Thus, this Privacy Notice describes how we can treat personal data, whether due to the activities carried out by the Concessionaire, as a result of access to our website and/or to our facilities. Whatever the hypothesis, the privacy and protection of personal data will be safeguarded in the course of any data processing carried out.
Data holders must read this document carefully, in order to ensure that they are fully aware of the way in which personal data is processed by the Concessionaire.
The purpose of this Privacy Notice is to bring maximum transparency and ensure that the data subject can clearly understand why, how, when and by whom their personal data is processed by this Concessionaire.
FINALIDAD DEL TRATAMIENTO DE DATOS
PERSONALES
The processing of personal data by the Concessionaire occurs only for legitimate, specific and determined purposes, which may occur in the following cases:
- Identification and access to the Concessionaire's websites;
- Identification and access to the Concessionaire's premises;
- Enable boarding and disembarking in a safe and organized manner;
- Perform any collection of the boarding fee;
- Perform services and carry out the necessary handling of financial issues, payments and collections;
- Perform the service when the data subject contacts us, either through the service channels, ombudsman or any other possible means of communication;
- Evaluate the visitation of the Concessionaire's website, analyzing demographic data and better understanding the profile of visitors;
- Control the entry of people to the Concessionaire's premises;
- Assess and make decisions involving the possibility of fraud, crimes and illegal activities on the Concessionaire's premises;
- Assess, investigate and make decisions regarding the complaints made through the Concessionaire's complaints channel, request additional information, when necessary or even allow the data subject to follow the progress of their complaints and requests;
- Register participation in the Concessionaire's selection processes;
- Carry out the selection process of candidates and evaluate their performance according to the established parameters;
- Evaluate the profile of the data subject in the event of a possible application for a job at the Concessionaire and maintenance of their professional and academic curriculum for possible future opportunities;
- Carry out the delivery, shipment and/or receipt of cargo, enabling monitoring through tracking and compliance with legal and regulatory obligations for the import and export of cargo;
- Comply with a legal or regulatory obligation and submit any necessary data to authorities or representatives capable of supervising compliance with any obligation;
- Use personal data for any regular exercise of rights in administrative, judicial or arbitration proceedings;
- Service solutions performed by the Customer Service Center and Ombudsman or the Cargo Service Center (CAC) of the Concessionaire;
- Register occurrences at the aerodrome;
- Registration and monitoring of medical care within the Concessionaire's premises;
- Ensure security on the Concessionaire's premises, as well as security on its websites, applications and internal systems;
- Ensure proper monitoring on the Concessionaire's premises through closed circuit surveillance cameras; It is
- Improvements, adjustments or implementations on websites, applications and internal systems of the Concessionaire.
THE CUSTODY PERIOD
The Concessionaire will maintain the processing of personal data (including storage, which is a kind of data processing) for the period necessary to achieve the legitimate purposes for which the treatment is intended, and these purposes may involve, for example, the fulfillment of an obligation, legal, the fulfillment of legitimate interests of the Concessionaire, the regular exercise of rights in an administrative or judicial process, among others.
DATA SECURITY
The
Concessionaire adopts appropriate, proportionate and reasonable information security measures, in order to guarantee the protection of personal data eventually processed by it.
The
Concessionaire employs strong controls so that any suppliers, partners or third parties, who need to process personal data, guarantee the adoption of appropriate, proportionate and reasonable information security measures, in order to guarantee the protection of said personal data.
THIRD PARTY WEBSITES AND SERVICES
Services
On the premises of the Concessionaire there are several products and services offered by partner companies, such as Wi-Fi, Hotels, VIP Rooms, Food Services, Shops, Banks, Exchange Bureaus, Luggage Storage, Luggage Protection, among others.
The terms of this Privacy Notice do not apply to such services and products. Thus, if the data subject wants to use or acquire products or services of this kind, he must check the Terms and Conditions of Use and Privacy Policy specific to the product or service he wants to acquire or use.
Websites
The Concessionaire's website has links to other websites, which may contain useful information/tools for the data subject. This Privacy Notice does not apply to third party websites. If the data subject visits another website from the website www.gru.com.br, he should be aware that he will be subject to the conditions of treatment of third-party websites. Thus, the Concessionaire is not responsible for the Privacy Notice or content of third-party websites.
COOKIES AND CONCESSIONAIRE WEBSITES
The concessionaire may process personal data arising from activities involving advertisements and online advertising. Information related to this process includes the IP (Internet Protocol) address, ISP (Internet Service Provider), the browser used when visiting our website (such as Internet Explorer or Firefox), the time of the respective visit and which pages were visited within our website.
The Concessionaire may use cookies to store information, among them, the personal preferences of the data holders when visiting its website.
In addition, the Concessionaire uses third-party advertising on its website, and some of these advertisements may use technologies, such as cookies and/or web beacons when they replicate the website content, which will cause the aforementioned advertisements to also receive personal data. such as IP address, ISP, browser, among others.
This function is generally used for geotargeting, where advertising from São Paulo is shown only to readers from São Paulo, for example, or to present advertising targeted to a user profile, for example, showing advertising for a restaurant to a user who visits cooking websites regularly.
The data subject has the power to disable some cookies in the options provided by his browser or by making changes to the Antivirus program tools. In addition, in some situations, the data subject can contact the Concessionaire through the contact of its data controller, informed in this document, and request the disabling of the cookies that are under its control. It is worth noting that this procedure may change the way the user interacts with the website.
SHARING PERSONAL DATA
For the performance of some of the treatment purposes to which the personal data are related, the Concessionaire may share the personal information provided with third parties, whether they are outsourced service providers, partners, authorities, government agencies, among others.
Below are some of the situations in which the sharing of personal data may occur:
- Personal data is shared with partners that have tools installed on the Concessionaire's website, for the purpose of analyzing website visitation and dealings involving targeted online advertising;
- Personal data are shared with competent authorities, for compliance with inspections involving compliance with legal or regulatory obligations;
- Data and images from the closed circuit of internal cameras are shared with public authorities such as the Federal Police, Federal Revenue Service, Federal Highway Police, Civil Police, Military Police, Anvisa, among others.
- Personal data is shared with partner companies, when necessary for the use of services offered by the
Concessionaire;
- Personal data is shared, when necessary, with a customer service provider;
- Personal data are shared with legal service providers, whenever necessary for the regular exercise of the Concessionaire's rights in administrative, arbitration or judicial proceedings, as well as when necessary to deal with advisory demands or contractual negotiations;
- Personal data is shared with financial institutions and service providers for sending and receiving documents and communication, when necessary;
- Personal data is shared with cloud hosting service providers; It is
- Personal data is shared with a provider of information technology support services, for adjustments, implements and development in our systems, servers and websites.
CONTACT AND SERVICE TO THE RIGHTS OF THE DATA HOLDERS
With regard to the processing of personal data, the data subject may contact the
Concessionaire whenever he deems it necessary through the channels mentioned below and, in particular, in the following situations:
- If you understand that your data has been used in a manner incompatible with this Privacy Notice or contrary to data protection regulations;
- If you want to exercise the rights provided for in the LGPD (General Data Protection Law), law No. 13,709, of August 14, 2018. especially those provided for in art. 18 of this law, without prejudice to the others, including: (i) confirmation of the existence of data processing; (ii) access to data; (iii) correction of incomplete, inaccurate or outdated data; (iv) anonymization, blocking or deletion of data that is unnecessary, excessive or treated in violation of the LGPD; (v) data portability to another service or product provider, upon express request; (vi) deletion of data processed with your consent; (vii) revocation of previously provided consent; and (viii) information from public and private entities with which the controller carried out shared use of data; It is
- If you have questions or suggestions related to the provisions of this Privacy Notice or any other topic involving privacy and protection of personal data.
To contact the
Concessionaire in this regard, the data subject should consider the following channel:
Data supervisor: Andressa Rodrigues Gimenes
E-mail:
dpo@gru.com.br
LEGISLATION AND JURISDICTION OF ELECTION
This PRIVACY NOTICE will be interpreted by the legislation of the Federative Republic of Brazil, regardless of conflicts with state, municipal or other countries laws or regulations.
The Forum of Guarulhos/SP is elected to resolve any doubts arising from this instrument.