, in accordance with this Policy. In addition to following accepted security and confidentiality standards, OMC GROUP is committed to storing entrusted data on high-security servers.
7. Data Retention Period
All data collected by OMC GROUP is stored solely to fulfill the purposes described in this Policy. Once the data is no longer essential or relevant, it will be deleted from our database. However, even if you exercise any of your rights (see section “8”) or if the purpose of collection has been achieved, we may still retain your information to protect our rights, comply with judicial, administrative, or arbitral orders, or meet legal or regulatory obligations.
8. Your Rights as a Data Subject
In certain circumstances, you may contact us to exercise your rights under the LGPD, including:
Confirmation of processing;
Access to data;
Correction of incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion of unnecessary or unlawfully processed data;
Data portability, in accordance with regulations;
Withdrawal of consent, if applicable;
Deletion of data processed based on consent, if applicable;
Information about the possibility of refusing consent and its consequences;
Information about public and private entities with whom data has been shared;
Right to object in cases of legal noncompliance regarding consent exemptions.
Our goal is to respond to your requests as quickly as possible, within 15 days. The above rights may be exercised in accordance with the LGPD, exclusively by the data subject or their legal representative, by contact us with the following information:
a) A copy of your ID;
b) Proof of legal representation, if applicable;
c) A description of the request.
* For your security, we may need to request additional information to verify the identity of the requester.
** If applicable, the request may be denied, and the requester will be informed of the justification (e.g., data deletion may be denied to comply with statutory limitation periods or legal obligations).
9. How OMC GROUP Protects Your Information
OMC GROUP actively works to protect your privacy and personal data against unauthorized access, destruction, loss, alteration, disclosure, or any form of unlawful or noncompliant processing.
We commit to applying technical and organizational measures to protect personal data from unauthorized access and from situations of destruction, loss, alteration, disclosure, or dissemination.
To ensure security, we adopt solutions that consider appropriate technologies, implementation costs, the nature, scope, context, and purposes of the processing, and the risks to the rights and freedoms of the user.
Our platforms ensure that personal data is transmitted securely and confidentially, meaning that data transmission between the server and the user is fully encrypted.
However, OMC GROUP is not liable for incidents caused exclusively by third parties, such as hacker or cracker attacks that breach security systems, nor for incidents caused exclusively by the user, such as voluntarily sharing their data with third parties.
OMC GROUP also commits to notifying users within an appropriate timeframe if any personal data breach occurs that may pose a high risk to their rights and freedoms. “Personal data breach” means a security breach that results, accidentally or unlawfully, in the destruction, loss, alteration, disclosure, or unauthorized access to personal data transmitted, stored, or otherwise processed.
Finally, OMC GROUP undertakes to process users’ personal data with complete confidentiality, within legal limits. Internally, personal data is accessed only by duly authorized professionals, respecting principles of proportionality, necessity, and relevance for business purposes.
10. Access and Correction of Information
If you wish to access and/or update information collected by OMC GROUP, feel free to contact us. However, we reserve the right to retain information necessary to protect our interests, always based on the legal grounds set forth in the LGPD.
11. Changes to this Policy
OMC GROUP reserves the right to modify this Privacy Policy at any time without prior notice. When we make material changes to this Policy, we may issue appropriate notifications depending on the circumstances, such as a visible notice on our platforms or an email if you are registered. Therefore, it is essential that you carefully read any communications and regularly review this document.
12. Complementary Policies
By accepting this Policy, you are also subject to our Cookie Policy.
13. How to Contact OMC GROUP Regarding This Privacy Policy
If you have any questions, comments, suggestions, or requests related to this Privacy Policy or the use and disclosure of personal information, please contact us, and we will respond promptly.
Alternatively, you may contact us in writing at:
R. Raposo Tavares, 22, Lote 22, Quadra C, Macuco, Valinhos – SP, ZIP 13279-390, Brazil.
14. References
Law No. 13.709/18 – General Data Protection Law (LGPD)
