Privacy Policy

EXTERNAL PRIVACY POLICY

Last updated: July 8, 2022

1. Objectives

2. Privacy Statement

3. Third Party Services

4. Data collected and purposes

5. Who we share your data with

6. Where we store, process and transfer your data

7. How long do we store your data?

8. Your rights as a Data Subject

9. How BIOTROP protects your Information

10. Access and correction of information

11. Modifications to this Policy

12. Complementary Policies

13. How to contact BIOTROP about this Privacy Policy

14. References

1. Objectives

This Privacy Policy deals with the personal data of BIOTROP users, partners, customers and suppliers. The purpose of this policy is to:

Inform you which of your personal data we collect, the reasons for the respective collections and with whom we eventually share them;

Clarify how we use the personal data shared by you through our web platform;

Inform you of your respective rights in relation to your personal data collected and processed by us, and how we protect your privacy.

2. BIOTROP Privacy Statement

The following provisions apply to all our services:

BIOTROP does not provide for sale, sharing or concession any information made available to it by individuals or entities subject to this Privacy Policy, except as provided in this document.

If you have any questions about how BIOTROP uses the information provided to us and this issue is not covered by this Privacy Policy, please contact us via email at dpo@biotrop.com.br before providing any information through other channels.

Furthermore, if you do not agree with the terms described here, we ask that you stop accessing and/or using our website and inform us via the email address indicated above of the reason for your disagreement.

3. Third party services

This Privacy Policy applies only to information provided to BIOTROP. Our services may occasionally incorporate services provided by third parties, and therefore, the information provided to us may be shared with them. However, if a customer has the option to choose a product/service offered by a third party, or to incorporate it into BIOTROP's services on their own, the customer will be subject exclusively to the third party's Privacy Policies for that product/service, which may contain provisions different from those found in this document.

4. Data collected and purposes

Data you provide to us:

Through the Contract tab, “Contact Us”, you provide us with: full name, telephone number, email address and city and state of address.

When showing interest in joining our team, in the “Work with Us” tab, you provide us with: full name, email, telephone number and address, by registering on the Candidate Portal, as well as any other data that you consider relevant to provide us through your CV.

When you access the Ombudsman tab, despite the option of anonymous reporting being available, you can, if you wish, identify yourself with data such as: name, email, telephone number, among others that you consider relevant.

When interacting with BIOTROP to contract services, purchase our products, and/or enter into commercial partnerships, personal data may be required, including: full name, address, ID, CPF and email.

Data we collect about you:

We may collect information about your computer or device, including your IP address, location, operating system, browser information, information about your visit, your browsing history and how you use our website. This type of data is collected by cookies and related technologies. When you first access our website from certain jurisdictions, including the Brazilian jurisdiction, you will receive a message advising you that cookies and similar technologies are in use. By clicking “Accept” you indicate that you understand and agree to the use of these technologies.

General Provisions:

You are fully responsible for the veracity of the Data you provide to us for the purposes described here.

BIOTROP is not obliged to process or treat any of your Data if there are reasons to believe that such processing may impute to us any violation of any applicable law, or if you are using our services, products and website for any illegal, illicit or immoral purposes.

The database formed through the collection of Data is owned and under the responsibility of BIOTROP, and its use, access and sharing, when necessary, will be done within the limits and purposes of the business described in this Policy.

5. Who we share your data with

BIOTROP is authorized to share your personal data with other data processing agents, if necessary for the purposes listed in this term, observing the principles and guarantees established by Law No. 13,709/18, under the terms of art. 7, §5 of said standard.

BIOTROP uses reliable third-party services and technologies that follow acceptable security standards and are subject to confidentiality and data protection obligations. Your Data will be shared with such third parties (below), always in accordance with this Policy and applicable legislation.

Cloud Storage Providers – To third party cloud service providers to host the data processed by BIOTROP. In these circumstances, your Data remains stored and processed by BIOTROP.

Government Authorities – To (i) comply with legal, judicial, administrative determinations and official letters from competent authorities, as well as to (ii) take or provoke legal, judicial and administrative measures to defend our rights provided for in this Policy, including in any judicial or administrative process. Government Authorities are understood to mean police authorities, data protection authorities, public entities and/or other government organizations.

Business Partners – To (i) perform or improve our Services; (ii) expand our business; and/or (iii) develop new businesses.

Business Procedures – In addition to the aforementioned hypotheses, we may also share your data in the event of corporate transactions, such as mergers, acquisitions and incorporations involving BIOTROP.

Non-sharing – It is important to emphasize that BIOTROP will not, under any circumstances, share your Personal Data with third parties not previously mentioned. If you receive contact from unidentified third parties, please contact our DPO through the channel indicated in this Policy and we will assist them in investigating the incident.

6. Where we store, process and transfer your data

Your Data may be transferred, stored and processed in Brazil by BIOTROP or, eventually, by our partners, in accordance with this Policy. In addition to following acceptable security and confidentiality standards, for the purposes of providing our Services, BIOTROP undertakes to store the data entrusted to us on high-security servers.

7. How long do we store your data?

All data collected by BIOTROP is stored solely to fulfill the purposes described in this Policy. Once they are no longer essential or relevant, they will be deleted from our database. However, even if you wish to exercise any right (see item “8”) or if we have achieved the purpose that motivated the collection, we may still store the information to protect your rights, comply with judicial, administrative or arbitration orders, or to comply with legal or regulatory obligations.

8. Your rights as a data subject

In some circumstances, you may contact us to exercise the rights provided for in the LGPD, in particular the following:

• Confirmation of the existence of treatment;
• Access to data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary, excessive data or data processed in non-compliance with the law;
• Portability, in accordance with the authority's regulations;
• Revocation of consent, if applicable;
• Deletion of data processed with consent, if applicable;
• Information on the possibility of refusing consent and consequences;
• Information on public and private entities with whom the data was shared;
• Right to object in the event of non-compliance with the law in cases where consent is waived.

Our goal is to respond to your requests as quickly as possible, within 15 days. The above rights may be exercised in the manner established by the LGPD, exclusively by the holder of the personal data or by their legal representative, via email to be sent to dpo@biotrop.com.br , with the following information:

a) Copy of your identity card;

b) What is the status of the legal representative and respective proof, if necessary;

c) Description of the request.

* For your security, we may need to request additional information from you to help us confirm the identity of the requester.

** If applicable, the request will be denied, and the requester will be informed of the justification (e.g. in a request for data deletion, the request will be denied in compliance with the prescriptive period of any legal action or other legal obligation to which we are subject).

9. How BIOTROP protects your Information

BIOTROP actively works to protect your privacy and your Personal data from unauthorized access, destruction, loss, alteration, communication, disclosure or any form of illegal processing or processing that does not comply with the Law.

We undertake to apply technical and organizational measures capable of protecting personal data from unauthorized access and from situations of destruction, loss, alteration, communication or dissemination of such data.

To ensure security, solutions will be adopted that take into account: appropriate techniques; application costs; the nature, scope, context and purposes of the processing; and the risks to the user's rights and freedoms.

Our platforms ensure that personal data is transmitted securely and confidentially, so that data transmission between the server and the user, and in feedback, occurs in a fully encrypted manner.

BIOTROP, however, is exempt from liability for the exclusive fault of a third party, such as in the case of an attack by hackers or crackers that subvert security systems to access user data, as well as for the exclusive fault of the user himself, such as in the case where he himself transfers his data to a third party.

BIOTROP also undertakes to notify the user within an appropriate timeframe if any type of breach of the security of their personal data occurs that may pose a high risk to their individual rights and freedoms. “Breach of personal data” means a breach of security that causes, accidentally or unlawfully, the destruction, loss, alteration, disclosure or unauthorized access to personal data transmitted, stored or subject to any other type of processing.

Finally, BIOTROP undertakes to treat the user's personal data with complete confidentiality, within the legal limits. We clarify that, internally, the Personal Data collected is accessed only by duly authorized professionals, respecting the principles of proportionality, necessity and relevance for the objectives of our business.

10. Access and Correction of Information

If you wish to access and/or update the information collected by BIOTROP, please feel free to contact our team via email: dpo@biotrop.com.br . However, we reserve the right to retain the information necessary to protect our interests, always based on the legal bases provided for in the LGPD.

11. Modifications to this Policy

BIOTROP reserves the right to modify this privacy policy at any time, without prior notice. When we make material changes to this Policy, we may provide appropriate notice according to the circumstances, by displaying a visible notice on our Platforms or by sending an email, if you are registered. Therefore, it is essential that you make sure to read any communication carefully, as well as regularly access this document.

12. Complementary Policies

By accepting this Policy, you are also subject to our Cookie Policy.

13. How to contact BIOTROP about this Privacy Policy

If you have any questions, comments, suggestions or requests regarding this Privacy Policy or the use and disclosure of personal information, please contact us by email at dpo@biotrop.com.br , so that we can respond to you in a timely manner. If you wish, you can also contact us in writing at the following address: Avenida Benedito Storani (Jardim Alves Nogueira II), nº 1425, Bloco 1, Salas 218 e 219, Santa Rosa, Vinhedo – SP, CEP 13289-014.

14. References

Law No. 13,709/18 – General Law on the Protection of Personal Data.

TOTAL BIOTECHNOLOGY INDUSTRY AND TRADE S/A

CNPJ: 07.483.401/0001-99