PRIVACY NOTICE

INTRODUCTION

Moysés & Pires Sociedade de Advogados is committed to complying with its obligations relating to the protection of Personal Data, including the duty of transparency toward all Data Subjects regarding the collection, use, and other Processing operations carried out in its capacity as Controller of such Personal Data, where applicable.

The main purpose of this Privacy Notice is to explain how the Personal Data of individuals belonging to our External Public is processed.

The rules set out in this Privacy Notice comply with Brazilian law, including, without limitation, the Brazilian General Data Protection Law.

SCOPE

This Privacy Notice applies to all individuals who access the website and/or the premises of Moysés & Pires Sociedade de Advogados, as well as to individuals who in any way represent the Clients or Business Partners of Moysés & Pires Sociedade de Advogados in the course of the business relationship maintained between the parties.

DEFINITIONS

For purposes of this Privacy Notice, the following definitions apply, whether used in the singular or plural:

“National Data Protection Authority” or “ANPD”: the government body responsible for overseeing, implementing, and enforcing compliance with the Brazilian General Data Protection Law throughout the national territory.

“Client”: any individual or legal entity that acquires services from the Firm.

“Collaborator”: any lawyer, intern, and/or employee of Moysés & Pires Sociedade de Advogados.

“Controller”: a natural or legal person, governed by public or private law, responsible for decisions regarding the processing of personal data.

“Personal Data”: information relating to an identified or identifiable natural person.

“Sensitive Personal Data”: personal data concerning racial or ethnic origin, religious belief, political opinion, membership in a trade union or in a religious, philosophical, or political organization, data concerning health or sex life, or genetic or biometric data, when linked to a natural person.

“Brazilian General Data Protection Law” or “LGPD”: Federal Law No. 13,709/2018, as amended.

“Processor”: a natural or legal person, governed by public or private law, that processes personal data on behalf of the Controller.

“Business Partner”: any supplier, service provider, or business partner of Moysés & Pires Sociedade de Advogados, whether an individual or a legal entity.

“External Public”: the Clients, Business Partners, or Users of Moysés & Pires Sociedade de Advogados.

“Data Subject”: the natural person to whom the personal data being processed relates.

“Processing”: any operation carried out with personal data, such as those relating to collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, deletion, evaluation or control of information, modification, communication, transfer, disclosure, or extraction.

“User”: any natural person who accesses the website or the premises of Moysés & Pires Sociedade de Advogados and who is not a Client, Business Partner, or Collaborator.

PERSONAL DATA COLLECTED

Certain Personal Data of individuals belonging to our External Public may be collected for purposes of accessing our website and/or our premises. In this context, the following categories of Personal Data of individuals belonging to our External Public may be processed:

  • IP addresses, browser type, access logs, dates and times of access, pages visited, and the duration of the visit to each page, when accessing our website;
  • Contact information (name, address, telephone number, and e-mail address);
  • Professional information (profession, employer, and position held);
  • Identification information, such as the Individual Taxpayer Registry Number (CPF), the General Registry Number (RG, Brazilian national ID), the National Driver’s License number (CNH), and the Bar Association of Brazil (OAB) registration number;
  • Biometric data (facial image) and information regarding access to our physical premises;
  • Images (photographs and video recordings) and voice recordings, including recordings made during meetings and through CCTV cameras.

In addition, certain Personal Data of individuals belonging to our External Public who in any way represent the Clients or Business Partners of Moysés & Pires Sociedade de Advogados may be collected in the course of the business relationship maintained between the parties, for purposes of negotiating and executing engagements or sending communications. In this context, we may process the following categories of Personal Data of individuals belonging to our External Public:

  • Contact information (name, address, telephone number, and e-mail address);
  • Professional information (profession, employer, and position held);
  • Identification information, such as the Individual Taxpayer Registry Number (CPF), the General Registry Number (RG), the National Driver’s License number (CNH), and the Bar Association of Brazil (OAB) registration number;
  • Biometric data (facial image);
  • Images (photographs and video recordings) and voice recordings, including recordings made during meetings and through CCTV cameras;
  • Financial information (bank details).

Personal Data of individuals belonging to our External Public may be collected through access to the website, in person — whether verbally or through the provision of personal documents —, through the exchange of e-mails and documents containing Personal Data, through meetings, or through publicly available information.

PURPOSES OF PROCESSING / LEGAL BASES

The Personal Data of individuals belonging to our External Public may be processed for the following purposes:

  • Management, monitoring, and security of access to the Moysés & Pires Sociedade de Advogados website;
  • Access control, identification, and security at the physical premises of Moysés & Pires Sociedade de Advogados;
  • Creation and updating of records of Clients, Business Partners, representatives, and business contacts;
  • Negotiation, formalization, execution, and management of proposals, contracts, and other instruments relating to the relationship maintained with Clients and Business Partners;
  • Provision of various legal advisory services;
  • Billing, collection, payment, and other administrative and financial matters;
  • Organization, recording, and documentation of meetings, communications, and interactions;
  • Sending institutional, administrative, or commercial communications, or communications relating to the relationship maintained with Clients and Business Partners;
  • Providing references for specialized publications;
  • Compliance with legal, regulatory, tax, and accounting obligations and/or responses to competent authorities;
  • The regular exercise of rights, including the preservation of evidence, defense of interests, and participation in judicial, administrative, or arbitration proceedings.

The legal bases applicable to each purpose may include, as the case may be, the performance of a contract or of preliminary procedures related to a contract, compliance with a legal or regulatory obligation, the regular exercise of rights, legitimate interest, and consent — particularly where consent is required for the Processing of Sensitive Personal Data.

Where the Processing of Sensitive Personal Data of individuals belonging to our External Public is based on consent, such consent may be withdrawn at any time by the relevant Data Subject, by sending a communication to the contact details set out in this Privacy Notice. If, at the time consent is withdrawn, another legal basis exists that authorizes the processing of such Sensitive Personal Data, the Data Subject will be informed of that legal basis at the time the withdrawal request is made.

RIGHTS OF DATA SUBJECTS

As Data Subjects of Personal Data processed by us, individuals belonging to our External Public have the following rights:

  • Confirmation of the existence of Processing of their Personal Data;
  • Access to their Personal Data;
  • Correction of incomplete, inaccurate, or outdated Personal Data;
  • Anonymization, blocking, or deletion of unnecessary or excessive Personal Data, or of Personal Data processed in noncompliance with the LGPD;
  • Deletion of Personal Data processed on the basis of consent, subject to the right of retention in cases authorized by the LGPD;
  • Withdrawal of consent for the processing of Personal Data, where applicable;
  • The right to refuse to give consent and to receive information about the consequences of such refusal;
  • Obtaining information about the public or private entities with which we have shared the Personal Data;
  • Requesting review of decisions made solely on the basis of automated processing of Personal Data, as well as obtaining clear and adequate information about the criteria and procedures used, where applicable.

Data Subjects may exercise their rights free of charge, by sending a communication to the contact details set out in this Privacy Notice.

STORAGE AND RETENTION OF PERSONAL DATA

The Personal Data of individuals belonging to our External Public is stored securely on our network drives, e-mail systems, work applications, and/or physical files, in accordance with applicable security standards.

The Personal Data of individuals belonging to our External Public will be retained only as permitted by the LGPD and for the period necessary to fulfill the purposes set out in this Privacy Notice, taking into account the statute-of-limitations periods applicable to the regular exercise of our rights.

SHARING OF PERSONAL DATA

As necessary to achieve the purposes for which the Personal Data of individuals belonging to our External Public was collected, and provided that the limits of such purposes and the requirements of the LGPD in this regard are observed, such Personal Data may be shared with third parties, including service providers, business partners, government bodies, and public authorities.

When we share the Personal Data of individuals belonging to our External Public with Processors, we will require that the Processing of such Personal Data take place solely in accordance with our instructions, in our capacity as Controller, with secure storage, retention only for the period determined by us, and no sharing with other organizations without our prior express authorization.

SECURITY OF PERSONAL DATA

Reasonable measures will be taken to protect the Personal Data of individuals belonging to our External Public that is processed by us, always in accordance with the LGPD and with the information security standards and guidelines published by the competent authorities.

We use information security measures that are standard for our industry and are committed to reviewing them periodically to ensure their effectiveness. We note, however, that it is not possible to guarantee the security of information transmitted over the internet or through a mobile device and, accordingly, we are not liable for any interception or interruption of communications over the internet, or for any resulting alteration or loss of Personal Data.

We will use our best efforts to ensure that the Personal Data of individuals belonging to our External Public is always complete and up to date, and that it is processed only for the purposes for which it was collected, as set out in this Privacy Notice.

END OF PROCESSING

The Personal Data of individuals belonging to our External Public will be deleted upon fulfillment of the purposes for which it was collected, subject to applicable retention periods and the rules set out in the LGPD.

USE OF ANALYTICS COOKIES

Our website uses cookies solely for statistical purposes and traffic analysis. These tools collect information about how visitors interact with the page (for example, time spent and sections visited) on an aggregated and anonymous basis. Accordingly, such data is used solely to understand the performance of our website and to improve its usability, without directly identifying or singling out any particular visitor.

EXTERNAL LINKS

Our website may contain links to external pages. We are not responsible for the content of such pages, nor for the manner in which they collect, process, or share the Personal Data of individuals belonging to our External Public. We recommend that such individuals carefully read the privacy policy of each page they visit.

CONTACT

Any questions and/or requests from Data Subjects regarding the Personal Data of individuals belonging to our External Public should be directed to privacidade@moysespires.com.br.

AMENDMENTS

This Privacy Notice may be updated to reflect changes in legislation and/or in the information regarding our Processing of the Personal Data of individuals belonging to our External Public. Any amendment to this Privacy Notice will take effect upon its publication on our website.