Privacy Policy

1. Privacy and Cookies Policy

This Use and Privacy Policy sets out the access guidelines and describes the Institution's practices regarding the processing and security of information; copyright; responsibility for the use of, and the information available on, the domain https://www.amigosdobem.org ; and information collected from users who access our website or who otherwise share personal information and enter into contractual relationships with us.

What you need to know before reading this policy

Data subject

the person to whom the personal and/or sensitive data subject to any processing refers.

Processing

any operation involving the handling of personal data: collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, editing, anonymization, deletion, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

Personal data

any information relating to a person that can identify them, such as: first and last name, date of birth, personal identification document data, home or business address, telephone number, email address, cookies and IP address, private information and any other information that may in any way identify a person.

Sensitive personal data

any personal data concerning racial or ethnic origin, religious belief, political opinion, membership of a trade union or of a religious, philosophical or political organization, data concerning health or sex life, and genetic or biometric data, when linked to a natural person.

Public policies

sets of programs, actions and decisions taken by public or private entities, such as the Institution, aimed at ensuring the rights provided for in the Federal Constitution, regardless of social, cultural, ethnic, economic or other background.

Cookies

small files created by the websites visited and saved on the user's computer, through the browser, which record data about us. AMIGOS DO BEM INSTITUIÇÃO NACIONAL CONTRA A FOME E A MISÉRIA has a cookie policy setting out all the rules for identifying the visitor, whether to personalize the page according to their profile or to facilitate the transfer of data between pages of the same website.

Consent

a free, informed and unequivocal expression by which the data subject agrees to the processing of their personal and/or sensitive data for a specific purpose.

Legitimate interest

when the use of data does not conflict with other guidelines established by law or with the fundamental rights of the data subject.

Privacy and Data Protection

the ability of the data subject to determine, autonomously, how their personal data is used.

Anonymized data

when, by technical means, the data no longer identifies a person, even if it remains on the platform.

Deleted data

data that has been completely removed from the database and cannot be recovered.

Incident

the exposure of personal data and/or private and/or confidential information to the public or to third parties without authorization.

ANPD

the Autoridade Nacional de Proteção de Dados (Brazilian National Data Protection Authority) is a regulatory body in Brazil that oversees and enforces compliance with the General Data Protection Law (LGPD).

2. Principles

The Privacy Policy of AMIGOS DO BEM INSTITUIÇÃO NACIONAL CONTRA A FOME E A MISÉRIA is based on the following principles:

1. Confidentiality: access to information and resources is restricted to authorized persons only.
2. Integrity: accuracy of the information and of the processing methods to which the information is subjected, keeping it accurate, complete and up to date.
3. Availability: assurance that authorized users have access to information and information assets when needed.

3. Roles and Responsibilities

Controller or Processor

In situations in which AMIGOS DO BEM INSTITUIÇÃO NACIONAL CONTRA A FOME E A MISÉRIA collects data for its own purposes, it acts as Controller.

In situations in which data is collected as a result of a service contracted and defined by its Clients, AMIGOS DO BEM INSTITUIÇÃO NACIONAL CONTRA A FOME E A MISÉRIA acts as Processor.

When acting as Processor, AMIGOS DO BEM INSTITUIÇÃO NACIONAL CONTRA A FOME E A MISÉRIA is responsible for its share of data protection, as agreed with the respective Client; however, it has no power of decision or authority to process data in any way that does not comply with the processes and flows agreed with the DATA CONTROLLER.

When this policy refers to "Amigos do Bem", "we", "us" or "our", as well as other grammatical variations of the first person plural, it refers to Amigos do Bem as the controller, when you use our website, take part in a campaign or program we offer, are part of our team or maintain a partnership involving the processing of your personal and/or sensitive data.

4. Data Collection and Activities

The USER's personal data and information will always be submitted voluntarily by the USER and may be collected in the following ways:

4.1.1. Internal team

The USER's data is provided by the USER and collected by the Amigos do Bem internal team by telephone, email, WhatsApp or chat.

4.1.2. Digital platform or website

The USER's data is provided by the USER and collected through the platform provided by Amigos do Bem (portal, app or website). The data and information we collect include, but are not limited to:

I. Registration data

Full name, telephone number, CPF (Brazilian individual taxpayer ID), RG (Brazilian identity card), email address, date of birth, marital status, number of household members, country and municipality of residence, current home address, photo.

II. Browsing data

IP address, date and time of the USER's registration, date and time of the USER's exit, device, model, operating system, country, region of the location updated at the time of access, actions on the platform or website.

III. Third-party library data

Data used to improve the USER's experience on the platform or website.

• Android Advertising ID
• The activities and actions performed by the USER and recorded on the platform or website include, but are not limited to: (i) screens accessed, (ii) date and time of the actions performed, (iii) operations performed within the platform or website and (iv) data on the USER's behavior within the platform or website.
• The Platform may also use technologies such as cookies, and it is up to the USER to configure their Internet browser should they wish to disable them.

5. Legal Basis for Data Processing

Data processing is authorized by Articles 7, 11 and 14 of Law No. 13,709/2018, the General Data Protection Law (LGPD).

6. Cookies

6.1. What are cookies?

Cookies are files created by the websites you visit. They make your online experience easier by saving browsing information. With cookies, websites can keep you signed in, remember your site preferences and provide locally relevant content.

There are two types of cookies:

• First-party cookies: created by the website you visit. The website is shown in the address bar.
• Third-party cookies: created by other websites. These websites own part of the content, such as ads or images, that you see on the web page you visit.

6.2. How we use cookies

Cookies are used on the website to collect information for our technical and administrative team and, above all, to improve your browsing experience on the website. They are categorized as follows:

6.2.1. Authentication cookies

These are used to recognize a particular USER, enabling access to and use of the Website and/or App with restricted content and/or services and providing more personalized browsing experiences.

6.2.2. Security cookies

These are used to enable security features of the Websites and/or Apps, in order to help monitor and/or detect malicious activities or activities prohibited by this Privacy Policy, as well as to protect the USER's information from access by unauthorized third parties.

6.2.3. Research, analytics and performance cookies

The purpose of this type of cookie is to help understand the performance of the Website and/or App, measure the audience and observe the browsing habits of USERS on the Website and/or App.

6.2.4. Targeting cookies

These are linked to services provided by third parties, such as "Like" and "Share" buttons contained on websites other than the Amigos do Bem website. The third party provides these services because it recognizes that you have visited our website, but it is in no way to be confused with Amigos do Bem itself.

With regard to the cookies mentioned above, you can control whether or not they are used (see the topic "How to Disable Cookies" below), but blocking them may prevent us from offering certain services or impair proper browsing of our website.

6.3. How to disable cookies

Settings for disabling cookies are usually found under "Options" or in the "Preferences" menu of your browser. Below you will find links for the best-known browsers:

• Internet Explorer
• Firefox
• Chrome
• Safari Web and iOS

The cookies used by the Amigos do Bem website are secure and necessary for the proper use of the tools and options offered by the website. If you choose not to accept them, some features of the platform may not function properly during your visit.

7. How We Use the Information We Collect

We may use, store and process personal information to: (i) provide, understand, improve and develop the Amigos do Bem Platform; (ii) create and maintain a trusted and safe environment (such as complying with our legal obligations and ensuring compliance with the Privacy Policy); and (iii) provide, personalize, measure and improve our advertising and marketing.

7.1. Provide, improve and develop

We may use personal information to provide, improve and develop the Platform, such as to:

• enable you to access and use the Platform;
• operate, protect, improve and optimize the experience and the Platform, such as by performing statistical analyses and conducting research;
• if you provide us with your contact information, we may process this information to: (i) facilitate your referral invitations, (ii) send your requests for referrals, (iii) detect and prevent fraud, and (iv) for any purpose you authorize at the time of data collection;
• operate, protect, improve and optimize the experience and the Platform, and personalize and tailor your experience.

We process this personal information for these purposes on the basis of our legitimate interest in using it to improve the Amigos do Bem Platform and our USERS' experience; in addition, we process it where necessary for the proper operation of the environment.

7.2. Create and maintain a safe and trusted environment

We may use personal information to create and maintain a trusted and safe environment, such as to:

• detect and prevent fraud, spam, abuse, security incidents and other harmful activities;
• conduct security investigations and risk assessments;
• verify or authenticate information or identification provided by you;
• comply with our legal obligations;
• in connection with the activities above, we may carry out profiling based on your interactions with the Amigos do Bem platform, your profile information and other content you submit to the platform. If you wish to contest a decision based on automated processing, please contact us as indicated in the Contact Us section below.

We process this information for these purposes on the basis of our legitimate interest in protecting the Amigos do Bem Platform and in assessing compliance with applicable laws.

7.3. Provide, personalize, measure and improve our advertising and marketing

We may use personal information to provide, personalize, measure and improve our advertising and marketing, such as to:

• send you promotional and marketing messages, advertising communications and other information that may be of interest to you, as well as advertisements on social media platforms such as Facebook or Google;
• personalize, measure and improve our advertising;
• administer promotional activities or events sponsored or managed by Amigos do Bem;
• invite you to relevant events and opportunities.

We will process your personal information for the purposes listed in this section on the basis of our legitimate interest in carrying out marketing activities that may be of interest to you.

8. Sharing and Disclosure

Amigos do Bem does not disclose to third parties any information provided by the USER through the website and/or platform, except:

• Where Amigos do Bem is required to disclose or share the USER's personal data in order to comply with any legal obligation (for example, by virtue of a court order, or for the purpose of preventing fraud or other crimes, as well as in response to a request for information submitted by a competent authority, if we believe that the disclosure is in accordance with, or required by, applicable laws, regulations or procedural rules);
• To protect the rights, property and/or safety of the platform, of the website's USERS or of any third parties. This includes exchanging information with other companies and organizations for fraud protection purposes;
• Amigos do Bem may share information with the public if you submit content to an open forum, such as blog comments, social media posts or other features available through our services and visible to the public;
• We may share information with third parties with whom you choose to let us share information, for example, in the case of other apps or websites that integrate with our platform;
• We may share information with partners who need to access the information in order to carry out work on our behalf and, as described in item 1.1, we are the data controllers;
• If, upon notification, you agree to its being shared; in aggregated and/or anonymous form that cannot be used to identify you. For analytics, used in third-party libraries. The terms of use and privacy policy of these libraries can be found at the following link: Google Play Services Policies.

9. Responsibilities

9.1. User responsibilities

The USER is solely responsible:

• for any and all acts or omissions performed by them through their access to the Internet, the Amigos do Bem Website and/or Platform;
• for any and all content uploaded, sent and/or transmitted by them to the Website and/or Platform;
• for remedying any and all damages, direct or indirect (including those arising from the violation of any rights of other USERS or of third parties, including intellectual property, confidentiality and personality rights), caused to Amigos do Bem, to any other USER or to any third party, including as a result of non-compliance with the provisions of this Privacy Policy or of any act performed through their access to the Internet, the Website and/or Platform.

9.2. Limitations of liability of Amigos do Bem

Under no circumstances shall Amigos do Bem be liable:

• for any act or omission performed and/or damage caused by the USER arising from access to the Website and/or Platform;
• for the misuse of the Website and/or Platform by any USER or third parties and/or for the content uploaded, sent and/or transmitted to the Website and/or Platform by USERS;
• for system failures, technical impossibilities or unavailability;
• for the installation on the equipment of the USER or of third parties of viruses, trojans, malware, worms, bots, backdoors, spyware, rootkits or any other devices created as a result of the USER's browsing of the Internet.

9.3.

The USER acknowledges that any and all content sent and/or transmitted to the Website and/or Platform by any USER and/or third parties does not in any way represent the opinion or views of Amigos do Bem.

9.4.

Should the USER breach any provision of this Privacy Policy or any legal provision, without prejudice to other measures, Amigos do Bem may, directly or through third parties, at any time, at its sole discretion, without the need for any prior or subsequent notice or notification to any USER or to any third party, by any means or in any form, and without prejudice to initiating the appropriate legal measures, suspend or limit access to the Website and/or Platform, terminate the access of any USER and/or take any other measures it deems necessary to enforce this Privacy Policy and ensure the proper functioning of the Website and/or platform, at any time.

10. User Rights

You may request to:

1. Receive confirmation as to whether or not non-personal information about you is being processed, and access your stored personal information, together with supplementary information.
2. Receive a copy of the personal information that you have voluntarily and directly provided to us, in a structured, commonly used and machine-readable format.
3. Request the rectification of your personal information under our control.
4. Request the deletion of your personal information.
5. Object to the processing of your personal information by us.
6. Request the restriction of the processing of your personal information by us.
7. File a complaint with the ANPD.

11. Data Protection Officer (DPO)

If you wish to contact our Data Protection Office ("DPO"), please use the following contact details:

12. Filing Complaints

You have the right to file complaints about our activities by lodging a complaint with our Data Protection Department, by sending an email to [email protected], or with a supervisory authority under the General Data Protection Law (LGPD).

13. Other Important Information

13.1. Intellectual property

The following belong to Amigos do Bem: (i) any and all software, applications or features employed by Amigos do Bem in connection with the Website and/or Platform accessed by USERS; (ii) the visual identity of the Website and/or Platform (including the graphic and visual design of any of its pages); (iii) the corporate name, trademark, domain name, slogan or advertising expression, or any distinctive sign owned by it and included on the Website; and (iv) any and all content created and produced by Amigos do Bem, directly or through third parties, which may not be used by USERS by any means or in any form.

Where the Websites and/or Platform allow Content to be sent and/or transmitted by the USER, the USER grants Amigos do Bem a free, non-exclusive, irrevocable and irreversible authorization to use any and all economic intellectual property rights (including copyright and related rights) over any Content sent and/or transmitted by the USER to the Website and/or Platform, by any means or in any form, at its sole discretion, without any restriction or limitation of any kind. The USER represents and warrants that the Content does not infringe the rights of third parties and that they have obtained all authorizations that may be necessary to enable its use by Amigos do Bem.

13.2. Security

We are continuously implementing and updating administrative, technical and physical security measures to help protect your information against unauthorized access, loss, destruction or alteration. The safeguards we use to protect your information include firewalls, data encryption and information access controls. If you know or have reason to believe that Amigos do Bem credentials have been lost, stolen, misappropriated or compromised, or in the event of actual or suspected unauthorized use of your data, please contact us by following the instructions in the Contact Us section.

13.3. Storage and international data transfer

Personal data held by Amigos do Bem may be transferred to and stored in countries other than Brazil, including countries of the European Economic Area ("EEA"). These countries may not have the same data protection laws as those in force in Brazil. When we transfer your personal information to other countries, we protect that information as described in this Privacy Policy or as disclosed at the time you provide such data (for example, through a specific privacy notice).

13.4. Tolerance

Tolerance of any non-compliance with any of the provisions of this Privacy Policy by any USER shall not constitute a waiver of the right to demand performance of the obligation, nor a pardon, nor an amendment of what is provided herein.

13.4.1. Minors and adolescents

We understand the importance of protecting children's privacy, especially in an online environment. The Website was not designed for or directed at children. Under no circumstances should we allow minors to use our services without the prior consent or authorization of a parent or legal guardian. We do not knowingly collect Personal Information from minors. If a parent or guardian becomes aware that their child has provided us with Personal Information without their consent, he or she should contact us by email at [email protected].

13.5. Changes to the Privacy Policy

Amigos do Bem reserves the right to modify this Privacy Policy at any time in accordance with this provision. We therefore recommend that you visit the Privacy Policy periodically so that you are aware of any changes. If we make changes to this Privacy Policy, we will publish them at www.amigosdobem.org/politica-de-privacidade/ and update the "Last Updated" date at the beginning of this Privacy Policy.

13.6. Governing law and jurisdiction

This Privacy Policy is governed by Brazilian law. Any disputes or controversies arising from any acts performed in connection with the use of the Websites and/or Apps by USERS, including with respect to non-compliance with this Privacy Policy or the violation of the rights of Amigos do Bem, of other USERS and/or of third parties, including intellectual property, confidentiality and personality rights, shall be settled in the courts of the Judicial District of the Capital of the State of São Paulo, Brazil.

14. Contact Us

If you have any questions or complaints about this Privacy Policy, or about Amigos do Bem's information handling practices, please contact us: