CONSENT FORM FOR PROCESSING PERSONAL DATA
GENERAL LAW FOR PROTECTION OF PERSONAL DATA – LGPD
By accepting our terms, you, referred to as the HOLDER, are authorizing FLORESCÊNCIA REPRESENTAÇÃO E COMÉRCIO DE PRODUTOS NATURAIS LTDA, a limited liability company registered with the CNPJ/MF under no. 52.080.662/0001-12, established at Avenida Agamenon Magalhães, no. 1116A, Maurício de Nassau, Caruaru/PE, CEP 55.014-000, herein referred to as the CONTROLLER, to dispose of your personal data and sensitive personal data, in accordance with articles 7 and 11 of Law no. 13.709/2018, as provided in this term: CLAUSE ONE – Personal Data The data subject authorizes the Controller to process, that is, to use, the following personal data for the purposes listed in clause two: 1) Full name; 2) Marital status; 3) Nationality; 4) Date of birth; 5) Profession; 6) Identity card number or other identification document; 7) Individual Taxpayer Registry Number – CPF; 8) Full address; 9) Cell phone number; and 10) E-mail CLAUSE TWO – Purpose of Data Processing The Data Subject authorizes the Controller to use the personal data and sensitive personal data listed in this term for the following purposes: 1. To allow the Controller to identify and contact the data subject, exclusively for services provided; 2. For compliance, by the Controller, with obligations imposed by regulatory bodies; 3. At the request of the data subject; 4. To protect the life or physical safety of the data subject; 5. To protect health, exclusively, in a procedure carried out by health professionals, health services or health authorities; 6. When necessary to meet the legitimate interests of the controller or third parties, except in the case of prevailing fundamental rights and freedoms of the data subject that require the protection of personal data; and 7. In claims for rights in the Judiciary or outside it in order to guarantee access to health. First Paragraph: If it is necessary to share data with third parties that have not been listed in this term or any subsequent contractual change, a new consent form will be adjusted for this purpose (§ 6° of article 8° and § 2° of article 9° of Law No. 13.709/2018). Paragraph Two: In the event of a change in purpose that is in disagreement with the original consent, the Controller must notify the Data Subject, who may revoke the consent, as provided for in clause six. CLAUSE THREE – Data Sharing The Controller is authorized to share the Data Subject’s personal data with other data processing agents, if necessary for the purposes listed in this instrument, provided that the principles of good faith, purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability and reporting are respected. CLAUSE FOUR – Responsibility for Data Security The Controller is responsible for maintaining sufficient technical and administrative security measures to protect the Data Subject’s personal data and the National Data Protection Authority (ANPD), notifying the Data Subject in the event of a security incident that may result in significant risk or damage, in accordance with article 48 of Law No. 13,709/2020. CLAUSE FIVE – Termination of Data Processing The Controller is permitted to maintain and use the Data Subject’s personal data throughout the period of the associative relationship established for the purposes related in this term and even after the termination of the associative relationship in order to comply with legal obligations or those imposed by regulatory bodies, in accordance with article 16 of Law No. 3,709/2018. CLAUSE SIX – Right to Revoke Consent The Data Subject may revoke his/her consent at any time by email or written letter, in accordance with article 8, § 5, of Law No. 13,709/2020. In addition, the Data Subject is aware that the Controller may continue to use the data for the following purposes: 1. To comply with obligations arising from the legislation of the autonomous agencies that have constitutional powers; 2. For compliance, by the Controller, with obligations imposed by supervisory bodies; 3. For the regular exercise of rights in judicial, administrative or arbitration proceedings; 4. For the protection of the life or physical safety of the data subject or third parties; 5. For the protection of health, exclusively, in procedures carried out by health professionals, health services or health authorities; 6. When necessary to meet the legitimate interests of the controller or third parties, except in the case where fundamental rights and freedoms of the data subject prevail, which require the protection of personal data. CLAUSE SEVEN – Retention Period of Collected Data The data subject is aware that the Controller must keep his/her data for the period necessary for the associative activities carried out. CLAUSE EIGHT – Data Leakage or Unauthorized Access – Penalties The parties may reach an agreement regarding any damages caused in the event of a leak of personal data or unauthorized access, and if no agreement is reached, the Controller is aware that it will be subject to the penalties provided for in article 52 of Law No. 13,709/2018.