Privacy Policy – Sojitz of Brazil

SOJITZ DO BRASIL S.A. (“Sojitz,” “we,” “us,” and “our”) is committed to protecting the privacy of our customers, employees, and partners, as well as ensuring that all Personal Data processed by Sojitz is handled in accordance with the legal standards of protection and security required by Data Protection Laws.

This Privacy Policy Statement aims to inform users of our Website, https://www.sojitz.com.br, about the types of information we collect from you and how that information will be used and protected. Please read this Privacy Policy carefully so you understand your rights regarding your personal information. This Privacy Policy governs only your activities on our Website and does not apply to offline activities or activities unrelated to the Website.

Any capitalized terms in this Statement shall have the meaning assigned to them under the General Data Protection Law (Federal Law No. 13,709/2018, “LGPD”). Personal Data refers to information related to an identified or identifiable natural person, such as name, email address, or phone number.

Questions related to this Statement or requests for additional information should be directed to our Data Protection Officer (“DPO”). The DPO is the individual appointed by Sojitz who serves as the communication channel between Sojitz, the Data Subjects, and the National Data Protection Authority (“ANPD”), being responsible for advising and informing Sojitz on matters related to data protection.

Sojitz’s DPO is the Personal Data Protection Management Committee (Committee), and can be contacted via email at [email protected].

How We Process Your Personal Data

Below we outline the categories of Data Subjects about whom we collect and process Personal Data, along with a description of the types of Personal Data we may process:

Website Users

We may request that you provide Personal Data at certain points on our Website, such as your name, email address, and other information. The Personal Data you are required to provide and the reasons for requesting it will be clarified at the time we ask for your Personal Data. For example, we may ask you to provide your contact details when you make inquiries about specific products and/or send us questions. We will then use the information we collect to respond to your inquiries or requests.

We also collect any information you choose to provide in your communications with us. This information may be used to facilitate activities in the course of our business. We may combine this information with other Personal Data we collect.

Automatically Collected Information About Website Users and Cookies

In addition to the information you provide, we may automatically collect certain information from your device. In some countries, including Brazil, this information may be considered Personal Data under applicable Data Protection Laws. Specifically, the information we automatically collect may include domain names, your IP address, device type, unique device identifiers, broad geographic location (e.g., country or city-level location), along with usage statistics (e.g., types of web browsers and operating systems used) and browsing history (e.g., how your device interacted with our website, including pages accessed and links clicked). The collection of this information enables us to better understand visitors who come to our website, where they come from, and what content on our site interests them. We use this information for internal analysis purposes and to improve the quality and relevance of our website for visitors.

A cookie is a piece of information that a website stores on a user’s computer, and that the user’s browser provides to the website each time the user submits a request to the website via the browser. We may collect your Personal Data (including the Personal Data mentioned above) using cookies and similar tracking technologies. We use authentication cookies to identify you when you visit our website; status cookies to help us determine if you are logged into our website; personalization cookies to store information about your preferences; security cookies as part of the security measures used to protect data owners’ accounts, including preventing fraudulent use of login credentials and protecting our website and services generally; advertising cookies to help us display advertisements that will be relevant to you; analytics cookies to help us analyze the usage and performance of our website and services; and consent cookies to store your preferences regarding the use of cookies generally.

Job Applicants

We may collect Personal Data (including your CV) if you provide it through the “Contact Us/Careers” page on the Website, through your online recruitment account (“Account”) on our Website. Your account requires a valid email address as a login, along with other personal information such as your name and professional experience. Your information may be used by Sojitz for recruitment purposes.

You may also provide details of references. Please note that you are responsible for forwarding this Privacy Statement to your references and obtaining their consent, as well as ensuring that your references are aware that their Personal Data will be provided to and used by Sojitz for reference purposes.

Your information may also be used by Sojitz to notify you about current job openings that match your qualifications and/or preferences if you register on our Website and opt to receive such notifications. You may unsubscribe from job notifications if you wish by changing the notification options in your Account.

In general, we will use the Personal Data we collect from you only for the purposes described in this Privacy Statement or for the purposes explained to you at the time your Personal Data is collected. We consider the personal information we collect to be confidential and will use it only as necessary to respond to your request and as discussed herein. We will not disclose or share your personal information with third parties without your permission, except (i) when required to provide or disclose information by court order, judicial authority, or other governmental authority, (ii) as permitted by law to protect the rights or property of SOJITZ DO BRASIL S.A., our affiliates, customers, the Website, or other users, (iii) as required for the operation of the Website and handling of inquiries. However, we may also use your personal data for other purposes that are not incompatible with the purposes disclosed to you (such as statistical purposes) if and where this is permitted by applicable Data Protection Laws.

Data collection location: Work With Us – Sojitz of Brazil

Legal Basis for Processing Personal Data

If you are accessing our website from Brazil, our legal basis for collecting and using the Personal Data described above will depend on the Personal Data in question and the specific context in which we collect it.

Typically, we will collect your Personal Data only when we have your consent to do so, when we need the Personal Data to perform a contract with you, or where the processing is in our legitimate interests and does not override the User’s fundamental rights and freedoms. In some cases, we may also have a legal obligation to process your Personal Data or otherwise need the Personal Data to protect your vital interests or those of another person.

If we ask you to provide Personal Data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and inform you whether providing your Personal Data is mandatory or not (as well as the possible consequences if you do not provide your Personal Data). Similarly, if we collect and use your Personal Data based on our legitimate interests (or those of a third party), we will make it clear to you at the relevant time what those legitimate interests are.

If you have any questions or need more information about the legal basis on which we collect and use your Personal Data, please contact us through our DPO.

Protection of Personal Information

We have implemented certain electronic safeguards and adopted technical and administrative security measures to protect personal information in our possession against unauthorized access and accidental or unlawful situations of destruction, loss, alteration, communication, or disclosure. The measures we have taken are designed to provide a level of security appropriate to the risk of processing your Personal Data.

However, Users should be aware that no internet transmission is entirely secure or infallible, and we cannot guarantee that information transmitted to or under our care will be absolutely secure against unauthorized third-party access. We cannot guarantee the security of your data during transmission to our site; any transmission is at your own risk.

Sojitz is not responsible for any damages arising solely from the fault of third parties, such as in the event of a hacker or cracker attack, or when the Data Subject is solely responsible, such as in cases where the Data Subject transfers their data to third parties or otherwise exposes their Personal Data to third parties.

Rights of Data Subjects

Data Subjects have the following rights regarding their data processed by Sojitz, upon request:

The right to confirm the processing of their Personal Data by Sojitz and to verify whether such processing is lawful;
The right to request access to their Personal Data under Sojitz’s control;
The right to request that Sojitz rectify their Personal Data if it is incomplete, inaccurate, or outdated;
The right to request that Sojitz anonymize, block, or delete any unnecessary or excessive Personal Data, as well as any Personal Data processed in non-compliance with the provisions of Brazilian Data Protection Laws;
The right to request the portability of their Personal Data to another service or product provider, subject to commercial and industrial confidentiality and in accordance with ANPD regulations;
The right to withdraw their consent at any time. The withdrawal of consent will not affect the lawfulness of processing carried out before its withdrawal, nor the processing of their Personal Data conducted on other legal bases;
The right to request the deletion of their Personal Data, within the scope and technical limits of the activities, when they revoke their consent and no other legal basis for processing exists;
The right to object to processing carried out based on situations where consent is not required, if they believe there has been a breach of the LGPD provisions;
The right to request a review of decisions made solely based on the automated processing of Personal Data that affect their interests, including decisions intended to define their personal profile or aspects of their personality;
The right to approach Sojitz to submit petitions and complaints regarding the processing of their Personal Data. We encourage Data Subjects to contact Sojitz first to seek resolution of any complaint. Data Subjects also have the right to file a complaint against the processing of their data with the competent supervisory authority.

You may exercise any of the above rights free of charge by making an express request to Sojitz through our DPO. Requests must be made in writing and preferably via electronic means. Requests may also be sent by mail, clearly marked for the attention of the DPO, to Avenida Paulista, 1842, Torre Norte, 21st floor, rooms 215 to 217 (partial), São Paulo, SP, ZIP Code 01310-200, Brazil. Requests must be clearly marked for the attention of the DPO to ensure proper forwarding.

In some cases, you may partially manage your requests, for example, by setting your cookie preferences.

Access from Outside Brazil

If you are visiting our Website from a location outside of Brazil, your connection will be made through and to servers located in Brazil. All information you provide during your visit will be processed and maintained on our web server and other internal systems located within Brazil. The level of protection for Personal Data provided by other countries may differ from that offered by Brazil.

Transfers of Personal Data

Sojitz does not sell or transfer your personal data to third parties for marketing purposes

To conduct our business, including marketing activities, we may need to share your Personal Data with other Sojitz Group companies and/or third-party service providers who process data on our behalf. When we do so, we take steps to ensure that your Personal Data is protected, such as imposing contractual restrictions on the recipient’s ability to process your Personal Data and contractually requiring them to implement security measures to protect it.

Since the Sojitz Group operates globally, Sojitz may transfer your Personal Data to other countries. However, while under our control, Sojitz always seeks to ensure that your Personal Data receives the same level of protection as it would in Brazil, including ensuring that it is kept secure and used only in accordance with our instructions and for the agreed purpose(s). Sojitz has established Binding Corporate Rules (“BCRs”) to internally regulate data sharing within the Sojitz Group, including a description of Data Subjects’ rights and the protections and safeguards that will be applied to such sharing of Personal Data.

Hyperlinks

Our Website may contain links to content or other functionality provided by third parties that are outside our control and not covered by our Privacy Statement. If you access other websites using links or use embedded functionality provided by third parties, the operators of those sites may collect information from or about you, which will be used by them according to their own privacy statements or policies, which may differ from ours. We encourage you to read the privacy information provided by the operators of those websites. We do not accept any responsibility or liability for those policies.

Changes to this Privacy Policy

This version of the Privacy Statement was last updated in December 2020.

We reserve the right, at our sole discretion, to modify, alter, or otherwise update this Privacy Policy at any time, particularly to adapt it to new regulations under Data Protection Laws. We will notify you of significant changes to this Privacy Statement by posting the revised Statement on our Website along with the date it was revised. By continuing to use our website after such changes, you acknowledge and agree that you have read, understood, and accepted the changes.

Any revised Privacy Statement will apply only to information collected after the revised Privacy Statement becomes effective and not to information collected under previous Privacy Policies.

****

Contact Us

We are committed to the protection of personal data, as described in the General Data Protection Law (LGPD).

Learn more about the Website Terms of Use.

If you wish to contact us regarding this policy, our Website, or to learn more about these Terms and Conditions, please contact our DPO via email at [email protected].