Privacy Policy

SECTION 1 - GENERAL INFORMATION

This Privacy Policy contains information on the collection, use, storage, processing and protection of personal data of users and visitors to the www.vapza.com.br website and its subdomains, in order to demonstrate absolute transparency on the subject and clarify the all concerned about the types of data that is collected, the reasons for collecting it, and how users can manage or delete their personal information.

This Privacy Policy applies to all website users and visitors

www.vapza.com.br and its subdomains and integrates the General Terms and Conditions of Use of the website www.vapza.com.br and its subdomains, duly registered with the CNPJ under No. 00.186.720/0001-93, located at Rua Amazonas de Souza Azevedo, 268 – Bacacheri, Curitiba – PR, 82520-620, hereinafter referred to as Vapza Alimentos S/A, as well as its branches.

This document was prepared in accordance with the General Law for the Protection of Personal Data (Law 13.709/18), the Marco Civil da Internet (Law 12.965/14) and EU Regulation n. 2016/6790). Furthermore, the document may be updated as a result of any regulatory update, which is why the user is invited to periodically consult this SECTION. The user has the right to withdraw his consent at any time, to do so, he must contact us via email: [email protected]

SECTION 2 – HOW DO WE COLLECT PERSONAL USER AND VISITOR DATA?

User and visitor personal data are collected by the platform as follows:

When the user creates an account on the website www.vapza.com.br and its subdomains, these data are the basic identification data, such as (example: email, full name, city of residence and profession). From them, we can identify the user and the visitor, in addition to ensuring greater security and well-being for their needs.

When a user or a visitor accesses the pages of the website www.vapza.com.br and its subdomains, information about interaction and access is collected by the company to ensure a better experience for the user or visitor. This data can deal with the keywords used in a search, the sharing of a specific document, comments, page views, profiles, the URL from which the user or visitor comes, the browser they use and their access IPs, among others that can be stored and retained.

Through a third party: the website www.vapza.com.br and its subdomains receive data from third parties such as Facebook, Google and Instagram when a user logs in with their profile from one of those sites. The use of this data is previously authorized by the users with the third party in question.

SECTION 3 – WHAT PERSONAL DATA DO WE COLLECT ABOUT THE USER AND VISITOR?

The personal data of the user and visitor collected are as follows:

Data for creating the account/profile on the platform (example: email, full name, city of residence and profession).

Data for navigation optimization: (example: access to pages, keywords used in the search, recommendations, comments, interaction with other profiles and users, profiles followed, IP address).

Data for completing transactions: data relating to payment and transactions, such as credit card number and other information about the card, in addition to the payments made.

Newsletter and promotional emails: the email registered by the visitor will be collected and stored until the user requests the unsubscribe.

Sensitive data: The platform may collect the following sensitive user data: Data on food preferences and consumption habits.

Contract-related data: upon the formalization of the purchase and sale contract or the provision of services between the platform and the user or visitor, data relating to the performance of the contract may be collected and stored, including communications between the company and the user .

This document was prepared in accordance with the General Law for the Protection of Personal Data (Law 13.709/18), the Marco Civil da Internet (Law 12.965/14) and EU Regulation n. 2016/6790), with the Data Protection Officer (DPO) in charge at VAPZA Gilmar Machado / telephone 41 3362 6466 / e-mail [email protected]. Also, the document may be updated as a result of any regulatory update, which is why the user is invited to periodically consult this SECTION.

SECTION 4 – WHAT PURPOSES DO WE USE PERSONAL USER AND VISITOR DATA?

User and visitor personal data collected and stored by the platform

www.vapza.com.br and its subdomains are intended to:

User and visitor well-being: improve the product and/or service offered, facilitate, streamline and fulfill the commitments established between the user and the company, improve the user experience and provide specific functionalities depending on the user's basic characteristics.

Platform Improvements: Understand how the user uses platform services to help with business and technical development.

Ads: Present personalized ads to the user based on the data provided.

Commercial: the data is used to personalize the content offered and generate subsidy for the platform to improve the quality of the services' operation.

User profile preview: automated processing of personal data to assess usage on the platform.

Registration data: to allow user access to certain platform contents, exclusive to registered users.

Contract data: provide the parties with legal certainty and facilitate the conclusion of the deal.

The processing of personal data for purposes not provided for in this Privacy Policy will only occur upon prior notice to the user, so that the rights and obligations set forth herein remain applicable.

SECTION 5 – HOW LONG IS PERSONAL DATA STORED?

The personal data of the user and visitor are stored by the platform for the period necessary to provide the service, or to fulfill the purposes set out in this document, as provided for in item I of article 15 of Law 13.709/18.

Data can be removed or anonymized at the user's request, except in cases where the law provides for another treatment. The user has the right to withdraw his consent at any time, to do so, he must contact us via email: [email protected]

Furthermore, the personal data of users can only be saved after the end of their treatment in the following cases provided for in article 16 of the aforementioned law:

I – Compliance with a legal or regulatory obligation by the controller;

II – Study by a research body, ensuring, whenever possible, the anonymization of personal data;

III – Transfer to a third party, provided that the data processing requirements set out in this Law are respected;

IV – Exclusive use by the controller, its access by a third party being prohibited, and provided that the data is anonymized.

SECTION 6 - SECURITY OF STORED PERSONAL DATA

The platform undertakes to apply technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, alteration, communication or dissemination of such data.

Data relating to credit cards are encrypted using the technology "secure socket layer" (SSL) which guarantees the transmission of data in a secure and confidential way, so that the transmission of data between the server and the user occurs in an encrypted and encrypted.

The website undertakes to notify the user in the event of any breach of the security of their personal data.

The stored personal data is treated confidentially, within legal limits. However, we may disclose your personal information if we are required by law to do so, or if you violate our Terms of Service.

SECTION 7 - DATA SHARING

User profile data is not shared publicly on search engines and within the platform.

SECTION 8 – WILL PERSONAL DATA STORED WILL BE TRANSFERRED TO THIRD PARTIES?

Personal data may be shared with third parties, indicated when purchasing products. Data are only passed on to the extent necessary to allow them to perform the contracted services. (Storage, delivery and payment of products purchased on the website www.vapza.com.br and its subdomains) and any partner is prohibited from using the data obtained for any activity other than the execution of the contracted service.

With respect to third-party service providers such as payment transaction processors, please note that each has its own privacy policy. Therefore, we encourage you to read their privacy policies to understand what personal information will be used by these providers.

SECTION 9 - COOKIES OR NAVIGATION DATA

Cookies refer to text files sent by the platform to the user's or visitor's computer and which are stored there, with information related to navigation on the website. Such information is related to access data such as location and access time and is stored by the user's or visitor's browser so that the platform server can read it later in order to customize the platform's services.

The platform user or visitor www.vapza.com.br and its subdomains acknowledge and accept that a navigation data collection system can be used through the use of cookies.

The persistent cookie remains on the user's and visitor's hard drive after the browser is closed and will be used by the browser on subsequent visits to the website. Persistent cookies can be removed by following your browser's instructions. The session cookie is temporary and disappears after the browser is closed. It is possible to reset your web browser to refuse all cookies, however some platform features may not work correctly if the ability to accept cookies is disabled.

SECTION 10 - CONSENT

By using the services and providing personal information on the platform, the user is consenting to this Privacy Policy.

The user, when registering, manifests to know and can exercise their rights to cancel their registration, access and update their personal data and guarantees the veracity of the information made available by them.

The user has the right to withdraw his consent at any time, to do so, he must contact us via email: [email protected] or by mail to the following address: Rua Amazonas de Souza Azevedo, 268 – Bacacheri, Curitiba – PR, CEP 82520-620.

SECTION 11 - CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so it is recommended that the user or visitor review it frequently.

Changes and clarifications will take effect immediately after their publication on the platform. When changes are made, users will be notified. By using the service or providing personal information after any changes, the user or visitor demonstrates their agreement with the new rules.

Upon the merger or sale of the platform to another company, user data may be transferred to the new owners for the permanence of the services offered.

SECTION 12 - JURISDICTION FOR CONFLICT RESOLUTION

For the settlement of disputes arising from this instrument, Brazilian law will be fully applied.

Any disputes must be presented at the Court of the district of Curitiba/PR where the company's headquarters are located.