Appendix 3 - Brazil Terms
Your Rights if your Personal Data is covered by the Brazilian Data Protection Act
RedotPay commits to processing your Personal Data under LGPD in a manner that respects your privacy and is consistent with applicable privacy and data protection laws and regulations, including the Brazilian Data Protection Act (“Law No. 13,709/2018” or “LGPD”).
1. Data Subjects’ Rights
Under the LGPD, you are afforded specific rights concerning your Personal Data. These rights include, among others:
To obtain clear and detailed information about the processing of your Personal Data, including sharing situations;
To request access to your Personal Data and/or confirmation of the existence of the processing;
To request correction of any Personal Data that is inaccurate, incomplete, or out of date;
To oppose processing activities, request anonymization and the deletion of Personal Data that is unnecessary, excessive or that has been processed in violation of the LGPD;
To request the portability of your Personal Data;
To revoke consent at any time, if RedotPay processes your Personal Data based on this consent, and request its deletion;
To request information about the public and private entities with which the controller has shared the Personal Data;
To request information about the possibility of not granting consent and the consequences of such refusal; and
To request the review of automated decisions that may impact your interests;
To file a petition regarding your Personal Data with the Agência Nacional de Proteção de Dados (“ANPD”).
You may exercise these rights by reaching out through the contact channel indicated in this Privacy Policy (see item C.3). We will make every reasonable effort to address your request as promptly as possible, in accordance with the time frames set by the LGPD, and we will keep you updated on the status of the request.
To protect your security and ensure appropriate processing of Personal Data, we may need to verify your identity before responding within the applicable time limits. Please note that if sufficient proof of your authority as the data subject is not provided, the request may be refused.
2. International Data Transfer
Personal Data may be transferred abroad in the following cases:
To countries that provide an adequate degree of protection for Personal Data, as shall be determined by the ANPD; or
Under specific contractual clauses for a given transfer, standard contractual clauses or global corporate rules, all to be approved by the ANPD.
Upon request your request, RedotPay will provide the text of the clauses governing International Transfers of Personal Data, as well as any applicable binding corporate rules, within 15 (fifteen) days from the date of the request. In addition, RedotPay will publish on its website a document in Portuguese explaining the Data Transfer and containing the following information, such as the form, duration and specific purpose of the international transfer and the country of destination of the transferred data.
3. Data Protection Officer
We designate a Data Protection Officer (“DPO”) to act as the communication channel with data subjects and the ANPD. The DPO accepts complaints and communications, receives ANPD notices, guides staff and contractors on data protection practices, and performs other duties defined by the controller or complementary norms. You may contact our DPO at DPO@redotpay.com.